Rapport de ZHPDiag v1.34.05 par Nicolas Coolman, Update du 01/01/2013
Run by Marwan at 04/01/2013 23:48:12
State : Version à jour.
UAC : Deactivate by program


---\\ Web Browser
MSIE: Internet Explorer v9.0.8112.16421
GCIE: Google Chrome v23.0.1271.97 (Defaut)

---\\ Windows Product Information
~ Langage: Français
Windows 7 Home Premium Edition, 64-bit Service Pack 1 (Build 7601)
Windows Server License Manager Script : OK
~ Windows(R) 7, OEM_COA_NSLP channel
Windows ID Activation : OK
~ Windows Partial Key : P8D3J
Windows License : OK
~ Windows Remaining Initializations Number : 2
Software Protection Service (Protection logicielle) : OK
Windows Automatic Updates : OK
Windows Activation Technologies : OK

---\\ System Information
~ Processor: Intel64 Family 6 Model 42 Stepping 7, GenuineIntel
~ Operating System: 64 Bits
Boot mode: Normal (Normal boot)
Total RAM: 8173 MB (62% free)
System Restore: Activé (Enable)
System drive C: has 653 GB (70%) free of 932 GB

---\\ Logged in mode
~ Computer Name: MARWAN-PC
~ User Name: Marwan
~ All Users Names: Marwan, HomeGroupUser$, Administrateur, 
~ Unselected Option: None
Logged in as Administrator

---\\ Environnement Variables
~ System Unit : C:\
~ %AppData% : C:\Users\Marwan\AppData\Roaming\
~ %Desktop% : C:\Users\Marwan\Desktop\
~ %Favorites% : C:\Users\Marwan\Favorites\
~ %LocalAppData% : C:\Users\Marwan\AppData\Local\
~ %StartMenu% : C:\Users\Marwan\AppData\Roaming\Microsoft\Windows\Start Menu\
~ %Windir% : C:\Windows\
~ %System% : C:\Windows\System32\

---\\ DOS/Devices
C:\ Hard drive, Flash drive, Thumb drive (Free 653 Go of 932 Go)
D:\ CD-ROM drive (Free 0 Go of 0 Go)



---\\ Security Center & Tools Informations
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiSpywareOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallOverride: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoActiveDesktopChanges: Modified
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] EnableLUA: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: OK
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install] LastSuccessTime :  OK
~ Scan Security Center in 00mn 00s



---\\ Recherche particulière de fichiers génériques
[MD5.332FEAB1435662FC6C672E25BEB37BE3] - (.Microsoft Corporation - Explorateur Windows.) (.25/02/2011 - 07:19:30.) -- C:\Windows\Explorer.exe [2871808]
[MD5.94355C28C1970635A31B3FE52EB7CEBA] - (.Microsoft Corporation - Application de démarrage de Windows.) (.14/07/2009 - 02:39:52.) -- C:\Windows\System32\Wininit.exe [129024]
[MD5.5121DB613E10A46A3C5085B479026AA7] - (.Microsoft Corporation - Extensions Internet pour Win32.) (.14/11/2012 - 07:04:11.) -- C:\Windows\System32\wininet.dll [1392128]
[MD5.1151B1BAA6F350B1DB6598E0FEA7C457] - (.Microsoft Corporation - Application d’ouverture de session Windows.) (.21/11/2010 - 04:24:29.) -- C:\Windows\System32\Winlogon.exe [390656]
[MD5.067FA52BFB59A56110A12312EF9AF243] - (.Microsoft Corporation - Bibliothèque de licences.) (.21/11/2010 - 04:24:16.) -- C:\Windows\System32\sppcomapi.dll [232448]
[MD5.1C7857B62DE5994A75B054A9FD4C3825] - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) (.28/12/2011 - 04:59:24.) -- C:\Windows\system32\Drivers\AFD.sys [498688]
[MD5.02062C0B390B7729EDC9E69C680A6F3C] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) (.14/07/2009 - 02:52:21.) -- C:\Windows\system32\Drivers\atapi.sys [24128]
[MD5.B8BD2BB284668C84865658C77574381A] - (.Microsoft Corporation - CD-ROM File System Driver.) (.14/07/2009 - 00:19:47.) -- C:\Windows\system32\Drivers\Cdfs.sys [92160]
[MD5.F036CE71586E93D94DAB220D7BDF4416] - (.Microsoft Corporation - SCSI CD-ROM Driver.) (.21/11/2010 - 04:23:47.) -- C:\Windows\system32\Drivers\Cdrom.sys [147456]
[MD5.9BB2EF44EAA163B29C4A4587887A0FE4] - (.Microsoft Corporation - DFS Namespace Client Driver.) (.21/11/2010 - 04:24:32.) -- C:\Windows\system32\Drivers\DfsC.sys [102400]
[MD5.97BFED39B6B79EB12CDDBFEED51F56BB] - (.Microsoft Corporation - High Definition Audio Bus Driver.) (.21/11/2010 - 04:23:47.) -- C:\Windows\system32\Drivers\HDAudBus.sys [122368]
[MD5.FA55C73D4AFFA7EE23AC4BE53B4592D3] - (.Microsoft Corporation - Pilote de port i8042.) (.14/07/2009 - 00:19:57.) -- C:\Windows\system32\Drivers\i8042prt.sys [105472]
[MD5.AF9B39A7E7B6CAA203B3862582E9F2D0] - (.Microsoft Corporation - IP Network Address Translator.) (.14/07/2009 - 01:10:03.) -- C:\Windows\system32\Drivers\IpNat.sys [116224]
[MD5.A5D9106A73DC88564C825D317CAC68AC] - (.Microsoft Corporation - Windows NT SMB Minirdr.) (.27/04/2011 - 03:40:40.) -- C:\Windows\system32\Drivers\MRxSmb.sys [158208]
[MD5.09594D1089C523423B32A4229263F068] - (.Microsoft Corporation - MBT Transport driver.) (.21/11/2010 - 04:23:51.) -- C:\Windows\system32\Drivers\netBT.sys [261632]
[MD5.E453ACF4E7D44E5530B5D5F2B9CA8563] - (.Microsoft Corporation - Pilote du système de fichiers NT.) (.31/08/2012 - 19:19:35.) -- C:\Windows\system32\Drivers\ntfs.sys [1659760]
[MD5.0086431C29C35BE1DBC43F52CC273887] - (.Microsoft Corporation - Pilote de port parallèle.) (.14/07/2009 - 01:00:41.) -- C:\Windows\system32\Drivers\Parport.sys [97280]
[MD5.471815800AE33E6F1C32FB1B97C490CA] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) (.21/11/2010 - 04:24:33.) -- C:\Windows\system32\Drivers\Rasl2tp.sys [129536]
[MD5.548260A7B8654E024DC30BF8A7C5BAA4] - (.Microsoft Corporation - SMB Transport driver.) (.14/07/2009 - 01:09:09.) -- C:\Windows\system32\Drivers\smb.sys [93184]
[MD5.DDAD5A7AB24D8B65F8D724F5C20FD806] - (.Microsoft Corporation - TDI Translation Driver.) (.21/11/2010 - 04:24:32.) -- C:\Windows\system32\Drivers\tdx.sys [119296]
[MD5.0D08D2F3B3FF84E433346669B5E0F639] - (.Microsoft Corporation - Pilote de cliché instantané du volume.) (.21/11/2010 - 04:23:47.) -- C:\Windows\system32\Drivers\volsnap.sys [295808]
~ Scan Generic Processes in 00mn 00s



---\\ Etat des fichiers cachés (Caché/Total)
~ Mes images (My Pictures) : 2/298
~ Mes musiques (My Musics) : 1/8
~ Mes Videos (My Videos) : 1/27
~ Mes Favoris (My Favorites) : 1/76
~ Mes Documents (My Documents) : 1/58
~ Mon Bureau (My Desktop) : 1/41
~ Menu demarrer (Programs) : 1/43
~ Scan Hidden Files in 00mn 00s



---\\ Processus lancés
[MD5.7853D2AB445C10F97610B2B05FA4CF0A] - (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe   [512360] [PID.1272]
[MD5.4AFFDCAADCB1DBBFFAF06C7F82E7F6FC] - (.Apple Inc. - iTunesHelper.) -- C:\Program Files (x86)\iTunes\iTunesHelper.exe   [421776] [PID.3780]
[MD5.6DF16103C3D006450513D46D4A754C0E] - (.Intel Corporation - IAStorIcon.) -- C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe   [284440] [PID.3796]
[MD5.E21414555D5BA7B6906B22F0EC28A8BC] - (.TRENDnet - TRENDnet Wireless LAN Card Utility.) -- C:\Program Files (x86)\TRENDnet\Common\RaUI.exe   [10934784] [PID.3284]
[MD5.18116D919287B86C63A2CA5C1DF0E87A] - (.AMD - HydraDM.) -- C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM.exe   [393216] [PID.5556]
[MD5.9F66423A1FDE633CB261F34AAE68CDB8] - (.Electronic Arts - Origin.) -- C:\Program Files (x86)\Origin\Origin.exe   [3492504] [PID.6096]
[MD5.2D08AC1443FFA7FBED9A5EA5FD49AEB3] - (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe   [1242728] [PID.1300]
[MD5.5EE4A6B572263A9FB2C99298AEF86515] - (.Nicolas Coolman - ZHPDiag.) -- C:\Program Files (x86)\ZHPDiag\ZHPDiag.exe   [3817984] [PID.3012]
~ Scan Processes Running in 00mn 00s



---\\ Google Chrome, Démarrage,Recherche,Extensions (G0,G1,G2)
C:\Users\Marwan\AppData\Local\Google\Chrome\User Data\Default\Preferences
G1 - GCS: Preference [User Data\Default] None
~ Scan Google Browser in 00mn 00s



---\\ Mozilla Firefox, Plugins,Demarrage,Recherche,Extensions  (P2,M0,M1,M2,M3)
P2 - FPN: [HKLM] [@ma-config.com/HardwareDetection] - (.Cybelsoft - Plugin NPAPI Ma-Config.com # win64 # 6.5.0.3.) -- C:\Program Files\ma-config.com\x64\nphardwaredetection.dll
~ Scan Firefox Browser in 00mn 00s



---\\ Internet Explorer, Démarrage,Recherche,URLSearchHook, Phishing (R0,R1,R3,R4)
R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr
R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com
R0 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk
R3 - URLSearchHook: (no name) [64Bits] - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (.Microsoft Corporation - Navigateur Internet.) (9.00.8112.16421 (WIN7_IE9_RTM.110308-0330)) -- C:\Windows\SysWOW64\ieframe.dll
R3 - URLSearchHook: (no name) [64Bits] - {6ec85fcf-87ad-41d7-ae1f-f116f8ad4848} . (.Microsoft Corporation - Navigateur Internet.) (No version) -- (.not file.)
R4 - HKLM\SOFTWARE\Microsoft\Internet Explorer\PhishingFilter,EnabledV8 = 1
R4 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\PhishingFilter,EnabledV8 = 1
~ Scan IE Browser in 00mn 00s



---\\ Internet Explorer, Proxy Management (R5)
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll
~ Scan Proxy management in 00mn 00s



---\\ Analyse des lignes F0, F1, F2, F3 - IniFiles, Autoloading programs
F2 - REG:system.ini: USERINIT=C:\Windows\system32\userinit.exe,
F2 - REG:system.ini: Shell=C:\Windows\explorer.exe
F2 - REG:system.ini: VMApplet=C:\Windows\System32\SystemPropertiesPerformance.exe
~ Scan Keys in 00mn 00s



---\\ Redirection du fichier Hosts (O1)
~ Le fichier hosts est sain (The hosts file is clean).
~ Scan Hosts File in 00mn 00s
~ Nombre de lignes (Lines number): 21



---\\ Browser Helper Objects de navigateur (O2)
O2 - BHO: Spybot-S&D IE Protection [64Bits] - {53707962-6F74-2D53-2644-206D7942484F} . (.Safer-Networking Ltd. - Blocks URLs that could install spyware, mal.) -- C:\Program Files (x86)\Spybot - Search & Destroy 2\SDHelper.dll
O2 - BHO: AMD SteadyVideo BHO [64Bits] - {6C680BAE-655C-4E3D-8FC4-E6A520C3D928} . (.Advanced Micro Devices - This plugin allows the user to turn AMD Ste.) -- C:\Program Files (x86)\amd\SteadyVideo\SteadyVideo.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live ID [64Bits] - {9030D464-4C02-4ABF-8ECC-5164760863C6} . (.Microsoft Corp. - Microsoft® Windows Live ID Login Helper.) -- C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\
O2 - BHO: Windows Live Messenger Companion Helper [64Bits] - {9FDDE16B-836F-4806-AB1F-1455CBEFF289} . (.Microsoft Corporation - Windows Live Messenger Companion Core.) -- C:\Program Files (x86)\Windows Live\Companion\companioncore.dll
O2 - BHO: Google Toolbar Helper [64Bits] - {AA58ED58-01DD-4d91-8333-CF10577473F7} . (.Google Inc. - Google Toolbar.) -- C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: SkypeIEPluginBHO [64Bits] - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} . (.Skype Technologies S.A. - Skype Click to Call for Internet Explorer.) -- C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O2 - BHO: BHO_TIMELINEREMOVE.Bho [64Bits] - {e7b9b609-19ad-40a4-a288-b300a3087465} . (...) -- mscoree.dll (.not file.)
~ Scan BHO in 00mn 00s



---\\ Internet Explorer Toolbars (O3)
O3 - Toolbar: Google Toolbar [64Bits] - [HKLM]{2318C2B1-4965-11d4-9B18-009027A5CD4F} . (.Google Inc. - Google Toolbar.) -- C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
~ Scan Toolbar in 00mn 00s



---\\ Applications démarrées par registre & par dossier (O4)
O4 - HKLM\..\Run: [RTHDVCPL] . (.Realtek Semiconductor - Gestionnaire audio HD Realtek.) -- C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe 
O4 - HKLM\..\Run: [MSC] . (.Microsoft Corporation - Microsoft Security Client User Interface.) -- c:\Program Files\Microsoft Security Client\msseces.exe 
O4 - HKLM\..\Run: [IntelliType Pro] . (.Microsoft Corporation - IType.exe.) -- c:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe 
O4 - HKLM\..\Run: [IntelliPoint] . (.Microsoft Corporation - IPoint.exe.) -- c:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe 
O4 - HKCU\..\Run: [Steam] . (.Valve Corporation - Steam.) -- C:\Program Files (x86)\Steam\steam.exe 
O4 - HKCU\..\Run: [msnmsgr] . (.Microsoft Corporation - Windows Live Messenger.) -- C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe 
O4 - HKCU\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files\Windows Sidebar\sidebar.exe 
O4 - HKCU\..\Run: [HydraVisionDesktopManager] . (.AMD - HydraDM.) -- C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM.exe 
O4 - HKLM\..\Wow6432Node\Run: [APSDaemon] . (.Apple Inc. - Apple Push.) -- C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe 
O4 - HKLM\..\Wow6432Node\Run: [iTunesHelper] . (.Apple Inc. - iTunesHelper.) -- C:\Program Files (x86)\iTunes\iTunesHelper.exe 
O4 - HKLM\..\Wow6432Node\Run: [IAStorIcon] . (.Intel Corporation - IAStorIcon.) -- C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe 
O4 - HKLM\..\Wow6432Node\Run: [StartCCC] . (.Advanced Micro Devices, Inc. - Catalyst® Control Center Launcher.) -- C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe 
O4 - HKLM\..\Wow6432Node\Run: [SDTray] . (.Safer-Networking Ltd. - Spybot - Search & Destroy tray access.) -- C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe 
O4 - HKUS\S-1-5-21-1316397055-1573579418-1863984331-1000\..\Run: [Steam] . (.Valve Corporation - Steam.) -- C:\Program Files (x86)\Steam\steam.exe 
O4 - HKUS\S-1-5-21-1316397055-1573579418-1863984331-1000\..\Run: [msnmsgr] . (.Microsoft Corporation - Windows Live Messenger.) -- C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe 
O4 - HKUS\S-1-5-21-1316397055-1573579418-1863984331-1000\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files\Windows Sidebar\sidebar.exe 
O4 - HKUS\S-1-5-21-1316397055-1573579418-1863984331-1000\..\Run: [HydraVisionDesktopManager] . (.AMD - HydraDM.) -- C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM.exe 
~ Scan Application in 00mn 00s



---\\ Autres liens utilisateurs (O4)
O4 - Global Startup: C:\Users\Marwan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk . (.Microsoft Corporation.)  -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
O4 - Global Startup: C:\Users\Marwan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk . (.Microsoft Corporation.)  -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
O4 - Global Startup: C:\Users\Marwan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PlanetSide 2 PSG.lnk . (.Sony Online Entertainment.)  -- C:\Users\Public\Sony Online Entertainment\Installed Games\PlanetSide 2 PSG\LaunchPad.exe
O4 - Global Startup: C:\Users\Marwan\Desktop\BioShock.url . (...)  -- C:\Users\Marwan\Desktop\BioShock.url
O4 - Global Startup: C:\Users\Marwan\Desktop\Borderlands 2.url . (...)  -- C:\Users\Marwan\Desktop\Borderlands 2.url
O4 - Global Startup: C:\Users\Marwan\Desktop\Borderlands.url . (...)  -- C:\Users\Marwan\Desktop\Borderlands.url
O4 - Global Startup: C:\Users\Marwan\Desktop\Counter-Strike Source.url . (...)  -- C:\Users\Marwan\Desktop\Counter-Strike Source.url
O4 - Global Startup: C:\Users\Marwan\Desktop\Crysis 2 Maximum Edition.url . (...)  -- C:\Users\Marwan\Desktop\Crysis 2 Maximum Edition.url
O4 - Global Startup: C:\Users\Marwan\Desktop\Crysis Warhead.url . (...)  -- C:\Users\Marwan\Desktop\Crysis Warhead.url
O4 - Global Startup: C:\Users\Marwan\Desktop\Crysis Wars.url . (...)  -- C:\Users\Marwan\Desktop\Crysis Wars.url
O4 - Global Startup: C:\Users\Marwan\Desktop\Crysis.url . (...)  -- C:\Users\Marwan\Desktop\Crysis.url
O4 - Global Startup: C:\Users\Marwan\Desktop\Fraps.lnk . (.Beepa P/L.)  -- C:\Fraps\fraps.exe
O4 - Global Startup: C:\Users\Marwan\Desktop\Google Chrome.lnk . (.Google Inc..)  -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
O4 - Global Startup: C:\Users\Marwan\Desktop\inSSIDer.lnk . (...)  -- C:\Users\Marwan\AppData\Roaming\Microsoft\Installer\{45642795-567E-4B46-85E7-5CDBC8B2F697}\_64130CAC1AF988588B774B.exe
O4 - Global Startup: C:\Users\Marwan\Desktop\Insurgency.url . (...)  -- C:\Users\Marwan\Desktop\Insurgency.url
O4 - Global Startup: C:\Users\Marwan\Desktop\Internet Explorer.lnk . (.Microsoft Corporation.)  -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
O4 - Global Startup: C:\Users\Marwan\Desktop\Left 4 Dead 2.url . (.Microsoft Corporation.)  -- C:\Users\Marwan\Desktop\Left 4 Dead 2.url
O4 - Global Startup: C:\Users\Marwan\Desktop\MARWAN PGM.url . (.Microsoft Corporation.)  -- C:\Users\Marwan\Desktop\MARWAN PGM.url
O4 - Global Startup: C:\Users\Marwan\Desktop\Metro 2033.url . (.Microsoft Corporation.)  -- C:\Users\Marwan\Desktop\Metro 2033.url
O4 - Global Startup: C:\Users\Marwan\Desktop\MSI Afterburner.lnk . (...)  -- C:\MSI Afterburner\MSIAfterburner.exe
O4 - Global Startup: C:\Users\Marwan\Desktop\Mumble.lnk . (.Thorvald Natvig.)  -- C:\Program Files (x86)\Mumble\mumble.exe
O4 - Global Startup: C:\Users\Marwan\Desktop\Notepad.lnk . (.Microsoft Corporation.)  -- C:\Windows\system32\notepad.exe
O4 - Global Startup: C:\Users\Marwan\Desktop\PAYDAY The Heist.url . (...)  -- C:\Users\Marwan\Desktop\PAYDAY The Heist.url
O4 - Global Startup: C:\Users\Marwan\Desktop\PlanetSide 2 PSG.lnk . (.Sony Online Entertainment.)  -- C:\Users\Public\Sony Online Entertainment\Installed Games\PlanetSide 2 PSG\LaunchPad.exe
O4 - Global Startup: C:\Users\Marwan\Desktop\Snipping Tool.lnk . (.Microsoft Corporation.)  -- C:\Windows\system32\SnippingTool.exe
O4 - Global Startup: C:\Users\Marwan\Desktop\Spec Ops The Line.url . (.Microsoft Corporation.)  -- C:\Users\Marwan\Desktop\Spec Ops The Line.url
O4 - Global Startup: C:\Users\Marwan\Desktop\Team Fortress 2.url . (.Microsoft Corporation.)  -- C:\Users\Marwan\Desktop\Team Fortress 2.url
O4 - Global Startup: C:\Users\Marwan\Desktop\Teamspeak 2 RC2.lnk . (.Dominating Bytes Design.)  -- C:\Program Files (x86)\Teamspeak2_RC2\TeamSpeak.exe
O4 - Global Startup: C:\Users\Marwan\Desktop\TrackMania Nations Forever.url . (.Dominating Bytes Design.)  -- C:\Users\Marwan\Desktop\TrackMania Nations Forever.url
O4 - Global Startup: C:\Users\Marwan\Desktop\Windows Live Messenger.lnk . (.Microsoft Corporation.)  -- C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe
O4 - Global Startup: C:\Users\Marwan\Desktop\Wordpad.lnk . (.Microsoft Corporation.)  -- C:\Program Files (x86)\Windows NT\Accessories\wordpad.exe
O4 - Global Startup: C:\Users\Marwan\Desktop\X-COM Apocalypse.url . (.Microsoft Corporation.)  -- C:\Users\Marwan\Desktop\X-COM Apocalypse.url
O4 - Global Startup: C:\Users\Marwan\Desktop\Xai Configuration.lnk . (.Acresso Software Inc..)  -- C:\Windows\Installer\{77E57197-30EC-444F-B1B8-A99AA2A45794}\NewShortcut1_CC71D5B5E3C74F4B8E46EF7930728D9B.exe
O4 - Global Startup: C:\Users\Marwan\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Dofus.lnk . (...)  -- C:\Program Files (x86)\Dofus\UpLauncher.exe
O4 - Global Startup: C:\Users\Marwan\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk . (.Microsoft Corporation.)  -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
~ Scan Global Startup in 00mn 00s



---\\ Invisibilité de l'icône d'options IE dans le panneau de Configuration (O5)
O5 - control.ini: [HKLM\..\Control Panel] inetcpl.cpl=no
~ Scan IE Control Panel in 00mn 00s



---\\ Boutons situés sur la barre d'outils principale d'Internet Explorer (O9)
O9 - Extra button: Skype Click to Call [64Bits] - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} . (...) -- c:\program files (x86)\skype\toolbars\internet explorer x64\icon.ico
~ Scan IE Extra Buttons in 00mn 00s



---\\ Winsock hijacker (Layered Service Provider) (O10)
O10 - WLSP:\000000000001\Winsock LSP File . (.Microsoft Corporation - Network Location Awareness 2.) -- C:\Windows\system32\NLAapi.dll
O10 - WLSP:\000000000002\Winsock LSP File . (.Microsoft Corporation - Fournisseur Shim d’affectation de noms de messagerie.) -- C:\Windows\system32\napinsp.dll
O10 - WLSP:\000000000003\Winsock LSP File . (.Microsoft Corporation - Fournisseur d’espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll
O10 - WLSP:\000000000004\Winsock LSP File . (.Microsoft Corporation - Fournisseur d’espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll
O10 - WLSP:\000000000005\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\Windows\system32\mswsock.dll
O10 - WLSP:\000000000006\Winsock LSP File . (.Microsoft Corporation - LDAP RnR Provider DLL.) -- C:\Windows\system32\winrnr.dll
O10 - WLSP:\000000000007\Winsock LSP File . (.Microsoft Corp. - Microsoft® Windows Live ID Namespace Provider.) -- C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WLIDNSP.dll
O10 - WLSP:\000000000008\Winsock LSP File . (.Microsoft Corp. - Microsoft® Windows Live ID Namespace Provider.) -- C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WLIDNSP.dll
O10 - WLSP:\000000000009\Winsock LSP File . (.Apple Inc. - Bonjour Namespace Provider.) -- C:\Program Files (x86)\Bonjour\mdnsNSP.dll
~ Scan Winsock in 00mn 00s



---\\ Site dans la Zone de confiance d'Internet Explorer (O15)
O15 - Trusted Zone: [HKCU\...\Domains] *.clonewarsadventures.com
O15 - Trusted Zone: [HKCU\...\Domains\www] *.clonewarsadventures.com
O15 - Trusted Zone: [HKCU\...\Domains] *.freerealms.com
O15 - Trusted Zone: [HKCU\...\Domains\www] *.freerealms.com
O15 - Trusted Zone: [HKCU\...\Domains] *.soe.com
O15 - Trusted Zone: [HKCU\...\Domains\www] *.soe.com
O15 - Trusted Zone: [HKCU\...\Domains] *.sony.com
O15 - Trusted Zone: [HKCU\...\Domains\www] *.sony.com
~ Scan IE Zone Confiance in 00mn 00s



---\\ Modification Domaine/Adresses DNS (O17)
O17 - HKLM\System\CCS\Services\Tcpip\..\{B26E5B81-2DE4-4DB2-AC29-F6C7AB91D2C8}: DhcpNameServer = 89.2.0.1 89.2.0.2
O17 - HKLM\System\CCS\Services\Tcpip\..\{B97CE305-CC24-419F-A41B-CF62297C6F71}: DhcpNameServer = 89.2.0.1 89.2.0.2
O17 - HKLM\System\CS1\Services\Tcpip\..\{B26E5B81-2DE4-4DB2-AC29-F6C7AB91D2C8}: DhcpNameServer = 89.2.0.1 89.2.0.2
O17 - HKLM\System\CS1\Services\Tcpip\..\{B97CE305-CC24-419F-A41B-CF62297C6F71}: DhcpNameServer = 89.2.0.1 89.2.0.2
O17 - HKLM\System\CS2\Services\Tcpip\..\{B26E5B81-2DE4-4DB2-AC29-F6C7AB91D2C8}: DhcpNameServer = 89.2.0.1 89.2.0.2
O17 - HKLM\System\CS2\Services\Tcpip\..\{B97CE305-CC24-419F-A41B-CF62297C6F71}: DhcpNameServer = 89.2.0.1 89.2.0.2
~ Scan Domain in 00mn 00s



---\\ Protocole additionnel (O18)
O18 - Handler: about [64Bits] - {3050F406-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll
O18 - Handler: cdl [64Bits] - {3dd53d40-7b8b-11D0-b013-00aa0059ce02} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\system32\urlmon.dll
O18 - Handler: dvd [64Bits] - {12D51199-0DB5-46FE-A120-47A3D7D937CC} . (.Microsoft Corporation - Contrôle ActiveX pour le flux vidéo.) -- C:\Windows\System32\msvidctl.dll
O18 - Handler: file [64Bits] - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\system32\urlmon.dll
O18 - Handler: ftp [64Bits] - {79eac9e3-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\system32\urlmon.dll
O18 - Handler: http [64Bits] - {79eac9e2-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\system32\urlmon.dll
O18 - Handler: https [64Bits] - {79eac9e5-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\system32\urlmon.dll
O18 - Handler: its [64Bits] - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\Windows\System32\itss.dll
O18 - Handler: javascript [64Bits] - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll
O18 - Handler: livecall [64Bits] - {828030A1-22C1-4009-854F-8E305202313F} . (.Microsoft Corporation - Windows Live Messenger Protocol Handler Mod.) -- C:\Program Files (x86)\Windows Live\Messenger\msgrapp.dll
O18 - Handler: local [64Bits] - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\system32\urlmon.dll
O18 - Handler: mailto [64Bits] - {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll
O18 - Handler: mhtml [64Bits] - {05300401-BCBC-11d0-85E3-00C04FD85AB4} . (.Microsoft Corporation - Microsoft Internet Messaging API Resources.) -- C:\Windows\system32\inetcomm.dll
O18 - Handler: mk [64Bits] - {79eac9e6-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\system32\urlmon.dll
O18 - Handler: ms-its [64Bits] - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\Windows\System32\itss.dll
O18 - Handler: msnim [64Bits] - {828030A1-22C1-4009-854F-8E305202313F} . (.Microsoft Corporation - Windows Live Messenger Protocol Handler Mod.) -- C:\Program Files (x86)\Windows Live\Messenger\msgrapp.dll
O18 - Handler: res [64Bits] - {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll
O18 - Handler: skype-ie-addon-data [64Bits] - {91774881-D725-4E58-B298-07617B9B86A8} . (.Skype Technologies S.A. - Skype Click to Call for Internet Explorer.) -- C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll
O18 - Handler: skype4com [64Bits] - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} . (.Skype Technologies - Skype for COM API.) -- C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll
O18 - Handler: tv [64Bits] - {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} . (.Microsoft Corporation - Contrôle ActiveX pour le flux vidéo.) -- C:\Windows\System32\msvidctl.dll
O18 - Handler: vbscript [64Bits] - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll
O18 - Handler: wlmailhtml [64Bits] - {03C514A3-1EFB-4856-9F99-10D7BE1653C0} . (.Microsoft Corporation - Windows Live Mail.) -- C:\Program Files (x86)\Windows Live\Mail\mailcomm.dll
O18 - Handler: wlpg [64Bits] - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} . (.Microsoft Corporation - Windows Live Album Download Protocol Handle.) -- C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O18 - Filter: application/octet-stream [64Bits] - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll
O18 - Filter: application/x-complus [64Bits] - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll
O18 - Filter: application/x-msdownload [64Bits] - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll
O18 - Filter: video/mp4 [64Bits] - {20C75730-7C25-476B-95DC-C65810F9E489} . (.Advanced Micro Devices - MIME Video Detector for IE.) -- C:\Program Files\AMD\SteadyVideo\VideoMIMEFilter.dll
O18 - Filter: video/x-flv [64Bits] - {20C75730-7C25-476B-95DC-C65810F9E489} . (.Advanced Micro Devices - MIME Video Detector for IE.) -- C:\Program Files\AMD\SteadyVideo\VideoMIMEFilter.dll
~ Scan Protocole Additionnel in 00mn 00s



---\\ Clé de Registre autorun ShellServiceObjectDelayLoad (SSO/SSODL) (O21)
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
~ Scan SSODL in 00mn 00s



---\\ Liste des services NT non Microsoft et non désactivés (O23)
O23 - Service:  (AMD External Events Utility) . (.AMD - AMD External Events Service Module.) - C:\Windows\System32\atiesrxx.exe
O23 - Service: Apple Mobile Device (Apple Mobile Device) . (.Apple Inc. - MobileDeviceService.) - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: Service Bonjour (Bonjour Service) . (.Apple Inc. - Bonjour Service.) - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Service Google Update (gupdate) (gupdate) . (.Google Inc. - Programme d'installation de Google.) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Intel(R) Rapid Storage Technology (IAStorDataMgrSvc) . (.Intel Corporation - IAStorDataSvc.) - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
O23 - Service:  (MBAMScheduler) . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
O23 - Service:  (MBAMService) . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
O23 - Service: PnkBstrA (PnkBstrA) . (...) - C:\Windows\SysWOW64\PnkBstrA.exe
O23 - Service: PnkBstrB (PnkBstrB) . (...) - C:\Windows\SysWOW64\PnkBstrB.exe
O23 - Service: Ralink Registry Writer (RalinkRegistryWriter) . (.Ralink Technology, Corp. - RalinkRegistryWriter.) - C:\Program Files (x86)\TRENDnet\Common\RaRegistry.exe
O23 - Service: Ralink Registry Writer 64 (RalinkRegistryWriter64) . (.Ralink Technology, Corp. - RalinkRegistryWriter.) - C:\Program Files (x86)\TRENDnet\Common\RaRegistry64.exe
O23 - Service: Spybot-S&D 2 Scanner Service (SDScannerService) . (.Safer-Networking Ltd. - Spybot-S&D 2 Scanner Service.) - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe
O23 - Service: Spybot-S&D 2 Updating Service (SDUpdateService) . (.Safer-Networking Ltd. - Spybot-S&D 2 Background update service.) - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe
O23 - Service: Spybot-S&D 2 Security Center Service (SDWSCService) . (.Safer-Networking Ltd. - Windows Security Center integration..) - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe
O23 - Service: Skype C2C Service (Skype C2C Service) . (.Skype Technologies S.A. - Skype C2C Service.) - C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe
O23 - Service: Skype Updater (SkypeUpdate) . (.Skype Technologies - Skype Updater Service.) - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service:  (WMPNetworkSvc) . (...) - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.)
~ Scan Services in 00mn 00s



---\\ Enumération Active Desktop & MHTML Editor (O24)
O24 - Default MHTML Editor: Last - .(...) -  (.not file.)
~ Scan Desktop Component in 00mn 00s



---\\ BootExecute (O34)
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O34 - HKLM BootExecute: (sdnclean64.exe) - File not found
~ Scan Keys in 00mn 00s



---\\ Tâches planifiées en automatique (O39)
O39 - APT:Automatic Planified Task  - C:\Windows\Tasks\Adobe Flash Player Updater.job
O39 - APT:Automatic Planified Task  - C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
O39 - APT:Automatic Planified Task  - C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
[MD5.19C2F2BE3C606B8E649935A2B5682C62] [APT] [Microsoft_Hardware_Launch_mousekeyboardcenter_exe] (.Microsoft.) -- c:\Program Files\Microsoft Mouse and Keyboard Center\mousekeyboardcenter.exe
[MD5.143A396C5A8A4288787AC4628D70C0AC] [APT] [MSIAfterburner] (...) -- C:\MSI Afterburner\MSIAfterburner.exe
[MD5.34EBD4FF6A24D86BB4716D6AFCC1A89B] [APT] [AppleSoftwareUpdate] (.Apple Inc..) -- C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe
[MD5.36A82C214B46787385F3B0CD02ECAA88] [APT] [Refresh immunization] (.Safer-Networking Ltd..) -- C:\Program Files (x86)\Spybot - Search & Destroy 2\SDImmunize.exe
[MD5.E4A0900CF535888DDD85B10040CA3E34] [APT] [Scan the system] (.Safer-Networking Ltd..) -- C:\Program Files (x86)\Spybot - Search & Destroy 2\SDScan.exe
~ Scan Scheduled Task in 00mn 00s



---\\ Composants installés (ActiveSetup Installed Components) (O40)
O40 - ASIC: Microsoft Windows Media Player [64Bits] - >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (.Microsoft Corporation - Ressources du Lecteur Windows Media.) -- C:\Windows\System32\wmploc.dll
O40 - ASIC: Internet Explorer [64Bits] - >{26923b43-4d38-484f-9b9e-de460746276c} . (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Explorer par utilisateur.) -- C:\Windows\System32\ie4uinit.exe
O40 - ASIC: Browser Customizations [64Bits] - >{60B49E34-C7CC-11D0-8953-00A0C90347FF} . (.Microsoft Corporation - Personnalisation d’IEAK.) -- C:\Windows\System32\iedkcs32.dll
O40 - ASIC: Microsoft Windows Media Player 12.0 [64Bits] - {22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (.Microsoft Corporation - Windows Media Player Extension.) -- C:\Windows\SysWOW64\wmpdxm.dll
O40 - ASIC: Themes Setup [64Bits] - {2C7339CF-2B09-4501-B3F3-F3508C9228ED} . (.Microsoft Corporation - API Windows Theme.) -- C:\Windows\System32\themeui.dll
O40 - ASIC: Microsoft Windows [64Bits] - {44BBA840-CC51-11CF-AAFA-00AA00B6015C} . (.Microsoft Corporation - Windows Mail.) -- C:\Program Files (x86)\Windows Mail\WinMail.exe
O40 - ASIC: Browsing Enhancements [64Bits] - {630b1da0-b465-11d1-9948-00c04f98bbc9} . (.Microsoft Corporation - Extension Shell dossier FTP Microsoft Internet Explorer..) -- C:\Windows\System32\msieftp.dll
O40 - ASIC: Microsoft Windows Media Player [64Bits] - {6BF52A52-394A-11d3-B153-00C04F79FAA6} . (.Microsoft Corporation - Ressources du Lecteur Windows Media.) -- C:\Windows\System32\wmploc.dll
O40 - ASIC: Windows Desktop Update [64Bits] - {89820200-ECBD-11cf-8B85-00AA005B4340} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\Windows\System32\shell32.dll
O40 - ASIC: Web Platform Customizations [64Bits] - {89820200-ECBD-11cf-8B85-00AA005B4383} . (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Explorer par utilisateur.) -- C:\Windows\System32\ie4uinit.exe
O40 - ASIC: (no name) [64Bits] - {89B4C1CD-B018-4511-B0A1-5476DBF70820} . (.Microsoft Corporation - Microsoft .NET IE SECURITY REGISTRATION.) -- C:\Windows\system32\mscories.dll
~ Scan Active Setup in 00mn 00s



---\\ Pilotes lancés au démarrage (O41)
O41 - Driver: C:\Windows\System32\drivers\afd.sys (AFD) . (.Microsoft Corporation - Ancillary Function Driver for WinSock.) - C:\Windows\system32\drivers\afd.sys
O41 - Driver: (blbdrive) . (.Microsoft Corporation - BLB Drive Driver.) - C:\Windows\System32\DRIVERS\blbdrive.sys
O41 - Driver:  (cdrom) . (.Microsoft Corporation - SCSI CD-ROM Driver.) - C:\Windows\System32\DRIVERS\cdrom.sys
O41 - Driver: C:\Windows\System32\drivers\dfsc.sys (DfsC) . (.Microsoft Corporation - DFS Namespace Client Driver.) - C:\Windows\System32\Drivers\dfsc.sys
O41 - Driver: C:\Windows\System32\drivers\discache.sys (discache) . (.Microsoft Corporation - System Indexer/Cache Driver.) - C:\Windows\System32\drivers\discache.sys
O41 - Driver:  (mssmbios) . (.Microsoft Corporation - System Management BIOS Driver.) - C:\Windows\System32\DRIVERS\mssmbios.sys
O41 - Driver:  (NetBIOS) . (.Microsoft Corporation - NetBIOS interface driver.) - C:\Windows\System32\DRIVERS\netbios.sys
O41 - Driver: C:\Windows\System32\drivers\netbt.sys (NetBT) . (.Microsoft Corporation - MBT Transport driver.) - C:\Windows\System32\DRIVERS\netbt.sys
O41 - Driver: C:\Windows\System32\drivers\nsiproxy.sys (nsiproxy) . (.Microsoft Corporation - NSI Proxy.) - C:\Windows\System32\drivers\nsiproxy.sys
O41 - Driver: C:\Windows\System32\drivers\pacer.sys (Psched) . (.Microsoft Corporation - Planificateur de paquets QoS.) - C:\Windows\System32\DRIVERS\pacer.sys
O41 - Driver: C:\Windows\System32\wkssvc.dll (rdbss) . (.Microsoft Corporation - Pilote du sous-système de mise en mémoire t.) - C:\Windows\System32\DRIVERS\rdbss.sys
O41 - Driver: C:\Windows\System32\DRIVERS\RDPCDD.sys (RDPCDD) . (.Microsoft Corporation - RDP Miniport.) - C:\Windows\System32\DRIVERS\RDPCDD.sys
O41 - Driver: C:\Windows\System32\drivers\RDPENCDD.sys (RDPENCDD) . (.Microsoft Corporation - RDP Encoder Miniport.) - C:\Windows\System32\drivers\rdpencdd.sys
O41 - Driver: C:\Windows\System32\drivers\RdpRefMp.sys (RDPREFMP) . (.Microsoft Corporation - RDP Reflector Driver Miniport.) - C:\Windows\System32\drivers\rdprefmp.sys
O41 - Driver:  (Serial) . (.Microsoft Corporation - Pilote de périphérique série.) - C:\Windows\System32\DRIVERS\serial.sys
O41 - Driver: C:\Windows\System32\tcpipcfg.dll (tdx) . (.Microsoft Corporation - TDI Translation Driver.) - C:\Windows\System32\DRIVERS\tdx.sys
O41 - Driver:  (TermDD) . (.Microsoft Corporation - Remote Desktop Server Driver.) - C:\Windows\System32\DRIVERS\termdd.sys
O41 - Driver: (VgaSave) . (.Microsoft Corporation - VGA/Super VGA Video Driver.) - C:\Windows\system32\drivers\vga.sys
O41 - Driver:  (vwififlt) . (.Microsoft Corporation - Virtual WiFi Filter Driver.) - C:\Windows\System32\DRIVERS\vwififlt.sys
O41 - Driver: C:\Windows\System32\rascfg.dll (Wanarpv6) . (.Microsoft Corporation - MS Remote Access and Routing ARP Driver.) - C:\Windows\System32\DRIVERS\wanarp.sys
O41 - Driver:  (WfpLwf) . (.Microsoft Corporation - WFP NDIS 6.20 Lightweight Filter Driver.) - C:\Windows\System32\DRIVERS\wfplwf.sys
~ Scan Drivers in 00mn 00s



