~ Rapport de ZHPDiag v2013.9.17.310 - Nicolas Coolman  (17/09/2013)
~ Lancé par Natacha (18/09/2013 16:37:06)
~ Adresse du Site Web http://nicolascoolman.webs.com
~ Traduit par Nicolas Coolman
~ Etat de la version : 
~ Liste blanche : Désactivée par l'utilisateur
~ Elévation des Privilèges : OK
~ User Account Control (UAC): Activate by user


---\\ Navigateurs Internet
MSIE: Internet Explorer v9.0.8112.16421
MFIE: Mozilla Firefox 23.0.1 (Defaut)
GCIE: Google Chrome v29.0.1547.66

---\\ Informations sur les produits Windows
~ Langage: Français
Windows 7 Business Edition, 64-bit Service Pack 1 (Build 7601)
Windows Server License Manager Script : OK
~ Windows(R) 7, VOLUME_KMS_W7 channel
Windows ID Activation : OK
~ Windows Partial Key : 6KG4Y
Windows License : OK
~ Windows Remaining Initializations Number : 3
Windows License : OK
Software Protection Service (Protection logicielle) : OK
Windows Automatic Updates : OK
Windows Activation Technologies : OK

---\\ Logiciels de protection du système
avast! Free Antivirus v8.0.1483.0
Windows Defender W7

---\\ Logiciels d'optimisation du système
CCleaner v4.05  =>Piriform Ltd

---\\ Logiciels de partage PeerToPeer

---\\ Surveillance de Logiciels
Adobe Flash Player 11 Plugin
Java 7 Update 25

---\\ Informations sur le système
~ Processor: Intel64 Family 6 Model 23 Stepping 10, GenuineIntel
~ Operating System: 64 Bits
Boot mode: Normal (Normal boot)
Total RAM: 6111 MB (70% free)
System Restore: Activé (Enable)
System drive C: has 175 GB (75%) free of 231 GB

---\\ Mode de connexion au système
~ Computer Name: NATACHA-VAIO
~ User Name: Natacha
~ All Users Names: Natacha, HomeGroupUser$, Cathy, Administrateur, 
~ Unselected Option: None
Logged in as Administrator

---\\ Variables d'environnement
~ System Unit : C:\
~ %AppData% : C:\Users\Natacha\AppData\Roaming\
~ %Desktop% : C:\Users\Natacha\Desktop\
~ %Favorites% : C:\Users\Natacha\Favorites\
~ %LocalAppData% : C:\Users\Natacha\AppData\Local\
~ %StartMenu% : C:\Users\Natacha\AppData\Roaming\Microsoft\Windows\Start Menu\
~ %Windir% : C:\Windows\
~ %System% : C:\Windows\System32\

---\\ Enumération des unités disques
C:\ Hard drive, Flash drive, Thumb drive (Free 175 Go of 231 Go)
D:\ Hard drive, Flash drive, Thumb drive (Free 219 Go of 220 Go)
E:\ CD-ROM drive (Not Inserted)
F:\ Floppy drive, Flash card reader, USB Key (Not Inserted)
G:\ CD-ROM drive (Free 0 Go of 1 Go)



---\\ Etat du Centre de Sécurité Windows
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiSpywareOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallOverride: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoActiveDesktopChanges: Modified
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] EnableLUA: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: OK
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK
~ Security Center: 28 Scanned in 00mn 00s



