Rapport de ZHPDiag v1.31.13 par Nicolas Coolman, Update du 31/07/2012
Run by Hamza at 24/08/2012 13:11:23
Web site :  http://www.premiumorange.com/zeb-help-process/zhpdiag.html
Web site :  http://nicolascoolman.skyrock.com/
State : Version à jour.


---\\ Web Browser
MSIE: Internet Explorer v9.0.8112.16421
MFIE: Mozilla Firefox 9.0.1 v9.0.1
GCIE: Google Chrome v21.0.1180.83 (Defaut)

---\\ Windows Product Information
~ Langage: Français
Windows 7 Home Premium Edition, 64-bit Service Pack 1 (Build 7601)
Windows Server License Manager Script : OK
Software Protection Service (Protection logicielle) : KO
Windows Automatic Updates : OK
Windows Activation Technologies : OK

---\\ System Information
~ Processor: Intel64 Family 6 Model 23 Stepping 10, GenuineIntel
~ Operating System: 64 Bits
Boot mode: Sans échec avec prise en charge du réseau (Fail-safe with network boot)
Total RAM: 4095 MB (76% free)
System Restore: Activé (Enable)
System drive C: has 17 GB (30%) free of 56 GB

---\\ Logged in mode
~ Computer Name: MOH-PC
~ User Name: Hamza
~ All Users Names: zelerr, MoH, HomeGroupUser$, Hamza, Administrateur, 
~ Unselected Option: None
Logged in as Administrator

---\\ Environnement Variables
~ System Unit : C:\
~ %AppData% : C:\Users\Hamza\AppData\Roaming\
~ %Desktop% : C:\Users\Hamza\Desktop\
~ %Favorites% : C:\Users\Hamza\Favorites\
~ %LocalAppData% : C:\Users\Hamza\AppData\Local\
~ %StartMenu% : C:\Users\Hamza\AppData\Roaming\Microsoft\Windows\Start Menu\
~ %Windir% : C:\Windows\
~ %System% : C:\Windows\System32\

---\\ DOS/Devices
C:\ Hard drive, Flash drive, Thumb drive (Free 17 Go of 56 Go)
D:\ Hard drive, Flash drive, Thumb drive (Free 521 Go of 540 Go)
E:\ CD-ROM drive (Not Inserted)
G:\ Floppy drive, Flash card reader, USB Key (Not Inserted)
H:\ Floppy drive, Flash card reader, USB Key (Not Inserted)
I:\ Floppy drive, Flash card reader, USB Key (Not Inserted)
J:\ Floppy drive, Flash card reader, USB Key (Not Inserted)



---\\ Security Center & Tools Informations
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoActiveDesktopChanges: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] EnableLUA: Modified
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: OK
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install] LastSuccessTime :  OK
~ Scan Security Center in 00mn 00s



---\\ Recherche particulière de fichiers génériques
[MD5.332FEAB1435662FC6C672E25BEB37BE3] - (.Microsoft Corporation - Explorateur Windows.) (.25/02/2011 - 07:19:30.) -- C:\Windows\Explorer.exe [2871808]
[MD5.94355C28C1970635A31B3FE52EB7CEBA] - (.Microsoft Corporation - Application de démarrage de Windows.) (.14/07/2009 - 02:39:52.) -- C:\Windows\System32\Wininit.exe [129024]
[MD5.8EA68FD3780DDDD5072F8CB830B3CB3D] - (.Microsoft Corporation - Extensions Internet pour Win32.) (.29/06/2012 - 04:49:11.) -- C:\Windows\System32\wininet.dll [1392128]
[MD5.1151B1BAA6F350B1DB6598E0FEA7C457] - (.Microsoft Corporation - Application d’ouverture de session Windows.) (.20/11/2010 - 14:25:30.) -- C:\Windows\System32\Winlogon.exe [390656]
[MD5.067FA52BFB59A56110A12312EF9AF243] - (.Microsoft Corporation - Bibliothèque de licences.) (.20/11/2010 - 14:27:26.) -- C:\Windows\System32\sppcomapi.dll [232448]
[MD5.1C7857B62DE5994A75B054A9FD4C3825] - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) (.28/12/2011 - 04:59:24.) -- C:\Windows\system32\Drivers\AFD.sys [498688]
[MD5.02062C0B390B7729EDC9E69C680A6F3C] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) (.14/07/2009 - 02:52:21.) -- C:\Windows\system32\Drivers\atapi.sys [24128]
[MD5.B8BD2BB284668C84865658C77574381A] - (.Microsoft Corporation - CD-ROM File System Driver.) (.14/07/2009 - 00:19:47.) -- C:\Windows\system32\Drivers\Cdfs.sys [92160]
[MD5.F036CE71586E93D94DAB220D7BDF4416] - (.Microsoft Corporation - SCSI CD-ROM Driver.) (.20/11/2010 - 10:19:21.) -- C:\Windows\system32\Drivers\Cdrom.sys [147456]
[MD5.9BB2EF44EAA163B29C4A4587887A0FE4] - (.Microsoft Corporation - DFS Namespace Client Driver.) (.20/11/2010 - 10:26:32.) -- C:\Windows\system32\Drivers\DfsC.sys [102400]
[MD5.97BFED39B6B79EB12CDDBFEED51F56BB] - (.Microsoft Corporation - High Definition Audio Bus Driver.) (.20/11/2010 - 11:43:43.) -- C:\Windows\system32\Drivers\HDAudBus.sys [122368]
[MD5.FA55C73D4AFFA7EE23AC4BE53B4592D3] - (.Microsoft Corporation - Pilote de port i8042.) (.14/07/2009 - 00:19:57.) -- C:\Windows\system32\Drivers\i8042prt.sys [105472]
[MD5.AF9B39A7E7B6CAA203B3862582E9F2D0] - (.Microsoft Corporation - IP Network Address Translator.) (.14/07/2009 - 01:10:03.) -- C:\Windows\system32\Drivers\IpNat.sys [116224]
[MD5.A5D9106A73DC88564C825D317CAC68AC] - (.Microsoft Corporation - Windows NT SMB Minirdr.) (.27/04/2011 - 03:40:40.) -- C:\Windows\system32\Drivers\MRxSmb.sys [158208]
[MD5.09594D1089C523423B32A4229263F068] - (.Microsoft Corporation - MBT Transport driver.) (.20/11/2010 - 10:23:20.) -- C:\Windows\system32\Drivers\netBT.sys [261632]
[MD5.A2F74975097F52A00745F9637451FDD8] - (.Microsoft Corporation - Pilote du système de fichiers NT.) (.11/03/2011 - 07:41:34.) -- C:\Windows\system32\Drivers\ntfs.sys [1659776]
[MD5.0086431C29C35BE1DBC43F52CC273887] - (.Microsoft Corporation - Pilote de port parallèle.) (.14/07/2009 - 01:00:41.) -- C:\Windows\system32\Drivers\Parport.sys [97280]
[MD5.471815800AE33E6F1C32FB1B97C490CA] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) (.20/11/2010 - 11:52:35.) -- C:\Windows\system32\Drivers\Rasl2tp.sys [129536]
[MD5.548260A7B8654E024DC30BF8A7C5BAA4] - (.Microsoft Corporation - SMB Transport driver.) (.14/07/2009 - 01:09:09.) -- C:\Windows\system32\Drivers\smb.sys [93184]
[MD5.DDAD5A7AB24D8B65F8D724F5C20FD806] - (.Microsoft Corporation - TDI Translation Driver.) (.20/11/2010 - 10:21:56.) -- C:\Windows\system32\Drivers\tdx.sys [119296]
[MD5.0D08D2F3B3FF84E433346669B5E0F639] - (.Microsoft Corporation - Pilote de cliché instantané du volume.) (.20/11/2010 - 14:34:02.) -- C:\Windows\system32\Drivers\volsnap.sys [295808]
~ Scan Generic Processes in 00mn 00s



---\\ Etat des fichiers cachés (Caché/Total)
~ Mes images (My Pictures) : 1/8
~ Mes Favoris (My Favorites) : 1/12
~ Mes Documents (My Documents) : 1/472
~ Mon Bureau (My Desktop) : 1/159
~ Menu demarrer (Programs) : 1/27
~ Scan Hidden Files in 00mn 00s



---\\ Processus lancés
[MD5.FCB13D9E3D55075C8FACA9CA3C55B263] - (...) -- C:\Program Files (x86)\ZHPDiag\ZHPDiag.exe   [3763200] [PID.2600]
~ Scan Processes Running in 00mn 00s



---\\ Google Chrome, Démarrage,Recherche,Extensions (G0,G1,G2)
C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Preferences
G0 - GCSP: Preference [User Data\Default][HomePage] http://search.babylon.com
G0 - GCSP: Preference [User Data\Default] http://search.babylon.com
G1 - GCS: Preference [User Data\Default] http://search.babylon.com
~ Scan Google Browser in 00mn 00s



---\\ Mozilla Firefox, Plugins,Demarrage,Recherche,Extensions  (P2,M0,M1,M2,M3)
C:\Users\Hamza\AppData\Roaming\Mozilla\Firefox\Profiles\72o90cus.default\prefs.js
C:\Users\Hamza\AppData\Roaming\Mozilla\Firefox\Profiles\72o90cus.default\user.js
M3 - MFPP: Plugins - [Hamza] -- C:\Users\Hamza\AppData\Roaming\Mozilla\Firefox\Profiles\72o90cus.default\searchplugins\SearchTheWeb.xml
M3 - MFPP: Plugins - [Hamza] -- C:\Users\Hamza\AppData\Roaming\Mozilla\Firefox\Profiles\72o90cus.default\searchplugins\sweetim.xml
M3 - MFPP: Plugins - [Hamza] -- C:\Program Files (x86)\Mozilla FireFox\searchplugins\amazon-france.xml
M3 - MFPP: Plugins - [Hamza] -- C:\Program Files (x86)\Mozilla FireFox\searchplugins\babylon.xml
M3 - MFPP: Plugins - [Hamza] -- C:\Program Files (x86)\Mozilla FireFox\searchplugins\bing.xml
M3 - MFPP: Plugins - [Hamza] -- C:\Program Files (x86)\Mozilla FireFox\searchplugins\cnrtl-tlfi-fr.xml
M3 - MFPP: Plugins - [Hamza] -- C:\Program Files (x86)\Mozilla FireFox\searchplugins\eBay-france.xml
M3 - MFPP: Plugins - [Hamza] -- C:\Program Files (x86)\Mozilla FireFox\searchplugins\google.xml
M3 - MFPP: Plugins - [Hamza] -- C:\Program Files (x86)\Mozilla FireFox\searchplugins\SearchTheWeb.xml
M3 - MFPP: Plugins - [Hamza] -- C:\Program Files (x86)\Mozilla FireFox\searchplugins\wikipedia-fr.xml
M3 - MFPP: Plugins - [Hamza] -- C:\Program Files (x86)\Mozilla FireFox\searchplugins\yahoo-france.xml
M0 - MFSP: prefs.js [Hamza - 72o90cus.default] http://home.sweetim.com
M2 - MFEP: prefs.js [Hamza - 72o90cus.default\{8A9386B4-E958-4c4c-ADF4-8F26DB3E4829}] [] PriceGong v2.6.6 (.PriceGong Software Ltd..)
P2 - FPN: [HKLM] [@adobe.com/FlashPlayer] - (...) -- C:\Windows\system32\Macromed\Flash\NPSWF64_11_3_300_271.dll
P2 - FPN: [HKLM] [@ma-config.com/HardwareDetection] - (.Cybelsoft - Plugin NPAPI Ma-Config.com # win64 # 6.0.1.1.) -- C:\Program Files\ma-config.com\x64\nphardwaredetection.dll
~ Scan Firefox Browser in 00mn 00s



---\\ Internet Explorer, Démarrage,Recherche,URLSearchHook, Phishing (R0,R1,R3,R4)
R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://search.conduit.com
R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com
R0 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://home.sweetim.com
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk
R3 - URLSearchHook: (no name) [64Bits] - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (.Cybelsoft - Plugin NPAPI Ma-Config.com # win64 # 6.0.1.1.) (No version) -- (.not file.)
R3 - URLSearchHook: (no name) [64Bits] - {84FF7BD6-B47F-46F8-9130-01B2696B36CB} . (.Cybelsoft - Plugin NPAPI Ma-Config.com # win64 # 6.0.1.1.) (No version) -- (.not file.)
R3 - URLSearchHook: IMVU Inc Toolbar [64Bits] - {90b49673-5506-483e-b92b-ca0265bd9ca8} . (.Conduit Ltd. - Conduit Toolbar.) (6.4.0.0) -- C:\Program Files (x86)\IMVU_Inc\prxtbIMV0.dll
R4 - HKLM\SOFTWARE\Microsoft\Internet Explorer\PhishingFilter,EnabledV8 = 1
R4 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\PhishingFilter,EnabledV8 = 1
~ Scan IE Browser in 00mn 00s



---\\ Internet Explorer, Proxy Management (R5)
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll
~ Scan Proxy management in 00mn 00s



---\\ Modification d'une valeur Ini (Changed inifile value, mapped to Registry) (F2)
F2 - REG:system.ini: USERINIT=C:\Windows\system32\userinit.exe,
F2 - REG:system.ini: Shell=C:\Windows\explorer.exe
F2 - REG:system.ini: VMApplet=C:\Windows\System32\SystemPropertiesPerformance.exe
~ Scan Keys in 00mn 00s



---\\ Redirection du fichier Hosts (O1)
~ Le fichier hosts est sain (The hosts file is clean).
~ Scan Hosts File in 00mn 00s
~ Nombre de lignes (Lines number): 21



---\\ Browser Helper Objects de navigateur (O2)
O2 - BHO: CrossriderApp0002258 [64Bits] - {11111111-1111-1111-1111-110011221158} . (...) -- C:\Program Files (x86)\I Want This\I Want This.dll (.not file.)
O2 - BHO: PriceGong [64Bits] - {1631550F-191D-4826-B069-D9439253D926} . (.PriceGong - PriceGong Comparative Shopping Tool.) -- C:\Program Files (x86)\PriceGong\2.6.6\PriceGongIE.dll
O2 - BHO: AcroIEHelperStub [64Bits] - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} . (.Adobe Systems Incorporated - Adobe PDF Helper for Internet Explorer.) -- C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Babylon toolbar helper [64Bits] - {2EECD738-5844-4a99-B4B6-146BF802613B} . (.Babylon BHO - Pas de description.) -- C:\Program Files (x86)\BabylonToolbar\BabylonToolbar\1.6.4.6\bh\BabylonToolbar.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer [64Bits] - {3049C3E9-B461-4BC5-8870-4C09146192CA} . (.RealPlayer - RealPlayer Download and Record Plugin.) -- C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugi
O2 - BHO: TBSB01620 [64Bits] - {58124A0B-DC32-4180-9BFF-E0E21AE34026} . (.Pas de propriétaire - IE Toolbar Engine.) -- C:\Program Files (x86)\IMinent Toolbar\tbcore3.dll
O2 - BHO: Java(tm) Plug-In SSV Helper [64Bits] - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} . (.Oracle Corporation - Java(TM) Platform SE binary.) -- C:\Program Files (x86)\Java\jre7\bin\ssv.dll
O2 - BHO: (no name) [64Bits] - {84FF7BD6-B47F-46F8-9130-01B2696B36CB} Clé orpheline
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live ID [64Bits] - {9030D464-4C02-4ABF-8ECC-5164760863C6} . (.Microsoft Corp. - Microsoft® Windows Live ID Login Helper.) -- C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\
O2 - BHO: IMVU Inc [64Bits] - {90b49673-5506-483e-b92b-ca0265bd9ca8} . (.Conduit Ltd. - Conduit Toolbar.) -- C:\Program Files (x86)\IMVU_Inc\prxtbIMV0.dll
O2 - BHO: Windows Live Messenger Companion Helper [64Bits] - {9FDDE16B-836F-4806-AB1F-1455CBEFF289} . (.Microsoft Corporation - Windows Live Messenger Companion Core.) -- C:\Program Files (x86)\Windows Live\Companion\companioncore.dll
O2 - BHO: IMinent WebBooster [64Bits] - {A09AB6EB-31B5-454C-97EC-9B294D92EE2A} . (.Iminent - Iminent BHO.) -- C:\Program Files (x86)\Iminent\Iminent.WebBooster.InternetExplorer.dll
O2 - BHO: SkypeIEPluginBHO [64Bits] - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} . (.Skype Technologies S.A. - Skype Click to Call for Internet Explorer.) -- C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O2 - BHO: LitmusBHO [64Bits] - {C6867EB7-8350-4856-877F-93CF8AE3DC9C} . (.F-Secure Corporation - Litmus.) -- C:\Program Files (x86)\SFR\Pack Sécurité\NRS\iescript\baselitmus.dll
O2 - BHO: Bing Bar Helper [64Bits] - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} . (...) -- "C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll" (.not file.)
O2 - BHO: Ask Toolbar BHO [64Bits] - {D4027C7F-154A-4066-A1AD-4243D8127440} . (.Ask - Avira SearchFree Toolbar.) -- C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper [64Bits] - {DBC80044-A445-435b-BC74-9C25C1C588A9} . (.Oracle Corporation - Java(TM) Platform SE binary.) -- C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
O2 - BHO: SWEETIE [64Bits] - {EEE6C35C-6118-11DC-9C72-001320C79847} . (.SweetIM Technologies Ltd. - SweetPacks Toolbar module for Internet Expl.) -- C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll
~ Scan BHO in 00mn 00s



---\\ Applications démarrées par registre & par dossier (O4)
O4 - HKLM\..\Run: [Acronis Scheduler2 Service] . (.Acronis - Acronis Scheduler Helper.) -- C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe 
O4 - HKLM\..\Run: [Monitor] . (.PixArt Imaging Incorporation - Registry Monitor.) -- C:\Windows\PixArt\PAC207\Monitor.exe 
O4 - HKCU\..\Run: [Skype] . (.Skype Technologies S.A. - Skype.) -- C:\Program Files (x86)\Skype\Phone\Skype.exe 
O4 - HKCU\..\Run: [msnmsgr] ~"C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe (.not file.) 
O4 - HKCU\..\Run: [Bubble Dock] C:\Users\Hamza\AppData\Roaming\Nosibay\Bubble Dock\LBubble Dock.exe (.not file.) 
O4 - HKLM\..\Wow6432Node\Run: [StartCCC] . (.Advanced Micro Devices, Inc. - Catalyst® Control Center Launcher.) -- C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe 
O4 - HKLM\..\Wow6432Node\Run: [TrueImageMonitor.exe] . (.Acronis - Acronis True Image Monitor.) -- C:\Program Files (x86)\Acronis\TrueImageHome\TrueImageMonitor.exe 
O4 - HKLM\..\Wow6432Node\Run: [AcronisTimounterMonitor] . (.Acronis - Monitor for Acronis True Image Backup Archi.) -- C:\Program Files (x86)\Acronis\TrueImageHome\TimounterMonitor.exe 
O4 - HKLM\..\Wow6432Node\Run: [TkBellExe] . (.RealNetworks, Inc. - RealNetworks Scheduler.) -- C:\Program Files (x86)\Real\RealPlayer\update\realsched.exe 
O4 - HKLM\..\Wow6432Node\Run: [F-Secure Manager] . (.F-Secure Corporation - F-Secure Settings and Statistics.) -- C:\Program Files (x86)\SFR\Pack Sécurité\Common\FSM32.exe 
O4 - HKLM\..\Wow6432Node\Run: [F-Secure TNB] . (.F-Secure Corporation - TNBUtil.) -- C:\Program Files (x86)\SFR\Pack Sécurité\FSGUI\TNBUtil.exe 
O4 - HKLM\..\Wow6432Node\Run: [Iminent] . (.Iminent - Iminent.) -- C:\Program Files (x86)\Iminent\Iminent.exe 
O4 - HKLM\..\Wow6432Node\Run: [IminentMessenger] . (.Iminent - Iminent.) -- C:\Program Files (x86)\Iminent\Iminent.Messengers.exe 
O4 - HKLM\..\Wow6432Node\Run: [SweetIM] . (.SweetIM Technologies Ltd. - SweetIM Instant Messenger Enhancer.) -- C:\Program Files (x86)\SweetIM\Messenger\SweetIM.exe 
O4 - HKLM\..\Wow6432Node\Run: [Sweetpacks Communicator] . (.SweetIM Technologies Ltd. - Update Manager for SweetPacks.) -- C:\Program Files (x86)\SweetIM\Communicator\SweetPacksUpdateManager.exe 
O4 - HKLM\..\Wow6432Node\Run: [SunJavaUpdateSched] . (.Sun Microsystems, Inc. - Java(TM) Update Scheduler.) -- C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe 
O4 - HKLM\..\Wow6432Node\Run: [nProtect GameGuard Personal 3.0] . (.INCA Internet Co., Ltd. - nProtect Anti-Virus/Spyware Main Applicatio.) -- C:\Program Files (x86)\INCAInternet\nProtect GameGuard Personal 3.0\nspmain.exe 
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files (x86)\Windows Sidebar\Sidebar.exe 
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files (x86)\Windows Sidebar\Sidebar.exe 
O4 - HKUS\S-1-5-21-2779052862-2464013104-2090727237-1004\..\Run: [Skype] . (.Skype Technologies S.A. - Skype.) -- C:\Program Files (x86)\Skype\Phone\Skype.exe 
O4 - HKUS\S-1-5-21-2779052862-2464013104-2090727237-1004\..\Run: [msnmsgr] ~"C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe (.not file.) 
O4 - HKUS\S-1-5-21-2779052862-2464013104-2090727237-1004\..\Run: [Bubble Dock] C:\Users\Hamza\AppData\Roaming\Nosibay\Bubble Dock\LBubble Dock.exe (.not file.) 
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe 
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe 
~ Scan Application in 00mn 00s



---\\ Autres liens utilisateurs (O4)
O4 - Global Startup: C:\Users\zelerr\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk . (.Microsoft Corporation.)  -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
O4 - Global Startup: C:\Users\zelerr\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk . (.Microsoft Corporation.)  -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
O4 - Global Startup: C:\Users\zelerr\Desktop\Athan.lnk . (...)  -- C:\Program Files (x86)\Athan\Athan.exe (.not file.)
O4 - Global Startup: C:\Users\zelerr\Desktop\BlackShot.lnk . (...)  -- C:\Program Files (x86)\eFusion\BlackShot\Patcher.exe (.not file.)
O4 - Global Startup: C:\Users\zelerr\Desktop\CamStudio.lnk . (...)  -- C:\Program Files (x86)\CamStudio\Recorder.exe
O4 - Global Startup: C:\Users\zelerr\Desktop\Teamspeak 2 RC2.lnk . (.Dominating Bytes Design.)  -- C:\Program Files (x86)\Teamspeak2_RC2\TeamSpeak.exe
O4 - Global Startup: C:\Users\zelerr\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk . (.Google Inc..)  -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
O4 - Global Startup: C:\Users\MoH\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk . (.Google Inc..)  -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
O4 - Global Startup: C:\Users\MoH\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk . (.Microsoft Corporation.)  -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
O4 - Global Startup: C:\Users\Hamza\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk . (.Microsoft Corporation.)  -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
O4 - Global Startup: C:\Users\Hamza\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk . (.Microsoft Corporation.)  -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
O4 - Global Startup: C:\Users\Hamza\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WebPlayerV2.lnk . (...)  -- C:\Users\Hamza\AppData\Roaming\Microsoft\Installer\{77236F9C-987C-40EC-832B-5BD6181E4846}\_383C4C6B4D3B599ADF1116.exe
O4 - Global Startup: C:\Users\Hamza\Desktop\Athan azan Makka( Makkah) Mukaramma  اذاÙ? Ù?Ú©Ø© Ù?کرÙ?Ù?.lnk . (...)  -- C:\Program Files (x86)\Google\Chrome\Application\21.0.1180.60\Athan azan Makka( Makkah) Mukaramma  اذاÙ? Ù?Ú©Ø© Ù?کرÙ?Ù?.mp3 
O4 - Global Startup: C:\Users\Hamza\Desktop\CamStudio.lnk . (...)  -- C:\Program Files (x86)\CamStudio\Recorder.exe
O4 - Global Startup: C:\Users\Hamza\Desktop\System Checkup.lnk . (.iolo technologies, LLC.)  -- C:\Program Files (x86)\iolo\System Checkup\SystemCheckup.exe
O4 - Global Startup: C:\Users\Hamza\Desktop\Teamspeak 2 RC2.lnk . (.Dominating Bytes Design.)  -- C:\Program Files (x86)\Teamspeak2_RC2\TeamSpeak.exe
O4 - Global Startup: C:\Users\Hamza\Desktop\WebPlayerV2.lnk . (...)  -- C:\Users\Hamza\AppData\Roaming\Microsoft\Installer\{77236F9C-987C-40EC-832B-5BD6181E4846}\_156ABD14BE3E911559307D.exe
O4 - Global Startup: C:\Users\Hamza\Desktop\Windows Live Messenger.lnk . (.Microsoft Corporation.)  -- C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe
O4 - Global Startup: C:\Users\Hamza\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk . (.Google Inc..)  -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
O4 - Global Startup: C:\Users\Hamza\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk . (.Microsoft Corporation.)  -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
~ Scan Global Startup in 00mn 00s



---\\ Lignes supplémentaires dans le menu contextuel d'Internet Explorer (O8)
O8 - Extra context menu item: Search the Web . (...) -- C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\menuext.html
~ Scan IE Menu Contextuel in 00mn 00s



---\\ Winsock hijacker (Layered Service Provider) (O10)
O10 - WLSP:\000000000001\Winsock LSP File . (.Microsoft Corporation - Network Location Awareness 2.) -- C:\Windows\system32\NLAapi.dll
O10 - WLSP:\000000000002\Winsock LSP File . (.Microsoft Corporation - Fournisseur Shim d’affectation de noms de messagerie.) -- C:\Windows\system32\napinsp.dll
O10 - WLSP:\000000000003\Winsock LSP File . (.Microsoft Corporation - Fournisseur d’espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll
O10 - WLSP:\000000000004\Winsock LSP File . (.Microsoft Corporation - Fournisseur d’espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll
O10 - WLSP:\000000000005\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\Windows\system32\mswsock.dll
O10 - WLSP:\000000000006\Winsock LSP File . (.Microsoft Corporation - LDAP RnR Provider DLL.) -- C:\Windows\system32\winrnr.dll
O10 - WLSP:\000000000007\Winsock LSP File . (.Microsoft Corp. - Microsoft® Windows Live ID Namespace Provider.) -- C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WLIDNSP.dll
O10 - WLSP:\000000000008\Winsock LSP File . (.Microsoft Corp. - Microsoft® Windows Live ID Namespace Provider.) -- C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WLIDNSP.dll
~ Scan Winsock in 00mn 00s



---\\ Modification Domaine/Adresses DNS (O17)
O17 - HKLM\System\CCS\Services\Tcpip\..\{61E0EBA8-4D00-4F9E-A4FF-3870E6FFEF76}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CS1\Services\Tcpip\..\{61E0EBA8-4D00-4F9E-A4FF-3870E6FFEF76}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CS2\Services\Tcpip\..\{61E0EBA8-4D00-4F9E-A4FF-3870E6FFEF76}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CS3\Services\Tcpip\..\{61E0EBA8-4D00-4F9E-A4FF-3870E6FFEF76}: DhcpNameServer = 192.168.1.1
~ Scan Domain in 00mn 00s



---\\ Protocole additionnel (O18)
O18 - Handler: cdl [64Bits] - {3dd53d40-7b8b-11D0-b013-00aa0059ce02} . (...) -- 
O18 - Handler: dvd [64Bits] - {3dd53d40-7b8b-11D0-b013-00aa0059ce02} . (...) -- 
O18 - Handler: file [64Bits] - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (...) -- 
O18 - Handler: ftp [64Bits] - {79eac9e3-baf9-11ce-8c82-00aa004ba90b} . (...) -- 
O18 - Handler: http [64Bits] - {79eac9e2-baf9-11ce-8c82-00aa004ba90b} . (...) -- 
O18 - Handler: https [64Bits] - {79eac9e5-baf9-11ce-8c82-00aa004ba90b} . (...) -- 
O18 - Handler: its [64Bits] - {79eac9e5-baf9-11ce-8c82-00aa004ba90b} . (...) -- 
O18 - Handler: javascript [64Bits] - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (...) -- 
O18 - Handler: livecall [64Bits] - {828030A1-22C1-4009-854F-8E305202313F} . (.Microsoft Corporation - Windows Live Messenger Protocol Handler Mod.) -- C:\Program Files (x86)\Windows Live\Messenger\msgrapp.dll
O18 - Handler: local [64Bits] - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (...) -- 
O18 - Handler: mailto [64Bits] - {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} . (...) -- 
O18 - Handler: mhtml [64Bits] - {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} . (...) -- 
O18 - Handler: mk [64Bits] - {79eac9e6-baf9-11ce-8c82-00aa004ba90b} . (...) -- 
O18 - Handler: ms-its [64Bits] - {79eac9e6-baf9-11ce-8c82-00aa004ba90b} . (...) -- 
O18 - Handler: msnim [64Bits] - {828030A1-22C1-4009-854F-8E305202313F} . (.Microsoft Corporation - Windows Live Messenger Protocol Handler Mod.) -- C:\Program Files (x86)\Windows Live\Messenger\msgrapp.dll
O18 - Handler: res [64Bits] - {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} . (...) -- 
O18 - Handler: skype-ie-addon-data [64Bits] - {91774881-D725-4E58-B298-07617B9B86A8} . (.Skype Technologies S.A. - Skype Click to Call for Internet Explorer.) -- C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O18 - Handler: skype4com [64Bits] - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} . (.Skype Technologies - Skype for COM API.) -- C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll
O18 - Handler: wlmailhtml [64Bits] - {03C514A3-1EFB-4856-9F99-10D7BE1653C0} . (.Microsoft Corporation - Windows Live Mail.) -- C:\Program Files (x86)\Windows Live\Mail\mailcomm.dll
O18 - Handler: wlpg [64Bits] - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} . (.Microsoft Corporation - Windows Live Album Download Protocol Handle.) -- C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O18 - Filter: application/octet-stream [64Bits] - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (...) -- 
O18 - Filter: application/x-complus [64Bits] - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (...) -- 
O18 - Filter: application/x-msdownload [64Bits] - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (...) -- 
~ Scan Protocole Additionnel in 00mn 00s



---\\ Clé de Registre autorun ShellServiceObjectDelayLoad (SSO/SSODL) (O21)
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
~ Scan SSODL in 00mn 00s



---\\ Liste des services NT non Microsoft et non désactivés (O23)
O23 - Service: Acronis Scheduler2 Service (AcrSch2Svc) . (.Acronis - Acronis Scheduler 2.) - C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe
O23 - Service:  (AMD External Events Utility) . (.AMD - AMD External Events Service Module.) - C:\Windows\System32\atiesrxx.exe
O23 - Service: FSGKHS (F-Secure Gatekeeper Handler Starter) . (.F-Secure Corporation - F-Secure Anti-Virus Scanning Service.) - C:\Program Files (x86)\SFR\Pack Sécurité\Anti-Virus\fsgk32st.exe
O23 - Service: F-Secure Management Agent (FSMA) . (.F-Secure Corporation - F-Secure Management Agent.) - C:\Program Files (x86)\SFR\Pack Sécurité\Common\FSMA32.exe
O23 - Service: Service Google Update (gupdate) (gupdate) . (.Google Inc. - Programme d'installation de Google.) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: nProtect GameGuard Personal 3.0 Service (NSPService) . (.INCA Internet Co., Ltd. - nProtect Anti-Virus/Spyware Service.) - C:\Windows\SysWOW64\INCAinternet\nProtect GameGuard Personal 3.0\nspsvc.exe
O23 - Service: nProtect GameGuard Personal 3.0 Update S (NSPUpdateService) . (.INCA Internet Co.,Ltd. - nProtect Anti-Virus/Spyware Updt Service.) - C:\Windows\SysWOW64\INCAinternet\nProtect GameGuard Personal 3.0\nspupsvc.exe
O23 - Service: Skype C2C Service (Skype C2C Service) . (.Skype Technologies S.A. - Skype C2C Service.) - C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe
O23 - Service: Skype Updater (SkypeUpdate) . (.Skype Technologies - Skype Updater Service.) - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: TeamViewer 7 (TeamViewer7) . (.TeamViewer GmbH - TeamViewer Remote Control Application.) - C:\Program Files (x86)\TeamViewer\Version7\TeamViewer_Service.exe
O23 - Service: Acronis Try And Decide Service (TryAndDecideService) . (...) - C:\Program Files (x86)\Common Files\Acronis\Fomatik\TrueImageTryStartService.exe
~ Scan Services in 00mn 00s



---\\ Enumération Active Desktop & MHTML Editor (O24)
O24 - Default MHTML Editor: Last - .(...) -  (.not file.)
~ Scan Desktop Component in 00mn 00s



---\\ BootExecute (O34)
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
~ Scan Keys in 00mn 00s



---\\ Tâches planifiées en automatique (O39)
O39 - APT:Automatic Planified Task  - C:\Windows\Tasks\Adobe Flash Player Updater.job
O39 - APT:Automatic Planified Task  - C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2779052862-2464013104-2090727237-1000Core.job
O39 - APT:Automatic Planified Task  - C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2779052862-2464013104-2090727237-1000UA.job
O39 - APT:Automatic Planified Task  - C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
O39 - APT:Automatic Planified Task  - C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
O39 - APT:Automatic Planified Task  - C:\Windows\Tasks\PC Registry Shield.job
~ Scan Scheduled Task in 00mn 00s



---\\ Composants installés (ActiveSetup Installed Components) (O40)
O40 - ASIC: Internet Explorer [64Bits] - >{26923b43-4d38-484f-9b9e-de460746276c} . (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Explorer par utilisateur.) -- C:\Windows\System32\ie4uinit.exe
O40 - ASIC: Browser Customizations [64Bits] - >{60B49E34-C7CC-11D0-8953-00A0C90347FF} . (.Microsoft Corporation - Personnalisation d’IEAK.) -- C:\Windows\System32\iedkcs32.dll
O40 - ASIC: Themes Setup [64Bits] - {2C7339CF-2B09-4501-B3F3-F3508C9228ED} . (.Microsoft Corporation - API Windows Theme.) -- C:\Windows\System32\themeui.dll
O40 - ASIC: Microsoft Windows [64Bits] - {44BBA840-CC51-11CF-AAFA-00AA00B6015C} . (.Microsoft Corporation - Windows Mail.) -- C:\Program Files (x86)\Windows Mail\WinMail.exe
O40 - ASIC: Browsing Enhancements [64Bits] - {630b1da0-b465-11d1-9948-00c04f98bbc9} . (.Microsoft Corporation - Extension Shell dossier FTP Microsoft Internet Explorer..) -- C:\Windows\System32\msieftp.dll
O40 - ASIC: Windows Desktop Update [64Bits] - {89820200-ECBD-11cf-8B85-00AA005B4340} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\Windows\System32\shell32.dll
O40 - ASIC: Web Platform Customizations [64Bits] - {89820200-ECBD-11cf-8B85-00AA005B4383} . (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Explorer par utilisateur.) -- C:\Windows\System32\ie4uinit.exe
O40 - ASIC: (no name) [64Bits] - {89B4C1CD-B018-4511-B0A1-5476DBF70820} . (.Microsoft Corporation - Microsoft .NET IE SECURITY REGISTRATION.) -- C:\Windows\system32\mscories.dll
~ Scan Active Setup in 00mn 00s



---\\ Pilotes lancés au démarrage (O41)
O41 - Driver: C:\Windows\System32\drivers\afd.sys (AFD) . (.Microsoft Corporation - Ancillary Function Driver for WinSock.) - C:\Windows\system32\drivers\afd.sys
O41 - Driver: (blbdrive) . (.Microsoft Corporation - BLB Drive Driver.) - C:\Windows\System32\DRIVERS\blbdrive.sys
O41 - Driver:  (cdrom) . (.Microsoft Corporation - SCSI CD-ROM Driver.) - C:\Windows\System32\DRIVERS\cdrom.sys
O41 - Driver: C:\Windows\System32\drivers\dfsc.sys (DfsC) . (.Microsoft Corporation - DFS Namespace Client Driver.) - C:\Windows\System32\Drivers\dfsc.sys
O41 - Driver: C:\Windows\System32\drivers\discache.sys (discache) . (.Microsoft Corporation - System Indexer/Cache Driver.) - C:\Windows\System32\drivers\discache.sys
O41 - Driver:  (ElbyCDIO) . (.Elaborate Bytes AG - ElbyCD Windows x64 I/O driver.) - C:\Windows\System32\Drivers\ElbyCDIO.sys
O41 - Driver:  (F-Secure HIPS) . (.F-Secure Corporation - HIPS 64-bit kernel module.) - C:\Program Files (x86)\SFR\Pack Sécurité\HIPS\drivers\fshs.sys
O41 - Driver:  (FSES) . (.F-Secure Corporation - F-Secure Email Interceptor.) - C:\Windows\System32\drivers\fses.sys
O41 - Driver:  (FSFW) . (.F-Secure Corporation - F-Secure Internet Shield Driver.) - C:\Windows\System32\drivers\fsdfw.sys
O41 - Driver:  (fsvista) . (...) - C:\Program Files (x86)\SFR\Pack Sécurité\Anti-Virus\minifilter\fsvista.sys
O41 - Driver:  (mssmbios) . (.Microsoft Corporation - System Management BIOS Driver.) - C:\Windows\system32\drivers\mssmbios.sys
O41 - Driver:  (NetBIOS) . (.Microsoft Corporation - NetBIOS interface driver.) - C:\Windows\System32\DRIVERS\netbios.sys
O41 - Driver: C:\Windows\System32\drivers\netbt.sys (NetBT) . (.Microsoft Corporation - MBT Transport driver.) - C:\Windows\System32\DRIVERS\netbt.sys
O41 - Driver: C:\Windows\System32\drivers\nsiproxy.sys (nsiproxy) . (.Microsoft Corporation - NSI Proxy.) - C:\Windows\System32\drivers\nsiproxy.sys
O41 - Driver: C:\Windows\System32\drivers\pacer.sys (Psched) . (.Microsoft Corporation - Planificateur de paquets QoS.) - C:\Windows\System32\DRIVERS\pacer.sys
O41 - Driver: C:\Windows\System32\wkssvc.dll (rdbss) . (.Microsoft Corporation - Pilote du sous-système de mise en mémoire t.) - C:\Windows\System32\DRIVERS\rdbss.sys
O41 - Driver: C:\Windows\System32\DRIVERS\RDPCDD.sys (RDPCDD) . (.Microsoft Corporation - RDP Miniport.) - C:\Windows\System32\DRIVERS\RDPCDD.sys
O41 - Driver: C:\Windows\System32\drivers\RDPENCDD.sys (RDPENCDD) . (.Microsoft Corporation - RDP Encoder Miniport.) - C:\Windows\System32\drivers\rdpencdd.sys
O41 - Driver: C:\Windows\System32\drivers\RdpRefMp.sys (RDPREFMP) . (.Microsoft Corporation - RDP Reflector Driver Miniport.) - C:\Windows\System32\drivers\rdprefmp.sys
O41 - Driver: C:\Windows\System32\tcpipcfg.dll (tdx) . (.Microsoft Corporation - TDI Translation Driver.) - C:\Windows\System32\DRIVERS\tdx.sys
O41 - Driver:  (TermDD) . (.Microsoft Corporation - Remote Desktop Server Driver.) - C:\Windows\system32\drivers\termdd.sys
O41 - Driver:  (TKFWFV) . (.INCA Internet Co., Ltd. - Tachyon Firewall LW Filter Driver.) - C:\Windows\System32\TKFWFV64.sys
O41 - Driver: (VgaSave) . (.Microsoft Corporation - VGA/Super VGA Video Driver.) - C:\Windows\system32\drivers\vga.sys
O41 - Driver: C:\Windows\System32\rascfg.dll (Wanarpv6) . (.Microsoft Corporation - MS Remote Access and Routing ARP Driver.) - C:\Windows\System32\DRIVERS\wanarp.sys
O41 - Driver:  (WfpLwf) . (.Microsoft Corporation - WFP NDIS 6.20 Lightweight Filter Driver.) - C:\Windows\System32\DRIVERS\wfplwf.sys
~ Scan Drivers in 00mn 00s