---\\ Logiciels installés (O42)
O42 - Logiciel: 7-Zip 9.20 (x64 edition) - (.Igor Pavlov.) [HKLM][64Bits] -- {23170F69-40C1-2702-0920-000001000000}
O42 - Logiciel: AMD APP SDK Runtime - (.Advanced Micro Devices Inc..) [HKLM][64Bits] -- {503F672D-6C84-448A-8F8F-4BC35AC83441}
O42 - Logiciel: AMD AVIVO64 Codecs - (.Advanced Micro Devices, Inc..) [HKLM][64Bits] -- {105E3A05-278A-3F14-6F30-35DD900668D5}
O42 - Logiciel: AMD Accelerated Video Transcoding - (.Advanced Micro Devices, Inc..) [HKLM][64Bits] -- {5BA8D4F0-C15F-57FE-2B6C-C4AF214833CE}
O42 - Logiciel: AMD Catalyst Install Manager - (.Advanced Micro Devices, Inc..) [HKLM][64Bits] -- {F436A08B-63BB-72A2-17C0-6D8E5182CA49}
O42 - Logiciel: AMD Drag and Drop Transcoding - (.Advanced Micro Devices, Inc..) [HKLM][64Bits] -- {0E655D07-2B72-3846-1480-7BA7D8E0E24F}
O42 - Logiciel: AMD Media Foundation Decoders - (.Advanced Micro Devices, Inc..) [HKLM][64Bits] -- {9064F37C-66B4-BAF2-E8A7-EDE5E72BB16D}
O42 - Logiciel: AMD Steady Video Plug-In  - (.AMD.) [HKLM][64Bits] -- {DA2737A4-B639-96F4-1CC2-30D2919EE1FB}
O42 - Logiciel: Adobe AIR - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- Adobe AIR
O42 - Logiciel: Adobe AIR - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {14DC0059-00F1-4F62-BD1A-AB23CD51A95E}
O42 - Logiciel: Adobe Flash Player 11 ActiveX - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- Adobe Flash Player ActiveX
O42 - Logiciel: Apple Application Support - (.Apple Inc..) [HKLM][64Bits] -- {63EC2120-1742-4625-AA47-C6A8AEC9C64C}
O42 - Logiciel: Apple Mobile Device Support - (.Apple Inc..) [HKLM][64Bits] -- {7446FE8D-C1F9-4D42-AAAE-5DBCE58605A6}
O42 - Logiciel: Apple Software Update - (.Apple Inc..) [HKLM][64Bits] -- {789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}
O42 - Logiciel: Asmedia ASM104x USB 3.0 Host Controller Driver - (.Asmedia Technology.) [HKLM][64Bits] -- {E4FB0B39-C991-4EE7-95DD-1A1A7857D33D}
O42 - Logiciel: Battlefield 1942™ - (.Electronic Arts.) [HKLM][64Bits] -- {5BE7BD06-512B-43bf-AD78-3BD2A5F5F7B3}
O42 - Logiciel: Battlefield 3™ - (.Electronic Arts.) [HKLM][64Bits] -- {76285C16-411A-488A-BCE3-C83CB933D8CF}
O42 - Logiciel: Battlefield: Bad Company 2 - (.DICE.) [HKLM][64Bits] -- Steam App 24960
O42 - Logiciel: Battlelog Web Plugins - (.EA Digital Illusions CE AB.) [HKLM][64Bits] -- Battlelog Web Plugins
O42 - Logiciel: Bonjour - (.Apple Inc..) [HKLM][64Bits] -- {6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}
O42 - Logiciel: Borderlands - (.Gearbox Software.) [HKLM][64Bits] -- Steam App 8980
O42 - Logiciel: Borderlands 2 - (.Gearbox Software.) [HKLM][64Bits] -- Steam App 49520
O42 - Logiciel: CCleaner - (.Piriform.) [HKLM][64Bits] -- CCleaner
O42 - Logiciel: CPUID HWMonitor 1.16 - (.Pas de propriétaire.) [HKLM][64Bits] -- CPUID HWMonitor_is1
O42 - Logiciel: Catalyst Control Center - Branding - (.Advanced Micro Devices, Inc..) [HKLM][64Bits] -- {E2F0AF23-FE2F-4222-9A43-55E63CC41EF1}
O42 - Logiciel: Centre Souris et Claviers Microsoft - (.Microsoft Corporation.) [HKLM][64Bits] -- Microsoft Mouse and Keyboard Center
O42 - Logiciel: Cisco EAP-FAST Module - (.Cisco Systems, Inc..) [HKLM][64Bits] -- {64BF0187-F3D2-498B-99EA-163AF9AE6EC9}
O42 - Logiciel: Cisco LEAP Module - (.Cisco Systems, Inc..) [HKLM][64Bits] -- {51C7AD07-C3F6-4635-8E8A-231306D810FE}
O42 - Logiciel: Cisco PEAP Module - (.Cisco Systems, Inc..) [HKLM][64Bits] -- {ED5776D5-59B4-46B7-AF81-5F2D94D7C640}
O42 - Logiciel: Complément Messenger - (.Microsoft Corporation.) [HKLM][64Bits] -- {6E5324C1-84FC-4F76-9A3A-C65E07F80EE6}
O42 - Logiciel: Counter-Strike - (.Valve.) [HKLM][64Bits] -- Steam App 10
O42 - Logiciel: Counter-Strike: Source - (.Valve.) [HKLM][64Bits] -- Steam App 240
O42 - Logiciel: Crysis - (.Crytek.) [HKLM][64Bits] -- Steam App 17300
O42 - Logiciel: Crysis 2 Maximum Edition - (.Electronic Arts.) [HKLM][64Bits] -- Steam App 108800
O42 - Logiciel: Crysis Warhead - (.Crytek.) [HKLM][64Bits] -- Steam App 17330
O42 - Logiciel: Crysis Wars - (.Crytek.) [HKLM][64Bits] -- Steam App 17340
O42 - Logiciel: D3DX10 - (.Microsoft.) [HKLM][64Bits] -- {E09C4DB7-630C-4F06-A631-8EA7239923AF}
O42 - Logiciel: Dofus 1 - (.Ankama Games.) [HKLM][64Bits] -- Dofus 1
O42 - Logiciel: ESN Sonar - (.ESN Social Software AB.) [HKLM][64Bits] -- ESN Sonar-0.70.4
O42 - Logiciel: Fraps (remove only) - (.Pas de propriétaire.) [HKLM][64Bits] -- Fraps
O42 - Logiciel: Google Chrome - (.Google Inc..) [HKLM][64Bits] -- Google Chrome
O42 - Logiciel: Google Toolbar for Internet Explorer - (.Google Inc..) [HKLM][64Bits] -- {18455581-E099-4BA8-BC6B-F34B2F06600C}
O42 - Logiciel: Google Toolbar for Internet Explorer - (.Google Inc..) [HKLM][64Bits] -- {2318C2B1-4965-11d4-9B18-009027A5CD4F}
O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM][64Bits] -- {A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}
O42 - Logiciel: HydraVision - (.Advanced Micro Devices, Inc..) [HKLM][64Bits] -- {BE57241B-D8FC-C0A5-1CF6-28DA7FB18D68}
O42 - Logiciel: Insurgency - (.Team Insurgency.) [HKLM][64Bits] -- Steam App 17700
O42 - Logiciel: Intel(R) Management Engine Components - (.Intel Corporation.) [HKLM][64Bits] -- {65153EA5-8B6E-43B6-857B-C6E4FC25798A}
O42 - Logiciel: Intel(R) Rapid Storage Technology - (.Intel Corporation.) [HKLM][64Bits] -- {3E29EE6C-963A-4aae-86C1-DC237C4A49FC}
O42 - Logiciel: Junk Mail filter update - (.Microsoft Corporation.) [HKLM][64Bits] -- {1F6AB0E7-8CDD-4B93-8A23-AA9EB2FEFCE4}
O42 - Logiciel: Left 4 Dead 2 - (.Valve.) [HKLM][64Bits] -- Steam App 550
O42 - Logiciel: MSI Afterburner 2.1.0 - (.MSI Co., LTD.) [HKLM][64Bits] -- Afterburner
O42 - Logiciel: MSVCRT - (.Microsoft.) [HKLM][64Bits] -- {8DD46C6A-0056-4FEC-B70A-28BB16A1F11F}
O42 - Logiciel: MSVCRT_amd64 - (.Microsoft.) [HKLM][64Bits] -- {D0B44725-3666-492D-BEF6-587A14BD9BD9}
O42 - Logiciel: Ma-Config.com (64 bits) - (.Cybelsoft.) [HKLM][64Bits] -- {602C9E30-F838-4AD2-8DC2-265C192D4AAC}
O42 - Logiciel: Malwarebytes Anti-Malware version 1.70.0.1100 - (.Malwarebytes Corporation.) [HKLM][64Bits] -- Malwarebytes' Anti-Malware_is1
O42 - Logiciel: Medal of Honor™ Warfighter - (.Electronic Arts.) [HKLM][64Bits] -- {1040143F-FEFB-4B90-8E51-E47D40E14C4E}
O42 - Logiciel: Mesh Runtime - (.Microsoft Corporation.) [HKLM][64Bits] -- {8C6D6116-B724-4810-8F2D-D047E6B7D68E}
O42 - Logiciel: Metro 2033 - (.THQ.) [HKLM][64Bits] -- Steam App 43110
O42 - Logiciel: Microsoft Antimalware Service FR-FR Language Pack - (.Microsoft Corporation.) [HKLM][64Bits] -- {32E9C1A5-0FDA-4483-987D-DBABF9CC1DD8}
O42 - Logiciel: Microsoft Games for Windows - LIVE Redistributable - (.Microsoft Corporation.) [HKLM][64Bits] -- {832D9DE0-8AFC-4689-9819-4DBBDEBD3E4F}
O42 - Logiciel: Microsoft Games for Windows Marketplace - (.Microsoft Corporation.) [HKLM][64Bits] -- {4CB0307C-565E-4441-86BE-0DF2E4FB828C}
O42 - Logiciel: Microsoft Security Client - (.Microsoft Corporation.) [HKLM][64Bits] -- {C78D3032-9DFD-41D0-9DE9-58EAE750CBA4}
O42 - Logiciel: Microsoft Security Client FR-FR Language Pack - (.Microsoft Corporation.) [HKLM][64Bits] -- {DC911ADF-7B60-40F2-A112-FB1EB6402D07}
O42 - Logiciel: Microsoft Security Essentials - (.Microsoft Corporation.) [HKLM][64Bits] -- Microsoft Security Client
O42 - Logiciel: Microsoft Silverlight - (.Microsoft Corporation.) [HKLM][64Bits] -- {89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}
O42 - Logiciel: Mumble 1.2.3 - (.Thorvald Natvig.) [HKLM][64Bits] -- {E1019541-10A2-464F-A23E-A4F23DA65160}
O42 - Logiciel: NVIDIA PhysX - (.NVIDIA Corporation.) [HKLM][64Bits] -- {3F5C371F-8EA2-4F25-9D3D-D0B4526E3AEA}
O42 - Logiciel: Need for Speed™ Most Wanted - (.Electronic Arts.) [HKLM][64Bits] -- {FB0127F3-985B-44CE-AE29-378CAF60B361}
O42 - Logiciel: OpenOffice.org 3.4.1 - (.Apache Software Foundation.) [HKLM][64Bits] -- {7DA1C06F-C913-46C7-8A0F-DA2CBA17EA1D}
O42 - Logiciel: Origin - (.Electronic Arts, Inc..) [HKLM][64Bits] -- Origin
O42 - Logiciel: PAYDAY: The Heist - (.Overkill.) [HKLM][64Bits] -- Steam App 24240
O42 - Logiciel: PlanetSide 2 - (.Sony Online Entertainment.) [HKCU][64Bits] -- soe-PlanetSide 2 PSG
O42 - Logiciel: PunkBuster Services - (.Even Balance, Inc..) [HKLM][64Bits] -- PunkBusterSvc
O42 - Logiciel: Realtek Ethernet Controller Driver - (.Realtek.) [HKLM][64Bits] -- {8833FFB6-5B0C-4764-81AA-06DFEED9A476}
O42 - Logiciel: Realtek High Definition Audio Driver - (.Realtek Semiconductor Corp..) [HKLM][64Bits] -- {F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}
O42 - Logiciel: Skype Click to Call - (.Skype Technologies S.A..) [HKLM][64Bits] -- {B6CF2967-C81E-40C0-9815-C05774FEF120}
O42 - Logiciel: Skype™ 6.0 - (.Skype Technologies S.A..) [HKLM][64Bits] -- {EA17F4FC-FDBF-4CF8-A529-2D983132D053}
O42 - Logiciel: Spec Ops: The Line - (.YAGER.) [HKLM][64Bits] -- Steam App 50300
O42 - Logiciel: Spybot - Search & Destroy - (.Safer-Networking Ltd..) [HKLM][64Bits] -- {B4092C6D-E886-4CB2-BA68-FE5A99D31DE7}_is1
O42 - Logiciel: Steam - (.Valve Corporation.) [HKLM][64Bits] -- {048298C9-A4D3-490B-9FF9-AB023A9238F3}
O42 - Logiciel: SteelSeries Xai Laser Mouse - (.SteelSeries.) [HKLM][64Bits] -- {77E57197-30EC-444F-B1B8-A99AA2A45794}
O42 - Logiciel: TRENDnet Wireless LAN - (.TRENDnet.) [HKLM][64Bits] -- {7E1A3562-C36E-4B2B-B083-336DE8E30A88}
O42 - Logiciel: Team Fortress 2 - (.Valve.) [HKLM][64Bits] -- Steam App 440
O42 - Logiciel: TeamSpeak 2 RC2 - (.Dominating Bytes Design.) [HKLM][64Bits] -- Teamspeak 2 RC2_is1
O42 - Logiciel: TeamSpeak 3 Client - (.TeamSpeak Systems GmbH.) [HKLM][64Bits] -- TeamSpeak 3 Client
O42 - Logiciel: TimeLineRemove 0.9 - (.TimeLineRemove.) [HKLM][64Bits] -- TimeLineRemove_is1
O42 - Logiciel: gamelauncher-ps2-psg - (.Sony Online Entertainment.) [HKCU][64Bits] -- SOE-C:/Users/Public/Sony Online Entertainment/Installed Games/PlanetSide 2 PSG
O42 - Logiciel: iTunes - (.Apple Inc..) [HKLM][64Bits] -- {1493B2AE-0261-47D2-B1AA-F4DAD0F6C48B}
O42 - Logiciel: inSSIDer - (.MetaGeek.) [HKLM][64Bits] -- {45642795-567E-4B46-85E7-5CDBC8B2F697}

---\\ HKCU & HKLM Software Keys
[HKCU\Software\4A-Games]
[HKCU\Software\7-Zip]
[HKCU\Software\AMD]
[HKCU\Software\ATI]
[HKCU\Software\AVS4YOU]
[HKCU\Software\AppDataLow\Software\ConduitSearchScopes]
[HKCU\Software\AppDataLow\Software\Conduit]
[HKCU\Software\AppDataLow\Software\Microsoft]
[HKCU\Software\AppDataLow\Software]
[HKCU\Software\AppDataLow]
[HKCU\Software\Apple Computer, Inc.]
[HKCU\Software\Apple Inc.]
[HKCU\Software\Battlefield 1942]
[HKCU\Software\Classes]
[HKCU\Software\Clients]
[HKCU\Software\Cookie Crumble]
[HKCU\Software\EA Games]
[HKCU\Software\Electronic Arts]
[HKCU\Software\Fraps3]
[HKCU\Software\GNU]
[HKCU\Software\Google]
[HKCU\Software\HookNetwork]
[HKCU\Software\IGA]
[HKCU\Software\IM Providers]
[HKCU\Software\MOHWSplash]
[HKCU\Software\MSI]
[HKCU\Software\Macromedia]
[HKCU\Software\Malwarebytes' Anti-Malware]
[HKCU\Software\MozillaPlugins]
[HKCU\Software\Mumble]
[HKCU\Software\OpenOffice.org]
[HKCU\Software\Piriform]
[HKCU\Software\Policies]
[HKCU\Software\Realtek]
[HKCU\Software\Safer Networking Limited]
[HKCU\Software\Skype]
[HKCU\Software\SysInternals]
[HKCU\Software\TeamSpeak 3 Client]
[HKCU\Software\TeamViewer]
[HKCU\Software\Trolltech]
[HKCU\Software\Valve]
[HKCU\Software\Wow6432Node]
[HKCU\Software\ZebHelpProcess Helper]
[HKCU\Software\cybelsoft]
[HKLM\Software\7-Zip]
[HKLM\Software\AGEIA Technologies]
[HKLM\Software\AMD]
[HKLM\Software\ATI Technologies]
[HKLM\Software\ATI]
[HKLM\Software\Apple Computer, Inc.]
[HKLM\Software\Apple Inc.]
[HKLM\Software\BrowserChoice]
[HKLM\Software\CBSTEST]
[HKLM\Software\Classes]
[HKLM\Software\Clients]
[HKLM\Software\DTS]
[HKLM\Software\Dolby]
[HKLM\Software\GEAR Software]
[HKLM\Software\IM Providers]
[HKLM\Software\Intel]
[HKLM\Software\Khronos]
[HKLM\Software\Knowles]
[HKLM\Software\Macromedia]
[HKLM\Software\MozillaPlugins]
[HKLM\Software\ODBC]
[HKLM\Software\Piriform]
[HKLM\Software\Policies]
[HKLM\Software\RTLSetup]
[HKLM\Software\Realtek]
[HKLM\Software\RegisteredApplications]
[HKLM\Software\SRS Labs]
[HKLM\Software\Safer Networking Limited]
[HKLM\Software\SonicFocus]
[HKLM\Software\Sonic]
[HKLM\Software\Waves Audio]
[HKLM\Software\Wow6432Node\AGEIA Technologies]
[HKLM\Software\Wow6432Node\AMD]
[HKLM\Software\Wow6432Node\ATI Technologies]
[HKLM\Software\Wow6432Node\ATI]
[HKLM\Software\Wow6432Node\AVS4YOU]
[HKLM\Software\Wow6432Node\Adobe]
[HKLM\Software\Wow6432Node\Ankama]
[HKLM\Software\Wow6432Node\Apple Computer, Inc.]
[HKLM\Software\Wow6432Node\Apple Inc.]
[HKLM\Software\Wow6432Node\Classes]
[HKLM\Software\Wow6432Node\Clients]
[HKLM\Software\Wow6432Node\Conduit]
[HKLM\Software\Wow6432Node\Danger Close Games]
[HKLM\Software\Wow6432Node\Dofus2Beta]
[HKLM\Software\Wow6432Node\Dofus2]
[HKLM\Software\Wow6432Node\EA Games]
[HKLM\Software\Wow6432Node\ESN Launcher-1.116.0]
[HKLM\Software\Wow6432Node\ESN Launcher-1.122.0]
[HKLM\Software\Wow6432Node\ESN Launcher-1.140.0]
[HKLM\Software\Wow6432Node\ESN Launcher]
[HKLM\Software\Wow6432Node\Electronic Arts]
[HKLM\Software\Wow6432Node\Even Balance]
[HKLM\Software\Wow6432Node\Gearbox Software]
[HKLM\Software\Wow6432Node\Google]
[HKLM\Software\Wow6432Node\IM Providers]
[HKLM\Software\Wow6432Node\Intel]
[HKLM\Software\Wow6432Node\Khronos]
[HKLM\Software\Wow6432Node\MSI]
[HKLM\Software\Wow6432Node\Macromedia]
[HKLM\Software\Wow6432Node\Malwarebytes' Anti-Malware (Trial)]
[HKLM\Software\Wow6432Node\Malwarebytes' Anti-Malware]
[HKLM\Software\Wow6432Node\MozillaPlugins]
[HKLM\Software\Wow6432Node\Mozilla]
[HKLM\Software\Wow6432Node\Mumble]
[HKLM\Software\Wow6432Node\ODBC]
[HKLM\Software\Wow6432Node\OpenOffice.org]
[HKLM\Software\Wow6432Node\Origin Games]
[HKLM\Software\Wow6432Node\Policies]
[HKLM\Software\Wow6432Node\Realtek Semiconductor Corp.]
[HKLM\Software\Wow6432Node\Realtek]
[HKLM\Software\Wow6432Node\RegisteredApplications]
[HKLM\Software\Wow6432Node\Safer Networking Limited]
[HKLM\Software\Wow6432Node\Skype]
[HKLM\Software\Wow6432Node\TRENDnet]
[HKLM\Software\Wow6432Node\TeamViewer]
[HKLM\Software\Wow6432Node\Valve]
[HKLM\Software\Wow6432Node\cybelsoft]
[HKLM\Software\Wow6432Node\mozilla.org]
[HKLM\Software\Wow6432Node]
[HKLM\Software\cybelsoft]
~ Scan Softwares in 00mn 00s