---\\ Recherche particulière de fichiers génériques
[MD5.332FEAB1435662FC6C672E25BEB37BE3] - (.Microsoft Corporation - Explorateur Windows.) (.25/02/2011 - 10:19:30.) -- C:\Windows\Explorer.exe [2871808]
[MD5.94355C28C1970635A31B3FE52EB7CEBA] - (.Microsoft Corporation - Application de démarrage de Windows.) (.14/07/2009 - 05:39:52.) -- C:\Windows\System32\Wininit.exe [129024]
[MD5.563C71A913CAC0C3DE5FFCD36EDB43A0] - (.Microsoft Corporation - Extensions Internet pour Win32.) (.05/04/2013 - 05:00:30.) -- C:\Windows\System32\wininet.dll [1392128]
[MD5.1151B1BAA6F350B1DB6598E0FEA7C457] - (.Microsoft Corporation - Application d’ouverture de session Windows.) (.21/11/2010 - 07:24:29.) -- C:\Windows\System32\Winlogon.exe [390656]
[MD5.067FA52BFB59A56110A12312EF9AF243] - (.Microsoft Corporation - Bibliothèque de licences.) (.21/11/2010 - 07:24:16.) -- C:\Windows\System32\sppcomapi.dll [232448]
[MD5.1C7857B62DE5994A75B054A9FD4C3825] - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) (.28/12/2011 - 07:59:24.) -- C:\Windows\system32\Drivers\AFD.sys [498688]
[MD5.02062C0B390B7729EDC9E69C680A6F3C] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) (.14/07/2009 - 05:52:21.) -- C:\Windows\system32\Drivers\atapi.sys [24128]
[MD5.B8BD2BB284668C84865658C77574381A] - (.Microsoft Corporation - CD-ROM File System Driver.) (.14/07/2009 - 03:19:47.) -- C:\Windows\system32\Drivers\Cdfs.sys [92160]
[MD5.F036CE71586E93D94DAB220D7BDF4416] - (.Microsoft Corporation - SCSI CD-ROM Driver.) (.21/11/2010 - 07:23:47.) -- C:\Windows\system32\Drivers\Cdrom.sys [147456]
[MD5.9BB2EF44EAA163B29C4A4587887A0FE4] - (.Microsoft Corporation - DFS Namespace Client Driver.) (.21/11/2010 - 07:24:32.) -- C:\Windows\system32\Drivers\DfsC.sys [102400]
[MD5.97BFED39B6B79EB12CDDBFEED51F56BB] - (.Microsoft Corporation - High Definition Audio Bus Driver.) (.21/11/2010 - 07:23:47.) -- C:\Windows\system32\Drivers\HDAudBus.sys [122368]
[MD5.FA55C73D4AFFA7EE23AC4BE53B4592D3] - (.Microsoft Corporation - Pilote de port i8042.) (.14/07/2009 - 03:19:57.) -- C:\Windows\system32\Drivers\i8042prt.sys [105472]
[MD5.AF9B39A7E7B6CAA203B3862582E9F2D0] - (.Microsoft Corporation - IP Network Address Translator.) (.14/07/2009 - 04:10:03.) -- C:\Windows\system32\Drivers\IpNat.sys [116224]
[MD5.A5D9106A73DC88564C825D317CAC68AC] - (.Microsoft Corporation - Windows NT SMB Minirdr.) (.27/04/2011 - 06:40:40.) -- C:\Windows\system32\Drivers\MRxSmb.sys [158208]
[MD5.09594D1089C523423B32A4229263F068] - (.Microsoft Corporation - MBT Transport driver.) (.21/11/2010 - 07:23:51.) -- C:\Windows\system32\Drivers\netBT.sys [261632]
[MD5.B98F8C6E31CD07B2E6F71F7F648E38C0] - (.Microsoft Corporation - Pilote du système de fichiers NT.) (.12/04/2013 - 18:45:08.) -- C:\Windows\system32\Drivers\ntfs.sys [1656680]
[MD5.0086431C29C35BE1DBC43F52CC273887] - (.Microsoft Corporation - Pilote de port parallèle.) (.14/07/2009 - 04:00:41.) -- C:\Windows\system32\Drivers\Parport.sys [97280]
[MD5.471815800AE33E6F1C32FB1B97C490CA] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) (.21/11/2010 - 07:24:33.) -- C:\Windows\system32\Drivers\Rasl2tp.sys [129536]
[MD5.1B6163C503398B23FF8B939C67747683] - (.Microsoft Corporation - Microsoft RDP Device redirector.) (.21/11/2010 - 07:25:07.) -- C:\Windows\system32\Drivers\rdpdr.sys [165888]
[MD5.548260A7B8654E024DC30BF8A7C5BAA4] - (.Microsoft Corporation - SMB Transport driver.) (.14/07/2009 - 04:09:09.) -- C:\Windows\system32\Drivers\smb.sys [93184]
[MD5.DDAD5A7AB24D8B65F8D724F5C20FD806] - (.Microsoft Corporation - TDI Translation Driver.) (.21/11/2010 - 07:24:32.) -- C:\Windows\system32\Drivers\tdx.sys [119296]
[MD5.0D08D2F3B3FF84E433346669B5E0F639] - (.Microsoft Corporation - Pilote de cliché instantané du volume.) (.21/11/2010 - 07:23:47.) -- C:\Windows\system32\Drivers\volsnap.sys [295808]
~ Generic Processes:  Scanned in 00mn 00s