---\\ Logiciels installés (O42)
O42 - Logiciel: AVS Video Converter 6 - (.Online Media Technologies Ltd..) [HKLM] -- AVS4YOU Video Converter 6_is1
O42 - Logiciel: Acronis True Image Home - (.Acronis.) [HKLM] -- {E5343B27-55DF-40BD-9FCF-A643C1331E8A}
O42 - Logiciel: Adobe Flash Player 11 ActiveX - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player ActiveX
O42 - Logiciel: Adobe Flash Player 11 Plugin - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player Plugin
O42 - Logiciel: Adobe Reader 9.4.6 - Français - (.Adobe Systems Incorporated.) [HKLM] -- {AC76BA86-7AD7-1036-7B44-A94000000001}
O42 - Logiciel: Adobe Shockwave Player 11.6 - (.Adobe Systems, Inc..) [HKLM] -- Adobe Shockwave Player
O42 - Logiciel: Ask Toolbar - (.Ask.com.) [HKLM] -- {86D4B82A-ABED-442A-BE86-96357B70F4FE}
O42 - Logiciel: Auslogics Disk Defrag - (.Auslogics Software Pty Ltd.) [HKLM] -- {DF6A13C0-77DF-41FE-BD05-6D5201EB0CE7}_is1
O42 - Logiciel: Avidemux 2.5 - (.Pas de propriétaire.) [HKLM] -- Avidemux 2.5 (64-bit)
O42 - Logiciel: Babylon toolbar on IE - (.BabylonToolbar.) [HKLM] -- BabylonToolbar
O42 - Logiciel: BabylonObjectInstaller - (.Babylon Ltd.) [HKLM] -- {83AA2913-C123-4146-85BD-AD8F93971D39}
O42 - Logiciel: Bing Bar - (.Microsoft Corporation.) [HKLM] -- {449CE12D-E2C7-4B97-B19E-55D163EA9435}
O42 - Logiciel: BurnAware Free 3.5 - (.Burnaware Technologies.) [HKLM] -- BurnAware Free_is1
O42 - Logiciel: CDex - Open Source Digital Audio CD Extractor - (.Georgy Berdyshev.) [HKLM] -- CDex
O42 - Logiciel: CamStudio 2.0 Fr - (.Pas de propriétaire.) [HKLM] -- CamStudio 2.0 Fr_is1
O42 - Logiciel: Catalyst Control Center - Branding - (.ATI.) [HKLM] -- {19A492A0-888F-44A0-9B21-D91700763F62}
O42 - Logiciel: CloneCD - (.SlySoft.) [HKLM] -- CloneCD
O42 - Logiciel: Complément Messenger - (.Microsoft Corporation.) [HKLM] -- {6E5324C1-84FC-4F76-9A3A-C65E07F80EE6}
O42 - Logiciel: Contrôle ActiveX Windows Live Mesh pour connexions à distance - (.Microsoft Corporation.) [HKLM] -- {55D003F4-9599-44BF-BA9E-95D060730DD3}
O42 - Logiciel: Counter-Strike Source - (.Pas de propriétaire.) [HKLM] -- Counter-Strike: Source_is1
O42 - Logiciel: D3DX10 - (.Microsoft.) [HKLM] -- {E09C4DB7-630C-4F06-A631-8EA7239923AF}
O42 - Logiciel: Facebook Video Calling 1.2.0.159 - (.Skype Limited.) [HKLM] -- {7CAC6A44-C3DE-4153-ACA6-7524602C789E}
O42 - Logiciel: Free YouTube Download 2.3 - (.DVDVideoSoft Limited..) [HKLM] -- Free YouTube Download_is1
O42 - Logiciel: Gadwin PrintScreen - (.Gadwin Systems, Inc..) [HKLM] -- Gadwin PrintScreen
O42 - Logiciel: Galerie de photos Windows Live - (.Microsoft Corporation.) [HKLM] -- {488F0347-C4A7-4374-91A7-30818BEDA710}
O42 - Logiciel: Google Chrome - (.Google Inc..) [HKLM] -- Google Chrome
O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM] -- {A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}
O42 - Logiciel: I Want This - (.215 Apps.) [HKLM] -- I Want This
O42 - Logiciel: IMVU Inc Toolbar - (.IMVU Inc.) [HKLM] -- IMVU_Inc Toolbar
O42 - Logiciel: IMinent Toolbar - (.IMinent.) [HKLM] -- {A76AA284-E52D-47E6-9E4F-B85DBF8E35C3}
O42 - Logiciel: Iminent - (.Iminent.) [HKLM] -- IMBoosterARP
O42 - Logiciel: Iminent - (.Iminent.) [HKLM] -- {F7CF0E9A-D48B-4942-9537-259ED0568DF4}
O42 - Logiciel: Internet Explorer Toolbar 4.6 by SweetPacks - (.SweetIM Technologies Ltd..) [HKLM] -- {774C0434-9948-4DEE-A14E-69CDD316E36C}
O42 - Logiciel: Java 7 Update 6 - (.Oracle.) [HKLM] -- {26A24AE4-039D-4CA4-87B4-2F83217006FF}
O42 - Logiciel: Java(TM) 6 Update 29 - (.Oracle.) [HKLM] -- {26A24AE4-039D-4CA4-87B4-2F83216022FF}
O42 - Logiciel: JavaFX 2.1.1 - (.Oracle Corporation.) [HKLM] -- {1111706F-666A-4037-7777-211328764D10}
O42 - Logiciel: Junk Mail filter update - (.Microsoft Corporation.) [HKLM] -- {1F6AB0E7-8CDD-4B93-8A23-AA9EB2FEFCE4}
O42 - Logiciel: K-Lite Mega Codec Pack 7.6.0 - (.Pas de propriétaire.) [HKLM] -- KLiteCodecPack_is1
O42 - Logiciel: MSVCRT - (.Microsoft.) [HKLM] -- {8DD46C6A-0056-4FEC-B70A-28BB16A1F11F}
O42 - Logiciel: MSVCRT_amd64 - (.Microsoft.) [HKLM] -- {D0B44725-3666-492D-BEF6-587A14BD9BD9}
O42 - Logiciel: MSXML 4.0 SP2 (KB954430) - (.Microsoft Corporation.) [HKLM] -- {86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
O42 - Logiciel: MSXML 4.0 SP2 (KB973688) - (.Microsoft Corporation.) [HKLM] -- {F662A8E6-F4DC-41A2-901E-8C11F044BDEC}
O42 - Logiciel: Malwarebytes' Anti-Malware version 1.51.2.1300 - (.Malwarebytes Corporation.) [HKLM] -- Malwarebytes' Anti-Malware_is1
O42 - Logiciel: Media Player Classic - (.Pas de propriétaire.) [HKLM] -- Media Player Classic
O42 - Logiciel: Mesh Runtime - (.Microsoft Corporation.) [HKLM] -- {8C6D6116-B724-4810-8F2D-D047E6B7D68E}
O42 - Logiciel: Microsoft SQL Server 2005 Compact Edition [ENU] - (.Microsoft Corporation.) [HKLM] -- {F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}
O42 - Logiciel: Microsoft Silverlight - (.Microsoft Corporation.) [HKLM] -- {89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}
O42 - Logiciel: Microsoft Visual C++ 2005 Redistributable - (.Microsoft Corporation.) [HKLM] -- {710f4c1c-cc18-4c49-8cbf-51240c89a1a2}
O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 - (.Microsoft Corporation.) [HKLM] -- {FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}
O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 - (.Microsoft Corporation.) [HKLM] -- {1F1C2DFC-2D24-3E06-BCB8-725134ADF989}
O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 - (.Microsoft Corporation.) [HKLM] -- {9BE518E6-ECC6-35A9-88E4-87755C07200F}
O42 - Logiciel: Mozilla Firefox 9.0.1 (x86 fr) - (.Mozilla.) [HKLM] -- Mozilla Firefox 9.0.1 (x86 fr)
O42 - Logiciel: NFO viewer v 2.1 - (.Pas de propriétaire.) [HKLM] -- NFO viewer_is1
O42 - Logiciel: OpenOffice.org 3.3 - (.OpenOffice.org.) [HKLM] -- {05653DE1-6567-40C6-B930-39D399B64369}
O42 - Logiciel: PC Registry Shield - (.ShieldApps.) [HKLM] -- PC Registry Shield_is1
O42 - Logiciel: PDFCreator - (.Frank Heindörfer, Philip Chinery.) [HKLM] -- {0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}
O42 - Logiciel: Pack Sécurité SFR - (.Pas de propriétaire.) [HKLM] -- F-Secure Product 440
O42 - Logiciel: PriceGong 2.6.6 - (.PriceGong.) [HKLM] -- PriceGong
O42 - Logiciel: Quicksys RegDefrag 2.9 - (.Pas de propriétaire.) [HKLM] -- {5D26BF7B-BEF6-477D-8FC1-0C1C159B6364}_is1
O42 - Logiciel: RealNetworks - Microsoft Visual C++ 2008 Runtime - (.RealNetworks, Inc.) [HKLM] -- {7770E71B-2D43-4800-9CB3-5B6CAAEBEBEA}
O42 - Logiciel: RealPlayer - (.RealNetworks.) [HKLM] -- RealPlayer 12.0
O42 - Logiciel: RealUpgrade 1.1 - (.RealNetworks, Inc..) [HKLM] -- {28C2DED6-325B-4CC7-983A-1777C8F7FBAB}
O42 - Logiciel: Realtek High Definition Audio Driver - (.Realtek Semiconductor Corp..) [HKLM] -- {F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}
O42 - Logiciel: Ricochet Round 5 Expansion - (.Reflexive Entertainment, Inc..) [HKLM] -- Ricochet_is1
O42 - Logiciel: RocketDock 1.3.5 - (.Punk Software.) [HKLM] -- RocketDock_is1
O42 - Logiciel: SAMSUNG Intelli-studio - (.Pas de propriétaire.) [HKLM] -- Intelli-studio
O42 - Logiciel: Security Update for Microsoft .NET Framework 4 Client Profile (KB2478663) - (.Microsoft Corporation.) [HKLM] -- {F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2478663
O42 - Logiciel: Security Update for Microsoft .NET Framework 4 Client Profile (KB2518870) - (.Microsoft Corporation.) [HKLM] -- {F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2518870
O42 - Logiciel: Security Update for Microsoft .NET Framework 4 Client Profile (KB2539636) - (.Microsoft Corporation.) [HKLM] -- {F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2539636
O42 - Logiciel: Security Update for Microsoft .NET Framework 4 Client Profile (KB2572078) - (.Microsoft Corporation.) [HKLM] -- {F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2572078
O42 - Logiciel: Security Update for Microsoft .NET Framework 4 Client Profile (KB2604121) - (.Microsoft Corporation.) [HKLM] -- {F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2604121
O42 - Logiciel: Security Update for Microsoft .NET Framework 4 Client Profile (KB2656351) - (.Microsoft Corporation.) [HKLM] -- {F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2656351
O42 - Logiciel: Security Update for Microsoft .NET Framework 4 Client Profile (KB2656368v2) - (.Microsoft Corporation.) [HKLM] -- {F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2656368v2
O42 - Logiciel: Security Update for Microsoft .NET Framework 4 Client Profile (KB2656405) - (.Microsoft Corporation.) [HKLM] -- {F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2656405
O42 - Logiciel: Security Update for Microsoft .NET Framework 4 Client Profile (KB2686827) - (.Microsoft Corporation.) [HKLM] -- {F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2686827
O42 - Logiciel: Security Update for Module linguistique Microsoft .NET Framework 4 Client P - (.Microsoft Corporation.) [HKLM] -- {4B5F58F7-C7D1-3CE3-9B37-B657F0852643}.KB2478663
O42 - Logiciel: Security Update for Module linguistique Microsoft .NET Framework 4 Client P - (.Microsoft Corporation.) [HKLM] -- {4B5F58F7-C7D1-3CE3-9B37-B657F0852643}.KB2518870
O42 - Logiciel: Skype Click to Call - (.Skype Technologies S.A..) [HKLM] -- {B6CF2967-C81E-40C0-9815-C05774FEF120}
O42 - Logiciel: Skype™ 5.9 - (.Skype Technologies S.A..) [HKLM] -- {EE7257A2-39A2-4D2F-9DAC-F9F25B8AE1D8}
O42 - Logiciel: SweetIM for Messenger 3.7 - (.SweetIM Technologies Ltd..) [HKLM] -- {7683B745-6060-41FD-AA75-0BBB383FEAD4}
O42 - Logiciel: System Checkup 3.3 - (.iolo technologies, LLC.) [HKLM] -- {4AC7B4E7-59B7-4E48-A60D-263C486FC33A}_is1
O42 - Logiciel: TeamSpeak 2 RC2 - (.Dominating Bytes Design.) [HKLM] -- Teamspeak 2 RC2_is1
O42 - Logiciel: TeamViewer 7 - (.TeamViewer.) [HKLM] -- TeamViewer 7
O42 - Logiciel: Uninstall 1.0.0.1 - (.Pas de propriétaire.) [HKLM] -- Uninstall_is1
O42 - Logiciel: Update Manager for SweetPacks 1.0 - (.SweetIM Technologies Ltd..) [HKLM] -- {FB697452-8CA4-46B4-98B1-165C922A2EF3}
O42 - Logiciel: Update for Microsoft .NET Framework 4 Client Profile (KB2468871) - (.Microsoft Corporation.) [HKLM] -- {F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2468871
O42 - Logiciel: Update for Microsoft .NET Framework 4 Client Profile (KB2533523) - (.Microsoft Corporation.) [HKLM] -- {F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2533523
O42 - Logiciel: Update for Microsoft .NET Framework 4 Client Profile (KB2600217) - (.Microsoft Corporation.) [HKLM] -- {F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2600217
O42 - Logiciel: WebPlayerV2 - (.Kreapixel.) [HKLM] -- {77236F9C-987C-40EC-832B-5BD6181E4846}
O42 - Logiciel: Windows Live - (.Microsoft Corporation.) [HKLM] -- WinLiveSuite
O42 - Logiciel: Windows Live - (.Microsoft Corporation.) [HKLM] -- {34319F1F-7CF2-4CC9-B357-1AE7D2FF3AC5}
O42 - Logiciel: Windows Live Communications Platform - (.Microsoft Corporation.) [HKLM] -- {D45240D3-B6B3-4FF9-B243-54ECE3E10066}
O42 - Logiciel: Windows Live Installer - (.Microsoft Corporation.) [HKLM] -- {0B0F231F-CE6A-483D-AA23-77B364F75917}
O42 - Logiciel: Windows Live Mail - (.Microsoft Corporation.) [HKLM] -- {9D56775A-93F3-44A3-8092-840E3826DE30}
O42 - Logiciel: Windows Live Mail - (.Microsoft Corporation.) [HKLM] -- {9FAE6E8D-E686-49F5-A574-0A58DFD9580C}
O42 - Logiciel: Windows Live Mesh - (.Microsoft Corporation.) [HKLM] -- {841F1FB4-FDF8-461C-A496-3E1CFD84C0B5}
O42 - Logiciel: Windows Live Mesh - (.Microsoft Corporation.) [HKLM] -- {DECDCB7C-58CC-4865-91AF-627F9798FE48}
O42 - Logiciel: Windows Live Messenger - (.Microsoft Corporation.) [HKLM] -- {AB61A2E9-37D3-485D-9085-19FBDF8CEF4A}
O42 - Logiciel: Windows Live Messenger - (.Microsoft Corporation.) [HKLM] -- {E5B21F11-6933-4E0B-A25C-7963E3C07D11}
O42 - Logiciel: Windows Live Messenger Companion Core - (.Microsoft Corporation.) [HKLM] -- {78A96B4C-A643-4D0F-98C2-A8E16A6669F9}
O42 - Logiciel: Windows Live Movie Maker - (.Microsoft Corporation.) [HKLM] -- {6DEC8BD5-7574-47FA-B080-492BBBE2FEA3}
O42 - Logiciel: Windows Live Movie Maker - (.Microsoft Corporation.) [HKLM] -- {92EA4134-10D1-418A-91E1-5A0453131A38}
O42 - Logiciel: Windows Live PIMT Platform - (.Microsoft Corporation.) [HKLM] -- {83C292B7-38A5-440B-A731-07070E81A64F}
O42 - Logiciel: Windows Live Photo Common - (.Microsoft Corporation.) [HKLM] -- {A9BDCA6B-3653-467B-AC83-94367DA3BFE3}
O42 - Logiciel: Windows Live Photo Common - (.Microsoft Corporation.) [HKLM] -- {C893D8C0-1BA0-4517-B11C-E89B65E72F70}
O42 - Logiciel: Windows Live Photo Gallery - (.Microsoft Corporation.) [HKLM] -- {3336F667-9049-4D46-98B6-4C743EEBC5B1}
O42 - Logiciel: Windows Live SOXE - (.Microsoft Corporation.) [HKLM] -- {682B3E4F-696A-42DE-A41C-4C07EA1678B4}
O42 - Logiciel: Windows Live SOXE Definitions - (.Microsoft Corporation.) [HKLM] -- {200FEC62-3C34-4D60-9CE8-EC372E01C08F}
O42 - Logiciel: Windows Live UX Platform - (.Microsoft Corporation.) [HKLM] -- {CE95A79E-E4FC-4FFF-8A75-29F04B942FF2}
O42 - Logiciel: Windows Live UX Platform Language Pack - (.Microsoft Corporation.) [HKLM] -- {05E379CC-F626-4E7D-8354-463865B303BF}
O42 - Logiciel: Windows Live Writer - (.Microsoft Corporation.) [HKLM] -- {3B9A92DA-6374-4872-B646-253F18624D5F}
O42 - Logiciel: Windows Live Writer - (.Microsoft Corporation.) [HKLM] -- {A726AE06-AAA3-43D1-87E3-70F510314F04}
O42 - Logiciel: Windows Live Writer - (.Microsoft Corporation.) [HKLM] -- {AAAFC670-569B-4A2F-82B4-42945E0DE3EF}
O42 - Logiciel: Windows Live Writer Resources - (.Microsoft Corporation.) [HKLM] -- {62687B11-58B5-4A18-9BC3-9DF4CE03F194}
O42 - Logiciel: XRECODE - (.Pas de propriétaire.) [HKLM] -- XRECODE_is1
O42 - Logiciel: Xilisoft FLV Convertisseur 6 - (.Xilisoft.) [HKLM] -- Xilisoft FLV Convertisseur 6
O42 - Logiciel: XnView 1.98.2 - (.Gougelet Pierre-e.) [HKLM] -- XnView_is1
O42 - Logiciel: nProtect GameGuard Personal 3.0 - (.INCAInternet.) [HKLM] -- {9D197A87-44B6-47D0-8A0D-B421208C9A26}
O42 - Logiciel: patch AVSVideoConverter - (.Pas de propriétaire.) [HKLM] -- patch AVSVideoConverter
O42 - Logiciel: swMSM - (.Adobe Systems, Inc.) [HKLM] -- {612C34C7-5E90-47D8-9B5C-0F717DD82726}
O42 - Logiciel: xrecode II 1.0.0.180 - (.Pas de propriétaire.) [HKLM] -- {AFE83615-88BE-47F6-B3E4-A3FEF8B7B57F}_is1

---\\ HKCU & HKLM Software Keys
[HKCU\Software\AMD]
[HKCU\Software\AppDataLow\Software\AskToolbar]
[HKCU\Software\AppDataLow\Software\Conduit]
[HKCU\Software\AppDataLow\Software\Crossrider]
[HKCU\Software\AppDataLow\Software\I Want This]
[HKCU\Software\AppDataLow\Software\IMVU_Inc]
[HKCU\Software\AppDataLow\Software\Microsoft]
[HKCU\Software\AppDataLow\Software\PriceGong]
[HKCU\Software\AppDataLow\Software\Smartbar]
[HKCU\Software\AppDataLow\Software]
[HKCU\Software\AppDataLow\Toolbar]
[HKLM\Software\14919ea49a8f3b4aa3cf1058d9a64cec]
[HKLM\Software\685D6D1C-D73A-4F37-B7E5E53660311DDB]
[HKLM\Software\AMD]
[HKLM\Software\APN]
[HKLM\Software\ATI Technologies]
[HKLM\Software\ATI]
[HKLM\Software\AVS4YOU]
[HKLM\Software\Acronis]
[HKLM\Software\Adobe]
[HKLM\Software\AppDataLow]
[HKLM\Software\Apple]
[HKLM\Software\AskToolbar]
[HKLM\Software\Aureal]
[HKLM\Software\Babylon]
[HKLM\Software\BurnAware]
[HKLM\Software\CDDB]
[HKLM\Software\Classes]
[HKLM\Software\Clients]
[HKLM\Software\Codec Tweak Tool]
[HKLM\Software\Conduit]
[HKLM\Software\DT Soft]
[HKLM\Software\DVDVideoSoft]
[HKLM\Software\Data Fellows]
[HKLM\Software\GNU]
[HKLM\Software\Gabest]
[HKLM\Software\Google]
[HKLM\Software\HaaliMkx]
[HKLM\Software\IMVU_Inc]
[HKLM\Software\INCAInternet]
[HKLM\Software\Iminent]
[HKLM\Software\Intel]
[HKLM\Software\InterVideo]
[HKLM\Software\JavaSoft]
[HKLM\Software\JreMetrics]
[HKLM\Software\KLCodecPack]
[HKLM\Software\Khronos]
[HKLM\Software\Licenses]
[HKLM\Software\Loader]
[HKLM\Software\Macromedia]
[HKLM\Software\Malwarebytes' Anti-Malware]
[HKLM\Software\Mircrosoft]
[HKLM\Software\MozillaPlugins]
[HKLM\Software\Mozilla]
[HKLM\Software\ODBC]
[HKLM\Software\OpenOffice.org]
[HKLM\Software\Oracle]
[HKLM\Software\PDFCreator]
[HKLM\Software\PixArt]
[HKLM\Software\Policies]
[HKLM\Software\Quicksys]
[HKLM\Software\RealNetworks]
[HKLM\Software\Reflexive Entertainment]
[HKLM\Software\RegisteredApplications]
[HKLM\Software\ShieldApps]
[HKLM\Software\Skype]
[HKLM\Software\SlySoft]
[HKLM\Software\Springfield]
[HKLM\Software\SweetIM]
[HKLM\Software\TeamViewer]
[HKLM\Software\Valve Lan]
[HKLM\Software\VertigoGames]
[HKLM\Software\Windows]
[HKLM\Software\Xilisoft]
[HKLM\Software\Xing Technology Corp.]
[HKLM\Software\XnView]
[HKLM\Software\cybelsoft]
[HKLM\Software\iolo]
[HKLM\Software\mozilla.org]
~ Scan Softwares in 00mn 00s