---\\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43)
O43 - CFD: 27/02/2012 - 19:50:37 - [0,080] ----D C:\Program Files (x86)\Adobe
O43 - CFD: 06/06/2012 - 00:17:49 - [0,267] ----D C:\Program Files (x86)\allsearch
O43 - CFD: 22/02/2012 - 23:15:37 - [0,208] ----D C:\Program Files (x86)\AMD
O43 - CFD: 23/10/2012 - 16:09:42 - [2,145] ----D C:\Program Files (x86)\AMD APP
O43 - CFD: 20/12/2012 - 17:08:59 - [0,389] ----D C:\Program Files (x86)\AMD AVT
O43 - CFD: 24/09/2012 - 16:20:51 - [2,316] ----D C:\Program Files (x86)\Apple Software Update
O43 - CFD: 02/02/2012 - 10:52:52 - [2,257] ----D C:\Program Files (x86)\ASM104xUSB3
O43 - CFD: 02/02/2012 - 10:57:31 - [64,961] ----D C:\Program Files (x86)\ATI Technologies
O43 - CFD: 17/12/2012 - 11:41:49 - [19,532] ----D C:\Program Files (x86)\Battlelog Web Plugins
O43 - CFD: 24/09/2012 - 16:20:37 - [0,602] ----D C:\Program Files (x86)\Bonjour
O43 - CFD: 19/02/2012 - 23:16:29 - [3,432] ----D C:\Program Files (x86)\Cisco
O43 - CFD: 03/01/2013 - 22:01:39 - [257,752] ----D C:\Program Files (x86)\Common Files
O43 - CFD: 14/02/2012 - 22:34:06 - [0,609] ----D C:\Program Files (x86)\Conduit
O43 - CFD: 19/12/2012 - 12:55:15 - [163,296] ----D C:\Program Files (x86)\Dofus
O43 - CFD: 27/02/2012 - 19:50:39 - [1151,936] ----D C:\Program Files (x86)\Dofus2
O43 - CFD: 30/04/2012 - 14:42:26 - [1086,984] ----D C:\Program Files (x86)\Dofus2Beta
O43 - CFD: 20/10/2012 - 12:05:51 - [756,106] ----D C:\Program Files (x86)\Google
O43 - CFD: 19/02/2012 - 23:16:16 - [18,007] --H-D C:\Program Files (x86)\InstallShield Installation Information
O43 - CFD: 25/09/2012 - 18:22:05 - [28,697] ----D C:\Program Files (x86)\Intel
O43 - CFD: 14/12/2012 - 09:42:41 - [4,933] ----D C:\Program Files (x86)\Internet Explorer
O43 - CFD: 24/09/2012 - 16:32:22 - [142,398] ----D C:\Program Files (x86)\iTunes
O43 - CFD: 28/07/2012 - 16:53:55 - [0,001] ----D C:\Program Files (x86)\ma-config.com
O43 - CFD: 03/01/2013 - 21:09:30 - [12,328] ----D C:\Program Files (x86)\Malwarebytes' Anti-Malware
O43 - CFD: 25/09/2012 - 18:27:39 - [4,367] ----D C:\Program Files (x86)\MetaGeek
O43 - CFD: 05/04/2012 - 18:29:42 - [8,929] ----D C:\Program Files (x86)\Microsoft Games for Windows - LIVE
O43 - CFD: 29/09/2012 - 13:04:50 - [1,182] ----D C:\Program Files (x86)\Microsoft Security Client
O43 - CFD: 11/05/2012 - 22:39:44 - [36,641] ----D C:\Program Files (x86)\Microsoft Silverlight
O43 - CFD: 30/01/2012 - 12:45:09 - [1,745] ----D C:\Program Files (x86)\Microsoft SQL Server Compact Edition
O43 - CFD: 30/01/2012 - 12:51:15 - [0,015] ----D C:\Program Files (x86)\Microsoft.NET
O43 - CFD: 14/07/2009 - 06:32:38 - [0,025] ----D C:\Program Files (x86)\MSBuild
O43 - CFD: 15/02/2012 - 21:45:23 - [0,002] ----D C:\Program Files (x86)\MSI Afterburner
O43 - CFD: 24/03/2012 - 18:21:42 - [31,220] ----D C:\Program Files (x86)\Mumble
O43 - CFD: 15/07/2012 - 14:02:25 - [78,817] ----D C:\Program Files (x86)\NVIDIA Corporation
O43 - CFD: 04/01/2013 - 13:50:09 - [288,773] ----D C:\Program Files (x86)\OpenOffice.org 3
O43 - CFD: 30/11/2012 - 18:49:34 - [124,612] ----D C:\Program Files (x86)\Origin
O43 - CFD: 23/12/2012 - 18:32:08 - [-17,823] ----D C:\Program Files (x86)\Origin Games
O43 - CFD: 27/06/2012 - 18:53:03 - [0] ----D C:\Program Files (x86)\punk buster
O43 - CFD: 02/02/2012 - 10:52:07 - [5,678] ----D C:\Program Files (x86)\Realtek
O43 - CFD: 14/07/2009 - 06:32:38 - [37,349] ----D C:\Program Files (x86)\Reference Assemblies
O43 - CFD: 03/12/2012 - 11:17:04 - [48,317] R---D C:\Program Files (x86)\Skype
O43 - CFD: 03/01/2013 - 21:20:39 - [152,648] ----D C:\Program Files (x86)\Spybot - Search & Destroy 2
O43 - CFD: 04/01/2013 - 23:42:40 - [697,277] ----D C:\Program Files (x86)\Steam
O43 - CFD: 21/03/2012 - 15:47:54 - [21,399] ----D C:\Program Files (x86)\SteelSeries
O43 - CFD: 12/02/2012 - 20:50:42 - [7,413] ----D C:\Program Files (x86)\Teamspeak2_RC2
O43 - CFD: 02/02/2012 - 10:52:36 - [0] --H-D C:\Program Files (x86)\Temp
O43 - CFD: 04/09/2012 - 23:29:46 - [8,479] ----D C:\Program Files (x86)\TimeLineRemove
O43 - CFD: 19/02/2012 - 23:16:22 - [68,616] ----D C:\Program Files (x86)\TRENDnet
O43 - CFD: 14/07/2009 - 05:57:06 - [0] --H-D C:\Program Files (x86)\Uninstall Information
O43 - CFD: 21/11/2010 - 07:19:00 - [0,500] ----D C:\Program Files (x86)\Windows Defender
O43 - CFD: 27/07/2012 - 20:12:05 - [178,078] ----D C:\Program Files (x86)\Windows Live
O43 - CFD: 21/11/2010 - 07:19:00 - [5,895] ----D C:\Program Files (x86)\Windows Mail
O43 - CFD: 21/11/2010 - 07:19:00 - [4,791] ----D C:\Program Files (x86)\Windows Media Player
O43 - CFD: 14/07/2009 - 06:32:38 - [11,632] ----D C:\Program Files (x86)\Windows NT
O43 - CFD: 21/11/2010 - 07:19:00 - [4,213] ----D C:\Program Files (x86)\Windows Photo Viewer
O43 - CFD: 21/11/2010 - 04:31:38 - [0,181] ----D C:\Program Files (x86)\Windows Portable Devices
O43 - CFD: 21/11/2010 - 07:19:00 - [5,717] ----D C:\Program Files (x86)\Windows Sidebar
O43 - CFD: 31/07/2012 - 00:45:38 - [49,352] ----D C:\Program Files (x86)\Wolfenstein - Enemy Territory
O43 - CFD: 04/01/2013 - 23:48:15 - [10,094] ----D C:\Program Files (x86)\ZHPDiag
O43 - CFD: 10/11/2012 - 10:17:36 - [43,875] ----D C:\Program Files (x86)\Common Files\Adobe AIR
O43 - CFD: 24/09/2012 - 16:32:01 - [105,882] ----D C:\Program Files (x86)\Common Files\Apple
O43 - CFD: 02/02/2012 - 10:57:32 - [2,769] ----D C:\Program Files (x86)\Common Files\ATI Technologies
O43 - CFD: 20/03/2012 - 18:59:03 - [0,171] ----D C:\Program Files (x86)\Common Files\AVSMedia
O43 - CFD: 23/12/2012 - 19:52:22 - [4,751] --H-D C:\Program Files (x86)\Common Files\EAInstaller
O43 - CFD: 02/02/2012 - 10:52:03 - [2,009] ----D C:\Program Files (x86)\Common Files\InstallShield
O43 - CFD: 02/02/2012 - 11:02:01 - [0,007] ----D C:\Program Files (x86)\Common Files\Intel Corporation
O43 - CFD: 17/02/2012 - 13:51:41 - [20,982] ----D C:\Program Files (x86)\Common Files\microsoft shared
O43 - CFD: 14/07/2009 - 04:20:08 - [0,003] ----D C:\Program Files (x86)\Common Files\Services
O43 - CFD: 03/12/2012 - 11:17:03 - [2,056] ----D C:\Program Files (x86)\Common Files\Skype
O43 - CFD: 14/07/2009 - 04:20:08 - [39,200] ----D C:\Program Files (x86)\Common Files\SpeechEngines
O43 - CFD: 20/12/2012 - 16:38:11 - [0,517] ----D C:\Program Files (x86)\Common Files\Steam
O43 - CFD: 30/01/2012 - 13:09:21 - [9,767] ----D C:\Program Files (x86)\Common Files\System
O43 - CFD: 30/01/2012 - 12:44:00 - [0] ----D C:\Program Files (x86)\Common Files\Windows Live
O43 - CFD: 15/07/2012 - 14:02:09 - [25,762] ----D C:\Program Files (x86)\Common Files\Wise Installation Wizard
O43 - CFD: 24/09/2012 - 16:32:25 - [2,774] ----D C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
O43 - CFD: 20/12/2012 - 17:11:37 - [0] ----D C:\ProgramData\Adobe
O43 - CFD: 20/12/2012 - 17:09:00 - [0,000] ----D C:\ProgramData\AMD
O43 - CFD: 07/02/2012 - 19:24:16 - [35,799] ----D C:\ProgramData\Apple
O43 - CFD: 07/02/2012 - 19:24:43 - [49,870] ----D C:\ProgramData\Apple Computer
O43 - CFD: 14/07/2009 - 06:08:56 - [0] --H-D C:\ProgramData\Application Data
O43 - CFD: 20/12/2012 - 17:09:31 - [0,000] ----D C:\ProgramData\ATI
O43 - CFD: 20/03/2012 - 18:47:10 - [0] ----D C:\ProgramData\AVS4YOU
O43 - CFD: 06/02/2012 - 13:03:30 - [0] --H-D C:\ProgramData\Bureau
O43 - CFD: 14/07/2009 - 06:08:56 - [0] --H-D C:\ProgramData\Desktop
O43 - CFD: 14/07/2009 - 06:08:56 - [0] --H-D C:\ProgramData\Documents
O43 - CFD: 14/02/2012 - 22:34:46 - [0,001] ----D C:\ProgramData\DriverGenius
O43 - CFD: 06/02/2012 - 22:47:43 - [0] ----D C:\ProgramData\EA Core
O43 - CFD: 14/02/2012 - 17:06:18 - [0,001] ----D C:\ProgramData\EA Logs
O43 - CFD: 06/02/2012 - 22:47:46 - [7,644] ----D C:\ProgramData\Electronic Arts
O43 - CFD: 06/02/2012 - 13:03:30 - [0] --H-D C:\ProgramData\Favoris
O43 - CFD: 14/07/2009 - 06:08:56 - [0] --H-D C:\ProgramData\Favorites
O43 - CFD: 20/10/2012 - 12:05:54 - [0,012] ----D C:\ProgramData\Google
O43 - CFD: 20/12/2012 - 16:58:59 - [1,311] ----D C:\ProgramData\ma-config.com
O43 - CFD: 19/02/2012 - 15:15:14 - [16,757] ----D C:\ProgramData\Malwarebytes
O43 - CFD: 06/02/2012 - 13:03:30 - [0] --H-D C:\ProgramData\Menu Démarrer
O43 - CFD: 03/01/2013 - 21:20:38 - [58,065] -S--D C:\ProgramData\Microsoft
O43 - CFD: 06/02/2012 - 13:03:30 - [0] --H-D C:\ProgramData\Modèles
O43 - CFD: 30/11/2012 - 18:49:46 - [10,688] ----D C:\ProgramData\Origin
O43 - CFD: 17/04/2012 - 20:00:18 - [0,001] ----D C:\ProgramData\Ralink
O43 - CFD: 03/12/2012 - 11:17:06 - [51,137] ----D C:\ProgramData\Skype
O43 - CFD: 03/01/2013 - 21:23:32 - [0,037] ----D C:\ProgramData\Spybot - Search & Destroy
O43 - CFD: 14/07/2009 - 06:08:56 - [0] --H-D C:\ProgramData\Start Menu
O43 - CFD: 14/07/2009 - 06:08:56 - [0] --H-D C:\ProgramData\Templates
O43 - CFD: 30/12/2012 - 00:55:09 - [1,453] ----D C:\ProgramData\TrackMania
O43 - CFD: 19/02/2012 - 23:16:31 - [4,322] ----D C:\ProgramData\TRENDnet Driver
O43 - CFD: 07/02/2012 - 19:24:55 - [0] ----D C:\ProgramData\{93E26451-CD9A-43A5-A2FA-C42392EA4001}
O43 - CFD: 27/02/2012 - 19:50:37 - [6,330] ----D C:\Users\Marwan\AppData\Roaming\Adobe
O43 - CFD: 11/12/2012 - 15:26:18 - [0,006] ----D C:\Users\Marwan\AppData\Roaming\AnkamaCertificates
O43 - CFD: 27/02/2012 - 20:13:47 - [0,005] ----D C:\Users\Marwan\AppData\Roaming\app
O43 - CFD: 07/02/2012 - 19:54:56 - [0,828] ----D C:\Users\Marwan\AppData\Roaming\Apple Computer
O43 - CFD: 06/02/2012 - 13:04:22 - [0] ----D C:\Users\Marwan\AppData\Roaming\ATI
O43 - CFD: 20/03/2012 - 18:47:06 - [6,436] ----D C:\Users\Marwan\AppData\Roaming\AVS4YOU
O43 - CFD: 31/12/2012 - 00:51:17 - [3,458] ----D C:\Users\Marwan\AppData\Roaming\Bioshock
O43 - CFD: 27/02/2012 - 20:13:46 - [0] ----D C:\Users\Marwan\AppData\Roaming\Dofus-2.C9ECCBDBA4E09304DEEFB106465BC17F6D6749B9.1
O43 - CFD: 27/02/2012 - 20:33:58 - [0] ----D C:\Users\Marwan\AppData\Roaming\Dofus-3.C9ECCBDBA4E09304DEEFB106465BC17F6D6749B9.1
O43 - CFD: 27/02/2012 - 20:59:25 - [0] ----D C:\Users\Marwan\AppData\Roaming\Dofus-4.C9ECCBDBA4E09304DEEFB106465BC17F6D6749B9.1
O43 - CFD: 12/03/2012 - 10:07:52 - [0] ----D C:\Users\Marwan\AppData\Roaming\Dofus-5.C9ECCBDBA4E09304DEEFB106465BC17F6D6749B9.1
O43 - CFD: 27/02/2012 - 20:33:12 - [0] ----D C:\Users\Marwan\AppData\Roaming\Dofus.C9ECCBDBA4E09304DEEFB106465BC17F6D6749B9.1
O43 - CFD: 04/01/2013 - 18:08:06 - [1,700] ----D C:\Users\Marwan\AppData\Roaming\Dofus2
O43 - CFD: 16/12/2012 - 00:27:28 - [2,543] ----D C:\Users\Marwan\AppData\Roaming\Dofus2Beta
O43 - CFD: 30/04/2012 - 14:54:25 - [0] ----D C:\Users\Marwan\AppData\Roaming\DofusBeta-2.C9ECCBDBA4E09304DEEFB106465BC17F6D6749B9.1
O43 - CFD: 30/04/2012 - 15:53:21 - [0] ----D C:\Users\Marwan\AppData\Roaming\DofusBeta-3.C9ECCBDBA4E09304DEEFB106465BC17F6D6749B9.1
O43 - CFD: 30/04/2012 - 15:31:17 - [0] ----D C:\Users\Marwan\AppData\Roaming\DofusBeta.C9ECCBDBA4E09304DEEFB106465BC17F6D6749B9.1
O43 - CFD: 08/06/2012 - 19:02:10 - [0] ----D C:\Users\Marwan\AppData\Roaming\DofusLocal
O43 - CFD: 14/07/2012 - 18:58:49 - [0] ----D C:\Users\Marwan\AppData\Roaming\DofusLocal-2
O43 - CFD: 23/11/2012 - 22:30:58 - [0] ----D C:\Users\Marwan\AppData\Roaming\DofusTesting
O43 - CFD: 23/11/2012 - 15:48:18 - [0] ----D C:\Users\Marwan\AppData\Roaming\DofusTesting-2
O43 - CFD: 25/11/2012 - 01:32:43 - [0] ----D C:\Users\Marwan\AppData\Roaming\DofusTesting-3
O43 - CFD: 11/12/2012 - 15:39:46 - [0] ----D C:\Users\Marwan\AppData\Roaming\DofusTesting-4
O43 - CFD: 11/12/2012 - 17:10:09 - [0] ----D C:\Users\Marwan\AppData\Roaming\DofusTesting-5
O43 - CFD: 06/02/2012 - 13:03:43 - [0] ----D C:\Users\Marwan\AppData\Roaming\Identities
O43 - CFD: 28/07/2012 - 17:15:28 - [0] ----D C:\Users\Marwan\AppData\Roaming\InstallShield
O43 - CFD: 06/02/2012 - 13:04:18 - [0,001] ----D C:\Users\Marwan\AppData\Roaming\Intel Corporation
O43 - CFD: 06/02/2012 - 16:18:41 - [14,585] ----D C:\Users\Marwan\AppData\Roaming\Macromedia
O43 - CFD: 19/02/2012 - 15:15:56 - [0,114] ----D C:\Users\Marwan\AppData\Roaming\Malwarebytes
O43 - CFD: 21/11/2010 - 07:29:25 - [0] ----D C:\Users\Marwan\AppData\Roaming\Media Center Programs
O43 - CFD: 19/10/2012 - 19:10:02 - [2,084] -S--D C:\Users\Marwan\AppData\Roaming\Microsoft
O43 - CFD: 27/12/2012 - 13:02:01 - [1,988] ----D C:\Users\Marwan\AppData\Roaming\Mumble
O43 - CFD: 04/01/2013 - 13:50:55 - [12,364] ----D C:\Users\Marwan\AppData\Roaming\OpenOffice.org
O43 - CFD: 30/11/2012 - 18:49:39 - [0,111] ----D C:\Users\Marwan\AppData\Roaming\Origin
O43 - CFD: 27/02/2012 - 20:13:47 - [0] ----D C:\Users\Marwan\AppData\Roaming\Reg.C9ECCBDBA4E09304DEEFB106465BC17F6D6749B9.1
O43 - CFD: 30/04/2012 - 14:54:26 - [0] ----D C:\Users\Marwan\AppData\Roaming\RegBeta.C9ECCBDBA4E09304DEEFB106465BC17F6D6749B9.1
O43 - CFD: 02/01/2013 - 19:22:00 - [9,428] ----D C:\Users\Marwan\AppData\Roaming\Skype
O43 - CFD: 08/02/2012 - 14:21:51 - [0,000] ----D C:\Users\Marwan\AppData\Roaming\SteelSeries Xai
O43 - CFD: 12/02/2012 - 20:50:42 - [0,014] ----D C:\Users\Marwan\AppData\Roaming\teamspeak2
O43 - CFD: 14/02/2012 - 20:26:22 - [0,528] ----D C:\Users\Marwan\AppData\Roaming\TeamViewer
O43 - CFD: 04/01/2013 - 22:50:48 - [1,201] ----D C:\Users\Marwan\AppData\Roaming\TS3Client
O43 - CFD: 13/12/2012 - 21:00:40 - [0,003] ----D C:\Users\Marwan\AppData\Local\4A Games
O43 - CFD: 27/02/2012 - 19:50:34 - [0,061] ----D C:\Users\Marwan\AppData\Local\Adobe
O43 - CFD: 07/02/2012 - 19:24:21 - [0] ----D C:\Users\Marwan\AppData\Local\Apple
O43 - CFD: 07/02/2012 - 19:24:56 - [21,880] ----D C:\Users\Marwan\AppData\Local\Apple Computer
O43 - CFD: 06/02/2012 - 13:03:35 - [0] ----D C:\Users\Marwan\AppData\Local\Application Data
O43 - CFD: 18/06/2012 - 15:40:11 - [2,235] ----D C:\Users\Marwan\AppData\Local\Apps
O43 - CFD: 06/02/2012 - 13:04:22 - [0,063] ----D C:\Users\Marwan\AppData\Local\ATI
O43 - CFD: 20/03/2012 - 18:59:49 - [0] ----D C:\Users\Marwan\AppData\Local\Conduit
O43 - CFD: 09/10/2012 - 14:05:48 - [0] ----D C:\Users\Marwan\AppData\Local\Deployment
O43 - CFD: 03/01/2013 - 14:14:24 - [0] ----D C:\Users\Marwan\AppData\Local\Diagnostics
O43 - CFD: 20/11/2012 - 17:20:01 - [0] ----D C:\Users\Marwan\AppData\Local\ESN
O43 - CFD: 10/02/2012 - 15:27:33 - [0,015] ----D C:\Users\Marwan\AppData\Local\ESN Sonar
O43 - CFD: 09/10/2012 - 14:06:44 - [253,565] ----D C:\Users\Marwan\AppData\Local\Google
O43 - CFD: 06/02/2012 - 13:03:35 - [0] ----D C:\Users\Marwan\AppData\Local\Historique
O43 - CFD: 25/09/2012 - 18:28:19 - [0,002] ----D C:\Users\Marwan\AppData\Local\MetaGeek,_LLC
O43 - CFD: 31/10/2012 - 18:42:04 - [167,128] ----D C:\Users\Marwan\AppData\Local\Microsoft
O43 - CFD: 20/03/2012 - 20:41:32 - [0] ----D C:\Users\Marwan\AppData\Local\Mozilla
O43 - CFD: 06/02/2012 - 17:45:32 - [0] ----D C:\Users\Marwan\AppData\Local\Mumble
O43 - CFD: 07/02/2012 - 16:13:43 - [16,390] ----D C:\Users\Marwan\AppData\Local\Origin
O43 - CFD: 15/07/2012 - 14:04:00 - [0,009] ----D C:\Users\Marwan\AppData\Local\PAYDAY
O43 - CFD: 03/01/2013 - 21:09:18 - [0] ----D C:\Users\Marwan\AppData\Local\Programs
O43 - CFD: 24/10/2012 - 22:59:22 - [22,757] ----D C:\Users\Marwan\AppData\Local\PunkBuster
O43 - CFD: 02/01/2013 - 21:31:03 - [0] ----D C:\Users\Marwan\AppData\Local\SCE
O43 - CFD: 04/01/2013 - 23:47:29 - [14,350] ----D C:\Users\Marwan\AppData\Local\Temp
O43 - CFD: 06/02/2012 - 13:03:35 - [0] ----D C:\Users\Marwan\AppData\Local\Temporary Internet Files
O43 - CFD: 30/12/2012 - 00:55:53 - [100,119] ----D C:\Users\Marwan\AppData\Local\VirtualStore
O43 - CFD: 18/08/2012 - 15:04:18 - [0,156] ----D C:\Users\Marwan\AppData\Local\Windows Live
O43 - CFD: 24/03/2012 - 21:08:41 - [0] ----D C:\Users\Marwan\AppData\Local\WMTools Downloaded Files
O43 - CFD: 25/07/2012 - 10:25:00 - [0] ----D C:\Users\Marwan\AppData\Local\{007B214D-BE05-4D0A-8D05-EECF2EB832DF}
O43 - CFD: 28/05/2012 - 10:22:44 - [0] ----D C:\Users\Marwan\AppData\Local\{0181221C-E637-418C-85F8-03B6187FB3C3}
O43 - CFD: 30/03/2012 - 11:53:06 - [0] ----D C:\Users\Marwan\AppData\Local\{01AF4BDC-35FE-4C4B-9736-EEEAAD363124}
O43 - CFD: 21/02/2012 - 09:29:50 - [0] ----D C:\Users\Marwan\AppData\Local\{01B06770-DEC7-4D02-86B6-DD0A3FDFA042}
O43 - CFD: 28/05/2012 - 13:33:08 - [0] ----D C:\Users\Marwan\AppData\Local\{01FD91D3-8059-4FB0-B00C-01D207731B2C}
O43 - CFD: 09/03/2012 - 13:59:01 - [0] ----D C:\Users\Marwan\AppData\Local\{02095849-2432-4CE7-8E55-87127557CEB2}
O43 - CFD: 16/11/2012 - 14:14:21 - [0] ----D C:\Users\Marwan\AppData\Local\{0260F292-D238-49DD-910F-22F5139E2D3F}
O43 - CFD: 13/06/2012 - 13:39:35 - [0] ----D C:\Users\Marwan\AppData\Local\{0264DA93-67B1-41FE-AEB9-8DC172909FD8}
O43 - CFD: 17/08/2012 - 13:41:16 - [0] ----D C:\Users\Marwan\AppData\Local\{02B4A006-C1E6-4758-AF6C-6E1908E230DE}
O43 - CFD: 27/06/2012 - 10:32:38 - [0] ----D C:\Users\Marwan\AppData\Local\{02CFF6C8-DD07-42EA-A4D5-DB02A8F4E42A}
O43 - CFD: 26/05/2012 - 16:28:24 - [0] ----D C:\Users\Marwan\AppData\Local\{03221962-03FF-4FE3-8E26-27A6917C28EB}
O43 - CFD: 13/06/2012 - 10:26:38 - [0] ----D C:\Users\Marwan\AppData\Local\{03C196D0-0D8B-4C25-ADC1-A4BE79006B67}
O43 - CFD: 28/05/2012 - 10:22:54 - [0] ----D C:\Users\Marwan\AppData\Local\{0465157B-70FB-47DA-806F-9171C7BF8583}
O43 - CFD: 20/02/2012 - 10:52:33 - [0] ----D C:\Users\Marwan\AppData\Local\{05AC6425-9861-4AC8-826A-1E9C23056DB1}
O43 - CFD: 08/05/2012 - 20:30:55 - [0] ----D C:\Users\Marwan\AppData\Local\{05E6B7D7-04C6-4593-B89C-801F6912C1A4}
O43 - CFD: 12/09/2012 - 13:05:08 - [0] ----D C:\Users\Marwan\AppData\Local\{05F51F4A-6BA3-4C6B-90A8-4EC9B6215F99}
O43 - CFD: 06/04/2012 - 17:23:54 - [0] ----D C:\Users\Marwan\AppData\Local\{0624B499-B4D5-4E35-B4C2-F20A526C94C5}
O43 - CFD: 27/07/2012 - 20:19:42 - [0] ----D C:\Users\Marwan\AppData\Local\{06F990AA-71CC-4599-BDB9-778CB6FF0AD8}
O43 - CFD: 05/06/2012 - 16:16:40 - [0] ----D C:\Users\Marwan\AppData\Local\{078825AE-0D4E-40C4-A4A2-BCB004D94D71}
O43 - CFD: 10/04/2012 - 12:51:57 - [0] ----D C:\Users\Marwan\AppData\Local\{07A6A002-22ED-4EC3-A85A-665DA408FAA0}
O43 - CFD: 16/07/2012 - 10:50:20 - [0] ----D C:\Users\Marwan\AppData\Local\{0801668D-A40C-4758-91EE-B1F703E82CF7}
O43 - CFD: 09/06/2012 - 17:16:35 - [0] ----D C:\Users\Marwan\AppData\Local\{081760A1-7C3F-4D77-9BCF-DC7A795672DF}
O43 - CFD: 28/06/2012 - 15:57:33 - [0] ----D C:\Users\Marwan\AppData\Local\{087ED5F3-B347-4B51-BCB5-0EDF6CDFC0B6}
O43 - CFD: 15/07/2012 - 14:08:02 - [0] ----D C:\Users\Marwan\AppData\Local\{08ED47FC-0037-40E0-8260-A95C72CB9332}
O43 - CFD: 13/10/2012 - 15:53:34 - [0] ----D C:\Users\Marwan\AppData\Local\{0984E582-EA3D-4BD5-9CFF-6E9F7AA5128A}
O43 - CFD: 01/10/2012 - 14:49:47 - [0] ----D C:\Users\Marwan\AppData\Local\{0994A728-C833-47C3-868A-09327FD287AA}
O43 - CFD: 10/03/2012 - 12:51:51 - [0] ----D C:\Users\Marwan\AppData\Local\{09D9A574-9674-4DFD-ABDB-3AB896156CF1}
O43 - CFD: 03/08/2012 - 12:05:29 - [0] ----D C:\Users\Marwan\AppData\Local\{0A3C281B-3B7D-465A-BB09-A06AB856F5B6}
O43 - CFD: 08/05/2012 - 20:30:55 - [0] ----D C:\Users\Marwan\AppData\Local\{0AA0CE56-355F-419A-ADD7-E834B46C8F24}
O43 - CFD: 18/09/2012 - 06:14:13 - [0] ----D C:\Users\Marwan\AppData\Local\{0ADA9DAD-7C28-4D5A-B3DB-CD0AE82F2BBA}
O43 - CFD: 08/10/2012 - 10:19:59 - [0] ----D C:\Users\Marwan\AppData\Local\{0B58F434-F990-4B4D-A5FB-3EDD63FCB2CA}
O43 - CFD: 25/05/2012 - 12:44:10 - [0] ----D C:\Users\Marwan\AppData\Local\{0BC2D6BF-85C2-4E5C-B07B-D98FB3646F29}
O43 - CFD: 13/05/2012 - 16:45:33 - [0] ----D C:\Users\Marwan\AppData\Local\{0C8134BC-E5E2-49B1-88A8-860B6D2EF78F}
O43 - CFD: 26/07/2012 - 23:43:29 - [0] ----D C:\Users\Marwan\AppData\Local\{0CEF3611-67F0-4871-8D87-28F78AA5072B}
O43 - CFD: 27/07/2012 - 12:05:41 - [0] ----D C:\Users\Marwan\AppData\Local\{0D209854-1BEB-44B0-9293-37BDB1F57CE4}
O43 - CFD: 20/07/2012 - 11:07:50 - [0] ----D C:\Users\Marwan\AppData\Local\{0D41BA53-5BF4-41B9-9283-68194546923C}
O43 - CFD: 24/07/2012 - 12:06:24 - [0] ----D C:\Users\Marwan\AppData\Local\{0D83AAC7-FEC2-4B23-AC81-2DC9FCABEE90}
O43 - CFD: 15/06/2012 - 11:40:42 - [0] ----D C:\Users\Marwan\AppData\Local\{0D87DFA5-3B9B-46DF-8AD4-CE7831061251}
O43 - CFD: 14/12/2012 - 09:45:36 - [0] ----D C:\Users\Marwan\AppData\Local\{0E120D5E-726B-4322-8F9B-2699282FAEF4}
O43 - CFD: 18/07/2012 - 21:39:27 - [0] ----D C:\Users\Marwan\AppData\Local\{0E8CBF05-C069-4D5A-A8FE-7FFEEE619B45}
O43 - CFD: 27/07/2012 - 18:55:00 - [0] ----D C:\Users\Marwan\AppData\Local\{0EB0EB7D-921B-47E7-8FC3-2492663A6DC4}
O43 - CFD: 26/06/2012 - 14:18:16 - [0] ----D C:\Users\Marwan\AppData\Local\{0EBDEF70-F4A0-4311-8E60-93EE7C67C39A}
O43 - CFD: 23/06/2012 - 11:53:05 - [0] ----D C:\Users\Marwan\AppData\Local\{0F752130-4895-46F2-96AE-55D56CF3B9DA}
O43 - CFD: 26/04/2012 - 15:04:58 - [0] ----D C:\Users\Marwan\AppData\Local\{0F7AF95E-109B-407F-8AF5-EDFFE101D7A4}
O43 - CFD: 17/02/2012 - 16:35:44 - [0] ----D C:\Users\Marwan\AppData\Local\{0FEE4879-0C95-4093-A3A2-91F32DE792CD}
O43 - CFD: 05/06/2012 - 21:56:32 - [0] ----D C:\Users\Marwan\AppData\Local\{10005563-5FA3-49CD-94C8-4FAB9E3ABF66}
O43 - CFD: 05/09/2012 - 11:13:41 - [0] ----D C:\Users\Marwan\AppData\Local\{10A90B74-5B24-421D-A7A5-9616C1A58497}
O43 - CFD: 13/05/2012 - 10:31:20 - [0] ----D C:\Users\Marwan\AppData\Local\{1354CD13-EB9C-46B2-B656-FD24312FD9CF}
O43 - CFD: 02/03/2012 - 11:13:17 - [0] ----D C:\Users\Marwan\AppData\Local\{13EC690D-3DF9-495E-B771-A88C79A2F1F1}
O43 - CFD: 09/04/2012 - 11:18:15 - [0] ----D C:\Users\Marwan\AppData\Local\{14D14349-F7A2-4975-BC91-02E0DF9EC83D}
O43 - CFD: 17/04/2012 - 14:34:47 - [0] ----D C:\Users\Marwan\AppData\Local\{16E0594C-4CED-438D-BA9F-BFDE9EB0A870}
O43 - CFD: 30/06/2012 - 11:12:22 - [0] ----D C:\Users\Marwan\AppData\Local\{1721074F-8109-4831-9DA5-7DD798A350EB}
O43 - CFD: 04/03/2012 - 12:12:44 - [0] ----D C:\Users\Marwan\AppData\Local\{172E87D2-45CC-4855-AFA0-57400FFC0006}
O43 - CFD: 21/06/2012 - 15:39:00 - [0] ----D C:\Users\Marwan\AppData\Local\{173FC887-D5D5-4E0E-96F0-B484C6887280}
O43 - CFD: 04/06/2012 - 09:05:40 - [0] ----D C:\Users\Marwan\AppData\Local\{1812167D-551F-4D96-8146-C70EDDA53D79}
O43 - CFD: 24/02/2012 - 15:48:07 - [0] ----D C:\Users\Marwan\AppData\Local\{188B82A5-C471-4DD5-B902-23FF61D277E0}
O43 - CFD: 18/05/2012 - 10:07:49 - [0] ----D C:\Users\Marwan\AppData\Local\{18B988BC-63D7-4491-AF0F-07E73460075C}
O43 - CFD: 31/03/2012 - 11:27:54 - [0] ----D C:\Users\Marwan\AppData\Local\{18C3E936-8AE3-4685-BCF8-685507CA6ED0}
O43 - CFD: 26/05/2012 - 11:06:59 - [0] ----D C:\Users\Marwan\AppData\Local\{19CA113F-7CC8-495A-A46C-C0BCFE2B3652}
O43 - CFD: 28/07/2012 - 12:28:00 - [0] ----D C:\Users\Marwan\AppData\Local\{1A321527-09C4-42AB-8285-B299300023EF}
O43 - CFD: 19/11/2012 - 16:23:14 - [0] ----D C:\Users\Marwan\AppData\Local\{1ADFA1E5-0165-4078-B7B5-551C2984E3A4}
O43 - CFD: 29/05/2012 - 14:37:13 - [0] ----D C:\Users\Marwan\AppData\Local\{1B13D934-6E80-4DE5-AFB2-5DBEA8F58940}
O43 - CFD: 23/03/2012 - 22:52:28 - [0] ----D C:\Users\Marwan\AppData\Local\{1BE67835-7571-457C-B2B9-9422F279DB31}
O43 - CFD: 07/05/2012 - 14:16:08 - [0] ----D C:\Users\Marwan\AppData\Local\{1C0A1E24-C8D6-43B4-9FCB-AC40BE97097B}
O43 - CFD: 29/04/2012 - 21:32:06 - [0] ----D C:\Users\Marwan\AppData\Local\{1C0F1D34-194C-47C4-AB80-C400DF6313FD}
O43 - CFD: 26/02/2012 - 13:14:52 - [0] ----D C:\Users\Marwan\AppData\Local\{1C24116F-ED4D-489A-B246-A0CCD4BE34C6}
O43 - CFD: 05/06/2012 - 16:16:29 - [0] ----D C:\Users\Marwan\AppData\Local\{1C3D3EEE-22F2-4A72-AC99-EEF651CFB259}
O43 - CFD: 17/09/2012 - 10:53:29 - [0] ----D C:\Users\Marwan\AppData\Local\{1C9AA1A7-3AEE-4FC5-B3DD-47AB60EE3B21}
O43 - CFD: 22/09/2012 - 12:07:46 - [0] ----D C:\Users\Marwan\AppData\Local\{1D061BB3-8DF7-4BD7-8F32-980638B68E2E}
O43 - CFD: 21/09/2012 - 17:06:44 - [0] ----D C:\Users\Marwan\AppData\Local\{1D2B06A8-C2A4-4E6F-AD96-47665BD7A42F}
O43 - CFD: 23/03/2012 - 22:52:50 - [0] ----D C:\Users\Marwan\AppData\Local\{1E149788-14B6-4DED-B317-A6AF2FAB4438}
O43 - CFD: 01/01/2013 - 14:17:49 - [0] ----D C:\Users\Marwan\AppData\Local\{1ED69444-9259-4090-9A5B-A17EE554B1CC}
O43 - CFD: 17/03/2012 - 08:26:37 - [0] ----D C:\Users\Marwan\AppData\Local\{1F6095EF-7567-4759-8914-E80773636144}
O43 - CFD: 23/07/2012 - 11:41:11 - [0] ----D C:\Users\Marwan\AppData\Local\{1F8B1477-7CD1-45C1-96C9-F9CC0422931D}
O43 - CFD: 18/11/2012 - 11:13:56 - [0] ----D C:\Users\Marwan\AppData\Local\{1FBDBB99-D309-4B48-B818-544A5526D0A8}
O43 - CFD: 06/06/2012 - 19:54:27 - [0] ----D C:\Users\Marwan\AppData\Local\{20664CD8-6407-4A1A-9206-C00881B20CB8}
O43 - CFD: 14/11/2012 - 13:39:55 - [0] ----D C:\Users\Marwan\AppData\Local\{20D592E8-2FF7-4819-ADC8-E8204118058F}
O43 - CFD: 24/02/2012 - 15:48:26 - [0] ----D C:\Users\Marwan\AppData\Local\{21B78B29-487A-431C-B1F9-361341D403DF}
O43 - CFD: 15/11/2012 - 16:42:28 - [0] ----D C:\Users\Marwan\AppData\Local\{21D8FD15-3D61-42A9-A46C-6C30E3CEA68D}
O43 - CFD: 12/04/2012 - 09:27:21 - [0] ----D C:\Users\Marwan\AppData\Local\{21D9EA83-8881-4BB4-9A49-6FB98B676EAE}
O43 - CFD: 14/05/2012 - 08:02:46 - [0] ----D C:\Users\Marwan\AppData\Local\{221AB754-765B-492B-825D-26CEB7CFF1B4}
O43 - CFD: 17/08/2012 - 13:41:27 - [0] ----D C:\Users\Marwan\AppData\Local\{2253E64B-A363-4E10-AF47-58B3C0AB1F21}
O43 - CFD: 20/03/2012 - 14:11:37 - [0] ----D C:\Users\Marwan\AppData\Local\{2277A771-3BC3-4585-8796-7F27CC58FDAB}
O43 - CFD: 13/03/2012 - 17:14:55 - [0] ----D C:\Users\Marwan\AppData\Local\{22D38AEF-8AD1-4327-A0F2-9DB0E9AF9868}
O43 - CFD: 27/06/2012 - 10:55:05 - [0] ----D C:\Users\Marwan\AppData\Local\{2428C1EE-A460-4BA5-91F3-05294C07C572}
O43 - CFD: 27/03/2012 - 14:59:12 - [0] ----D C:\Users\Marwan\AppData\Local\{2492B6BA-5266-4F71-828E-DA95CFCA3EDF}
O43 - CFD: 26/03/2012 - 14:21:45 - [0] ----D C:\Users\Marwan\AppData\Local\{24DECC89-D98D-4C96-9180-84C0E2748353}
O43 - CFD: 26/09/2012 - 15:41:38 - [0] ----D C:\Users\Marwan\AppData\Local\{250861EE-C764-4449-B3A9-F51EBC17D3F5}
O43 - CFD: 29/07/2012 - 11:58:25 - [0] ----D C:\Users\Marwan\AppData\Local\{252FA7E4-10CF-4665-B6CD-A8617D2FE0B0}
O43 - CFD: 27/12/2012 - 12:20:06 - [0] ----D C:\Users\Marwan\AppData\Local\{254088F5-5733-4856-B394-C2CD429ABBA2}
O43 - CFD: 29/02/2012 - 12:57:47 - [0] ----D C:\Users\Marwan\AppData\Local\{2563CB18-3108-433F-9D57-9CF9608D3070}
O43 - CFD: 20/11/2012 - 20:16:39 - [0] ----D C:\Users\Marwan\AppData\Local\{257FEC3C-ACB8-486C-B850-F4788B0026FA}
O43 - CFD: 25/06/2012 - 15:24:56 - [0] ----D C:\Users\Marwan\AppData\Local\{25CB6648-41F1-4A79-94A7-84F9DC2779F3}
O43 - CFD: 26/04/2012 - 11:16:32 - [0] ----D C:\Users\Marwan\AppData\Local\{261FC123-FC8E-4FE5-810B-9C775274832B}
O43 - CFD: 20/05/2012 - 20:21:38 - [0] ----D C:\Users\Marwan\AppData\Local\{265A61C6-66BF-45CA-A323-02F74F395A74}
O43 - CFD: 24/06/2012 - 15:13:25 - [0] ----D C:\Users\Marwan\AppData\Local\{26A128BD-99A9-429F-91FF-343B3309E1BF}
O43 - CFD: 20/10/2012 - 19:51:43 - [0] ----D C:\Users\Marwan\AppData\Local\{26A3BBC1-0D99-44F6-B283-061372092482}
O43 - CFD: 29/03/2012 - 11:32:01 - [0] ----D C:\Users\Marwan\AppData\Local\{26C9A0D9-F45E-419B-AAEE-8FD781980596}
O43 - CFD: 14/07/2012 - 16:01:29 - [0] ----D C:\Users\Marwan\AppData\Local\{26C9ED4B-0CBE-4D32-9EA8-B43701FA2F49}
O43 - CFD: 17/12/2012 - 22:24:20 - [0] ----D C:\Users\Marwan\AppData\Local\{26F51A4D-2514-4F85-B457-9AFFCA23D06C}
O43 - CFD: 20/11/2012 - 16:49:32 - [0] ----D C:\Users\Marwan\AppData\Local\{2716468B-5EB2-493B-927D-59ACF78410E8}
O43 - CFD: 22/05/2012 - 14:42:15 - [0] ----D C:\Users\Marwan\AppData\Local\{2724CD61-2A9A-46C6-95D1-163A2F8A55FD}
O43 - CFD: 28/06/2012 - 15:57:44 - [0] ----D C:\Users\Marwan\AppData\Local\{275E1EBB-F420-4FC9-937E-35E9F380F4DE}
O43 - CFD: 25/06/2012 - 10:10:07 - [0] ----D C:\Users\Marwan\AppData\Local\{2783B793-889E-4136-8B71-A1A1795C7D2B}
O43 - CFD: 22/06/2012 - 22:21:59 - [0] ----D C:\Users\Marwan\AppData\Local\{278B9231-CD46-4ADF-B5C6-6A1AE50B3412}
O43 - CFD: 06/03/2012 - 15:43:32 - [0] ----D C:\Users\Marwan\AppData\Local\{27DCF050-6D4F-40EC-9EDE-314D953B0B55}
O43 - CFD: 24/05/2012 - 19:27:37 - [0] ----D C:\Users\Marwan\AppData\Local\{28580E36-4F36-4681-9783-7B30AF475E47}
O43 - CFD: 29/08/2012 - 09:24:36 - [0] ----D C:\Users\Marwan\AppData\Local\{285868BF-111A-4A4B-B78A-A29DA441D6CF}
O43 - CFD: 28/02/2012 - 13:08:28 - [0] ----D C:\Users\Marwan\AppData\Local\{290830B1-DBAF-4810-B4EE-1E4F900E86E9}
O43 - CFD: 19/04/2012 - 11:37:01 - [0] ----D C:\Users\Marwan\AppData\Local\{2935E3B1-1829-4373-B164-0CE256765A1A}
O43 - CFD: 08/11/2012 - 10:14:52 - [0] ----D C:\Users\Marwan\AppData\Local\{29390CF7-0A5E-4352-BA46-6D50B553DE61}
O43 - CFD: 17/04/2012 - 09:06:00 - [0] ----D C:\Users\Marwan\AppData\Local\{2B393FEF-9C72-44C6-8F59-55C87F7D7361}
O43 - CFD: 04/04/2012 - 10:05:44 - [0] ----D C:\Users\Marwan\AppData\Local\{2B8F092B-03A7-4636-8B9A-5B113D4F255F}
O43 - CFD: 09/12/2012 - 00:47:48 - [0] ----D C:\Users\Marwan\AppData\Local\{2C26198D-9BC0-4896-812E-C7E9CC783DCD}
O43 - CFD: 07/03/2012 - 13:59:20 - [0] ----D C:\Users\Marwan\AppData\Local\{2CB7788B-FF1D-418C-983A-3C17C74BDD5C}
O43 - CFD: 21/03/2012 - 14:27:39 - [0] ----D C:\Users\Marwan\AppData\Local\{2D183E45-E58B-48EB-BA9D-3C363976D717}
O43 - CFD: 07/09/2012 - 13:52:42 - [0] ----D C:\Users\Marwan\AppData\Local\{2D5C9595-C24E-49A2-9060-2173115AC583}
O43 - CFD: 05/11/2012 - 13:30:56 - [0] ----D C:\Users\Marwan\AppData\Local\{2DA0D9AE-FD2E-47E8-B0AF-FD2201465997}
O43 - CFD: 15/07/2012 - 10:22:38 - [0] ----D C:\Users\Marwan\AppData\Local\{2EDA0A19-E4AE-47FA-BE4E-8C889B01CC98}
O43 - CFD: 26/07/2012 - 12:18:55 - [0] ----D C:\Users\Marwan\AppData\Local\{2EDEBB3A-BBCF-4043-9A2F-17AA2A418137}
O43 - CFD: 27/05/2012 - 11:17:05 - [0] ----D C:\Users\Marwan\AppData\Local\{2F922938-87E8-4EA6-A154-EAE86BA55A31}
O43 - CFD: 24/07/2012 - 10:23:43 - [0] ----D C:\Users\Marwan\AppData\Local\{30A5CE7B-EE93-4187-90F8-61D01F5B497E}
O43 - CFD: 30/06/2012 - 13:26:53 - [0] ----D C:\Users\Marwan\AppData\Local\{3163F2E1-EF7E-483D-A76B-3747C45D3E18}
O43 - CFD: 09/05/2012 - 16:42:31 - [0] ----D C:\Users\Marwan\AppData\Local\{31711DB8-B36C-43FF-9B19-6A136D47D0E9}
O43 - CFD: 12/12/2012 - 12:55:56 - [0] ----D C:\Users\Marwan\AppData\Local\{336E2F9D-E884-483A-A2CC-C29CA61ADBEA}
O43 - CFD: 30/12/2012 - 14:35:14 - [0] ----D C:\Users\Marwan\AppData\Local\{34392F2F-B207-4918-A98F-711AEB7E2817}
O43 - CFD: 25/02/2012 - 13:06:01 - [0] ----D C:\Users\Marwan\AppData\Local\{3461236E-7C77-4A4D-B450-F8098D5F781C}
O43 - CFD: 20/04/2012 - 10:53:33 - [0] ----D C:\Users\Marwan\AppData\Local\{349CBBBA-1ECB-48E7-84B5-CEB059398A86}
O43 - CFD: 02/09/2012 - 12:59:30 - [0] ----D C:\Users\Marwan\AppData\Local\{34AB9100-8627-4ECC-8A11-86751B10FEEC}
O43 - CFD: 18/02/2012 - 12:51:45 - [0] ----D C:\Users\Marwan\AppData\Local\{34BDDCF8-9086-4A48-BCB0-7382B0DD1C28}
O43 - CFD: 26/07/2012 - 23:55:48 - [0] ----D C:\Users\Marwan\AppData\Local\{36153765-52ED-4AAC-8A4A-A0279F9E8915}
O43 - CFD: 19/06/2012 - 18:14:52 - [0] ----D C:\Users\Marwan\AppData\Local\{366F74B0-70AD-4A48-8FC7-A6476DC5C0AE}
O43 - CFD: 19/05/2012 - 20:47:08 - [0] ----D C:\Users\Marwan\AppData\Local\{378F9ED2-D930-43BB-A5D0-A1CE4F9D929C}
O43 - CFD: 21/02/2012 - 09:30:01 - [0] ----D C:\Users\Marwan\AppData\Local\{3819F2D1-F54C-4B95-AE6B-FC5C5C6E91BE}
O43 - CFD: 19/04/2012 - 11:36:50 - [0] ----D C:\Users\Marwan\AppData\Local\{3910B0FF-A271-492D-994E-EF5D3B29EBCB}
O43 - CFD: 25/03/2012 - 10:59:18 - [0] ----D C:\Users\Marwan\AppData\Local\{39F74E24-3880-4DC6-A628-12514FF0CD98}
O43 - CFD: 23/07/2012 - 11:41:36 - [0] ----D C:\Users\Marwan\AppData\Local\{3BABC2DA-3995-42B5-A185-06E8CCEA2E96}
O43 - CFD: 14/04/2012 - 11:14:45 - [0] ----D C:\Users\Marwan\AppData\Local\{3BD77036-757C-4F35-8822-E6C6251ACA19}
O43 - CFD: 26/04/2012 - 03:58:58 - [0] ----D C:\Users\Marwan\AppData\Local\{3C16CADA-0611-4D30-A022-F104B0743E5C}
O43 - CFD: 22/07/2012 - 11:56:05 - [0] ----D C:\Users\Marwan\AppData\Local\{3C6482F5-F919-4DDE-A474-5FA268202946}
O43 - CFD: 10/03/2012 - 12:52:02 - [0] ----D C:\Users\Marwan\AppData\Local\{3CD1BE83-E4B9-41CA-9D42-5EC561BBDE2E}
O43 - CFD: 06/06/2012 - 11:20:07 - [0] ----D C:\Users\Marwan\AppData\Local\{3E66731D-7E8C-4EF5-9AA9-373C72104D1D}
O43 - CFD: 27/07/2012 - 19:40:00 - [0] ----D C:\Users\Marwan\AppData\Local\{3E839E33-48A6-41AA-8EBB-7F839B6B7D82}
O43 - CFD: 16/05/2012 - 15:52:15 - [0] ----D C:\Users\Marwan\AppData\Local\{3F61FD13-A601-4F3D-B9B8-B1D19C77DCFA}
O43 - CFD: 12/08/2012 - 12:37:58 - [0] ----D C:\Users\Marwan\AppData\Local\{3F9E8303-6E63-4B64-ABE7-21B9E6E72315}
O43 - CFD: 02/05/2012 - 13:28:08 - [0] ----D C:\Users\Marwan\AppData\Local\{3FF36168-ECA6-424A-87A5-A77F96E5B155}
O43 - CFD: 13/03/2012 - 17:14:44 - [0] ----D C:\Users\Marwan\AppData\Local\{4153207A-D715-44BA-BF33-8A310F4C3A18}
O43 - CFD: 02/06/2012 - 11:37:23 - [0] ----D C:\Users\Marwan\AppData\Local\{416A1A1D-7BCA-4CB1-B90B-610C29AD9A90}
O43 - CFD: 13/05/2012 - 10:31:31 - [0] ----D C:\Users\Marwan\AppData\Local\{42683491-5D92-4747-8379-B4EEA5DAFE48}
O43 - CFD: 16/03/2012 - 10:06:15 - [0] ----D C:\Users\Marwan\AppData\Local\{431CB0F6-800B-4488-89BB-15D532F07294}
O43 - CFD: 27/02/2012 - 17:28:37 - [0] ----D C:\Users\Marwan\AppData\Local\{43C2771A-C947-4F64-BB67-02B55B54B9BE}
O43 - CFD: 18/10/2012 - 09:03:28 - [0] ----D C:\Users\Marwan\AppData\Local\{43E683B6-9C2A-4C43-B1C6-9F42D7C786D8}
O43 - CFD: 01/09/2012 - 10:44:56 - [0] ----D C:\Users\Marwan\AppData\Local\{4410B31E-BA9F-421C-A7BF-34D31EF17CBF}
O43 - CFD: 27/07/2012 - 19:39:11 - [0] ----D C:\Users\Marwan\AppData\Local\{449B06A1-DEB2-4557-96EF-855236219884}
O43 - CFD: 14/03/2012 - 11:42:47 - [0] ----D C:\Users\Marwan\AppData\Local\{44F06BDA-8F4B-4462-B51B-6D542AE5B18C}
O43 - CFD: 26/06/2012 - 17:23:20 - [0] ----D C:\Users\Marwan\AppData\Local\{4554258D-57EC-4599-BB4C-0F07C0193CC5}
O43 - CFD: 05/06/2012 - 20:28:07 - [0] ----D C:\Users\Marwan\AppData\Local\{472F12B8-5C66-4F93-9D3C-E1B4C2EBBCF3}
O43 - CFD: 04/11/2012 - 09:48:56 - [0] ----D C:\Users\Marwan\AppData\Local\{472FEAC1-26DC-4263-92F3-6382F39FC7EF}
O43 - CFD: 27/10/2012 - 08:31:54 - [0] ----D C:\Users\Marwan\AppData\Local\{486A73CC-A3BA-4A2B-8B90-86A75A9232A0}
O43 - CFD: 27/06/2012 - 10:32:49 - [0] ----D C:\Users\Marwan\AppData\Local\{48C31ED2-4BAD-449D-8CAB-086DD6E5DBC2}
O43 - CFD: 19/05/2012 - 11:14:29 - [0] ----D C:\Users\Marwan\AppData\Local\{48F313AA-DB11-4CC0-BAC7-E7B9FD65F8C6}
O43 - CFD: 09/06/2012 - 13:14:26 - [0] ----D C:\Users\Marwan\AppData\Local\{493B90EA-ADEF-4188-960C-5545C0AB707B}
O43 - CFD: 10/10/2012 - 18:22:46 - [0] ----D C:\Users\Marwan\AppData\Local\{49C2FABF-FD49-41F8-8E45-50FCFF10A9C4}
O43 - CFD: 07/03/2012 - 13:59:09 - [0] ----D C:\Users\Marwan\AppData\Local\{4AAC59EC-A3A4-442E-A4E5-3709DC852B64}
O43 - CFD: 30/04/2012 - 14:34:00 - [0] ----D C:\Users\Marwan\AppData\Local\{4AB5CB60-ACDF-4A8A-8DE0-C0E582F73CCD}
O43 - CFD: 17/04/2012 - 09:06:12 - [0] ----D C:\Users\Marwan\AppData\Local\{4B6D6ED6-6085-42FA-8779-F4941145D8BA}
O43 - CFD: 10/06/2012 - 20:15:42 - [0] ----D C:\Users\Marwan\AppData\Local\{4B6EF6CE-A5FF-4DB4-BC17-EDCC64AEE783}
O43 - CFD: 31/12/2012 - 14:36:29 - [0] ----D C:\Users\Marwan\AppData\Local\{4BEB2C55-BB37-4F2E-9773-BB32CD12D189}
O43 - CFD: 16/03/2012 - 10:06:37 - [0] ----D C:\Users\Marwan\AppData\Local\{4BF2E6D7-5DC9-48F3-9E4E-95F789CBF6E5}
O43 - CFD: 02/11/2012 - 15:35:56 - [0] ----D C:\Users\Marwan\AppData\Local\{4C2B5470-49A7-475C-BAA6-3A6A8E4FCF93}
O43 - CFD: 16/06/2012 - 13:32:10 - [0] ----D C:\Users\Marwan\AppData\Local\{4CFC7B91-60B0-4435-9D66-81D41AEAC949}
O43 - CFD: 13/04/2012 - 11:53:07 - [0] ----D C:\Users\Marwan\AppData\Local\{4D5BB917-DFAB-4176-8055-30AAFA7AFED6}
O43 - CFD: 17/05/2012 - 09:59:14 - [0] ----D C:\Users\Marwan\AppData\Local\{4DB32BFA-432B-4A80-8FF0-31CB1F1B63F7}
O43 - CFD: 04/08/2012 - 10:00:07 - [0] ----D C:\Users\Marwan\AppData\Local\{4E6B8DE7-9EE1-4B6A-A69E-C4C06CC04FCF}
O43 - CFD: 06/06/2012 - 00:01:35 - [0] ----D C:\Users\Marwan\AppData\Local\{4E9248E7-8A6A-422A-9B16-C3883C41C6A4}
O43 - CFD: 07/05/2012 - 21:58:02 - [0] ----D C:\Users\Marwan\AppData\Local\{4EF85DDE-1F38-4159-B828-FB13EBD8431E}
O43 - CFD: 11/09/2012 - 20:09:49 - [0] ----D C:\Users\Marwan\AppData\Local\{4F1474AC-D9D6-4614-B206-A5A52AFF6231}
O43 - CFD: 12/10/2012 - 14:47:40 - [0] ----D C:\Users\Marwan\AppData\Local\{4F1626EF-9A20-4C73-8237-BD13E583DB5D}
O43 - CFD: 18/06/2012 - 11:08:00 - [0] ----D C:\Users\Marwan\AppData\Local\{4F603D12-204A-405F-A4B6-5651A7E0D6A0}
O43 - CFD: 23/12/2012 - 10:41:49 - [0] ----D C:\Users\Marwan\AppData\Local\{4FB52BE8-9D7E-42EB-9AA3-190FFB613D49}
O43 - CFD: 19/12/2012 - 12:54:30 - [0] ----D C:\Users\Marwan\AppData\Local\{50847F27-F923-4FA0-B79A-52BE58CFFC75}
O43 - CFD: 15/05/2012 - 12:48:16 - [0] ----D C:\Users\Marwan\AppData\Local\{50A353AD-3D3A-41E4-B1C2-5CB66C846250}
O43 - CFD: 18/07/2012 - 11:25:07 - [0] ----D C:\Users\Marwan\AppData\Local\{51D46B40-BE4A-4544-8C07-5303F1D68BFF}
O43 - CFD: 03/03/2012 - 12:09:02 - [0] ----D C:\Users\Marwan\AppData\Local\{51FB1738-8D0E-4584-B127-04401753DB07}
O43 - CFD: 06/06/2012 - 00:14:13 - [0] ----D C:\Users\Marwan\AppData\Local\{530E104F-08CA-48C1-98B1-7202B564B282}
O43 - CFD: 06/12/2012 - 11:09:53 - [0] ----D C:\Users\Marwan\AppData\Local\{5340A1AC-2634-46E7-A9D6-11B2FBF3E91E}
O43 - CFD: 29/12/2012 - 15:12:02 - [0] ----D C:\Users\Marwan\AppData\Local\{53B62BB5-A2C4-4CF3-977D-A89B43ABC314}
O43 - CFD: 27/07/2012 - 12:59:30 - [0] ----D C:\Users\Marwan\AppData\Local\{54509E92-0A6E-4740-BE89-88C5D5CF2E44}
O43 - CFD: 01/12/2012 - 12:51:43 - [0] ----D C:\Users\Marwan\AppData\Local\{551084A1-DFA3-4D17-AC55-0C698B2C37F7}
O43 - CFD: 02/05/2012 - 08:50:46 - [0] ----D C:\Users\Marwan\AppData\Local\{5526FAC0-64B5-4471-B90F-2E4DA0368134}
O43 - CFD: 22/12/2012 - 12:42:13 - [0] ----D C:\Users\Marwan\AppData\Local\{5616A3DA-770B-43CA-B892-B3AAA54D00BD}
O43 - CFD: 19/03/2012 - 15:08:22 - [0] ----D C:\Users\Marwan\AppData\Local\{562E7D57-065C-4470-872B-E70C5694DDD5}
O43 - CFD: 23/05/2012 - 13:05:22 - [0] ----D C:\Users\Marwan\AppData\Local\{56CF7347-4A44-4AF5-8F44-A409ECB56641}
O43 - CFD: 14/04/2012 - 11:29:29 - [0] ----D C:\Users\Marwan\AppData\Local\{56D53D89-6A0E-4E24-BAF5-135B7F3DA31E}
O43 - CFD: 03/08/2012 - 12:05:40 - [0] ----D C:\Users\Marwan\AppData\Local\{5740064C-83CB-4BB6-9B91-A67C5BBD790C}
O43 - CFD: 23/06/2012 - 10:36:36 - [0] ----D C:\Users\Marwan\AppData\Local\{5835EC19-ADA0-419F-AAFB-B8F9208E6A0C}
O43 - CFD: 31/05/2012 - 14:16:43 - [0] ----D C:\Users\Marwan\AppData\Local\{58E3570E-6752-4D9A-99AD-AB14B5E958D1}
O43 - CFD: 21/07/2012 - 14:03:16 - [0] ----D C:\Users\Marwan\AppData\Local\{597B68A6-43B8-4CD2-B728-4E189A0C9E5E}
O43 - CFD: 27/06/2012 - 14:11:38 - [0] ----D C:\Users\Marwan\AppData\Local\{5A247C2A-0052-4EAA-B44D-72FF600955DF}
O43 - CFD: 25/05/2012 - 12:43:59 - [0] ----D C:\Users\Marwan\AppData\Local\{5A502141-0DE1-4534-A3F7-450C06CFD48E}
O43 - CFD: 18/07/2012 - 14:50:05 - [0] ----D C:\Users\Marwan\AppData\Local\{5B356FC9-BAEF-47D1-A594-7CDB181EBC50}
O43 - CFD: 11/06/2012 - 13:45:44 - [0] ----D C:\Users\Marwan\AppData\Local\{5B97A153-0001-4076-BC1E-7B2BE3E76051}
O43 - CFD: 16/07/2012 - 22:59:07 - [0] ----D C:\Users\Marwan\AppData\Local\{5C052FA0-0EC5-4F68-86F8-A4FF67F230F3}
O43 - CFD: 12/06/2012 - 12:56:02 - [0] ----D C:\Users\Marwan\AppData\Local\{5CEBECDA-DD36-44BB-89D8-092C8FFFFB46}
O43 - CFD: 08/09/2012 - 18:06:32 - [0] ----D C:\Users\Marwan\AppData\Local\{5DAB588E-2D04-4741-A8C3-093E33D0AE0B}
O43 - CFD: 30/09/2012 - 10:16:09 - [0] ----D C:\Users\Marwan\AppData\Local\{5EABC5C4-0E2A-48ED-9F9B-31273DDB1B99}
O43 - CFD: 30/05/2012 - 10:23:39 - [0] ----D C:\Users\Marwan\AppData\Local\{601F7508-38B0-46FD-92DE-F07E178AC5D0}
O43 - CFD: 31/05/2012 - 14:16:32 - [0] ----D C:\Users\Marwan\AppData\Local\{60257E1E-7238-4427-9811-12D3863FDA88}
O43 - CFD: 25/06/2012 - 10:10:21 - [0] ----D C:\Users\Marwan\AppData\Local\{6025AFC5-EC85-4EB1-AD67-E76A421329AA}
O43 - CFD: 19/02/2012 - 19:08:10 - [0] ----D C:\Users\Marwan\AppData\Local\{6103DFBE-F115-45CC-BD6C-C6445DBE9F73}
O43 - CFD: 26/11/2012 - 17:08:01 - [0] ----D C:\Users\Marwan\AppData\Local\{61293B12-75B0-4FB2-B1EE-CDEE266C8215}
O43 - CFD: 27/09/2012 - 17:09:48 - [0] ----D C:\Users\Marwan\AppData\Local\{61701067-DC00-461C-8255-B4693C5CEF57}
O43 - CFD: 06/04/2012 - 18:18:07 - [0] ----D C:\Users\Marwan\AppData\Local\{61C77BEF-CD97-47F2-BD9F-CEA4AACA6E96}
O43 - CFD: 17/11/2012 - 12:44:24 - [0] ----D C:\Users\Marwan\AppData\Local\{62483A00-0629-4718-8A6A-FF6A63868375}
O43 - CFD: 01/08/2012 - 09:55:35 - [0] ----D C:\Users\Marwan\AppData\Local\{62806E97-D3E9-4E42-B3FC-B160041415D2}
O43 - CFD: 21/05/2012 - 16:23:32 - [0] ----D C:\Users\Marwan\AppData\Local\{62C15D7F-7111-4E21-A93D-7B9675AEF528}
O43 - CFD: 07/12/2012 - 13:11:58 - [0] ----D C:\Users\Marwan\AppData\Local\{62EAE79A-8FA7-4F60-9FA7-79CEEF2EBD8F}
O43 - CFD: 13/06/2012 - 17:03:59 - [0] ----D C:\Users\Marwan\AppData\Local\{6335F0BC-3965-4F3D-8880-4891B2F6AC64}
O43 - CFD: 01/06/2012 - 21:22:40 - [0] ----D C:\Users\Marwan\AppData\Local\{63461351-5B43-4D11-85FE-1A3946E8D2C0}
O43 - CFD: 19/06/2012 - 10:39:54 - [0] ----D C:\Users\Marwan\AppData\Local\{6445FE23-E04A-4555-B8E5-DFAB4E1EFF29}
O43 - CFD: 26/06/2012 - 10:46:27 - [0] ----D C:\Users\Marwan\AppData\Local\{64744826-EE21-4106-A398-E3BE5E542E47}
O43 - CFD: 28/06/2012 - 11:13:26 - [0] ----D C:\Users\Marwan\AppData\Local\{64C8E7A1-F205-424E-B433-2FD87AA77EED}
O43 - CFD: 21/06/2012 - 18:25:38 - [0] ----D C:\Users\Marwan\AppData\Local\{64E27C5D-AB1F-428C-93FF-034EC6FFF48B}
O43 - CFD: 24/03/2012 - 12:44:01 - [0] ----D C:\Users\Marwan\AppData\Local\{65BB60E2-B43F-42CA-A45A-8467DD51CCD8}
O43 - CFD: 05/05/2012 - 11:35:54 - [0] ----D C:\Users\Marwan\AppData\Local\{65EFA056-7496-4927-B8CA-EF29DCD0CCF9}
O43 - CFD: 06/04/2012 - 16:01:55 - [0] ----D C:\Users\Marwan\AppData\Local\{676A45AE-6483-49B9-8D58-A86B5056681C}
O43 - CFD: 20/12/2012 - 12:59:55 - [0] ----D C:\Users\Marwan\AppData\Local\{67EF5B9C-8CE3-4ABF-94AD-F4B29D8C8F64}
O43 - CFD: 09/06/2012 - 17:16:46 - [0] ----D C:\Users\Marwan\AppData\Local\{681DE77A-DE53-44A0-A342-F72B04E8EED2}
O43 - CFD: 21/11/2012 - 17:17:29 - [0] ----D C:\Users\Marwan\AppData\Local\{68B4B210-AFEF-4AD1-9385-9654313042BB}
O43 - CFD: 26/07/2012 - 16:07:16 - [0] ----D C:\Users\Marwan\AppData\Local\{6944CC0A-276B-46EA-8B93-EF8843BCF3CC}
O43 - CFD: 26/08/2012 - 14:17:24 - [0] ----D C:\Users\Marwan\AppData\Local\{6A0B2531-F095-45CE-9ECC-59E8841C5786}
O43 - CFD: 16/07/2012 - 22:58:45 - [0] ----D C:\Users\Marwan\AppData\Local\{6A3268C2-CE99-4000-9F79-F8B3969996E8}
O43 - CFD: 26/04/2012 - 03:59:22 - [0] ----D C:\Users\Marwan\AppData\Local\{6AFA4453-29F2-4D39-AA44-9703476C4914}
O43 - CFD: 17/04/2012 - 14:34:57 - [0] ----D C:\Users\Marwan\AppData\Local\{6B55F9E4-68F8-45B0-9C8A-38B3409768A5}
O43 - CFD: 08/04/2012 - 09:56:40 - [0] ----D C:\Users\Marwan\AppData\Local\{6B78C502-E4E6-46CE-AFF9-E1B9CEB89FE3}
O43 - CFD: 26/06/2012 - 10:46:38 - [0] ----D C:\Users\Marwan\AppData\Local\{6B88A5E8-8C63-47EA-8BAB-85B7C0AA91FF}
O43 - CFD: 20/05/2012 - 11:21:22 - [0] ----D C:\Users\Marwan\AppData\Local\{6BEF1C91-3141-441A-8FDA-E42A0378EDBF}
O43 - CFD: 02/08/2012 - 12:57:18 - [0] ----D C:\Users\Marwan\AppData\Local\{6C4913B2-75C4-410A-8353-CFB82C617741}
O43 - CFD: 15/07/2012 - 10:22:50 - [0] ----D C:\Users\Marwan\AppData\Local\{6CFA68B4-DDD4-4CB5-8657-DB77D3DE6887}
O43 - CFD: 15/07/2012 - 22:15:14 - [0] ----D C:\Users\Marwan\AppData\Local\{6DCD2B70-B0BB-4960-8057-75509E08D3FD}
O43 - CFD: 26/03/2012 - 14:21:34 - [0] ----D C:\Users\Marwan\AppData\Local\{6DEDCB94-BEF3-4B80-9A9F-3B44AA5F1143}
O43 - CFD: 21/12/2012 - 13:37:10 - [0] ----D C:\Users\Marwan\AppData\Local\{6E91AC0F-8E7F-4E71-BDEB-06CC056B71F7}
O43 - CFD: 21/07/2012 - 14:10:31 - [0] ----D C:\Users\Marwan\AppData\Local\{6FBF2008-CD3F-4BE0-9FD1-49BACB21411D}
O43 - CFD: 14/07/2012 - 16:01:41 - [0] ----D C:\Users\Marwan\AppData\Local\{6FD754A8-8752-442D-885E-63BFC7594D7F}