---\\ Etat des fichiers cachés (Caché/Total)
~ Mes Favoris (My Favorites) : 1/26
~ Mes Documents (My Documents) : 2/68
~ Mon Bureau (My Desktop) : 10/367
~ Menu demarrer (Programs) : 1/24
~ Hidden Files:  Scanned in 00mn 01s



---\\ Processus lancés
[MD5.F7128E5772F9312F0D111A5FA5D41773] - (.Skype Technologies S.A. - Skype.) -- C:\Program Files (x86)\Skype\Phone\Skype.exe   [20684656] [PID.3604]
[MD5.148C545849C1379A3D4448F5DE768E86] - (.AVAST Software - avast! Antivirus.) -- C:\Program Files\AVAST Software\Avast\AvastUI.exe   [4767304] [PID.2976]
[MD5.A21E70B4F972CA396A80013D0D436350] - (.Adobe Systems Inc. - AcroTray.) -- C:\Program Files (x86)\Adobe\Acrobat 8.0\Acrobat\acrotray.exe   [620152] [PID.1420]
[MD5.D81A7DC79532E98C50403B1E18A8966A] - (.Dell - NeExtender GUI client.) -- C:\Program Files (x86)\SonicWALL\SSL-VPN\NetExtender\NEGui.exe   [1285632] [PID.3316]
[MD5.D63797E8E7781EE1500A810CB6194FA6] - (.Oracle Corporation - Java(TM) Update Scheduler.) -- C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe   [253816] [PID.2716]
[MD5.DF1BBA1168C0AD1D080A1F1B99576A76] - (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe   [829392] [PID.5036]
[MD5.C77C6AEA775F70C7EE39E88FDE408C3F] - (.Nicolas Coolman - ZHPDiag.) -- C:\Program Files (x86)\ZHPDiag\ZHPDiag.exe   [7968256] [PID.1216]
[MD5.41735B82DB57E4EBE9504EC400FD120E] - (.AVAST Software - avast! Service.) -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe   [45248] [PID.1316]
[MD5.7C8DD5576695B3362202EF09B20C425E] - (.TeamViewer GmbH - TeamViewer 8.) -- C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe   [3574624] [PID.1668]
[MD5.227846995AFEEFA70D328BF5334A86A5] - (.Macrovision Europe Ltd. - Activation Licensing Service.) -- C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe   [654848] [PID.2172]
~ Processes Running:  Scanned in 00mn 01s



---\\ Google Chrome, Démarrage,Recherche,Extensions (G0,G1,G2)
C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Preferences
G1 - GCS: Preference [User Data\Default] None
G0 - GCSP: Preference [User Data\Default][HomePage] http://www.google.com
G0 - GCSP: Preference [User Data\Default] http://www.google.com
G2 - GCE: Preference [User Data\Default] [ahfgeienlihckogmohjhadlkjgocpleb] Store v.0.2 (Activé)
G2 - GCE: Preference [User Data\Default] [aohghmighlieiainnegkcijnfilokake] Documents Google v.0.5 (Activé)
G2 - GCE: Preference [User Data\Default] [apdfllckaahabafndbhieahigkjlhalf] Google Drive v.6.3 (Activé)
G2 - GCE: Preference [User Data\Default] [blpcfgokakmgnkcojhhkbfbldkacnbeo] YouTube v.4.2.6 (Activé)
G2 - GCE: Preference [User Data\Default] [coobgpohoikkiipiblmjeljniedjpjpf] Recherche Google v.0.0.0.20 (Activé)
G2 - GCE: Preference [User Data\Default] [eemcgdkfndhakfknompkggombfjjjeno] Bookmark Manager v.0.1 (Activé)
G2 - GCE: Preference [User Data\Default] [ennkphjdgehloodpbhlhldgbnhmacadg] Settings v.0.2 (Activé)
G2 - GCE: Preference [User Data\Default] [icmlaeflemplmjndnaapfdbbnpncnbda] avast! WebRep v.8.0.1483, (Désactivé)
G2 - GCE: Preference [User Data\Default] [mfehgcgbbipciphmccgaenjidiccnmng] Cloud Print v.0.1 (Activé)
G2 - GCE: Preference [User Data\Default] [mgndgikekgjfcpckkfioiadnlibdjbkf] Chrome v.0.1 (Activé)
G2 - GCE: Preference [User Data\Default] [nmmhkkegccagdldgiimedpiccmgmieda] Chrome In-App Payments service v.0.0.4.11 (Activé)
G2 - GCE: Preference [User Data\Default] [pjkljhegncpnkpknbcohdijeoejaedia] Gmail v.7 (Activé)
~ Google Browser: 15 Scanned in 00mn 10s