---\\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43)
O43 - CFD: 20/10/2011 - 10:26:02 - [34,892] ----D C:\Program Files (x86)\Acronis
O43 - CFD: 19/10/2011 - 14:18:52 - [233,220] ----D C:\Program Files (x86)\Adobe
O43 - CFD: 23/08/2012 - 21:04:44 - [0,147] ----D C:\Program Files (x86)\AIMP2
O43 - CFD: 19/10/2011 - 15:33:05 - [2,323] ----D C:\Program Files (x86)\AMD APP
O43 - CFD: 19/10/2011 - 13:54:24 - [2,391] ----D C:\Program Files (x86)\Ask.com
O43 - CFD: 23/08/2012 - 19:42:05 - [0,444] ----D C:\Program Files (x86)\Athan
O43 - CFD: 19/10/2011 - 15:31:38 - [41,093] ----D C:\Program Files (x86)\ATI Technologies
O43 - CFD: 19/10/2011 - 15:37:22 - [8,997] ----D C:\Program Files (x86)\Auslogics
O43 - CFD: 20/10/2011 - 12:59:52 - [45,001] ----D C:\Program Files (x86)\AVS4YOU
O43 - CFD: 23/05/2012 - 19:13:54 - [3,747] ----D C:\Program Files (x86)\BabylonToolbar
O43 - CFD: 19/10/2011 - 14:14:27 - [21,453] ----D C:\Program Files (x86)\BurnAware Free
O43 - CFD: 23/07/2012 - 23:14:22 - [7,999] ----D C:\Program Files (x86)\CamStudio
O43 - CFD: 19/10/2011 - 17:55:45 - [10,221] ----D C:\Program Files (x86)\CDex
O43 - CFD: 23/08/2012 - 19:07:18 - [660,496] R---D C:\Program Files (x86)\Common Files
O43 - CFD: 27/04/2012 - 10:46:40 - [0,609] ----D C:\Program Files (x86)\Conduit
O43 - CFD: 28/10/2011 - 12:43:53 - [-45,400] ----D C:\Program Files (x86)\Counter-Strike Source
O43 - CFD: 19/10/2011 - 16:11:33 - [9,831] ----D C:\Program Files (x86)\DAEMON Tools Lite
O43 - CFD: 20/10/2011 - 12:05:35 - [2,771] ----D C:\Program Files (x86)\DVDVideoSoft
O43 - CFD: 23/08/2012 - 20:57:02 - [0] ----D C:\Program Files (x86)\eFusion
O43 - CFD: 20/10/2011 - 12:30:09 - [3,482] ----D C:\Program Files (x86)\Gadwin Systems
O43 - CFD: 27/10/2011 - 23:26:01 - [332,885] ----D C:\Program Files (x86)\Google
O43 - CFD: 24/07/2012 - 23:35:27 - [0,482] ----D C:\Program Files (x86)\I Want This
O43 - CFD: 23/05/2012 - 19:12:17 - [16,129] ----D C:\Program Files (x86)\Iminent
O43 - CFD: 23/05/2012 - 19:13:36 - [3,362] ----D C:\Program Files (x86)\IMinent Toolbar
O43 - CFD: 20/08/2012 - 13:12:24 - [9,527] ----D C:\Program Files (x86)\IMVU_Inc
O43 - CFD: 23/08/2012 - 19:06:57 - [33,769] ----D C:\Program Files (x86)\INCAInternet
O43 - CFD: 10/05/2012 - 20:18:43 - [203,957] ----D C:\Program Files (x86)\Infogrames
O43 - CFD: 23/08/2012 - 19:06:56 - [4,147] --H-D C:\Program Files (x86)\InstallShield Installation Information
O43 - CFD: 16/08/2012 - 12:22:39 - [4,917] ----D C:\Program Files (x86)\Internet Explorer
O43 - CFD: 23/08/2012 - 22:42:28 - [11,660] ----D C:\Program Files (x86)\iolo
O43 - CFD: 23/08/2012 - 19:01:57 - [207,590] ----D C:\Program Files (x86)\Java
O43 - CFD: 19/10/2011 - 16:04:17 - [63,790] ----D C:\Program Files (x86)\K-Lite Codec Pack
O43 - CFD: 19/10/2011 - 15:39:09 - [6,691] ----D C:\Program Files (x86)\Malwarebytes' Anti-Malware
O43 - CFD: 26/10/2011 - 13:47:15 - [19,718] ----D C:\Program Files (x86)\Microsoft
O43 - CFD: 15/08/2012 - 01:23:31 - [36,641] ----D C:\Program Files (x86)\Microsoft Silverlight
O43 - CFD: 26/10/2011 - 13:51:49 - [1,745] ----D C:\Program Files (x86)\Microsoft SQL Server Compact Edition
O43 - CFD: 19/10/2011 - 14:34:49 - [0,015] ----D C:\Program Files (x86)\Microsoft.NET
O43 - CFD: 29/04/2012 - 10:59:25 - [42,689] ----D C:\Program Files (x86)\Mozilla Firefox
O43 - CFD: 14/07/2009 - 07:32:38 - [0,025] ----D C:\Program Files (x86)\MSBuild
O43 - CFD: 24/08/2012 - 11:30:17 - [0] ----D C:\Program Files (x86)\MSXML 4.0
O43 - CFD: 19/10/2011 - 14:30:48 - [0,482] ----D C:\Program Files (x86)\NFO viewer
O43 - CFD: 26/12/2011 - 23:05:37 - [0] ----D C:\Program Files (x86)\NortonInstaller
O43 - CFD: 19/10/2011 - 15:59:07 - [352,141] ----D C:\Program Files (x86)\OpenOffice.org 3
O43 - CFD: 18/08/2012 - 23:08:43 - [33,207] ----D C:\Program Files (x86)\Oracle
O43 - CFD: 23/08/2012 - 22:36:40 - [13,146] ----D C:\Program Files (x86)\PC Registry Shield
O43 - CFD: 19/10/2011 - 16:07:31 - [31,310] ----D C:\Program Files (x86)\PDFCreator
O43 - CFD: 19/10/2011 - 16:07:58 - [26,723] ----D C:\Program Files (x86)\PhotoFiltre
O43 - CFD: 06/08/2012 - 13:54:47 - [0,670] ----D C:\Program Files (x86)\PriceGong
O43 - CFD: 19/10/2011 - 16:08:39 - [2,504] ----D C:\Program Files (x86)\Quicksys
O43 - CFD: 08/11/2011 - 23:31:08 - [91,546] ----D C:\Program Files (x86)\Real
O43 - CFD: 14/07/2009 - 07:32:38 - [37,349] ----D C:\Program Files (x86)\Reference Assemblies
O43 - CFD: 23/10/2011 - 15:38:29 - [40,170] ----D C:\Program Files (x86)\Ricochet
O43 - CFD: 20/10/2011 - 13:59:53 - [12,321] ----D C:\Program Files (x86)\RocketDock
O43 - CFD: 18/04/2012 - 13:40:44 - [27,635] ----D C:\Program Files (x86)\SAMSUNG
O43 - CFD: 02/02/2012 - 16:45:51 - [765,991] ----D C:\Program Files (x86)\SFR
O43 - CFD: 09/05/2012 - 22:01:30 - [34,289] R---D C:\Program Files (x86)\Skype
O43 - CFD: 20/10/2011 - 12:38:03 - [8,190] ----D C:\Program Files (x86)\SlySoft
O43 - CFD: 06/08/2012 - 13:54:51 - [11,167] ----D C:\Program Files (x86)\SweetIM
O43 - CFD: 09/05/2012 - 22:05:05 - [7,412] ----D C:\Program Files (x86)\Teamspeak2_RC2
O43 - CFD: 23/05/2012 - 19:47:29 - [15,803] ----D C:\Program Files (x86)\TeamViewer
O43 - CFD: 14/07/2009 - 06:57:06 - [0] --H-D C:\Program Files (x86)\Uninstall Information
O43 - CFD: 09/12/2011 - 18:24:38 - [21,355] ----D C:\Program Files (x86)\Valve Lan
O43 - CFD: 29/01/2012 - 19:05:12 - [81,813] ----D C:\Program Files (x86)\Vlcclassic
O43 - CFD: 14/07/2009 - 17:24:08 - [0,500] ----D C:\Program Files (x86)\Windows Defender
O43 - CFD: 24/04/2012 - 09:02:07 - [178,144] ----D C:\Program Files (x86)\Windows Live
O43 - CFD: 19/10/2011 - 15:19:23 - [5,895] ----D C:\Program Files (x86)\Windows Mail
O43 - CFD: 14/07/2009 - 07:32:38 - [11,632] ----D C:\Program Files (x86)\Windows NT
O43 - CFD: 19/10/2011 - 15:19:23 - [4,213] ----D C:\Program Files (x86)\Windows Photo Viewer
O43 - CFD: 19/10/2011 - 15:19:23 - [0,181] ----D C:\Program Files (x86)\Windows Portable Devices
O43 - CFD: 19/10/2011 - 15:19:23 - [5,717] ----D C:\Program Files (x86)\Windows Sidebar
O43 - CFD: 20/10/2011 - 12:32:05 - [97,145] ----D C:\Program Files (x86)\Xilisoft
O43 - CFD: 19/10/2011 - 16:21:13 - [33,630] ----D C:\Program Files (x86)\XnView
O43 - CFD: 20/10/2011 - 10:28:36 - [11,178] ----D C:\Program Files (x86)\XRECODE
O43 - CFD: 19/10/2011 - 18:16:49 - [22,435] ----D C:\Program Files (x86)\xrecode II
O43 - CFD: 19/10/2011 - 18:20:25 - [0,292] ----D C:\Program Files (x86)\xTremSplit
O43 - CFD: 24/08/2012 - 13:11:26 - [12,790] ----D C:\Program Files (x86)\ZHPDiag
O43 - CFD: 20/10/2011 - 10:19:03 - [196,375] ----D C:\Program Files (x86)\Common Files\Acronis
O43 - CFD: 19/10/2011 - 14:19:02 - [5,962] ----D C:\Program Files (x86)\Common Files\Adobe
O43 - CFD: 19/10/2011 - 15:33:01 - [0,324] ----D C:\Program Files (x86)\Common Files\ATI Technologies
O43 - CFD: 19/10/2011 - 14:26:56 - [67,017] ----D C:\Program Files (x86)\Common Files\AVSMedia
O43 - CFD: 20/10/2011 - 12:05:38 - [16,193] ----D C:\Program Files (x86)\Common Files\DVDVideoSoft
O43 - CFD: 23/08/2012 - 19:07:19 - [311,511] ----D C:\Program Files (x86)\Common Files\INCAInternet
O43 - CFD: 23/08/2012 - 19:02:21 - [1,184] ----D C:\Program Files (x86)\Common Files\Java
O43 - CFD: 26/10/2011 - 13:47:41 - [10,561] ----D C:\Program Files (x86)\Common Files\microsoft shared
O43 - CFD: 14/07/2009 - 05:20:08 - [0,003] ----D C:\Program Files (x86)\Common Files\Services
O43 - CFD: 09/05/2012 - 22:01:11 - [2,056] ----D C:\Program Files (x86)\Common Files\Skype
O43 - CFD: 14/07/2009 - 05:20:08 - [39,200] ----D C:\Program Files (x86)\Common Files\SpeechEngines
O43 - CFD: 09/11/2011 - 13:39:53 - [9,767] ----D C:\Program Files (x86)\Common Files\System
O43 - CFD: 26/10/2011 - 13:45:55 - [0] ----D C:\Program Files (x86)\Common Files\Windows Live
O43 - CFD: 08/11/2011 - 23:31:05 - [0,336] ----D C:\Program Files (x86)\Common Files\xing shared
O43 - CFD: 20/10/2011 - 10:19:34 - [0,014] ----D C:\ProgramData\Acronis
O43 - CFD: 19/10/2011 - 14:19:16 - [0,001] ----D C:\ProgramData\Adobe
O43 - CFD: 14/07/2009 - 07:08:56 - [0] --H-D C:\ProgramData\Application Data
O43 - CFD: 19/10/2011 - 15:33:07 - [0,000] ----D C:\ProgramData\ATI
O43 - CFD: 19/10/2011 - 14:27:29 - [0] ----D C:\ProgramData\AVS4YOU
O43 - CFD: 23/05/2012 - 19:13:24 - [0] ----D C:\ProgramData\Babylon
O43 - CFD: 10/05/2012 - 07:45:29 - [0,000] ----D C:\ProgramData\boost_interprocess
O43 - CFD: 19/10/2011 - 11:01:15 - [0] --H-D C:\ProgramData\Bureau
O43 - CFD: 19/10/2011 - 16:11:10 - [0,002] ----D C:\ProgramData\DAEMON Tools Lite
O43 - CFD: 14/07/2009 - 07:08:56 - [0] --H-D C:\ProgramData\Desktop
O43 - CFD: 14/07/2009 - 07:08:56 - [0] --H-D C:\ProgramData\Documents
O43 - CFD: 02/02/2012 - 16:46:15 - [7,793] ----D C:\ProgramData\f-secure
O43 - CFD: 19/10/2011 - 11:01:15 - [0] --H-D C:\ProgramData\Favoris
O43 - CFD: 14/07/2009 - 07:08:56 - [0] --H-D C:\ProgramData\Favorites
O43 - CFD: 02/02/2012 - 16:45:39 - [0,096] ----D C:\ProgramData\fssg
O43 - CFD: 31/12/2011 - 12:52:26 - [0,000] ----D C:\ProgramData\gF36200DeEhE36200
O43 - CFD: 23/05/2012 - 19:12:20 - [0,093] ----D C:\ProgramData\Iminent
O43 - CFD: 23/08/2012 - 22:43:16 - [0,342] ----D C:\ProgramData\iolo
O43 - CFD: 23/08/2012 - 22:19:51 - [1,285] ----D C:\ProgramData\ma-config.com
O43 - CFD: 19/10/2011 - 15:39:08 - [6,929] ----D C:\ProgramData\Malwarebytes
O43 - CFD: 19/10/2011 - 11:01:15 - [0] --H-D C:\ProgramData\Menu Démarrer
O43 - CFD: 23/08/2012 - 22:16:52 - [124,586] -S--D C:\ProgramData\Microsoft
O43 - CFD: 19/10/2011 - 11:01:15 - [0] --H-D C:\ProgramData\Modèles
O43 - CFD: 26/12/2011 - 23:05:36 - [0,002] ----D C:\ProgramData\NortonInstaller
O43 - CFD: 20/05/2012 - 21:34:04 - [1,641] ----D C:\ProgramData\Real
O43 - CFD: 23/07/2012 - 22:59:39 - [28,984] ----D C:\ProgramData\Skype
O43 - CFD: 20/10/2011 - 12:45:27 - [0,000] ----D C:\ProgramData\SlySoft
O43 - CFD: 14/07/2009 - 07:08:56 - [0] --H-D C:\ProgramData\Start Menu
O43 - CFD: 19/10/2011 - 15:58:27 - [0,000] ----D C:\ProgramData\Sun
O43 - CFD: 06/08/2012 - 13:54:51 - [0,677] ----D C:\ProgramData\SweetIM
O43 - CFD: 24/08/2012 - 11:48:55 - [0] ---AD C:\ProgramData\TEMP
O43 - CFD: 14/07/2009 - 07:08:56 - [0] --H-D C:\ProgramData\Templates
O43 - CFD: 20/10/2011 - 12:32:05 - [0,008] ----D C:\ProgramData\Xilisoft
O43 - CFD: 04/08/2012 - 16:55:36 - [1,520] ----D C:\Users\Hamza\AppData\Roaming\Adobe
O43 - CFD: 09/05/2012 - 21:55:37 - [0] ----D C:\Users\Hamza\AppData\Roaming\ATI
O43 - CFD: 23/05/2012 - 19:13:24 - [0,013] ----D C:\Users\Hamza\AppData\Roaming\Babylon
O43 - CFD: 23/05/2012 - 19:14:05 - [2,079] ----D C:\Users\Hamza\AppData\Roaming\BabylonToolbar
O43 - CFD: 09/05/2012 - 21:55:16 - [0] ----D C:\Users\Hamza\AppData\Roaming\Identities
O43 - CFD: 23/05/2012 - 19:12:23 - [1,112] ----D C:\Users\Hamza\AppData\Roaming\Iminent
O43 - CFD: 30/05/2012 - 16:59:35 - [0,036] ----D C:\Users\Hamza\AppData\Roaming\Intelli-studio
O43 - CFD: 09/05/2012 - 21:56:12 - [0,001] ----D C:\Users\Hamza\AppData\Roaming\Macromedia
O43 - CFD: 23/08/2012 - 20:50:19 - [2,636] -S--D C:\Users\Hamza\AppData\Roaming\Microsoft
O43 - CFD: 23/05/2012 - 19:14:10 - [12,254] ----D C:\Users\Hamza\AppData\Roaming\Mozilla
O43 - CFD: 23/08/2012 - 19:42:25 - [0] ----D C:\Users\Hamza\AppData\Roaming\Nosibay
O43 - CFD: 15/05/2012 - 19:03:29 - [1,430] ----D C:\Users\Hamza\AppData\Roaming\OpenOffice.org
O43 - CFD: 22/05/2012 - 17:50:51 - [1,297] ----D C:\Users\Hamza\AppData\Roaming\Real
O43 - CFD: 23/08/2012 - 22:36:41 - [0,561] ----D C:\Users\Hamza\AppData\Roaming\ShieldApps
O43 - CFD: 23/08/2012 - 21:00:50 - [4,372] ----D C:\Users\Hamza\AppData\Roaming\Skype
O43 - CFD: 09/05/2012 - 22:05:10 - [0,012] ----D C:\Users\Hamza\AppData\Roaming\teamspeak2
O43 - CFD: 23/05/2012 - 20:53:50 - [0,000] ----D C:\Users\Hamza\AppData\Roaming\TeamViewer
O43 - CFD: 14/05/2012 - 21:01:36 - [0,510] ----D C:\Users\Hamza\AppData\Roaming\TS3Client
O43 - CFD: 10/05/2012 - 20:14:23 - [0,000] ----D C:\Users\Hamza\AppData\Roaming\WinRAR
O43 - CFD: 04/08/2012 - 16:55:39 - [0,068] ----D C:\Users\Hamza\AppData\Local\Adobe
O43 - CFD: 09/05/2012 - 21:55:07 - [0] ----D C:\Users\Hamza\AppData\Local\Application Data
O43 - CFD: 06/08/2012 - 13:48:15 - [0,854] ----D C:\Users\Hamza\AppData\Local\AskToolbar
O43 - CFD: 09/05/2012 - 21:55:37 - [0,097] ----D C:\Users\Hamza\AppData\Local\ATI
O43 - CFD: 06/08/2012 - 13:59:20 - [1,602] ----D C:\Users\Hamza\AppData\Local\CRE
O43 - CFD: 06/08/2012 - 13:49:33 - [0,165] ----D C:\Users\Hamza\AppData\Local\ElevatedDiagnostics
O43 - CFD: 09/05/2012 - 21:55:58 - [69,769] ----D C:\Users\Hamza\AppData\Local\Google
O43 - CFD: 09/05/2012 - 21:55:07 - [0] ----D C:\Users\Hamza\AppData\Local\Historique
O43 - CFD: 23/05/2012 - 19:13:29 - [0,057] ----D C:\Users\Hamza\AppData\Local\I Want This
O43 - CFD: 06/08/2012 - 14:05:55 - [119,294] ----D C:\Users\Hamza\AppData\Local\Microsoft
O43 - CFD: 23/05/2012 - 19:14:05 - [5,469] ----D C:\Users\Hamza\AppData\Local\Mozilla
O43 - CFD: 06/08/2012 - 14:42:39 - [0] ----D C:\Users\Hamza\AppData\Local\PackageAware
O43 - CFD: 24/08/2012 - 13:10:50 - [0,081] ----D C:\Users\Hamza\AppData\Local\Temp
O43 - CFD: 09/05/2012 - 21:55:07 - [0] ----D C:\Users\Hamza\AppData\Local\Temporary Internet Files
O43 - CFD: 18/08/2012 - 22:40:23 - [0,063] ----D C:\Users\Hamza\AppData\Local\Windows Live
O43 - CFD: 10/08/2012 - 15:45:39 - [0] ----D C:\Users\Hamza\AppData\Local\{01559641-4194-4CA8-990D-A3D9A1CC4559}
O43 - CFD: 31/05/2012 - 07:25:17 - [0] ----D C:\Users\Hamza\AppData\Local\{0221FF58-1361-4F88-97B3-3A2EF5826C6C}
O43 - CFD: 13/08/2012 - 14:59:32 - [0] ----D C:\Users\Hamza\AppData\Local\{02CCB248-32D2-4864-B0DC-456D4B964D44}
O43 - CFD: 01/08/2012 - 20:46:48 - [0] ----D C:\Users\Hamza\AppData\Local\{033358E6-D4E5-468A-B1C3-6E981B978B22}
O43 - CFD: 23/07/2012 - 22:40:34 - [0] ----D C:\Users\Hamza\AppData\Local\{0421744D-50D1-4649-AF49-86AA5F3EF27F}
O43 - CFD: 03/06/2012 - 17:48:18 - [0] ----D C:\Users\Hamza\AppData\Local\{087D3640-7EAE-4F8C-8FA9-C6D0E345DA0C}
O43 - CFD: 28/05/2012 - 10:55:36 - [0] ----D C:\Users\Hamza\AppData\Local\{09420A5C-AB41-450E-8025-11EC2C63F5F1}
O43 - CFD: 28/07/2012 - 14:51:49 - [0] ----D C:\Users\Hamza\AppData\Local\{094FF15E-ED1E-4D7A-AE8E-1C4B8326FADB}
O43 - CFD: 06/08/2012 - 05:58:55 - [0] ----D C:\Users\Hamza\AppData\Local\{0BCA79F3-8924-40D1-AF80-05D66FD26348}
O43 - CFD: 11/05/2012 - 07:28:06 - [0] ----D C:\Users\Hamza\AppData\Local\{0C0EB797-F222-430B-8C24-494C6C46C027}
O43 - CFD: 07/08/2012 - 16:16:47 - [0] ----D C:\Users\Hamza\AppData\Local\{0C1A3FEC-91DA-4514-B813-302F7D9040F7}
O43 - CFD: 10/05/2012 - 18:29:17 - [0] ----D C:\Users\Hamza\AppData\Local\{0C783910-C101-4CCF-B45B-E6CBA4FAF508}
O43 - CFD: 29/07/2012 - 14:40:59 - [0] ----D C:\Users\Hamza\AppData\Local\{0EACF124-2780-4128-A18E-B01AF5A1C3D9}
O43 - CFD: 17/05/2012 - 09:55:11 - [0] ----D C:\Users\Hamza\AppData\Local\{1269553F-E77E-404F-98EC-C2E7034174AC}
O43 - CFD: 25/05/2012 - 16:12:02 - [0] ----D C:\Users\Hamza\AppData\Local\{126AD5A2-64A3-4ADA-8AEB-9B1D654FF800}
O43 - CFD: 31/05/2012 - 20:25:20 - [0] ----D C:\Users\Hamza\AppData\Local\{149788C2-2664-48BC-9CE9-9E54F9A76577}
O43 - CFD: 04/08/2012 - 13:52:32 - [0] ----D C:\Users\Hamza\AppData\Local\{18292D87-316E-421C-BAB6-7FC94202CAF9}
O43 - CFD: 26/07/2012 - 01:21:55 - [0] ----D C:\Users\Hamza\AppData\Local\{18D95819-490F-4BCB-ADAB-5676B230942F}
O43 - CFD: 16/05/2012 - 07:23:57 - [0] ----D C:\Users\Hamza\AppData\Local\{1A14CDBB-859E-47B7-B25C-1EDEDA18EC6F}
O43 - CFD: 02/06/2012 - 09:47:39 - [0] ----D C:\Users\Hamza\AppData\Local\{2016FA6E-96E8-469C-B9C9-796423A9212F}
O43 - CFD: 13/05/2012 - 10:56:49 - [0] ----D C:\Users\Hamza\AppData\Local\{2103566E-94CA-450F-99DD-C4F555941DF7}
O43 - CFD: 06/06/2012 - 07:37:01 - [0] ----D C:\Users\Hamza\AppData\Local\{22B6C5B9-C432-4309-825B-2D6E012C5CC1}
O43 - CFD: 03/08/2012 - 02:16:18 - [0] ----D C:\Users\Hamza\AppData\Local\{2BDED776-51EA-4397-9F00-CF0C060938DC}
O43 - CFD: 30/07/2012 - 11:52:24 - [0] ----D C:\Users\Hamza\AppData\Local\{2EF49CC6-B3BA-45F2-9C2C-681D6C885701}
O43 - CFD: 10/08/2012 - 15:45:19 - [0] ----D C:\Users\Hamza\AppData\Local\{3274FDCA-35AD-464D-A5FC-09D6B9E37C2A}
O43 - CFD: 31/05/2012 - 07:25:30 - [0] ----D C:\Users\Hamza\AppData\Local\{3391076C-4FCC-4A79-A486-1D39394CBBF4}
O43 - CFD: 24/05/2012 - 12:40:52 - [0] ----D C:\Users\Hamza\AppData\Local\{3593E038-A3F8-4C2A-A42C-6CC5A00B8181}
O43 - CFD: 31/07/2012 - 20:57:13 - [0] ----D C:\Users\Hamza\AppData\Local\{36581CF2-9309-4CA9-B09B-7F92EB9A3AFD}
O43 - CFD: 16/08/2012 - 16:28:09 - [0] ----D C:\Users\Hamza\AppData\Local\{368D1ACD-D5BD-4FDC-B235-DE55B2CF5F55}
O43 - CFD: 03/08/2012 - 02:16:29 - [0] ----D C:\Users\Hamza\AppData\Local\{36EB0A23-871F-44EA-9557-7343B4B82E18}
O43 - CFD: 09/05/2012 - 22:02:28 - [0] ----D C:\Users\Hamza\AppData\Local\{3717BDA3-7FD1-4099-BABE-F0B64E1E15EE}
O43 - CFD: 08/08/2012 - 13:33:37 - [0] ----D C:\Users\Hamza\AppData\Local\{38D0F707-091F-43FD-9A17-E5FEC568F72C}
O43 - CFD: 28/05/2012 - 22:56:36 - [0] ----D C:\Users\Hamza\AppData\Local\{3903F3A1-0C13-43EA-BDF3-C2340A249CFE}
O43 - CFD: 26/07/2012 - 16:08:23 - [0] ----D C:\Users\Hamza\AppData\Local\{39A8838A-60DA-4641-877F-5DEF6535D107}
O43 - CFD: 06/08/2012 - 19:28:24 - [0] ----D C:\Users\Hamza\AppData\Local\{3E05C9E1-6035-4709-979D-0EB5554A0303}
O43 - CFD: 31/07/2012 - 20:56:58 - [0] ----D C:\Users\Hamza\AppData\Local\{3E1CC24F-24AE-4B36-9290-0B825224CB86}
O43 - CFD: 20/05/2012 - 21:13:08 - [0] ----D C:\Users\Hamza\AppData\Local\{3E3DB246-FCE9-4AF9-806C-5A41243A008A}
O43 - CFD: 27/05/2012 - 11:08:01 - [0] ----D C:\Users\Hamza\AppData\Local\{4038DA76-FF8F-45D4-8E37-9E15B6280A09}
O43 - CFD: 17/05/2012 - 09:54:58 - [0] ----D C:\Users\Hamza\AppData\Local\{4040E9DB-78A8-44B8-BE29-B8CFF4CCBA7D}
O43 - CFD: 18/05/2012 - 15:34:00 - [0] ----D C:\Users\Hamza\AppData\Local\{46EE70C0-6E64-43EF-A7D9-5CFDCB8D253C}
O43 - CFD: 11/08/2012 - 14:09:01 - [0] ----D C:\Users\Hamza\AppData\Local\{47C3267C-4347-4D53-8E08-A406B908DE05}
O43 - CFD: 28/05/2012 - 10:55:51 - [0] ----D C:\Users\Hamza\AppData\Local\{4B8E2F62-707F-4E97-83F2-174D827FAFEF}
O43 - CFD: 23/08/2012 - 11:50:55 - [0] ----D C:\Users\Hamza\AppData\Local\{4BFDAABB-A234-4B5B-B6BE-10D2D14E10A9}
O43 - CFD: 16/05/2012 - 20:05:02 - [0] ----D C:\Users\Hamza\AppData\Local\{4C517086-FAED-4E48-9699-8C56A312CB52}
O43 - CFD: 16/05/2012 - 07:24:09 - [0] ----D C:\Users\Hamza\AppData\Local\{4EF84FB1-3691-4DF0-93D5-6A51B6B33008}
O43 - CFD: 11/08/2012 - 14:09:18 - [0] ----D C:\Users\Hamza\AppData\Local\{510C3FF8-B5C6-42E9-8AA5-FE028CE5183C}
O43 - CFD: 25/05/2012 - 16:12:21 - [0] ----D C:\Users\Hamza\AppData\Local\{511077B6-DCA3-41E9-946A-E5E5469487D2}
O43 - CFD: 16/08/2012 - 16:28:21 - [0] ----D C:\Users\Hamza\AppData\Local\{519E552B-E6BD-4BAB-AB1D-02AA57AFEFC4}
O43 - CFD: 25/07/2012 - 13:21:26 - [0] ----D C:\Users\Hamza\AppData\Local\{56591110-1EDB-4812-B292-5E22D7CED35B}
O43 - CFD: 25/07/2012 - 13:21:14 - [0] ----D C:\Users\Hamza\AppData\Local\{5B070618-C92E-4769-86A5-1B46962FB675}
O43 - CFD: 05/06/2012 - 11:36:48 - [0] ----D C:\Users\Hamza\AppData\Local\{5CC4CED8-74E4-4F4A-9163-F3D1E1D0905D}
O43 - CFD: 01/06/2012 - 08:26:00 - [0] ----D C:\Users\Hamza\AppData\Local\{603AA3C8-BBDF-40FA-991B-A29B90E3E1D8}
O43 - CFD: 04/08/2012 - 13:52:19 - [0] ----D C:\Users\Hamza\AppData\Local\{666D7EDB-B2AC-4546-ABF7-43D4934B803D}
O43 - CFD: 22/05/2012 - 19:34:10 - [0] ----D C:\Users\Hamza\AppData\Local\{6702FBC7-4596-4072-B716-AD90252E8CA9}
O43 - CFD: 31/05/2012 - 20:25:02 - [0] ----D C:\Users\Hamza\AppData\Local\{67C57722-75E7-47E1-9D6C-E2CDF00E82BE}
O43 - CFD: 20/05/2012 - 21:13:19 - [0] ----D C:\Users\Hamza\AppData\Local\{691CEBC2-7C0C-4724-87D2-0346687439BD}
O43 - CFD: 30/07/2012 - 23:53:02 - [0] ----D C:\Users\Hamza\AppData\Local\{696516B3-9B30-44E4-B03A-70A06F8D3273}
O43 - CFD: 07/08/2012 - 16:17:00 - [0] ----D C:\Users\Hamza\AppData\Local\{6B34173C-A22C-440D-8D49-95AAC3729885}
O43 - CFD: 06/06/2012 - 13:35:31 - [0] ----D C:\Users\Hamza\AppData\Local\{6CE240B9-9408-4D45-BD26-4BF3D74C601A}
O43 - CFD: 22/05/2012 - 19:34:22 - [0] ----D C:\Users\Hamza\AppData\Local\{70530CBB-6A6B-4E02-AA64-5DA2B733594E}
O43 - CFD: 28/05/2012 - 22:56:25 - [0] ----D C:\Users\Hamza\AppData\Local\{72C8092E-EEC4-4E6B-BB33-683DA9E1BE4F}
O43 - CFD: 02/08/2012 - 20:43:33 - [0] ----D C:\Users\Hamza\AppData\Local\{72D09522-FEE6-4A2E-83E9-C6619645977B}
O43 - CFD: 12/05/2012 - 09:47:54 - [0] ----D C:\Users\Hamza\AppData\Local\{7356F7AE-3901-475B-89A8-05A65D21E352}
O43 - CFD: 26/07/2012 - 16:08:36 - [0] ----D C:\Users\Hamza\AppData\Local\{773600A9-D46F-43D8-9269-E6860E6D759C}
O43 - CFD: 03/06/2012 - 17:48:30 - [0] ----D C:\Users\Hamza\AppData\Local\{77D9D473-B6D7-4279-99E1-B2AAD72EA8F8}
O43 - CFD: 24/07/2012 - 12:14:10 - [0] ----D C:\Users\Hamza\AppData\Local\{78F5E013-76F1-4E7A-BD6F-9F1D321C034C}
O43 - CFD: 23/05/2012 - 18:53:53 - [0] ----D C:\Users\Hamza\AppData\Local\{79A5AFAE-73F5-4267-ADB6-605EB51F57DF}
O43 - CFD: 29/05/2012 - 15:36:10 - [0] ----D C:\Users\Hamza\AppData\Local\{79BD351B-A43C-4451-8847-666EF9951A0E}
O43 - CFD: 11/05/2012 - 19:28:49 - [0] ----D C:\Users\Hamza\AppData\Local\{79CC290E-354C-4B0A-AA27-6E31B3E1F722}
O43 - CFD: 05/06/2012 - 11:37:00 - [0] ----D C:\Users\Hamza\AppData\Local\{7BF31CEE-30C5-4BD3-8638-05829092F705}
O43 - CFD: 18/05/2012 - 15:34:13 - [0] ----D C:\Users\Hamza\AppData\Local\{7C018617-C0D5-45F2-89FB-93787ADC115A}
O43 - CFD: 11/05/2012 - 19:28:38 - [0] ----D C:\Users\Hamza\AppData\Local\{7DCC5193-B2EA-48E6-B77A-3226FCB2062A}
O43 - CFD: 19/08/2012 - 22:41:12 - [0] ----D C:\Users\Hamza\AppData\Local\{7DFD754B-C48B-49F2-AD9E-B806B3D32D41}
O43 - CFD: 19/08/2012 - 10:40:48 - [0] ----D C:\Users\Hamza\AppData\Local\{800AFA62-545E-44FE-AF7A-66AC3AFEC459}
O43 - CFD: 20/05/2012 - 10:22:50 - [0] ----D C:\Users\Hamza\AppData\Local\{8102FF66-B859-48FE-801B-BBF47558E0BD}
O43 - CFD: 21/05/2012 - 13:59:57 - [0] ----D C:\Users\Hamza\AppData\Local\{81896CB9-8E96-426A-A986-1BB94C1F207B}
O43 - CFD: 24/05/2012 - 12:40:40 - [0] ----D C:\Users\Hamza\AppData\Local\{8259EFB8-962C-41C3-900F-8435704F8A75}
O43 - CFD: 15/05/2012 - 12:40:59 - [0] ----D C:\Users\Hamza\AppData\Local\{8278E972-B00F-4789-97FE-7E7C4B6AE3D4}
O43 - CFD: 13/08/2012 - 14:59:15 - [0] ----D C:\Users\Hamza\AppData\Local\{82A111D8-F50D-445A-8410-7717037D98BA}
O43 - CFD: 12/08/2012 - 16:15:03 - [0] ----D C:\Users\Hamza\AppData\Local\{84430FB7-62A8-4D81-AA8A-B29EB0F4E733}
O43 - CFD: 04/06/2012 - 13:37:20 - [0] ----D C:\Users\Hamza\AppData\Local\{856A5D52-7E6C-40CC-A61E-0241499D9010}
O43 - CFD: 23/07/2012 - 22:59:17 - [0] ----D C:\Users\Hamza\AppData\Local\{85FA7849-8DA1-4961-B661-0748C671A9EC}
O43 - CFD: 03/08/2012 - 15:56:51 - [0] ----D C:\Users\Hamza\AppData\Local\{894CF114-8598-488C-93E6-FFC5DDBD939A}
O43 - CFD: 09/05/2012 - 22:02:58 - [0] ----D C:\Users\Hamza\AppData\Local\{89AB364A-36B2-450A-82CD-61B0A8647809}
O43 - CFD: 30/05/2012 - 14:02:57 - [0] ----D C:\Users\Hamza\AppData\Local\{89D7E7D3-6803-4F0A-B74D-048769DDC2D4}
O43 - CFD: 29/05/2012 - 15:36:23 - [0] ----D C:\Users\Hamza\AppData\Local\{89E96CBE-1ACB-494F-888C-40514F0515B5}
O43 - CFD: 21/08/2012 - 11:42:45 - [0] ----D C:\Users\Hamza\AppData\Local\{8B4B7434-7327-4ADE-A4DA-DD4AE557E5A0}
O43 - CFD: 15/05/2012 - 12:41:10 - [0] ----D C:\Users\Hamza\AppData\Local\{8C866355-A2E8-4FAD-A5D1-A028886BB164}
O43 - CFD: 29/07/2012 - 14:40:47 - [0] ----D C:\Users\Hamza\AppData\Local\{8D19A5C9-C60A-47BC-8DD6-44C36C091AA3}
O43 - CFD: 18/08/2012 - 22:39:53 - [0] ----D C:\Users\Hamza\AppData\Local\{8E977096-A1B0-46AC-9097-E33BE7FE2B7E}
O43 - CFD: 25/07/2012 - 00:14:45 - [0] ----D C:\Users\Hamza\AppData\Local\{8ED772FB-87F7-4A5D-85F1-7E201F33A675}
O43 - CFD: 14/05/2012 - 07:19:52 - [0] ----D C:\Users\Hamza\AppData\Local\{8F918444-A684-4C9C-ADF9-05EFD45A699D}
O43 - CFD: 23/05/2012 - 18:53:42 - [0] ----D C:\Users\Hamza\AppData\Local\{921C85A5-2A9E-4BAB-A13E-798E557F6F51}
O43 - CFD: 08/08/2012 - 13:33:50 - [0] ----D C:\Users\Hamza\AppData\Local\{9233E4B9-2182-4326-8FB7-067CBDE7575D}
O43 - CFD: 30/07/2012 - 11:52:12 - [0] ----D C:\Users\Hamza\AppData\Local\{999688F5-D7EF-4715-BE90-5C689E9DB688}
O43 - CFD: 20/08/2012 - 13:09:27 - [0] ----D C:\Users\Hamza\AppData\Local\{A22E56ED-F8B3-479B-904C-A851F3ED4116}
O43 - CFD: 30/07/2012 - 23:53:14 - [0] ----D C:\Users\Hamza\AppData\Local\{A392A80F-41F8-4BF9-B71C-006955C2B004}
O43 - CFD: 10/05/2012 - 18:29:05 - [0] ----D C:\Users\Hamza\AppData\Local\{A3D429D3-0549-4E65-B3EA-4D922CDC6019}
O43 - CFD: 27/07/2012 - 13:05:18 - [0] ----D C:\Users\Hamza\AppData\Local\{A4324188-BCFF-43D1-8C81-5CE0077C2FC8}
O43 - CFD: 17/08/2012 - 19:08:19 - [0] ----D C:\Users\Hamza\AppData\Local\{A55ACF29-E079-4322-90F8-5BB51DED876C}
O43 - CFD: 12/05/2012 - 09:47:40 - [0] ----D C:\Users\Hamza\AppData\Local\{A6A0021D-BEE6-4F09-A332-09E6725843F9}
O43 - CFD: 25/07/2012 - 00:14:56 - [0] ----D C:\Users\Hamza\AppData\Local\{A6A0A307-53CF-4D80-A9B3-818E297D7964}
O43 - CFD: 28/07/2012 - 01:05:58 - [0] ----D C:\Users\Hamza\AppData\Local\{A79F5E8F-D669-4500-A902-FF68B5E6B082}
O43 - CFD: 05/08/2012 - 14:26:39 - [0] ----D C:\Users\Hamza\AppData\Local\{AB731913-0218-4FCE-97BD-DBBB2BEF9A87}
O43 - CFD: 19/05/2012 - 09:10:00 - [0] ----D C:\Users\Hamza\AppData\Local\{AE034DFA-4CC5-4EA9-AA98-8315BBF1E0F2}
O43 - CFD: 19/05/2012 - 09:09:49 - [0] ----D C:\Users\Hamza\AppData\Local\{B09BDC8E-98AB-4AD7-A859-BC4B9F80E28A}
O43 - CFD: 15/08/2012 - 15:23:39 - [0] ----D C:\Users\Hamza\AppData\Local\{B44AE6CC-ED27-49CA-AF50-9817CCB15DC9}
O43 - CFD: 02/08/2012 - 20:43:44 - [0] ----D C:\Users\Hamza\AppData\Local\{B5306A55-B5E7-47AB-A806-0635A67F6706}
O43 - CFD: 07/06/2012 - 11:40:34 - [0] ----D C:\Users\Hamza\AppData\Local\{B8992749-B717-4EB8-AEA1-65A107CF0C80}
O43 - CFD: 06/08/2012 - 19:28:12 - [0] ----D C:\Users\Hamza\AppData\Local\{BA5E283A-9496-427A-8E48-D177D4D42B13}
O43 - CFD: 12/05/2012 - 21:48:36 - [0] ----D C:\Users\Hamza\AppData\Local\{BB8E422A-6EDD-47C4-8D47-B993DD2E2581}
O43 - CFD: 01/08/2012 - 20:47:02 - [0] ----D C:\Users\Hamza\AppData\Local\{BBB07A1B-B524-42DA-8553-91FBCD37F296}
O43 - CFD: 14/05/2012 - 07:20:04 - [0] ----D C:\Users\Hamza\AppData\Local\{BC16416B-46B2-4AA2-993A-69D88B9D8C93}
O43 - CFD: 07/06/2012 - 11:40:49 - [0] ----D C:\Users\Hamza\AppData\Local\{BDED1372-8F87-485E-924A-3BA24CF32328}
O43 - CFD: 14/05/2012 - 19:20:32 - [0] ----D C:\Users\Hamza\AppData\Local\{BFA62586-83FB-4F74-BB12-3DF1C78BBD71}
O43 - CFD: 05/08/2012 - 14:26:52 - [0] ----D C:\Users\Hamza\AppData\Local\{C12A26B0-243F-429B-BE60-1F324EDA9A2E}
O43 - CFD: 09/08/2012 - 16:08:34 - [0] ----D C:\Users\Hamza\AppData\Local\{C3FE7060-EA79-41B4-A2A0-77219658215C}
O43 - CFD: 14/05/2012 - 19:20:43 - [0] ----D C:\Users\Hamza\AppData\Local\{C427394C-563D-4FE8-9E02-46E9E1EAEA70}
O43 - CFD: 12/05/2012 - 21:48:25 - [0] ----D C:\Users\Hamza\AppData\Local\{C6C8B534-962D-4D11-A433-45BFEB2450AF}
O43 - CFD: 04/06/2012 - 13:37:32 - [0] ----D C:\Users\Hamza\AppData\Local\{CA1BC6D9-484B-4828-8BDC-6DDAD4691ACB}
O43 - CFD: 18/08/2012 - 10:19:53 - [0] ----D C:\Users\Hamza\AppData\Local\{CC67F281-5DD5-4F94-8A29-ED1BBB29C000}
O43 - CFD: 13/05/2012 - 10:56:38 - [0] ----D C:\Users\Hamza\AppData\Local\{CE30413C-0674-4F69-B7AC-F5EBE6600391}
O43 - CFD: 16/05/2012 - 20:04:51 - [0] ----D C:\Users\Hamza\AppData\Local\{CEF5E3B4-4BFE-49DF-9F27-FDBACF498F65}
O43 - CFD: 02/08/2012 - 22:46:32 - [0] ----D C:\Users\Hamza\AppData\Local\{CF026DD6-63B1-4A3B-A27A-A6E857B48A59}
O43 - CFD: 06/08/2012 - 05:59:07 - [0] ----D C:\Users\Hamza\AppData\Local\{CFBAAFC2-7196-4FA1-9BC7-913BEFFB8A24}
O43 - CFD: 02/06/2012 - 09:47:51 - [0] ----D C:\Users\Hamza\AppData\Local\{D44DF3E5-54FA-4DEC-92DE-DA5DFDE17A3B}
O43 - CFD: 27/05/2012 - 14:10:32 - [0] ----D C:\Users\Hamza\AppData\Local\{D536EAC6-33F1-4A55-BEEF-2B230C289C78}
O43 - CFD: 01/06/2012 - 08:25:48 - [0] ----D C:\Users\Hamza\AppData\Local\{DB5DED40-F045-40D2-BD82-DCDC299B94A1}
O43 - CFD: 15/08/2012 - 15:23:53 - [0] ----D C:\Users\Hamza\AppData\Local\{DCBB3BF8-4506-4ADC-85B6-0E209FF58E31}
O43 - CFD: 21/05/2012 - 13:59:45 - [0] ----D C:\Users\Hamza\AppData\Local\{E092CDBD-744E-4A9A-9672-32493AF25466}
O43 - CFD: 30/05/2012 - 14:03:10 - [0] ----D C:\Users\Hamza\AppData\Local\{E0D6A749-15DF-4347-9A70-64199820F019}
O43 - CFD: 11/05/2012 - 07:27:53 - [0] ----D C:\Users\Hamza\AppData\Local\{E133CC86-EA4A-4A48-821D-A2A1AF87A8D8}
O43 - CFD: 06/06/2012 - 13:35:43 - [0] ----D C:\Users\Hamza\AppData\Local\{E3001E4D-8427-413B-A9D4-34D7E1FE8BB8}
O43 - CFD: 26/05/2012 - 10:09:07 - [0] ----D C:\Users\Hamza\AppData\Local\{E3CC8E0C-A142-4469-A0B1-290C69B4923E}
O43 - CFD: 18/08/2012 - 22:40:07 - [0] ----D C:\Users\Hamza\AppData\Local\{E50E4756-8C91-43D9-A3B7-269AC3EC0733}
O43 - CFD: 17/08/2012 - 19:08:40 - [0] ----D C:\Users\Hamza\AppData\Local\{E8A26A3B-E00C-4C19-B224-E722551756D1}
O43 - CFD: 09/05/2012 - 22:00:34 - [0] ----D C:\Users\Hamza\AppData\Local\{E8A6BE69-C882-438F-A399-71AC69893755}
O43 - CFD: 18/08/2012 - 10:19:40 - [0] ----D C:\Users\Hamza\AppData\Local\{E9DA919F-8EC7-4822-AA9B-0854B5D312FB}
O43 - CFD: 26/07/2012 - 01:22:06 - [0] ----D C:\Users\Hamza\AppData\Local\{EA5A837D-A30D-4ECF-A19A-67CAD8CA40F3}
O43 - CFD: 03/08/2012 - 15:57:05 - [0] ----D C:\Users\Hamza\AppData\Local\{EA5F5D4E-5E93-4EC5-B88B-3DBBF739B43E}
O43 - CFD: 27/07/2012 - 13:05:30 - [0] ----D C:\Users\Hamza\AppData\Local\{EB576757-2BD9-4F06-9B2A-0D055C1A8EA5}
O43 - CFD: 23/07/2012 - 22:59:36 - [0] ----D C:\Users\Hamza\AppData\Local\{EBECD896-EB7E-48C2-951E-BF3ED34C04C2}
O43 - CFD: 12/05/2012 - 09:47:41 - [0] ----D C:\Users\Hamza\AppData\Local\{F4F4D3F3-9129-4AD2-9AE0-1F6C522024D3}
O43 - CFD: 14/08/2012 - 17:42:55 - [0] ----D C:\Users\Hamza\AppData\Local\{F680781A-2EEF-4255-9D9F-DE746AC14AF3}
O43 - CFD: 28/07/2012 - 01:06:10 - [0] ----D C:\Users\Hamza\AppData\Local\{FB5094A9-159D-48BB-AEDB-7BEB08C1E9E0}
O43 - CFD: 26/05/2012 - 10:08:56 - [0] ----D C:\Users\Hamza\AppData\Local\{FBC27072-271F-4275-BFCF-F24DC25F704B}
O43 - CFD: 24/07/2012 - 12:13:54 - [0] ----D C:\Users\Hamza\AppData\Local\{FC6CF0F5-AE4D-4550-86F1-2DEED70B22D4}
O43 - CFD: 28/07/2012 - 14:52:02 - [0] ----D C:\Users\Hamza\AppData\Local\{FD725195-F9CF-45BB-8DF1-9598023721BD}
O43 - CFD: 27/05/2012 - 14:10:44 - [0] ----D C:\Users\Hamza\AppData\Local\{FE0932FC-159D-443F-BE80-E99D89F7B8F4}
O43 - CFD: 14/08/2012 - 17:42:40 - [0] ----D C:\Users\Hamza\AppData\Local\{FE4D4C8A-A81E-465D-9713-9F87BB19491F}
O43 - CFD: 14/07/2009 - 06:54:32 - [0,014] R---D C:\Users\Hamza\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
O43 - CFD: 15/08/2012 - 20:19:51 - [0,000] R---D C:\Users\Hamza\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
O43 - CFD: 23/08/2012 - 18:52:18 - [0] ----D C:\Users\Hamza\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\eFusion
O43 - CFD: 23/05/2012 - 20:08:50 - [0,001] ----D C:\Users\Hamza\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
O43 - CFD: 14/07/2009 - 06:49:38 - [0,001] R---D C:\Users\Hamza\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
O43 - CFD: 23/05/2012 - 20:01:41 - [0] ----D C:\Users\Hamza\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\San Andreas Multiplayer
O43 - CFD: 15/08/2012 - 20:19:51 - [0,000] R---D C:\Users\Hamza\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
O43 - CFD: 20/10/2011 - 10:26:02 - [34,892] ----D C:\Program Files (x86)\Acronis
O43 - CFD: 19/10/2011 - 14:18:52 - [233,220] ----D C:\Program Files (x86)\Adobe
O43 - CFD: 23/08/2012 - 21:04:44 - [0,147] ----D C:\Program Files (x86)\AIMP2
O43 - CFD: 19/10/2011 - 15:33:05 - [2,323] ----D C:\Program Files (x86)\AMD APP
O43 - CFD: 19/10/2011 - 13:54:24 - [2,391] ----D C:\Program Files (x86)\Ask.com
O43 - CFD: 23/08/2012 - 19:42:05 - [0,444] ----D C:\Program Files (x86)\Athan
O43 - CFD: 19/10/2011 - 15:31:38 - [41,093] ----D C:\Program Files (x86)\ATI Technologies
O43 - CFD: 19/10/2011 - 15:37:22 - [8,997] ----D C:\Program Files (x86)\Auslogics
O43 - CFD: 20/10/2011 - 12:59:52 - [45,001] ----D C:\Program Files (x86)\AVS4YOU
O43 - CFD: 23/05/2012 - 19:13:54 - [3,747] ----D C:\Program Files (x86)\BabylonToolbar
O43 - CFD: 19/10/2011 - 14:14:27 - [21,453] ----D C:\Program Files (x86)\BurnAware Free
O43 - CFD: 23/07/2012 - 23:14:22 - [7,999] ----D C:\Program Files (x86)\CamStudio
O43 - CFD: 19/10/2011 - 17:55:45 - [10,221] ----D C:\Program Files (x86)\CDex
O43 - CFD: 23/08/2012 - 19:07:18 - [660,496] R---D C:\Program Files (x86)\Common Files
O43 - CFD: 27/04/2012 - 10:46:40 - [0,609] ----D C:\Program Files (x86)\Conduit
O43 - CFD: 28/10/2011 - 12:43:53 - [-45,400] ----D C:\Program Files (x86)\Counter-Strike Source
O43 - CFD: 19/10/2011 - 16:11:33 - [9,831] ----D C:\Program Files (x86)\DAEMON Tools Lite
O43 - CFD: 20/10/2011 - 12:05:35 - [2,771] ----D C:\Program Files (x86)\DVDVideoSoft
O43 - CFD: 23/08/2012 - 20:57:02 - [0] ----D C:\Program Files (x86)\eFusion
O43 - CFD: 20/10/2011 - 12:30:09 - [3,482] ----D C:\Program Files (x86)\Gadwin Systems
O43 - CFD: 27/10/2011 - 23:26:01 - [332,885] ----D C:\Program Files (x86)\Google
O43 - CFD: 24/07/2012 - 23:35:27 - [0,482] ----D C:\Program Files (x86)\I Want This
O43 - CFD: 23/05/2012 - 19:12:17 - [16,129] ----D C:\Program Files (x86)\Iminent
O43 - CFD: 23/05/2012 - 19:13:36 - [3,362] ----D C:\Program Files (x86)\IMinent Toolbar
O43 - CFD: 20/08/2012 - 13:12:24 - [9,527] ----D C:\Program Files (x86)\IMVU_Inc
O43 - CFD: 23/08/2012 - 19:06:57 - [33,769] ----D C:\Program Files (x86)\INCAInternet
O43 - CFD: 10/05/2012 - 20:18:43 - [203,957] ----D C:\Program Files (x86)\Infogrames
O43 - CFD: 23/08/2012 - 19:06:56 - [4,147] --H-D C:\Program Files (x86)\InstallShield Installation Information
O43 - CFD: 16/08/2012 - 12:22:39 - [4,917] ----D C:\Program Files (x86)\Internet Explorer
O43 - CFD: 23/08/2012 - 22:42:28 - [11,660] ----D C:\Program Files (x86)\iolo
O43 - CFD: 23/08/2012 - 19:01:57 - [207,590] ----D C:\Program Files (x86)\Java
O43 - CFD: 19/10/2011 - 16:04:17 - [63,790] ----D C:\Program Files (x86)\K-Lite Codec Pack
O43 - CFD: 19/10/2011 - 15:39:09 - [6,691] ----D C:\Program Files (x86)\Malwarebytes' Anti-Malware
O43 - CFD: 26/10/2011 - 13:47:15 - [19,718] ----D C:\Program Files (x86)\Microsoft
O43 - CFD: 15/08/2012 - 01:23:31 - [36,641] ----D C:\Program Files (x86)\Microsoft Silverlight
O43 - CFD: 26/10/2011 - 13:51:49 - [1,745] ----D C:\Program Files (x86)\Microsoft SQL Server Compact Edition
O43 - CFD: 19/10/2011 - 14:34:49 - [0,015] ----D C:\Program Files (x86)\Microsoft.NET
O43 - CFD: 29/04/2012 - 10:59:25 - [42,689] ----D C:\Program Files (x86)\Mozilla Firefox
O43 - CFD: 14/07/2009 - 07:32:38 - [0,025] ----D C:\Program Files (x86)\MSBuild
O43 - CFD: 24/08/2012 - 11:30:17 - [0] ----D C:\Program Files (x86)\MSXML 4.0
O43 - CFD: 19/10/2011 - 14:30:48 - [0,482] ----D C:\Program Files (x86)\NFO viewer
O43 - CFD: 26/12/2011 - 23:05:37 - [0] ----D C:\Program Files (x86)\NortonInstaller
O43 - CFD: 19/10/2011 - 15:59:07 - [352,141] ----D C:\Program Files (x86)\OpenOffice.org 3
O43 - CFD: 18/08/2012 - 23:08:43 - [33,207] ----D C:\Program Files (x86)\Oracle
O43 - CFD: 23/08/2012 - 22:36:40 - [13,146] ----D C:\Program Files (x86)\PC Registry Shield
O43 - CFD: 19/10/2011 - 16:07:31 - [31,310] ----D C:\Program Files (x86)\PDFCreator
O43 - CFD: 19/10/2011 - 16:07:58 - [26,723] ----D C:\Program Files (x86)\PhotoFiltre
O43 - CFD: 06/08/2012 - 13:54:47 - [0,670] ----D C:\Program Files (x86)\PriceGong
O43 - CFD: 19/10/2011 - 16:08:39 - [2,504] ----D C:\Program Files (x86)\Quicksys
O43 - CFD: 08/11/2011 - 23:31:08 - [91,546] ----D C:\Program Files (x86)\Real
O43 - CFD: 14/07/2009 - 07:32:38 - [37,349] ----D C:\Program Files (x86)\Reference Assemblies
O43 - CFD: 23/10/2011 - 15:38:29 - [40,170] ----D C:\Program Files (x86)\Ricochet
O43 - CFD: 20/10/2011 - 13:59:53 - [12,321] ----D C:\Program Files (x86)\RocketDock
O43 - CFD: 18/04/2012 - 13:40:44 - [27,635] ----D C:\Program Files (x86)\SAMSUNG
O43 - CFD: 02/02/2012 - 16:45:51 - [765,991] ----D C:\Program Files (x86)\SFR
O43 - CFD: 09/05/2012 - 22:01:30 - [34,289] R---D C:\Program Files (x86)\Skype
O43 - CFD: 20/10/2011 - 12:38:03 - [8,190] ----D C:\Program Files (x86)\SlySoft
O43 - CFD: 06/08/2012 - 13:54:51 - [11,167] ----D C:\Program Files (x86)\SweetIM
O43 - CFD: 09/05/2012 - 22:05:05 - [7,412] ----D C:\Program Files (x86)\Teamspeak2_RC2
O43 - CFD: 23/05/2012 - 19:47:29 - [15,803] ----D C:\Program Files (x86)\TeamViewer
O43 - CFD: 14/07/2009 - 06:57:06 - [0] --H-D C:\Program Files (x86)\Uninstall Information
O43 - CFD: 09/12/2011 - 18:24:38 - [21,355] ----D C:\Program Files (x86)\Valve Lan
O43 - CFD: 29/01/2012 - 19:05:12 - [81,813] ----D C:\Program Files (x86)\Vlcclassic
O43 - CFD: 14/07/2009 - 17:24:08 - [0,500] ----D C:\Program Files (x86)\Windows Defender
O43 - CFD: 24/04/2012 - 09:02:07 - [178,144] ----D C:\Program Files (x86)\Windows Live
O43 - CFD: 19/10/2011 - 15:19:23 - [5,895] ----D C:\Program Files (x86)\Windows Mail
O43 - CFD: 14/07/2009 - 07:32:38 - [11,632] ----D C:\Program Files (x86)\Windows NT
O43 - CFD: 19/10/2011 - 15:19:23 - [4,213] ----D C:\Program Files (x86)\Windows Photo Viewer
O43 - CFD: 19/10/2011 - 15:19:23 - [0,181] ----D C:\Program Files (x86)\Windows Portable Devices
O43 - CFD: 19/10/2011 - 15:19:23 - [5,717] ----D C:\Program Files (x86)\Windows Sidebar
O43 - CFD: 20/10/2011 - 12:32:05 - [97,145] ----D C:\Program Files (x86)\Xilisoft
O43 - CFD: 19/10/2011 - 16:21:13 - [33,630] ----D C:\Program Files (x86)\XnView
O43 - CFD: 20/10/2011 - 10:28:36 - [11,178] ----D C:\Program Files (x86)\XRECODE
O43 - CFD: 19/10/2011 - 18:16:49 - [22,435] ----D C:\Program Files (x86)\xrecode II
O43 - CFD: 19/10/2011 - 18:20:25 - [0,292] ----D C:\Program Files (x86)\xTremSplit
O43 - CFD: 24/08/2012 - 13:11:26 - [12,790] ----D C:\Program Files (x86)\ZHPDiag
O43 - CFD: 20/10/2011 - 10:19:03 - [196,375] ----D C:\Program Files (x86)\Common Files\Acronis
O43 - CFD: 19/10/2011 - 14:19:02 - [5,962] ----D C:\Program Files (x86)\Common Files\Adobe
O43 - CFD: 19/10/2011 - 15:33:01 - [0,324] ----D C:\Program Files (x86)\Common Files\ATI Technologies
O43 - CFD: 19/10/2011 - 14:26:56 - [67,017] ----D C:\Program Files (x86)\Common Files\AVSMedia
O43 - CFD: 20/10/2011 - 12:05:38 - [16,193] ----D C:\Program Files (x86)\Common Files\DVDVideoSoft
O43 - CFD: 23/08/2012 - 19:07:19 - [311,511] ----D C:\Program Files (x86)\Common Files\INCAInternet
O43 - CFD: 23/08/2012 - 19:02:21 - [1,184] ----D C:\Program Files (x86)\Common Files\Java
O43 - CFD: 26/10/2011 - 13:47:41 - [10,561] ----D C:\Program Files (x86)\Common Files\microsoft shared
O43 - CFD: 14/07/2009 - 05:20:08 - [0,003] ----D C:\Program Files (x86)\Common Files\Services
O43 - CFD: 09/05/2012 - 22:01:11 - [2,056] ----D C:\Program Files (x86)\Common Files\Skype
O43 - CFD: 14/07/2009 - 05:20:08 - [39,200] ----D C:\Program Files (x86)\Common Files\SpeechEngines
O43 - CFD: 09/11/2011 - 13:39:53 - [9,767] ----D C:\Program Files (x86)\Common Files\System
O43 - CFD: 26/10/2011 - 13:45:55 - [0] ----D C:\Program Files (x86)\Common Files\Windows Live
O43 - CFD: 08/11/2011 - 23:31:05 - [0,336] ----D C:\Program Files (x86)\Common Files\xing shared
~ Scan Program Folder in 00mn 26s