O43 - CFD: 03/04/2012 - 13:23:38 - [0] ----D C:\Users\Marwan\AppData\Local\{7106945B-F237-47CD-AFE9-07F5273EB566}
O43 - CFD: 01/08/2012 - 09:55:24 - [0] ----D C:\Users\Marwan\AppData\Local\{7174E5F4-3181-4E15-AE97-55023642CDF2}
O43 - CFD: 27/03/2012 - 14:59:23 - [0] ----D C:\Users\Marwan\AppData\Local\{7226C99C-95C1-4643-8F74-FB2F0C7C51A4}
O43 - CFD: 24/04/2012 - 10:12:39 - [0] ----D C:\Users\Marwan\AppData\Local\{722AFB06-7F25-421B-A15F-7DD4ACA23F4D}
O43 - CFD: 03/06/2012 - 15:22:31 - [0] ----D C:\Users\Marwan\AppData\Local\{72520B2C-3808-404B-9576-33B98CE6017F}
O43 - CFD: 02/12/2012 - 11:47:36 - [0] ----D C:\Users\Marwan\AppData\Local\{72528F20-C5D5-4897-AAD3-24F38679CBA2}
O43 - CFD: 21/07/2012 - 09:52:44 - [0] ----D C:\Users\Marwan\AppData\Local\{72C369E7-6A13-4B8E-8F90-BFB7B0BA637E}
O43 - CFD: 08/11/2012 - 15:22:27 - [0] ----D C:\Users\Marwan\AppData\Local\{74C40298-CC99-493D-96FF-6DB6BFA34F97}
O43 - CFD: 18/07/2012 - 15:48:26 - [0] ----D C:\Users\Marwan\AppData\Local\{74E47DF0-784A-45F0-A771-2AB5F9A508FD}
O43 - CFD: 23/10/2012 - 15:23:09 - [0] ----D C:\Users\Marwan\AppData\Local\{75530CCF-26DE-4127-90AB-CE2447BD8328}
O43 - CFD: 28/07/2012 - 12:27:39 - [0] ----D C:\Users\Marwan\AppData\Local\{765736DD-61E7-4A07-823C-0E95D3CBC2FA}
O43 - CFD: 11/06/2012 - 09:25:07 - [0] ----D C:\Users\Marwan\AppData\Local\{765A1ED3-4DE7-4EBC-9356-BEFF5E764B75}
O43 - CFD: 02/05/2012 - 08:50:58 - [0] ----D C:\Users\Marwan\AppData\Local\{76782717-4A2E-4F66-8C67-2329F7F5DF03}
O43 - CFD: 27/07/2012 - 18:55:12 - [0] ----D C:\Users\Marwan\AppData\Local\{76B65F5E-2A8F-4FBA-A439-F55B8060B921}
O43 - CFD: 11/05/2012 - 11:59:27 - [0] ----D C:\Users\Marwan\AppData\Local\{76F2C4EA-2E47-4FA0-8A92-2C55AB217A37}
O43 - CFD: 28/10/2012 - 11:42:56 - [0] ----D C:\Users\Marwan\AppData\Local\{77E93F27-4A3E-4353-9962-BA73A7DB2BE2}
O43 - CFD: 19/04/2012 - 10:14:02 - [0] ----D C:\Users\Marwan\AppData\Local\{789043FC-A2A8-4435-BB7C-523452714954}
O43 - CFD: 25/08/2012 - 22:57:36 - [0] ----D C:\Users\Marwan\AppData\Local\{78CC4BB1-196C-4067-9063-2C8C40E8EB48}
O43 - CFD: 16/08/2012 - 13:20:37 - [0] ----D C:\Users\Marwan\AppData\Local\{790E93DD-0430-4753-A184-70F49E8E04E5}
O43 - CFD: 26/06/2012 - 22:58:21 - [0] ----D C:\Users\Marwan\AppData\Local\{7916FDDD-EFD9-48B9-8A31-3D546BB0CB4F}
O43 - CFD: 14/06/2012 - 11:27:14 - [0] ----D C:\Users\Marwan\AppData\Local\{7A1CBE08-A77B-4E74-AB75-99A4F4FD5F99}
O43 - CFD: 19/06/2012 - 10:39:38 - [0] ----D C:\Users\Marwan\AppData\Local\{7AE05B1A-A8F0-41F5-B342-FF9D9C3DFBC8}
O43 - CFD: 17/12/2012 - 10:23:45 - [0] ----D C:\Users\Marwan\AppData\Local\{7B464DC2-9CF5-4114-9BB5-96F55022754C}
O43 - CFD: 16/07/2012 - 11:39:28 - [0] ----D C:\Users\Marwan\AppData\Local\{7B5F7738-B911-4A5A-9510-BCDA7B66B9F3}
O43 - CFD: 19/09/2012 - 13:35:01 - [0] ----D C:\Users\Marwan\AppData\Local\{7BCDB8EB-DA5E-4FFB-8A07-B29F8D73FCA9}
O43 - CFD: 18/07/2012 - 13:41:15 - [0] ----D C:\Users\Marwan\AppData\Local\{7CA2C0FF-D62C-445C-A2E5-434AC0232B83}
O43 - CFD: 27/08/2012 - 21:38:43 - [0] ----D C:\Users\Marwan\AppData\Local\{7CCEEB44-66EC-4482-A441-C95C46B55BAD}
O43 - CFD: 18/07/2012 - 15:48:39 - [0] ----D C:\Users\Marwan\AppData\Local\{7DF3C4AD-C4CA-46F4-94A0-E8358220C0BE}
O43 - CFD: 18/09/2012 - 20:07:30 - [0] ----D C:\Users\Marwan\AppData\Local\{7E8AD1B5-E199-446B-87CB-C4159E921766}
O43 - CFD: 16/04/2012 - 10:37:39 - [0] ----D C:\Users\Marwan\AppData\Local\{7EDDEF80-A9BE-43F7-9958-A0CC4FB10151}
O43 - CFD: 19/07/2012 - 00:30:42 - [0] ----D C:\Users\Marwan\AppData\Local\{8130A85A-BA78-4EC0-A221-D41C9216269A}
O43 - CFD: 27/05/2012 - 11:17:16 - [0] ----D C:\Users\Marwan\AppData\Local\{8162B9FC-3F66-4C58-9826-C92CAB65BE1A}
O43 - CFD: 20/04/2012 - 10:53:11 - [0] ----D C:\Users\Marwan\AppData\Local\{81A43DAC-179E-4C32-8F32-07FC43F4AF26}
O43 - CFD: 26/07/2012 - 12:19:12 - [0] ----D C:\Users\Marwan\AppData\Local\{82455106-874D-4005-865F-063FF3F63BC8}
O43 - CFD: 29/06/2012 - 21:30:46 - [0] ----D C:\Users\Marwan\AppData\Local\{828A6688-DE10-43D7-9204-4920AE758893}
O43 - CFD: 28/06/2012 - 06:52:37 - [0] ----D C:\Users\Marwan\AppData\Local\{82FD027D-67A8-4BDF-BE33-3976BD35DF63}
O43 - CFD: 11/06/2012 - 09:25:29 - [0] ----D C:\Users\Marwan\AppData\Local\{83ED03B0-B186-480E-9109-98205D762CC1}
O43 - CFD: 18/04/2012 - 10:37:52 - [0] ----D C:\Users\Marwan\AppData\Local\{844F20C8-03D6-4996-9450-4507FF2118E7}
O43 - CFD: 25/04/2012 - 11:26:35 - [0] ----D C:\Users\Marwan\AppData\Local\{8509DA8F-75C0-4925-8466-D7F2B911837B}
O43 - CFD: 02/06/2012 - 11:37:35 - [0] ----D C:\Users\Marwan\AppData\Local\{8524B8A1-F8EB-4488-A133-BADAD92FE25B}
O43 - CFD: 25/09/2012 - 16:41:20 - [0] ----D C:\Users\Marwan\AppData\Local\{855CC6A5-081C-481A-BBB5-B12392A09971}
O43 - CFD: 20/09/2012 - 17:00:45 - [0] ----D C:\Users\Marwan\AppData\Local\{85D2D2D9-B3E9-41DD-A2A2-092E5D4ECDD6}
O43 - CFD: 26/06/2012 - 22:57:59 - [0] ----D C:\Users\Marwan\AppData\Local\{85F2AD0D-3A83-466C-B57B-C742BEA44FB0}
O43 - CFD: 13/11/2012 - 09:56:45 - [0] ----D C:\Users\Marwan\AppData\Local\{86177CD4-6B5B-4E7B-B8A5-A259482788A6}
O43 - CFD: 27/07/2012 - 20:16:41 - [0] ----D C:\Users\Marwan\AppData\Local\{8621F9BF-EF3A-4BF9-A37D-8AF2162CC8C2}
O43 - CFD: 04/12/2012 - 10:20:25 - [0] ----D C:\Users\Marwan\AppData\Local\{86743F0D-578C-420B-B04A-7AF2ED997D93}
O43 - CFD: 14/03/2012 - 11:42:37 - [0] ----D C:\Users\Marwan\AppData\Local\{867C652F-EDF1-41B9-A7E8-BC7113DE3F9E}
O43 - CFD: 03/06/2012 - 14:16:50 - [0] ----D C:\Users\Marwan\AppData\Local\{86A5215E-9F18-43D6-950D-F0F757D5A638}
O43 - CFD: 14/07/2012 - 16:40:22 - [0] ----D C:\Users\Marwan\AppData\Local\{872C4EE4-2006-47F4-B4A2-377F6D6E8B8C}
O43 - CFD: 26/06/2012 - 14:17:50 - [0] ----D C:\Users\Marwan\AppData\Local\{873FB263-8B91-42C0-904D-24DCD6A50D15}
O43 - CFD: 27/07/2012 - 20:10:37 - [0] ----D C:\Users\Marwan\AppData\Local\{87733C56-E0DD-4293-906F-82D137E5414E}
O43 - CFD: 02/04/2012 - 16:00:35 - [0] ----D C:\Users\Marwan\AppData\Local\{87D9A540-4493-46FD-889A-C89D7DA833B4}
O43 - CFD: 16/09/2012 - 12:12:23 - [0] ----D C:\Users\Marwan\AppData\Local\{87E8C81C-6C5F-4F67-A8E8-B0CC8592CFCD}
O43 - CFD: 03/05/2012 - 07:53:08 - [0] ----D C:\Users\Marwan\AppData\Local\{8886DDA9-75CD-4C5A-B567-6D8E20D385AB}
O43 - CFD: 31/07/2012 - 01:55:56 - [0] ----D C:\Users\Marwan\AppData\Local\{89273780-4705-4AB9-946B-85B2B79E2B1C}
O43 - CFD: 22/03/2012 - 17:41:47 - [0] ----D C:\Users\Marwan\AppData\Local\{8979D06A-10E0-46A9-B151-5ABADF85F487}
O43 - CFD: 28/03/2012 - 17:44:42 - [0] ----D C:\Users\Marwan\AppData\Local\{899D0BE0-FA91-4B61-9058-67F801EFB3D8}
O43 - CFD: 26/04/2012 - 15:05:10 - [0] ----D C:\Users\Marwan\AppData\Local\{89CE3D1A-9CDA-43C3-B857-1290F188AECC}
O43 - CFD: 19/05/2012 - 11:14:17 - [0] ----D C:\Users\Marwan\AppData\Local\{89E41AED-7F1C-423F-A0FF-93E1DFC4EA10}
O43 - CFD: 10/06/2012 - 10:38:22 - [0] ----D C:\Users\Marwan\AppData\Local\{8A1B5DBD-55A9-4C52-8001-CA9DF85275B7}
O43 - CFD: 06/06/2012 - 19:54:16 - [0] ----D C:\Users\Marwan\AppData\Local\{8A2C9CD1-1DC1-4C3E-8F49-5F5100CB68E9}
O43 - CFD: 28/12/2012 - 14:02:37 - [0] ----D C:\Users\Marwan\AppData\Local\{8A40AC61-C406-4901-AA63-5C2D03347212}
O43 - CFD: 18/08/2012 - 15:03:56 - [0] ----D C:\Users\Marwan\AppData\Local\{8A7DDD91-F059-4831-8260-9C7E8B1AB1C5}
O43 - CFD: 18/08/2012 - 15:04:08 - [0] ----D C:\Users\Marwan\AppData\Local\{8A942EF4-73A5-440B-909E-B44CD3BA3A72}
O43 - CFD: 09/10/2012 - 10:07:40 - [0] ----D C:\Users\Marwan\AppData\Local\{8AC291CB-D949-4145-85E5-9EE4C11F8CC6}
O43 - CFD: 10/12/2012 - 10:48:20 - [0] ----D C:\Users\Marwan\AppData\Local\{8AE4DAB3-5CA2-4035-8D97-130F8B61E668}
O43 - CFD: 20/03/2012 - 14:11:26 - [0] ----D C:\Users\Marwan\AppData\Local\{8B503FAE-8AAD-49B1-A8F2-FB9CE7AAEDFD}
O43 - CFD: 09/11/2012 - 09:59:38 - [0] ----D C:\Users\Marwan\AppData\Local\{8C0C25C1-7EB9-44ED-B6EF-F9EADFA07951}
O43 - CFD: 08/06/2012 - 11:52:56 - [0] ----D C:\Users\Marwan\AppData\Local\{8C42EE37-5157-4D47-B1AA-DE4CCBDE829F}
O43 - CFD: 12/03/2012 - 09:05:20 - [0] ----D C:\Users\Marwan\AppData\Local\{8D12A4E1-5C1A-4523-8F20-FD543B7C241F}
O43 - CFD: 21/06/2012 - 18:25:28 - [0] ----D C:\Users\Marwan\AppData\Local\{8D1599AF-3726-4B04-9F46-FB2999ADFD46}
O43 - CFD: 23/06/2012 - 10:36:50 - [0] ----D C:\Users\Marwan\AppData\Local\{8D1B4C1A-C407-4FC5-B834-AC4B67680B45}
O43 - CFD: 22/06/2012 - 09:07:01 - [0] ----D C:\Users\Marwan\AppData\Local\{8D41F4D2-5575-492C-8166-3593C53B8724}
O43 - CFD: 22/04/2012 - 11:55:30 - [0] ----D C:\Users\Marwan\AppData\Local\{8D6B2F5C-BFF1-47D0-B945-771B820D2C77}
O43 - CFD: 24/03/2012 - 12:44:12 - [0] ----D C:\Users\Marwan\AppData\Local\{8E044644-7A76-44F7-B0F5-85C1A64EAFF4}
O43 - CFD: 03/01/2013 - 11:28:06 - [0] ----D C:\Users\Marwan\AppData\Local\{8E2B3D31-0CBE-4888-9365-974E3168BE54}
O43 - CFD: 20/06/2012 - 11:46:26 - [0] ----D C:\Users\Marwan\AppData\Local\{8E335557-94A1-49B1-8022-C8B16CCA2290}
O43 - CFD: 08/11/2012 - 18:28:15 - [0] ----D C:\Users\Marwan\AppData\Local\{8EA84089-58E1-4089-B4B3-BF63029BCD9F}
O43 - CFD: 27/07/2012 - 12:06:03 - [0] ----D C:\Users\Marwan\AppData\Local\{8EBF912D-4398-4F67-A633-A7342E7D04F1}
O43 - CFD: 10/06/2012 - 10:38:45 - [0] ----D C:\Users\Marwan\AppData\Local\{8EE427DE-2418-4D35-9A5C-05D272E4D904}
O43 - CFD: 18/10/2012 - 21:09:53 - [0] ----D C:\Users\Marwan\AppData\Local\{8FB17266-5E38-4F77-B0C1-684A3C3D700B}
O43 - CFD: 06/09/2012 - 16:55:35 - [0] ----D C:\Users\Marwan\AppData\Local\{8FB8BCEC-0C40-4F75-887F-D8202CDC54A1}
O43 - CFD: 05/05/2012 - 11:35:32 - [0] ----D C:\Users\Marwan\AppData\Local\{906F1E76-D97D-4BB5-BBBE-500AABB6072F}
O43 - CFD: 08/05/2012 - 11:03:02 - [0] ----D C:\Users\Marwan\AppData\Local\{90BAAAFC-65FA-43BE-B748-8E34E540812F}
O43 - CFD: 17/02/2012 - 16:36:14 - [0] ----D C:\Users\Marwan\AppData\Local\{90D16492-8D66-4ED3-94F5-037D4A825584}
O43 - CFD: 15/07/2012 - 14:07:49 - [0] ----D C:\Users\Marwan\AppData\Local\{911A1617-AAF6-43F7-9669-CA3C30489D6C}
O43 - CFD: 21/06/2012 - 15:39:10 - [0] ----D C:\Users\Marwan\AppData\Local\{91845762-DC3B-4A5B-A0D3-1F6F4FE2D827}
O43 - CFD: 22/02/2012 - 10:46:56 - [0] ----D C:\Users\Marwan\AppData\Local\{918FEA80-CE57-4996-96D4-964A4D979814}
O43 - CFD: 21/07/2012 - 14:09:05 - [0] ----D C:\Users\Marwan\AppData\Local\{91DD893F-82AA-4277-89C2-C936F3DD754C}
O43 - CFD: 04/05/2012 - 12:24:28 - [0] ----D C:\Users\Marwan\AppData\Local\{91F71BBE-1CE1-4A31-834C-4E398E737419}
O43 - CFD: 03/06/2012 - 18:58:59 - [0] ----D C:\Users\Marwan\AppData\Local\{92403F69-F12C-41BC-B983-E6618860FDD0}
O43 - CFD: 18/07/2012 - 14:50:23 - [0] ----D C:\Users\Marwan\AppData\Local\{926C0407-23AF-4A19-BA1F-52E2B1080FEF}
O43 - CFD: 01/07/2012 - 11:15:57 - [0] ----D C:\Users\Marwan\AppData\Local\{931D0573-C989-4CE0-A2CC-83849C8C529A}
O43 - CFD: 15/07/2012 - 21:49:53 - [0] ----D C:\Users\Marwan\AppData\Local\{93F35671-D24B-42EB-AB94-A16148A8D0E5}
O43 - CFD: 27/02/2012 - 17:28:48 - [0] ----D C:\Users\Marwan\AppData\Local\{9425B163-F78D-4EC9-BB7F-BAE4FC171B4B}
O43 - CFD: 08/12/2012 - 12:44:48 - [0] ----D C:\Users\Marwan\AppData\Local\{94BF3468-80A2-4478-9548-D2DF9138059E}
O43 - CFD: 26/07/2012 - 16:07:04 - [0] ----D C:\Users\Marwan\AppData\Local\{95031EF4-5789-4253-87AA-DCE53F2B48C9}
O43 - CFD: 24/02/2012 - 15:47:56 - [0] ----D C:\Users\Marwan\AppData\Local\{956ECF3A-AAE2-4AEB-A2C4-569AEBA0770A}
O43 - CFD: 02/01/2013 - 14:00:42 - [0] ----D C:\Users\Marwan\AppData\Local\{95B48808-A939-470B-806D-8BC2FC198493}
O43 - CFD: 01/06/2012 - 21:22:51 - [0] ----D C:\Users\Marwan\AppData\Local\{96E69B9B-7A09-4A06-89E5-5E65A3BD87B5}
O43 - CFD: 03/06/2012 - 18:59:10 - [0] ----D C:\Users\Marwan\AppData\Local\{976D5884-A227-4FC8-9D68-49A4C47B25B0}
O43 - CFD: 12/06/2012 - 12:56:12 - [0] ----D C:\Users\Marwan\AppData\Local\{982277B3-3BF6-49FB-A56A-C144904719F9}
O43 - CFD: 22/05/2012 - 14:42:04 - [0] ----D C:\Users\Marwan\AppData\Local\{98266913-8F69-4BB4-8840-608C4DF0D0C2}
O43 - CFD: 01/06/2012 - 15:13:55 - [0] ----D C:\Users\Marwan\AppData\Local\{98506F67-5D7A-468A-A30C-D73E85708BB5}
O43 - CFD: 18/07/2012 - 13:41:02 - [0] ----D C:\Users\Marwan\AppData\Local\{985CDA5A-62EC-4CE3-A525-BD65B2B8CB07}
O43 - CFD: 19/07/2012 - 09:45:49 - [0] ----D C:\Users\Marwan\AppData\Local\{996633EE-0F4E-4076-A13F-D3FD60C6902D}
O43 - CFD: 24/09/2012 - 14:36:41 - [0] ----D C:\Users\Marwan\AppData\Local\{9975EA55-A625-40FB-BA1C-F4A3E3060F32}
O43 - CFD: 03/10/2012 - 14:26:31 - [0] ----D C:\Users\Marwan\AppData\Local\{9A3D2DB8-F3FD-46AA-922A-A577FDFE9BB2}
O43 - CFD: 16/10/2012 - 11:12:37 - [0] ----D C:\Users\Marwan\AppData\Local\{9AD4FB7E-3EF4-4906-9FE3-296AD1CC2564}
O43 - CFD: 18/07/2012 - 11:24:43 - [0] ----D C:\Users\Marwan\AppData\Local\{9B1F4684-D8E2-450A-B72D-32CDDD7FEBC8}
O43 - CFD: 07/10/2012 - 10:20:16 - [0] ----D C:\Users\Marwan\AppData\Local\{9B2BA2AC-0B11-49D7-9EDA-0AD59C1C9035}
O43 - CFD: 19/04/2012 - 10:13:51 - [0] ----D C:\Users\Marwan\AppData\Local\{9B393EE1-7495-43A0-A9AC-F92682D50ED6}
O43 - CFD: 26/02/2012 - 13:15:03 - [0] ----D C:\Users\Marwan\AppData\Local\{9BEF3BC9-16E0-475A-9182-DB0B26DE893D}
O43 - CFD: 03/06/2012 - 14:16:39 - [0] ----D C:\Users\Marwan\AppData\Local\{9BF04053-B8A8-41F7-81D4-50477FA5ECED}
O43 - CFD: 27/04/2012 - 11:43:20 - [0] ----D C:\Users\Marwan\AppData\Local\{9C00C513-8114-43E5-9688-E2408BC38B09}
O43 - CFD: 07/11/2012 - 09:58:38 - [0] ----D C:\Users\Marwan\AppData\Local\{9C4CD9CD-ADD8-45C8-8976-24F355CF6AF0}
O43 - CFD: 25/12/2012 - 12:31:38 - [0] ----D C:\Users\Marwan\AppData\Local\{9C51638C-A3DF-4EA2-9C79-3E06D34E7D41}
O43 - CFD: 10/05/2012 - 09:57:38 - [0] ----D C:\Users\Marwan\AppData\Local\{9C9D98BB-46E7-487E-8A93-F10F92501023}
O43 - CFD: 19/07/2012 - 09:45:59 - [0] ----D C:\Users\Marwan\AppData\Local\{9CA1FEF7-A42C-4C0F-B3DE-02524199A477}
O43 - CFD: 05/06/2012 - 10:18:27 - [0] ----D C:\Users\Marwan\AppData\Local\{9E448938-737E-426A-866D-471783745D10}
O43 - CFD: 03/03/2012 - 12:08:51 - [0] ----D C:\Users\Marwan\AppData\Local\{9E4EFE08-6800-4B6F-8FFB-95BAE1F4BBEF}
O43 - CFD: 29/11/2012 - 16:24:38 - [0] ----D C:\Users\Marwan\AppData\Local\{9EEF22F9-1A1C-47ED-BDDE-ADB06010B275}
O43 - CFD: 09/05/2012 - 16:42:20 - [0] ----D C:\Users\Marwan\AppData\Local\{9EFA8E07-888C-4819-A70F-3C28D09F22A2}
O43 - CFD: 18/07/2012 - 21:39:39 - [0] ----D C:\Users\Marwan\AppData\Local\{9F21ABFF-88F2-4754-AFDA-06CF5AFA8AA1}
O43 - CFD: 16/07/2012 - 10:50:32 - [0] ----D C:\Users\Marwan\AppData\Local\{9F9C28C3-61B5-4B90-BE92-CBA9CAC6925E}
O43 - CFD: 13/06/2012 - 13:39:24 - [0] ----D C:\Users\Marwan\AppData\Local\{A05A4015-DBAE-4B69-BDBB-445108810D11}
O43 - CFD: 18/07/2012 - 16:21:39 - [0] ----D C:\Users\Marwan\AppData\Local\{A0D7FA26-C62E-4B24-B5D3-D10B3FD7B0EB}
O43 - CFD: 20/07/2012 - 13:02:17 - [0] ----D C:\Users\Marwan\AppData\Local\{A106FA4F-DEDE-4D11-BBDE-F5BBDFD97CBD}
O43 - CFD: 22/10/2012 - 13:06:55 - [0] ----D C:\Users\Marwan\AppData\Local\{A10E2F78-163C-4175-A364-BE7E1424266D}
O43 - CFD: 19/02/2012 - 11:33:57 - [0] ----D C:\Users\Marwan\AppData\Local\{A11D8795-4D6C-4F5C-BAC6-4D2CBB84F516}
O43 - CFD: 28/11/2012 - 12:55:13 - [0] ----D C:\Users\Marwan\AppData\Local\{A12B92F5-3997-49F2-8E94-BD346236B0C6}
O43 - CFD: 20/10/2012 - 06:12:53 - [0] ----D C:\Users\Marwan\AppData\Local\{A13EAAB9-0E28-407F-A709-DF76057B8337}
O43 - CFD: 05/06/2012 - 09:39:55 - [0] ----D C:\Users\Marwan\AppData\Local\{A1503164-8AC6-43F0-926F-9C6C193336B4}
O43 - CFD: 30/07/2012 - 13:07:34 - [0] ----D C:\Users\Marwan\AppData\Local\{A1A7DB13-F7D1-4FF8-A4DA-F96FF61E1B7E}
O43 - CFD: 14/04/2012 - 11:29:18 - [0] ----D C:\Users\Marwan\AppData\Local\{A1FB4307-D050-4F94-B8A7-857F98994CD9}
O43 - CFD: 21/07/2012 - 09:52:55 - [0] ----D C:\Users\Marwan\AppData\Local\{A2F3E1FC-2641-4262-A828-B369F45BC9BA}
O43 - CFD: 19/06/2012 - 18:15:21 - [0] ----D C:\Users\Marwan\AppData\Local\{A3B6824B-4238-47F7-9520-3D1955E475FB}
O43 - CFD: 23/03/2012 - 08:49:09 - [0] ----D C:\Users\Marwan\AppData\Local\{A47B68A1-93AF-4AB8-88F8-5A7082DED40A}
O43 - CFD: 24/12/2012 - 12:35:28 - [0] ----D C:\Users\Marwan\AppData\Local\{A4A71AE0-514D-49E9-90A8-9D8D1FF583EB}
O43 - CFD: 16/07/2012 - 11:39:16 - [0] ----D C:\Users\Marwan\AppData\Local\{A4C2BA54-1DC7-4A25-A7AB-CC64090B193B}
O43 - CFD: 18/04/2012 - 10:38:05 - [0] ----D C:\Users\Marwan\AppData\Local\{A511FB89-A259-4CC5-96D8-942E627B79F3}
O43 - CFD: 17/09/2012 - 11:35:19 - [0] ----D C:\Users\Marwan\AppData\Local\{A5458AE3-E0E9-41AC-971F-D79FE9381688}
O43 - CFD: 04/10/2012 - 14:42:18 - [0] ----D C:\Users\Marwan\AppData\Local\{A55C886F-14B6-4AA2-9C9F-7213A9AB43E9}
O43 - CFD: 22/05/2012 - 19:26:10 - [0] ----D C:\Users\Marwan\AppData\Local\{A5C1B129-D137-48EB-ADC4-890A0621D905}
O43 - CFD: 03/09/2012 - 12:22:03 - [0] ----D C:\Users\Marwan\AppData\Local\{A696D419-0BB5-4621-84AA-8A65FEBA3C26}
O43 - CFD: 14/06/2012 - 09:41:32 - [0] ----D C:\Users\Marwan\AppData\Local\{A71E65F2-7CC5-4725-8C6B-A5C6C70D1662}
O43 - CFD: 16/08/2012 - 13:20:49 - [0] ----D C:\Users\Marwan\AppData\Local\{A73C18E9-4796-4B27-B147-3831CC2599F3}
O43 - CFD: 16/12/2012 - 10:49:53 - [0] ----D C:\Users\Marwan\AppData\Local\{A740EC2C-9B02-4EA3-9CEC-31D2400AB5B2}
O43 - CFD: 24/07/2012 - 10:23:30 - [0] ----D C:\Users\Marwan\AppData\Local\{A752FC1B-B18F-4629-877D-561950377817}
O43 - CFD: 22/03/2012 - 17:41:58 - [0] ----D C:\Users\Marwan\AppData\Local\{A79FF9DF-E3F7-457B-BD6C-0E4C73512EF5}
O43 - CFD: 28/04/2012 - 13:00:49 - [0] ----D C:\Users\Marwan\AppData\Local\{A7FA96C8-366E-4817-920C-7F6DB998D7FC}
O43 - CFD: 16/11/2012 - 09:02:16 - [0] ----D C:\Users\Marwan\AppData\Local\{A81C609E-1559-4FAD-85C4-A0B0142B410B}
O43 - CFD: 10/11/2012 - 10:14:33 - [0] ----D C:\Users\Marwan\AppData\Local\{A86AD4DA-5B8C-44A1-B938-F765B8F5987F}
O43 - CFD: 26/07/2012 - 23:43:49 - [0] ----D C:\Users\Marwan\AppData\Local\{A8DBD213-3D02-4B83-8CCB-6000FF33D85E}
O43 - CFD: 01/03/2012 - 09:36:31 - [0] ----D C:\Users\Marwan\AppData\Local\{A95383F5-E1F3-4E36-8166-D4136ED9770A}
O43 - CFD: 25/07/2012 - 10:25:10 - [0] ----D C:\Users\Marwan\AppData\Local\{A9667A21-7FA0-4A49-B0F5-0FD0EAEC36B2}
O43 - CFD: 09/11/2012 - 16:41:50 - [0] ----D C:\Users\Marwan\AppData\Local\{A9677D9C-C8BA-4222-973E-AC626451FB7C}
O43 - CFD: 22/06/2012 - 09:06:45 - [0] ----D C:\Users\Marwan\AppData\Local\{AA7DA97B-A724-46AC-8152-DC1A2F4732B5}
O43 - CFD: 26/06/2012 - 17:23:36 - [0] ----D C:\Users\Marwan\AppData\Local\{AA980102-92D1-4384-9D91-70ECDE5089DB}
O43 - CFD: 12/03/2012 - 09:05:31 - [0] ----D C:\Users\Marwan\AppData\Local\{AAA7FDFD-B24E-43D5-88FC-E7D996DD3782}
O43 - CFD: 27/07/2012 - 19:39:22 - [0] ----D C:\Users\Marwan\AppData\Local\{AB0E368F-33EE-4528-A58F-228BF1D0DCE4}
O43 - CFD: 28/06/2012 - 08:19:48 - [0] ----D C:\Users\Marwan\AppData\Local\{ABD24B66-58FC-4880-ABB6-E88AE9C3A1E7}
O43 - CFD: 11/06/2012 - 13:45:56 - [0] ----D C:\Users\Marwan\AppData\Local\{ABE52429-1A35-4BE3-BFDB-8EA46812939C}
O43 - CFD: 06/04/2012 - 17:17:43 - [0] ----D C:\Users\Marwan\AppData\Local\{ACA417AD-25AD-4935-831C-1C2611F0CE81}
O43 - CFD: 30/06/2012 - 13:26:43 - [0] ----D C:\Users\Marwan\AppData\Local\{ADCDCEBE-C885-482E-AC50-1E3402E079A0}
O43 - CFD: 11/03/2012 - 11:36:41 - [0] ----D C:\Users\Marwan\AppData\Local\{AE78ED84-8975-45A0-B8CA-FE685725DECF}
O43 - CFD: 28/09/2012 - 14:38:09 - [0] ----D C:\Users\Marwan\AppData\Local\{AE8E85C4-8F63-43CC-A20A-026323B38419}
O43 - CFD: 31/07/2012 - 01:56:07 - [0] ----D C:\Users\Marwan\AppData\Local\{AEDEFFDF-EFA3-4D50-9E0F-1F1577542B73}
O43 - CFD: 31/08/2012 - 11:05:03 - [0] ----D C:\Users\Marwan\AppData\Local\{AFB22009-C9FC-47BE-87BE-E1934B72958D}
O43 - CFD: 28/05/2012 - 13:32:58 - [0] ----D C:\Users\Marwan\AppData\Local\{B0AB535D-352F-4C21-B925-D99B15A16C83}
O43 - CFD: 05/06/2012 - 21:56:54 - [0] ----D C:\Users\Marwan\AppData\Local\{B0AC1250-774D-4276-AF43-BB471E16FB2D}
O43 - CFD: 05/03/2012 - 17:12:14 - [0] ----D C:\Users\Marwan\AppData\Local\{B13773DB-7E29-4F39-B1E4-C6FA22127543}
O43 - CFD: 23/09/2012 - 17:06:34 - [0] ----D C:\Users\Marwan\AppData\Local\{B32915C9-C2F1-4EAF-A3BB-70571A0C8063}
O43 - CFD: 25/11/2012 - 12:58:48 - [0] ----D C:\Users\Marwan\AppData\Local\{B3CA3320-3AE7-4073-A93E-E2D1DC2A4349}
O43 - CFD: 15/03/2012 - 15:08:16 - [0] ----D C:\Users\Marwan\AppData\Local\{B3DFF47C-5905-4EAB-878B-50BB612F14A5}
O43 - CFD: 19/03/2012 - 15:08:33 - [0] ----D C:\Users\Marwan\AppData\Local\{B455755B-0673-4275-BFF5-992B93AB004C}
O43 - CFD: 15/07/2012 - 22:15:32 - [0] ----D C:\Users\Marwan\AppData\Local\{B4AACB83-3E38-4577-A778-44C115775664}
O43 - CFD: 30/06/2012 - 11:12:11 - [0] ----D C:\Users\Marwan\AppData\Local\{B54EDBA3-DCDD-4897-8114-24CC7E6D27F1}
O43 - CFD: 02/10/2012 - 16:51:53 - [0] ----D C:\Users\Marwan\AppData\Local\{B57112A8-33B3-4B5E-A5A6-F33E44C6A8A6}
O43 - CFD: 29/04/2012 - 11:41:03 - [0] ----D C:\Users\Marwan\AppData\Local\{B5B699E9-1C12-44D0-914D-14F5E3EBE3C5}
O43 - CFD: 16/06/2012 - 11:46:13 - [0] ----D C:\Users\Marwan\AppData\Local\{B632505F-699B-4097-87BB-B977AC482BA8}
O43 - CFD: 22/11/2012 - 15:28:24 - [0] ----D C:\Users\Marwan\AppData\Local\{B67A5CA3-EF9C-4D80-ADDA-B9BFFC8817A2}
O43 - CFD: 24/05/2012 - 14:11:04 - [0] ----D C:\Users\Marwan\AppData\Local\{B6843910-77F9-4CB3-9E88-AFB0FD866442}
O43 - CFD: 25/04/2012 - 02:38:48 - [0] ----D C:\Users\Marwan\AppData\Local\{B76FA5DE-5F62-40A2-B72E-CB1675E882DF}
O43 - CFD: 30/10/2012 - 23:50:17 - [0] ----D C:\Users\Marwan\AppData\Local\{B795C314-3CC9-4B72-B19A-08ADC3F597B4}
O43 - CFD: 15/03/2012 - 15:08:05 - [0] ----D C:\Users\Marwan\AppData\Local\{B7C456BB-51FA-4431-A3BD-D30FE7E55E50}
O43 - CFD: 08/06/2012 - 11:53:07 - [0] ----D C:\Users\Marwan\AppData\Local\{B805BA38-169B-4890-8C4C-AD3EC423D9C6}
O43 - CFD: 15/09/2012 - 16:12:18 - [0] ----D C:\Users\Marwan\AppData\Local\{B85D12EB-A4BA-4A21-8201-C91593D4E597}
O43 - CFD: 29/06/2012 - 21:31:03 - [0] ----D C:\Users\Marwan\AppData\Local\{B888F377-DA9D-45F6-A02D-A36B225A6AD8}
O43 - CFD: 26/05/2012 - 11:07:10 - [0] ----D C:\Users\Marwan\AppData\Local\{B9A30CCE-B5FB-4AD9-BBE2-D86D9F5B9E76}
O43 - CFD: 03/06/2012 - 18:08:49 - [0] ----D C:\Users\Marwan\AppData\Local\{BA1BEE24-78F4-40CD-96EC-CBA4236F8DD6}
O43 - CFD: 20/02/2012 - 10:52:22 - [0] ----D C:\Users\Marwan\AppData\Local\{BA2B7252-3CFE-453A-AAFF-E1081823CB5C}
O43 - CFD: 31/10/2012 - 16:37:16 - [0] ----D C:\Users\Marwan\AppData\Local\{BA4D1979-BC49-4D28-A001-16AD9608B767}
O43 - CFD: 05/06/2012 - 10:18:37 - [0] ----D C:\Users\Marwan\AppData\Local\{BA5B61B3-3DAE-40BF-AFE2-DA85E05BF7D6}
O43 - CFD: 15/05/2012 - 12:48:06 - [0] ----D C:\Users\Marwan\AppData\Local\{BA98CB3D-B6FC-4B85-8184-64A4FC76EA6F}
O43 - CFD: 21/10/2012 - 18:08:46 - [0] ----D C:\Users\Marwan\AppData\Local\{BBD80BD1-3C16-4E66-8730-0E1D152E7C56}
O43 - CFD: 07/05/2012 - 14:16:19 - [0] ----D C:\Users\Marwan\AppData\Local\{BC869A28-1582-4F3A-80BC-E1ACFA5E161F}
O43 - CFD: 23/05/2012 - 13:05:11 - [0] ----D C:\Users\Marwan\AppData\Local\{BCE07521-C721-40E5-A5A4-2A872AD11D66}
O43 - CFD: 17/07/2012 - 12:00:14 - [0] ----D C:\Users\Marwan\AppData\Local\{BD69F019-4E3A-4497-9C60-630A056314C3}
O43 - CFD: 19/02/2012 - 19:08:21 - [0] ----D C:\Users\Marwan\AppData\Local\{BDBBBF88-7795-4063-A259-9B21D4C4B4A7}
O43 - CFD: 08/03/2012 - 18:00:46 - [0] ----D C:\Users\Marwan\AppData\Local\{BDD2FEA7-FD33-4395-A780-08BBB94491C6}
O43 - CFD: 23/04/2012 - 23:33:00 - [0] ----D C:\Users\Marwan\AppData\Local\{BE4C2A39-7679-41A3-8BD9-C766401A3DE3}
O43 - CFD: 27/07/2012 - 20:19:52 - [0] ----D C:\Users\Marwan\AppData\Local\{BEB6FE0B-EBEF-4A12-99EE-DECFEAE47D7F}
O43 - CFD: 06/06/2012 - 11:20:17 - [0] ----D C:\Users\Marwan\AppData\Local\{BEC2FC2F-15A3-4DCF-B512-B6D8C88FBC12}
O43 - CFD: 11/10/2012 - 17:46:09 - [0] ----D C:\Users\Marwan\AppData\Local\{BF6116F5-232C-4C15-BBAD-C91D6661E441}
O43 - CFD: 05/03/2012 - 17:11:52 - [0] ----D C:\Users\Marwan\AppData\Local\{C009B3B3-C0E5-4CBE-B00B-CCFDCBB85EDE}
O43 - CFD: 11/03/2012 - 11:36:30 - [0] ----D C:\Users\Marwan\AppData\Local\{C159C10B-2B84-4BCC-A5F9-AAA06161F663}
O43 - CFD: 29/05/2012 - 14:37:23 - [0] ----D C:\Users\Marwan\AppData\Local\{C172D78E-19B0-401E-A771-E3DB750EB845}
O43 - CFD: 27/04/2012 - 11:43:09 - [0] ----D C:\Users\Marwan\AppData\Local\{C1CEDBDC-BF6B-4F0E-878B-D46DB1F7FB96}
O43 - CFD: 06/06/2012 - 00:01:24 - [0] ----D C:\Users\Marwan\AppData\Local\{C31A8FC4-F72F-4A0A-9992-A4540D7A43B0}
O43 - CFD: 11/04/2012 - 12:33:03 - [0] ----D C:\Users\Marwan\AppData\Local\{C3736074-03EE-4E84-BF63-ECBEDC0BD902}
O43 - CFD: 29/04/2012 - 21:32:28 - [0] ----D C:\Users\Marwan\AppData\Local\{C3987B12-2155-4DB6-8611-49AD0B495183}
O43 - CFD: 28/03/2012 - 17:44:53 - [0] ----D C:\Users\Marwan\AppData\Local\{C3B62749-E577-4570-9C56-6C894CF433A1}
O43 - CFD: 11/12/2012 - 15:09:06 - [0] ----D C:\Users\Marwan\AppData\Local\{C40544C5-DE69-4F77-A5BB-B81CF8396120}
O43 - CFD: 02/08/2012 - 12:57:07 - [0] ----D C:\Users\Marwan\AppData\Local\{C42ACFD5-11BB-40A7-94E4-CBD68E4D9C1A}
O43 - CFD: 18/12/2012 - 16:32:19 - [0] ----D C:\Users\Marwan\AppData\Local\{C5C15245-6163-4712-A43D-0EBC28A1BBD0}
O43 - CFD: 24/07/2012 - 12:06:13 - [0] ----D C:\Users\Marwan\AppData\Local\{C65BC517-EE27-4867-ACCB-9AE1D0CD0ED0}
O43 - CFD: 25/07/2012 - 20:56:30 - [0] ----D C:\Users\Marwan\AppData\Local\{C73DC878-AEBD-4E43-B47A-D0B7E1EDECCB}
O43 - CFD: 24/11/2012 - 12:38:44 - [0] ----D C:\Users\Marwan\AppData\Local\{C837FC65-7440-4401-98FA-796BE76B9D9A}
O43 - CFD: 01/07/2012 - 11:15:40 - [0] ----D C:\Users\Marwan\AppData\Local\{C88C3971-74F0-4877-8DB1-C71C49F73707}
O43 - CFD: 22/06/2012 - 22:21:48 - [0] ----D C:\Users\Marwan\AppData\Local\{C8B5C596-1364-4D57-ACCB-4B16B6014B57}
O43 - CFD: 19/07/2012 - 00:30:54 - [0] ----D C:\Users\Marwan\AppData\Local\{C928637D-CC67-4D16-AE4D-D7FB95D77E59}
O43 - CFD: 28/06/2012 - 08:20:05 - [0] ----D C:\Users\Marwan\AppData\Local\{C9498273-D242-408F-8B11-86661FA65681}
O43 - CFD: 25/02/2012 - 13:05:50 - [0] ----D C:\Users\Marwan\AppData\Local\{C9DDE207-D96B-49A2-9616-627FE9770259}
O43 - CFD: 30/11/2012 - 10:42:32 - [0] ----D C:\Users\Marwan\AppData\Local\{CA4F3783-5F7E-4DEF-9A81-9CDB6F67113C}
O43 - CFD: 02/05/2012 - 17:43:31 - [0] ----D C:\Users\Marwan\AppData\Local\{CA74C672-358D-4431-A44A-282925DFAE2E}
O43 - CFD: 03/12/2012 - 11:16:31 - [0] ----D C:\Users\Marwan\AppData\Local\{CA896080-55D0-455F-9EA7-5241286C7035}
O43 - CFD: 22/05/2012 - 19:25:59 - [0] ----D C:\Users\Marwan\AppData\Local\{CAABD403-2ACB-4005-B88A-DEA76F55A734}
O43 - CFD: 06/06/2012 - 00:13:51 - [0] ----D C:\Users\Marwan\AppData\Local\{CB1B28A4-56BD-4404-AFD8-6BDF54918544}
O43 - CFD: 11/11/2012 - 10:40:20 - [0] ----D C:\Users\Marwan\AppData\Local\{CB4B276A-3FAA-481B-90B5-CD50264F21F2}
O43 - CFD: 10/06/2012 - 20:15:32 - [0] ----D C:\Users\Marwan\AppData\Local\{CB991D93-B038-44ED-8B5F-FE56CC1FF192}
O43 - CFD: 26/05/2012 - 16:28:35 - [0] ----D C:\Users\Marwan\AppData\Local\{CBCC2E1C-8E74-47AD-8F65-713252E208F2}
O43 - CFD: 27/06/2012 - 17:10:32 - [0] ----D C:\Users\Marwan\AppData\Local\{CC1E4927-CDAA-45CA-8BCD-8E76A26417AE}
O43 - CFD: 24/10/2012 - 12:54:24 - [0] ----D C:\Users\Marwan\AppData\Local\{CC26E43D-829C-4854-87DB-1416A591A5D8}
O43 - CFD: 24/04/2012 - 10:12:51 - [0] ----D C:\Users\Marwan\AppData\Local\{CCDA65F9-861A-4B38-88E1-45CCE3D25900}
O43 - CFD: 04/08/2012 - 09:59:56 - [0] ----D C:\Users\Marwan\AppData\Local\{CCE25CE2-A4A0-4D31-80F3-398925C41D85}
O43 - CFD: 27/06/2012 - 17:10:49 - [0] ----D C:\Users\Marwan\AppData\Local\{CD73318A-DAA7-47A5-B851-89A88B67DCC2}
O43 - CFD: 18/05/2012 - 10:07:39 - [0] ----D C:\Users\Marwan\AppData\Local\{CD7B0485-F345-4E38-9224-E5A0EC3A1039}
O43 - CFD: 09/03/2012 - 13:59:23 - [0] ----D C:\Users\Marwan\AppData\Local\{CDE580CB-73CA-41C6-A911-7BF15D57E39A}
O43 - CFD: 26/10/2012 - 09:55:03 - [0] ----D C:\Users\Marwan\AppData\Local\{CE4CC0B9-559C-4B9E-BAD7-0DDA2D3F5E16}
O43 - CFD: 01/05/2012 - 11:28:30 - [0] ----D C:\Users\Marwan\AppData\Local\{CE572339-5A21-4798-8809-493B8DDDCF8C}
O43 - CFD: 23/07/2012 - 21:30:09 - [0] ----D C:\Users\Marwan\AppData\Local\{CE580D55-95E3-4810-B215-8FA8EB9AFB3C}
O43 - CFD: 20/06/2012 - 11:46:06 - [0] ----D C:\Users\Marwan\AppData\Local\{CEAFF186-60BA-4BB4-83F6-60D41B847FD8}
O43 - CFD: 09/09/2012 - 11:43:43 - [0] ----D C:\Users\Marwan\AppData\Local\{CEB196A8-B115-45C2-A56D-DF9CE8EDAFAE}
O43 - CFD: 26/04/2012 - 11:16:42 - [0] ----D C:\Users\Marwan\AppData\Local\{CF30D3C7-0F6C-4900-86C7-F2E604130E00}
O43 - CFD: 17/05/2012 - 09:59:25 - [0] ----D C:\Users\Marwan\AppData\Local\{CFFDF55B-5AD8-4AA0-8577-EC7920F81D7E}
O43 - CFD: 04/01/2013 - 15:11:22 - [0] ----D C:\Users\Marwan\AppData\Local\{D06D691A-E1C7-4BB4-98E9-FD1F0206EBE2}
O43 - CFD: 29/10/2012 - 21:00:18 - [0] ----D C:\Users\Marwan\AppData\Local\{D09A1E07-C58A-4B6A-915A-4CF4329A6BF6}
O43 - CFD: 25/10/2012 - 15:53:36 - [0] ----D C:\Users\Marwan\AppData\Local\{D0FB13E8-5AFE-4693-8AC2-8C81B536D91A}
O43 - CFD: 02/05/2012 - 13:28:19 - [0] ----D C:\Users\Marwan\AppData\Local\{D10E6F51-BE91-42D1-80B9-074F6DE53F8C}
O43 - CFD: 15/07/2012 - 16:16:58 - [0] ----D C:\Users\Marwan\AppData\Local\{D2095F6C-FC5D-4DE2-B34D-4631EB97CAAB}
O43 - CFD: 27/06/2012 - 10:54:55 - [0] ----D C:\Users\Marwan\AppData\Local\{D35AFF2A-5915-40A2-97BF-1BAAD70FE4D5}
O43 - CFD: 22/07/2012 - 11:55:52 - [0] ----D C:\Users\Marwan\AppData\Local\{D3978D7F-6BE9-4227-8D27-853793F3A5E1}
O43 - CFD: 14/06/2012 - 11:27:37 - [0] ----D C:\Users\Marwan\AppData\Local\{D442CD62-5D2C-459E-BE96-C5CB0F2AFC59}
O43 - CFD: 05/04/2012 - 15:24:48 - [0] ----D C:\Users\Marwan\AppData\Local\{D4574E82-28CF-4751-B8E5-C58536421D18}
O43 - CFD: 05/06/2012 - 20:28:18 - [0] ----D C:\Users\Marwan\AppData\Local\{D4B99C2E-0401-4206-9575-BF624F27D23A}
O43 - CFD: 21/07/2012 - 12:35:30 - [0] ----D C:\Users\Marwan\AppData\Local\{D4BE9283-3CE2-404F-954B-2C775EB4C120}
O43 - CFD: 04/03/2012 - 12:12:55 - [0] ----D C:\Users\Marwan\AppData\Local\{D5BFE0B2-5287-4BE4-8039-6E2CE6EE43B1}
O43 - CFD: 06/04/2012 - 17:35:53 - [0] ----D C:\Users\Marwan\AppData\Local\{D6210FD9-BC53-4B21-8837-A13A5E5962BD}
O43 - CFD: 24/06/2012 - 15:13:13 - [0] ----D C:\Users\Marwan\AppData\Local\{D6225748-0C41-4589-B7E3-B05AEFE1C9CE}
O43 - CFD: 23/06/2012 - 14:32:30 - [0] ----D C:\Users\Marwan\AppData\Local\{D632FDD0-D269-4D51-9A38-BE92912C8B58}
O43 - CFD: 12/05/2012 - 16:15:12 - [0] ----D C:\Users\Marwan\AppData\Local\{D693BDE1-BA27-4570-A6FF-3A6CD133C4E4}
O43 - CFD: 13/12/2012 - 16:32:49 - [0] ----D C:\Users\Marwan\AppData\Local\{D6AB46C3-182C-4E85-808F-57244C040805}
O43 - CFD: 20/07/2012 - 13:02:28 - [0] ----D C:\Users\Marwan\AppData\Local\{D6E42888-CFF2-40B3-BFEF-13D4B0977A8F}
O43 - CFD: 03/06/2012 - 15:22:32 - [0] ----D C:\Users\Marwan\AppData\Local\{D7497CD9-2A8A-42DC-AF5B-F1DB6BAEE759}
O43 - CFD: 23/02/2012 - 10:46:57 - [0] ----D C:\Users\Marwan\AppData\Local\{D7A0F6EF-5680-46E0-8440-C103F1AC0E64}
O43 - CFD: 20/05/2012 - 11:21:32 - [0] ----D C:\Users\Marwan\AppData\Local\{D7A47087-6782-4EC0-B2F9-B6C8D2D48B4A}
O43 - CFD: 15/04/2012 - 11:00:17 - [0] ----D C:\Users\Marwan\AppData\Local\{D7B7E1C5-3B66-43CA-A980-9BFAA4E0BBCA}
O43 - CFD: 21/07/2012 - 12:35:18 - [0] ----D C:\Users\Marwan\AppData\Local\{D7B7EB4B-96C6-42A4-97B3-36FEE6517901}
O43 - CFD: 03/06/2012 - 11:17:45 - [0] ----D C:\Users\Marwan\AppData\Local\{D88DCAA4-CD0C-47FE-96F0-419F5A41825B}
O43 - CFD: 23/07/2012 - 21:29:58 - [0] ----D C:\Users\Marwan\AppData\Local\{D8DA87D3-2A9B-4D29-B24B-9F3B425D33AA}
O43 - CFD: 21/05/2012 - 16:23:43 - [0] ----D C:\Users\Marwan\AppData\Local\{D934BBA4-B1A9-47BD-A007-C3EADB28B7E1}
O43 - CFD: 12/11/2012 - 17:26:13 - [0] ----D C:\Users\Marwan\AppData\Local\{D9952A12-0A03-4775-BBA2-5D6147BD84A0}
O43 - CFD: 06/10/2012 - 12:10:37 - [0] ----D C:\Users\Marwan\AppData\Local\{D9C912B7-5CF2-4A2A-918B-563F80D91622}
O43 - CFD: 23/11/2012 - 15:32:00 - [0] ----D C:\Users\Marwan\AppData\Local\{D9F796AE-37FF-4018-963F-4DC040527CCD}
O43 - CFD: 04/09/2012 - 11:38:26 - [0] ----D C:\Users\Marwan\AppData\Local\{DA31FF4F-023D-49E5-B482-D0196F987DF2}
O43 - CFD: 14/05/2012 - 08:02:57 - [0] ----D C:\Users\Marwan\AppData\Local\{DA72E8BC-DA73-410B-9428-06FE7EB6848C}
O43 - CFD: 05/10/2012 - 14:47:56 - [0] ----D C:\Users\Marwan\AppData\Local\{DB734A9E-59A2-4CAC-A4F1-E38E243F815C}
O43 - CFD: 26/12/2012 - 11:31:46 - [0] ----D C:\Users\Marwan\AppData\Local\{DCE2C850-73CB-4859-9B86-F328629EC2AE}
O43 - CFD: 17/07/2012 - 09:47:29 - [0] ----D C:\Users\Marwan\AppData\Local\{DE64E649-6D42-42F1-8EED-7FB07131B83F}
O43 - CFD: 02/05/2012 - 17:43:42 - [0] ----D C:\Users\Marwan\AppData\Local\{DE74E35B-A793-4F6C-A460-2CBDD8E9AA4C}
O43 - CFD: 10/06/2012 - 17:29:08 - [0] ----D C:\Users\Marwan\AppData\Local\{DE8FFC62-AD1A-47A8-840F-5B9082C1E7A8}
O43 - CFD: 13/06/2012 - 17:04:10 - [0] ----D C:\Users\Marwan\AppData\Local\{DEF5058E-16B3-416A-BF59-6E3F3DC5E50D}
O43 - CFD: 17/03/2012 - 08:26:48 - [0] ----D C:\Users\Marwan\AppData\Local\{DF653C9F-C6BA-4BCC-B506-3A6752CDFA5C}
O43 - CFD: 19/07/2012 - 11:10:07 - [0] ----D C:\Users\Marwan\AppData\Local\{DFAE5480-3C62-40A2-B13C-C5BEC9E2B150}
O43 - CFD: 04/06/2012 - 09:05:51 - [0] ----D C:\Users\Marwan\AppData\Local\{DFBC2E8F-F965-4A70-9C6A-B4A90649F912}
O43 - CFD: 29/09/2012 - 12:26:58 - [0] ----D C:\Users\Marwan\AppData\Local\{E00520EB-9C27-4B5A-BBAF-B91F82B0A2B8}
O43 - CFD: 12/08/2012 - 12:38:09 - [0] ----D C:\Users\Marwan\AppData\Local\{E00E25AA-2F6B-41CE-B58D-7407B4E528DA}
O43 - CFD: 09/06/2012 - 13:14:15 - [0] ----D C:\Users\Marwan\AppData\Local\{E0B45A9A-94A4-4758-8F6E-FC221B02976F}
O43 - CFD: 25/11/2012 - 02:24:23 - [0] ----D C:\Users\Marwan\AppData\Local\{E10A43DB-FAAA-4073-B50B-CFAF9EA0FBF8}
O43 - CFD: 17/07/2012 - 21:59:31 - [0] ----D C:\Users\Marwan\AppData\Local\{E149C6B1-E7CA-4129-BE40-9DA4A307CEC0}
O43 - CFD: 30/05/2012 - 17:19:42 - [0] ----D C:\Users\Marwan\AppData\Local\{E161496C-C145-479A-BD51-7D6D7FF83967}
O43 - CFD: 21/07/2012 - 14:08:54 - [0] ----D C:\Users\Marwan\AppData\Local\{E28A76B4-CAB6-4F66-A2B0-C911D4EF5AE5}
O43 - CFD: 30/05/2012 - 10:23:27 - [0] ----D C:\Users\Marwan\AppData\Local\{E2EFDF5A-C203-4814-96C0-366F20228EB9}
O43 - CFD: 14/06/2012 - 09:41:21 - [0] ----D C:\Users\Marwan\AppData\Local\{E31AA55D-92DE-40AE-BD53-1FD842F07577}
O43 - CFD: 09/11/2012 - 09:57:31 - [0] ----D C:\Users\Marwan\AppData\Local\{E3686ED7-91CC-4434-9786-7468DA094C83}
O43 - CFD: 15/04/2012 - 11:00:28 - [0] ----D C:\Users\Marwan\AppData\Local\{E3CC5FF4-C610-46A0-BB55-1947BD060A1B}
O43 - CFD: 14/04/2012 - 11:14:56 - [0] ----D C:\Users\Marwan\AppData\Local\{E4054A5F-3EA7-4473-AEDB-52365763F95F}
O43 - CFD: 27/06/2012 - 14:12:05 - [0] ----D C:\Users\Marwan\AppData\Local\{E43B62E3-1478-4917-A2FB-E44D354BC8DD}
O43 - CFD: 04/05/2012 - 12:24:17 - [0] ----D C:\Users\Marwan\AppData\Local\{E4C16CF5-00CD-45C7-A3E9-23DA0CCBAB13}
O43 - CFD: 23/03/2012 - 08:48:46 - [0] ----D C:\Users\Marwan\AppData\Local\{E4E45A31-21A6-4DBC-8543-D589DBC80AB6}
O43 - CFD: 25/07/2012 - 20:56:57 - [0] ----D C:\Users\Marwan\AppData\Local\{E57995BA-D9A4-4DEC-BC09-E242F63D80C8}
O43 - CFD: 01/06/2012 - 15:13:44 - [0] ----D C:\Users\Marwan\AppData\Local\{E5FABF59-C7CE-4021-9E3B-DB4C0770E9B0}
O43 - CFD: 03/11/2012 - 16:54:49 - [0] ----D C:\Users\Marwan\AppData\Local\{E6D4C47F-F04D-44C1-A602-71D255DFC2E1}
O43 - CFD: 15/12/2012 - 10:37:34 - [0] ----D C:\Users\Marwan\AppData\Local\{E70696A1-3A5E-43EB-9FEB-375E85029A31}
O43 - CFD: 22/02/2012 - 10:46:44 - [0] ----D C:\Users\Marwan\AppData\Local\{E719BEA9-0488-4C7D-BA77-B6C9CB0762AC}
O43 - CFD: 06/06/2012 - 15:00:29 - [0] ----D C:\Users\Marwan\AppData\Local\{E77619CC-02BB-41A9-A04E-F04170E1831F}
O43 - CFD: 03/06/2012 - 18:09:00 - [0] ----D C:\Users\Marwan\AppData\Local\{E7AC2AC9-5B4F-410F-AB3C-9BABAC860BE0}
O43 - CFD: 06/03/2012 - 15:43:43 - [0] ----D C:\Users\Marwan\AppData\Local\{E8B32C83-D615-489E-BBAC-898DCE9E5620}
O43 - CFD: 02/03/2012 - 11:13:06 - [0] ----D C:\Users\Marwan\AppData\Local\{E8DE3771-7349-4E2B-8D1F-007D3A5817AD}
O43 - CFD: 15/07/2012 - 16:16:43 - [0] ----D C:\Users\Marwan\AppData\Local\{E908F7E6-B733-4809-AB82-8BA39D9887B1}
O43 - CFD: 27/07/2012 - 20:10:26 - [0] ----D C:\Users\Marwan\AppData\Local\{E94E21DA-52D3-48B5-814E-5EBFE1BCEAB9}
O43 - CFD: 23/06/2012 - 11:52:51 - [0] ----D C:\Users\Marwan\AppData\Local\{E97CC949-C5E1-42F4-BAC7-288D26252E09}
O43 - CFD: 09/12/2012 - 17:30:53 - [0] ----D C:\Users\Marwan\AppData\Local\{E9A336A4-14D2-49FD-A325-05669E2FB4D1}
O43 - CFD: 06/11/2012 - 09:53:04 - [0] ----D C:\Users\Marwan\AppData\Local\{E9AF7916-8C93-4AB7-B4F1-2B53D24EDA73}
O43 - CFD: 13/05/2012 - 16:45:22 - [0] ----D C:\Users\Marwan\AppData\Local\{E9F144FD-C890-40A9-928B-0E4A7E6A0EDF}
O43 - CFD: 18/02/2012 - 12:51:56 - [0] ----D C:\Users\Marwan\AppData\Local\{E9FDACEB-1787-4FDD-A575-654EECA08596}
O43 - CFD: 29/07/2012 - 11:58:36 - [0] ----D C:\Users\Marwan\AppData\Local\{EA1F6F08-AC4B-47E2-92EB-9995E42EA7AE}
O43 - CFD: 12/05/2012 - 16:15:00 - [0] ----D C:\Users\Marwan\AppData\Local\{EA2DEA79-DE04-4DBD-A117-EE2C0FF35A76}
O43 - CFD: 29/02/2012 - 12:57:58 - [0] ----D C:\Users\Marwan\AppData\Local\{EA365B78-EE59-4A38-A0B3-56ECC64FE58B}
O43 - CFD: 25/06/2012 - 15:24:44 - [0] ----D C:\Users\Marwan\AppData\Local\{EAD69F9F-48C0-44C5-8DA5-CE29148DD8B3}
O43 - CFD: 06/06/2012 - 15:00:18 - [0] ----D C:\Users\Marwan\AppData\Local\{EAE916AD-1507-4CFC-8C6F-E1BD34D415E7}
O43 - CFD: 01/11/2012 - 16:40:37 - [0] ----D C:\Users\Marwan\AppData\Local\{EB14FD5C-8EE9-494F-B873-D2B1F15478DD}
O43 - CFD: 21/06/2012 - 10:22:55 - [0] ----D C:\Users\Marwan\AppData\Local\{EBF65E07-AF90-44C9-92A1-366F24B40112}
O43 - CFD: 14/10/2012 - 10:01:06 - [0] ----D C:\Users\Marwan\AppData\Local\{EC7DFD8A-412F-449B-8E5D-460551B61414}
O43 - CFD: 30/07/2012 - 13:07:45 - [0] ----D C:\Users\Marwan\AppData\Local\{ED8A09AF-C5F8-4FDF-B81B-11EB35873FDF}
O43 - CFD: 13/06/2012 - 10:26:38 - [0] ----D C:\Users\Marwan\AppData\Local\{EDA8EA99-C752-4197-A52E-0FBAB086C26F}
O43 - CFD: 27/10/2012 - 23:18:24 - [0] ----D C:\Users\Marwan\AppData\Local\{EDA9393F-8200-49E7-99FD-86C9FF081C57}
O43 - CFD: 27/07/2012 - 12:59:40 - [0] ----D C:\Users\Marwan\AppData\Local\{EE2065FB-4B9D-4064-8E74-CBCDABFFFB65}
O43 - CFD: 25/03/2012 - 10:59:07 - [0] ----D C:\Users\Marwan\AppData\Local\{EE49C914-EC4F-40F1-A7E1-CBF666D89B7F}
O43 - CFD: 04/06/2012 - 16:13:17 - [0] ----D C:\Users\Marwan\AppData\Local\{EF2711F7-627C-4586-B12D-51A89F6B0E27}
O43 - CFD: 17/04/2012 - 20:01:16 - [0] ----D C:\Users\Marwan\AppData\Local\{EF38BD06-A8B8-4EC4-B490-298C726F1717}
O43 - CFD: 25/04/2012 - 11:26:46 - [0] ----D C:\Users\Marwan\AppData\Local\{EFB31EAB-5847-4A70-902F-AC573B65D459}
O43 - CFD: 08/03/2012 - 18:00:57 - [0] ----D C:\Users\Marwan\AppData\Local\{EFBA8F1A-BEE0-41A3-B372-4315EEB032F5}
O43 - CFD: 07/05/2012 - 21:57:50 - [0] ----D C:\Users\Marwan\AppData\Local\{F0269876-770F-40DE-BA3F-E20A549F15A7}
O43 - CFD: 18/07/2012 - 16:21:13 - [0] ----D C:\Users\Marwan\AppData\Local\{F035E612-724A-45FA-B834-2BFD24AC28FF}
O43 - CFD: 01/04/2012 - 11:02:24 - [0] ----D C:\Users\Marwan\AppData\Local\{F03A50BC-CD85-45CD-8836-2F01FCDCEF02}
O43 - CFD: 17/10/2012 - 15:37:21 - [0] ----D C:\Users\Marwan\AppData\Local\{F06ACE7E-8B80-4927-896B-581DB490C194}
O43 - CFD: 28/06/2012 - 11:13:37 - [0] ----D C:\Users\Marwan\AppData\Local\{F089CE30-EE4D-4C65-BF81-7FF3F3B90B19}
O43 - CFD: 30/08/2012 - 10:52:56 - [0] ----D C:\Users\Marwan\AppData\Local\{F0A86919-36BA-4156-A6B9-3C241DB0F4F8}
O43 - CFD: 23/06/2012 - 14:32:43 - [0] ----D C:\Users\Marwan\AppData\Local\{F0DC29CE-3526-4686-B5EA-A2F48E1BF1B5}
O43 - CFD: 24/05/2012 - 19:27:36 - [0] ----D C:\Users\Marwan\AppData\Local\{F153FCD5-04A8-434C-8423-DC14BF2F3DE2}
O43 - CFD: 18/03/2012 - 11:35:04 - [0] ----D C:\Users\Marwan\AppData\Local\{F1BB4F62-9B9C-42F4-AB91-6F0F78DEE5ED}
O43 - CFD: 19/10/2012 - 14:28:36 - [0] ----D C:\Users\Marwan\AppData\Local\{F211D71B-8AFF-4E8A-A040-06BB9228B03E}
O43 - CFD: 04/06/2012 - 16:13:28 - [0] ----D C:\Users\Marwan\AppData\Local\{F251BBC3-1944-47D8-BA1A-57524C6717F1}
O43 - CFD: 15/07/2012 - 21:50:05 - [0] ----D C:\Users\Marwan\AppData\Local\{F254262C-B13F-4294-B001-FA0BA052C284}
O43 - CFD: 10/09/2012 - 08:15:23 - [0] ----D C:\Users\Marwan\AppData\Local\{F2671DF3-6381-4616-B61F-0B2B7849DC6B}
O43 - CFD: 17/07/2012 - 21:59:20 - [0] ----D C:\Users\Marwan\AppData\Local\{F2DA8EEF-5B5C-43B1-9FE7-D7F9B7DD4E15}
O43 - CFD: 20/07/2012 - 11:07:38 - [0] ----D C:\Users\Marwan\AppData\Local\{F325128C-B4D4-47B0-A47A-0566F0545A9C}
O43 - CFD: 01/03/2012 - 09:36:42 - [0] ----D C:\Users\Marwan\AppData\Local\{F33EDE39-2B21-447D-9C6A-A6165B9F58B0}
O43 - CFD: 28/06/2012 - 06:52:49 - [0] ----D C:\Users\Marwan\AppData\Local\{F34CDAE0-0D64-4041-90F0-8BCA1C57A4E4}
O43 - CFD: 19/07/2012 - 11:10:18 - [0] ----D C:\Users\Marwan\AppData\Local\{F3F887B0-8911-414F-8FAD-BE447C9B8005}
O43 - CFD: 21/06/2012 - 10:23:06 - [0] ----D C:\Users\Marwan\AppData\Local\{F408B689-EB77-40BE-9B71-0534E87DA60E}
O43 - CFD: 27/11/2012 - 11:09:31 - [0] ----D C:\Users\Marwan\AppData\Local\{F4EB6767-B628-4AAA-9EB2-5571B0EB2D22}
O43 - CFD: 16/04/2012 - 10:37:50 - [0] ----D C:\Users\Marwan\AppData\Local\{F5109623-21B4-43BB-9034-E566AA955A46}
O43 - CFD: 17/07/2012 - 12:00:00 - [0] ----D C:\Users\Marwan\AppData\Local\{F54EEF1B-32C9-4F19-9C60-81BD1A864E17}
O43 - CFD: 17/07/2012 - 09:47:15 - [0] ----D C:\Users\Marwan\AppData\Local\{F58FA18C-4A7D-4D5F-AE52-0B1E66BB25C0}
O43 - CFD: 05/06/2012 - 09:40:07 - [0] ----D C:\Users\Marwan\AppData\Local\{F5B917B4-CCA0-4486-9AE3-572211E49040}
O43 - CFD: 10/06/2012 - 17:28:57 - [0] ----D C:\Users\Marwan\AppData\Local\{F9ABB2A4-C42F-4622-AF93-CC9506C63464}
O43 - CFD: 21/03/2012 - 14:27:50 - [0] ----D C:\Users\Marwan\AppData\Local\{F9EA3105-821F-46B8-BC13-620D394C5CE0}
O43 - CFD: 23/02/2012 - 10:46:46 - [0] ----D C:\Users\Marwan\AppData\Local\{FA4B29E6-6962-4A55-9735-29E75A2BC163}
O43 - CFD: 01/05/2012 - 11:28:19 - [0] ----D C:\Users\Marwan\AppData\Local\{FC8AA1E0-F5A6-4714-9C8E-E1B41699763A}
O43 - CFD: 30/05/2012 - 17:19:53 - [0] ----D C:\Users\Marwan\AppData\Local\{FD515CAB-AD61-4CA8-9B4D-0A3EF5028688}
O43 - CFD: 28/04/2012 - 13:00:38 - [0] ----D C:\Users\Marwan\AppData\Local\{FD8221EF-6024-43A3-9EB6-7EB0DD2939F1}
O43 - CFD: 13/09/2012 - 17:28:48 - [0] ----D C:\Users\Marwan\AppData\Local\{FEF91765-677B-4DA0-AD3F-310FEADF87E9}
O43 - CFD: 05/12/2012 - 14:13:29 - [0] ----D C:\Users\Marwan\AppData\Local\{FF0CA9EE-B179-4010-9339-2D6E62CBE067}
O43 - CFD: 22/04/2012 - 11:55:18 - [0] ----D C:\Users\Marwan\AppData\Local\{FF49F9AC-5455-4B64-810D-507184772140}
O43 - CFD: 08/05/2012 - 11:03:13 - [0] ----D C:\Users\Marwan\AppData\Local\{FFF87A21-DB09-43D8-8897-3566089DD10A}
O43 - CFD: 17/02/2012 - 17:50:47 - [0,013] R---D C:\Users\Marwan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
O43 - CFD: 15/07/2012 - 10:22:14 - [0,000] R---D C:\Users\Marwan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
O43 - CFD: 10/11/2012 - 16:03:37 - [0] ----D C:\Users\Marwan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dofus
O43 - CFD: 27/02/2012 - 19:50:39 - [0] ----D C:\Users\Marwan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dofus2
O43 - CFD: 30/04/2012 - 14:42:26 - [0] ----D C:\Users\Marwan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dofus2Beta
O43 - CFD: 19/03/2012 - 19:48:19 - [0,003] ----D C:\Users\Marwan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Fraps
O43 - CFD: 06/11/2012 - 18:41:37 - [0,000] ----D C:\Users\Marwan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
O43 - CFD: 14/07/2009 - 05:49:38 - [0,001] R---D C:\Users\Marwan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
O43 - CFD: 25/09/2012 - 18:27:40 - [0,003] ----D C:\Users\Marwan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MetaGeek
O43 - CFD: 29/06/2012 - 23:09:55 - [0,006] ----D C:\Users\Marwan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MSI Afterburner
O43 - CFD: 04/01/2013 - 13:50:57 - [0,001] R---D C:\Users\Marwan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
O43 - CFD: 01/01/2013 - 23:37:05 - [0,002] ----D C:\Users\Marwan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
~ Scan Program Folder in 00mn 01s