---\\ Mozilla Firefox, Plugins,Demarrage,Recherche,Extensions  (P2,M0,M1,M2,M3)
M2 - MFEP: prefs.js [Natacha - 1md9sgw7.default\npNELaunch@sonicwall.com] [] NetExtender Launcher  v7.0.0.104 (..)
P2 - FPN: [HKLM] [@adobe.com/FlashPlayer] - (...) -- C:\Windows\system32\Macromed\Flash\NPSWF64_11_5_502_146.dll
P2 - FPN: [HKLM] [@microsoft.com/OfficeAuthz,version=14.0] - (.Microsoft Corporation - Office Authorization plug-in for NPAPI browsers.) -- C:\Program Files\Microsoft Office\Office14\NPAUTHZ.dll
P2 - FPN: [HKCU] [@Skype Limited.com/Facebook Video Calling Plugin] - (.Skype Limited - Facebook Video Calling Plugin.) -- C:\Users\Natacha\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll
~ Firefox Browser: 4 Scanned in 00mn 00s



---\\ Internet Explorer, Démarrage,Recherche,URLSearchHook, Phishing (R0,R1,R3,R4)
R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com
R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com
R0 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk
R3 - URLSearchHook: Microsoft Url Search Hook [64Bits] - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (.Microsoft Corporation - Navigateur Internet.) (9.00.8112.16421 (WIN7_IE9_RTM.110308-0330)) -- C:\Windows\SysWOW64\ieframe.dll
R4 - HKLM\SOFTWARE\Microsoft\Internet Explorer\PhishingFilter,EnabledV8 = 1
R4 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\PhishingFilter,EnabledV8 = 1
~ IE Browser: 14 Scanned in 00mn 00s



---\\ Internet Explorer, Proxy Management (R5)
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll
~ Proxy management:  Scanned in 00mn 00s



---\\ Analyse des lignes F0, F1, F2, F3 - IniFiles, Autoloading programs
F2 - REG:system.ini: USERINIT=C:\Windows\system32\userinit.exe,
F2 - REG:system.ini: Shell=C:\Windows\explorer.exe
F2 - REG:system.ini: VMApplet=C:\Windows\System32\SystemPropertiesPerformance.exe
~ Keys:  Scanned in 00mn 00s



---\\ Hosts file redirection (O1)
~ Le fichier hosts est sain (The hosts file is clean).
~ Hosts File:  Scanned in 00mn 00s
~ Nombre de lignes (Lines number): 21