---\\ Derniers fichiers modifiés ou crées sous Windows et System32 (O44)
O44 - LFC:[MD5.1470BA16485FEC8349424D2A471A4FDB] - 24/08/2012 - 12:07:21 ---A- . (...) -- C:\Windows\ntbtlog.txt   [47820]
O44 - LFC:[MD5.75E4454FE9A634600EA5126B193D66E1] - 24/08/2012 - 12:07:18 -S-A- . (...) -- C:\Windows\bootstat.dat   [67584]
O44 - LFC:[MD5.640DAD2C12AB9C0D0D3070666B6CCF80] - 24/08/2012 - 12:06:10 ---A- . (...) -- C:\Windows\setupact.log   [224]
O44 - LFC:[MD5.E7EE761C482C45EB4BE2A6E10A06CF94] - 24/08/2012 - 12:05:33  . (...) -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0   []
O44 - LFC:[MD5.E7EE761C482C45EB4BE2A6E10A06CF94] - 24/08/2012 - 12:05:33  . (...) -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0   []]
O44 - LFC:[MD5.E7EE761C482C45EB4BE2A6E10A06CF94] - 24/08/2012 - 12:05:33 --HA- . (...) -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0   [16000]
O44 - LFC:[MD5.E7EE761C482C45EB4BE2A6E10A06CF94] - 24/08/2012 - 12:05:33 --HA- . (...) -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0   [16000]
O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 24/08/2012 - 11:23:13 ---A- . (...) -- C:\Windows\setuperr.log   [0]
O44 - LFC:[MD5.D302614FA1C3C2012F4680D4ACD14F9D] - 23/08/2012 - 21:36:41 ---A- . (.ShieldApps - PC Registry Shield.) -- C:\Windows\SysNative\roboot64.exe   [20680]
O44 - LFC:[MD5.4F4A6F43C3D17141290FBF5701767F22] - 23/08/2012 - 18:07:26 ---A- . (.INCA Internet Co., Ltd. - Tachyon Anti-Virus Driver  2.0.) -- C:\Windows\SysNative\TKFsAv64.sys   [132416]
O44 - LFC:[MD5.4F4A6F43C3D17141290FBF5701767F22] - 23/08/2012 - 18:07:26 ---A- . (.INCA Internet Co., Ltd. - Tachyon Anti-Virus Driver  2.0.) -- C:\Windows\System32\TKFsAv64.sys   [132416]
O44 - LFC:[MD5.7859951700B16CC8ACB1C7F8B3800603] - 23/08/2012 - 18:07:26 ---A- . (.INCA Internet Co., Ltd. - Tachyon Anti-Virus Driver Installer 2.0.) -- C:\Windows\SysNative\DrvInst32.exe   [61760]
O44 - LFC:[MD5.7859951700B16CC8ACB1C7F8B3800603] - 23/08/2012 - 18:07:26 ---A- . (.INCA Internet Co., Ltd. - Tachyon Anti-Virus Driver Installer 2.0.) -- C:\Windows\System32\DrvInst32.exe   [61760]
O44 - LFC:[MD5.14A4E61E08814569A5AB18200FC1A56E] - 23/08/2012 - 18:07:26 ---A- . (.INCA Internet Co., Ltd. - Tachyon File System MiniFilter Driver 2.0.) -- C:\Windows\SysNative\TKFsFt64.sys   [22848]
O44 - LFC:[MD5.14A4E61E08814569A5AB18200FC1A56E] - 23/08/2012 - 18:07:26 ---A- . (.INCA Internet Co., Ltd. - Tachyon File System MiniFilter Driver 2.0.) -- C:\Windows\System32\TKFsFt64.sys   [22848]
O44 - LFC:[MD5.9638CBC32E752C61BE3D2AC5F128A572] - 23/08/2012 - 18:07:26 ---A- . (.INCA Internet Co., Ltd. - Tachyon Firewall LW Filter Driver.) -- C:\Windows\SysNative\tkfwfv64.sys   [34400]
O44 - LFC:[MD5.9638CBC32E752C61BE3D2AC5F128A572] - 23/08/2012 - 18:07:26 ---A- . (.INCA Internet Co., Ltd. - Tachyon Firewall LW Filter Driver.) -- C:\Windows\System32\tkfwfv64.sys   [34400]
O44 - LFC:[MD5.61DFFC37C46F7C2EE95CCEC104C02A77] - 23/08/2012 - 18:07:26 ---A- . (.INCA Internet Co., Ltd. - Tachyon Kernel Control DLL 1.0.) -- C:\Windows\SysNative\TKCtrlU.dll   [233792]
O44 - LFC:[MD5.61DFFC37C46F7C2EE95CCEC104C02A77] - 23/08/2012 - 18:07:26 ---A- . (.INCA Internet Co., Ltd. - Tachyon Kernel Control DLL 1.0.) -- C:\Windows\System32\TKCtrlU.dll   [233792]
O44 - LFC:[MD5.05353582FFC6F1D82CA17E29632AACCE] - 23/08/2012 - 18:07:26 ---A- . (.INCA Internet Co., Ltd. - Tachyon Kernel Control Driver 1.0.) -- C:\Windows\SysNative\TKCtrl2k.sys   [75200]
O44 - LFC:[MD5.1CF999CC5203EA82B1E05B50AFA32DF4] - 23/08/2012 - 18:07:26 ---A- . (.INCA Internet Co., Ltd. - Tachyon Kernel Control Driver 1.0.) -- C:\Windows\SysNative\TKCtrl2k64.sys   [72000]
O44 - LFC:[MD5.05353582FFC6F1D82CA17E29632AACCE] - 23/08/2012 - 18:07:26 ---A- . (.INCA Internet Co., Ltd. - Tachyon Kernel Control Driver 1.0.) -- C:\Windows\System32\TKCtrl2k.sys   [75200]
O44 - LFC:[MD5.1CF999CC5203EA82B1E05B50AFA32DF4] - 23/08/2012 - 18:07:26 ---A- . (.INCA Internet Co., Ltd. - Tachyon Kernel Control Driver 1.0.) -- C:\Windows\System32\TKCtrl2k64.sys   [72000]
O44 - LFC:[MD5.01A50EEC759C0B6B4ED5DB21636F68BA] - 23/08/2012 - 18:07:26 ---A- . (.INCA Internet Co., Ltd. - Tachyon Process Control Filter Driver 1.0.) -- C:\Windows\SysNative\TKPcFtCb64.sys   [23872]
O44 - LFC:[MD5.71252A997A8799439D573C9A12EAD4FE] - 23/08/2012 - 18:07:26 ---A- . (.INCA Internet Co., Ltd. - Tachyon Process Control Filter Driver 1.0.) -- C:\Windows\SysNative\TKPcFtHk64.sys   [24384]
O44 - LFC:[MD5.01A50EEC759C0B6B4ED5DB21636F68BA] - 23/08/2012 - 18:07:26 ---A- . (.INCA Internet Co., Ltd. - Tachyon Process Control Filter Driver 1.0.) -- C:\Windows\System32\TKPcFtCb64.sys   [23872]
O44 - LFC:[MD5.71252A997A8799439D573C9A12EAD4FE] - 23/08/2012 - 18:07:26 ---A- . (.INCA Internet Co., Ltd. - Tachyon Process Control Filter Driver 1.0.) -- C:\Windows\System32\TKPcFtHk64.sys   [24384]
O44 - LFC:[MD5.521D57E0AC21874EC2624A2B89E81125] - 23/08/2012 - 18:07:26 ---A- . (.INCA Internet Co., Ltd. - Tachyon Registry Access Control Driver.) -- C:\Windows\SysNative\TKRgAc2k64.sys   [84800]
O44 - LFC:[MD5.521D57E0AC21874EC2624A2B89E81125] - 23/08/2012 - 18:07:26 ---A- . (.INCA Internet Co., Ltd. - Tachyon Registry Access Control Driver.) -- C:\Windows\System32\TKRgAc2k64.sys   [84800]
O44 - LFC:[MD5.92E1EE0D25E9AB941D7A1112F4594288] - 23/08/2012 - 18:07:26 ---A- . (.INCA Internet Co., Ltd. - Tachyon Registry Filter Driver(XP Later).) -- C:\Windows\SysNative\TKRgFtXp64.sys   [35136]
O44 - LFC:[MD5.92E1EE0D25E9AB941D7A1112F4594288] - 23/08/2012 - 18:07:26 ---A- . (.INCA Internet Co., Ltd. - Tachyon Registry Filter Driver(XP Later).) -- C:\Windows\System32\TKRgFtXp64.sys   [35136]
O44 - LFC:[MD5.D81F9FA3CF6C24233BDB6ECCD94170EF] - 23/08/2012 - 18:07:26 ---A- . (.INCA Internet Co., Ltd. - Tachyon Tools Driver 1.0.) -- C:\Windows\SysNative\TKTool2k64.sys   [34112]
O44 - LFC:[MD5.D81F9FA3CF6C24233BDB6ECCD94170EF] - 23/08/2012 - 18:07:26 ---A- . (.INCA Internet Co., Ltd. - Tachyon Tools Driver 1.0.) -- C:\Windows\System32\TKTool2k64.sys   [34112]
O44 - LFC:[MD5.97E94F5859FFF9F5C27F201AF6C82599] - 23/08/2012 - 18:07:26 ---A- . (.INCA Internet Co.,Ltd. - Tachyon Firewall Core Driver.) -- C:\Windows\SysNative\tkfwvt64.sys   [179520]
O44 - LFC:[MD5.97E94F5859FFF9F5C27F201AF6C82599] - 23/08/2012 - 18:07:26 ---A- . (.INCA Internet Co.,Ltd. - Tachyon Firewall Core Driver.) -- C:\Windows\System32\tkfwvt64.sys   [179520]
O44 - LFC:[MD5.C91CD17CDDC035891994280AF3AE69E3] - 23/08/2012 - 18:07:26 ---A- . (.INCA Internet Co.,Ltd. - Tachyon IDS Core Driver 1.0.) -- C:\Windows\System32\tkidsvt64.sys   [99136]
O44 - LFC:[MD5.C91CD17CDDC035891994280AF3AE69E3] - 23/08/2012 - 18:07:26 ---A- . (.INCA Internet Co.,Ltd. - Tachyon IDS Core Driver 2.0.) -- C:\Windows\SysNative\tkidsvt64.sys   [99136]
O44 - LFC:[MD5.A254FF3B87C8B221CD93A79AE2233228] - 23/08/2012 - 18:07:26 ---A- . (.INCA Internet Co.,Ltd. - nProtect Anti-Virus/Spyware Shell Extension.) -- C:\Windows\SysNative\nspavcm64.dll   [331776]
O44 - LFC:[MD5.C9F26D00493F0496337EA051AA1FAA61] - 23/08/2012 - 18:07:26 ---A- . (.INCA Internet Co.,Ltd. - nProtect Anti-Virus/Spyware Shell Extension.) -- C:\Windows\SysNative\nspavcr64.dll   [820224]
O44 - LFC:[MD5.A254FF3B87C8B221CD93A79AE2233228] - 23/08/2012 - 18:07:26 ---A- . (.INCA Internet Co.,Ltd. - nProtect Anti-Virus/Spyware Shell Extension.) -- C:\Windows\System32\nspavcm64.dll   [331776]
O44 - LFC:[MD5.C9F26D00493F0496337EA051AA1FAA61] - 23/08/2012 - 18:07:26 ---A- . (.INCA Internet Co.,Ltd. - nProtect Anti-Virus/Spyware Shell Extension.) -- C:\Windows\System32\nspavcr64.dll   [820224]
O44 - LFC:[MD5.4B7A3C218BBC57BF4798CFDE4491F705] - 20/08/2012 - 19:24:03 ---A- . (...) -- C:\user.js   [1501]
O44 - LFC:[MD5.DD0DB67E186D24574AF3FE93634BD20A] - 18/08/2012 - 17:59:43 ---A- . (...) -- C:\Windows\SysNative\PerfStringBackup.INI   [1592414]
O44 - LFC:[MD5.0D4BBC6F95FA4DF25A657AC1213AC91D] - 18/08/2012 - 17:59:43 ---A- . (...) -- C:\Windows\SysNative\perfc009.dat   [109434]
O44 - LFC:[MD5.18B1E3038B61E2E19DD1C5DA81AE9757] - 18/08/2012 - 17:59:43 ---A- . (...) -- C:\Windows\SysNative\perfc00C.dat   [133792]
O44 - LFC:[MD5.84DEF939C808BE019D9EE2D92108A10A] - 18/08/2012 - 17:59:43 ---A- . (...) -- C:\Windows\SysNative\perfh009.dat   [622938]
O44 - LFC:[MD5.BC52CD28D8A8F60C669FE5495D4D9277] - 18/08/2012 - 17:59:43 ---A- . (...) -- C:\Windows\SysNative\perfh00C.dat   [711370]
O44 - LFC:[MD5.DD0DB67E186D24574AF3FE93634BD20A] - 18/08/2012 - 17:59:43 ---A- . (...) -- C:\Windows\System32\PerfStringBackup.INI   [1592414]
O44 - LFC:[MD5.230D9BDE39CFD51CB24474E0CBE67FFA] - 17/08/2012 - 13:38:05 ---A- . (...) -- C:\Windows\SysNative\FNTCACHE.DAT   [285096]
O44 - LFC:[MD5.F59F2C574AA5D84477EB89F87C938F16] - 15/08/2012 - 14:19:34 ---A- . (...) -- C:\Windows\System32\Drivers\fsbts.sys   [56016]
O44 - LFC:[MD5.456462905091DB042141487FE030E3C9] - 06/08/2012 - 13:27:26 ---A- . (.Indigo Rose Corporation - SUF60Runtime.) -- C:\Windows\iun6002.exe   [737280]
O44 - LFC:[MD5.97A7070AEA4C058B6418519E869A63B4] - 02/06/2012 - 06:48:16  . (...) -- C:\Windows\System32\Drivers\ksecdd.sys   [56016]]]
O44 - LFC:[MD5.26C43A7C2862447EC59DEDA188D1DA07] - 02/06/2012 - 06:48:16  . (...) -- C:\Windows\System32\Drivers\ksecpkg.sys   [56016]]]]
O44 - LFC:[MD5.53E83F1F6CF9D62F32801CF66D8352A8] - 01/05/2012 - 06:40:20  . (...) -- C:\Windows\System32\profsvc.dll   [1592414]]
O44 - LFC:[MD5.E61608AA35E98999AF9AAEEEA6114B0A] - 28/04/2012 - 04:55:21  . (...) -- C:\Windows\System32\Drivers\rdpwd.sys   [56016]]]]]]
O44 - LFC:[MD5.E9766131EEADE40A27DC27D2D68FBA9C] - 17/03/2012 - 08:58:57  . (...) -- C:\Windows\System32\Drivers\partmgr.sys   [56016]]]]]
O44 - LFC:[MD5.6BD9295CC032DD3077C671FCCF579A7B] - 01/03/2012 - 07:46:16  . (...) -- C:\Windows\System32\Drivers\fs_rec.sys   [56016]]
O44 - LFC:[MD5.A23384DD0AA6E75A67C43085FB0B4FDF] - 28/03/2011 - 09:55:58 ---A- . (...) -- C:\Windows\SysNative\TKFsFt.inf   [4691]
O44 - LFC:[MD5.A0D37811119C7077E569846409C676BE] - 28/03/2011 - 09:55:58 ---A- . (...) -- C:\Windows\SysNative\tkfwfv.inf   [4779]
O44 - LFC:[MD5.03CA1284C0D1EC9F785CC2D99ECF4A69] - 28/03/2011 - 09:55:58 ---A- . (...) -- C:\Windows\SysNative\tkfwfv64.cat   [7422]
O44 - LFC:[MD5.A23384DD0AA6E75A67C43085FB0B4FDF] - 28/03/2011 - 09:55:58 ---A- . (...) -- C:\Windows\System32\TKFsFt.inf   [4691]
O44 - LFC:[MD5.A0D37811119C7077E569846409C676BE] - 28/03/2011 - 09:55:58 ---A- . (...) -- C:\Windows\System32\tkfwfv.inf   [4779]
O44 - LFC:[MD5.03CA1284C0D1EC9F785CC2D99ECF4A69] - 28/03/2011 - 09:55:58 ---A- . (...) -- C:\Windows\System32\tkfwfv64.cat   [7422]
~ Scan Files in 00mn 05s



---\\ Derniers fichiers créés dans Windows Prefetcher (O45)
O45 - LFCP:[MD5.3EB7FE68219DA7E5B6BF824A12371345] - 06/08/2012 - 13:51:27 ---A- - C:\Windows\Prefetch\AgCx_S2_S-1-5-21-2779052862-2464013104-2090727237-1004.snp.db
O45 - LFCP:[MD5.C31CA1C2C6544F97C8F7D853CE850FEA] - 11/08/2012 - 20:34:51 ---A- - C:\Windows\Prefetch\AgCx_S1_S-1-5-21-2779052862-2464013104-2090727237-1004.snp.db
O45 - LFCP:[MD5.7D20537F4303DC319699FD63AE3E6E49] - 11/08/2012 - 21:20:10 ---A- - C:\Windows\Prefetch\AgCx_S2_S-1-5-21-2779052862-2464013104-2090727237-1000.snp.db
O45 - LFCP:[MD5.B45EE030DB1C47569C3A0E90052559F3] - 11/08/2012 - 21:22:31 ---A- - C:\Windows\Prefetch\AgCx_SC3_E4BFED8BA1A2D5D4.db
O45 - LFCP:[MD5.1776FB0C61615C7C4C45520863434D13] - 21/08/2012 - 10:42:06 ---A- - C:\Windows\Prefetch\NTOSBOOT-B00DFAAD.pf
O45 - LFCP:[MD5.DF00F25A7C381AC140D224CF13D0C674] - 22/08/2012 - 12:44:52 ---A- - C:\Windows\Prefetch\AgCx_S1_S-1-5-21-2779052862-2464013104-2090727237-1000.snp.db
O45 - LFCP:[MD5.008F52D0B5D78128743331CC018FA60E] - 22/08/2012 - 12:47:55 ---A- - C:\Windows\Prefetch\AgGlUAD_P_S-1-5-21-2779052862-2464013104-2090727237-1000.db
O45 - LFCP:[MD5.71B41FC824B8EBA52770D0263539A4A7] - 22/08/2012 - 12:47:55 ---A- - C:\Windows\Prefetch\AgGlUAD_S-1-5-21-2779052862-2464013104-2090727237-1000.db
O45 - LFCP:[MD5.C5529EFA0663C393E4D494851ED5C9E4] - 23/08/2012 - 10:49:17 ---A- - C:\Windows\Prefetch\IMINENT.MESSENGERS.EXE-72EF668E.pf
O45 - LFCP:[MD5.A4463DB038FB10C40BAB898A376CE4C1] - 23/08/2012 - 10:49:17 ---A- - C:\Windows\Prefetch\SWEETPACKSUPDATEMANAGER.EXE-A59F0A23.pf
O45 - LFCP:[MD5.679D0E6D3CAC59242997159CFD5D261A] - 23/08/2012 - 10:51:11 ---A- - C:\Windows\Prefetch\RUNDLL32.EXE-997812D9.pf
O45 - LFCP:[MD5.EB1D317B5E8F800CDE26F7558659641D] - 23/08/2012 - 10:51:17 ---A- - C:\Windows\Prefetch\DOWNLOADER_NOSTALE_FR.EXE-860BDC5B.pf
O45 - LFCP:[MD5.7C4CB9C0C8EC8A3118C1190E71A4D3EE] - 23/08/2012 - 10:51:18 ---A- - C:\Windows\Prefetch\DOWNLOADER_NOSTALE_FR.TMP-C1523AD8.pf
O45 - LFCP:[MD5.05557589C45348A6980959337349228B] - 23/08/2012 - 10:58:28 ---A- - C:\Windows\Prefetch\RUNDLL32.EXE-58863F79.pf
O45 - LFCP:[MD5.5CA49D9BCB8F88A19DEC3522F5FEFCF1] - 23/08/2012 - 11:28:06 ---A- - C:\Windows\Prefetch\TS3CLIENT_WIN64.EXE-DE5E204A.pf
O45 - LFCP:[MD5.52DC87BA4695B618232F43BEE43553F0] - 23/08/2012 - 11:28:31 ---A- - C:\Windows\Prefetch\NOSTALE_FR_20120724.EXE-2AA3BEEA.pf
O45 - LFCP:[MD5.09A4E5010C99DE133DF4369FF1DAD452] - 23/08/2012 - 11:28:40 ---A- - C:\Windows\Prefetch\NOSTALE_FR_20120724.TMP-54F5FF31.pf
O45 - LFCP:[MD5.23B73ADACC82C0D60788094EF5C2EB69] - 23/08/2012 - 11:29:08 ---A- - C:\Windows\Prefetch\NOSTALE_FR_20120724.TMP-E1AD1145.pf
O45 - LFCP:[MD5.4FC608050336679133065EDCAAF412CA] - 23/08/2012 - 11:31:41 ---A- - C:\Windows\Prefetch\NOSTALE.EXE-70C0DADD.pf
O45 - LFCP:[MD5.E4B540817BB3AE34A66A1D61DABEF59E] - 23/08/2012 - 11:32:48 ---A- - C:\Windows\Prefetch\NOSTALEX.DAT-71F3A188.pf
O45 - LFCP:[MD5.03C3DD4527F8F421F3225C40CC705EDB] - 23/08/2012 - 12:05:01 ---A- - C:\Windows\Prefetch\JAVA.EXE-648423CD.pf
O45 - LFCP:[MD5.BB31E6D61DF795A5BA20CE89A711CD66] - 23/08/2012 - 12:35:06 ---A- - C:\Windows\Prefetch\Layout.ini
O45 - LFCP:[MD5.8107540DA53C4FAFC6DD3F8281014B9D] - 23/08/2012 - 12:45:35 ---A- - C:\Windows\Prefetch\RUNDLL32.EXE-F395D72E.pf
O45 - LFCP:[MD5.4140B59B83087FBFC387D04BF474F55D] - 23/08/2012 - 13:20:56 ---A- - C:\Windows\Prefetch\RUNDLL32.EXE-125D4518.pf
O45 - LFCP:[MD5.8E7DC9CA745C98E1995BFE1C5A0B38F2] - 23/08/2012 - 16:01:25 ---A- - C:\Windows\Prefetch\BUBBLE DOCK.EXE-16BAEE64.pf
O45 - LFCP:[MD5.C00E99875FF648EA6E35927CCB9C6402] - 23/08/2012 - 16:01:36 ---A- - C:\Windows\Prefetch\AgCx_SC4.db
O45 - LFCP:[MD5.4CD820915EB85B53DE2D618FE2333E65] - 23/08/2012 - 17:43:41 ---A- - C:\Windows\Prefetch\BLACKSHOT_EU_SETUP.EXE-FA36C420.pf
O45 - LFCP:[MD5.C41C55A49DEB75E23F2300E34BC0F5F0] - 23/08/2012 - 17:47:12 ---A- - C:\Windows\Prefetch\AgGlUAD_P_S-1-5-21-2779052862-2464013104-2090727237-1004.db
O45 - LFCP:[MD5.C3FBC1C196138DB9C2DEA7068A7C7660] - 23/08/2012 - 17:47:12 ---A- - C:\Windows\Prefetch\AgGlUAD_S-1-5-21-2779052862-2464013104-2090727237-1004.db
O45 - LFCP:[MD5.D0237688FA20916CB822ADDE901F1883] - 23/08/2012 - 17:48:31 ---A- - C:\Windows\Prefetch\BLACKSHOT_EU_MANUALPATCH_0-0--80757720.pf
O45 - LFCP:[MD5.D46CB09E2AB9B4211FFF526EEDBB51EC] - 23/08/2012 - 17:55:05 ---A- - C:\Windows\Prefetch\AUDIODG.EXE-D0D776AC.pf
O45 - LFCP:[MD5.E8BA65B127440AEAB80FF0C617AAC6F7] - 23/08/2012 - 17:57:06 ---A- - C:\Windows\Prefetch\BINGBAR.EXE-D742C570.pf
O45 - LFCP:[MD5.A3F6579C31901AE6B3FD0255CDA67277] - 23/08/2012 - 17:57:11 ---A- - C:\Windows\Prefetch\BINGAPP.EXE-214C63C4.pf
O45 - LFCP:[MD5.53EAD957C6BF8E1008315E973201B50D] - 23/08/2012 - 17:58:49 ---A- - C:\Windows\Prefetch\RUNDLL32.EXE-995F97D0.pf
O45 - LFCP:[MD5.368C0D7F8B10FA55FFF615EC18C203B2] - 23/08/2012 - 17:59:01 ---A- - C:\Windows\Prefetch\PATCHER.EXE-3A3E5127.pf
O45 - LFCP:[MD5.D44C949BAA71459BA2B4DBA11FE55238] - 23/08/2012 - 18:00:45 ---A- - C:\Windows\Prefetch\CHROMEINSTALL-7U6.EXE-F2123C50.pf
O45 - LFCP:[MD5.859D83FF1622A57BDDCDDAB4A792BC15] - 23/08/2012 - 18:01:40 ---A- - C:\Windows\Prefetch\MSIF4BF.TMP-F651359B.pf
O45 - LFCP:[MD5.1634F0432AA70DABF4BA8206446BE7C9] - 23/08/2012 - 18:01:47 ---A- - C:\Windows\Prefetch\MSIFCB.TMP-37353AC6.pf
O45 - LFCP:[MD5.605A3951CC5716A4FC97B5DAED2ED303] - 23/08/2012 - 18:01:50 ---A- - C:\Windows\Prefetch\JQS.EXE-C2929C09.pf
O45 - LFCP:[MD5.6D72D895DAC10B61BEB1A2DF3D977DD2] - 23/08/2012 - 18:02:05 ---A- - C:\Windows\Prefetch\UNPACK200.EXE-44FB799F.pf
O45 - LFCP:[MD5.329AA2FE704DA1D07E5459A5E8DD8C2E] - 23/08/2012 - 18:02:11 ---A- - C:\Windows\Prefetch\CMD.EXE-EABFE48B.pf
O45 - LFCP:[MD5.78AE4F80002AA445435F8A63927595AD] - 23/08/2012 - 18:02:11 ---A- - C:\Windows\Prefetch\JAVAW.EXE-F222D1F8.pf
O45 - LFCP:[MD5.D3F564D27B541A8E1B8F13E608D947F1] - 23/08/2012 - 18:02:11 ---A- - C:\Windows\Prefetch\JQS.EXE-AD09DED6.pf
O45 - LFCP:[MD5.71D261A1BBD198E34DBB8B52CEF7EF96] - 23/08/2012 - 18:02:11 ---A- - C:\Windows\Prefetch\WMIC.EXE-5077AF5A.pf
O45 - LFCP:[MD5.3466A5E177491FB57A445F33452DDAAE] - 23/08/2012 - 18:02:21 ---A- - C:\Windows\Prefetch\JAUREG.EXE-439CCDE9.pf
O45 - LFCP:[MD5.D717D26A8F2A8F1E9A1012748204451B] - 23/08/2012 - 18:02:32 ---A- - C:\Windows\Prefetch\GAMEMON.DES-F9E7C894.pf
O45 - LFCP:[MD5.2AD9769F4609D6A39D0D6AD548C9F0BB] - 23/08/2012 - 18:02:34 ---A- - C:\Windows\Prefetch\BLACKSHOT.EXE-DAFFC6E8.pf
O45 - LFCP:[MD5.DE4E6F04F88ED5BD3C0253F02F852BD4] - 23/08/2012 - 18:02:36 ---A- - C:\Windows\Prefetch\GAMEGUARD.DES-B40823AC.pf
O45 - LFCP:[MD5.B0E458FD81268B53176849773C7E5592] - 23/08/2012 - 18:03:01 ---A- - C:\Windows\Prefetch\GGERROR.DES-A379CAC0.pf
O45 - LFCP:[MD5.E16D3236AF7C41BE6147741873B7B765] - 23/08/2012 - 18:03:12 ---A- - C:\Windows\Prefetch\IEXPLORE.EXE-F6A52C86.pf
O45 - LFCP:[MD5.0F6C174D45DDA8E329CE41CD52911781] - 23/08/2012 - 18:03:15 ---A- - C:\Windows\Prefetch\BABYLONTOOLBARSRV.EXE-868E1A50.pf
O45 - LFCP:[MD5.EF49A92C729A7FB83A6877D5BCAAEFEE] - 23/08/2012 - 18:03:19 ---A- - C:\Windows\Prefetch\COMPANIONUSER.EXE-E28738E2.pf
O45 - LFCP:[MD5.7AE2331DABE24F56654ADB55F1AC5222] - 23/08/2012 - 18:03:19 ---A- - C:\Windows\Prefetch\IMVU_INCTOOLBARHELPER1.EXE-95C987CC.pf
O45 - LFCP:[MD5.95882BD4ECAF53E6E199E2FB272C6A56] - 23/08/2012 - 18:04:09 ---A- - C:\Windows\Prefetch\GGP3D_GLOBAL.EXE-728B49A8.pf
O45 - LFCP:[MD5.B5BB060FAC2DC03E72B1AF3AEBFF2225] - 23/08/2012 - 18:04:22 ---A- - C:\Windows\Prefetch\DLLHOST.EXE-1A07FAB8.pf
O45 - LFCP:[MD5.68CAB7AEB7274AF7B6C20DAD3ADCCE96] - 23/08/2012 - 18:05:28 ---A- - C:\Windows\Prefetch\RUNDLL32.EXE-E72DFB89.pf
O45 - LFCP:[MD5.61F8AF31E93D73F790E796ADDA017BA9] - 23/08/2012 - 18:06:49 ---A- - C:\Windows\Prefetch\$ND1B4F.EXE-672ABC40.pf
O45 - LFCP:[MD5.353776177462114A35DB3EF5FA4F0207] - 23/08/2012 - 18:06:56 ---A- - C:\Windows\Prefetch\WSCRIPT.EXE-A36E1053.pf
O45 - LFCP:[MD5.86D802DDDCAE45EC65F844E66F82FDED] - 23/08/2012 - 18:07:00 ---A- - C:\Windows\Prefetch\ISBEW64.EXE-D19F2D47.pf
O45 - LFCP:[MD5.19F6EE27ABDADE07F8D375F345BE6849] - 23/08/2012 - 18:07:01 ---A- - C:\Windows\Prefetch\DLLHOST.EXE-C5C55E89.pf
O45 - LFCP:[MD5.857190FD2EFABC1C7A08DCD4EBC2D177] - 23/08/2012 - 18:10:56 ---A- - C:\Windows\Prefetch\C2C_SERVICE.EXE-96DB3E07.pf
O45 - LFCP:[MD5.32AB457B79BCD70DA5267FDF6BAD09C5] - 23/08/2012 - 18:10:56 ---A- - C:\Windows\Prefetch\FSHDLL64.EXE-46637C9A.pf
O45 - LFCP:[MD5.716F1BF26780EF8BCEF9BDA39EA16450] - 23/08/2012 - 18:10:56 ---A- - C:\Windows\Prefetch\FSSTM.EXE-B3C573B9.pf
O45 - LFCP:[MD5.7BBC38149115F9808DC0674430491816] - 23/08/2012 - 18:10:56 ---A- - C:\Windows\Prefetch\SEAPORT.EXE-C86485DD.pf
O45 - LFCP:[MD5.B940B60ADD9B633768E8AA87B5F29289] - 23/08/2012 - 18:10:56 ---A- - C:\Windows\Prefetch\SVCHOST.EXE-7488A139.pf
O45 - LFCP:[MD5.12C951273F8F6A5D808773F84EA8394D] - 23/08/2012 - 18:10:56 ---A- - C:\Windows\Prefetch\UPDATER.EXE-2B61A9D6.pf
O45 - LFCP:[MD5.0700117C959065A8F64213AA827EC8A6] - 23/08/2012 - 20:36:58 ---A- - C:\Windows\Prefetch\FSDFWD.EXE-19DDCB75.pf
O45 - LFCP:[MD5.741BAA4504FED58040385C27FB94421E] - 23/08/2012 - 20:37:29 ---A- - C:\Windows\Prefetch\RELPOST.EXE-E4D0A138.pf
O45 - LFCP:[MD5.E2BDBB17578E95E4C7AB654278F01CF0] - 23/08/2012 - 20:50:24 ---A- - C:\Windows\Prefetch\CONTROL.EXE-9459D5A0.pf
O45 - LFCP:[MD5.3A1FEE916486E0EF444FA61B29F5B34F] - 23/08/2012 - 20:51:55 ---A- - C:\Windows\Prefetch\AGCP.EXE-F78C24D4.pf
O45 - LFCP:[MD5.C03897ABD2B844767B944E306F4578BA] - 23/08/2012 - 21:01:09 ---A- - C:\Windows\Prefetch\FSORSP.EXE-5E7BD682.pf
O45 - LFCP:[MD5.1B4B8399DBC0F6B54120C78DFEF180F4] - 23/08/2012 - 21:09:01 ---A- - C:\Windows\Prefetch\FSHDLL32.EXE-EF60B3D9.pf
O45 - LFCP:[MD5.BA14C6E9278258EFEDCFA72BEC1979B0] - 23/08/2012 - 21:09:01 ---A- - C:\Windows\Prefetch\NSPSVC.EXE-26568A19.pf
O45 - LFCP:[MD5.DDCF21686C6DBBE4A67F3FE022772593] - 23/08/2012 - 21:20:03 ---A- - C:\Windows\Prefetch\DLLHOST.EXE-71214090.pf
O45 - LFCP:[MD5.4E893559E434BA6C91B4B6C65CC0BE29] - 23/08/2012 - 21:28:13 ---A- - C:\Windows\Prefetch\DWM.EXE-AEABE78B.pf
O45 - LFCP:[MD5.919E0AE734F38FD12B6F68F5A097BB65] - 23/08/2012 - 21:28:13 ---A- - C:\Windows\Prefetch\EXPLORER.EXE-7A3328DA.pf
O45 - LFCP:[MD5.AA917967DA8945F429B33BEC0DFF523B] - 23/08/2012 - 21:28:13 ---A- - C:\Windows\Prefetch\RUNONCE.EXE-E33ED995.pf
O45 - LFCP:[MD5.9BCD28194A44701F8F29FFE930647322] - 23/08/2012 - 21:28:13 ---A- - C:\Windows\Prefetch\USERINIT.EXE-F39AB672.pf
O45 - LFCP:[MD5.6042F4145F34CB8B56BCDBF0D47E89B2] - 24/08/2012 - 08:56:06 ---A- - C:\Windows\Prefetch\SVCHOST.EXE-4D8DA32A.pf
O45 - LFCP:[MD5.47D70366E89DF849EA4AF5D373126B2A] - 24/08/2012 - 08:56:08 ---A- - C:\Windows\Prefetch\FSSM32.EXE-01BCA4FA.pf
O45 - LFCP:[MD5.59B86F4CF378EE756BE1A73A5755CE3B] - 24/08/2012 - 08:56:38 ---A- - C:\Windows\Prefetch\WUDFHOST.EXE-81420B07.pf
O45 - LFCP:[MD5.689D2E138F1001E9B1A249C792242A3C] - 24/08/2012 - 09:18:16 ---A- - C:\Windows\Prefetch\SVCHOST.EXE-93CEEE07.pf
O45 - LFCP:[MD5.8061F72C87000EC08AEBDEC68B7AB84D] - 24/08/2012 - 09:18:16 ---A- - C:\Windows\Prefetch\WERFAULT.EXE-0897AE09.pf
O45 - LFCP:[MD5.1D7A47F923AD6A995F845C952AB8F268] - 24/08/2012 - 09:22:47 ---A- - C:\Windows\Prefetch\NSPUPDT.EXE-62A9D70F.pf
O45 - LFCP:[MD5.09C691E81754093733D9D1A4B40A2094] - 24/08/2012 - 10:25:27 ---A- - C:\Windows\Prefetch\REALUPGRADE.EXE-BD0B3A94.pf
O45 - LFCP:[MD5.6D16AB5AB157708FC864BCFD58E9CC69] - 24/08/2012 - 10:25:48 ---A- - C:\Windows\Prefetch\HL2.EXE-5BD79A72.pf
O45 - LFCP:[MD5.2ACC283DAD6FC9C553F2F2E98C947D3D] - 24/08/2012 - 10:29:44 ---A- - C:\Windows\Prefetch\CLI.EXE-05184825.pf
O45 - LFCP:[MD5.DF8C1DE3923A7FE3730E5414ED836F41] - 24/08/2012 - 10:30:01 ---A- - C:\Windows\Prefetch\LOGONUI.EXE-1BEE4A84.pf
O45 - LFCP:[MD5.3F636A5DF3235EB9368E63FC99A37DA7] - 24/08/2012 - 10:30:02 ---A- - C:\Windows\Prefetch\DRVINST.EXE-5F8E77CD.pf
O45 - LFCP:[MD5.910B975A8DE26C6290487155B2AFFE1B] - 24/08/2012 - 10:30:21 ---A- - C:\Windows\Prefetch\MSIEXEC.EXE-B5AFA339.pf
O45 - LFCP:[MD5.AC8CC5534C05D6273888AAA331CB5B6B] - 24/08/2012 - 10:30:21 ---A- - C:\Windows\Prefetch\MSIEXEC.EXE-F3744DFD.pf
O45 - LFCP:[MD5.3C346B2FE5113367CC0DBF781FCE3B80] - 24/08/2012 - 10:30:46 ---A- - C:\Windows\Prefetch\NSPUPSVC.EXE-AA9D3662.pf
O45 - LFCP:[MD5.6C058A8E8D1B4C2ECA7ACA1FD5A36CD4] - 24/08/2012 - 10:33:38 ---A- - C:\Windows\Prefetch\FSSCOEPL_X64.EXE-B5EAE52C.pf
O45 - LFCP:[MD5.B1523F46D66738D0BB2B199BA7E7A0A3] - 24/08/2012 - 10:39:19 ---A- - C:\Windows\Prefetch\TKNETCFG64.EXE-6765D787.pf
O45 - LFCP:[MD5.B4F4A69E868E911F183D792FF3B50390] - 24/08/2012 - 10:39:25 ---A- - C:\Windows\Prefetch\SVCHOST.EXE-DB4C36D7.pf
O45 - LFCP:[MD5.CA990AF1A69ACA5E3E64F1D76F289B85] - 24/08/2012 - 10:40:03 ---A- - C:\Windows\Prefetch\FSAV32.EXE-7321E22D.pf
O45 - LFCP:[MD5.9196F8C8EF10DF03ED3880C203C1FF50] - 24/08/2012 - 10:40:05 ---A- - C:\Windows\Prefetch\CCC.EXE-000FEDE2.pf
O45 - LFCP:[MD5.C69067913BAFE7F20FF7455182E72AF3] - 24/08/2012 - 10:40:11 ---A- - C:\Windows\Prefetch\CVTRES.EXE-08B82D67.pf
O45 - LFCP:[MD5.3D1D8D3D042914853E31F750748115FD] - 24/08/2012 - 10:40:12 ---A- - C:\Windows\Prefetch\CSC.EXE-F7BE4369.pf
O45 - LFCP:[MD5.EAFA4C701937BE748ADDB67E3233D7E8] - 24/08/2012 - 10:40:32 ---A- - C:\Windows\Prefetch\WMIPRVSE.EXE-94D7CB13.pf
O45 - LFCP:[MD5.FC5D7DC38F9A69A4411AF6FDF471D2B0] - 24/08/2012 - 10:40:39 ---A- - C:\Windows\Prefetch\WLCOMM.EXE-E2DE41A5.pf
O45 - LFCP:[MD5.409FDBBABA336D0D016DEB3ADD5EDC13] - 24/08/2012 - 10:40:50 ---A- - C:\Windows\Prefetch\MMLOADDRV.EXE-A4E6DB4B.pf
O45 - LFCP:[MD5.DD7B0BED0ED1EB6FE811079F88A17566] - 24/08/2012 - 10:40:55 ---A- - C:\Windows\Prefetch\SPPSVC.EXE-CBE91656.pf
O45 - LFCP:[MD5.F9F62B47576297CBD54E22CD9D0B1D8B] - 24/08/2012 - 10:41:03 ---A- - C:\Windows\Prefetch\DRVINST32.EXE-DED1681E.pf
O45 - LFCP:[MD5.482E5B030BDD98DEC84FED094508E8D2] - 24/08/2012 - 10:41:56 ---A- - C:\Windows\Prefetch\PRESENTATIONFONTCACHE.EXE-3C65D73B.pf
O45 - LFCP:[MD5.966A03810F70D8D6EFE7A1CD7B9744D4] - 24/08/2012 - 10:42:31 ---A- - C:\Windows\Prefetch\TRUSTEDINSTALLER.EXE-031B6478.pf
O45 - LFCP:[MD5.D5EAEAD29D08B946AB4B3EB64AC6F19C] - 24/08/2012 - 10:42:41 ---A- - C:\Windows\Prefetch\WMIADAP.EXE-369DF1CD.pf
O45 - LFCP:[MD5.07347F4A6097DD86FDA6A091AC9715DD] - 24/08/2012 - 10:43:29 ---A- - C:\Windows\Prefetch\SDCLT.EXE-2D2C4DDD.pf
O45 - LFCP:[MD5.FB7ABE2BB70EF7828116A3514FB42326] - 24/08/2012 - 10:43:39 ---A- - C:\Windows\Prefetch\SVCHOST.EXE-F59CA9BD.pf
O45 - LFCP:[MD5.358DAB8317A734B18907FC02A8457C42] - 24/08/2012 - 10:45:10 ---A- - C:\Windows\Prefetch\SEARCHFILTERHOST.EXE-AA7A1FDD.pf
O45 - LFCP:[MD5.5EECA9FCD44B5076F6D661047C42AE95] - 24/08/2012 - 10:45:10 ---A- - C:\Windows\Prefetch\SEARCHPROTOCOLHOST.EXE-AFAD3EF9.pf
O45 - LFCP:[MD5.4787BD21CA2BED600B1E54F2078B3904] - 24/08/2012 - 10:51:26 ---A- - C:\Windows\Prefetch\WERMGR.EXE-2A1BCBC7.pf
O45 - LFCP:[MD5.28552167C2AE1A94607A87F1307877EA] - 24/08/2012 - 10:51:28 ---A- - C:\Windows\Prefetch\RUNDLL32.EXE-D40FB18A.pf
O45 - LFCP:[MD5.317A2C3F9D89D8EB49A56E8F4BF6B968] - 24/08/2012 - 10:53:32 ---A- - C:\Windows\Prefetch\DLLHOST.EXE-FA51C347.pf
O45 - LFCP:[MD5.3B89C24D40314EE9870DCE0852E0801F] - 24/08/2012 - 11:00:01 ---A- - C:\Windows\Prefetch\FLASHPLAYERUPDATESERVICE.EXE-41B177B8.pf
O45 - LFCP:[MD5.B293EB1858B1CBB064EC0CF05FECF498] - 24/08/2012 - 11:05:00 ---A- - C:\Windows\Prefetch\TASKHOST.EXE-437C05A8.pf
O45 - LFCP:[MD5.8B1E9BE7FAD16056413117EB38BE4A1A] - 24/08/2012 - 11:08:53 ---A- - C:\Windows\Prefetch\WMIPRVSE.EXE-43972D0F.pf
O45 - LFCP:[MD5.C7303EF6254BE5852CCBF48668ED4E76] - 24/08/2012 - 11:12:32 ---A- - C:\Windows\Prefetch\FSMA32.EXE-8EDF3543.pf
O45 - LFCP:[MD5.63AA936E6DA7B73A612783C902408A36] - 24/08/2012 - 11:12:32 ---A- - C:\Windows\Prefetch\SPOOLSV.EXE-E4D0FF39.pf
O45 - LFCP:[MD5.26DCF6537178A41CA565CFE54942EECD] - 24/08/2012 - 11:12:53 ---A- - C:\Windows\Prefetch\SCHEDHLP.EXE-8686688D.pf
O45 - LFCP:[MD5.AF3D169038BAEE14E7CE3FCD9A247942] - 24/08/2012 - 11:13:03 ---A- - C:\Windows\Prefetch\JUSCHED.EXE-EBD2DB11.pf
O45 - LFCP:[MD5.CB16F09F1E67DF9835842F7A03D6D172] - 24/08/2012 - 11:13:03 ---A- - C:\Windows\Prefetch\SWEETIM.EXE-65CDB3C1.pf
O45 - LFCP:[MD5.3AC3FFBA38BF4FF5326F7CE8F72CEA4D] - 24/08/2012 - 11:13:09 ---A- - C:\Windows\Prefetch\IMINENT.EXE-C6929EEC.pf
O45 - LFCP:[MD5.6F75CE5DFB862536AEB3CD1EB81C0020] - 24/08/2012 - 11:13:09 ---A- - C:\Windows\Prefetch\MSNMSGR.EXE-9A1DBD1F.pf
O45 - LFCP:[MD5.DED8675A63BC4113E6F0491B6AE7C253] - 24/08/2012 - 11:25:53 ---A- - C:\Windows\Prefetch\DLLHOST.EXE-893DDF55.pf
O45 - LFCP:[MD5.EFCD9726EB6722F64DC91663051C3762] - 24/08/2012 - 11:25:53 ---A- - C:\Windows\Prefetch\FSGK32.EXE-F003A974.pf
O45 - LFCP:[MD5.70FB4F5E95FC9BF9BF7AB28C446685E3] - 24/08/2012 - 11:25:53 ---A- - C:\Windows\Prefetch\FSGK32ST.EXE-20953B9F.pf
O45 - LFCP:[MD5.C0776C905284B937EFF0C6E9D86036A8] - 24/08/2012 - 11:25:53 ---A- - C:\Windows\Prefetch\SVCHOST.EXE-135A30D8.pf
O45 - LFCP:[MD5.42A9AB0EC21262EB161ECDDCC699E568] - 24/08/2012 - 11:26:15 ---A- - C:\Windows\Prefetch\REALPLAY.EXE-FFA104B3.pf
O45 - LFCP:[MD5.2D6C79826DA21EB8AFA766862A2179EB] - 24/08/2012 - 11:26:26 ---A- - C:\Windows\Prefetch\SEARCHINDEXER.EXE-77D27BAC.pf
O45 - LFCP:[MD5.D03FE4994816313FDF08CB2623F1A079] - 24/08/2012 - 11:26:27 ---A- - C:\Windows\Prefetch\REGSVR32.EXE-55A4EE79.pf
O45 - LFCP:[MD5.EF8F5A425C813D1E308F0FE64191F937] - 24/08/2012 - 11:26:28 ---A- - C:\Windows\Prefetch\CHROME.EXE-5FE9909D.pf
O45 - LFCP:[MD5.85473C2126C619814885A5D2D62DB420] - 24/08/2012 - 12:05:04 ---A- - C:\Windows\Prefetch\GOOGLEUPDATE.EXE-648FB068.pf
O45 - LFCP:[MD5.96FBCF4EAAEDBE8E771D7BBB22C2A55F] - 24/08/2012 - 12:05:12 ---A- - C:\Windows\Prefetch\TASKENG.EXE-5BAF290C.pf
O45 - LFCP:[MD5.6287601338343E6DDB7E2F26046CDE31] - 24/08/2012 - 12:05:24 ---A- - C:\Windows\Prefetch\MSCORSVW.EXE-FAA88858.pf
O45 - LFCP:[MD5.3571E5D54D7D0F1DFD84B9E5CCAAD30E] - 24/08/2012 - 12:05:25 ---A- - C:\Windows\Prefetch\MSCORSVW.EXE-98F0699A.pf
O45 - LFCP:[MD5.9F606AD8FA453D7C313DF05823AEA72D] - 24/08/2012 - 12:05:27 ---A- - C:\Windows\Prefetch\CONHOST.EXE-3218E401.pf
O45 - LFCP:[MD5.A2AC36AEEE3775CC11C7878C32ADBCA1] - 24/08/2012 - 12:05:27 ---A- - C:\Windows\Prefetch\FSWSCS.EXE-D87B9E34.pf
O45 - LFCP:[MD5.FAFF560BC74F0C4F7820B8E7CAA8E2B7] - 24/08/2012 - 12:05:30 ---A- - C:\Windows\Prefetch\AgRobust.db
O45 - LFCP:[MD5.7606D231010CEE55FE322E0B0BC9FA83] - 24/08/2012 - 12:05:30 ---A- - C:\Windows\Prefetch\PfSvPerfStats.bin
O45 - LFCP:[MD5.9966A91BC3F01791A1B6F03C5B095D23] - 24/08/2012 - 12:05:31 ---A- - C:\Windows\Prefetch\AgGlFaultHistory.db
O45 - LFCP:[MD5.23CA5E33FE1BE84D49794FBC2101389D] - 24/08/2012 - 12:05:31 ---A- - C:\Windows\Prefetch\AgGlFgAppHistory.db
O45 - LFCP:[MD5.D5B468EB45730BDC25FF5CBD679D6FEE] - 24/08/2012 - 12:05:31 ---A- - C:\Windows\Prefetch\AgGlGlobalHistory.db
~ Scan Prefetcher in 00mn 02s