---\\ Derniers fichiers modifiés ou crées sous Windows et System32 (O44)
O44 - LFC:[MD5.9A276813ACF7C7E2F29A18B8F8F6A031] - 04/01/2013 - 23:33:36 ---A- . (...) -- C:\PhysicalDisk0_MBR.bin   [512]
O44 - LFC:[MD5.7FF0598D86BC3BE9D4302146CFCE3F7E] - 04/01/2013 - 22:59:32 ---A- . (...) -- C:\Windows\WindowsUpdate.log   [1496050]
O44 - LFC:[MD5.640DAD2C12AB9C0D0D3070666B6CCF80] - 04/01/2013 - 22:47:27 ---A- . (...) -- C:\Windows\setupact.log   [224]
O44 - LFC:[MD5.032A0E9F654A5722371573468B95A390] - 04/01/2013 - 22:47:27 -S-A- . (...) -- C:\Windows\bootstat.dat   [67584]
O44 - LFC:[MD5.56DC37ED4B21AD46B39F279628ACBA7C] - 04/01/2013 - 15:16:06 ---A- . (...) -- C:\Windows\SysNative\PerfStringBackup.INI   [1549936]
O44 - LFC:[MD5.67873E33D2BC05662A098071484C1472] - 04/01/2013 - 15:16:06 ---A- . (...) -- C:\Windows\SysNative\perfc009.dat   [106412]
O44 - LFC:[MD5.369A7FB367F2584538575C13B0DEE3AC] - 04/01/2013 - 15:16:06 ---A- . (...) -- C:\Windows\SysNative\perfc00C.dat   [130770]
O44 - LFC:[MD5.BB7ADB1FC75FE8AFC38B3E96FD2E3ABC] - 04/01/2013 - 15:16:06 ---A- . (...) -- C:\Windows\SysNative\perfh009.dat   [616032]
O44 - LFC:[MD5.F5A89EA144830F4230502A4CB684F355] - 04/01/2013 - 15:16:06 ---A- . (...) -- C:\Windows\SysNative\perfh00C.dat   [704464]
O44 - LFC:[MD5.56DC37ED4B21AD46B39F279628ACBA7C] - 04/01/2013 - 15:16:06 ---A- . (...) -- C:\Windows\System32\PerfStringBackup.INI   [1549936]
O44 - LFC:[MD5.5FAC29AACB0A65CCE5037829B908625E] - 04/01/2013 - 15:10:08 ---A- . (...) -- C:\Windows\SysNative\FNTCACHE.DAT   [296808]
O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 04/01/2013 - 13:33:57 ---A- . (...) -- C:\Windows\setuperr.log   [0]
O44 - LFC:[MD5.23948829C6D049B8ADE0E0FB87305AC3] - 03/01/2013 - 21:20:26 ---A- . (.Safer Networking Limited - Pas de description.) -- C:\Windows\SysNative\sdnclean64.exe   [17272]
O44 - LFC:[MD5.2ED72B3F76C9368ABC01464DA64DB7AE] - 16/12/2012 - 18:11:22 ---A- . (.Adobe Systems - Windows NT OpenType/Type 1 API Library..) -- C:\Windows\SysNative\atmlib.dll   [46080]
O44 - LFC:[MD5.2ED72B3F76C9368ABC01464DA64DB7AE] - 16/12/2012 - 18:11:22 ---A- . (.Adobe Systems - Windows NT OpenType/Type 1 API Library..) -- C:\Windows\System32\atmlib.dll   [46080]
O44 - LFC:[MD5.CB2ABB2DA1E9C977302A78D86D4AE3B0] - 16/12/2012 - 15:45:03 ---A- . (.Adobe Systems Incorporated - Windows NT OpenType/Type 1 Font Driver.) -- C:\Windows\SysNative\atmfd.dll   [367616]
O44 - LFC:[MD5.CB2ABB2DA1E9C977302A78D86D4AE3B0] - 16/12/2012 - 15:45:03 ---A- . (.Adobe Systems Incorporated - Windows NT OpenType/Type 1 Font Driver.) -- C:\Windows\System32\atmfd.dll   [367616]
O44 - LFC:[MD5.3326166011C9BC13D6A8EFD856E9921C] - 13/12/2012 - 16:47:06  . (.Adobe Systems - Windows NT OpenType/Type 1 API Library..) -- C:\Windows\System32\conhost.exe   [46080]
O44 - LFC:[MD5.23948829C6D049B8ADE0E0FB87305AC3] - 25/01/2009 - 12:14:02  . (...) -- C:\Windows\System32\sdnclean64.exe   [1549936]
~ Scan Files in 00mn 01s