---\\ Browser Helper Objects de navigateur (O2)
O2 - BHO: Aide pour le lien d'Adobe PDF Reader [64Bits] - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} . (.Adobe Systems Incorporated - Adobe PDF Helper for Internet Explorer.) -- C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Groove GFS Browser Helper [64Bits] - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} . (.Microsoft Corporation - Microsoft SharePoint Workspace Extensions.) -- C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.dll
O2 - BHO: Java(tm) Plug-In SSV Helper [64Bits] - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} . (.Oracle Corporation - Java(TM) Platform SE binary.) -- C:\Program Files (x86)\Java\jre7\bin\ssv.dll
O2 - BHO: avast! WebRep [64Bits] - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} . (.AVAST Software - avast! WebRep Plugin.) -- C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Adobe PDF Conversion Toolbar Helper [64Bits] - {AE7CD045-E861-484f-8273-0445EE161910} . (.Adobe Systems Incorporated - Adobe PDF Toolbar for Internet Explorer.) -- C:\Program Files (x86)\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll
O2 - BHO: URLRedirectionBHO [64Bits] - {B4F3A835-0E21-4959-BA22-42B3008E02FF} . (.Microsoft Corporation - Microsoft Office Document Cache Handler.) -- C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper [64Bits] - {DBC80044-A445-435b-BC74-9C25C1C588A9} . (.Oracle Corporation - Java(TM) Platform SE binary.) -- C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
O2 - BHO: (no name) [64Bits] - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} Clé orpheline
~ BHO: 10 Scanned in 00mn 00s



---\\ Internet Explorer Toolbars (O3)
O3 - Toolbar: (no name) [64Bits] - [HKLM]{318A227B-5E9F-45bd-8999-7F8F10CA4CF5} Clé orpheline
O3 - Toolbar\WebBrowser: (no name) [64Bits] - [HKCU]{47833539-D0C5-4125-9FA8-0819E2EAAC93} Clé orpheline
~ Toolbar:  Scanned in 00mn 00s