---\\ Déni du service (Local Security Authority) (O48)
O48 - LSA:Local Security Authority Authentication Packages . (.Microsoft Corporation - Microsoft Authentication Package v1.0.) -- C:\Windows\System32\msv1_0.dll
O48 - LSA:Local Security Authority Authentication Packages . (.Acronis - Acronis Relogon Authentication Package.) -- C:\Windows\System32\relog_ap.dll
O48 - LSA:Local Security Authority Notification Packages . (.Microsoft Corporation - Moteur du client de l’Éditeur de configuration de sécurité Windows.) -- C:\Windows\System32\scecli.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Package de sécurité Kerberos.) -- C:\Windows\System32\kerberos.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Microsoft Authentication Package v1.0.) -- C:\Windows\System32\msv1_0.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - TLS / SSL Security Provider.) -- C:\Windows\System32\schannel.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Microsoft Digest Access.) -- C:\Windows\System32\wdigest.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Web Service Security Package.) -- C:\Windows\System32\tspkg.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Pku2u Security Package.) -- C:\Windows\System32\pku2u.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corp. - LiveSSP.) -- C:\Windows\System32\livessp.dll
~ Scan Keys in 00mn 00s



---\\ Contrôle du Safe Boot (CSB) (O49)
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\sermouse.sys . (.Microsoft Corporation - Pilote de filtre souris série.) -- C:\Windows\System32\Drivers\sermouse.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\vga.sys . (.Microsoft Corporation - VGA/Super VGA Video Driver.) -- C:\Windows\System32\Drivers\vga.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\vgasave.sys . (...) -- C:\Windows\System32\Drivers\vgasave.sys (.not file.)
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\volmgr.sys . (.Microsoft Corporation - Volume Manager Driver.) -- C:\Windows\System32\Drivers\volmgr.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\volmgrx.sys . (.Microsoft Corporation - Pilote d’extension du gestionnaire de volumes.) -- C:\Windows\System32\Drivers\volmgrx.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\ipnat.sys . (.Microsoft Corporation - IP Network Address Translator.) -- C:\Windows\System32\Drivers\ipnat.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\nsiproxy.sys . (.Microsoft Corporation - NSI Proxy.) -- C:\Windows\System32\Drivers\nsiproxy.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\rdpencdd.sys . (.Microsoft Corporation - RDP Encoder Miniport.) -- C:\Windows\System32\Drivers\rdpencdd.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\sermouse.sys . (.Microsoft Corporation - Pilote de filtre souris série.) -- C:\Windows\System32\Drivers\sermouse.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\vga.sys . (.Microsoft Corporation - VGA/Super VGA Video Driver.) -- C:\Windows\System32\Drivers\vga.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\vgasave.sys . (...) -- C:\Windows\System32\Drivers\vgasave.sys (.not file.)
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\volmgr.sys . (.Microsoft Corporation - Volume Manager Driver.) -- C:\Windows\System32\Drivers\volmgr.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\volmgrx.sys . (.Microsoft Corporation - Pilote d’extension du gestionnaire de volumes.) -- C:\Windows\System32\Drivers\volmgrx.sys
~ Scan CSB in 00mn 00s



---\\ MountPoints2 Shell Key (O51) (None)

---\\ Trojan Driver Search Data (HKLM) (O52)
O52 - TDSD: \Drivers32\"msacm.l3acm"="C:\Windows\System32\l3codeca.acm" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\Windows\System32\l3codeca.acm
O52 - TDSD: \drivers.desc\"C:\Windows\System32\l3codeca.acm"="Fraunhofer IIS MPEG Layer-3 Codec" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\Windows\System32\l3codeca.acm
~ Scan Keys in 00mn 00s



---\\ ShareTools MSconfig StartupReg (O53)
O53 - SMSR:HKLM\...\startupreg\Adobe ARM  [Key] . (.Adobe Systems Incorporated - Adobe Reader and Acrobat Manager.) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
O53 - SMSR:HKLM\...\startupreg\Adobe Reader Speed Launcher  [Key] . (.Adobe Systems Incorporated - Adobe Acrobat SpeedLauncher.) -- C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe
O53 - SMSR:HKLM\...\startupreg\ApnUpdater  [Key] . (.{StringFileInfo_CompanyName} - {StringFileInfo_FileDescription}.) -- C:\Program Files (x86)\Ask.com\Updater\Updater.exe
O53 - SMSR:HKLM\...\startupreg\CloneCDTray  [Key] . (.SlySoft, Inc. - CloneCD Tray.) -- C:\Program Files (x86)\SlySoft\CloneCD\CloneCDTray.exe
O53 - SMSR:HKLM\...\startupreg\DAEMON Tools Lite  [Key] . (.DT Soft Ltd - DAEMON Tools Lite.) -- C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe
O53 - SMSR:HKLM\...\startupreg\SunJavaUpdateSched  [Key] . (.Sun Microsystems, Inc. - Java(TM) Update Scheduler.) -- C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
~ Scan SMSR Keys in 00mn 00s



---\\ Microsoft Control Security Providers (O54)
O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Microsoft Corporation - Credential Delegation Security Package.) -- C:\Windows\System32\credssp.dll
O54 - MCSP:[HKLM\...\ControlSet001\Control] - (SecurityProviders) - (.Microsoft Corporation - Credential Delegation Security Package.) -- C:\Windows\System32\credssp.dll
~ Scan Keys in 00mn 00s



---\\ Microsoft Windows Policies System (O55)
O55 - MWPS:[HKLM\...\Policies\System] - "ConsentPromptBehaviorAdmin"=0
O55 - MWPS:[HKLM\...\Policies\System] - "ConsentPromptBehaviorUser"=3
O55 - MWPS:[HKLM\...\Policies\System] - "EnableInstallerDetection"=1
O55 - MWPS:[HKLM\...\Policies\System] - "EnableLUA"=0
O55 - MWPS:[HKLM\...\Policies\System] - "EnableSecureUIAPaths"=1
O55 - MWPS:[HKLM\...\Policies\System] - "EnableUIADesktopToggle"=0
O55 - MWPS:[HKLM\...\Policies\System] - "EnableVirtualization"=1
O55 - MWPS:[HKLM\...\Policies\System] - "PromptOnSecureDesktop"=0
O55 - MWPS:[HKLM\...\Policies\System] - "ValidateAdminCodeSignatures"=0
O55 - MWPS:[HKLM\...\Policies\System] - "dontdisplaylastusername"=0
O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticecaption"=0
O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticetext"=0
O55 - MWPS:[HKLM\...\Policies\System] - "scforceoption"=0
O55 - MWPS:[HKLM\...\Policies\System] - "shutdownwithoutlogon"=1
O55 - MWPS:[HKLM\...\Policies\System] - "undockwithoutlogon"=1
O55 - MWPS:[HKLM\...\Policies\System] - "FilterAdministratorToken"=0
~ Scan Keys in 00mn 00s



---\\ Microsoft Windows Policies Explorer (O56)
O56 - MWPE:[HKCU\...\policies\Explorer] - "NoDriveTypeAutoRun"=145
O56 - MWPE:[HKLM\...\policies\Explorer] - "NoActiveDesktop"=1
O56 - MWPE:[HKLM\...\policies\Explorer] - "NoActiveDesktopChanges"=0
O56 - MWPE:[HKLM\...\policies\Explorer] - "ForceActiveDesktopOn"=0
~ Scan Keys in 00mn 00s



---\\ Liste des Drivers Système (O58)
O58 - SDL:[MD5.2F6B34B83843F0C5118B63AC634F5BF4] - 14/07/2009 - 02:52:21 ---A- . (.Adaptec, Inc. - Adaptec Windows SAS/SATA Storport Driver.) -- C:\Windows\System32\Drivers\adp94xx.sys   [491088]
O58 - SDL:[MD5.05353582FFC6F1D82CA17E29632AACCE] - 18/07/2011 - 10:33:28 ---A- . (.INCA Internet Co., Ltd. - Tachyon Kernel Control Driver 1.0.) -- C:\Windows\System32\TKCtrl2k.sys   [75200]
O58 - SDL:[MD5.9387A484D31209D7FC3F795A787294DB] - 16/02/2007 - 01:57:06 ---A- . (.SlySoft, Inc. - ElbyCDIO Filter Driver.) -- C:\Windows\SysWOW64\drivers\ElbyCDFL.sys   [40648]
O58 - SDL:[MD5.9ABA8F91057BE63B1D8FA2A7048B220C] - 15/06/2011 - 10:20:32 ---A- . (.INCA Internet Co.,Ltd. - nProtect Firewall Core Driver.) -- C:\Windows\SysWOW64\npfw.sys   [108736]
~ Scan Drivers in 00mn 00s