---\\ Export de clé d'application autorisée (O47)
O47 - AAKE:Key Export SP - "C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe" [Enabled] .(.Safer-Networking Ltd. - Spybot - Search & Destroy tray access.) -- C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe
O47 - AAKE:Key Export SP - "C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe" [Enabled] .(.Safer-Networking Ltd. - Spybot-S&D 2 Scanner Service.) -- C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe
O47 - AAKE:Key Export SP - "C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe" [Enabled] .(.Safer-Networking Ltd. - Update.) -- C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe
O47 - AAKE:Key Export SP - "C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe" [Enabled] .(.Safer-Networking Ltd. - Spybot-S&D 2 Background update service.) -- C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe
~ Scan Keys in 00mn 00s



---\\ Déni du service (Local Security Authority) (O48)
O48 - LSA:Local Security Authority Authentication Packages . (.Microsoft Corporation - Microsoft Authentication Package v1.0.) -- C:\Windows\System32\msv1_0.dll
O48 - LSA:Local Security Authority Notification Packages . (.Microsoft Corporation - Moteur du client de l’Éditeur de configuration de sécurité Windows.) -- C:\Windows\System32\scecli.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Package de sécurité Kerberos.) -- C:\Windows\System32\kerberos.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Microsoft Authentication Package v1.0.) -- C:\Windows\System32\msv1_0.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - TLS / SSL Security Provider.) -- C:\Windows\System32\schannel.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Microsoft Digest Access.) -- C:\Windows\System32\wdigest.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Web Service Security Package.) -- C:\Windows\System32\tspkg.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Pku2u Security Package.) -- C:\Windows\System32\pku2u.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corp. - LiveSSP.) -- C:\Windows\System32\livessp.dll
~ Scan Keys in 00mn 00s



---\\ Contrôle du Safe Boot (CSB) (O49)
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\sermouse.sys . (.Microsoft Corporation - Pilote de filtre souris série.) -- C:\Windows\System32\Drivers\sermouse.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\vga.sys . (.Microsoft Corporation - VGA/Super VGA Video Driver.) -- C:\Windows\System32\Drivers\vga.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\vgasave.sys . (...) -- C:\Windows\System32\Drivers\vgasave.sys (.not file.)
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\volmgr.sys . (.Microsoft Corporation - Volume Manager Driver.) -- C:\Windows\System32\Drivers\volmgr.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\volmgrx.sys . (.Microsoft Corporation - Pilote d’extension du gestionnaire de volumes.) -- C:\Windows\System32\Drivers\volmgrx.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\ipnat.sys . (.Microsoft Corporation - IP Network Address Translator.) -- C:\Windows\System32\Drivers\ipnat.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\nsiproxy.sys . (.Microsoft Corporation - NSI Proxy.) -- C:\Windows\System32\Drivers\nsiproxy.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\rdpencdd.sys . (.Microsoft Corporation - RDP Encoder Miniport.) -- C:\Windows\System32\Drivers\rdpencdd.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\sermouse.sys . (.Microsoft Corporation - Pilote de filtre souris série.) -- C:\Windows\System32\Drivers\sermouse.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\vga.sys . (.Microsoft Corporation - VGA/Super VGA Video Driver.) -- C:\Windows\System32\Drivers\vga.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\vgasave.sys . (...) -- C:\Windows\System32\Drivers\vgasave.sys (.not file.)
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\volmgr.sys . (.Microsoft Corporation - Volume Manager Driver.) -- C:\Windows\System32\Drivers\volmgr.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\volmgrx.sys . (.Microsoft Corporation - Pilote d’extension du gestionnaire de volumes.) -- C:\Windows\System32\Drivers\volmgrx.sys
~ Scan CSB in 00mn 00s



---\\ MountPoints2 Shell Key (O51)
O51 - MPSK:{6d71774a-4d84-11e1-9b09-806e6f6e6963}\AutoRun\command. (...) -- D:\Setup.exe
~ Scan Keys in 00mn 00s



---\\ Trojan Driver Search Data (HKLM) (O52)
O52 - TDSD: \Drivers32\"msacm.l3acm"="C:\Windows\System32\l3codeca.acm" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\Windows\System32\l3codeca.acm
O52 - TDSD: \Drivers32\"VIDC.FPS1"="frapsv64.dll" . (.Beepa P/L - Fraps.) -- C:\Windows\System32\frapsv64.dll
O52 - TDSD: \drivers.desc\"C:\Windows\System32\l3codeca.acm"="Fraunhofer IIS MPEG Layer-3 Codec" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\Windows\System32\l3codeca.acm
O52 - TDSD: \drivers.desc\"frapsv64.dll"="Fraps Video Decompressor" . (.Beepa P/L - Fraps.) -- C:\Windows\System32\frapsv64.dll
~ Scan Keys in 00mn 00s



---\\ ShareTools MSconfig StartupReg (O53) (None)

---\\ Microsoft Control Security Providers (O54)
O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Microsoft Corporation - Credential Delegation Security Package.) -- C:\Windows\System32\credssp.dll
O54 - MCSP:[HKLM\...\ControlSet001\Control] - (SecurityProviders) - (.Microsoft Corporation - Credential Delegation Security Package.) -- C:\Windows\System32\credssp.dll
~ Scan Keys in 00mn 00s



---\\ Microsoft Windows Policies System (O55)
O55 - MWPS:[HKLM\...\Policies\System] - "ConsentPromptBehaviorAdmin"=5
O55 - MWPS:[HKLM\...\Policies\System] - "ConsentPromptBehaviorUser"=3
O55 - MWPS:[HKLM\...\Policies\System] - "EnableInstallerDetection"=1
O55 - MWPS:[HKLM\...\Policies\System] - "EnableLUA"=1
O55 - MWPS:[HKLM\...\Policies\System] - "EnableSecureUIAPaths"=1
O55 - MWPS:[HKLM\...\Policies\System] - "EnableUIADesktopToggle"=0
O55 - MWPS:[HKLM\...\Policies\System] - "EnableVirtualization"=1
O55 - MWPS:[HKLM\...\Policies\System] - "PromptOnSecureDesktop"=1
O55 - MWPS:[HKLM\...\Policies\System] - "ValidateAdminCodeSignatures"=0
O55 - MWPS:[HKLM\...\Policies\System] - "dontdisplaylastusername"=0
O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticecaption"=0
O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticetext"=0
O55 - MWPS:[HKLM\...\Policies\System] - "scforceoption"=0
O55 - MWPS:[HKLM\...\Policies\System] - "shutdownwithoutlogon"=1
O55 - MWPS:[HKLM\...\Policies\System] - "undockwithoutlogon"=1
O55 - MWPS:[HKLM\...\Policies\System] - "FilterAdministratorToken"=0
~ Scan Keys in 00mn 00s



---\\ Microsoft Windows Policies Explorer (O56)
O56 - MWPE:[HKLM\...\policies\Explorer] - "NoActiveDesktop"=1
O56 - MWPE:[HKLM\...\policies\Explorer] - "NoActiveDesktopChanges"=1
O56 - MWPE:[HKLM\...\policies\Explorer] - "ForceActiveDesktopOn"=0
~ Scan Keys in 00mn 00s



---\\ Liste des Drivers Système (O58)
O58 - SDL:[MD5.2F6B34B83843F0C5118B63AC634F5BF4] - 14/07/2009 - 02:52:21 ---A- . (.Adaptec, Inc. - Adaptec Windows SAS/SATA Storport Driver.) -- C:\Windows\System32\Drivers\adp94xx.sys   [491088]
O58 - SDL:[MD5.19166026A93206F9C6A8CD3A1F010AE4] - 02/04/2009 - 13:30:14 ---A- . (...) -- C:\Windows\SysWOW64\drivers\ASUSHWIO.SYS   [10296]
~ Scan Drivers in 00mn 00s