---\\ Derniers fichiers modifiés ou crées (Utilisateur) (O61)
O61 - LFC:Last File Created 21/08/2012 - 10:44:05 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_byou.solution.weborama.fr_0.localstorage-journal   [12896]
O61 - LFC:Last File Created 21/08/2012 - 10:49:45 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_r.turn.com_0.localstorage-journal   [12896]
O61 - LFC:Last File Created 21/08/2012 - 10:53:40 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.doctrine-malikite.fr_0.localstorage-journal   [12896]
O61 - LFC:Last File Created 21/08/2012 - 10:53:59 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_edge.sharethis.com_0.localstorage-journal   [11864]
O61 - LFC:Last File Created 21/08/2012 - 10:53:59 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_mejliss.com_0.localstorage-journal   [11864]
O61 - LFC:Last File Created 21/08/2012 - 10:53:59 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_pub.oumma.com_0.localstorage-journal   [11864]
O61 - LFC:Last File Created 21/08/2012 - 10:54:54 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_oussoul.over-blog.com_0.localstorage-journal   [12896]
O61 - LFC:Last File Created 21/08/2012 - 10:55:50 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_hlehvcge38.s.ad6media.fr_0.localstorage-journal   [3608]
O61 - LFC:Last File Created 21/08/2012 - 10:56:06 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_aka-cdn-ns.adtech.de_0.localstorage-journal   [12896]
O61 - LFC:Last File Created 21/08/2012 - 10:56:07 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_salafya.over-blog.com_0.localstorage-journal   [12896]
O61 - LFC:Last File Created 21/08/2012 - 10:56:53 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_3ilm.char3i.over-blog.com_0.localstorage-journal   [12896]
O61 - LFC:Last File Created 21/08/2012 - 10:57:50 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.typepad.com_0.localstorage-journal   [11864]
O61 - LFC:Last File Created 21/08/2012 - 10:57:51 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.ahloul-hadith.fr_0.localstorage-journal   [12896]
O61 - LFC:Last File Created 21/08/2012 - 10:58:25 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.ansar-alhaqq.net_0.localstorage-journal   [11864]
O61 - LFC:Last File Created 21/08/2012 - 10:58:49 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_sn1msg3010719.gateway.messenger.live.com_0.localstorage-journal   [12896]
O61 - LFC:Last File Created 21/08/2012 - 10:58:51 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_sn1msg1020240.sn1.gateway.edge.messenger.live.com_0.localstorage-journal   [12896]
O61 - LFC:Last File Created 21/08/2012 - 11:02:43 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.hadithdujour.com_0.localstorage-journal   [12896]
O61 - LFC:Last File Created 21/08/2012 - 12:08:07 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_bi.wooga.com_0.localstorage-journal   [12896]
O61 - LFC:Last File Created 21/08/2012 - 12:08:07 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_openx.wooga.com_0.localstorage-journal   [12896]
O61 - LFC:Last File Created 21/08/2012 - 12:13:32 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_apps.facebook.com_0.localstorage-journal   [12896]
O61 - LFC:Last File Created 21/08/2012 - 13:01:01 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_ads2srv.com_0.localstorage-journal   [12896]
O61 - LFC:Last File Created 21/08/2012 - 13:03:30 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_d15gt9gwxw5wu0.cloudfront.net_0.localstorage-journal   [12896]
O61 - LFC:Last File Created 21/08/2012 - 18:15:28 ---A- C:\Users\Hamza\AppData\Roaming\Real\Msg\Messages.dat   [302]
O61 - LFC:Last File Created 21/08/2012 - 18:17:12 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_sn1msg1020139.sn1.gateway.edge.messenger.live.com_0.localstorage-journal   [11864]
O61 - LFC:Last File Created 21/08/2012 - 18:21:06 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_ad-g.doubleclick.net_0.localstorage-journal   [12896]
O61 - LFC:Last File Created 21/08/2012 - 18:21:06 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_n74.hal9000.redintelligence.net_0.localstorage-journal   [3608]
O61 - LFC:Last File Created 21/08/2012 - 18:21:07 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_d1.openx.org_0.localstorage-journal   [12896]
O61 - LFC:Last File Created 21/08/2012 - 18:21:07 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_n11.hal9000.redintelligence.net_0.localstorage-journal   [12896]
O61 - LFC:Last File Created 21/08/2012 - 18:21:07 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_s.as997.de_0.localstorage-journal   [12896]
O61 - LFC:Last File Created 21/08/2012 - 18:21:26 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_secure.trusted-serving.com_0.localstorage-journal   [3608]
O61 - LFC:Last File Created 21/08/2012 - 18:30:07 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_lp.adult-r-rencontres.com_0.localstorage-journal   [4640]
O61 - LFC:Last File Created 21/08/2012 - 18:30:18 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.stardoll.com_0.localstorage-journal   [12896]
O61 - LFC:Last File Created 21/08/2012 - 18:30:22 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.becoquin.fr_0.localstorage-journal   [11864]
O61 - LFC:Last File Created 21/08/2012 - 18:33:29 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.inchallah.com_0.localstorage-journal   [12896]
O61 - LFC:Last File Created 21/08/2012 - 19:14:08 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_register.fr.perfectworld.eu_0.localstorage-journal   [12896]
O61 - LFC:Last File Created 21/08/2012 - 20:21:32 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_p4-ak24hwslynxxc-j4mya6w6ryxzysex-if-v6exp3-v4.metric.gstatic.com_0.localstorage-journal   [11864]
O61 - LFC:Last File Created 21/08/2012 - 20:22:25 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_ads.moviease.com_0.localstorage-journal   [11864]
O61 - LFC:Last File Created 21/08/2012 - 20:22:27 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.megavod.fr_0.localstorage-journal   [12896]
O61 - LFC:Last File Created 21/08/2012 - 20:22:28 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.jeuxgratuit.org_0.localstorage-journal   [12896]
O61 - LFC:Last File Created 21/08/2012 - 20:22:29 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_rainbow-de.mythings.com_0.localstorage-journal   [11864]
O61 - LFC:Last File Created 21/08/2012 - 20:22:29 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.lightinthebox.com_0.localstorage-journal   [11864]
O61 - LFC:Last File Created 21/08/2012 - 20:22:30 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_dis.criteo.com_0.localstorage-journal   [11864]
O61 - LFC:Last File Created 21/08/2012 - 20:24:01 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_p4-ew2vu3ftwjjnm-yaqqhnfwhytlp3k6-if-v6exp3-v4.metric.gstatic.com_0.localstorage-journal   [11864]
O61 - LFC:Last File Created 21/08/2012 - 20:25:34 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_p4-ep3cxgo5pdhq2-ed4pfnyh75joq2cc-if-v6exp3-v4.metric.gstatic.com_0.localstorage-journal   [11864]
O61 - LFC:Last File Created 21/08/2012 - 20:26:49 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_p4-hncvc7y2x2gxg-t3kb7ffx54ur2qcv-if-v6exp3-v4.metric.gstatic.com_0.localstorage-journal   [11864]
O61 - LFC:Last File Created 21/08/2012 - 20:28:42 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_cas.criteo.com_0.localstorage-journal   [12896]
O61 - LFC:Last File Created 21/08/2012 - 20:46:06 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_managore.bg_0.localstorage-journal   [12896]
O61 - LFC:Last File Created 21/08/2012 - 20:46:06 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.lesseigneurs.fr_0.localstorage-journal   [12896]
O61 - LFC:Last File Created 21/08/2012 - 21:42:16 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\5C298CGC\enstreaming.com\com.jeroenwijering.sol   [54]
O61 - LFC:Last File Created 21/08/2012 - 22:04:12 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_sn1msg1010539.sn1.gateway.edge.messenger.live.com_0.localstorage-journal   [8768]
O61 - LFC:Last File Created 21/08/2012 - 22:07:46 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.stream-happy.com_0.localstorage-journal   [12896]
O61 - LFC:Last File Created 21/08/2012 - 22:19:02 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\macromedia.com\support\flashplayer\sys\#www.stream-happy.com\settings.sol   [90]
O61 - LFC:Last File Created 21/08/2012 - 22:20:16 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_sn1msg3020432.sn1.gateway.edge.messenger.live.com_0.localstorage-journal   [11864]
O61 - LFC:Last File Created 22/08/2012 - 13:00:26 ---A- C:\Users\Hamza\AppData\Roaming\OpenOffice.org\3\user\extensions\shared\log.txt   [583]
O61 - LFC:Last File Created 22/08/2012 - 13:00:26 ---A- C:\Users\Hamza\AppData\Roaming\OpenOffice.org\3\user\registrymodifications.xcu   [22225]
O61 - LFC:Last File Created 22/08/2012 - 13:00:26 ---A- C:\Users\Hamza\AppData\Roaming\OpenOffice.org\3\user\uno_packages\cache\log.txt   [583]
O61 - LFC:Last File Created 22/08/2012 - 13:01:35 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_om.forgeofempires.com_0.localstorage-journal   [4640]
O61 - LFC:Last File Created 22/08/2012 - 13:01:57 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_mlgame.fr_0.localstorage-journal   [3608]
O61 - LFC:Last File Created 22/08/2012 - 13:01:58 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_ads.reelhd.com_0.localstorage-journal   [3608]
O61 - LFC:Last File Created 22/08/2012 - 13:02:08 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.woozgo.fr_0.localstorage-journal   [3608]
O61 - LFC:Last File Created 22/08/2012 - 13:03:53 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\macromedia.com\support\flashplayer\sys\#www.speedebrid.com\settings.sol   [88]
O61 - LFC:Last File Created 22/08/2012 - 13:03:54 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_fr.amoureux.com_0.localstorage-journal   [3608]
O61 - LFC:Last File Created 22/08/2012 - 13:04:35 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.gunbladesaga.fr_0.localstorage-journal   [3608]
O61 - LFC:Last File Created 22/08/2012 - 13:04:58 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\5C298CGC\www.speedebrid.com\analytics.sol   [419]
O61 - LFC:Last File Created 22/08/2012 - 13:05:12 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.speedebrid.com_0.localstorage-journal   [12896]
O61 - LFC:Last File Created 22/08/2012 - 13:50:49 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.ohmydollz.com_0.localstorage-journal   [3608]
O61 - LFC:Last File Created 22/08/2012 - 13:51:21 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.gridpix.net_0.localstorage-journal   [3608]
O61 - LFC:Last File Created 22/08/2012 - 14:30:02 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\macromedia.com\support\flashplayer\sys\#actuweb.net\settings.sol   [81]
O61 - LFC:Last File Created 22/08/2012 - 14:30:07 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_actuweb.net_0.localstorage-journal   [3608]
O61 - LFC:Last File Created 22/08/2012 - 14:30:40 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_forfait.mieuxchoisir.com_0.localstorage-journal   [3608]
O61 - LFC:Last File Created 22/08/2012 - 14:31:13 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.farmtastic.fr_0.localstorage-journal   [11864]
O61 - LFC:Last File Created 22/08/2012 - 14:31:33 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\macromedia.com\support\flashplayer\sys\#skiplimites.eu\settings.sol   [84]
O61 - LFC:Last File Created 22/08/2012 - 14:32:40 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.longtailvideo.com_0.localstorage-journal   [12896]
O61 - LFC:Last File Created 22/08/2012 - 14:32:47 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_skiplimites.eu_0.localstorage-journal   [12896]
O61 - LFC:Last File Created 22/08/2012 - 14:33:02 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_amoureux.com_0.localstorage-journal   [3608]
O61 - LFC:Last File Created 22/08/2012 - 14:34:18 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_maestia.fr.alaplaya.net_0.localstorage-journal   [3608]
O61 - LFC:Last File Created 22/08/2012 - 14:45:25 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_sn1msg1010740.sn1.gateway.edge.messenger.live.com_0.localstorage-journal   [12896]
O61 - LFC:Last File Created 22/08/2012 - 14:45:25 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_sn1msg3020428.gateway.messenger.live.com_0.localstorage-journal   [12896]
O61 - LFC:Last File Created 22/08/2012 - 14:47:39 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Login Data   [24576]
O61 - LFC:Last File Created 22/08/2012 - 14:47:39 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Login Data-journal   [8736]
O61 - LFC:Last File Created 22/08/2012 - 14:47:53 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_cti.w55c.net_0.localstorage-journal   [12896]
O61 - LFC:Last File Created 22/08/2012 - 14:47:53 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_pixel.invitemedia.com_0.localstorage-journal   [12896]
O61 - LFC:Last File Created 22/08/2012 - 14:48:46 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_tag.admeld.com_0.localstorage-journal   [12896]
O61 - LFC:Last File Created 22/08/2012 - 14:51:25 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_fr.ad4mat.net_0.localstorage-journal   [11864]
O61 - LFC:Last File Created 22/08/2012 - 14:51:37 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.todays-prizes.com_0.localstorage-journal   [3608]
O61 - LFC:Last File Created 22/08/2012 - 14:53:00 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.urban-rivals.com_0.localstorage-journal   [12896]
O61 - LFC:Last File Created 22/08/2012 - 14:53:05 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_www.cinamuse.com_0.localstorage-journal   [3608]
O61 - LFC:Last File Created 22/08/2012 - 14:53:11 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_trkjmp.com_0.localstorage-journal   [3608]
O61 - LFC:Last File Created 22/08/2012 - 14:53:21 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.blogger.com_0.localstorage-journal   [12896]
O61 - LFC:Last File Created 22/08/2012 - 14:53:22 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.feedcat.net_0.localstorage-journal   [12896]
O61 - LFC:Last File Created 22/08/2012 - 14:53:23 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_dg.specificclick.net_0.localstorage-journal   [12896]
O61 - LFC:Last File Created 22/08/2012 - 14:53:23 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_hapatchan.blogspot.fr_0.localstorage-journal   [12896]
O61 - LFC:Last File Created 22/08/2012 - 14:53:24 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_r1rk9np7bpcsfoeekl0khkd2juj27q3o-a-fc-opensocial.googleusercontent.com_0.localstorage-journal   [12896]
O61 - LFC:Last File Created 22/08/2012 - 14:53:25 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_feedjit.com_0.localstorage-journal   [12896]
O61 - LFC:Last File Created 22/08/2012 - 14:54:23 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.film-de-streaming.com_0.localstorage-journal   [12896]
O61 - LFC:Last File Created 22/08/2012 - 14:54:23 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.puredebrid.com_0.localstorage-journal   [12896]
O61 - LFC:Last File Created 22/08/2012 - 14:54:47 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.mktmobi.com_0.localstorage-journal   [12896]
O61 - LFC:Last File Created 22/08/2012 - 14:55:27 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_ad-emea.doubleclick.net_0.localstorage-journal   [12896]
O61 - LFC:Last File Created 22/08/2012 - 14:56:56 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_ads.smowtion.com_0.localstorage-journal   [12896]
O61 - LFC:Last File Created 22/08/2012 - 14:56:56 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.videonostop.com_0.localstorage-journal   [12896]
O61 - LFC:Last File Created 22/08/2012 - 14:57:44 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_ad.globaltakeoff.net_0.localstorage-journal   [12896]
O61 - LFC:Last File Created 22/08/2012 - 14:57:45 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.seriesnostop.com_0.localstorage-journal   [12896]
O61 - LFC:Last File Created 22/08/2012 - 14:58:23 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_7.rotator.wigetmedia.com_0.localstorage-journal   [3608]
O61 - LFC:Last File Created 22/08/2012 - 14:58:24 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.sexitnow.com_0.localstorage-journal   [3608]
O61 - LFC:Last File Created 22/08/2012 - 14:59:06 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_chrome.google.com_0.localstorage-journal   [3608]
O61 - LFC:Last File Created 22/08/2012 - 14:59:09 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_pbid.fxdepo.com_0.localstorage-journal   [12896]
O61 - LFC:Last File Created 22/08/2012 - 14:59:11 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_guitarizon.over-blog.com_0.localstorage-journal   [12896]
O61 - LFC:Last File Created 22/08/2012 - 14:59:11 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_s184071377.onlinehome.fr_0.localstorage-journal   [12896]
O61 - LFC:Last File Created 22/08/2012 - 14:59:22 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_77.92.76.215_0.localstorage-journal   [3608]
O61 - LFC:Last File Created 22/08/2012 - 14:59:29 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_adf.ly_0.localstorage-journal   [3608]
O61 - LFC:Last File Created 22/08/2012 - 14:59:50 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_fr.atlanticwavemusic.com_0.localstorage-journal   [3608]
O61 - LFC:Last File Created 22/08/2012 - 14:59:55 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\macromedia.com\support\flashplayer\sys\#www.allskip.com\settings.sol   [85]
O61 - LFC:Last File Created 22/08/2012 - 14:59:55 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\macromedia.com\support\flashplayer\sys\settings.sol   [1160]
O61 - LFC:Last File Created 22/08/2012 - 15:00:42 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.shoes.fr_0.localstorage-journal   [3608]
O61 - LFC:Last File Created 22/08/2012 - 15:00:44 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_rainbow-fr.mythings.com_0.localstorage-journal   [3608]
O61 - LFC:Last File Created 22/08/2012 - 15:00:44 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.lamodepourhomme.com_0.localstorage-journal   [11864]
O61 - LFC:Last File Created 22/08/2012 - 15:00:44 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.spartoo.com_0.localstorage-journal   [3608]
O61 - LFC:Last File Created 22/08/2012 - 15:01:10 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_ads.cpxcenter.com_0.localstorage-journal   [3608]
O61 - LFC:Last File Created 22/08/2012 - 15:42:04 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_ads.cineble.com_0.localstorage-journal   [12896]
O61 - LFC:Last File Created 22/08/2012 - 15:42:16 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.dpstream.net_0.localstorage-journal   [12896]
O61 - LFC:Last File Created 22/08/2012 - 15:42:17 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_ads.itshd.com_0.localstorage-journal   [12896]
O61 - LFC:Last File Created 22/08/2012 - 15:42:54 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_club.mobifiesta.com_0.localstorage-journal   [4640]
O61 - LFC:Last File Created 22/08/2012 - 15:43:16 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.angege.com_0.localstorage-journal   [3608]
O61 - LFC:Last File Created 22/08/2012 - 15:43:30 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_adsplatform.com_0.localstorage-journal   [3608]
O61 - LFC:Last File Created 22/08/2012 - 15:43:30 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.sexy-scanner.com_0.localstorage-journal   [12896]
O61 - LFC:Last File Created 22/08/2012 - 16:21:55 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.mobijeux.com_0.localstorage-journal   [3608]
O61 - LFC:Last File Created 22/08/2012 - 16:22:22 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_fr.iminent.com_0.localstorage-journal   [11864]
O61 - LFC:Last File Created 22/08/2012 - 16:22:47 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_a.rfihub.com_0.localstorage-journal   [12896]
O61 - LFC:Last File Created 22/08/2012 - 16:22:47 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_cas.fr.eu.criteo.com_0.localstorage-journal   [11864]
O61 - LFC:Last File Created 22/08/2012 - 16:22:53 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_ads.lzjl.com_0.localstorage-journal   [12896]
O61 - LFC:Last File Created 22/08/2012 - 16:23:07 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_109.74.196.205_0.localstorage-journal   [12896]
O61 - LFC:Last File Created 22/08/2012 - 16:23:08 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_ads.clicksor.com_0.localstorage-journal   [12896]
O61 - LFC:Last File Created 22/08/2012 - 16:23:09 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.allskip.com_0.localstorage-journal   [12896]
O61 - LFC:Last File Created 22/08/2012 - 16:25:33 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\5C298CGC\www.allskip.com\com.jeroenwijering.sol   [54]
O61 - LFC:Last File Created 22/08/2012 - 16:31:21 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_sn1msg3010806.sn1.gateway.edge.messenger.live.com_0.localstorage-journal   [12896]
O61 - LFC:Last File Created 22/08/2012 - 19:32:20 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\TransportSecurity   [8]
O61 - LFC:Last File Created 22/08/2012 - 19:33:13 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.guidemusulman.com_0.localstorage-journal   [12896]
O61 - LFC:Last File Created 22/08/2012 - 19:35:15 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.lesnulsenbourse.com_0.localstorage-journal   [3608]
O61 - LFC:Last File Created 22/08/2012 - 19:35:21 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_debmixture.com_0.localstorage-journal   [12896]
O61 - LFC:Last File Created 22/08/2012 - 19:36:19 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_lp.semater.com_0.localstorage-journal   [3608]
O61 - LFC:Last File Created 22/08/2012 - 19:36:26 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_debrideurs.over-blog.com_0.localstorage-journal   [12896]
O61 - LFC:Last File Created 22/08/2012 - 19:36:36 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.debrideurstreaming.com_0.localstorage-journal   [12896]
O61 - LFC:Last File Created 22/08/2012 - 20:30:43 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_fr.smeet.com_0.localstorage-journal   [12896]
O61 - LFC:Last File Created 22/08/2012 - 20:31:05 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.mobifiesta.com_0.localstorage-journal   [12896]
O61 - LFC:Last File Created 22/08/2012 - 21:14:34 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.jeu-a-telecharger.com_0.localstorage-journal   [12896]
O61 - LFC:Last File Created 22/08/2012 - 21:14:35 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.prizee.com_0.localstorage-journal   [12896]
O61 - LFC:Last File Created 22/08/2012 - 21:14:46 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.pubdirecte.com_0.localstorage-journal   [12896]
O61 - LFC:Last File Created 22/08/2012 - 21:14:49 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.mediadebrid.com_0.localstorage-journal   [12896]
O61 - LFC:Last File Created 22/08/2012 - 21:20:44 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\5C298CGC\www.mediadebrid.com\com.jeroenwijering.sol   [54]
O61 - LFC:Last File Created 22/08/2012 - 21:33:24 ---A- C:\Users\Hamza\AppData\Roaming\Iminent\Mediator\Datas\globalcache.dat   [1156096]
O61 - LFC:Last File Created 23/08/2012 - 10:51:02 ---A- C:\Users\Hamza\Downloads\Downloader_Nostale_FR.exe   [339580]
O61 - LFC:Last File Created 23/08/2012 - 10:54:49 ---A- C:\Users\Hamza\Downloads\Downloader_Nostale_FR (1).exe   [339580]
O61 - LFC:Last File Created 23/08/2012 - 10:55:10 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_track.popmog.com_0.localstorage-journal   [12896]
O61 - LFC:Last File Created 23/08/2012 - 10:55:49 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_sn1msg3020206.sn1.gateway.edge.messenger.live.com_0.localstorage-journal   [12896]
O61 - LFC:Last File Created 23/08/2012 - 10:58:16 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_sc.sweetim.com_0.localstorage-journal   [12896]
O61 - LFC:Last File Created 23/08/2012 - 10:58:17 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_d15gt9gwxw5wu0.cloudfront.net_0.localstorage-journal   [12896]
O61 - LFC:Last File Created 23/08/2012 - 11:13:56 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_login.live.com_0.localstorage-journal   [3608]
O61 - LFC:Last File Created 23/08/2012 - 11:15:55 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_muslim.xooit.com_0.localstorage-journal   [12896]
O61 - LFC:Last File Created 23/08/2012 - 11:16:03 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_geo.messenger.services.live.com_0.localstorage-journal   [12896]
O61 - LFC:Last File Created 23/08/2012 - 11:16:03 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_sn1msg2010830.gateway.messenger.live.com_0.localstorage-journal   [11864]
O61 - LFC:Last File Created 23/08/2012 - 11:16:07 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_fr.assabile.com_0.localstorage-journal   [12896]
O61 - LFC:Last File Created 23/08/2012 - 11:19:38 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.ogamenet.net_0.localstorage-journal   [3608]
O61 - LFC:Last File Created 23/08/2012 - 11:19:43 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_board.nostale.fr_0.localstorage-journal   [12896]
O61 - LFC:Last File Created 23/08/2012 - 11:26:57 ---A- C:\Users\Hamza\Downloads\NosTale_FR_20120724.exe   [1382899228]
O61 - LFC:Last File Created 23/08/2012 - 11:28:09 ---A- C:\Users\Hamza\AppData\Roaming\TS3Client\resolved.dat   [32]
O61 - LFC:Last File Created 23/08/2012 - 11:28:09 ---A- C:\Users\Hamza\AppData\Roaming\TS3Client\subscribemode.dat   [32]
O61 - LFC:Last File Created 23/08/2012 - 11:28:10 ---A- C:\Users\Hamza\AppData\Roaming\TS3Client\ts3clientui_qt.conf   [3399]
O61 - LFC:Last File Created 23/08/2012 - 12:08:28 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.vitalor.com_0.localstorage-journal   [12896]
O61 - LFC:Last File Created 23/08/2012 - 13:27:54 ---A- C:\Users\Hamza\AppData\Roaming\Skype\sunit-hamza\httpfe\cookies.dat   [125]
O61 - LFC:Last File Created 23/08/2012 - 16:01:02 ---A- C:\Users\Hamza\AppData\Roaming\Skype\sunit-hamza\main.lock   [0]
O61 - LFC:Last File Created 23/08/2012 - 16:01:02 ---A- C:\Users\Hamza\AppData\Roaming\Skype\sunit-hamza\msn.lock   [0]
O61 - LFC:Last File Created 23/08/2012 - 16:01:03 ---A- C:\Users\Hamza\AppData\Roaming\Skype\sunit-hamza\bistats.lock   [0]
O61 - LFC:Last File Created 23/08/2012 - 16:01:03 ---A- C:\Users\Hamza\AppData\Roaming\Skype\sunit-hamza\griffin.lock   [0]
O61 - LFC:Last File Created 23/08/2012 - 16:01:03 ---A- C:\Users\Hamza\AppData\Roaming\Skype\sunit-hamza\keyval.lock   [0]
O61 - LFC:Last File Created 23/08/2012 - 16:03:16 ---A- C:\Users\Hamza\AppData\Roaming\Skype\sunit-hamza\chatsync\6f\6fc255f9af9819a8.dat   [2717]
O61 - LFC:Last File Created 23/08/2012 - 16:07:08 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_igdhbblpcellaljokkpfhcjlagemhgjl_0.localstorage   [6144]
O61 - LFC:Last File Created 23/08/2012 - 16:07:08 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_igdhbblpcellaljokkpfhcjlagemhgjl_0.localstorage-journal   [6704]
O61 - LFC:Last File Created 23/08/2012 - 16:07:35 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.nostale.fr_0.localstorage-journal   [12896]
O61 - LFC:Last File Created 23/08/2012 - 16:08:54 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_www.youtube.com_0.localstorage-journal   [12896]
O61 - LFC:Last File Created 23/08/2012 - 16:10:05 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.twowar.com_0.localstorage-journal   [12896]
O61 - LFC:Last File Created 23/08/2012 - 16:11:54 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_co116w.col116.mail.live.com_0.localstorage-journal   [12896]
O61 - LFC:Last File Created 23/08/2012 - 16:11:56 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_sn1msg1010811.sn1.gateway.edge.messenger.live.com_0.localstorage-journal   [12896]
O61 - LFC:Last File Created 23/08/2012 - 16:11:56 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_sn1msg2010822.gateway.messenger.live.com_0.localstorage-journal   [12896]
O61 - LFC:Last File Created 23/08/2012 - 16:12:15 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_fr.wikipedia.org_0.localstorage-journal   [3608]
O61 - LFC:Last File Created 23/08/2012 - 16:12:25 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.hot-live-chat.com_0.localstorage-journal   [12896]
O61 - LFC:Last File Created 23/08/2012 - 16:12:30 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_fr.sevencore.gpotato.eu_0.localstorage-journal   [3608]
O61 - LFC:Last File Created 23/08/2012 - 16:12:51 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www2.adserverpub.com_0.localstorage-journal   [3608]
O61 - LFC:Last File Created 23/08/2012 - 16:12:53 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.easyvoyage.com_0.localstorage-journal   [12896]
O61 - LFC:Last File Created 23/08/2012 - 16:13:00 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.woozworld.com_0.localstorage-journal   [12896]
O61 - LFC:Last File Created 23/08/2012 - 16:13:15 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_enstreaming.com_0.localstorage-journal   [12896]
O61 - LFC:Last File Created 23/08/2012 - 16:19:56 ---A- C:\Users\Hamza\Downloads\BlackShot_EU_ManualPatch_0-0-91.exe   [102848442]
O61 - LFC:Last File Created 23/08/2012 - 16:33:54 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.affiliation-france.com_0.localstorage-journal   [12896]
O61 - LFC:Last File Created 23/08/2012 - 16:33:55 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_p4-d2ejqt5znvmbq-tzket5xxyx6n3lrt-if-v6exp3-v4.metric.gstatic.com_0.localstorage-journal   [12896]
O61 - LFC:Last File Created 23/08/2012 - 16:34:27 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\5C298CGC\s.ytimg.com\videostats.sol   [275]
O61 - LFC:Last File Created 23/08/2012 - 16:34:34 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.aeriagames.com_0.localstorage-journal   [12896]
O61 - LFC:Last File Created 23/08/2012 - 16:34:34 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.youtube.com_0.localstorage-journal   [12896]
O61 - LFC:Last File Created 23/08/2012 - 16:34:40 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_nxtck.com_0.localstorage-journal   [12896]
O61 - LFC:Last File Created 23/08/2012 - 16:34:47 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_om.1and1.fr_0.localstorage-journal   [12896]
O61 - LFC:Last File Created 23/08/2012 - 16:34:48 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_imagesrv.adition.com_0.localstorage-journal   [12896]
O61 - LFC:Last File Created 23/08/2012 - 16:55:18 ---A- C:\Users\Hamza\Downloads\BlackShot_EU_setup.exe   [1205826365]
O61 - LFC:Last File Created 23/08/2012 - 17:14:57 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.adcash.com_0.localstorage-journal   [12896]
O61 - LFC:Last File Created 23/08/2012 - 17:14:59 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.aionfreetoplay.com_0.localstorage-journal   [3608]
O61 - LFC:Last File Created 23/08/2012 - 17:15:23 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_d.advertstream.com_0.localstorage-journal   [12896]
O61 - LFC:Last File Created 23/08/2012 - 17:15:24 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_ad.yieldads.com_0.localstorage-journal   [12896]
O61 - LFC:Last File Created 23/08/2012 - 17:15:24 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_static.pubdirecte.com_0.localstorage-journal   [12896]
O61 - LFC:Last File Created 23/08/2012 - 17:15:24 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.cinemay.com_0.localstorage-journal   [12896]
O61 - LFC:Last File Created 23/08/2012 - 17:15:26 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_www.facebook.com_0.localstorage-journal   [12896]
O61 - LFC:Last File Created 23/08/2012 - 17:15:27 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_ct1.addthis.com_0.localstorage-journal   [12896]
O61 - LFC:Last File Created 23/08/2012 - 17:15:27 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.purevid.com_0.localstorage-journal   [12896]
O61 - LFC:Last File Created 23/08/2012 - 17:15:27 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_platform.twitter.com_0.localstorage-journal   [12896]
O61 - LFC:Last File Created 23/08/2012 - 17:15:28 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_seg.sharethis.com_0.localstorage-journal   [12896]
O61 - LFC:Last File Created 23/08/2012 - 17:15:45 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_mondebrideur.com_0.localstorage-journal   [12896]
O61 - LFC:Last File Created 23/08/2012 - 17:24:43 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Extensions\mpfapcdfbbledbojijcbcclmlieaoogk\1.19.71_0\background.html   [954]
O61 - LFC:Last File Created 23/08/2012 - 17:24:43 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Extensions\mpfapcdfbbledbojijcbcclmlieaoogk\1.19.71_0\crossriderManifest.json   [304]
O61 - LFC:Last File Created 23/08/2012 - 17:24:43 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Extensions\mpfapcdfbbledbojijcbcclmlieaoogk\1.19.71_0\icons\actions\icon1.png   [1223]
O61 - LFC:Last File Created 23/08/2012 - 17:24:43 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Extensions\mpfapcdfbbledbojijcbcclmlieaoogk\1.19.71_0\icons\icon128.png   [10177]
O61 - LFC:Last File Created 23/08/2012 - 17:24:43 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Extensions\mpfapcdfbbledbojijcbcclmlieaoogk\1.19.71_0\icons\icon16.png   [652]
O61 - LFC:Last File Created 23/08/2012 - 17:24:43 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Extensions\mpfapcdfbbledbojijcbcclmlieaoogk\1.19.71_0\icons\icon48.png   [3369]
O61 - LFC:Last File Created 23/08/2012 - 17:24:43 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Extensions\mpfapcdfbbledbojijcbcclmlieaoogk\1.19.71_0\js\api\chrome.js   [8967]
O61 - LFC:Last File Created 23/08/2012 - 17:24:43 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Extensions\mpfapcdfbbledbojijcbcclmlieaoogk\1.19.71_0\js\api\cookie.js   [10437]
O61 - LFC:Last File Created 23/08/2012 - 17:24:43 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Extensions\mpfapcdfbbledbojijcbcclmlieaoogk\1.19.71_0\js\api\message.js   [2296]
O61 - LFC:Last File Created 23/08/2012 - 17:24:43 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Extensions\mpfapcdfbbledbojijcbcclmlieaoogk\1.19.71_0\js\background.js   [34363]
O61 - LFC:Last File Created 23/08/2012 - 17:24:43 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Extensions\mpfapcdfbbledbojijcbcclmlieaoogk\1.19.71_0\js\lib\app_api.js   [4282]
O61 - LFC:Last File Created 23/08/2012 - 17:24:43 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Extensions\mpfapcdfbbledbojijcbcclmlieaoogk\1.19.71_0\js\lib\async_api.js   [2558]
O61 - LFC:Last File Created 23/08/2012 - 17:24:43 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Extensions\mpfapcdfbbledbojijcbcclmlieaoogk\1.19.71_0\js\lib\bg_app_api.js   [2720]
O61 - LFC:Last File Created 23/08/2012 - 17:24:43 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Extensions\mpfapcdfbbledbojijcbcclmlieaoogk\1.19.71_0\js\lib\cookie_store.js   [4446]
O61 - LFC:Last File Created 23/08/2012 - 17:24:43 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Extensions\mpfapcdfbbledbojijcbcclmlieaoogk\1.19.71_0\js\lib\data_store.js   [5788]
O61 - LFC:Last File Created 23/08/2012 - 17:24:43 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Extensions\mpfapcdfbbledbojijcbcclmlieaoogk\1.19.71_0\js\lib\delegate.js   [1509]
O61 - LFC:Last File Created 23/08/2012 - 17:24:43 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Extensions\mpfapcdfbbledbojijcbcclmlieaoogk\1.19.71_0\js\lib\events.js   [2893]
O61 - LFC:Last File Created 23/08/2012 - 17:24:43 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Extensions\mpfapcdfbbledbojijcbcclmlieaoogk\1.19.71_0\js\lib\onBGDocumentLoad.js   [456]
O61 - LFC:Last File Created 23/08/2012 - 17:24:43 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Extensions\mpfapcdfbbledbojijcbcclmlieaoogk\1.19.71_0\js\lib\reports.js   [2769]
O61 - LFC:Last File Created 23/08/2012 - 17:24:43 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Extensions\mpfapcdfbbledbojijcbcclmlieaoogk\1.19.71_0\js\lib\util.js   [2832]
O61 - LFC:Last File Created 23/08/2012 - 17:24:43 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Extensions\mpfapcdfbbledbojijcbcclmlieaoogk\1.19.71_0\manifest.json   [1063]
O61 - LFC:Last File Created 23/08/2012 - 17:24:43 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Extensions\mpfapcdfbbledbojijcbcclmlieaoogk\1.19.71_0\popup.html   [0]
O61 - LFC:Last File Created 23/08/2012 - 17:24:45 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\databases\chrome-extension_mpfapcdfbbledbojijcbcclmlieaoogk_0\3   [132096]
O61 - LFC:Last File Created 23/08/2012 - 17:24:46 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_mpfapcdfbbledbojijcbcclmlieaoogk_0.localstorage   [3072]
O61 - LFC:Last File Created 23/08/2012 - 17:24:46 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_mpfapcdfbbledbojijcbcclmlieaoogk_0.localstorage-journal   [3608]
O61 - LFC:Last File Created 23/08/2012 - 17:25:46 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\5C298CGC\mondebrideur.com\com.jeroenwijering.sol   [54]
O61 - LFC:Last File Created 23/08/2012 - 17:59:06 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Extension State\000300.sst   [207]
O61 - LFC:Last File Created 23/08/2012 - 18:00:32 ---A- C:\Users\Hamza\Downloads\chromeinstall-7u6.exe   [894952]
O61 - LFC:Last File Created 23/08/2012 - 18:00:35 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.java.com_0.localstorage-journal   [12896]
O61 - LFC:Last File Created 23/08/2012 - 18:04:06 ---A- C:\Users\Hamza\AppData\Local\Windows Live\uxcore_iexplore_00.etl   [8192]
O61 - LFC:Last File Created 23/08/2012 - 18:08:40 ---A- C:\Users\Hamza\AppData\Roaming\Skype\sunit-hamza\msn.db   [106496]
O61 - LFC:Last File Created 23/08/2012 - 18:30:23 ---A- C:\Users\Hamza\AppData\Local\ElevatedDiagnostics\733862231\2012082317.000\results.xsl   [49097]
O61 - LFC:Last File Created 23/08/2012 - 18:31:47 ---A- C:\Users\Hamza\AppData\Local\ElevatedDiagnostics\733862231\2012082317.000\PCW.0.debugreport.xml   [3921]
O61 - LFC:Last File Created 23/08/2012 - 18:31:47 ---A- C:\Users\Hamza\AppData\Local\ElevatedDiagnostics\733862231\2012082317.000\ResultReport.xml   [1960]
O61 - LFC:Last File Created 23/08/2012 - 18:31:47 ---A- C:\Users\Hamza\AppData\Local\ElevatedDiagnostics\733862231\2012082317.000\results.xml   [624]
O61 - LFC:Last File Created 23/08/2012 - 18:35:05 ---A- C:\Users\Hamza\AppData\Local\ElevatedDiagnostics\733862231\2012082317.001\results.xsl   [49097]
O61 - LFC:Last File Created 23/08/2012 - 18:36:04 ---A- C:\Users\Hamza\AppData\Local\ElevatedDiagnostics\733862231\2012082317.001\PCW.0.debugreport.xml   [1760]
O61 - LFC:Last File Created 23/08/2012 - 18:36:04 ---A- C:\Users\Hamza\AppData\Local\ElevatedDiagnostics\733862231\2012082317.001\ResultReport.xml   [1950]
O61 - LFC:Last File Created 23/08/2012 - 18:36:04 ---A- C:\Users\Hamza\AppData\Local\ElevatedDiagnostics\733862231\2012082317.001\results.xml   [624]
O61 - LFC:Last File Created 23/08/2012 - 18:36:05 ---A- C:\Users\Hamza\AppData\Local\ElevatedDiagnostics\733862231\latest.cab   [8312]
O61 - LFC:Last File Created 23/08/2012 - 19:40:45 ---A- C:\Users\Hamza\AppData\Roaming\Microsoft\MMC\eventvwr   [139711]
O61 - LFC:Last File Created 23/08/2012 - 19:42:59 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\databases\Databases.db   [7168]
O61 - LFC:Last File Created 23/08/2012 - 19:43:43 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Archived History   [57344]
O61 - LFC:Last File Created 23/08/2012 - 19:43:43 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Archived History-journal   [512]
O61 - LFC:Last File Created 23/08/2012 - 19:43:45 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Cache\index   [262512]
O61 - LFC:Last File Created 23/08/2012 - 19:43:50 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000002   [33441]
O61 - LFC:Last File Created 23/08/2012 - 19:43:51 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000003   [43530]
O61 - LFC:Last File Created 23/08/2012 - 19:43:55 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000004   [32095]
O61 - LFC:Last File Created 23/08/2012 - 19:43:56 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000005   [77050]
O61 - LFC:Last File Created 23/08/2012 - 19:43:56 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000006   [58929]
O61 - LFC:Last File Created 23/08/2012 - 19:43:56 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000007   [27106]
O61 - LFC:Last File Created 23/08/2012 - 19:43:57 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000008   [32518]
O61 - LFC:Last File Created 23/08/2012 - 19:44:01 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000009   [30668]
O61 - LFC:Last File Created 23/08/2012 - 19:44:01 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00000a   [57449]
O61 - LFC:Last File Created 23/08/2012 - 19:44:01 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00000b   [17137]
O61 - LFC:Last File Created 23/08/2012 - 19:44:01 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00000c   [18957]
O61 - LFC:Last File Created 23/08/2012 - 19:44:02 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00000d   [25527]
O61 - LFC:Last File Created 23/08/2012 - 19:44:02 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00000e   [26053]
O61 - LFC:Last File Created 23/08/2012 - 19:44:02 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00000f   [18860]
O61 - LFC:Last File Created 23/08/2012 - 19:44:02 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000010   [30060]
O61 - LFC:Last File Created 23/08/2012 - 19:44:02 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000011   [23774]
O61 - LFC:Last File Created 23/08/2012 - 19:44:02 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000012   [23774]
O61 - LFC:Last File Created 23/08/2012 - 19:44:03 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000013   [25645]
O61 - LFC:Last File Created 23/08/2012 - 19:44:03 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000014   [37494]
O61 - LFC:Last File Created 23/08/2012 - 19:44:03 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000015   [25604]
O61 - LFC:Last File Created 23/08/2012 - 19:44:03 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000016   [22891]
O61 - LFC:Last File Created 23/08/2012 - 19:44:03 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000017   [54223]
O61 - LFC:Last File Created 23/08/2012 - 19:44:04 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000018   [34112]
O61 - LFC:Last File Created 23/08/2012 - 19:44:05 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000019   [19798]
O61 - LFC:Last File Created 23/08/2012 - 19:44:05 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00001a   [151762]
O61 - LFC:Last File Created 23/08/2012 - 19:44:08 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00001b   [30529]
O61 - LFC:Last File Created 23/08/2012 - 19:44:09 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00001c   [33186]
O61 - LFC:Last File Created 23/08/2012 - 19:44:09 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00001d   [16542]
O61 - LFC:Last File Created 23/08/2012 - 19:44:09 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00001e   [19030]
O61 - LFC:Last File Created 23/08/2012 - 19:44:09 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00001f   [61465]
O61 - LFC:Last File Created 23/08/2012 - 19:44:11 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000020   [32111]
O61 - LFC:Last File Created 23/08/2012 - 19:44:11 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000021   [51185]
O61 - LFC:Last File Created 23/08/2012 - 19:44:11 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000022   [33693]
O61 - LFC:Last File Created 23/08/2012 - 19:44:11 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000023   [45583]
O61 - LFC:Last File Created 23/08/2012 - 19:44:12 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000024   [61837]
O61 - LFC:Last File Created 23/08/2012 - 19:44:12 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000025   [39934]
O61 - LFC:Last File Created 23/08/2012 - 19:44:12 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000026   [175750]
O61 - LFC:Last File Created 23/08/2012 - 19:44:12 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000027   [233976]
O61 - LFC:Last File Created 23/08/2012 - 19:44:13 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000028   [28801]
O61 - LFC:Last File Created 23/08/2012 - 19:44:13 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000029   [18152]
O61 - LFC:Last File Created 23/08/2012 - 19:44:15 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00002a   [28232]
O61 - LFC:Last File Created 23/08/2012 - 19:44:15 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00002b   [18128]
O61 - LFC:Last File Created 23/08/2012 - 19:44:15 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_view.atdmt.com_0.localstorage   [11264]
O61 - LFC:Last File Created 23/08/2012 - 19:44:15 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_view.atdmt.com_0.localstorage-journal   [3608]
O61 - LFC:Last File Created 23/08/2012 - 19:45:03 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Safe Browsing Download   [1566140]
O61 - LFC:Last File Created 23/08/2012 - 19:45:04 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Safe Browsing Bloom   [8320460]
O61 - LFC:Last File Created 23/08/2012 - 19:45:05 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Safe Browsing Bloom Filter 2   [2531853]
O61 - LFC:Last File Created 23/08/2012 - 19:45:05 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Safe Browsing Csd Whitelist   [134408]
O61 - LFC:Last File Created 23/08/2012 - 19:45:05 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Safe Browsing Download Whitelist   [19960]
O61 - LFC:Last File Created 23/08/2012 - 19:45:27 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00002c   [22135]
O61 - LFC:Last File Created 23/08/2012 - 19:45:28 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00002d   [20842]
O61 - LFC:Last File Created 23/08/2012 - 19:46:10 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00002e   [30073]
O61 - LFC:Last File Created 23/08/2012 - 19:46:16 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00002f   [39280]
O61 - LFC:Last File Created 23/08/2012 - 19:46:22 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000030   [42137]
O61 - LFC:Last File Created 23/08/2012 - 19:46:25 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000031   [40796]
O61 - LFC:Last File Created 23/08/2012 - 19:46:37 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000032   [24605]
O61 - LFC:Last File Created 23/08/2012 - 19:46:38 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000033   [50108]
O61 - LFC:Last File Created 23/08/2012 - 19:46:38 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000034   [37397]
O61 - LFC:Last File Created 23/08/2012 - 19:46:38 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000035   [26571]
O61 - LFC:Last File Created 23/08/2012 - 19:46:38 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000036   [26348]
O61 - LFC:Last File Created 23/08/2012 - 19:46:39 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000037   [50831]
O61 - LFC:Last File Created 23/08/2012 - 19:46:39 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000038   [119882]
O61 - LFC:Last File Created 23/08/2012 - 19:46:39 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000039   [177413]
O61 - LFC:Last File Created 23/08/2012 - 19:46:39 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00003a   [34026]
O61 - LFC:Last File Created 23/08/2012 - 19:46:39 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00003b   [21251]
O61 - LFC:Last File Created 23/08/2012 - 19:46:39 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00003c   [58963]
O61 - LFC:Last File Created 23/08/2012 - 19:46:39 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00003d   [21459]
O61 - LFC:Last File Created 23/08/2012 - 19:46:40 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00003e   [21461]
O61 - LFC:Last File Created 23/08/2012 - 19:46:40 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00003f   [227297]
O61 - LFC:Last File Created 23/08/2012 - 19:46:40 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000040   [24208]
O61 - LFC:Last File Created 23/08/2012 - 19:46:40 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000041   [312479]
O61 - LFC:Last File Created 23/08/2012 - 19:46:42 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000042   [32597]
O61 - LFC:Last File Created 23/08/2012 - 19:47:24 ---A- C:\Users\Hamza\Downloads\bluescreenview.zip   [61685]
O61 - LFC:Last File Created 23/08/2012 - 19:49:31 ---A- C:\Users\Hamza\Downloads\bluescreenview (1).zip   [61685]
O61 - LFC:Last File Created 23/08/2012 - 19:49:51 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\SwiftShader\1.0.1.3\libEGL.dll   [100864]
O61 - LFC:Last File Created 23/08/2012 - 19:49:51 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\SwiftShader\1.0.1.3\libGLESv2.dll   [4051456]
O61 - LFC:Last File Created 23/08/2012 - 19:49:51 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\SwiftShader\1.0.1.3\manifest.json   [202]
O61 - LFC:Last File Created 23/08/2012 - 19:50:42 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_sn1msg2010711.sn1.gateway.edge.messenger.live.com_0.localstorage   [12288]
O61 - LFC:Last File Created 23/08/2012 - 19:50:42 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_sn1msg2010711.sn1.gateway.edge.messenger.live.com_0.localstorage-journal   [12896]
O61 - LFC:Last File Created 23/08/2012 - 19:50:43 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_ad.z5x.net_0.localstorage   [12288]
O61 - LFC:Last File Created 23/08/2012 - 19:50:43 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_exch-eu.atdmt.com_0.localstorage   [12288]
O61 - LFC:Last File Created 23/08/2012 - 19:50:43 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_exch-eu.atdmt.com_0.localstorage-journal   [12896]
O61 - LFC:Last File Created 23/08/2012 - 19:50:44 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_ad.z5x.net_0.localstorage-journal   [12896]
O61 - LFC:Last File Created 23/08/2012 - 19:50:44 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_m.adnxs.com_0.localstorage   [12288]
O61 - LFC:Last File Created 23/08/2012 - 19:50:44 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_m.adnxs.com_0.localstorage-journal   [12896]
O61 - LFC:Last File Created 23/08/2012 - 19:50:44 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_sn1msg3020419.gateway.messenger.live.com_0.localstorage   [12288]
O61 - LFC:Last File Created 23/08/2012 - 19:50:44 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_sn1msg3020419.gateway.messenger.live.com_0.localstorage-journal   [12896]
O61 - LFC:Last File Created 23/08/2012 - 19:50:44 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.werevenueu.com_0.localstorage   [12288]
O61 - LFC:Last File Created 23/08/2012 - 19:50:44 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.werevenueu.com_0.localstorage-journal   [12896]
O61 - LFC:Last File Created 23/08/2012 - 19:51:42 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.security-helpzone.com_0.localstorage   [12288]
O61 - LFC:Last File Created 23/08/2012 - 19:51:42 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.security-helpzone.com_0.localstorage-journal   [12896]
O61 - LFC:Last File Created 23/08/2012 - 19:51:42 ---A- C:\Users\Hamza\Downloads\bluescreenview (2).zip   [61685]
O61 - LFC:Last File Created 23/08/2012 - 19:59:43 ---A- C:\Users\Hamza\AppData\Roaming\Skype\shared_dynco\dc.db   [1454080]
O61 - LFC:Last File Created 23/08/2012 - 19:59:44 ---A- C:\Users\Hamza\AppData\Roaming\Skype\shared_dynco\dc.db-journal   [845936]
O61 - LFC:Last File Created 23/08/2012 - 20:00:15 ---A- C:\Users\Hamza\AppData\Roaming\Microsoft\MSN Messenger\sqmnoopt00.sqm   [320]
O61 - LFC:Last File Created 23/08/2012 - 20:00:20 ----- C:\Users\Hamza\AppData\Local\Windows Live\uxcore_msnmsgr_00.etl   [4096]
O61 - LFC:Last File Created 23/08/2012 - 20:00:31 ---A- C:\Users\Hamza\Tracing\WindowsLiveMessenger-uccapi-0.uccapilog   [0]
O61 - LFC:Last File Created 23/08/2012 - 20:00:33 ---A- C:\Users\Hamza\AppData\Roaming\Skype\DbTemp\temp-zTXgL1Va2Cfx3We0kdgXtxQM   [7168]
O61 - LFC:Last File Created 23/08/2012 - 20:00:36 ---A- C:\Users\Hamza\AppData\Local\ATI\ACE\Manifest.Bin   [30295]
O61 - LFC:Last File Created 23/08/2012 - 20:00:36 ---A- C:\Users\Hamza\AppData\Local\ATI\ACE\Manifest.xml   [22093]
O61 - LFC:Last File Created 23/08/2012 - 20:00:36 ---A- C:\Users\Hamza\AppData\Roaming\Skype\sunit-hamza\msn.db-journal   [70280]
O61 - LFC:Last File Created 23/08/2012 - 20:00:38 ---A- C:\Users\Hamza\AppData\Roaming\Skype\sunit-hamza\bistats.db   [61440]
O61 - LFC:Last File Created 23/08/2012 - 20:00:39 ---A- C:\Users\Hamza\AppData\Roaming\Skype\sunit-hamza\bistats.db-journal   [33344]
O61 - LFC:Last File Created 23/08/2012 - 20:00:46 ---A- C:\Users\Hamza\AppData\Roaming\Skype\sunit-hamza\dc.db   [69632]
O61 - LFC:Last File Created 23/08/2012 - 20:00:46 ---A- C:\Users\Hamza\AppData\Roaming\Skype\sunit-hamza\dc.db-journal   [49760]
O61 - LFC:Last File Created 23/08/2012 - 20:00:50 ---A- C:\Users\Hamza\AppData\Roaming\Skype\shared.xml   [58778]
O61 - LFC:Last File Created 23/08/2012 - 20:00:54 ---A- C:\Users\Hamza\AppData\Roaming\Skype\sunit-hamza\config.xml   [6984]
O61 - LFC:Last File Created 23/08/2012 - 20:00:55 ---A- C:\Users\Hamza\AppData\Roaming\Skype\sunit-hamza\keyval.db   [49152]
O61 - LFC:Last File Created 23/08/2012 - 20:00:55 ---A- C:\Users\Hamza\AppData\Roaming\Skype\sunit-hamza\keyval.db-journal   [41552]
O61 - LFC:Last File Created 23/08/2012 - 20:00:58 ---A- C:\Users\Hamza\AppData\Roaming\Skype\DbTemp\temp-jatRhMOukLC823ZOcaIZAUtD   [1544]
O61 - LFC:Last File Created 23/08/2012 - 20:01:10 ---A- C:\Users\Hamza\AppData\Local\ATI\ACE\Profiles.xml   [49265]
O61 - LFC:Last File Created 23/08/2012 - 20:01:10 ---A- C:\Users\Hamza\AppData\Roaming\Skype\sunit-hamza\main.db   [1081344]
O61 - LFC:Last File Created 23/08/2012 - 20:01:11 ---A- C:\Users\Hamza\AppData\Roaming\Skype\sunit-hamza\main.db-journal   [234440]
O61 - LFC:Last File Created 23/08/2012 - 21:31:09 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000044   [145429]
O61 - LFC:Last File Created 23/08/2012 - 21:31:13 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000045   [28765]
O61 - LFC:Last File Created 23/08/2012 - 21:31:15 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000046   [16896]
O61 - LFC:Last File Created 23/08/2012 - 21:31:21 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000047   [75700]
O61 - LFC:Last File Created 23/08/2012 - 21:31:28 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000048   [21389]
O61 - LFC:Last File Created 23/08/2012 - 21:31:29 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000049   [21004]
O61 - LFC:Last File Created 23/08/2012 - 21:31:29 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00004a   [29947]
O61 - LFC:Last File Created 23/08/2012 - 21:31:29 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00004b   [23247]
O61 - LFC:Last File Created 23/08/2012 - 21:31:29 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00004c   [17488]
O61 - LFC:Last File Created 23/08/2012 - 21:31:29 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00004d   [21461]
O61 - LFC:Last File Created 23/08/2012 - 21:31:29 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00004e   [23395]
O61 - LFC:Last File Created 23/08/2012 - 21:31:29 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00004f   [30698]
O61 - LFC:Last File Created 23/08/2012 - 21:31:30 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000050   [45562]
O61 - LFC:Last File Created 23/08/2012 - 21:31:31 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000051   [24824]
O61 - LFC:Last File Created 23/08/2012 - 21:31:32 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000052   [24208]
O61 - LFC:Last File Created 23/08/2012 - 21:31:34 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000053   [23352]
O61 - LFC:Last File Created 23/08/2012 - 21:31:34 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000054   [21004]
O61 - LFC:Last File Created 23/08/2012 - 21:31:37 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000055   [46653]
O61 - LFC:Last File Created 23/08/2012 - 21:31:37 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000056   [28581]
O61 - LFC:Last File Created 23/08/2012 - 21:31:37 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000057   [18581]
O61 - LFC:Last File Created 23/08/2012 - 21:31:37 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000058   [17262]
O61 - LFC:Last File Created 23/08/2012 - 21:31:38 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000059   [25363]
O61 - LFC:Last File Created 23/08/2012 - 21:31:38 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00005a   [81263]
O61 - LFC:Last File Created 23/08/2012 - 21:31:38 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00005b   [132347]
O61 - LFC:Last File Created 23/08/2012 - 21:31:38 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00005c   [38383]
O61 - LFC:Last File Created 23/08/2012 - 21:31:40 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00005d   [36493]
O61 - LFC:Last File Created 23/08/2012 - 21:31:41 ---A- C:\Users\Hamza\Downloads\everesthome220.exe   [4179293]
O61 - LFC:Last File Created 23/08/2012 - 21:31:45 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00005e   [1652154]
O61 - LFC:Last File Created 23/08/2012 - 21:31:46 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00005f   [1679282]
O61 - LFC:Last File Created 23/08/2012 - 21:31:46 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.commentcamarche.net_0.localstorage   [12288]
O61 - LFC:Last File Created 23/08/2012 - 21:31:46 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.commentcamarche.net_0.localstorage-journal   [11864]
O61 - LFC:Last File Created 23/08/2012 - 21:31:47 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_ad.doubleclick.net_0.localstorage   [12288]
O61 - LFC:Last File Created 23/08/2012 - 21:31:47 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_ad.doubleclick.net_0.localstorage-journal   [11864]
O61 - LFC:Last File Created 23/08/2012 - 21:31:47 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_emea-bidder.mathtag.com_0.localstorage   [12288]
O61 - LFC:Last File Created 23/08/2012 - 21:31:47 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_emea-bidder.mathtag.com_0.localstorage-journal   [11864]
O61 - LFC:Last File Created 23/08/2012 - 21:32:03 ---A- C:\Users\Hamza\AppData\Roaming\Microsoft\HTML Help\hh.dat   [8634]
O61 - LFC:Last File Created 23/08/2012 - 21:33:07 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000060   [31518]
O61 - LFC:Last File Created 23/08/2012 - 21:33:10 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000061   [33673]
O61 - LFC:Last File Created 23/08/2012 - 21:33:14 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.realtek.com.tw_0.localstorage   [12288]
O61 - LFC:Last File Created 23/08/2012 - 21:33:14 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.realtek.com.tw_0.localstorage-journal   [12896]
O61 - LFC:Last File Created 23/08/2012 - 21:33:37 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000062   [16900]
O61 - LFC:Last File Created 23/08/2012 - 21:33:37 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000063   [37548]
O61 - LFC:Last File Created 23/08/2012 - 21:33:37 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000064   [66911]
O61 - LFC:Last File Created 23/08/2012 - 21:33:38 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000065   [33288]
O61 - LFC:Last File Created 23/08/2012 - 21:33:39 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000066   [105043]
O61 - LFC:Last File Created 23/08/2012 - 21:33:39 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000067   [40079]
O61 - LFC:Last File Created 23/08/2012 - 21:33:40 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000068   [38566]
O61 - LFC:Last File Created 23/08/2012 - 21:33:40 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000069   [18391]
O61 - LFC:Last File Created 23/08/2012 - 21:33:40 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00006a   [52227]
O61 - LFC:Last File Created 23/08/2012 - 21:33:55 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00006b   [68943]
O61 - LFC:Last File Created 23/08/2012 - 21:33:56 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00006c   [27723]
O61 - LFC:Last File Created 23/08/2012 - 21:33:56 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00006d   [20778]
O61 - LFC:Last File Created 23/08/2012 - 21:33:56 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00006e   [37456]
O61 - LFC:Last File Created 23/08/2012 - 21:33:57 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00006f   [23009]
O61 - LFC:Last File Created 23/08/2012 - 21:33:57 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000070   [283919]
O61 - LFC:Last File Created 23/08/2012 - 21:33:57 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000071   [38122]
O61 - LFC:Last File Created 23/08/2012 - 21:33:58 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000072   [16942]
O61 - LFC:Last File Created 23/08/2012 - 21:34:01 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_h10025.www1.hp.com_0.localstorage   [11264]
O61 - LFC:Last File Created 23/08/2012 - 21:34:01 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_h10025.www1.hp.com_0.localstorage-journal   [3608]
O61 - LFC:Last File Created 23/08/2012 - 21:34:06 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_tags.bluekai.com_0.localstorage   [12288]
O61 - LFC:Last File Created 23/08/2012 - 21:34:06 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_tags.bluekai.com_0.localstorage-journal   [12896]
O61 - LFC:Last File Created 23/08/2012 - 21:34:07 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www8.hp.com_0.localstorage   [12288]
O61 - LFC:Last File Created 23/08/2012 - 21:34:07 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www8.hp.com_0.localstorage-journal   [12896]
O61 - LFC:Last File Created 23/08/2012 - 21:35:40 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000073   [20304]
O61 - LFC:Last File Created 23/08/2012 - 21:35:41 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000074   [52205]
O61 - LFC:Last File Created 23/08/2012 - 21:35:41 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000075   [33226]
O61 - LFC:Last File Created 23/08/2012 - 21:35:41 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000076   [29700]
O61 - LFC:Last File Created 23/08/2012 - 21:35:41 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000077   [24808]
O61 - LFC:Last File Created 23/08/2012 - 21:35:42 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000078   [17912]
O61 - LFC:Last File Created 23/08/2012 - 21:35:42 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000079   [26320]
O61 - LFC:Last File Created 23/08/2012 - 21:35:42 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00007a   [25648]
O61 - LFC:Last File Created 23/08/2012 - 21:35:42 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00007b   [52833]
O61 - LFC:Last File Created 23/08/2012 - 21:35:43 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00007c   [22043]
O61 - LFC:Last File Created 23/08/2012 - 21:35:43 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00007d   [82207]
O61 - LFC:Last File Created 23/08/2012 - 21:35:46 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_p4-esufmp54zqk4a-3wlpsfltoaxhn3x5-if-v6exp3-v4.metric.gstatic.com_0.localstorage   [11264]
O61 - LFC:Last File Created 23/08/2012 - 21:35:46 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_p4-esufmp54zqk4a-3wlpsfltoaxhn3x5-if-v6exp3-v4.metric.gstatic.com_0.localstorage-journal   [3608]
O61 - LFC:Last File Created 23/08/2012 - 21:35:51 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000080   [49380]
O61 - LFC:Last File Created 23/08/2012 - 21:35:51 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000081   [45171]
O61 - LFC:Last File Created 23/08/2012 - 21:36:13 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000082   [20355]
O61 - LFC:Last File Created 23/08/2012 - 21:36:26 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000083   [33146]
O61 - LFC:Last File Created 23/08/2012 - 21:36:27 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000084   [27466]
O61 - LFC:Last File Created 23/08/2012 - 21:36:27 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000085   [172313]
O61 - LFC:Last File Created 23/08/2012 - 21:36:27 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000086   [47218]
O61 - LFC:Last File Created 23/08/2012 - 21:36:27 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000087   [26860]
O61 - LFC:Last File Created 23/08/2012 - 21:36:27 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000088   [36597]
O61 - LFC:Last File Created 23/08/2012 - 21:36:27 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000089   [24993]
O61 - LFC:Last File Created 23/08/2012 - 21:36:32 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_cdn.turn.com_0.localstorage   [12288]
O61 - LFC:Last File Created 23/08/2012 - 21:36:32 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_cdn.turn.com_0.localstorage-journal   [12896]
O61 - LFC:Last File Created 23/08/2012 - 21:36:35 ---A- C:\Users\Hamza\Downloads\PCRegistryShieldSetup.exe   [4028800]
O61 - LFC:Last File Created 23/08/2012 - 21:36:44 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00008a   [97627]
O61 - LFC:Last File Created 23/08/2012 - 21:36:44 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00008b   [69198]
O61 - LFC:Last File Created 23/08/2012 - 21:36:46 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00008c   [556953]
O61 - LFC:Last File Created 23/08/2012 - 21:36:55 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_pcregistryshield.com_0.localstorage   [12288]
O61 - LFC:Last File Created 23/08/2012 - 21:36:55 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_pcregistryshield.com_0.localstorage-journal   [12896]
O61 - LFC:Last File Created 23/08/2012 - 21:38:52 ---A- C:\Users\Hamza\AppData\Roaming\ShieldApps\PCRegistryShield\Partial Backups\00000001.rmx   [204]
O61 - LFC:Last File Created 23/08/2012 - 21:38:52 ---A- C:\Users\Hamza\AppData\Roaming\ShieldApps\PCRegistryShield\Partial Backups\00000001.rxb   [1350]
O61 - LFC:Last File Created 23/08/2012 - 21:39:03 ---A- C:\Users\Hamza\AppData\Roaming\ShieldApps\PCRegistryShield\ExcludeList.rcp   [6]
O61 - LFC:Last File Created 23/08/2012 - 21:39:03 ---A- C:\Users\Hamza\AppData\Roaming\ShieldApps\PCRegistryShield\French_rcp.dat   [56158]
O61 - LFC:Last File Created 23/08/2012 - 21:39:03 ---A- C:\Users\Hamza\AppData\Roaming\ShieldApps\PCRegistryShield\TempHLList.rcp   [6]
O61 - LFC:Last File Created 23/08/2012 - 21:39:03 ---A- C:\Users\Hamza\AppData\Roaming\ShieldApps\PCRegistryShield\results.rcp   [222506]
O61 - LFC:Last File Created 23/08/2012 - 21:39:18 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00008e   [17457]
O61 - LFC:Last File Created 23/08/2012 - 21:39:18 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00008f   [26263]
O61 - LFC:Last File Created 23/08/2012 - 21:39:23 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000090   [24040]
O61 - LFC:Last File Created 23/08/2012 - 21:39:30 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000091   [24242]
O61 - LFC:Last File Created 23/08/2012 - 21:39:31 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000092   [24413]
O61 - LFC:Last File Created 23/08/2012 - 21:39:32 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000093   [39800]
O61 - LFC:Last File Created 23/08/2012 - 21:40:03 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000094   [57559]
O61 - LFC:Last File Created 23/08/2012 - 21:40:04 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_search.babylon.com_0.localstorage   [11264]
O61 - LFC:Last File Created 23/08/2012 - 21:40:04 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_search.babylon.com_0.localstorage-journal   [3608]
O61 - LFC:Last File Created 23/08/2012 - 21:40:13 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.driverperformer.fr_0.localstorage   [12288]
O61 - LFC:Last File Created 23/08/2012 - 21:40:13 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.driverperformer.fr_0.localstorage-journal   [11864]
O61 - LFC:Last File Created 23/08/2012 - 21:40:18 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000095   [19518]
O61 - LFC:Last File Created 23/08/2012 - 21:40:19 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_toulesdrivers.com_0.localstorage   [11264]
O61 - LFC:Last File Created 23/08/2012 - 21:40:19 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_toulesdrivers.com_0.localstorage-journal   [3608]
O61 - LFC:Last File Created 23/08/2012 - 21:40:22 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000096   [25307]
O61 - LFC:Last File Created 23/08/2012 - 21:40:25 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.google.fr_0.localstorage   [12288]
O61 - LFC:Last File Created 23/08/2012 - 21:40:25 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.google.fr_0.localstorage-journal   [12896]
O61 - LFC:Last File Created 23/08/2012 - 21:40:28 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000097   [30046]
O61 - LFC:Last File Created 23/08/2012 - 21:40:28 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000098   [53799]
O61 - LFC:Last File Created 23/08/2012 - 21:40:30 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000099   [49533]
O61 - LFC:Last File Created 23/08/2012 - 21:40:34 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00009a   [23866]
O61 - LFC:Last File Created 23/08/2012 - 21:40:34 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00009b   [40497]
O61 - LFC:Last File Created 23/08/2012 - 21:40:35 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00009c   [41871]
O61 - LFC:Last File Created 23/08/2012 - 21:40:38 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00009d   [38900]
O61 - LFC:Last File Created 23/08/2012 - 21:40:38 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_p4-epncsquafwomw-5dw527d46twrsmdj-if-v6exp3-v4.metric.gstatic.com_0.localstorage   [11264]
O61 - LFC:Last File Created 23/08/2012 - 21:40:38 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_p4-epncsquafwomw-5dw527d46twrsmdj-if-v6exp3-v4.metric.gstatic.com_0.localstorage-journal   [3608]
O61 - LFC:Last File Created 23/08/2012 - 21:40:40 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00009e   [23866]
O61 - LFC:Last File Created 23/08/2012 - 21:40:40 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00009f   [42500]
O61 - LFC:Last File Created 23/08/2012 - 21:40:41 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0000a0   [22223]
O61 - LFC:Last File Created 23/08/2012 - 21:40:41 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0000a1   [20931]
O61 - LFC:Last File Created 23/08/2012 - 21:40:41 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0000a2   [48222]
O61 - LFC:Last File Created 23/08/2012 - 21:40:44 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0000a3   [39426]
O61 - LFC:Last File Created 23/08/2012 - 21:40:47 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0000a4   [22929]
O61 - LFC:Last File Created 23/08/2012 - 21:40:49 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0000a5   [29490]
O61 - LFC:Last File Created 23/08/2012 - 21:40:52 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0000a6   [28654]
O61 - LFC:Last File Created 23/08/2012 - 21:41:24 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0000a7   [20382]
O61 - LFC:Last File Created 23/08/2012 - 21:41:31 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0000a8   [44092]
O61 - LFC:Last File Created 23/08/2012 - 21:41:31 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0000a9   [37077]
O61 - LFC:Last File Created 23/08/2012 - 21:41:31 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0000aa   [30909]
O61 - LFC:Last File Created 23/08/2012 - 21:41:31 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0000ab   [68050]
O61 - LFC:Last File Created 23/08/2012 - 21:41:34 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0000ac   [30763]
O61 - LFC:Last File Created 23/08/2012 - 21:41:34 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0000ad   [19009]
O61 - LFC:Last File Created 23/08/2012 - 21:41:34 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0000ae   [23049]
O61 - LFC:Last File Created 23/08/2012 - 21:41:34 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0000af   [21083]
O61 - LFC:Last File Created 23/08/2012 - 21:41:39 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.microapp.com_0.localstorage   [12288]
O61 - LFC:Last File Created 23/08/2012 - 21:41:39 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.microapp.com_0.localstorage-journal   [11864]
O61 - LFC:Last File Created 23/08/2012 - 21:41:40 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.ma-config.com_0.localstorage   [12288]
O61 - LFC:Last File Created 23/08/2012 - 21:41:40 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.ma-config.com_0.localstorage-journal   [12896]
O61 - LFC:Last File Created 23/08/2012 - 21:41:42 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.touslesdrivers.com_0.localstorage   [12288]
O61 - LFC:Last File Created 23/08/2012 - 21:41:42 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.touslesdrivers.com_0.localstorage-journal   [12896]
O61 - LFC:Last File Created 23/08/2012 - 21:41:43 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_optimized-by.rubiconproject.com_0.localstorage   [12288]
O61 - LFC:Last File Created 23/08/2012 - 21:41:43 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_optimized-by.rubiconproject.com_0.localstorage-journal   [12896]
O61 - LFC:Last File Created 23/08/2012 - 21:41:43 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_p4-hpix64p6y3wzw-jcyfp266bhfftnyh-if-v6exp3-v4.metric.gstatic.com_0.localstorage   [12288]
O61 - LFC:Last File Created 23/08/2012 - 21:41:43 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_p4-hpix64p6y3wzw-jcyfp266bhfftnyh-if-v6exp3-v4.metric.gstatic.com_0.localstorage-journal   [12896]
O61 - LFC:Last File Created 23/08/2012 - 21:41:45 ---A- C:\Users\Hamza\Downloads\SystemMechanic_Diagnostic_PPC_CO.exe   [6553720]
O61 - LFC:Last File Created 23/08/2012 - 21:42:36 ---A- C:\Users\Hamza\AppData\Local\Temp\SystemCheckup\ioloSearchFunctions.dll   [59304]
O61 - LFC:Last File Created 23/08/2012 - 21:42:36 ---A- C:\Users\Hamza\AppData\Local\Temp\SystemCheckup\maintenance.xml   [7139]
O61 - LFC:Last File Created 23/08/2012 - 21:42:36 ---A- C:\Users\Hamza\AppData\Local\Temp\SystemCheckup\secopt_av.xml   [10908]
O61 - LFC:Last File Created 23/08/2012 - 21:42:36 ---A- C:\Users\Hamza\AppData\Local\Temp\SystemCheckup\secopt_exeftype.xml   [1626]
O61 - LFC:Last File Created 23/08/2012 - 21:42:36 ---A- C:\Users\Hamza\AppData\Local\Temp\SystemCheckup\secopt_fw.xml   [6034]
O61 - LFC:Last File Created 23/08/2012 - 21:45:48 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0000b0   [31602]
O61 - LFC:Last File Created 23/08/2012 - 21:45:48 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0000b1   [52692]
O61 - LFC:Last File Created 23/08/2012 - 21:45:48 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0000b2   [61475]
O61 - LFC:Last File Created 23/08/2012 - 21:45:48 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0000b3   [20184]
O61 - LFC:Last File Created 23/08/2012 - 21:45:58 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.iolo.fr_0.localstorage   [12288]
O61 - LFC:Last File Created 23/08/2012 - 21:45:58 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.iolo.fr_0.localstorage-journal   [12896]
O61 - LFC:Last File Created 23/08/2012 - 21:46:12 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Last Tabs   [23033]
O61 - LFC:Last File Created 23/08/2012 - 21:46:13 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Last Session   [68783]
O61 - LFC:Last File Created 24/08/2012 - 12:09:40 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Extension State\MANIFEST-000324   [614]
O61 - LFC:Last File Created 24/08/2012 - 12:09:41 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Extension State\CURRENT   [16]
O61 - LFC:Last File Created 24/08/2012 - 12:09:53 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Managed Mode Settings   [8]
O61 - LFC:Last File Created 24/08/2012 - 12:09:54 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Shortcuts   [24576]
O61 - LFC:Last File Created 24/08/2012 - 12:09:54 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Shortcuts-journal   [16384]
O61 - LFC:Last File Created 24/08/2012 - 12:09:55 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Network Action Predictor   [108544]
O61 - LFC:Last File Created 24/08/2012 - 12:09:55 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Network Action Predictor-journal   [16384]
O61 - LFC:Last File Created 24/08/2012 - 12:10:02 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Top Sites   [192512]
O61 - LFC:Last File Created 24/08/2012 - 12:10:02 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Top Sites-journal   [16384]
O61 - LFC:Last File Created 24/08/2012 - 12:10:03 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_sc.imp.live.com_0.localstorage   [12288]
O61 - LFC:Last File Created 24/08/2012 - 12:10:03 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_sc.imp.live.com_0.localstorage-journal   [11864]
O61 - LFC:Last File Created 24/08/2012 - 12:10:05 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Web Data   [190464]
O61 - LFC:Last File Created 24/08/2012 - 12:10:05 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Web Data-journal   [16384]
O61 - LFC:Last File Created 24/08/2012 - 12:10:07 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_login.live.com_0.localstorage   [12288]
O61 - LFC:Last File Created 24/08/2012 - 12:10:07 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_login.live.com_0.localstorage-journal   [11864]
O61 - LFC:Last File Created 24/08/2012 - 12:10:09 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0000b4   [92532]
O61 - LFC:Last File Created 24/08/2012 - 12:10:14 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0000b5   [22242]
O61 - LFC:Last File Created 24/08/2012 - 12:10:18 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_by159w.bay159.mail.live.com_0.localstorage   [12288]
O61 - LFC:Last File Created 24/08/2012 - 12:10:18 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_by159w.bay159.mail.live.com_0.localstorage-journal   [12896]
O61 - LFC:Last File Created 24/08/2012 - 12:10:19 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0000b6   [38670]
O61 - LFC:Last File Created 24/08/2012 - 12:10:19 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_contentcache-a.akamaihd.net_0.localstorage   [12288]
O61 - LFC:Last File Created 24/08/2012 - 12:10:19 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_contentcache-a.akamaihd.net_0.localstorage-journal   [12896]
O61 - LFC:Last File Created 24/08/2012 - 12:10:19 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_ox-d.served-now.com_0.localstorage   [12288]
O61 - LFC:Last File Created 24/08/2012 - 12:10:19 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_ox-d.served-now.com_0.localstorage-journal   [12896]
O61 - LFC:Last File Created 24/08/2012 - 12:10:20 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_apix.virtualsend.com_0.localstorage   [12288]
O61 - LFC:Last File Created 24/08/2012 - 12:10:20 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_apix.virtualsend.com_0.localstorage-journal   [12896]
O61 - LFC:Last File Created 24/08/2012 - 12:10:20 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_people.directory.live.com_0.localstorage   [12288]
O61 - LFC:Last File Created 24/08/2012 - 12:10:20 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_people.directory.live.com_0.localstorage-journal   [12896]
O61 - LFC:Last File Created 24/08/2012 - 12:10:21 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0000b7   [95414]
O61 - LFC:Last File Created 24/08/2012 - 12:10:21 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_js2.wlxrs.com_0.localstorage   [12288]
O61 - LFC:Last File Created 24/08/2012 - 12:10:21 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_js2.wlxrs.com_0.localstorage-journal   [12896]
O61 - LFC:Last File Created 24/08/2012 - 12:10:22 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0000b8   [37958]
O61 - LFC:Last File Created 24/08/2012 - 12:10:22 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_ad.yieldmanager.com_0.localstorage   [12288]
O61 - LFC:Last File Created 24/08/2012 - 12:10:22 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_ad.yieldmanager.com_0.localstorage-journal   [12896]
O61 - LFC:Last File Created 24/08/2012 - 12:10:22 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_secure.shared.live.com_0.localstorage   [12288]
O61 - LFC:Last File Created 24/08/2012 - 12:10:22 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_secure.shared.live.com_0.localstorage-journal   [12896]
O61 - LFC:Last File Created 24/08/2012 - 12:10:22 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\QuotaManager   [13312]
O61 - LFC:Last File Created 24/08/2012 - 12:10:22 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\QuotaManager-journal   [6704]
O61 - LFC:Last File Created 24/08/2012 - 12:10:23 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0000b9   [26573]
O61 - LFC:Last File Created 24/08/2012 - 12:10:23 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_ib.adnxs.com_0.localstorage   [12288]
O61 - LFC:Last File Created 24/08/2012 - 12:10:23 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_ib.adnxs.com_0.localstorage-journal   [12896]
O61 - LFC:Last File Created 24/08/2012 - 12:10:23 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_sn1msg1020140.sn1.gateway.edge.messenger.live.com_0.localstorage   [11264]
O61 - LFC:Last File Created 24/08/2012 - 12:10:23 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_sn1msg1020140.sn1.gateway.edge.messenger.live.com_0.localstorage-journal   [3608]
O61 - LFC:Last File Created 24/08/2012 - 12:10:23 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_tap2-cdn.rubiconproject.com_0.localstorage   [12288]
O61 - LFC:Last File Created 24/08/2012 - 12:10:23 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_tap2-cdn.rubiconproject.com_0.localstorage-journal   [12896]
O61 - LFC:Last File Created 24/08/2012 - 12:10:24 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_secure.shared.live.com_0.localstorage   [13312]
O61 - LFC:Last File Created 24/08/2012 - 12:10:24 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_secure.shared.live.com_0.localstorage-journal   [13928]
O61 - LFC:Last File Created 24/08/2012 - 12:10:25 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0000ba   [29436]
O61 - LFC:Last File Created 24/08/2012 - 12:10:25 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0000bb   [23361]
O61 - LFC:Last File Created 24/08/2012 - 12:10:26 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0000bc   [25317]
O61 - LFC:Last File Created 24/08/2012 - 12:10:26 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0000bd   [34361]
O61 - LFC:Last File Created 24/08/2012 - 12:10:26 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0000be   [42335]
O61 - LFC:Last File Created 24/08/2012 - 12:10:26 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0000bf   [34033]
O61 - LFC:Last File Created 24/08/2012 - 12:10:26 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0000c0   [21250]
O61 - LFC:Last File Created 24/08/2012 - 12:10:27 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0000c1   [31261]
O61 - LFC:Last File Created 24/08/2012 - 12:10:27 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0000c2   [28681]
O61 - LFC:Last File Created 24/08/2012 - 12:10:28 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\5C298CGC\contentcache-a.akamaihd.net\items\e6a00\storage.swf\gpl.sol   [936]
O61 - LFC:Last File Created 24/08/2012 - 12:10:28 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\databases\chrome-extension_mpfapcdfbbledbojijcbcclmlieaoogk_0\2   [15360]
O61 - LFC:Last File Created 24/08/2012 - 12:10:31 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0000c3   [19494]
O61 - LFC:Last File Created 24/08/2012 - 12:10:31 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_cgiaikfpllchefojlnehlmpekeogihnm_0.localstorage   [395264]
O61 - LFC:Last File Created 24/08/2012 - 12:10:31 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_cgiaikfpllchefojlnehlmpekeogihnm_0.localstorage-journal   [16384]
O61 - LFC:Last File Created 24/08/2012 - 12:10:33 ---A- C:\Users\Hamza\Downloads\ZHPDiag2.exe   [4600348]
O61 - LFC:Last File Created 24/08/2012 - 12:10:36 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_dap.criteo.com_0.localstorage   [12288]
O61 - LFC:Last File Created 24/08/2012 - 12:10:36 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_dap.criteo.com_0.localstorage-journal   [11864]
O61 - LFC:Last File Created 24/08/2012 - 12:10:36 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_dis.eu.criteo.com_0.localstorage   [12288]
O61 - LFC:Last File Created 24/08/2012 - 12:10:36 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_dis.eu.criteo.com_0.localstorage-journal   [11864]
O61 - LFC:Last File Created 24/08/2012 - 12:10:36 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_platform.twitter.com_0.localstorage   [12288]
O61 - LFC:Last File Created 24/08/2012 - 12:10:36 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_platform.twitter.com_0.localstorage-journal   [12896]
O61 - LFC:Last File Created 24/08/2012 - 12:10:36 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_static.ak.facebook.com_0.localstorage   [12288]
O61 - LFC:Last File Created 24/08/2012 - 12:10:36 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_static.ak.facebook.com_0.localstorage-journal   [12896]
O61 - LFC:Last File Created 24/08/2012 - 12:10:36 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_telechargement.zebulon.fr_0.localstorage   [12288]
O61 - LFC:Last File Created 24/08/2012 - 12:10:36 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_telechargement.zebulon.fr_0.localstorage-journal   [11864]
O61 - LFC:Last File Created 24/08/2012 - 12:10:36 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.zebulon.fr_0.localstorage   [12288]
O61 - LFC:Last File Created 24/08/2012 - 12:10:36 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.zebulon.fr_0.localstorage-journal   [11864]
O61 - LFC:Last File Created 24/08/2012 - 12:10:36 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_googleads.g.doubleclick.net_0.localstorage   [12288]
O61 - LFC:Last File Created 24/08/2012 - 12:10:36 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_googleads.g.doubleclick.net_0.localstorage-journal   [11864]
O61 - LFC:Last File Created 24/08/2012 - 12:10:36 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_plusone.google.com_0.localstorage   [12288]
O61 - LFC:Last File Created 24/08/2012 - 12:10:36 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_plusone.google.com_0.localstorage-journal   [12896]
O61 - LFC:Last File Created 24/08/2012 - 12:10:36 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_s-static.ak.facebook.com_0.localstorage   [12288]
O61 - LFC:Last File Created 24/08/2012 - 12:10:36 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_s-static.ak.facebook.com_0.localstorage-journal   [12896]
O61 - LFC:Last File Created 24/08/2012 - 12:10:37 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_d.recomendedsite.com_0.localstorage   [12288]
O61 - LFC:Last File Created 24/08/2012 - 12:10:37 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_d.recomendedsite.com_0.localstorage-journal   [11864]
O61 - LFC:Last File Created 24/08/2012 - 12:10:37 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_googleads.g.doubleclick.net_0.localstorage   [12288]
O61 - LFC:Last File Created 24/08/2012 - 12:10:37 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_googleads.g.doubleclick.net_0.localstorage-journal   [12896]
O61 - LFC:Last File Created 24/08/2012 - 12:10:37 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_oryte.com_0.localstorage   [12288]
O61 - LFC:Last File Created 24/08/2012 - 12:10:37 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_oryte.com_0.localstorage-journal   [12896]
O61 - LFC:Last File Created 24/08/2012 - 12:10:37 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_storage.conduit.com_0.localstorage   [12288]
O61 - LFC:Last File Created 24/08/2012 - 12:10:37 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_storage.conduit.com_0.localstorage-journal   [12896]
O61 - LFC:Last File Created 24/08/2012 - 12:10:37 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_wiseconvert.com_0.localstorage   [12288]
O61 - LFC:Last File Created 24/08/2012 - 12:10:37 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_wiseconvert.com_0.localstorage-journal   [12896]
O61 - LFC:Last File Created 24/08/2012 - 12:10:37 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.akaqa.com_0.localstorage   [12288]
O61 - LFC:Last File Created 24/08/2012 - 12:10:37 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.akaqa.com_0.localstorage-journal   [12896]
O61 - LFC:Last File Created 24/08/2012 - 12:10:37 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.facebook.com_0.localstorage   [12288]
O61 - LFC:Last File Created 24/08/2012 - 12:10:37 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.facebook.com_0.localstorage-journal   [12896]
O61 - LFC:Last File Created 24/08/2012 - 12:10:39 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Favicons   [1576960]
O61 - LFC:Last File Created 24/08/2012 - 12:10:39 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Favicons-journal   [16384]
O61 - LFC:Last File Created 24/08/2012 - 12:10:50 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Cookies   [831488]
O61 - LFC:Last File Created 24/08/2012 - 12:10:50 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Cookies-journal   [16384]
O61 - LFC:Last File Created 24/08/2012 - 12:10:50 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Current Tabs   [218114]
O61 - LFC:Last File Created 24/08/2012 - 12:10:50 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\History   [3928064]
O61 - LFC:Last File Created 24/08/2012 - 12:10:50 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\History Provider Cache   [40104]
O61 - LFC:Last File Created 24/08/2012 - 12:10:50 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Local State   [5793]
O61 - LFC:Last File Created 24/08/2012 - 12:10:51 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Cache\data_0   [81920]
O61 - LFC:Last File Created 24/08/2012 - 12:10:51 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Cache\data_1   [1581056]
O61 - LFC:Last File Created 24/08/2012 - 12:10:51 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Cache\data_2   [2105344]
O61 - LFC:Last File Created 24/08/2012 - 12:10:51 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Cache\data_3   [4202496]
O61 - LFC:Last File Created 24/08/2012 - 12:10:51 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Current Session   [327111]
O61 - LFC:Last File Created 24/08/2012 - 12:10:51 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\History Index 2012-08   [282624]
O61 - LFC:Last File Created 24/08/2012 - 12:10:51 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\History Index 2012-08-journal   [16384]
O61 - LFC:Last File Created 24/08/2012 - 12:10:51 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\History-journal   [16384]
O61 - LFC:Last File Created 24/08/2012 - 12:10:51 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Preferences   [230697]
O61 - LFC:Last File Created 24/08/2012 - 12:10:51 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\Default\Visited Links   [131072]
O61 - LFC:Last File Created 24/08/2012 - 12:10:51 ---A- C:\Users\Hamza\AppData\Local\Google\Chrome\User Data\chrome_shutdown_ms.txt   [5]
~ Scan Files in 00mn 03s