---\\ Derniers fichiers modifiés ou crées (Utilisateur) (O61)
O61 - LFC:Last File Created 01/01/2013 - 14:55:56 ---A- C:\Users\Marwan\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache\3YWA79XP\8F903698240FE799F61EEDA8595181137B996156.heu   [152]
O61 - LFC:Last File Created 01/01/2013 - 20:52:14 ---A- C:\Users\Marwan\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Logs\mbam-log-2013-01-01 (20-49-34).txt   [2112]
O61 - LFC:Last File Created 01/01/2013 - 20:52:50 ---A- C:\Users\Marwan\AppData\Local\Origin\Web Cache\data7\6\31yufzcf.d   [564]
O61 - LFC:Last File Created 01/01/2013 - 20:53:17 ---A- C:\Users\Marwan\AppData\Local\Origin\Web Cache\data7\3\1nfaej9s.d   [194983]
O61 - LFC:Last File Created 01/01/2013 - 20:53:17 ---A- C:\Users\Marwan\AppData\Local\Origin\Web Cache\data7\3\shy15uc3.d   [8107]
O61 - LFC:Last File Created 01/01/2013 - 20:53:18 ---A- C:\Users\Marwan\AppData\Local\Origin\Web Cache\data7\2\2eoqfjfr.d   [176914]
O61 - LFC:Last File Created 01/01/2013 - 20:53:18 ---A- C:\Users\Marwan\AppData\Local\Origin\Web Cache\data7\3\4k0xt2zc.d   [255736]
O61 - LFC:Last File Created 01/01/2013 - 20:53:18 ---A- C:\Users\Marwan\AppData\Local\Origin\Web Cache\data7\7\r0ny6hxw.d   [78590]
O61 - LFC:Last File Created 01/01/2013 - 20:53:19 ---A- C:\Users\Marwan\AppData\Local\Origin\Web Cache\data7\1\2bihseqq.d   [4756]
O61 - LFC:Last File Created 01/01/2013 - 20:53:20 ---A- C:\Users\Marwan\AppData\Local\Origin\Web Cache\data7\e\3g5t0v1n.d   [114013]
O61 - LFC:Last File Created 02/01/2013 - 02:58:17 ---A- C:\Users\Marwan\AppData\Local\Windows Live\uxcore_WLXPhotoGallery_01.etl   [12288]
O61 - LFC:Last File Created 02/01/2013 - 18:05:20 ---A- C:\Users\Marwan\AppData\Roaming\Skype\shared_dynco\dc.db   [1978368]
O61 - LFC:Last File Created 02/01/2013 - 18:05:20 ---A- C:\Users\Marwan\AppData\Roaming\Skype\shared_dynco\dc.db-journal   [1125008]
O61 - LFC:Last File Created 02/01/2013 - 18:08:15 ---A- C:\Users\Marwan\AppData\Roaming\Dofus2\Berilia_ui_definition.dat   [55]
O61 - LFC:Last File Created 02/01/2013 - 18:08:15 ---A- C:\Users\Marwan\AppData\Roaming\Dofus2\Berilia_ui_version.dat   [49]
O61 - LFC:Last File Created 02/01/2013 - 18:08:15 ---A- C:\Users\Marwan\AppData\Roaming\Dofus2\Jerakine_lang_vesrion.dat   [51]
O61 - LFC:Last File Created 02/01/2013 - 18:08:15 ---A- C:\Users\Marwan\AppData\Roaming\Dofus2\path.d2p   [35]
O61 - LFC:Last File Created 02/01/2013 - 18:08:33 ---A- C:\Users\Marwan\AppData\Roaming\Dofus2\Module_Ankama_Grimoire.dat   [124]
O61 - LFC:Last File Created 02/01/2013 - 18:08:38 ---A- C:\Users\Marwan\AppData\Roaming\Dofus2\averagePrices.dat   [185058]
O61 - LFC:Last File Created 02/01/2013 - 18:08:38 ---A- C:\Users\Marwan\AppData\Roaming\Dofus2\maps\88212759.bg   [322027]
O61 - LFC:Last File Created 02/01/2013 - 18:08:40 ---A- C:\Users\Marwan\AppData\Roaming\Dofus2\playerData_3443261.dat   [34]
O61 - LFC:Last File Created 02/01/2013 - 18:09:17 ---A- C:\Users\Marwan\AppData\Roaming\Dofus2\AccountModule_Ankama_Cartography.dat   [58]
O61 - LFC:Last File Created 02/01/2013 - 18:09:29 ---A- C:\Users\Marwan\AppData\Roaming\Dofus2\AccountModule_Ankama_Storage.dat   [147]
O61 - LFC:Last File Created 02/01/2013 - 18:09:29 ---A- C:\Users\Marwan\AppData\Roaming\Dofus2\Module_Ankama_Storage.dat   [102]
O61 - LFC:Last File Created 02/01/2013 - 18:10:31 ---A- C:\Users\Marwan\AppData\Roaming\Dofus2\chat.dat   [514]
O61 - LFC:Last File Created 02/01/2013 - 18:11:11 ---A- C:\Users\Marwan\AppData\Roaming\Dofus2\ModuleAction_Ankama_GameUiCore.dat   [51]
O61 - LFC:Last File Created 02/01/2013 - 18:11:32 ---A- C:\Users\Marwan\AppData\Roaming\Dofus2\AccountModule_Ankama_GameUiCore.dat   [216]
O61 - LFC:Last File Created 02/01/2013 - 18:11:32 ---A- C:\Users\Marwan\AppData\Roaming\Dofus2\Jerakine_classAlias.dat   [2250]
O61 - LFC:Last File Created 02/01/2013 - 18:11:52 ---A- C:\Users\Marwan\AppData\Roaming\Dofus2\Module_Ankama_GameUiCore.dat   [3782]
O61 - LFC:Last File Created 02/01/2013 - 18:13:17 ---A- C:\Users\Marwan\AppData\Roaming\DofusAppId0_2   [8]
O61 - LFC:Last File Created 02/01/2013 - 18:13:23 ---A- C:\Users\Marwan\AppData\Roaming\Dofus2\maps\88213271.bg   [327551]
O61 - LFC:Last File Created 02/01/2013 - 18:13:31 ---A- C:\Users\Marwan\AppData\Roaming\Dofus2\Module_Ankama_Social.dat   [52]
O61 - LFC:Last File Created 02/01/2013 - 18:22:14 ---A- C:\Users\Marwan\AppData\Roaming\Skype\blazoo75\keyval.db   [40960]
O61 - LFC:Last File Created 02/01/2013 - 18:22:14 ---A- C:\Users\Marwan\AppData\Roaming\Skype\blazoo75\keyval.db-journal   [33344]
O61 - LFC:Last File Created 02/01/2013 - 18:38:47 ---A- C:\Users\Marwan\AppData\Local\Origin\Web Cache\data7\f\pcjqf94o.d   [23966]
O61 - LFC:Last File Created 02/01/2013 - 18:50:51 ---A- C:\Users\Marwan\AppData\Roaming\Skype\blazoo75\chatsync\37\373fdee90d405658.dat   [3608]
O61 - LFC:Last File Created 02/01/2013 - 18:50:56 ---A- C:\Users\Marwan\AppData\Roaming\Skype\blazoo75\chatsync\ba\bacdea3b20cd0cf2.dat   [3438]
O61 - LFC:Last File Created 02/01/2013 - 18:51:50 ---A- C:\Users\Marwan\AppData\Roaming\Skype\blazoo75\chatsync\3a\3a1acf3175d5ffc0.dat   [11540]
O61 - LFC:Last File Created 02/01/2013 - 18:51:51 ---A- C:\Users\Marwan\AppData\Roaming\Skype\blazoo75\msn.db   [53248]
O61 - LFC:Last File Created 02/01/2013 - 18:51:51 ---A- C:\Users\Marwan\AppData\Roaming\Skype\blazoo75\msn.db-journal   [33344]
O61 - LFC:Last File Created 02/01/2013 - 19:12:33 ---A- C:\Users\Marwan\AppData\Local\Origin\Web Cache\data7\e\um5tybon.d   [6074]
O61 - LFC:Last File Created 02/01/2013 - 19:21:58 ---A- C:\Users\Marwan\AppData\Roaming\Skype\blazoo75\dc.db   [53248]
O61 - LFC:Last File Created 02/01/2013 - 19:22:00 ---A- C:\Users\Marwan\AppData\Roaming\Skype\blazoo75\bistats.db   [114688]
O61 - LFC:Last File Created 02/01/2013 - 19:22:00 ---A- C:\Users\Marwan\AppData\Roaming\Skype\blazoo75\bistats.db-journal   [49760]
O61 - LFC:Last File Created 02/01/2013 - 19:22:00 ---A- C:\Users\Marwan\AppData\Roaming\Skype\blazoo75\chatsync\09\09bb8fefff71b576.dat   [5597]
O61 - LFC:Last File Created 02/01/2013 - 19:22:00 ---A- C:\Users\Marwan\AppData\Roaming\Skype\blazoo75\config.xml   [10594]
O61 - LFC:Last File Created 02/01/2013 - 19:22:00 ---A- C:\Users\Marwan\AppData\Roaming\Skype\blazoo75\httpfe\cookies.dat   [125]
O61 - LFC:Last File Created 02/01/2013 - 19:22:00 ---A- C:\Users\Marwan\AppData\Roaming\Skype\blazoo75\main.db   [2686976]
O61 - LFC:Last File Created 02/01/2013 - 19:22:00 ---A- C:\Users\Marwan\AppData\Roaming\Skype\blazoo75\main.db-journal   [300104]
O61 - LFC:Last File Created 02/01/2013 - 19:22:00 ---A- C:\Users\Marwan\AppData\Roaming\Skype\shared.xml   [60174]
O61 - LFC:Last File Created 02/01/2013 - 20:34:51 ---A- C:\Users\Marwan\AppData\Local\ESN Sonar\battlefield.com_cfg.dat   [915]
O61 - LFC:Last File Created 02/01/2013 - 20:34:52 ---A- C:\Users\Marwan\AppData\Local\ESN Sonar\battlefield.com_iconConnected.dat   [718]
O61 - LFC:Last File Created 02/01/2013 - 20:34:53 ---A- C:\Users\Marwan\AppData\Local\ESN Sonar\battlefield.com_iconDisconnected.dat   [730]
O61 - LFC:Last File Created 02/01/2013 - 20:34:53 ---A- C:\Users\Marwan\AppData\Local\ESN Sonar\battlefield.com_iconTalking.dat   [307]
O61 - LFC:Last File Created 02/01/2013 - 20:34:54 ---A- C:\Users\Marwan\AppData\Local\ESN Sonar\battlefield.com_iconInChannel.dat   [251]
O61 - LFC:Last File Created 02/01/2013 - 20:34:54 ---A- C:\Users\Marwan\AppData\Local\ESN Sonar\battlefield.com_iconPlaybackMuted.dat   [254]
O61 - LFC:Last File Created 02/01/2013 - 20:34:55 ---A- C:\Users\Marwan\AppData\Local\ESN Sonar\battlefield.com_headerImage.dat   [11177]
O61 - LFC:Last File Created 02/01/2013 - 20:34:55 ---A- C:\Users\Marwan\AppData\Local\ESN Sonar\battlefield.com_iconCaptureMuted.dat   [252]
O61 - LFC:Last File Created 02/01/2013 - 21:30:23 ---A- C:\Users\Marwan\Downloads\PS2_PSG_setup.exe   [19997344]
O61 - LFC:Last File Created 02/01/2013 - 21:30:47 ---A- C:\Users\Marwan\Downloads\PS2_PSG_setup (1).exe   [19997344]
O61 - LFC:Last File Created 03/01/2013 - 13:25:05 ----- C:\Users\Marwan\AppData\Local\Google\Chrome\User Data\Default\Archived History   [57344]
O61 - LFC:Last File Created 03/01/2013 - 13:25:05 ---A- C:\Users\Marwan\AppData\Local\Google\Chrome\User Data\Default\Archived History-journal   [512]
O61 - LFC:Last File Created 03/01/2013 - 13:25:05 ---A- C:\Users\Marwan\AppData\Local\Google\Chrome\User Data\Default\File System\Origins\CURRENT   [16]
O61 - LFC:Last File Created 03/01/2013 - 13:25:05 ---A- C:\Users\Marwan\AppData\Local\Google\Chrome\User Data\Default\File System\Origins\MANIFEST-000048   [186]
O61 - LFC:Last File Created 03/01/2013 - 17:00:41 ---A- C:\Users\Marwan\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\HFS4FXFM\macromedia.com\support\flashplayer\sys\#s.ytimg.com\settings.sol   [81]
O61 - LFC:Last File Created 03/01/2013 - 17:04:26 ---A- C:\Users\Marwan\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_sketchtoy.com_0.localstorage-journal   [3608]
O61 - LFC:Last File Created 03/01/2013 - 17:05:02 ---A- C:\Users\Marwan\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.sketchtoy.com_0.localstorage-journal   [3608]
O61 - LFC:Last File Created 03/01/2013 - 17:13:19 ---A- C:\Users\Marwan\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.popscreen.com_0.localstorage-journal   [3608]
O61 - LFC:Last File Created 03/01/2013 - 20:47:35 ---A- C:\Users\Marwan\AppData\Roaming\TS3Client\versions.dat   [62]
O61 - LFC:Last File Created 03/01/2013 - 20:48:01 ---A- C:\Users\Marwan\AppData\Roaming\TS3Client\resolved.dat   [188]
O61 - LFC:Last File Created 03/01/2013 - 20:48:01 ---A- C:\Users\Marwan\AppData\Roaming\TS3Client\subscribemode.dat   [4]
O61 - LFC:Last File Created 03/01/2013 - 20:48:02 ---A- C:\Users\Marwan\AppData\Roaming\TS3Client\chats\YjBMZWxFTUs1eTNuSDM2cFUxUS8wb2pnSEdrPQ==\channel.html   [12762]
O61 - LFC:Last File Created 03/01/2013 - 20:49:11 ---A- C:\Users\Marwan\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\HFS4FXFM\macromedia.com\support\flashplayer\sys\#api.dmcloud.net\settings.sol   [85]
O61 - LFC:Last File Created 03/01/2013 - 20:49:17 ---A- C:\Users\Marwan\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\HFS4FXFM\api.dmcloud.net\com.dm.player.sol   [95]
O61 - LFC:Last File Created 03/01/2013 - 20:53:47 ---A- C:\Users\Marwan\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.francetvinfo.fr_0.localstorage   [3072]
O61 - LFC:Last File Created 03/01/2013 - 20:53:47 ---A- C:\Users\Marwan\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.francetvinfo.fr_0.localstorage-journal   [3608]
O61 - LFC:Last File Created 03/01/2013 - 20:53:47 ---A- C:\Users\Marwan\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\HFS4FXFM\api.dmcloud.net\analytics.sol   [532]
O61 - LFC:Last File Created 03/01/2013 - 21:07:53 ---A- C:\Users\Marwan\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\HFS4FXFM\s.ytimg.com\soundData.sol   [49]
O61 - LFC:Last File Created 03/01/2013 - 21:19:39 ---A- C:\Users\Marwan\Downloads\spybot-search-and-destroy_spybot_-_search_destroy_2_27_12_2012_francais_10965.exe   [55454464]
O61 - LFC:Last File Created 03/01/2013 - 21:31:51 ---A- C:\Users\Marwan\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_secure.avaaz.org_0.localstorage   [3072]
O61 - LFC:Last File Created 03/01/2013 - 21:31:51 ---A- C:\Users\Marwan\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_secure.avaaz.org_0.localstorage-journal   [3608]
O61 - LFC:Last File Created 03/01/2013 - 21:51:57 ---A- C:\Users\Marwan\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\HFS4FXFM\macromedia.com\support\flashplayer\sys\#www.jeuxvideo.com\settings.sol   [87]
O61 - LFC:Last File Created 03/01/2013 - 21:52:06 ---A- C:\Users\Marwan\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\HFS4FXFM\macromedia.com\support\flashplayer\sys\#fr-himedia.cdn.videoplaza.tv\settings.sol   [98]
O61 - LFC:Last File Created 03/01/2013 - 22:21:17 ---A- C:\Users\Marwan\Downloads\ZHPDiag2.exe   [3593347]
O61 - LFC:Last File Created 03/01/2013 - 22:21:20 ---A- C:\Users\Marwan\Downloads\ZHPDiag2 (1).exe   [3593347]
O61 - LFC:Last File Created 03/01/2013 - 22:29:22 ---A- C:\Users\Marwan\Downloads\ZHPDiag2 (2).exe   [3593347]
O61 - LFC:Last File Created 03/01/2013 - 22:29:28 ---A- C:\Users\Marwan\Downloads\ZHPDiag2 (3).exe   [3593347]
O61 - LFC:Last File Created 03/01/2013 - 23:02:06 ---A- C:\Users\Marwan\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Logs\mbam-log-2013-01-03 (21-10-57).txt   [2152]
O61 - LFC:Last File Created 03/01/2013 - 23:33:14 ---A- C:\Users\Marwan\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_plus.google.com_0.localstorage   [3072]
O61 - LFC:Last File Created 03/01/2013 - 23:33:14 ---A- C:\Users\Marwan\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_plus.google.com_0.localstorage-journal   [3608]
O61 - LFC:Last File Created 03/01/2013 - 23:35:07 ---A- C:\Users\Marwan\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\HFS4FXFM\macromedia.com\support\flashplayer\sys\#static.koreus.com\settings.sol   [87]
O61 - LFC:Last File Created 03/01/2013 - 23:35:07 ---A- C:\Users\Marwan\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\HFS4FXFM\static.koreus.com\com.jeroenwijering.players.sol   [66]
O61 - LFC:Last File Created 03/01/2013 - 23:40:06 ---A- C:\Users\Marwan\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.youtube.com_0.localstorage   [21504]
O61 - LFC:Last File Created 03/01/2013 - 23:40:06 ---A- C:\Users\Marwan\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.youtube.com_0.localstorage-journal   [16384]
O61 - LFC:Last File Created 03/01/2013 - 23:40:07 ---A- C:\Users\Marwan\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\HFS4FXFM\s.ytimg.com\videostats.sol   [275]
O61 - LFC:Last File Created 04/01/2013 - 13:40:38 ---A- C:\Users\Marwan\AppData\Roaming\Microsoft\MSN Messenger\sqmdata00.sqm   [758]
O61 - LFC:Last File Created 04/01/2013 - 13:40:38 ---A- C:\Users\Marwan\AppData\Roaming\Microsoft\MSN Messenger\sqmnoopt00.sqm   [510]
O61 - LFC:Last File Created 04/01/2013 - 13:41:41 ---A- C:\Users\Marwan\AppData\Local\Windows Live\uxcore_WLXPhotoGallery_00.etl   [12288]
O61 - LFC:Last File Created 04/01/2013 - 13:46:28 ---A- C:\Users\Marwan\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_imagesrv.adition.com_0.localstorage   [3072]
O61 - LFC:Last File Created 04/01/2013 - 13:46:28 ---A- C:\Users\Marwan\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_imagesrv.adition.com_0.localstorage-journal   [3608]
O61 - LFC:Last File Created 04/01/2013 - 13:46:29 ---A- C:\Users\Marwan\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\HFS4FXFM\macromedia.com\support\flashplayer\sys\#player.ooyala.com\settings.sol   [87]
O61 - LFC:Last File Created 04/01/2013 - 13:46:33 ---A- C:\Users\Marwan\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\HFS4FXFM\macromedia.com\support\flashplayer\sys\#extras.ooyala.com\settings.sol   [87]
O61 - LFC:Last File Created 04/01/2013 - 13:46:33 ---A- C:\Users\Marwan\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\HFS4FXFM\player.ooyala.com\auth.sol   [70]
O61 - LFC:Last File Created 04/01/2013 - 13:47:10 ---A- C:\Users\Marwan\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\HFS4FXFM\player.ooyala.com\perf.sol   [125]
O61 - LFC:Last File Created 04/01/2013 - 13:47:31 ---A- C:\Users\Marwan\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\HFS4FXFM\player.ooyala.com\auth2.sol   [171]
O61 - LFC:Last File Created 04/01/2013 - 13:48:50 ---A- C:\Users\Marwan\Downloads\Apache_OpenOffice_incubating_3.4.1_Win_x86_install_fr.exe   [126019687]
O61 - LFC:Last File Created 04/01/2013 - 13:49:32 ---A- C:\Users\Marwan\AppData\Local\Temp\dd_vcredistMSI4C36.txt   [376206]
O61 - LFC:Last File Created 04/01/2013 - 13:49:32 ---A- C:\Users\Marwan\AppData\Local\Temp\dd_vcredistUI4C36.txt   [11436]
O61 - LFC:Last File Created 04/01/2013 - 13:49:34 ---A- C:\Users\Marwan\AppData\Local\Temp\dd_vcredistMSI4C3F.txt   [388224]
O61 - LFC:Last File Created 04/01/2013 - 13:49:34 ---A- C:\Users\Marwan\AppData\Local\Temp\dd_vcredistUI4C3F.txt   [11468]
O61 - LFC:Last File Created 04/01/2013 - 13:50:39 ---A- C:\Users\Marwan\AppData\Roaming\OpenOffice.org\3\user\extensions\bundled\registry\com.sun.star.comp.deployment.component.PackageRegistryBackend\Windows_x86rc   [143]
O61 - LFC:Last File Created 04/01/2013 - 13:50:39 ---A- C:\Users\Marwan\AppData\Roaming\OpenOffice.org\3\user\extensions\bundled\registry\com.sun.star.comp.deployment.component.PackageRegistryBackend\unorc   [180]
O61 - LFC:Last File Created 04/01/2013 - 13:50:40 ---A- C:\Users\Marwan\AppData\Roaming\OpenOffice.org\3\user\extensions\bundled\registry\com.sun.star.comp.deployment.bundle.PackageRegistryBackend\backenddb.xml   [3094]
O61 - LFC:Last File Created 04/01/2013 - 13:50:40 ---A- C:\Users\Marwan\AppData\Roaming\OpenOffice.org\3\user\extensions\bundled\registry\com.sun.star.comp.deployment.component.PackageRegistryBackend\Windows_x86.rdb   [26112]
O61 - LFC:Last File Created 04/01/2013 - 13:50:40 ---A- C:\Users\Marwan\AppData\Roaming\OpenOffice.org\3\user\extensions\bundled\registry\com.sun.star.comp.deployment.component.PackageRegistryBackend\backenddb.xml   [923]
O61 - LFC:Last File Created 04/01/2013 - 13:50:40 ---A- C:\Users\Marwan\AppData\Roaming\OpenOffice.org\3\user\extensions\bundled\registry\com.sun.star.comp.deployment.component.PackageRegistryBackend\common.rdb   [1536]
O61 - LFC:Last File Created 04/01/2013 - 13:50:40 ---A- C:\Users\Marwan\AppData\Roaming\OpenOffice.org\3\user\extensions\bundled\registry\com.sun.star.comp.deployment.configuration.PackageRegistryBackend\backenddb.xml   [3116]
O61 - LFC:Last File Created 04/01/2013 - 13:50:40 ---A- C:\Users\Marwan\AppData\Roaming\OpenOffice.org\3\user\extensions\bundled\registry\com.sun.star.comp.deployment.help.PackageRegistryBackend\backenddb.xml   [344]
O61 - LFC:Last File Created 04/01/2013 - 13:50:56 ---A- C:\Users\Marwan\AppData\Roaming\OpenOffice.org\3\user\extensions\bundled\extensions.pmap   [5]
O61 - LFC:Last File Created 04/01/2013 - 13:50:56 ---A- C:\Users\Marwan\AppData\Roaming\OpenOffice.org\3\user\extensions\bundled\lastsynchronized   [1]
O61 - LFC:Last File Created 04/01/2013 - 13:50:56 ---A- C:\Users\Marwan\AppData\Roaming\OpenOffice.org\3\user\extensions\bundled\lastsynchronized.bundled   [1]
O61 - LFC:Last File Created 04/01/2013 - 13:50:56 ---A- C:\Users\Marwan\AppData\Roaming\OpenOffice.org\3\user\extensions\shared\lastsynchronized   [1]
O61 - LFC:Last File Created 04/01/2013 - 13:50:56 ---A- C:\Users\Marwan\AppData\Roaming\OpenOffice.org\3\user\extensions\shared\registry\com.sun.star.comp.deployment.configuration.PackageRegistryBackend\backenddb.xml   [135]
O61 - LFC:Last File Created 04/01/2013 - 13:50:56 ---A- C:\Users\Marwan\AppData\Roaming\OpenOffice.org\3\user\extensions\shared\registry\com.sun.star.comp.deployment.help.PackageRegistryBackend\backenddb.xml   [117]
O61 - LFC:Last File Created 04/01/2013 - 13:50:56 ---A- C:\Users\Marwan\AppData\Roaming\OpenOffice.org\3\user\extensions\tmp\extensions.pmap   [5]
O61 - LFC:Last File Created 04/01/2013 - 13:50:56 ---A- C:\Users\Marwan\AppData\Roaming\OpenOffice.org\3\user\extensions\tmp\registry\com.sun.star.comp.deployment.bundle.PackageRegistryBackend\backenddb.xml   [125]
O61 - LFC:Last File Created 04/01/2013 - 13:50:56 ---A- C:\Users\Marwan\AppData\Roaming\OpenOffice.org\3\user\extensions\tmp\registry\com.sun.star.comp.deployment.configuration.PackageRegistryBackend\backenddb.xml   [135]
O61 - LFC:Last File Created 04/01/2013 - 13:50:56 ---A- C:\Users\Marwan\AppData\Roaming\OpenOffice.org\3\user\extensions\tmp\registry\com.sun.star.comp.deployment.help.PackageRegistryBackend\backenddb.xml   [117]
O61 - LFC:Last File Created 04/01/2013 - 13:50:56 ---A- C:\Users\Marwan\AppData\Roaming\OpenOffice.org\3\user\uno_packages\cache\log.txt   [0]
O61 - LFC:Last File Created 04/01/2013 - 13:50:56 ---A- C:\Users\Marwan\AppData\Roaming\OpenOffice.org\3\user\uno_packages\cache\registry\com.sun.star.comp.deployment.bundle.PackageRegistryBackend\backenddb.xml   [577]
O61 - LFC:Last File Created 04/01/2013 - 13:50:56 ---A- C:\Users\Marwan\AppData\Roaming\OpenOffice.org\3\user\uno_packages\cache\registry\com.sun.star.comp.deployment.configuration.PackageRegistryBackend\backenddb.xml   [658]
O61 - LFC:Last File Created 04/01/2013 - 13:50:56 ---A- C:\Users\Marwan\AppData\Roaming\OpenOffice.org\3\user\uno_packages\cache\registry\com.sun.star.comp.deployment.configuration.PackageRegistryBackend\sver75.tmp\dictionaries.xcu   [2391]
O61 - LFC:Last File Created 04/01/2013 - 13:50:56 ---A- C:\Users\Marwan\AppData\Roaming\OpenOffice.org\3\user\uno_packages\cache\registry\com.sun.star.comp.deployment.help.PackageRegistryBackend\backenddb.xml   [117]
O61 - LFC:Last File Created 04/01/2013 - 13:50:56 ---A- C:\Users\Marwan\AppData\Roaming\OpenOffice.org\3\user\uno_packages\cache\uno_packages.pmap   [153]
O61 - LFC:Last File Created 04/01/2013 - 13:50:56 ---A- C:\Users\Marwan\AppData\Roaming\OpenOffice.org\3\user\uno_packages\cache\uno_packages\sver44.tmp_\ooo-dictionnaire-fr-moderne-v4.2.oxt\META-INF\manifest.xml   [503]
O61 - LFC:Last File Created 04/01/2013 - 13:50:56 ---A- C:\Users\Marwan\AppData\Roaming\OpenOffice.org\3\user\uno_packages\cache\uno_packages\sver44.tmp_\ooo-dictionnaire-fr-moderne-v4.2.oxt\description.xml   [1102]
O61 - LFC:Last File Created 04/01/2013 - 13:50:56 ---A- C:\Users\Marwan\AppData\Roaming\OpenOffice.org\3\user\uno_packages\cache\uno_packages\sver44.tmp_\ooo-dictionnaire-fr-moderne-v4.2.oxt\dictionaries.xcu   [1901]
O61 - LFC:Last File Created 04/01/2013 - 13:50:56 ---A- C:\Users\Marwan\AppData\Roaming\OpenOffice.org\3\user\uno_packages\cache\uno_packages\sver44.tmp_\ooo-dictionnaire-fr-moderne-v4.2.oxt\dictionaries\README_fr.txt   [3395]
O61 - LFC:Last File Created 04/01/2013 - 13:50:56 ---A- C:\Users\Marwan\AppData\Roaming\OpenOffice.org\3\user\uno_packages\cache\uno_packages\sver44.tmp_\ooo-dictionnaire-fr-moderne-v4.2.oxt\dictionaries\README_hyph_fr.txt   [1974]
O61 - LFC:Last File Created 04/01/2013 - 13:50:56 ---A- C:\Users\Marwan\AppData\Roaming\OpenOffice.org\3\user\uno_packages\cache\uno_packages\sver44.tmp_\ooo-dictionnaire-fr-moderne-v4.2.oxt\dictionaries\README_thes_fr.txt   [1961]
O61 - LFC:Last File Created 04/01/2013 - 13:50:56 ---A- C:\Users\Marwan\AppData\Roaming\OpenOffice.org\3\user\uno_packages\cache\uno_packages\sver44.tmp_\ooo-dictionnaire-fr-moderne-v4.2.oxt\dictionaries\fr-moderne.aff   [328899]
O61 - LFC:Last File Created 04/01/2013 - 13:50:56 ---A- C:\Users\Marwan\AppData\Roaming\OpenOffice.org\3\user\uno_packages\cache\uno_packages\sver44.tmp_\ooo-dictionnaire-fr-moderne-v4.2.oxt\dictionaries\fr-moderne.dic   [1094698]
O61 - LFC:Last File Created 04/01/2013 - 13:50:56 ---A- C:\Users\Marwan\AppData\Roaming\OpenOffice.org\3\user\uno_packages\cache\uno_packages\sver44.tmp_\ooo-dictionnaire-fr-moderne-v4.2.oxt\dictionaries\frhyph.tex   [34821]
O61 - LFC:Last File Created 04/01/2013 - 13:50:56 ---A- C:\Users\Marwan\AppData\Roaming\OpenOffice.org\3\user\uno_packages\cache\uno_packages\sver44.tmp_\ooo-dictionnaire-fr-moderne-v4.2.oxt\dictionaries\hyph_fr.dic   [13219]
O61 - LFC:Last File Created 04/01/2013 - 13:50:56 ---A- C:\Users\Marwan\AppData\Roaming\OpenOffice.org\3\user\uno_packages\cache\uno_packages\sver44.tmp_\ooo-dictionnaire-fr-moderne-v4.2.oxt\dictionaries\thes_fr.dat   [4670088]
O61 - LFC:Last File Created 04/01/2013 - 13:50:56 ---A- C:\Users\Marwan\AppData\Roaming\OpenOffice.org\3\user\uno_packages\cache\uno_packages\sver44.tmp_\ooo-dictionnaire-fr-moderne-v4.2.oxt\dictionaries\thes_fr.idx   [646979]
O61 - LFC:Last File Created 04/01/2013 - 13:50:56 ---A- C:\Users\Marwan\AppData\Roaming\OpenOffice.org\3\user\uno_packages\cache\uno_packages\sver44.tmp_\ooo-dictionnaire-fr-moderne-v4.2.oxt\drapeau_tricolore.png   [1780]
O61 - LFC:Last File Created 04/01/2013 - 13:50:56 ---A- C:\Users\Marwan\AppData\Roaming\OpenOffice.org\3\user\uno_packages\cache\uno_packages\sver44.tmp_\ooo-dictionnaire-fr-moderne-v4.2.oxt\package-description.txt   [575]
O61 - LFC:Last File Created 04/01/2013 - 13:50:56 ---A- C:\Users\Marwan\AppData\Roaming\OpenOffice.org\3\user\uno_packages\cache\uno_packages\sver44.tmp_\ooo-dictionnaire-fr-moderne-v4.2.oxtproperties   [18]
O61 - LFC:Last File Created 04/01/2013 - 15:10:17 ---A- C:\Users\Marwan\AppData\Local\GDIPFONTCACHEV1.DAT   [64824]
O61 - LFC:Last File Created 04/01/2013 - 15:10:34 ---A- C:\Users\Marwan\Tracing\WindowsLiveMessenger-uccapi-0.uccapilog.bak   [0]
O61 - LFC:Last File Created 04/01/2013 - 18:06:52 ---A- C:\Users\Marwan\AppData\Roaming\D2Info0   [125]
O61 - LFC:Last File Created 04/01/2013 - 18:06:52 ---A- C:\Users\Marwan\AppData\Roaming\Dofus2\appVersion.dat   [25]
O61 - LFC:Last File Created 04/01/2013 - 18:06:53 ---A- C:\Users\Marwan\AppData\Roaming\Dofus2\AlmanaxCache.dat   [2230]
O61 - LFC:Last File Created 04/01/2013 - 18:06:53 ---A- C:\Users\Marwan\AppData\Roaming\Dofus2\Jerakine_lang.dat   [224120]
O61 - LFC:Last File Created 04/01/2013 - 18:06:53 ---A- C:\Users\Marwan\AppData\Roaming\Dofus2\lastLangVersion.dat   [49]
O61 - LFC:Last File Created 04/01/2013 - 18:06:54 ---A- C:\Users\Marwan\AppData\Roaming\Dofus2\LoadingScreen.dat   [642645]
O61 - LFC:Last File Created 04/01/2013 - 18:06:56 ---A- C:\Users\Marwan\AppData\Roaming\app\Jerakine_lang.dat   [4795]
O61 - LFC:Last File Created 04/01/2013 - 18:06:57 ---A- C:\Users\Marwan\AppData\Roaming\Dofus2\Jerakine_file_version.dat   [5789]
O61 - LFC:Last File Created 04/01/2013 - 18:07:22 ---A- C:\Users\Marwan\AppData\Roaming\Adobe\AIR\Updater\lastUpdateCheck   [34]
O61 - LFC:Last File Created 04/01/2013 - 18:07:44 ---A- C:\Users\Marwan\AppData\Roaming\Dofus2\Berilia_binds.dat   [36558]
O61 - LFC:Last File Created 04/01/2013 - 18:07:44 ---A- C:\Users\Marwan\AppData\Roaming\Dofus2\atouin.dat   [376]
O61 - LFC:Last File Created 04/01/2013 - 18:07:44 ---A- C:\Users\Marwan\AppData\Roaming\Dofus2\dofus.dat   [351]
O61 - LFC:Last File Created 04/01/2013 - 18:07:46 ---A- C:\Users\Marwan\AppData\Roaming\Dofus2\Dofus_ComputerOptions.dat   [61]
O61 - LFC:Last File Created 04/01/2013 - 18:07:52 ---A- C:\Users\Marwan\AppData\Roaming\DofusAppId0_1   [8]
O61 - LFC:Last File Created 04/01/2013 - 18:08:05 ---A- C:\Users\Marwan\AppData\Roaming\Dofus2\Module_Ankama_Connection.dat   [104]
O61 - LFC:Last File Created 04/01/2013 - 18:08:06 ---A- C:\Users\Marwan\AppData\Roaming\Dofus2\Berilia_ui_css.dat   [18243]
O61 - LFC:Last File Created 04/01/2013 - 18:08:06 ---A- C:\Users\Marwan\AppData\Roaming\Dofus2\playerData_31965192.dat   [34]
O61 - LFC:Last File Created 04/01/2013 - 18:08:10 ---A- C:\Users\Marwan\AppData\Roaming\Dofus2\Dofus_ModuleDebug.dat   [96]
O61 - LFC:Last File Created 04/01/2013 - 18:08:10 ---A- C:\Users\Marwan\AppData\Roaming\Dofus2\clientData.dat   [60]
O61 - LFC:Last File Created 04/01/2013 - 18:08:43 ---A- C:\Users\Marwan\AppData\Local\Origin\Web Cache\data7\0\2v938j50.d   [3506]
O61 - LFC:Last File Created 04/01/2013 - 18:08:43 ---A- C:\Users\Marwan\AppData\Local\Origin\Web Cache\data7\1\15wwrllq.d   [1861]
O61 - LFC:Last File Created 04/01/2013 - 18:08:43 ---A- C:\Users\Marwan\AppData\Local\Origin\Web Cache\data7\3\2qan13tc.d   [1838]
O61 - LFC:Last File Created 04/01/2013 - 18:08:43 ---A- C:\Users\Marwan\AppData\Local\Origin\Web Cache\data7\4\211hjeg4.d   [1861]
O61 - LFC:Last File Created 04/01/2013 - 18:08:43 ---A- C:\Users\Marwan\AppData\Local\Origin\Web Cache\data7\4\261j4ogt.d   [37779]
O61 - LFC:Last File Created 04/01/2013 - 18:08:43 ---A- C:\Users\Marwan\AppData\Local\Origin\Web Cache\data7\6\1nt461bv.d   [4066]
O61 - LFC:Last File Created 04/01/2013 - 18:08:43 ---A- C:\Users\Marwan\AppData\Local\Origin\Web Cache\data7\7\3l93bty7.d   [1851]
O61 - LFC:Last File Created 04/01/2013 - 18:08:43 ---A- C:\Users\Marwan\AppData\Local\Origin\Web Cache\data7\8\22a5p1ix.d   [1856]
O61 - LFC:Last File Created 04/01/2013 - 18:08:44 ---A- C:\Users\Marwan\AppData\Local\Origin\Web Cache\data7\8\2jfnu1rh.d   [564]
O61 - LFC:Last File Created 04/01/2013 - 18:08:45 ---A- C:\Users\Marwan\AppData\Local\Origin\Web Cache\data7\6\1bcnokhf.d   [4757]
O61 - LFC:Last File Created 04/01/2013 - 18:08:45 ---A- C:\Users\Marwan\AppData\Roaming\Origin\local_93b7186eedefbe88afa1d40062ff0c44.xml   [1878]
O61 - LFC:Last File Created 04/01/2013 - 18:08:50 ---A- C:\Users\Marwan\AppData\Roaming\Origin\Web Storage\WebpageIcons.db   [105472]
O61 - LFC:Last File Created 04/01/2013 - 18:10:26 ---A- C:\Users\Marwan\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\HFS4FXFM\fr-himedia.cdn.videoplaza.tv\com.videoplaza.adplayer.sol   [324]
O61 - LFC:Last File Created 04/01/2013 - 18:10:30 ---A- C:\Users\Marwan\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\HFS4FXFM\www.jeuxvideo.com\com.jeroenwijering.sol   [54]
O61 - LFC:Last File Created 04/01/2013 - 18:10:31 ---A- C:\Users\Marwan\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\HFS4FXFM\fr-himedia.cdn.videoplaza.tv\com.videoplaza.bootloader.sol   [121]
O61 - LFC:Last File Created 04/01/2013 - 18:10:50 ---A- C:\Users\Marwan\AppData\Local\PunkBuster\BF3\pb\pbclold.dll   [949613]
O61 - LFC:Last File Created 04/01/2013 - 18:17:18 ---A- C:\Users\Marwan\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_lci.tf1.fr_0.localstorage   [3072]
O61 - LFC:Last File Created 04/01/2013 - 18:17:18 ---A- C:\Users\Marwan\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_lci.tf1.fr_0.localstorage-journal   [3608]
O61 - LFC:Last File Created 04/01/2013 - 18:20:30 ---A- C:\Users\Marwan\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_disqus.com_0.localstorage   [3072]
O61 - LFC:Last File Created 04/01/2013 - 18:20:30 ---A- C:\Users\Marwan\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_disqus.com_0.localstorage-journal   [3608]
O61 - LFC:Last File Created 04/01/2013 - 18:20:37 ---A- C:\Users\Marwan\AppData\Local\Google\Chrome\User Data\Default\TransportSecurity   [280]
O61 - LFC:Last File Created 04/01/2013 - 18:20:43 ---A- C:\Users\Marwan\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\HFS4FXFM\macromedia.com\support\flashplayer\sys\#www.pixule.com\settings.sol   [84]
O61 - LFC:Last File Created 04/01/2013 - 18:20:43 ---A- C:\Users\Marwan\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\HFS4FXFM\macromedia.com\support\flashplayer\sys\settings.sol   [525]
O61 - LFC:Last File Created 04/01/2013 - 18:20:43 ---A- C:\Users\Marwan\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\HFS4FXFM\www.pixule.com\sondage7.swf\so__getPoll.php.sol   [62]
O61 - LFC:Last File Created 04/01/2013 - 18:22:25 ---A- C:\Users\Marwan\AppData\Local\Google\Chrome\User Data\Default\Last Session   [357254]
O61 - LFC:Last File Created 04/01/2013 - 18:22:25 ---A- C:\Users\Marwan\AppData\Local\Google\Chrome\User Data\Default\Last Tabs   [368163]
O61 - LFC:Last File Created 04/01/2013 - 18:22:25 ---A- C:\Users\Marwan\AppData\Local\Google\Chrome\User Data\Default\Visited Links   [131072]
O61 - LFC:Last File Created 04/01/2013 - 18:22:34 ---A- C:\Users\Marwan\AppData\Roaming\Microsoft\MSN Messenger\sqmdata01.sqm   [758]
O61 - LFC:Last File Created 04/01/2013 - 18:22:34 ---A- C:\Users\Marwan\AppData\Roaming\Microsoft\MSN Messenger\sqmnoopt01.sqm   [510]
O61 - LFC:Last File Created 04/01/2013 - 22:47:37 ---A- C:\Users\Marwan\Tracing\WindowsLiveMessenger-uccapi-0.uccapilog   [0]
O61 - LFC:Last File Created 04/01/2013 - 22:47:55 ---A- C:\Users\Marwan\AppData\Local\ATI\ACE\Manifest.xml   [20182]
O61 - LFC:Last File Created 04/01/2013 - 22:47:56 ---A- C:\Users\Marwan\AppData\Local\ATI\ACE\Manifest.Bin   [27905]
O61 - LFC:Last File Created 04/01/2013 - 22:50:47 ---A- C:\Users\Marwan\AppData\Roaming\TS3Client\ts3clientui_qt.secrets.conf   [899]
O61 - LFC:Last File Created 04/01/2013 - 22:50:48 ---A- C:\Users\Marwan\AppData\Roaming\TS3Client\ts3clientui_qt.conf   [3537]
O61 - LFC:Last File Created 04/01/2013 - 22:50:49 ---A- C:\Users\Marwan\AppData\Roaming\TS3Client\cache\YjBMZWxFTUs1eTNuSDM2cFUxUS8wb2pnSEdrPQ==\icons\dummy.png   [109]
O61 - LFC:Last File Created 04/01/2013 - 22:50:49 ---A- C:\Users\Marwan\AppData\Roaming\TS3Client\cache\YjBMZWxFTUs1eTNuSDM2cFUxUS8wb2pnSEdrPQ==\icons\icon_1183787420   [798]
O61 - LFC:Last File Created 04/01/2013 - 22:50:49 ---A- C:\Users\Marwan\AppData\Roaming\TS3Client\cache\YjBMZWxFTUs1eTNuSDM2cFUxUS8wb2pnSEdrPQ==\icons\icon_1474124361   [824]
O61 - LFC:Last File Created 04/01/2013 - 22:50:49 ---A- C:\Users\Marwan\AppData\Roaming\TS3Client\cache\YjBMZWxFTUs1eTNuSDM2cFUxUS8wb2pnSEdrPQ==\icons\icon_2492031866   [806]
O61 - LFC:Last File Created 04/01/2013 - 22:50:49 ---A- C:\Users\Marwan\AppData\Roaming\TS3Client\cache\YjBMZWxFTUs1eTNuSDM2cFUxUS8wb2pnSEdrPQ==\icons\icon_2557593878   [823]
O61 - LFC:Last File Created 04/01/2013 - 22:50:49 ---A- C:\Users\Marwan\AppData\Roaming\TS3Client\cache\YjBMZWxFTUs1eTNuSDM2cFUxUS8wb2pnSEdrPQ==\icons\icon_2592098752   [807]
O61 - LFC:Last File Created 04/01/2013 - 22:50:49 ---A- C:\Users\Marwan\AppData\Roaming\TS3Client\cache\YjBMZWxFTUs1eTNuSDM2cFUxUS8wb2pnSEdrPQ==\icons\icon_2882053484   [823]
O61 - LFC:Last File Created 04/01/2013 - 22:50:49 ---A- C:\Users\Marwan\AppData\Roaming\TS3Client\cache\YjBMZWxFTUs1eTNuSDM2cFUxUS8wb2pnSEdrPQ==\icons\icon_3009137035   [818]
O61 - LFC:Last File Created 04/01/2013 - 22:50:49 ---A- C:\Users\Marwan\AppData\Roaming\TS3Client\cache\YjBMZWxFTUs1eTNuSDM2cFUxUS8wb2pnSEdrPQ==\icons\icon_3102551672   [769]
O61 - LFC:Last File Created 04/01/2013 - 22:50:49 ---A- C:\Users\Marwan\AppData\Roaming\TS3Client\cache\YjBMZWxFTUs1eTNuSDM2cFUxUS8wb2pnSEdrPQ==\icons\icon_359616394   [753]
O61 - LFC:Last File Created 04/01/2013 - 22:50:49 ---A- C:\Users\Marwan\AppData\Roaming\TS3Client\cache\YjBMZWxFTUs1eTNuSDM2cFUxUS8wb2pnSEdrPQ==\icons\icon_360693376   [112]
O61 - LFC:Last File Created 04/01/2013 - 22:50:49 ---A- C:\Users\Marwan\AppData\Roaming\TS3Client\cache\YjBMZWxFTUs1eTNuSDM2cFUxUS8wb2pnSEdrPQ==\icons\icon_3688631996   [804]
O61 - LFC:Last File Created 04/01/2013 - 22:50:49 ---A- C:\Users\Marwan\AppData\Roaming\TS3Client\cache\YjBMZWxFTUs1eTNuSDM2cFUxUS8wb2pnSEdrPQ==\icons\icon_4240182411   [779]
O61 - LFC:Last File Created 04/01/2013 - 22:50:49 ---A- C:\Users\Marwan\AppData\Roaming\TS3Client\cache\YjBMZWxFTUs1eTNuSDM2cFUxUS8wb2pnSEdrPQ==\icons\icon_520842778   [811]
O61 - LFC:Last File Created 04/01/2013 - 22:50:49 ---A- C:\Users\Marwan\AppData\Roaming\TS3Client\cache\YjBMZWxFTUs1eTNuSDM2cFUxUS8wb2pnSEdrPQ==\icons\icon_788316123   [732]
O61 - LFC:Last File Created 04/01/2013 - 22:50:49 ---A- C:\Users\Marwan\AppData\Roaming\TS3Client\cache\remote\img.verygames.net\themes\default\images\partenaires\ban_games-fr.png   [60561]
O61 - LFC:Last File Created 04/01/2013 - 22:50:50 ---A- C:\Users\Marwan\AppData\Roaming\TS3Client\cache\YjBMZWxFTUs1eTNuSDM2cFUxUS8wb2pnSEdrPQ==\icons\icon_3843815209   [629]
O61 - LFC:Last File Created 04/01/2013 - 22:51:02 ---A- C:\Users\Marwan\AppData\Roaming\TS3Client\chats\YjBMZWxFTUs1eTNuSDM2cFUxUS8wb2pnSEdrPQ==\channel.txt   [1845]
O61 - LFC:Last File Created 04/01/2013 - 22:51:37 ---A- C:\Users\Marwan\AppData\Local\Google\Chrome\User Data\Default\Extension State\CURRENT   [16]
O61 - LFC:Last File Created 04/01/2013 - 22:51:37 ---A- C:\Users\Marwan\AppData\Local\Google\Chrome\User Data\Default\Extension State\MANIFEST-000796   [614]
O61 - LFC:Last File Created 04/01/2013 - 22:51:40 ---A- C:\Users\Marwan\AppData\Local\Google\Chrome\User Data\Default\History Provider Cache   [170286]
O61 - LFC:Last File Created 04/01/2013 - 22:51:45 ---A- C:\Users\Marwan\AppData\Local\Google\Chrome\User Data\Default\Session Storage\CURRENT   [16]
O61 - LFC:Last File Created 04/01/2013 - 22:51:46 ---A- C:\Users\Marwan\AppData\Local\Google\Chrome\User Data\Default\Session Storage\001008.sst   [147]
O61 - LFC:Last File Created 04/01/2013 - 22:51:46 ---A- C:\Users\Marwan\AppData\Local\Google\Chrome\User Data\Default\Session Storage\MANIFEST-001005   [481]
O61 - LFC:Last File Created 04/01/2013 - 22:51:48 ---A- C:\Users\Marwan\AppData\Local\Windows Live\uxcore_msnmsgr_00.etl   [12288]
O61 - LFC:Last File Created 04/01/2013 - 22:51:48 ---A- C:\Users\Marwan\AppData\Roaming\Microsoft\MSN Messenger\sqmdata02.sqm   [758]
O61 - LFC:Last File Created 04/01/2013 - 22:51:48 ---A- C:\Users\Marwan\AppData\Roaming\Microsoft\MSN Messenger\sqmnoopt02.sqm   [510]
O61 - LFC:Last File Created 04/01/2013 - 22:51:49 ---A- C:\Users\Marwan\AppData\Local\Google\Chrome\User Data\Default\Managed Mode Settings   [8]
O61 - LFC:Last File Created 04/01/2013 - 22:51:56 ---A- C:\Users\Marwan\AppData\Roaming\TS3Client\cache\remote\2.bp.blogspot.com\-IEAEGAhacAE\T-fpioltlbI\AAAAAAAABzc\8seuqGmHO1Q\s1600\TqKjI.png   [190141]
O61 - LFC:Last File Created 04/01/2013 - 22:51:58 ---A- C:\Users\Marwan\AppData\Roaming\TS3Client\cache\remote\i.imgur.com\Oq8Vw.png   [299744]
O61 - LFC:Last File Created 04/01/2013 - 22:52:51 ---A- C:\Users\Marwan\AppData\Local\PunkBuster\BF3\pb\pbcl.dll   [949613]
O61 - LFC:Last File Created 04/01/2013 - 22:52:52 ---A- C:\Users\Marwan\AppData\Local\PunkBuster\BF3\pb\PnkBstrB.exe   [281520]
O61 - LFC:Last File Created 04/01/2013 - 22:53:03 ---A- C:\Users\Marwan\AppData\Local\PunkBuster\BF3\pb\PnkBstrK.sys   [139328]
O61 - LFC:Last File Created 04/01/2013 - 22:57:43 ---A- C:\Users\Marwan\AppData\Local\Google\Chrome\User Data\Certificate Revocation Lists   [257346]
O61 - LFC:Last File Created 04/01/2013 - 22:57:43 ---A- C:\Users\Marwan\AppData\Local\Temp\CRX_75DAF8CB7768\crl-set   [931]
O61 - LFC:Last File Created 04/01/2013 - 22:57:43 ---A- C:\Users\Marwan\AppData\Local\Temp\CRX_75DAF8CB7768\manifest.json   [34]
O61 - LFC:Last File Created 04/01/2013 - 23:22:52 ---A- C:\Users\Marwan\AppData\Local\PunkBuster\BF3\pb\pbcl.db   [4987]
O61 - LFC:Last File Created 04/01/2013 - 23:24:58 ---A- C:\Users\Marwan\AppData\Local\Google\Chrome\User Data\Safe Browsing Download   [1412816]
O61 - LFC:Last File Created 04/01/2013 - 23:24:59 ---A- C:\Users\Marwan\AppData\Local\Google\Chrome\User Data\Safe Browsing Bloom   [7945980]
O61 - LFC:Last File Created 04/01/2013 - 23:24:59 ---A- C:\Users\Marwan\AppData\Local\Google\Chrome\User Data\Safe Browsing Bloom Prefix Set   [1504644]
O61 - LFC:Last File Created 04/01/2013 - 23:24:59 ---A- C:\Users\Marwan\AppData\Local\Google\Chrome\User Data\Safe Browsing Csd Whitelist   [134460]
O61 - LFC:Last File Created 04/01/2013 - 23:24:59 ---A- C:\Users\Marwan\AppData\Local\Google\Chrome\User Data\Safe Browsing Download Whitelist   [19840]
O61 - LFC:Last File Created 04/01/2013 - 23:25:28 ---A- C:\Users\Marwan\AppData\Local\Google\Chrome\User Data\Safe Browsing Cookies   [6144]
O61 - LFC:Last File Created 04/01/2013 - 23:25:28 ---A- C:\Users\Marwan\AppData\Local\Google\Chrome\User Data\Safe Browsing Cookies-journal   [4640]
O61 - LFC:Last File Created 04/01/2013 - 23:26:38 ---A- C:\Users\Marwan\Documents\Battlefield 3\settings\PROF_SAVE_body   [1024000]
O61 - LFC:Last File Created 04/01/2013 - 23:26:38 ---A- C:\Users\Marwan\Documents\Battlefield 3\settings\PROF_SAVE_header   [8]
O61 - LFC:Last File Created 04/01/2013 - 23:26:38 ---A- C:\Users\Marwan\Documents\Battlefield 3\settings\PROF_SAVE_profile   [18377]
O61 - LFC:Last File Created 04/01/2013 - 23:26:38 ---A- C:\Users\Marwan\Documents\Battlefield 3\settings\meta.xml   [16077]
O61 - LFC:Last File Created 04/01/2013 - 23:26:41 ---A- C:\Users\Marwan\AppData\Local\Origin\Cloud Saves\71067.client   [418]
O61 - LFC:Last File Created 04/01/2013 - 23:26:45 ---A- C:\Users\Marwan\AppData\Local\Origin\Cloud Saves\71067.lastsync   [418]
O61 - LFC:Last File Created 04/01/2013 - 23:26:45 ---A- C:\Users\Marwan\AppData\Roaming\Origin\Cloud Saves\2408342657.usage   [358]
O61 - LFC:Last File Created 04/01/2013 - 23:28:36 ---A- C:\Users\Marwan\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Logs\mbam-log-2013-01-04 (23-26-00).txt   [2112]
O61 - LFC:Last File Created 04/01/2013 - 23:28:47 ---A- C:\Users\Marwan\AppData\Roaming\OpenOffice.org\3\user\registrymodifications.xcu   [36577]
O61 - LFC:Last File Created 04/01/2013 - 23:32:47 ---A- C:\Users\Marwan\AppData\Local\ATI\ACE\Profiles.xml   [17971]
O61 - LFC:Last File Created 04/01/2013 - 23:34:16 ---A- C:\Users\Marwan\AppData\Local\Google\Chrome\User Data\Default\Web Data   [88064]
O61 - LFC:Last File Created 04/01/2013 - 23:34:16 ---A- C:\Users\Marwan\AppData\Local\Google\Chrome\User Data\Default\Web Data-journal   [16384]
O61 - LFC:Last File Created 04/01/2013 - 23:35:01 ---A- C:\Users\Marwan\AppData\Local\Google\Chrome\User Data\Default\Network Action Predictor   [275456]
O61 - LFC:Last File Created 04/01/2013 - 23:35:01 ---A- C:\Users\Marwan\AppData\Local\Google\Chrome\User Data\Default\Network Action Predictor-journal   [16384]
O61 - LFC:Last File Created 04/01/2013 - 23:35:01 ---A- C:\Users\Marwan\AppData\Local\Google\Chrome\User Data\Default\Shortcuts   [12288]
O61 - LFC:Last File Created 04/01/2013 - 23:35:01 ---A- C:\Users\Marwan\AppData\Local\Google\Chrome\User Data\Default\Shortcuts-journal   [16384]
O61 - LFC:Last File Created 04/01/2013 - 23:41:46 ---A- C:\Users\Marwan\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_battlelog.battlefield.com_0.localstorage   [1440768]
O61 - LFC:Last File Created 04/01/2013 - 23:41:46 ---A- C:\Users\Marwan\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_battlelog.battlefield.com_0.localstorage-journal   [16384]
O61 - LFC:Last File Created 04/01/2013 - 23:42:19 ---A- C:\Users\Marwan\AppData\Roaming\TS3Client\chats\YjBMZWxFTUs1eTNuSDM2cFUxUS8wb2pnSEdrPQ==\server.html   [82117]
O61 - LFC:Last File Created 04/01/2013 - 23:46:20 ---A- C:\Users\Marwan\AppData\Local\Google\Chrome\User Data\Default\Favicons   [172032]
O61 - LFC:Last File Created 04/01/2013 - 23:46:20 ---A- C:\Users\Marwan\AppData\Local\Google\Chrome\User Data\Default\Favicons-journal   [16384]
O61 - LFC:Last File Created 04/01/2013 - 23:46:47 ---A- C:\Users\Marwan\AppData\Local\Google\Chrome\User Data\Local State   [11151]
O61 - LFC:Last File Created 04/01/2013 - 23:47:09 ---A- C:\Users\Marwan\AppData\Local\Google\Chrome\User Data\Default\History   [315392]
O61 - LFC:Last File Created 04/01/2013 - 23:47:09 ---A- C:\Users\Marwan\AppData\Local\Google\Chrome\User Data\Default\History Index 2013-01   [3874816]
O61 - LFC:Last File Created 04/01/2013 - 23:47:09 ---A- C:\Users\Marwan\AppData\Local\Google\Chrome\User Data\Default\History Index 2013-01-journal   [16384]
O61 - LFC:Last File Created 04/01/2013 - 23:47:09 ---A- C:\Users\Marwan\AppData\Local\Google\Chrome\User Data\Default\History-journal   [16384]
O61 - LFC:Last File Created 04/01/2013 - 23:47:29 ---A- C:\Users\Marwan\AppData\Local\Google\Chrome\User Data\Default\Cookies   [349184]
O61 - LFC:Last File Created 04/01/2013 - 23:47:29 ---A- C:\Users\Marwan\AppData\Local\Google\Chrome\User Data\Default\Cookies-journal   [16384]
O61 - LFC:Last File Created 04/01/2013 - 23:48:11 ---A- C:\Users\Marwan\AppData\Local\Google\Chrome\User Data\Default\Top Sites   [114688]
O61 - LFC:Last File Created 04/01/2013 - 23:48:11 ---A- C:\Users\Marwan\AppData\Local\Google\Chrome\User Data\Default\Top Sites-journal   [16384]
O61 - LFC:Last File Created 04/01/2013 - 23:48:21 ---A- C:\Users\Marwan\AppData\Local\Google\Chrome\User Data\Default\Preferences   [78924]
O61 - LFC:Last File Created 30/12/1899 - 18:22:27 --HA- C:\Users\Marwan\AppData\Local\IconCache.db   [46307907]
~ Scan Files in 00mn 01s



---\\ Liste des outils de nettoyage (O63)
O63 - Logiciel: ZHPDiag 1.32 - (.Nicolas Coolman.) [HKLM] -- ZHPDiag_is1
~ Scan ADS in 00mn 00s



---\\ Liste des services Legacy (O64)
O64 - Services: CurCS - 02/12/2012 - C:\Windows\System32\DRIVERS\atikmdag.sys (amdkmdag)  .(.Advanced Micro Devices, Inc. - ATI Radeon Kernel Mode Driver.) - LEGACY_AMDKMDAG
O64 - Services: CurCS - 11/05/2010 - C:\Windows\system32\drivers\cpuz133_x64.sys (cpuz133)  .(.Windows (R) Win 7 DDK provider - CPUID Driver.) - LEGACY_CPUZ133
O64 - Services: CurCS - 01/09/2012 - C:\Windows\System32\DRIVERS\iaStorA.sys (iaStorA)  .(.Intel Corporation - Intel Rapid Storage Technology driver - x64.) - LEGACY_IASTORA
O64 - Services: CurCS - 14/12/2012 - C:\Windows\system32\drivers\mbam.sys (MBAMProtector)  .(.Malwarebytes Corporation - Malwarebytes Anti-Malware.) - LEGACY_MBAMPROTECTOR
O64 - Services: CurCS - ??\??\???? - C:\Windows\System32\Drivers\secdrv.sys (secdrv)  .(.Macrovision Corporation, Macrovision Europe - Macrovision SECURITY Driver.) - LEGACY_SECDRV
~ Scan Services in 00mn 00s



---\\ Liste des fichiers non signés (O65) (None)

---\\ File Associations Shell Spawning (O67)
O67 - Shell Spawning: <.bat> <batfile>[HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.cpl> <cplfile>[HKLM\..\cplopen\Command] (.Microsoft Corporation - Windows Control Panel.) -- C:\Windows\System32\control.exe
O67 - Shell Spawning: <.cmd> <cmdfile>[HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.com> <comfile>[HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.evt> <evtfile>[HKLM\..\open\Command] (.Microsoft Corporation - Lanceur du composant logiciel enfichable Observateur d’événements.) -- C:\Windows\System32\eventvwr.exe
O67 - Shell Spawning: <.exe> <exefile>[HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.html> <htmlfile>[HKLM\..\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
O67 - Shell Spawning: <.js> <JSFile>[HKLM\..\open\Command] (.Microsoft Corporation - Microsoft ® Windows Based Script Host.) -- C:\Windows\System32\WScript.exe
O67 - Shell Spawning: <.reg> <regfile>[HKLM\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\Windows\regedit.exe
O67 - Shell Spawning: <.html> <ChromeHTML>[HKCU\..\open\Command] (.Not Key.)
O67 - Shell Spawning: <.bat> <batfile>[HKCR\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.cpl> <cplfile>[HKCR\..\cplopen\Command] (.Microsoft Corporation - Windows Control Panel.) -- C:\Windows\System32\control.exe
O67 - Shell Spawning: <.cmd> <cmdfile>[HKCR\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.com> <comfile>[HKCR\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.evt> <evtfile>[HKCR\..\open\Command] (.Microsoft Corporation - Lanceur du composant logiciel enfichable Observateur d’événements.) -- C:\Windows\System32\eventvwr.exe
O67 - Shell Spawning: <.exe> <exefile>[HKCR\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.html> <ChromeHTML>[HKCR\..\open\Command] (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
O67 - Shell Spawning: <.js> <JSFile>[HKCR\..\open\Command] (.Microsoft Corporation - Microsoft ® Windows Based Script Host.) -- C:\Windows\System32\WScript.exe
O67 - Shell Spawning: <.reg> <regfile>[HKCR\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\Windows\regedit.exe
~ Scan Keys in 00mn 00s



---\\ Start Menu Internet (O68)
O68 - StartMenuInternet: <Google Chrome> <Google Chrome>[HKLM\..\Shell\open\Command] (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
O68 - StartMenuInternet: <IEXPLORE.EXE> <Internet Explorer>[HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
O68 - StartMenuInternet: <Google Chrome> <Google Chrome>[HKLM\..\InstallInfo\ShowIconsCommand] (...) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (.not file.)
O68 - StartMenuInternet: <IEXPLORE.EXE> <Internet Explorer>[HKLM\..\InstallInfo\ShowIconsCommand] (...) -- C:\Windows\System32\ie4uinit.exe (.not file.)
O68 - StartMenuInternet: <Google Chrome> <Google Chrome>[HKLM\..\InstallInfo\ReinstallCommand] (...) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (.not file.)
O68 - StartMenuInternet: <IEXPLORE.EXE> <Internet Explorer>[HKLM\..\InstallInfo\ReinstallCommand] (...) -- C:\Windows\System32\ie4uinit.exe (.not file.)
O68 - StartMenuInternet: <Google Chrome> <Google Chrome>[HKLM\..\InstallInfo\HideIconsCommand] (...) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (.not file.)
O68 - StartMenuInternet: <IEXPLORE.EXE> <Internet Explorer>[HKLM\..\InstallInfo\HideIconsCommand] (...) -- C:\Windows\System32\ie4uinit.exe (.not file.)
~ Scan Keys in 00mn 00s



---\\ Search Browser Infection (O69)
O69 - SBI: SearchScopes [HKCU] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} [DefaultScope] - (Bing) - http://www.bing.com
O69 - SBI: SearchScopes [HKCU] {171DEBEB-C3D4-40b7-AC73-056A5EBA4A7E} - (Ask Search) - http://websearch.ask.com
O69 - SBI: SearchScopes [HKCU] {CEEA01D5-C1FD-4DE6-BF4D-77BA5BE425FC} - (Avanquest FR Customized Web Search) - http://search.conduit.com
~ Scan Keys in 00mn 00s



---\\ Recherche des services démarrés par Svchost (O83)
O83 - Search Svchost Services: AeLookupSvc (AeLookupSvc) . (.Microsoft Corporation - Service Expérience d’application.) -- C:\Windows\System32\aelupsvc.dll   [72192]
O83 - Search Svchost Services: CertPropSvc (CertPropSvc) . (.Microsoft Corporation - Service de propagation de certificats de cartes à puce Microsoft.) -- C:\Windows\System32\certprop.dll   [80384]
O83 - Search Svchost Services: SCPolicySvc (SCPolicySvc) . (.Microsoft Corporation - Service de propagation de certificats de cartes à puce Microsoft.) -- C:\Windows\System32\certprop.dll   [80384]
O83 - Search Svchost Services: lanmanserver (lanmanserver) . (.Microsoft Corporation - DLL du service Serveur.) -- C:\Windows\System32\srvsvc.dll   [236032]
O83 - Search Svchost Services: gpsvc (gpsvc) . (.Microsoft Corporation - Client de stratégie de groupe.) -- C:\Windows\System32\gpsvc.dll   [777728]
O83 - Search Svchost Services: IKEEXT (IKEEXT) . (.Microsoft Corporation - Extension IKE.) -- C:\Windows\System32\ikeext.dll   [853504]
O83 - Search Svchost Services: AudioSrv (AudioSrv) . (.Microsoft Corporation - Service Audio Windows.) -- C:\Windows\System32\Audiosrv.dll   [679424]
O83 - Search Svchost Services: Rasauto (Rasauto) . (.Microsoft Corporation - Gestionnaire de numérotation automatique d’accès distant.) -- C:\Windows\System32\rasauto.dll   [99328]
O83 - Search Svchost Services: Rasman (Rasman) . (.Microsoft Corporation - Gestionnaire de connexions d’accès distant.) -- C:\Windows\System32\rasmans.dll   [344064]
O83 - Search Svchost Services: Remoteaccess (Remoteaccess) . (.Microsoft Corporation - Gestionnaire d’interface dynamique.) -- C:\Windows\System32\mprdim.dll   [97792]
O83 - Search Svchost Services: SENS (SENS) . (.Microsoft Corporation - Service de notification d’événements système (SENS).) -- C:\Windows\System32\sens.dll   [64512]
O83 - Search Svchost Services: Sharedaccess (Sharedaccess) . (.Microsoft Corporation - Composants de l’application d’assistance à Microsoft NAT.) -- C:\Windows\System32\ipnathlp.dll   [359424]
O83 - Search Svchost Services: Tapisrv (Tapisrv) . (.Microsoft Corporation - Serveur de téléphonie Microsoft® Windows(TM).) -- C:\Windows\System32\tapisrv.dll   [316928]
O83 - Search Svchost Services: TermService (TermService) . (.Microsoft Corporation - Gestionnaire des connexions distantes du serveur hôte de session Burea.) -- C:\Windows\System32\termsrv.dll   [680960]
O83 - Search Svchost Services: wuauserv (wuauserv) . (.Microsoft Corporation - Agent de mise à jour automatique Windows Update.) -- C:\Windows\System32\wuaueng.dll   [2428952]
O83 - Search Svchost Services: BITS (BITS) . (.Microsoft Corporation - Service de transfert intelligent en arrière-plan.) -- C:\Windows\System32\qmgr.dll   [849920]
O83 - Search Svchost Services: ShellHWDetection (ShellHWDetection) . (.Microsoft Corporation - Dll des services Windows Shell.) -- C:\Windows\System32\shsvcs.dll   [370688]
O83 - Search Svchost Services: iphlpsvc (iphlpsvc) . (.Microsoft Corporation - Service offrant une connectivité IPv6 sur un réseau IPv4..) -- C:\Windows\System32\iphlpsvc.dll   [569344]
O83 - Search Svchost Services: seclogon (seclogon) . (.Microsoft Corporation - DLL de service d’ouverture de session secondaire.) -- C:\Windows\system32\seclogon.dll   [30720]
O83 - Search Svchost Services: AppInfo (AppInfo) . (.Microsoft Corporation - Service Informations d’application.) -- C:\Windows\System32\appinfo.dll   [70656]
O83 - Search Svchost Services: msiscsi (msiscsi) . (.Microsoft Corporation - Service de découverte iSCSI.) -- C:\Windows\System32\iscsiexe.dll   [156672]
O83 - Search Svchost Services: MMCSS (MMCSS) . (.Microsoft Corporation - Service Planificateur de classes multimédias.) -- C:\Windows\System32\mmcss.dll   [67584]
O83 - Search Svchost Services: winmgmt (winmgmt) . (.Microsoft Corporation - WMI.) -- C:\Windows\System32\wbem\WMIsvc.dll   [242688]
O83 - Search Svchost Services: SessionEnv (SessionEnv) . (.Microsoft Corporation - Service Configuration des services Bureau à distance.) -- C:\Windows\System32\sessenv.dll   [121856]
O83 - Search Svchost Services: browser (browser) . (.Microsoft Corporation - DLL du service Explorateur d’ordinateurs.) -- C:\Windows\System32\browser.dll   [136704]
O83 - Search Svchost Services: EapHost (EapHost) . (.Microsoft Corporation - Service EAPHost Microsoft.) -- C:\Windows\System32\eapsvc.dll   [111104]
O83 - Search Svchost Services: schedule (schedule) . (.Microsoft Corporation - Service du Planificateur de tâches.) -- C:\Windows\System32\schedsvc.dll   [1110016]
O83 - Search Svchost Services: hkmsvc (hkmsvc) . (.Microsoft Corporation - Service Gestion des clés.) -- C:\Windows\System32\kmsvc.dll   [90624]
O83 - Search Svchost Services: wercplsupport (wercplsupport) . (.Microsoft Corporation - Rapports et solutions aux problèmes.) -- C:\Windows\System32\wercplsupport.dll   [84480]
O83 - Search Svchost Services: ProfSvc (ProfSvc) . (.Microsoft Corporation - ProfSvc.) -- C:\Windows\System32\profsvc.dll   [209920]
O83 - Search Svchost Services: Themes (Themes) . (.Microsoft Corporation - DLL du service des thèmes Windows Shell.) -- C:\Windows\System32\themeservice.dll   [44544]
O83 - Search Svchost Services: BDESVC (BDESVC) . (.Microsoft Corporation - Service BDE.) -- C:\Windows\System32\bdesvc.dll   [100864]
~ Scan Services in 00mn 00s



---\\ Firewall Active Exception List (FirewallRules) (O87)
O87 - FAEL: "WMPNSS-Out-TCP" |Out - Public - P6 - FALSE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.)
O87 - FAEL: "WMPNSS-In-TCP" |In - Public - P6 - FALSE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.)
O87 - FAEL: "WMPNSS-Out-UDP" |Out - Public - P17 - FALSE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.)
O87 - FAEL: "WMPNSS-In-UDP" |In - Public - P17 - FALSE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.)
O87 - FAEL: "WMPNSS-Out-TCP-NoScope" |Out - Domain - P6 - FALSE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.)
O87 - FAEL: "WMPNSS-In-TCP-NoScope" |In - Domain - P6 - FALSE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.)
O87 - FAEL: "WMPNSS-Out-UDP-NoScope" |Out - Domain - P17 - FALSE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.)
O87 - FAEL: "WMPNSS-In-UDP-NoScope" |In - Domain - P17 - FALSE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.)
O87 - FAEL: "{2F6C5739-0891-49FA-A7B5-AA67D5C1FDED}" |In - Private - P17 - TRUE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.)
O87 - FAEL: "{C0FCCF0A-EA64-4D05-A1F9-5E00E2E84062}" |Out - Private - P17 - TRUE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.)
O87 - FAEL: "{A2CF1F3C-CE55-4426-BCB0-E9FA1BD66CC8}" |In - Private - P6 - TRUE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.)
O87 - FAEL: "{2224CFF8-55F2-4567-B8C6-55E54ED9BACC}" |Out - Private - P6 - TRUE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.)
O87 - FAEL: "{C59A986D-9FC9-464C-8CA6-7EAE8FC4D603}" | In - Private - P6 - TRUE | .(.Valve Corporation - Steam.) -- C:\Program Files (x86)\Steam\Steam.exe
O87 - FAEL: "{FCAA565E-321E-4673-B79C-982D4BF9FE29}" | In - Private - P17 - TRUE | .(.Valve Corporation - Steam.) -- C:\Program Files (x86)\Steam\Steam.exe
O87 - FAEL: "TCP Query User{4ECC862E-1441-4128-BD54-7D8E7DF102B7}C:\program files (x86)\trendnet\common\raui.exe" | In - Private - P6 - TRUE | .(.TRENDnet - TRENDnet Wireless LAN Card Utility.) -- C:\program files (x86)\trendnet\common\raui.exe
O87 - FAEL: "UDP Query User{025D9E29-55DF-419B-8BE4-CD3E12B29C0D}C:\program files (x86)\trendnet\common\raui.exe" | In - Private - P17 - TRUE | .(.TRENDnet - TRENDnet Wireless LAN Card Utility.) -- C:\program files (x86)\trendnet\common\raui.exe
O87 - FAEL: "TCP Query User{BE20BBB0-EA14-4D57-A91B-56EDA7F15E21}C:\program files (x86)\trendnet\common\raui.exe" | In - Public - P6 - TRUE | .(.TRENDnet - TRENDnet Wireless LAN Card Utility.) -- C:\program files (x86)\trendnet\common\raui.exe
O87 - FAEL: "UDP Query User{50B274F2-CAAB-4B7F-B3B1-8B3242309587}C:\program files (x86)\trendnet\common\raui.exe" | In - Public - P17 - TRUE | .(.TRENDnet - TRENDnet Wireless LAN Card Utility.) -- C:\program files (x86)\trendnet\common\raui.exe
O87 - FAEL: "{2823DD79-AF31-43C2-936D-709E0EE8F4E1}" | In - None - P17 - TRUE | .(.Skype Technologies S.A. - Skype.) -- C:\Program Files (x86)\Skype\Phone\Skype.exe
O87 - FAEL: "TCP Query User{991E8513-367F-498D-BE26-D5CE993335B2}C:\program files (x86)\steam\steamapps\bodmer94\insurgency\hl2.exe" | In - Private - P6 - TRUE | .(...) -- C:\program files (x86)\steam\steamapps\bodmer94\insurgency\hl2.exe
O87 - FAEL: "UDP Query User{E320941D-F997-47ED-8A6A-CB7091A2CC21}C:\program files (x86)\steam\steamapps\bodmer94\insurgency\hl2.exe" | In - Private - P17 - TRUE | .(...) -- C:\program files (x86)\steam\steamapps\bodmer94\insurgency\hl2.exe
O87 - FAEL: "TCP Query User{BE4711A6-E663-4A56-8252-A0C41D27ADDF}C:\program files (x86)\steam\steamapps\rulio70\insurgency\hl2.exe" | In - Private - P6 - TRUE | .(...) -- C:\program files (x86)\steam\steamapps\rulio70\insurgency\hl2.exe
O87 - FAEL: "UDP Query User{83B47742-E183-431E-A506-7558106E7206}C:\program files (x86)\steam\steamapps\rulio70\insurgency\hl2.exe" | In - Private - P17 - TRUE | .(...) -- C:\program files (x86)\steam\steamapps\rulio70\insurgency\hl2.exe
O87 - FAEL: "{3DF15501-40F7-4217-9B18-D7BAAC0D0A28}" | In - Private - P6 - TRUE | .(.EA Digital Illusions CE AB - Battlefield: Bad Company™ 2.) -- C:\Program Files (x86)\Steam\SteamApps\common\battlefield bad company 2\BFBC2Game.exe
O87 - FAEL: "{0AA270B1-2F7F-406D-B81F-C35CC48BCB99}" | In - Private - P17 - TRUE | .(.EA Digital Illusions CE AB - Battlefield: Bad Company™ 2.) -- C:\Program Files (x86)\Steam\SteamApps\common\battlefield bad company 2\BFBC2Game.exe
O87 - FAEL: "{13721722-6B08-4D50-BCF5-8681BA625FE3}" | In - Private - P6 - TRUE | .(...) -- C:\Program Files (x86)\Steam\SteamApps\common\battlefield bad company 2\Support\EA Help\Electronic_Arts_Technical_Support.htm
O87 - FAEL: "{B1EFE333-7974-4237-828D-31E98C149A99}" | In - Private - P17 - TRUE | .(...) -- C:\Program Files (x86)\Steam\SteamApps\common\battlefield bad company 2\Support\EA Help\Electronic_Arts_Technical_Support.htm
O87 - FAEL: "{B42CCAC9-4A19-4F93-9FC4-3AD7594BB4E5}" | In - Private - P6 - TRUE | .(.Valve - Half-Life Launcher.) -- C:\Program Files (x86)\Steam\SteamApps\rulio70\counter-strike\hl.exe
O87 - FAEL: "{F65A7805-7C3A-443D-8E55-5AC06B39A920}" | In - Private - P17 - TRUE | .(.Valve - Half-Life Launcher.) -- C:\Program Files (x86)\Steam\SteamApps\rulio70\counter-strike\hl.exe
O87 - FAEL: "{ED75E14A-531C-4479-9DFC-1701A3D54BFA}" | In - Private - P6 - TRUE | .(.EA Digital Illusions CE AB - Battlefield 3™.) -- C:\Program Files (x86)\Origin Games\Battlefield 3\bf3.exe
O87 - FAEL: "{A5605FB8-620C-4FB4-AEA4-0BD9B312F8DA}" | In - Private - P17 - TRUE | .(.EA Digital Illusions CE AB - Battlefield 3™.) -- C:\Program Files (x86)\Origin Games\Battlefield 3\bf3.exe
O87 - FAEL: "{1FA5D939-EAFE-4CCC-BF2D-657DD29834DE}" | In - None - P17 - TRUE | .(.Apple Inc. - WebKit2WebProcess.exe.) -- C:\Program Files (x86)\Common Files\Apple\Apple Application Support\WebKit2WebProcess.exe
O87 - FAEL: "{5083B07C-07B4-4FC8-9785-0D8762E49279}" | In - Private - P6 - TRUE | .(.Apple Inc. - Bonjour Service.) -- C:\Program Files\Bonjour\mDNSResponder.exe
O87 - FAEL: "{16B75CF4-6F8D-4851-BC9B-8D80C040594D}" | In - Private - P17 - TRUE | .(.Apple Inc. - Bonjour Service.) -- C:\Program Files\Bonjour\mDNSResponder.exe
O87 - FAEL: "{66E52EF4-BDE6-4051-94BF-8C9A1E98C4A4}" | In - Private - P6 - TRUE | .(.Apple Inc. - Bonjour Service.) -- C:\Program Files (x86)\Bonjour\mDNSResponder.exe
O87 - FAEL: "{8B8FF0A7-3E8D-466A-B8DA-A40168BE19F3}" | In - Private - P17 - TRUE | .(.Apple Inc. - Bonjour Service.) -- C:\Program Files (x86)\Bonjour\mDNSResponder.exe
O87 - FAEL: "{EA25ACC8-E93D-4712-8762-AAF4ECEC61E6}" | In - None - P17 - TRUE | .(.Apple Inc. - iTunes.) -- C:\Program Files (x86)\iTunes\iTunes.exe
O87 - FAEL: "{56DB14FC-AC17-4016-B1E9-4FFAFE40ED4D}" | In - Private - P6 - TRUE | .(...) -- C:\Windows\SysWOW64\PnkBstrA.exe
O87 - FAEL: "{7BF75ADC-0DC2-41ED-8139-1399120ADCD9}" | In - Private - P17 - TRUE | .(...) -- C:\Windows\SysWOW64\PnkBstrA.exe
O87 - FAEL: "{E2EF6162-0D9C-49DC-BABB-C41EB50DBE0B}" | In - Private - P6 - TRUE | .(...) -- C:\Windows\SysWOW64\PnkBstrB.exe
O87 - FAEL: "{E05B8BEF-B760-4E77-970D-64788A0B7D80}" | In - Private - P17 - TRUE | .(...) -- C:\Windows\SysWOW64\PnkBstrB.exe
O87 - FAEL: "{9A3059DB-B9AD-479E-8171-A0A3D1FF15B6}" | In - Private - P6 - TRUE | .(.Danger Close Games - Medal of Honor™ Warfighter.) -- C:\Program Files (x86)\Origin Games\Medal of Honor Warfighter\MOHW.exe
O87 - FAEL: "{6056BB2D-1274-4510-9F95-05D4815424AC}" | In - Private - P17 - TRUE | .(.Danger Close Games - Medal of Honor™ Warfighter.) -- C:\Program Files (x86)\Origin Games\Medal of Honor Warfighter\MOHW.exe
O87 - FAEL: "{75986C05-21F5-46C9-88D4-68B3785D209A}" | In - Private - P6 - TRUE | .(...) -- C:\Program Files (x86)\Origin Games\Battlefield 1942\BF1942.exe
O87 - FAEL: "{FBCFC2B9-A927-445F-88BA-35BB83C6BDC3}" | In - Private - P17 - TRUE | .(...) -- C:\Program Files (x86)\Origin Games\Battlefield 1942\BF1942.exe
O87 - FAEL: "{1913C64D-AD10-4054-9B90-92A17F1207FE}" | In - Private - P6 - TRUE | .(...) -- C:\Program Files (x86)\Steam\SteamApps\common\left 4 dead 2\left4dead2.exe
O87 - FAEL: "{87DF7645-35D1-45A2-B5A0-577569F98378}" | In - Private - P17 - TRUE | .(...) -- C:\Program Files (x86)\Steam\SteamApps\common\left 4 dead 2\left4dead2.exe
O87 - FAEL: "{8DEE9D8F-8633-427F-BA83-39A841723896}" | In - Private - P6 - TRUE | .(.4A Games - Metro 2033 Executable.) -- C:\Program Files (x86)\Steam\SteamApps\common\Metro 2033\metro2033.exe
O87 - FAEL: "{992C5131-B8FB-473C-AACC-20947312EC3E}" | In - Private - P17 - TRUE | .(.4A Games - Metro 2033 Executable.) -- C:\Program Files (x86)\Steam\SteamApps\common\Metro 2033\metro2033.exe
O87 - FAEL: "{262C3539-0BEE-4FE1-B89F-DCE24DF43163}" | In - Private - P6 - TRUE | .(.ESN Social Software AB - ESN Sonar Host Application.) -- C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\SonarHost.exe
O87 - FAEL: "{49D10E6A-F702-4E80-B2D4-64962155DA62}" | In - Private - P17 - TRUE | .(.ESN Social Software AB - ESN Sonar Host Application.) -- C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\SonarHost.exe
O87 - FAEL: "{71E91D7F-B6D2-4FE0-99E6-D23CF9CA9A7D}" | In - Private - P6 - TRUE | .(.CybelSoft - Service de détection matériel.) -- C:\Program Files\ma-config.com\x64\maconfservice.exe
O87 - FAEL: "{A79E612F-65AD-472D-A32F-0290D01E1565}" | In - Private - P17 - TRUE | .(.CybelSoft - Service de détection matériel.) -- C:\Program Files\ma-config.com\x64\maconfservice.exe
O87 - FAEL: "{93D009BC-F2FC-43DA-B465-8393CA277F2B}" | In - Private - P6 - TRUE | .(.Valve - Half-Life Launcher.) -- C:\Program Files (x86)\Steam\SteamApps\bodmer94\counter-strike\hl.exe
O87 - FAEL: "{D1D8C6C7-5285-4BC2-9D09-5675408A2263}" | In - Private - P17 - TRUE | .(.Valve - Half-Life Launcher.) -- C:\Program Files (x86)\Steam\SteamApps\bodmer94\counter-strike\hl.exe
O87 - FAEL: "{1DA8F03F-82D7-486D-A55E-08137E79B6EA}" | In - Private - P6 - TRUE | .(.Electronic Arts - Need for Speed™ Most Wanted.) -- C:\Program Files (x86)\Origin Games\Need for Speed(TM) Most Wanted\NFS13.exe
O87 - FAEL: "{9A847EE4-A742-4F72-AB97-C8D947FE3651}" | In - Private - P17 - TRUE | .(.Electronic Arts - Need for Speed™ Most Wanted.) -- C:\Program Files (x86)\Origin Games\Need for Speed(TM) Most Wanted\NFS13.exe
O87 - FAEL: "{3711EA2D-70E5-4875-A625-FF8D40DF2EFE}" | In - Private - P6 - TRUE | .(.Pas de propriétaire - Engine.) -- C:\Program Files (x86)\Steam\SteamApps\common\PAYDAY The Heist\payday_win32_release.exe
O87 - FAEL: "{C7C96621-AA47-4517-83C4-126165FA1702}" | In - Private - P17 - TRUE | .(.Pas de propriétaire - Engine.) -- C:\Program Files (x86)\Steam\SteamApps\common\PAYDAY The Heist\payday_win32_release.exe
O87 - FAEL: "{7C113B15-09F3-4771-A4B2-8E09E9798F86}" | In - Private - P6 - TRUE | .(...) -- C:\Program Files (x86)\Steam\SteamApps\common\XCom Interceptor\Interceptor.exe
O87 - FAEL: "{69E17FBF-8275-494A-8887-24C35E83F9FD}" | In - Private - P17 - TRUE | .(...) -- C:\Program Files (x86)\Steam\SteamApps\common\XCom Interceptor\Interceptor.exe
O87 - FAEL: "{A7E8DFD0-3977-4533-83DC-FD1C9708E29C}" | In - Private - P6 - TRUE | .(...) -- C:\Program Files (x86)\Steam\SteamApps\common\X-COM Terror from the Deep\runme.exe
O87 - FAEL: "{1F06E9B3-504E-4626-8C45-B771C24725AF}" | In - Private - P17 - TRUE | .(...) -- C:\Program Files (x86)\Steam\SteamApps\common\X-COM Terror from the Deep\runme.exe
O87 - FAEL: "{B4F0CB76-A36D-4044-89FA-22A17589476E}" | In - Private - P6 - TRUE | .(.Pas de propriétaire - XCOM fixer.) -- C:\Program Files (x86)\Steam\SteamApps\common\X-COM Terror from the Deep\TFD\Terror From the Deep_patched.exe
O87 - FAEL: "{636A1DF5-A407-417C-99CF-5AAF6A5F435B}" | In - Private - P17 - TRUE | .(.Pas de propriétaire - XCOM fixer.) -- C:\Program Files (x86)\Steam\SteamApps\common\X-COM Terror from the Deep\TFD\Terror From the Deep_patched.exe
O87 - FAEL: "{D9396282-223A-4C09-A24D-B0FABFAFC6B8}" | In - Private - P6 - TRUE | .(.DOSBox Team - DOSBox DOS Emulator.) -- C:\Program Files (x86)\Steam\SteamApps\common\XCom Apocalypse\dosbox.exe
O87 - FAEL: "{F1753488-10B9-46F0-885A-B06AC23E5AD3}" | In - Private - P17 - TRUE | .(.DOSBox Team - DOSBox DOS Emulator.) -- C:\Program Files (x86)\Steam\SteamApps\common\XCom Apocalypse\dosbox.exe
O87 - FAEL: "{96817868-2158-40B6-BF94-579F769E44BA}" | In - Private - P6 - TRUE | .(...) -- C:\Program Files (x86)\Steam\SteamApps\common\Bioshock\Builds\Release\Bioshock.exe
O87 - FAEL: "{3EC57164-266A-49B1-97C7-52FC40666168}" | In - Private - P17 - TRUE | .(...) -- C:\Program Files (x86)\Steam\SteamApps\common\Bioshock\Builds\Release\Bioshock.exe
O87 - FAEL: "{FCA6B9A3-E5F0-4692-8AAC-6ADF86B5F9AA}" | In - Private - P6 - TRUE | .(...) -- C:\Program Files (x86)\Steam\SteamApps\common\TrackMania Nations Forever\TmForever.exe
O87 - FAEL: "{D7B1015A-8770-49C4-A9B3-7C7B2AE65CC5}" | In - Private - P17 - TRUE | .(...) -- C:\Program Files (x86)\Steam\SteamApps\common\TrackMania Nations Forever\TmForever.exe
O87 - FAEL: "{64C61FBE-6D09-4E5E-9F54-027D826427DA}" | In - Private - P6 - TRUE | .(.Pas de propriétaire - Nadeo Launcher.) -- C:\Program Files (x86)\Steam\SteamApps\common\TrackMania Nations Forever\TmForeverLauncher.exe
O87 - FAEL: "{E817A335-1ADF-4BB0-B593-701BCA4F4F0C}" | In - Private - P17 - TRUE | .(.Pas de propriétaire - Nadeo Launcher.) -- C:\Program Files (x86)\Steam\SteamApps\common\TrackMania Nations Forever\TmForeverLauncher.exe
O87 - FAEL: "{43056F57-F9F0-4F3F-86ED-90A7196C968E}" | In - Private - P6 - TRUE | .(.Gearbox Software - Borderlands 2 launcher.) -- C:\Program Files (x86)\Steam\SteamApps\common\Borderlands 2\Binaries\Win32\Launcher.exe
O87 - FAEL: "{D70D02EB-43D2-4B53-9DA4-4FEEB8C3D94B}" | In - Private - P17 - TRUE | .(.Gearbox Software - Borderlands 2 launcher.) -- C:\Program Files (x86)\Steam\SteamApps\common\Borderlands 2\Binaries\Win32\Launcher.exe
O87 - FAEL: "{4FBE1DE1-155F-46A1-9BEA-8D161D73BF67}" | In - Private - P6 - TRUE | .(.Take-Two Interactive Software, Inc. - Spec Ops: The Line.) -- C:\Program Files (x86)\Steam\SteamApps\common\SpecOps_TheLine\Binaries\Win32\SpecOpsTheLine.exe
O87 - FAEL: "{4826152B-F61C-4BB3-8F98-DD4C09DF77F7}" | In - Private - P17 - TRUE | .(.Take-Two Interactive Software, Inc. - Spec Ops: The Line.) -- C:\Program Files (x86)\Steam\SteamApps\common\SpecOps_TheLine\Binaries\Win32\SpecOpsTheLine.exe
O87 - FAEL: "{1D6825A5-F143-4FAB-9917-58D71199D1B3}" | In - Private - P6 - TRUE | .(.Take-Two Interactive Software, Inc. - Borderlands.) -- C:\Program Files (x86)\Steam\SteamApps\common\borderlands\Binaries\Borderlands.exe
O87 - FAEL: "{B6053117-41BA-47F3-973B-988D2481B850}" | In - Private - P17 - TRUE | .(.Take-Two Interactive Software, Inc. - Borderlands.) -- C:\Program Files (x86)\Steam\SteamApps\common\borderlands\Binaries\Borderlands.exe
O87 - FAEL: "{B4ACCA1D-1426-4FDA-A836-E0145E78E928}" | In - Private - P6 - TRUE | .(.Crytek GmbH - Pas de description.) -- C:\Program Files (x86)\Steam\SteamApps\common\Crysis 2 Game of the Year\bin32\Crysis2Launcher.exe
O87 - FAEL: "{8E899C7E-14AF-4617-8C43-85D8106B68D0}" | In - Private - P17 - TRUE | .(.Crytek GmbH - Pas de description.) -- C:\Program Files (x86)\Steam\SteamApps\common\Crysis 2 Game of the Year\bin32\Crysis2Launcher.exe
O87 - FAEL: "{2D2DFFDE-6E1E-47D9-BD20-E56F4F55C5DC}" | In - Private - P6 - TRUE | .(.Crytek GmbH - Pas de description.) -- C:\Program Files (x86)\Steam\SteamApps\common\Crysis\Bin32\Crysis.exe
O87 - FAEL: "{D374D43C-26DC-4393-A4D4-E8A58F383BC9}" | In - Private - P17 - TRUE | .(.Crytek GmbH - Pas de description.) -- C:\Program Files (x86)\Steam\SteamApps\common\Crysis\Bin32\Crysis.exe
O87 - FAEL: "{D15790F3-F236-47C2-BFE1-6FC58384B04E}" | In - Private - P6 - TRUE | .(.Crytek GmbH - Pas de description.) -- C:\Program Files (x86)\Steam\SteamApps\common\Crysis Warhead\Bin32\Crysis.exe
O87 - FAEL: "{832A3EE3-1E54-4A72-9A6C-A3C839A68626}" | In - Private - P17 - TRUE | .(.Crytek GmbH - Pas de description.) -- C:\Program Files (x86)\Steam\SteamApps\common\Crysis Warhead\Bin32\Crysis.exe
~ Scan Firewall in 00mn 00s



---\\ Scan Additionnel (O88)
Database Version : 9699 - (01/01/2013)
Clés trouvées (Keys found) : 8
Valeurs trouvées (Values found) : 2
Dossiers trouvés  (Folders found) : 5
Fichiers trouvés  (Files found) : 0

[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{171DEBEB-C3D4-40B7-AC73-056A5EBA4A7E}]   =>Toolbar.Ask
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{898EA8C8-E7FF-479B-8935-AEC46303B9E5}]   =>Toolbar.Agent
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{898EA8C8-E7FF-479B-8935-AEC46303B9E5}]   =>Toolbar.Agent
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]   =>Toolbar.Agent
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]   =>Toolbar.Agent
[HKCU\Software\AppDataLow\Software\ConduitSearchScopes]   =>Toolbar.Conduit
[HKLM\Software\Classes\Toolbar.CT2500339]   =>Toolbar.Conduit
[HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser]:{6EC85FCF-87AD-41D7-AE1F-F116F8AD4848}   =>Toolbar.Agent
[HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks]:{6EC85FCF-87AD-41D7-AE1F-F116F8AD4848}   =>Toolbar.Agent
C:\Program Files (x86)\Conduit   =>Toolbar.Conduit
C:\Users\Marwan\AppData\Local\Conduit   =>Toolbar.Conduit
C:\Users\Marwan\AppData\LocalLow\Conduit   =>Toolbar.Conduit
C:\Users\Marwan\AppData\LocalLow\Toolbar4   =>Toolbar.Conduit
~ Scan Additionnel in 00mn 05s



---\\ Recherche détournement de DNS routeur (O89) (None)

---\\ Product Upgrade Codes (O90)
O90 - PUC: "0212CE3624715264AA746C8AEA9C6CC4" . (.Apple Application Support.) -- C:\Windows\Installer\{63EC2120-1742-4625-AA47-C6A8AEC9C64C}\WinInstall.ico
O90 - PUC: "03E9C206838F2DA4D82C62C591D2A4CA" . (.Ma-Config.com (64 bits).) -- C:\Windows\Installer\{602C9E30-F838-4AD2-8DC2-265C192D4AAC}\maconfico
O90 - PUC: "076CFAAAB965F2A4284B2449E5D03EFE" . (.Windows Live Writer.) -- C:\Windows\Installer\{AAAFC670-569B-4A2F-82B4-42945E0DE3EF}\ApplicationIcon.ico
O90 - PUC: "0ED9D238CFA898648991D4BBEDDBE3F4" . (.Microsoft Games for Windows - LIVE Redistributable.) -- c:\Windows\Installer\{832D9DE0-8AFC-4689-9819-4DBBDEBD3E4F}\GameForWindowsLiveRedist.exe
O90 - PUC: "0F4D8AB5F51CEF75B2C64CFA128433EC" . (.AMD Accelerated Video Transcoding.) -- C:\Windows\Installer\{5BA8D4F0-C15F-57FE-2B6C-C4AF214833CE}\ARPPRODUCTICON.exe
O90 - PUC: "11F12B5E3396B0E42AC597363E0CD711" . (.Windows Live Messenger.) -- C:\Windows\Installer\{E5B21F11-6933-4E0B-A25C-7963E3C07D11}\MsblIco.Exe
O90 - PUC: "1459101E2A01F4642AE34A2FD36A1506" . (.Mumble 1.2.3.) -- C:\Windows\Installer\{E1019541-10A2-464F-A23E-A4F23DA65160}\mumble.ico
O90 - PUC: "1C4235E6CF4867F4A9A36CE5708FE06E" . (.Complément Messenger.) -- C:\Windows\Installer\{6E5324C1-84FC-4F76-9A3A-C65E07F80EE6}\CompanionIcon
O90 - PUC: "1D034B0FAA6BD374B960AAD30DF10D8B" . (.Microsoft SQL Server 2005 Compact Edition [ENU].) -- C:\Windows\Installer\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}\ProductIcon
O90 - PUC: "2B0163E6D0340BE4183EB2758E9BEDD8" . (.Bonjour.) -- C:\Windows\Installer\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}\Bonjour.ico
O90 - PUC: "32FA0F2EF2EF2224A934556EC34CE11F" . (.Catalyst Control Center - Branding.) -- C:\Windows\Installer\{E2F0AF23-FE2F-4222-9A43-55E63CC41EF1}\ARPPRODUCTICON.exe
O90 - PUC: "3DCC6D7DDB9D29AE82E8FEBCED39F95F" . (.Catalyst Control Center.) -- C:\Windows\Installer\{D7D6CCD3-D9BD-EA92-288E-EFCBDE939FF5}\ARPPRODUCTICON.exe
O90 - PUC: "46B5A9879DD95AB419A50FCFA0B1B7EF" . (.Apple Software Update.) -- C:\Windows\Installer\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}\Installer.ico
O90 - PUC: "50A3E501A87241F3F60353DD0960865D" . (.AMD AVIVO64 Codecs.) -- C:\Windows\Installer\{105E3A05-278A-3F14-6F30-35DD900668D5}\ARPPRODUCTICON.exe
O90 - PUC: "6B2CEC0727EB1B9E6D8B1C3AAC71D0F1" . (.Catalyst Control Center InstallProxy.) -- C:\Windows\Installer\{70CEC2B6-BE72-E9B1-D6B8-C1A3CA170D1F}\ARPPRODUCTICON.exe
O90 - PUC: "70D556E027B264834108B77A8D0E2EF4" . (.AMD Drag and Drop Transcoding.) -- C:\Windows\Installer\{0E655D07-2B72-3846-1480-7BA7D8E0E24F}\ARPPRODUCTICON.exe
O90 - PUC: "7692FC6BE18C0C0489510C7547EF1F02" . (.Skype Click to Call.) -- C:\Windows\Installer\{B6CF2967-C81E-40C0-9815-C05774FEF120}\IconUninstallIco
O90 - PUC: "76EA78D0BE4101C4885AADC61318BE81" . (.Windows Live Family Safety.) -- C:\Windows\Installer\{0D87AE67-14EB-4C10-88A5-DA6C3181EB18}\fssicon.ico
O90 - PUC: "79175E77CE03F4441B8B9AA92A4A7549" . (.SteelSeries Xai Laser Mouse.) -- C:\Windows\Installer\{77E57197-30EC-444F-B1B8-A99AA2A45794}\ARPPRODUCTICON.exe
O90 - PUC: "7D8F6BA740872664EBC8A1CFDC06D2F9" . (.Centre Souris et Claviers Microsoft.) -- c:\Windows\Installer\{7AB6F8D7-7804-4662-BE8C-1AFCCD602D9F}\DeviceCenter.ico
O90 - PUC: "7DCAF9455F5A8AE6A791F8E7C82E287A" . (.Catalyst Control Center Localization All.) -- C:\Windows\Installer\{549FACD7-A5F5-6EA8-7A19-8F7E8CE282A7}\ARPPRODUCTICON.exe
O90 - PUC: "93B0BF4E199C7EE459DDA1A187753DD3" . (.Asmedia ASM104x USB 3.0 Host Controller Driver.) -- C:\Windows\Installer\{E4FB0B39-C991-4EE7-95DD-1A1A7857D33D}\ARPPRODUCTICON.exe
O90 - PUC: "9A3AACEBA5CCC516F55F5F62E151C30F" . (.ccc-utility64.) -- C:\Windows\Installer\{BECAA3A9-CC5A-615C-5FF5-F5261E153CF0}\ARPPRODUCTICON.exe
O90 - PUC: "B14275EBCF8D5A0CC16F82ADF71BD886" . (.HydraVision.) -- C:\Windows\Installer\{BE57241B-D8FC-C0A5-1CF6-28DA7FB18D68}\ARPPRODUCTICON.exe
O90 - PUC: "B80A634FBB362A27710CD6E81528AC94" . (.AMD Catalyst Install Manager.) -- C:\Windows\Installer\{F436A08B-63BB-72A2-17C0-6D8E5182CA49}\ARPPRODUCTICON.exe
O90 - PUC: "BF84F956A8A01A94F32D6C0F961C8039" . (.Catalyst Control Center Graphics Previews Common.) -- C:\Windows\Installer\{659F48FB-0A8A-49A1-3FD2-C6F069C10893}\ARPPRODUCTICON.exe
O90 - PUC: "C7030BC4E565144468EBD02F4EBF28C8" . (.Microsoft Games for Windows Marketplace.) -- c:\Windows\Installer\{4CB0307C-565E-4441-86BE-0DF2E4FB828C}\GameForWindowsLiveDash.exe
O90 - PUC: "C73F46094B662FAB8E7ADE5E7EB21BD6" . (.AMD Media Foundation Decoders.) -- C:\Windows\Installer\{9064F37C-66B4-BAF2-E8A7-EDE5E72BB16D}\ARPPRODUCTICON.exe
O90 - PUC: "CF4F71AEFBDF8FC45A92D28913230D35" . (.Skype™ 6.0.) -- C:\Windows\Installer\{EA17F4FC-FDBF-4CF8-A529-2D983132D053}\SkypeIcon.exe
O90 - PUC: "D276F30548C6A844F8F8B43CA58C4314" . (.AMD APP SDK Runtime.) -- C:\Windows\Installer\{503F672D-6C84-448A-8F8F-4BC35AC83441}\ARPPRODUCTICON.exe
O90 - PUC: "D7314F9862C648A4DB8BE2A5B47BE100" . (.Microsoft Silverlight.) -- C:\Windows\Installer\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}\ARPIcon
O90 - PUC: "D8EF64479F1C24D4AAEAD5CB5E68506A" . (.Apple Mobile Device Support.) -- C:\Windows\Installer\{7446FE8D-C1F9-4D42-AAAE-5DBCE58605A6}\Installer.ico
O90 - PUC: "EA2B394116202D741BAA4FAD0D6F4CB8" . (.iTunes.) -- C:\Windows\Installer\{1493B2AE-0261-47D2-B1AA-F4DAD0F6C48B}\Installer.ico
O90 - PUC: "F60C1AD7319C7C64A8F0ADC2AB71AED1" . (.OpenOffice.org 3.4.1.) -- C:\Windows\Installer\{7DA1C06F-C913-46C7-8A0F-DA2CBA17EA1D}\soffice.ico
~ Scan Files in 00mn 00s



---\\ Etat général des services non Microsoft (EGS) (SR=Running, SS=Stopped)
SR - | Demand 20/12/2012 250808 |  (AdobeFlashPlayerUpdateSvc) . (.Adobe Systems Incorporated.) - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
SR - | Auto 02/12/2012 240640 |  (AMD External Events Utility) . (.AMD.) - C:\Windows\System32\atiesrxx.exe
SR - | Auto 11/08/2012 55184 |  (Apple Mobile Device) . (.Apple Inc..) - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
SR - | Auto 30/08/2011 462184 |  (Bonjour Service) . (.Apple Inc..) - C:\Program Files\Bonjour\mDNSResponder.exe
SR - | Auto 09/10/2012 116648 |  (gupdate) . (.Google Inc..) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
SR - | Demand 09/10/2012 116648 |  (gupdatem) . (.Google Inc..) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
SR - | Demand 20/10/2012 194032 |  (gusvc) . (.Google.) - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe
SR - | Auto 17/10/2011 13592 |  (IAStorDataMgrSvc) . (.Intel Corporation.) - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
SR - | Demand 09/09/2012 936848 |  (iPod Service) . (.Apple Inc..) - C:\Program Files\iPod\bin\iPodService.exe
SR - | Demand 28/10/2012 427976 |  (maconfservice) . (.CybelSoft.) - C:\Program Files\ma-config.com\x64\maconfservice.exe
SR - | Auto 14/12/2012 398184 |  (MBAMScheduler) . (.Malwarebytes Corporation.) - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
SR - | Auto 14/12/2012 682344 |  (MBAMService) . (.Malwarebytes Corporation.) - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
SR - | Auto  0 |  (PnkBstrA) . (...) - C:\Windows\system32\PnkBstrA.exe
SR - | Auto  0 |  (PnkBstrB) . (...) - C:\Windows\system32\PnkBstrB.exe
SR - | Auto 11/11/2010 374112 |  (RalinkRegistryWriter) . (.Ralink Technology, Corp..) - C:\Program Files (x86)\TRENDnet\Common\RaRegistry.exe
SR - | Auto 11/11/2010 451936 |  (RalinkRegistryWriter64) . (.Ralink Technology, Corp..) - C:\Program Files (x86)\TRENDnet\Common\RaRegistry64.exe
SR - | Demand  619872 |  (RaMediaServer) . (...) - C:\Program Files (x86)\TRENDnet\Common\RaMediaServer.exe
SR - | Auto 13/11/2012 1103392 |  (SDScannerService) . (.Safer-Networking Ltd..) - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe
SR - | Auto 13/11/2012 1369624 |  (SDUpdateService) . (.Safer-Networking Ltd..) - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe
SR - | Auto 13/11/2012 168384 |  (SDWSCService) . (.Safer-Networking Ltd..) - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe
SR - | Auto 02/10/2012 3064000 |  (Skype C2C Service) . (.Skype Technologies S.A..) - C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe
SR - | Auto 09/11/2012 160944 |  (SkypeUpdate) . (.Skype Technologies.) - C:\Program Files (x86)\Skype\Updater\Updater.exe
SR - | Demand 20/12/2012 541760 |  (Steam Client Service) . (.Valve Corporation.) - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
SR - | Demand 14/07/2009 27136 | C:\Program Files (x86)\Windows Defender\mpsvc.dll (WinDefend) . (.Microsoft Corporation.) - C:\Windows\System32\svchost.exe
SR - | Auto  0 |  (WMPNetworkSvc) . (...) - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe
SR - | Auto 14/07/2009 27136 | C:\Windows\System32\wuaueng.dll (wuauserv) . (.Microsoft Corporation.) - C:\Windows\System32\svchost.exe
~ Scan Services in 00mn 00s



---\\ Recherche Master Boot Record Infection (MBR)(O80) (None)

---\\ Recherche Master Boot Record Infection (MBRCheck)(O80)
Written by ad13, http://ad13.geekstog
Run by Marwan at 04/01/2013 23:49:51

********* Dump file Name *********
C:\PhysicalDisk0_MBR.bin
~ Scan MBR in 00mn 04s



End of the scan (2167 lines in 01mn 38s)(0)