---\\ Liste des outils de nettoyage (O63)
O63 - Logiciel: ZHPDiag 1.31 - (.Nicolas Coolman.) [HKLM] -- ZHPDiag_is1
~ Scan ADS in 00mn 00s



---\\ Liste des fichiers non signés (O65) (None)

---\\ File Associations Shell Spawning (O67)
O67 - Shell Spawning: <.bat> <batfile>[HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.cpl> <cplfile>[HKLM\..\cplopen\Command] (.Microsoft Corporation - Windows Control Panel.) -- C:\Windows\System32\control.exe
O67 - Shell Spawning: <.cmd> <cmdfile>[HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.com> <comfile>[HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.evt> <evtfile>[HKLM\..\open\Command] (.Microsoft Corporation - Lanceur du composant logiciel enfichable Observateur d’événements.) -- C:\Windows\System32\eventvwr.exe
O67 - Shell Spawning: <.exe> <exefile>[HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.html> <htmlfile>[HKLM\..\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
O67 - Shell Spawning: <.js> <JSFile>[HKLM\..\open\Command] (.Microsoft Corporation - Microsoft ® Windows Based Script Host.) -- C:\Windows\System32\WScript.exe
O67 - Shell Spawning: <.reg> <regfile>[HKLM\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\Windows\regedit.exe
O67 - Shell Spawning: <.html> <ChromeHTML>[HKCU\..\open\Command] (.Not Key.)
O67 - Shell Spawning: <.bat> <batfile>[HKCR\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.cpl> <cplfile>[HKCR\..\cplopen\Command] (.Microsoft Corporation - Windows Control Panel.) -- C:\Windows\System32\control.exe
O67 - Shell Spawning: <.cmd> <cmdfile>[HKCR\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.com> <comfile>[HKCR\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.evt> <evtfile>[HKCR\..\open\Command] (.Microsoft Corporation - Lanceur du composant logiciel enfichable Observateur d’événements.) -- C:\Windows\System32\eventvwr.exe
O67 - Shell Spawning: <.exe> <exefile>[HKCR\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.html> <ChromeHTML>[HKCR\..\open\Command] (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
O67 - Shell Spawning: <.js> <JSFile>[HKCR\..\open\Command] (.Microsoft Corporation - Microsoft ® Windows Based Script Host.) -- C:\Windows\System32\WScript.exe
O67 - Shell Spawning: <.reg> <regfile>[HKCR\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\Windows\regedit.exe
~ Scan Keys in 00mn 00s



---\\ Start Menu Internet (O68)
O68 - StartMenuInternet: <FIREFOX.EXE> <Mozilla Firefox>[HKLM\..\Shell\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe
O68 - StartMenuInternet: <Google Chrome> <Google Chrome>[HKLM\..\Shell\open\Command] (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
O68 - StartMenuInternet: <IEXPLORE.EXE> <Internet Explorer>[HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
O68 - StartMenuInternet: <FIREFOX.EXE> <Mozilla Firefox>[HKLM\..\InstallInfo\ShowIconsCommand] (...) -- C:\Program Files (x86)\Mozilla Firefox\uninstall\helper.exe (.not file.)
O68 - StartMenuInternet: <Google Chrome> <Google Chrome>[HKLM\..\InstallInfo\ShowIconsCommand] (...) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (.not file.)
O68 - StartMenuInternet: <IEXPLORE.EXE> <Internet Explorer>[HKLM\..\InstallInfo\ShowIconsCommand] (...) -- C:\Windows\System32\ie4uinit.exe (.not file.)
O68 - StartMenuInternet: <FIREFOX.EXE> <Mozilla Firefox>[HKLM\..\InstallInfo\ReinstallCommand] (...) -- C:\Program Files (x86)\Mozilla Firefox\uninstall\helper.exe (.not file.)
O68 - StartMenuInternet: <Google Chrome> <Google Chrome>[HKLM\..\InstallInfo\ReinstallCommand] (...) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (.not file.)
O68 - StartMenuInternet: <IEXPLORE.EXE> <Internet Explorer>[HKLM\..\InstallInfo\ReinstallCommand] (...) -- C:\Windows\System32\ie4uinit.exe (.not file.)
O68 - StartMenuInternet: <FIREFOX.EXE> <Mozilla Firefox>[HKLM\..\InstallInfo\HideIconsCommand] (...) -- C:\Program Files (x86)\Mozilla Firefox\uninstall\helper.exe (.not file.)
O68 - StartMenuInternet: <Google Chrome> <Google Chrome>[HKLM\..\InstallInfo\HideIconsCommand] (...) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (.not file.)
O68 - StartMenuInternet: <IEXPLORE.EXE> <Internet Explorer>[HKLM\..\InstallInfo\HideIconsCommand] (...) -- C:\Windows\System32\ie4uinit.exe (.not file.)
~ Scan Keys in 00mn 00s



---\\ Search Browser Infection (O69)
O69 - SBI: prefs.js [Hamza - 72o90cus.default] user_pref("browser.newtab.url", "http://search.babylon.com/?affID=111020&tt=3412_3&babsrc=NT_ss&mntrId=de91002b000000000000e0cb4e3[...]
O69 - SBI: prefs.js [Hamza - 72o90cus.default] user_pref("browser.search.defaultenginename", "Search the web (Babylon)");
O69 - SBI: prefs.js [Hamza - 72o90cus.default] user_pref("browser.search.order.1", "Search the web (Babylon)");
O69 - SBI: prefs.js [Hamza - 72o90cus.default] user_pref("browser.search.selectedEngine", "SweetIM Search");
O69 - SBI: prefs.js [Hamza - 72o90cus.default] user_pref("browser.startup.homepage", "http://home.sweetim.com/?st=1");
O69 - SBI: prefs.js [Hamza - 72o90cus.default] user_pref("extensions.BabylonToolbar.admin", false);
O69 - SBI: prefs.js [Hamza - 72o90cus.default] user_pref("extensions.BabylonToolbar.aflt", "babsst");
O69 - SBI: prefs.js [Hamza - 72o90cus.default] user_pref("extensions.BabylonToolbar.dfltLng", "en");
O69 - SBI: prefs.js [Hamza - 72o90cus.default] user_pref("extensions.BabylonToolbar.excTlbr", false);
O69 - SBI: prefs.js [Hamza - 72o90cus.default] user_pref("extensions.BabylonToolbar.id", "de91002b000000000000e0cb4e3fede1");
O69 - SBI: prefs.js [Hamza - 72o90cus.default] user_pref("extensions.BabylonToolbar.instlDay", "15572");
O69 - SBI: prefs.js [Hamza - 72o90cus.default] user_pref("extensions.BabylonToolbar.instlRef", "sst");
O69 - SBI: prefs.js [Hamza - 72o90cus.default] user_pref("extensions.BabylonToolbar.prdct", "BabylonToolbar");
O69 - SBI: prefs.js [Hamza - 72o90cus.default] user_pref("extensions.BabylonToolbar.prtnrId", "babylon");
O69 - SBI: prefs.js [Hamza - 72o90cus.default] user_pref("extensions.BabylonToolbar.tlbrId", "base");
O69 - SBI: prefs.js [Hamza - 72o90cus.default] user_pref("extensions.BabylonToolbar.tlbrSrchUrl", "http://www.google.com/search?babsrc=TB_ggl&q=");
O69 - SBI: prefs.js [Hamza - 72o90cus.default] user_pref("extensions.BabylonToolbar.vrsn", "1.6.4.6");
O69 - SBI: prefs.js [Hamza - 72o90cus.default] user_pref("extensions.BabylonToolbar.vrsni", "1.6.4.6");
O69 - SBI: prefs.js [Hamza - 72o90cus.default] user_pref("extensions.BabylonToolbar_i.babExt", "");
O69 - SBI: prefs.js [Hamza - 72o90cus.default] user_pref("extensions.BabylonToolbar_i.babTrack", "affID=111020&tt=3412_3");
O69 - SBI: prefs.js [Hamza - 72o90cus.default] user_pref("extensions.BabylonToolbar_i.newTab", true);
O69 - SBI: prefs.js [Hamza - 72o90cus.default] user_pref("extensions.BabylonToolbar_i.newTabUrl", "http://search.babylon.com/?affID=111020&tt=3412_3&babsrc=NT_ss&mntrId=de91002b[...]
O69 - SBI: prefs.js [Hamza - 72o90cus.default] user_pref("extensions.BabylonToolbar_i.smplGrp", "none");
O69 - SBI: prefs.js [Hamza - 72o90cus.default] user_pref("extensions.BabylonToolbar_i.srcExt", "ss");
O69 - SBI: prefs.js [Hamza - 72o90cus.default] user_pref("extensions.BabylonToolbar_i.vrsnTs", "1.6.4.620:23:59");
O69 - SBI: prefs.js [Hamza - 72o90cus.default] user_pref("keyword.URL", "http://search.sweetim.com/search.asp?src=2&crg=3.1010000&q=");
O69 - SBI: prefs.js [Hamza - 72o90cus.default] user_pref("sweetim.toolbar.cargo", "3.1010000");
O69 - SBI: prefs.js [Hamza - 72o90cus.default] user_pref("sweetim.toolbar.dialogs.0.enable", "true");
O69 - SBI: prefs.js [Hamza - 72o90cus.default] user_pref("sweetim.toolbar.dialogs.0.handler", "chrome://sim_toolbar_package/content/optionsdialog-handler.js");
O69 - SBI: prefs.js [Hamza - 72o90cus.default] user_pref("sweetim.toolbar.dialogs.0.height", "335");
O69 - SBI: prefs.js [Hamza - 72o90cus.default] user_pref("sweetim.toolbar.dialogs.0.id", "id_options_dialog");
O69 - SBI: prefs.js [Hamza - 72o90cus.default] user_pref("sweetim.toolbar.dialogs.0.title", "$string.config.label;");
O69 - SBI: prefs.js [Hamza - 72o90cus.default] user_pref("sweetim.toolbar.dialogs.0.url", "http://www.sweetim.com/simffbar/options_remote_ff.html");
O69 - SBI: prefs.js [Hamza - 72o90cus.default] user_pref("sweetim.toolbar.dialogs.0.width", "761");
O69 - SBI: prefs.js [Hamza - 72o90cus.default] user_pref("sweetim.toolbar.dialogs.1.enable", "true");
O69 - SBI: prefs.js [Hamza - 72o90cus.default] user_pref("sweetim.toolbar.dialogs.1.handler", "chrome://sim_toolbar_package/content/exampledialog-handler.js");
O69 - SBI: prefs.js [Hamza - 72o90cus.default] user_pref("sweetim.toolbar.dialogs.1.height", "300");
O69 - SBI: prefs.js [Hamza - 72o90cus.default] user_pref("sweetim.toolbar.dialogs.1.id", "id_example_dialog");
O69 - SBI: prefs.js [Hamza - 72o90cus.default] user_pref("sweetim.toolbar.dialogs.1.title", "Example (unit-test) dialog");
O69 - SBI: prefs.js [Hamza - 72o90cus.default] user_pref("sweetim.toolbar.dialogs.1.url", "chrome://sim_toolbar_package/content/exampledialog.html");
O69 - SBI: prefs.js [Hamza - 72o90cus.default] user_pref("sweetim.toolbar.dialogs.1.width", "500");
O69 - SBI: prefs.js [Hamza - 72o90cus.default] user_pref("sweetim.toolbar.dnscatch.domain-blacklist", ".*.sweetim.com/.*|.*.facebook.com/.*|.*.google.com/.*|.*.google.co.in/.*|.[...]
O69 - SBI: prefs.js [Hamza - 72o90cus.default] user_pref("sweetim.toolbar.highlight.colors", "#FFFF00,#00FFE4,#5AFF00,#0087FF,#FFCC00,#FF00F0");
O69 - SBI: prefs.js [Hamza - 72o90cus.default] user_pref("sweetim.toolbar.logger.ConsoleHandler.MinReportLevel", "7");
O69 - SBI: prefs.js [Hamza - 72o90cus.default] user_pref("sweetim.toolbar.logger.FileHandler.FileName", "ff-toolbar.log");
O69 - SBI: prefs.js [Hamza - 72o90cus.default] user_pref("sweetim.toolbar.logger.FileHandler.MaxFileSize", "200000");
O69 - SBI: prefs.js [Hamza - 72o90cus.default] user_pref("sweetim.toolbar.logger.FileHandler.MinReportLevel", "7");
O69 - SBI: prefs.js [Hamza - 72o90cus.default] user_pref("sweetim.toolbar.mode.debug", "false");
O69 - SBI: prefs.js [Hamza - 72o90cus.default] user_pref("sweetim.toolbar.previous.browser.search.defaultenginename", "SearchTheWeb");
O69 - SBI: prefs.js [Hamza - 72o90cus.default] user_pref("sweetim.toolbar.previous.browser.search.selectedEngine", "Search the web (Babylon)");
O69 - SBI: prefs.js [Hamza - 72o90cus.default] user_pref("sweetim.toolbar.previous.browser.startup.homepage", "http://search.babylon.com/?affID=111020&tt=3412_3&babsrc=HP_ss&mnt[...]
O69 - SBI: prefs.js [Hamza - 72o90cus.default] user_pref("sweetim.toolbar.previous.keyword.URL", "http://search.sweetim.com/search.asp?src=2&q=");
O69 - SBI: prefs.js [Hamza - 72o90cus.default] user_pref("sweetim.toolbar.scripts.0.addcontextdiv", "true");
O69 - SBI: prefs.js [Hamza - 72o90cus.default] user_pref("sweetim.toolbar.scripts.0.callback", "simVerification");
O69 - SBI: prefs.js [Hamza - 72o90cus.default] user_pref("sweetim.toolbar.scripts.0.domain-blacklist", "");
O69 - SBI: prefs.js [Hamza - 72o90cus.default] user_pref("sweetim.toolbar.scripts.0.domain-whitelist", "http://(www.|apps.)?facebook\\.com.*");
O69 - SBI: prefs.js [Hamza - 72o90cus.default] user_pref("sweetim.toolbar.scripts.0.elementid", "id_script_sim_fb");
O69 - SBI: prefs.js [Hamza - 72o90cus.default] user_pref("sweetim.toolbar.scripts.0.enable", "true");
O69 - SBI: prefs.js [Hamza - 72o90cus.default] user_pref("sweetim.toolbar.scripts.0.id", "id_script_fb");
O69 - SBI: prefs.js [Hamza - 72o90cus.default] user_pref("sweetim.toolbar.scripts.0.url", "http://sc.sweetim.com/apps/in/fb/infb.js");
O69 - SBI: prefs.js [Hamza - 72o90cus.default] user_pref("sweetim.toolbar.scripts.1.addcontextdiv", "false");
O69 - SBI: prefs.js [Hamza - 72o90cus.default] user_pref("sweetim.toolbar.scripts.1.callback", "");
O69 - SBI: prefs.js [Hamza - 72o90cus.default] user_pref("sweetim.toolbar.scripts.1.domain-blacklist", ".*.google..*|.*.bing..*|.*.live..*|.*.msn..*|.*.yahoo..*|.*.youtube.com.*[...]
O69 - SBI: prefs.js [Hamza - 72o90cus.default] user_pref("sweetim.toolbar.scripts.1.domain-whitelist", "");
O69 - SBI: prefs.js [Hamza - 72o90cus.default] user_pref("sweetim.toolbar.scripts.1.elementid", "id_predict_include_script");
O69 - SBI: prefs.js [Hamza - 72o90cus.default] user_pref("sweetim.toolbar.scripts.1.enable", "false");
O69 - SBI: prefs.js [Hamza - 72o90cus.default] user_pref("sweetim.toolbar.scripts.1.id", "id_script_prad");
O69 - SBI: prefs.js [Hamza - 72o90cus.default] user_pref("sweetim.toolbar.scripts.1.url", "http://cdn1.predictad.com/scripts/publishers/sweetim/predictadme.js");
O69 - SBI: prefs.js [Hamza - 72o90cus.default] user_pref("sweetim.toolbar.search.external", "<?xml version=\"1.0\"?><TOOLBAR><EXTERNAL_SEARCH engine=\"http://*google.*\" param=\[...]
O69 - SBI: prefs.js [Hamza - 72o90cus.default] user_pref("sweetim.toolbar.search.history.capacity", "10");
O69 - SBI: prefs.js [Hamza - 72o90cus.default] user_pref("sweetim.toolbar.searchguard.enable", "true");
O69 - SBI: prefs.js [Hamza - 72o90cus.default] user_pref("sweetim.toolbar.simapp_id", "{48371130-4A9B-11E1-88C0-E0CB4E3FEDE1}");
O69 - SBI: prefs.js [Hamza - 72o90cus.default] user_pref("sweetim.toolbar.urls.homepage", "http://home.sweetim.com/?crg=3.1010000&st=12&barid={48371130-4A9B-11E1-88C0-E0CB4E3FED[...]
O69 - SBI: prefs.js [Hamza - 72o90cus.default] user_pref("sweetim.toolbar.version", "1.5.0.2");
O69 - SBI: SearchScopes [HKCU] {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} [DefaultScope] - (Search the web (Babylon)) - http://search.babylon.com
O69 - SBI: SearchScopes [HKCU] {BFFED5CA-8BDF-47CC-AED0-23F4E6D77732} - (SearchTheWeb) - http://search.iminent.com
O69 - SBI: SearchScopes [HKCU] {EEE6C360-6118-11DC-9C72-001320C79847} - (SweetIM Search) - http://search.sweetim.com
~ Scan Keys in 00mn 00s



---\\ Recherche des services démarrés par Svchost (O83)
O83 - Search Svchost Services: AeLookupSvc (AeLookupSvc) . (.Microsoft Corporation - Service Expérience d’application.) -- C:\Windows\System32\aelupsvc.dll   [72192]
O83 - Search Svchost Services: CertPropSvc (CertPropSvc) . (.Microsoft Corporation - Service de propagation de certificats de cartes à puce Microsoft.) -- C:\Windows\System32\certprop.dll   [80384]
O83 - Search Svchost Services: SCPolicySvc (SCPolicySvc) . (.Microsoft Corporation - Service de propagation de certificats de cartes à puce Microsoft.) -- C:\Windows\System32\certprop.dll   [80384]
O83 - Search Svchost Services: lanmanserver (lanmanserver) . (.Microsoft Corporation - DLL du service Serveur.) -- C:\Windows\System32\srvsvc.dll   [236032]
O83 - Search Svchost Services: gpsvc (gpsvc) . (.Microsoft Corporation - DLL du service Serveur.) -- C:\Windows\System32\srvsvc.dll   [236032]
O83 - Search Svchost Services: IKEEXT (IKEEXT) . (.Microsoft Corporation - Extension IKE.) -- C:\Windows\System32\ikeext.dll   [853504]
O83 - Search Svchost Services: AudioSrv (AudioSrv) . (.Microsoft Corporation - Service Audio Windows.) -- C:\Windows\System32\Audiosrv.dll   [679424]
O83 - Search Svchost Services: Rasauto (Rasauto) . (.Microsoft Corporation - Gestionnaire de numérotation automatique d’accès distant.) -- C:\Windows\System32\rasauto.dll   [99328]
O83 - Search Svchost Services: Rasman (Rasman) . (.Microsoft Corporation - Gestionnaire de connexions d’accès distant.) -- C:\Windows\System32\rasmans.dll   [344064]
O83 - Search Svchost Services: Remoteaccess (Remoteaccess) . (.Microsoft Corporation - Gestionnaire d’interface dynamique.) -- C:\Windows\System32\mprdim.dll   [97792]
O83 - Search Svchost Services: SENS (SENS) . (.Microsoft Corporation - Service de notification d’événements système (SENS).) -- C:\Windows\System32\sens.dll   [64512]
O83 - Search Svchost Services: Sharedaccess (Sharedaccess) . (.Microsoft Corporation - Composants de l’application d’assistance à Microsoft NAT.) -- C:\Windows\System32\ipnathlp.dll   [359424]
O83 - Search Svchost Services: Tapisrv (Tapisrv) . (.Microsoft Corporation - Serveur de téléphonie Microsoft® Windows(TM).) -- C:\Windows\System32\tapisrv.dll   [316928]
O83 - Search Svchost Services: TermService (TermService) . (.Microsoft Corporation - Gestionnaire des connexions distantes du serveur hôte de session Burea.) -- C:\Windows\System32\termsrv.dll   [680960]
O83 - Search Svchost Services: wuauserv (wuauserv) . (.Microsoft Corporation - Agent de mise à jour automatique Windows Update.) -- C:\Windows\System32\wuaueng.dll   [2428952]
O83 - Search Svchost Services: BITS (BITS) . (.Microsoft Corporation - Agent de mise à jour automatique Windows Update.) -- C:\Windows\System32\wuaueng.dll   [2428952]
O83 - Search Svchost Services: ShellHWDetection (ShellHWDetection) . (.Microsoft Corporation - Dll des services Windows Shell.) -- C:\Windows\System32\shsvcs.dll   [370688]
O83 - Search Svchost Services: iphlpsvc (iphlpsvc) . (.Microsoft Corporation - Service offrant une connectivité IPv6 sur un réseau IPv4..) -- C:\Windows\System32\iphlpsvc.dll   [569344]
O83 - Search Svchost Services: seclogon (seclogon) . (.Microsoft Corporation - DLL de service d’ouverture de session secondaire.) -- C:\Windows\system32\seclogon.dll   [30720]
O83 - Search Svchost Services: AppInfo (AppInfo) . (.Microsoft Corporation - Service Informations d’application.) -- C:\Windows\System32\appinfo.dll   [70656]
O83 - Search Svchost Services: msiscsi (msiscsi) . (.Microsoft Corporation - Service de découverte iSCSI.) -- C:\Windows\System32\iscsiexe.dll   [156672]
O83 - Search Svchost Services: MMCSS (MMCSS) . (.Microsoft Corporation - Service Planificateur de classes multimédias.) -- C:\Windows\System32\mmcss.dll   [67584]
O83 - Search Svchost Services: winmgmt (winmgmt) . (.Microsoft Corporation - WMI.) -- C:\Windows\System32\wbem\WMIsvc.dll   [242688]
O83 - Search Svchost Services: SessionEnv (SessionEnv) . (.Microsoft Corporation - Service Configuration des services Bureau à distance.) -- C:\Windows\System32\sessenv.dll   [121856]
O83 - Search Svchost Services: browser (browser) . (.Microsoft Corporation - DLL du service Explorateur d’ordinateurs.) -- C:\Windows\System32\browser.dll   [136704]
O83 - Search Svchost Services: EapHost (EapHost) . (.Microsoft Corporation - DLL du service Explorateur d’ordinateurs.) -- C:\Windows\System32\browser.dll   [136704]
O83 - Search Svchost Services: schedule (schedule) . (.Microsoft Corporation - Service du Planificateur de tâches.) -- C:\Windows\System32\schedsvc.dll   [1110016]
O83 - Search Svchost Services: hkmsvc (hkmsvc) . (.Microsoft Corporation - Service du Planificateur de tâches.) -- C:\Windows\System32\schedsvc.dll   [1110016]
O83 - Search Svchost Services: wercplsupport (wercplsupport) . (.Microsoft Corporation - Rapports et solutions aux problèmes.) -- C:\Windows\System32\wercplsupport.dll   [84480]
O83 - Search Svchost Services: ProfSvc (ProfSvc) . (.Microsoft Corporation - ProfSvc.) -- C:\Windows\System32\profsvc.dll   [209920]
O83 - Search Svchost Services: Themes (Themes) . (.Microsoft Corporation - DLL du service des thèmes Windows Shell.) -- C:\Windows\System32\themeservice.dll   [44544]
O83 - Search Svchost Services: BDESVC (BDESVC) . (.Microsoft Corporation - DLL du service des thèmes Windows Shell.) -- C:\Windows\System32\themeservice.dll   [44544]
~ Scan Services in 00mn 00s



---\\ Recherche particuliere à la racine de certains dossiers (O84)
[MD5.1F2FF002A6A48EE32ACEBB299A39A837] [SPRF][07/12/2011] (.NirSoft - BlueScreenView.) -- C:\Users\Hamza\Desktop\BlueScreenView.exe   [54272]
~ Scan Files in 00mn 00s



---\\ Firewall Active Exception List (FirewallRules) (O87)
O87 - FAEL: "MCX-In-TCP" |In - None - P6 - FALSE | .(...) -- C:\Windows\ehome\ehshell.exe (.not file.)
O87 - FAEL: "MCX-Out-TCP" |Out - None - P6 - FALSE | .(...) -- C:\Windows\ehome\ehshell.exe (.not file.)
O87 - FAEL: "MCX-In-UDP" |In - None - P17 - FALSE | .(...) -- C:\Windows\ehome\ehshell.exe (.not file.)
O87 - FAEL: "MCX-Out-UDP" |Out - None - P17 - FALSE | .(...) -- C:\Windows\ehome\ehshell.exe (.not file.)
O87 - FAEL: "MCX-Prov-Out-TCP" |Out - None - P6 - FALSE | .(...) -- C:\Windows\ehome\mcx2prov.exe (.not file.)
O87 - FAEL: "MCX-McrMgr-Out-TCP" |Out - None - P6 - FALSE | .(...) -- C:\Windows\ehome\mcrmgr.exe (.not file.)
O87 - FAEL: "NetPres-In-TCP-NoScope" |In - Domain - P6 - FALSE | .(...) -- C:\Windows\system32\netproj.exe (.not file.)
O87 - FAEL: "NetPres-Out-TCP-NoScope" |Out - Domain - P6 - FALSE | .(...) -- C:\Windows\system32\netproj.exe (.not file.)
O87 - FAEL: "NetPres-WSD-In-UDP" |In - None - P17 - FALSE | .(...) -- C:\Windows\system32\netproj.exe (.not file.)
O87 - FAEL: "NetPres-WSD-Out-UDP" |Out - None - P17 - FALSE | .(...) -- C:\Windows\system32\netproj.exe (.not file.)
O87 - FAEL: "NetPres-In-TCP" |In - Public - P6 - FALSE | .(...) -- C:\Windows\system32\netproj.exe (.not file.)
O87 - FAEL: "NetPres-Out-TCP" |Out - Public - P6 - FALSE | .(...) -- C:\Windows\system32\netproj.exe (.not file.)
O87 - FAEL: "{66B6A0C7-54C7-49F8-8801-755E011B97A9}" |In - None - P6 - TRUE | .(...) -- C:\Program Files (x86)\uTorrent\uTorrent.exe (.not file.)
O87 - FAEL: "{2F36561D-8BA1-4A36-B7C0-484A5D1CDC4B}" |In - None - P17 - TRUE | .(...) -- C:\Program Files (x86)\uTorrent\uTorrent.exe (.not file.)
O87 - FAEL: "TCP Query User{8301D997-D23B-4563-9ACD-12E6D207DE13}C:\program files\apowersoft\streaming video recorder\streaming-video-recorder.exe" |In - Public - P6 - TRUE | .(...) -- C:\program files\apowersoft\streaming video recorder\streaming-video-
O87 - FAEL: "UDP Query User{30247A84-51E7-40FC-BA0E-AB1A700AAC85}C:\program files\apowersoft\streaming video recorder\streaming-video-recorder.exe" |In - Public - P17 - TRUE | .(...) -- C:\program files\apowersoft\streaming video recorder\streaming-video
O87 - FAEL: "TCP Query User{E99AFE7F-BB43-4F0C-B6A5-A026EFB14B4B}C:\program files (x86)\java\jre6\bin\javaw.exe" | In - Public - P6 - TRUE | .(.Sun Microsystems, Inc. - Java(TM) Platform SE binary.) -- C:\program files (x86)\java\jre6\bin\javaw.exe
O87 - FAEL: "UDP Query User{0A29DCF8-ED33-4956-B418-097425F7819E}C:\program files (x86)\java\jre6\bin\javaw.exe" | In - Public - P17 - TRUE | .(.Sun Microsystems, Inc. - Java(TM) Platform SE binary.) -- C:\program files (x86)\java\jre6\bin\javaw.exe
O87 - FAEL: "TCP Query User{8635498C-041B-46AC-8700-1FEFB99BA567}C:\program files (x86)\java\jre6\bin\javaw.exe" | In - Private - P6 - TRUE | .(.Sun Microsystems, Inc. - Java(TM) Platform SE binary.) -- C:\program files (x86)\java\jre6\bin\javaw.exe
O87 - FAEL: "UDP Query User{746E40C2-26AA-4F05-AD8F-029B21671D44}C:\program files (x86)\java\jre6\bin\javaw.exe" | In - Private - P17 - TRUE | .(.Sun Microsystems, Inc..) -- C:\program files (x86)\java\jre6\bin\javaw.exe
O87 - FAEL: "TCP Query User{C7C04419-9BF6-425E-B3D8-2992BFD92527}C:\program files (x86)\counter-strike source\hl2.exe" | In - Private - P6 - TRUE | .(...) -- C:\program files (x86)\counter-strike source\hl2.exe
O87 - FAEL: "UDP Query User{7C1A0FB7-D11D-463B-9995-60755FBD7527}C:\program files (x86)\counter-strike source\hl2.exe" | In - Private - P17 - TRUE | .(...) -- C:\program files (x86)\counter-strike source\hl2.exe
O87 - FAEL: "TCP Query User{50C3F0B7-C1F8-4CD8-A68A-259BEC3C81A9}C:\program files (x86)\counter-strike source\hl2.exe" | In - Public - P6 - TRUE | .(...) -- C:\program files (x86)\counter-strike source\hl2.exe
O87 - FAEL: "UDP Query User{6D3A08B8-8050-4622-B462-EFA649754BF2}C:\program files (x86)\counter-strike source\hl2.exe" | In - Public - P17 - TRUE | .(...) -- C:\program files (x86)\counter-strike source\hl2.exe
O87 - FAEL: "{46D6AC20-DFD8-4FD5-AC8A-421C7AA5BCF8}" | In - None - P6 - TRUE | .(.Skype Limited - Facebook Video Calling.) -- C:\Users\MoH\AppData\Local\Facebook\Video\Skype\FacebookVideoCalling.exe
O87 - FAEL: "{BF367C53-102C-409F-BACC-1FE09CBA01AB}" | In - None - P6 - TRUE | .(.Skype Technologies S.A. - Skype.) -- C:\Program Files (x86)\Skype\Phone\Skype.exe
O87 - FAEL: "{F5C4F2B8-A582-480D-8566-1E03737FFCDE}" | In - None - P6 - TRUE | .(.Iminent - Iminent.) -- C:\Program Files (x86)\Iminent\Iminent.exe
O87 - FAEL: "{36544343-42B2-4EB6-9AED-904CE351D205}" | In - None - P6 - TRUE | .(.Iminent - Iminent.) -- C:\Program Files (x86)\Iminent\Iminent.Messengers.exe
O87 - FAEL: "{7C7DA65B-1140-4AA0-A431-E848EACC73BD}" | In - Private - P6 - TRUE | .(.TeamViewer GmbH - TeamViewer Remote Control Application.) -- C:\Program Files (x86)\TeamViewer\Version7\TeamViewer.exe
O87 - FAEL: "{62054FCC-AF37-4AE4-A035-9D1F5E875E5B}" | In - Private - P17 - TRUE | .(.TeamViewer GmbH - TeamViewer Remote Control Application.) -- C:\Program Files (x86)\TeamViewer\Version7\TeamViewer.exe
O87 - FAEL: "{2784BCFD-819A-47A1-8195-69BDBA9FE9DC}" | In - Private - P6 - TRUE | .(.TeamViewer GmbH - TeamViewer Remote Control Application.) -- C:\Program Files (x86)\TeamViewer\Version7\TeamViewer_Service.exe
O87 - FAEL: "{B6021EEF-8846-4F59-A66B-2B3F6E0E763C}" | In - Private - P17 - TRUE | .(.TeamViewer GmbH - TeamViewer Remote Control Application.) -- C:\Program Files (x86)\TeamViewer\Version7\TeamViewer_Service.exe
O87 - FAEL: "{269827DB-69FE-49C4-BF26-3D7C1D1F519F}" | In - Private - P6 - TRUE | .(.SweetIM Technologies Ltd. - Update Manager for SweetPacks.) -- C:\Program Files (x86)\SweetIM\Communicator\SweetPacksUpdateManager.exe
O87 - FAEL: "{877E8A0B-4542-49B4-830A-DF3939E805DD}" | In - Private - P17 - TRUE | .(.SweetIM Technologies Ltd. - Update Manager for SweetPacks.) -- C:\Program Files (x86)\SweetIM\Communicator\SweetPacksUpdateManager.exe
O87 - FAEL: "{A6971F10-36AE-45D9-9138-1359AD6E236A}" |In - Private - P6 - TRUE | .(...) -- C:\Program Files (x86)\eFusion\BlackShot\system\BlackShot.exe (.not file.)
O87 - FAEL: "{9E7EF5D4-478C-405B-8752-EF090457398C}" |In - Private - P17 - TRUE | .(...) -- C:\Program Files (x86)\eFusion\BlackShot\system\BlackShot.exe (.not file.)
O87 - FAEL: "{4E0AA96B-4AA2-4E7A-8E1C-31B159AD0363}" | In - Private - P6 - TRUE | .(.CybelSoft - Service de détection matériel.) -- C:\Program Files\ma-config.com\x64\maconfservice.exe
O87 - FAEL: "{40FA5E36-FA60-479D-9A8C-0785219D4490}" | In - Private - P17 - TRUE | .(.CybelSoft - Service de détection matériel.) -- C:\Program Files\ma-config.com\x64\maconfservice.exe
~ Scan Firewall in 00mn 00s



---\\ Scan Additionnel (O88)
Database Version : 9183 - (31/07/2012)
Clés trouvées (Keys found) : 207
Valeurs trouvées (Values found) : 1
Dossiers trouvés  (Folders found) : 31
Fichiers trouvés  (Files found) : 2

[HKLM\Software\WOW6432Node\Classes\AppID\esrv.EXE]   =>Toolbar.Babylon
[HKLM\Software\WOW6432Node\Classes\AppID\GenericAskToolbar.DLL]   =>Toolbar.AskSBar
[HKLM\Software\WOW6432Node\Classes\AppID\PriceGongIE.DLL]   =>Adware.PriceGong
[HKLM\Software\WOW6432Node\Classes\AppID\TbCommonUtils.DLL]   =>Toolbar.Agent
[HKLM\Software\WOW6432Node\Classes\AppID\TbHelper.EXE]   =>Toolbar.Agent
[HKLM\Software\WOW6432Node\Classes\CLSID\{00000000-6E41-4FD3-8538-502F5495E5FC}]   =>Toolbar.AskTBar
[HKLM\Software\WOW6432Node\Classes\Interface\{01221FCC-4BFB-461C-B08C-F6D2DF309921}]   =>Adware.SocialSkinz
[HKLM\Software\WOW6432Node\Classes\CLSID\{02054E11-5113-4BE3-8153-AA8DFB5D3761}]   =>Adware.Agent
[HKLM\Software\WOW6432Node\Classes\Interface\{021B4049-F57D-4565-A693-FD3B04786BFA}]   =>Adware.IMBooster
[HKLM\Software\WOW6432Node\Classes\Interface\{0362AA09-808D-48E9-B360-FB51A8CBCE09}]   =>Adware.IMBooster
[HKLM\Software\WOW6432Node\Classes\Interface\{06844020-CD0B-3D3D-A7FE-371153013E49}]   =>Adware.IMBooster
[HKLM\Software\WOW6432Node\Classes\AppID\{09C554C3-109B-483C-A06B-F14172F1A947}]   =>Adware.Agent
[HKLM\Software\WOW6432Node\Classes\Interface\{0ADC01BB-303B-3F8E-93DA-12C140E85460}]   =>Adware.IMBooster
[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ecdf796-c2dc-4d79-a620-cce0c0a66cc9}]   =>Adware.MyWebSearch
[HKLM\Software\WOW6432Node\Classes\Interface\{10D3722F-23E6-3901-B6C1-FF6567121920}]   =>PUP.RewardsArcade
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{11111111-1111-1111-1111-110011221158}]   =>PUP.RewardsArcade
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{11111111-1111-1111-1111-110011221158}]   =>PUP.RewardsArcade
[HKLM\Software\WOW6432Node\Classes\CLSID\{11111111-1111-1111-1111-110011221158}]   =>PUP.RewardsArcade
[HKLM\Software\WOW6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{11111111-1111-1111-1111-110011221158}]   =>PUP.RewardsArcade
[HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110011221158}]   =>PUP.RewardsArcade
[HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{11111111-1111-1111-1111-110011221158}]   =>PUP.RewardsArcade
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{1631550F-191D-4826-B069-D9439253D926}]   =>Adware.PriceGong
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{1631550F-191D-4826-B069-D9439253D926}]   =>Adware.PriceGong
[HKLM\Software\WOW6432Node\Classes\CLSID\{1631550F-191D-4826-B069-D9439253D926}]   =>Adware.PriceGong
[HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1631550F-191D-4826-B069-D9439253D926}]   =>Adware.PriceGong
[HKLM\Software\WOW6432Node\Classes\Interface\{1675E62B-F911-3B7B-A046-EB57261212F3}]   =>PUP.RewardsArcade
[HKLM\Software\WOW6432Node\Classes\Interface\{192929F2-9273-3894-91B0-F54671C4C861}]   =>PUP.RewardsArcade
[HKLM\Software\WOW6432Node\Classes\CLSID\{1C950DE5-D31E-42FB-AFB9-91B0161633D8}]   =>Adware.SocialSkinz
[HKLM\Software\WOW6432Node\Classes\CLSID\{291BCCC1-6890-484a-89D3-318C928DAC1B}]   =>Toolbar.Babylon
[HKLM\Software\WOW6432Node\Classes\Interface\{2932897E-3036-43D9-8A64-B06447992065}]   =>PUP.RewardsArcade
[HKLM\Software\Classes\TypeLib\{2996F0E7-292B-4CAE-893F-47B8B1C05B56}]   =>Toolbar.AskSBar
[HKLM\Software\WOW6432Node\Classes\Interface\{2a42d13c-d427-4787-821b-cf6973855778}]   =>Adware.Agent
[HKLM\Software\WOW6432Node\Classes\Interface\{2A42D13C-D427-4787-821B-CF6973855778}]   =>Adware.SocialSkinz
[HKLM\Software\Classes\TypeLib\{2BF2028E-3F3C-4C05-AB45-B2F1DCFE0759}]   =>PUP.RewardsArcade
[HKLM\Software\WOW6432Node\Classes\Interface\{2DE92D29-A042-3C37-BFF8-07C7D8893EFA}]   =>PUP.RewardsArcade
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{2EECD738-5844-4A99-B4B6-146BF802613B}]   =>Toolbar.Agent
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{2EECD738-5844-4A99-B4B6-146BF802613B}]   =>Toolbar.Agent
[HKLM\Software\WOW6432Node\Classes\CLSID\{2EECD738-5844-4A99-B4B6-146BF802613B}]   =>Toolbar.Agent
[HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2EECD738-5844-4A99-B4B6-146BF802613B}]   =>Toolbar.Agent
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{2EECD738-5844-4a99-B4B6-146BF802613B}]   =>Toolbar.Babylon
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{2EECD738-5844-4a99-B4B6-146BF802613B}]   =>Toolbar.Babylon
[HKLM\Software\WOW6432Node\Classes\CLSID\{2EECD738-5844-4a99-B4B6-146BF802613B}]   =>Toolbar.Babylon
[HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2EECD738-5844-4a99-B4B6-146BF802613B}]   =>Toolbar.Babylon
[HKLM\Software\WOW6432Node\Classes\Interface\{32B80AD6-1214-45F4-994E-78A5D482C000}]   =>PUP.RewardsArcade
[HKLM\Software\WOW6432Node\Classes\AppID\{35C1605E-438B-4D64-AAB1-8885F097A9B1}]   =>Toolbar.Babylon
[HKLM\Software\Classes\TypeLib\{35C1605E-438B-4D64-AAB1-8885F097A9B1}]   =>Toolbar.Babylon
[HKLM\Software\WOW6432Node\Classes\Interface\{3A8E103F-B2B7-3BEF-B3B0-88E29B2420E4}]   =>PUP.RewardsArcade
[HKLM\Software\WOW6432Node\Classes\CLSID\{3BDF4CE9-E81D-432B-A55E-9F0570CE811F}]   =>Adware.SocialSkinz
[HKLM\Software\WOW6432Node\Classes\Interface\{3d8478aa-7b88-48a9-8bcb-b85d594411ec}]   =>Adware.SocialSkinz
[HKLM\Software\WOW6432Node\Classes\Interface\{44C3C1DB-2127-433C-98EC-4C9412B5FC3A}]   =>Toolbar.Babylon
[HKLM\Software\Classes\TypeLib\{4509D3CC-B642-4745-B030-645B79522C6D}]   =>Toolbar.Conduit
[HKLM\Software\WOW6432Node\Classes\Interface\{452AE416-9A97-44CA-93DA-D0F15C36254F}]   =>Adware.SocialSkinz
[HKLM\Software\WOW6432Node\Classes\Interface\{45CDA4F7-594C-49A0-AAD1-8224517FE979}]   =>Adware.SocialSkinz
[HKLM\Software\WOW6432Node\Classes\Interface\{478CE5D3-D38E-3FFE-8DBE-8C4A0F1C4D8D}]   =>PUP.RewardsArcade
[HKLM\Software\WOW6432Node\Classes\Interface\{4897bba6-48d9-468c-8efa-846275d7701b}]   =>Adware.SocialSkinz
[HKLM\Software\WOW6432Node\Classes\Interface\{48B7DA4E-69ED-39E3-BAD5-3E3EFF22CFB0}]   =>PUP.RewardsArcade
[HKLM\Software\WOW6432Node\Classes\AppID\{4CE516A7-F7AC-4628-B411-8F886DC5733E}]   =>Adware.SocialSkinz
[HKLM\Software\Classes\TypeLib\{4d3b167e-5fd8-4276-8fd7-9df19c1e4d19}]   =>Toolbar.SweetIM
[HKLM\Software\WOW6432Node\Classes\Interface\{4D5132DD-BB2B-4249-B5E0-D145A8C982E1}]   =>Toolbar.Babylon
[HKLM\Software\WOW6432Node\Classes\Interface\{4D8ED2B3-DC62-43EC-ABA3-5B74F046B1BE}]   =>Adware.SocialSkinz
[HKLM\Software\WOW6432Node\Classes\AppID\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}]   =>Toolbar.Babylon
[HKLM\Software\Classes\TypeLib\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}]   =>Toolbar.Babylon
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{58124A0B-DC32-4180-9BFF-E0E21AE34026}]   =>Adware.IMBooster
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{58124A0B-DC32-4180-9BFF-E0E21AE34026}]   =>Adware.IMBooster
[HKLM\Software\WOW6432Node\Classes\CLSID\{58124A0B-DC32-4180-9BFF-E0E21AE34026}]   =>Adware.IMBooster
[HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{58124A0B-DC32-4180-9BFF-E0E21AE34026}]   =>Adware.IMBooster
[HKLM\Software\WOW6432Node\Classes\Interface\{5982F405-44E4-3BBB-BAC4-CF8141CBBC5C}]   =>PUP.RewardsArcade
[HKLM\Software\WOW6432Node\Classes\Interface\{5D8C3CC3-3C05-38A1-B244-924A23115FE9}]   =>PUP.RewardsArcade
[HKLM\Software\WOW6432Node\Classes\AppID\{628F3201-34D0-49C0-BB9A-82A26AEFB291}]   =>Adware.SocialSkinz
[HKLM\Software\WOW6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{628F3201-34D0-49C0-BB9A-82A26AEFB291}]   =>Adware.SocialSkinz
[HKLM\Software\WOW6432Node\Classes\Interface\{641593AF-D9FD-30F7-B783-36E16F7A2E08}]   =>PUP.RewardsArcade
[HKLM\Software\WOW6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{68B81CCD-A80C-4060-8947-5AE69ED01199}]   =>Adware.IMBooster
[HKLM\Software\WOW6432Node\Classes\Interface\{6C434537-053E-486D-B62A-160059D9D456}]   =>Toolbar.Ask
[HKLM\Software\Classes\TypeLib\{6E8BF012-2C85-4834-B10A-1B31AF173D70}]   =>Toolbar.Babylon
[HKLM\Software\WOW6432Node\Classes\Interface\{706D4A4B-184A-4434-B331-296B07493D2D}]   =>Toolbar.Babylon
[HKLM\Software\WOW6432Node\Classes\Interface\{711FC48A-1356-3932-94D8-A8B733DBC7E4}]   =>PUP.RewardsArcade
[HKLM\Software\WOW6432Node\Classes\Interface\{72227B7F-1F02-3560-95F5-592E68BACC0C}]   =>PUP.RewardsArcade
[HKLM\Software\WOW6432Node\Classes\Interface\{7B5E8CE3-4722-4C0E-A236-A6FF731BEF37}]   =>PUP.RewardsArcade
[HKLM\Software\WOW6432Node\Classes\Interface\{81E852CC-1FD5-4004-8761-79A48B975E29}]   =>Adware.SocialSkinz
[HKLM\Software\WOW6432Node\Classes\CLSID\{82ac53b4-164c-4b07-a016-437a8388b81a}]   =>Toolbar.SweetIM
[HKLM\Software\WOW6432Node\Classes\AppID\{835315FC-1BF6-4CA9-80CD-F6C158D40692}]   =>Adware.PriceGong
[HKLM\Software\WOW6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{8375D9C8-634F-4ECB-8CF5-C7416BA5D542}]   =>Toolbar.Babylon
[HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{86D4B82A-ABED-442A-BE86-96357B70F4FE}]   =>Toolbar.AskSBar
[HKLM\Software\WOW6432Node\Classes\Interface\{890D4F59-5ED0-3CB4-8E0E-74A5A86E7ED0}]   =>PUP.RewardsArcade
[HKLM\Software\Classes\TypeLib\{8B3372D0-09F0-41A5-8D9B-134E148672FB}]   =>Adware.PriceGong
[HKLM\Software\WOW6432Node\Classes\Interface\{8BE10F21-185F-4CA0-B789-9921674C3993}]   =>Toolbar.Babylon
[HKLM\Software\WOW6432Node\Classes\Interface\{8C68913C-AC3C-4494-8B9C-984D87C85003}]   =>PUP.RewardsArcade
[HKLM\Software\WOW6432Node\Classes\Interface\{8D019513-083F-4AA5-933F-7D43A6DA82C4}]   =>PUP.RewardsArcade
[HKLM\Software\WOW6432Node\Classes\Interface\{91CF619A-4686-4CA4-9232-3B2E6B63AA92}]   =>Toolbar.Ask
[HKLM\Software\WOW6432Node\Classes\Interface\{923F6FB8-A390-370E-A0D2-DD505432481D}]   =>PUP.RewardsArcade
[HKLM\Software\WOW6432Node\Classes\Interface\{94C0B25D-3359-4B10-B227-F96A77DB773F}]   =>Toolbar.Babylon
[HKLM\Software\WOW6432Node\Classes\Interface\{95B6A271-FEB4-4160-B0FF-44394C21C8DC}]   =>Adware.SocialSkinz
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{977AE9CC-AF83-45E8-9E03-E2798216E2D5}]   =>Adware.IMBooster
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{977AE9CC-AF83-45E8-9E03-E2798216E2D5}]   =>Adware.IMBooster
[HKLM\Software\WOW6432Node\Classes\CLSID\{977AE9CC-AF83-45E8-9E03-E2798216E2D5}]   =>Adware.IMBooster
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{97F2FF5B-260C-4CCF-834A-2DDA4E29E39E}]   =>Toolbar.Agent
[HKLM\Software\WOW6432Node\Classes\CLSID\{97F2FF5B-260C-4CCF-834A-2DDA4E29E39E}]   =>Toolbar.Agent
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{97F2FF5B-260C-4ccf-834A-2DDA4E29E39E}]   =>Toolbar.Babylon
[HKLM\Software\WOW6432Node\Classes\CLSID\{97F2FF5B-260C-4ccf-834A-2DDA4E29E39E}]   =>Toolbar.Babylon
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{98889811-442D-49dd-99D7-DC866BE87DBC}]   =>Toolbar.Babylon
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{98889811-442D-49dd-99D7-DC866BE87DBC}]   =>Toolbar.Babylon
[HKLM\Software\WOW6432Node\Classes\CLSID\{98889811-442D-49dd-99D7-DC866BE87DBC}]   =>Toolbar.Babylon
[HKLM\Software\WOW6432Node\Classes\AppID\{9B0CB95C-933A-4B8C-B6D4-EDCD19A43874}]   =>Toolbar.AskSBar
[HKLM\Software\WOW6432Node\Classes\Interface\{9BBB26EF-B178-35D6-9D3D-B485F4279FE5}]   =>PUP.RewardsArcade
[HKLM\Software\WOW6432Node\Classes\CLSID\{9F34B17E-FF0D-4FAB-97C4-9713FEE79052}]   =>Adware.SocialSkinz
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{A09AB6EB-31B5-454C-97EC-9B294D92EE2A}]   =>Adware.IMBooster
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{A09AB6EB-31B5-454C-97EC-9B294D92EE2A}]   =>Adware.IMBooster
[HKLM\Software\WOW6432Node\Classes\CLSID\{A09AB6EB-31B5-454C-97EC-9B294D92EE2A}]   =>Adware.IMBooster
[HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A09AB6EB-31B5-454C-97EC-9B294D92EE2A}]   =>Adware.IMBooster
[HKLM\Software\WOW6432Node\Classes\Interface\{A439801C-961D-452C-AB42-7848E9CBD289}]   =>Toolbar.Babylon
[HKLM\Software\WOW6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A5AA24EA-11B8-4113-95AE-9ED71DEAF12A}]   =>Toolbar.AskSBar
[HKLM\Software\WOW6432Node\Classes\Interface\{A62DDBE0-8D2A-339A-B089-8CBCC5CD322A}]   =>PUP.RewardsArcade
[HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{A76AA284-E52D-47E6-9E4F-B85DBF8E35C3}]   =>Adware.IMBooster
[HKLM\Software\WOW6432Node\Classes\Interface\{A82AD04D-0B8E-3A49-947B-6A69A8A9C96D}]   =>PUP.RewardsArcade
[HKLM\Software\WOW6432Node\Classes\CLSID\{A9A56B8E-2DEB-4ED3-BC92-1FA450BCE1A5}]   =>Adware.SocialSkinz
[HKLM\Software\WOW6432Node\Classes\Interface\{AC71B60E-94C9-4EDE-BA46-E146747BB67E}]   =>Toolbar.Ask
[HKLM\Software\WOW6432Node\Classes\Interface\{ADEB3CC9-A05D-4FCC-BD09-9025456AA3EA}]   =>PUP.RewardsArcade
[HKLM\Software\WOW6432Node\Classes\CLSID\{AE338F6D-5A7C-4D1D-86E3-C618532079B5}]   =>Adware.SocialSkinz
[HKLM\Software\WOW6432Node\Classes\Interface\{B06D4521-D09C-3F41-8E39-9D784CCA2A75}]   =>PUP.RewardsArcade
[HKLM\Software\WOW6432Node\Classes\Interface\{B0B75FBA-7288-4FD3-A9EB-7EE27FA65599}]   =>Toolbar.Babylon
[HKLM\Software\WOW6432Node\Classes\AppID\{B12E99ED-69BD-437C-86BE-C862B9E5444D}]   =>Toolbar.Babylon
[HKLM\Software\WOW6432Node\Classes\Interface\{B173667F-8395-4317-8DD6-45AD1FE00047}]   =>Toolbar.Babylon
[HKLM\Software\WOW6432Node\Classes\Interface\{B2CA345D-ADB8-4F5D-AC64-4AB34322F659}]   =>Adware.SocialSkinz
[HKLM\Software\WOW6432Node\Classes\Interface\{B32672B3-F656-46E0-B584-FE61C0BB6037}]   =>Toolbar.Babylon
[HKLM\Software\WOW6432Node\Classes\CLSID\{B8276A94-891D-453C-9FF3-715C042A2575}]   =>Toolbar.Babylon
[HKLM\Software\Classes\TypeLib\{B87F8B63-7274-43FD-87FA-09D3B7496148}]   =>Hijacker.Seeearch
[HKLM\Software\WOW6432Node\Classes\Interface\{B9F43021-60D4-42A6-A065-9BA37F38AC47}]   =>Adware.SocialSkinz
[HKLM\Software\WOW6432Node\Classes\AppID\{BDB69379-802F-4eaf-B541-F8DE92DD98DB}]   =>Toolbar.Babylon
[HKLM\Software\WOW6432Node\Classes\Interface\{BF921DD3-732A-4A11-933B-A5EA49F2FD2C}]   =>Adware.SocialSkinz
[HKLM\Software\WOW6432Node\Classes\Interface\{BFE569F7-646C-4512-969B-9BE3E580D393}]   =>Toolbar.Babylon
[HKLM\Software\WOW6432Node\Classes\Interface\{C06DAD42-6F39-4CE1-83CC-9A8B9105E556}]   =>PUP.RewardsArcade
[HKLM\Software\WOW6432Node\Classes\Interface\{C2434722-5C85-4CA0-BA69-1B67E7AB3D68}]   =>Toolbar.Babylon
[HKLM\Software\WOW6432Node\Classes\Interface\{C2996524-2187-441F-A398-CD6CB6B3D020}]   =>Toolbar.Babylon
[HKLM\Software\WOW6432Node\Classes\Interface\{C2E799D0-43A5-3477-8A98-FC5F3677F35C}]   =>PUP.RewardsArcade
[HKLM\Software\WOW6432Node\Classes\CLSID\{C339D489-FABC-41DD-B39D-276101667C70}]   =>Adware.SocialSkinz
[HKLM\Software\Classes\TypeLib\{C4BAE205-5E02-4E32-876E-F34B4E2D000C}]   =>Hijacker.Seeearch
[HKLM\Software\WOW6432Node\Classes\Interface\{D16107CD-2AD5-46A8-BA59-303B7C32C500}]   =>PUP.RewardsArcade
[HKLM\Software\WOW6432Node\Classes\Interface\{D25B101F-8188-3B43-9D85-201F372BC205}]   =>PUP.RewardsArcade
[HKLM\Software\WOW6432Node\Classes\CLSID\{D2A2595C-4FE4-4315-AA9B-19DBD6271B71}]   =>Adware.PriceGong
[HKLM\Software\WOW6432Node\Classes\Interface\{D2BA7595-5E44-3F1E-880F-03B3139FA5ED}]   =>PUP.RewardsArcade
[HKLM\Software\WOW6432Node\Classes\Interface\{D35F5C81-17D9-3E1C-A1FC-4472542E1D25}]   =>PUP.RewardsArcade
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D4027C7F-154A-4066-A1AD-4243D8127440}]   =>Toolbar.AskSBar
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{D4027C7F-154A-4066-A1AD-4243D8127440}]   =>Toolbar.AskSBar
[HKLM\Software\WOW6432Node\Classes\CLSID\{D4027C7F-154A-4066-A1AD-4243D8127440}]   =>Toolbar.AskSBar
[HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}]   =>Toolbar.AskSBar
[HKLM\Software\WOW6432Node\Classes\CLSID\{D565B35E-B787-40FA-95E3-E3562F8FC1A0}]   =>Adware.SocialSkinz
[HKLM\Software\WOW6432Node\Classes\AppID\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}]   =>Toolbar.Babylon
[HKLM\Software\Classes\TypeLib\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}]   =>Toolbar.Babylon
[HKLM\Software\WOW6432Node\Classes\Interface\{D83B296A-2FA6-425B-8AE8-A1F33D99FBD6}]   =>Adware.SocialSkinz
[HKLM\Software\WOW6432Node\Classes\CLSID\{D89031C2-10DA-4C90-9A62-FCED012BC46B}]   =>Adware.SocialSkinz
[HKLM\Software\WOW6432Node\Classes\Interface\{D8FA96CA-B250-312C-AF34-4FF1DD72589D}]   =>PUP.RewardsArcade
[HKLM\Software\WOW6432Node\Classes\Interface\{DAFC1E63-3359-416D-9BC2-E7DCA6F7B0F3}]   =>PUP.RewardsArcade
[HKLM\Software\Classes\TypeLib\{DB538320-D3C5-433C-BCA9-C4081A054FCF}]   =>PUP.RewardsArcade
[HKLM\Software\WOW6432Node\Classes\Interface\{DC5E5C44-80FD-3697-9E65-9F286D92F3E7}]   =>PUP.RewardsArcade
[HKLM\Software\WOW6432Node\Classes\Interface\{E047E227-5342-4D94-80F7-CFB154BF55BD}]   =>Toolbar.Babylon
[HKLM\Software\WOW6432Node\Classes\Interface\{E1B4C9DE-D741-385F-981E-6745FACE6F01}]   =>PUP.RewardsArcade
[HKLM\Software\WOW6432Node\Classes\Interface\{E3F79BE9-24D4-4F4D-8C13-DF2C9899F82E}]   =>Toolbar.Babylon
[HKLM\Software\WOW6432Node\Classes\CLSID\{E46C8196-B634-44a1-AF6E-957C64278AB1}]   =>Toolbar.Babylon
[HKLM\Software\WOW6432Node\Classes\Interface\{E67D5BC7-7129-493E-9281-F47BDAFACE4F}]   =>Adware. BullseyeToolbar
[HKLM\Software\WOW6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E6B969FB-6D33-48d2-9061-8BBD4899EB08}]   =>Adware.IMBooster
[HKLM\Software\WOW6432Node\Classes\Interface\{E77EEF95-3E83-4BB8-9C0D-4A5163774997}]   =>Toolbar.Babylon
[HKLM\Software\WOW6432Node\Classes\Interface\{E7B623F5-9715-3F9F-A671-D1485A39F8A2}]   =>PUP.RewardsArcade
[HKLM\Software\Classes\TypeLib\{EC4085F2-8DB3-45a6-AD0B-CA289F3C5D7E}]   =>Adware.SocialSkinz
[HKLM\Software\WOW6432Node\Classes\Interface\{ED916A7B-7C68-3198-B87D-2DABC30A5587}]   =>PUP.RewardsArcade
[HKLM\Software\WOW6432Node\Classes\Interface\{eee6c358-6118-11dc-9c72-001320c79847}]   =>Toolbar.SweetIM
[HKLM\Software\WOW6432Node\Classes\Interface\{EEE6C35A-6118-11DC-9C72-001320C79847}]   =>Adware.BHO
[HKLM\Software\WOW6432Node\Classes\Interface\{eee6c35a-6118-11dc-9c72-001320c79847}]   =>Toolbar.SweetIM
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{eee6c35b-6118-11dc-9c72-001320c79847}]   =>Toolbar.SweetIM
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{eee6c35b-6118-11dc-9c72-001320c79847}]   =>Toolbar.SweetIM
[HKLM\Software\WOW6432Node\Classes\CLSID\{eee6c35b-6118-11dc-9c72-001320c79847}]   =>Toolbar.SweetIM
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EEE6C35C-6118-11DC-9C72-001320C79847}]   =>Adware.BHO
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EEE6C35C-6118-11DC-9C72-001320C79847}]   =>Adware.BHO
[HKLM\Software\WOW6432Node\Classes\CLSID\{EEE6C35C-6118-11DC-9C72-001320C79847}]   =>Adware.BHO
[HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EEE6C35C-6118-11DC-9C72-001320C79847}]   =>Adware.BHO
[HKLM\Software\WOW6432Node\Classes\CLSID\{EEE6C35D-6118-11DC-9C72-001320C79847}]   =>Adware.BHO
[HKLM\Software\Classes\TypeLib\{eee6c35e-6118-11dc-9c72-001320c79847}]   =>Toolbar.SweetIM
[HKLM\Software\Classes\TypeLib\{eee6c35f-6118-11dc-9c72-001320c79847}]   =>Toolbar.SweetIM
[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{eee6c360-6118-11dc-9c72-001320c79847}]   =>Toolbar.SweetIM
[HKLM\Software\WOW6432Node\Microsoft\Internet Explorer\SearchScopes\{eee6c360-6118-11dc-9c72-001320c79847}]   =>Toolbar.SweetIM
[HKLM\Software\WOW6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{EEE6C367-6118-11DC-9C72-001320C79847}]   =>Toolbar.SweetIM
[HKLM\Software\WOW6432Node\Classes\Interface\{EFA1BDB2-BB3D-3D9A-8EB5-D0D22E0F64F4}]   =>PUP.RewardsArcade
[HKLM\Software\WOW6432Node\Classes\Interface\{F4CBF4DD-F8FE-35BA-BB7E-68304DAAB70B}]   =>PUP.RewardsArcade
[HKLM\Software\WOW6432Node\Classes\Interface\{F4EBB1E2-21F3-4786-8CF4-16EC5925867F}]   =>Toolbar.Babylon
[HKLM\Software\WOW6432Node\Classes\Interface\{FC32005D-E27C-32E0-ADFA-152F598B75E7}]   =>PUP.RewardsArcade
[HKLM\Software\WOW6432Node\Classes\CLSID\{FFB9ADCB-8C79-4C29-81D3-74D46A93D370}]   =>Toolbar.Babylon
[HKLM\Software\WOW6432Node\Google\Chrome\Extensions\bkomkajifikmkfnjgphkjcfeepbnojok]   =>Adware.PriceGong
[HKLM\Software\WOW6432Node\APN]   =>Toolbar.Agent
[HKCU\Software\AskToolbar]   =>Toolbar.AskTBar
[HKCU\Software\AppDataLow\Software\AskToolbar]   =>Toolbar.AskTBar
[HKLM\Software\WOW6432Node\AskToolbar]   =>Toolbar.AskTBar
[HKCU\Software\BabylonToolbar]   =>Toolbar.Babylon
[HKLM\Software\WOW6432Node\BabylonToolbar]   =>Toolbar.Babylon
[HKCU\Software\AppDataLow\Software\I Want This]   =>PUP.RewardsArcade
[HKCU\Software\Iminent]   =>Adware.IMBooster
[HKLM\Software\WOW6432Node\Iminent]   =>Adware.IMBooster
[HKCU\Software\Nosibay]   =>Adware.SPointer
[HKCU\Software\AppDataLow\Software\PriceGong]   =>Adware.PriceGong
[HKCU\Software\SweetIM]   =>Toolbar.SweetIM
[HKLM\Software\WOW6432Node\SweetIM]   =>Toolbar.SweetIM
[HKCU\Software\AppDataLow\Toolbar]   =>Toolbar.Conduit
[HKLM\Software\Classes\Toolbar.CT2612669]   =>Toolbar.Agent
[HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser]:{D4027C7F-154A-4066-A1AD-4243D8127440}   =>Toolbar.AskSBar
C:\Program Files (x86)\Ask.com   =>Toolbar.AskBar
C:\Program Files (x86)\BabylonToolbar   =>Toolbar.Babylon
C:\Program Files (x86)\Conduit   =>Toolbar.Conduit
C:\Program Files (x86)\IMinent Toolbar   =>Adware.IMBooster
C:\Program Files (x86)\Iminent   =>Adware.IMBooster
C:\Program Files (x86)\PriceGong   =>Adware.PriceGong
C:\Program Files (x86)\SweetIM   =>Toolbar.SweetIM
C:\ProgramData\Babylon   =>Toolbar.Babylon
C:\ProgramData\Iminent   =>Adware.IMBooster
C:\ProgramData\SweetIM   =>Toolbar.SweetIM
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Iminent   =>Adware.IMBooster
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PriceGong   =>Adware.PriceGong
C:\Users\Hamza\AppData\Roaming\Babylon   =>Toolbar.Babylon
C:\Users\Hamza\AppData\Roaming\BabylonToolbar   =>Toolbar.Babylon
C:\Users\Hamza\AppData\Roaming\Iminent   =>Adware.IMBooster
C:\Users\Hamza\AppData\Roaming\Nosibay   =>Adware.SPointer
C:\Users\Hamza\AppData\Local\AskToolbar   =>Toolbar.AskTBar
C:\Users\Hamza\AppData\LocalLow\AskToolbar   =>Toolbar.AskTBar
C:\Users\Hamza\AppData\LocalLow\BabylonToolbar   =>Toolbar.Babylon
C:\Users\Hamza\AppData\LocalLow\Conduit   =>Toolbar.Conduit
C:\Users\Hamza\AppData\LocalLow\PriceGong   =>Adware.PriceGong
C:\Users\Hamza\AppData\LocalLow\SweetIM   =>Toolbar.SweetIM
C:\Users\Hamza\AppData\LocalLow\Toolbar4   =>Toolbar.Conduit
C:\Users\Hamza\AppData\Roaming\Mozilla\Firefox\Profiles\72o90cus.default\Extensions\{8A9386B4-E958-4c4c-ADF4-8F26DB3E4829}   =>Adware.PriceGong
C:\Users\Hamza\AppData\Roaming\Mozilla\Firefox\Profiles\72o90cus.default\SearchPlugins\sweetim.xml   =>Toolbar.SweetIM
C:\Windows\System32\Tasks\Scheduled Update for Ask Toolbar   =>Toolbar.AskTBar
~ Scan Additionnel in 00mn 05s



---\\ Recherche détournement de DNS routeur (O89) (None)

---\\ Etat général des services non Microsoft (EGS) (SR=Running, SS=Stopped)
SS - | Auto 07/10/2007 599320 |  (AcrSch2Svc) . (.Acronis.) - C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe
SS - | Demand 15/08/2012 250056 |  (AdobeFlashPlayerUpdateSvc) . (.Adobe Systems Incorporated.) - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
SS - | Auto 08/09/2011 204288 |  (AMD External Events Utility) . (.AMD.) - C:\Windows\System32\atiesrxx.exe
SS - | Demand 01/04/2011 183560 |  (BBSvc) . (.Microsoft Corporation..) - C:\Program Files (x86)\Microsoft\BingBar\BBSvc.exe
SS - | Auto 18/11/2009 221608 |  (F-Secure Gatekeeper Handler Starter) . (.F-Secure Corporation.) - C:\Program Files (x86)\SFR\Pack Sécurité\Anti-Virus\fsgk32st.exe
SS - | Demand 18/11/2009 846248 |  (FSDFWD) . (.F-Secure Corporation.) - C:\Program Files (x86)\SFR\Pack Sécurité\FWES\Program\fsdfwd.exe
SS - | Auto 18/11/2009 188840 |  (FSMA) . (.F-Secure Corporation.) - C:\Program Files (x86)\SFR\Pack Sécurité\Common\FSMA32.exe
SS - | Demand 02/02/2012 61088 |  (FSORSPClient) . (.F-Secure Corporation.) - C:\Program Files (x86)\SFR\Pack Sécurité\ORSP Client\fsorsp.exe
SS - | Auto 27/10/2011 136176 |  (gupdate) . (.Google Inc..) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
SS - | Demand 27/10/2011 136176 |  (gupdatem) . (.Google Inc..) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
SS - | Demand 04/08/2012 427672 |  (maconfservice) . (.CybelSoft.) - C:\Program Files\ma-config.com\x64\maconfservice.exe
SS - | Demand 30/12/1899 0 |  (npggsvc) . (.INCA Internet Co., Ltd..) - C:\Windows\system32\GameMon.des
SS - | Auto 29/04/2012 581248 |  (NSPService) . (.INCA Internet Co., Ltd..) - C:\Windows\SysWOW64\INCAinternet\nProtect GameGuard Personal 3.0\nspsvc.exe
SS - | Auto 29/04/2012 1252808 |  (NSPUpdateService) . (.INCA Internet Co.,Ltd..) - C:\Windows\SysWOW64\INCAinternet\nProtect GameGuard Personal 3.0\nspupsvc.exe
SS - | Auto 28/03/2011 249648 |  (SeaPort) . (.Microsoft Corporation.) - C:\Program Files (x86)\Microsoft\BingBar\SeaPort.exe
SS - | Auto 05/07/2012 3048136 |  (Skype C2C Service) . (.Skype Technologies S.A..) - C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe
SS - | Auto 03/05/2012 158856 |  (SkypeUpdate) . (.Skype Technologies.) - C:\Program Files (x86)\Skype\Updater\Updater.exe
SS - | Auto 19/03/2012 2666880 |  (TeamViewer7) . (.TeamViewer GmbH.) - C:\Program Files (x86)\TeamViewer\Version7\TeamViewer_Service.exe
SS - | Auto  493200 |  (TryAndDecideService) . (...) - C:\Program Files (x86)\Common Files\Acronis\Fomatik\TrueImageTryStartService.exe
SS - | Disabled 14/07/2009 27136 | C:\Program Files (x86)\Windows Defender\mpsvc.dll (WinDefend) . (.Microsoft Corporation.) - C:\Windows\System32\svchost.exe
SS - | Auto 14/07/2009 27136 | C:\Windows\System32\wuaueng.dll (wuauserv) . (.Microsoft Corporation.) - C:\Windows\System32\svchost.exe
~ Scan Services in 00mn 03s



---\\ Recherche Master Boot Record Infection (MBR)(O80)
Stealth MBR rootkit/Mebroot/Sinowal/TDL4 detector 0.4.2 by Gmer, http://www.gmer.net
Run by Hamza at 24/08/2012 13:13:01

device: opened successfully
user: error reading MBR 

Disk trace:
error: Read  Descripteur non valide
kernel: error reading MBR 
~ Scan MBR in 00mn 02s



---\\ Recherche Master Boot Record Infection (MBRCheck)(O80)
Written by ad13, http://ad13.geekstog
Run by Hamza at 24/08/2012 13:13:03

********* Dump file Name *********
C:\PhysicalDisk0_MBR.bin
~ Scan MBR in 00mn 04s



End of the scan (2500 lines in 01mn 39s)(0)