---\\ Autres liens utilisateurs (O4)
O4 - GS\Desktop [Public]: Adobe Acrobat 8 Professional.lnk . (.Adobe Systems Incorporated - Adobe Acrobat 8.0.)  -- C:\Program Files (x86)\Adobe\Acrobat 8.0\Acrobat\Acrobat.exe 
O4 - GS\Desktop [Public]: avast! Free Antivirus.lnk . (.AVAST Software - avast! Antivirus.)  -- C:\Program Files\AVAST Software\Avast\AvastUI.exe 
O4 - GS\Desktop [Public]: CCleaner.lnk . (.Piriform Ltd - CCleaner.)  -- C:\Program Files\CCleaner\CCleaner64.exe  =>Piriform Ltd
O4 - GS\Desktop [Public]: DAEMON Tools Lite.lnk . (.DT Soft Ltd - DAEMON Tools Lite.)  -- C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe 
O4 - GS\Desktop [Public]: Mozilla Firefox.lnk . (.Mozilla Corporation - Firefox.)  -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe 
O4 - GS\Desktop [Public]: Skype.lnk . (...)  -- C:\Windows\Installer\{4E76FF7E-AEBA-4C87-B788-CD47E5425B9D}\SkypeIcon.exe
O4 - GS\Desktop [Public]: TeamViewer 8.lnk . (.TeamViewer GmbH - TeamViewer 8.)  -- C:\Program Files (x86)\TeamViewer\Version8\TeamViewer.exe 
O4 - GS\Desktop [Public]: ZHPDiag.lnk . (.Nicolas Coolman - ZHPDiag Setup.)  -- C:\Program Files (x86)\ZHPDiag\ZHPhep.exe 
O4 - GS\Desktop [Public]: ZHPFix.lnk . (.Nicolas Coolman - ZHPDiag Setup.)  -- C:\Program Files (x86)\ZHPDiag\ZHPFix\ZHPhep.exe 
O4 - GS\Program [Public]: Acrobat Distiller 8.lnk . (...)  -- C:\Windows\Installer\{AC76BA86-1033-F400-7760-000000000003}\_SC_Distiller.exe
O4 - GS\Program [Public]: Adobe Acrobat 8 Professional.lnk . (...)  -- C:\Windows\Installer\{AC76BA86-1033-F400-7760-000000000003}\_SC_Acrobat.exe
O4 - GS\Program [Public]: Adobe LiveCycle Designer 8.0.lnk . (.Adobe Systems Incorporated - Adobe LiveCycle Designer.)  -- C:\Program Files (x86)\Adobe\Acrobat 8.0\Designer 8.0\FormDesigner.exe 
O4 - GS\Program [Public]: Audacity.lnk . (.The Audacity Team - Audacity®, the Free, Cross-Platform Sound E.)  -- C:\Program Files (x86)\Audacity\audacity.exe 
O4 - GS\Program [Public]: Media Center.lnk . (.Microsoft Corporation - Windows Media Center.)  -- C:\Windows\ehome\ehshell.exe 
O4 - GS\Program [Public]: Mozilla Firefox.lnk . (.Mozilla Corporation - Firefox.)  -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe 
O4 - GS\Program [Public]: Remote Desktop Connection Manager.lnk . (...)  -- C:\Windows\Installer\{173A2B7F-535A-4403-A454-B41531EF0D7F}\_34B2E913BC1AEDB259470B.exe
O4 - GS\Program [Public]: Sidebar.lnk . (.Microsoft Corporation - Gadgets du Bureau Windows.)  -- C:\Program Files (x86)\Windows Sidebar\sidebar.exe 
O4 - GS\Program [Public]: SonicWALL Global VPN Client.lnk . (...)  -- C:\Program Files (x86)\SonicWALL\SonicWALL Global VPN Client\SWGVC.exe (.not file.)
O4 - GS\Program [Public]: TeamViewer 8.lnk . (.TeamViewer GmbH - TeamViewer 8.)  -- C:\Program Files (x86)\TeamViewer\Version8\TeamViewer.exe 
O4 - GS\Program [Public]: Windows DVD Maker.lnk . (...)  -- C:\Program Files (x86)\DVD Maker\DVDMaker.exe (.not file.)
O4 - GS\Program [Public]: Windows Fax and Scan.lnk . (.Microsoft Corporation - Microsoft  Windows Fax and Scan.)  -- C:\Windows\system32\WFS.exe 
O4 - GS\Program [Public]: Windows Media Player.lnk . (.Microsoft Corporation - Lecteur Windows Media.)  -- C:\Program Files (x86)\Windows Media Player\wmplayer.exe 
O4 - GS\Program [Public]: XPS Viewer.lnk . (.Microsoft Corporation - Visionneuse XPS.)  -- C:\Windows\system32\xpsrchvw.exe 
O4 - GS\Program [Public]: ZHPDiag.lnk . (.Nicolas Coolman - ZHPDiag Setup.)  -- C:\Program Files (x86)\ZHPDiag\ZHPhep.exe 
O4 - GS\Accessories [Public]: Bluetooth File Transfer Wizard.lnk . (.Microsoft Corporation - Pas de description.)  -- C:\Windows\System32\fsquirt.exe 
O4 - GS\Accessories [Public]: Calculator.lnk . (.Microsoft Corporation - Calculatrice de Windows.)  -- C:\Windows\system32\calc.exe 
O4 - GS\Accessories [Public]: displayswitch.lnk . (.Microsoft Corporation - Afficher le commutateur.)  -- C:\Windows\system32\displayswitch.exe 
O4 - GS\Accessories [Public]: Math Input Panel.lnk . (.Microsoft Corporation - Accessoire du panneau de saisie mathématiqu.)  -- C:\Program Files (x86)\Common Files\Microsoft Shared\Ink\mip.exe 
O4 - GS\Accessories [Public]: Mobility Center.lnk . (.Microsoft Corporation - Centre de mobilité Windows.)  -- C:\Windows\system32\mblctr.exe 
O4 - GS\Accessories [Public]: NetworkProjection.lnk . (.Microsoft Corporation - Connect to a Network Projector.)  -- C:\Windows\system32\NetProj.exe 
O4 - GS\Accessories [Public]: Paint.lnk . (.Microsoft Corporation - Paint.)  -- C:\Windows\system32\mspaint.exe 
O4 - GS\Accessories [Public]: Snipping Tool.lnk . (.Microsoft Corporation - Outil Capture.)  -- C:\Windows\system32\SnippingTool.exe 
O4 - GS\Accessories [Public]: Sound Recorder.lnk . (.Microsoft Corporation - Magnétophone Windows.)  -- C:\Windows\system32\SoundRecorder.exe 
O4 - GS\Accessories [Public]: Sticky Notes.lnk . (.Microsoft Corporation - Pense-bête.)  -- C:\Windows\system32\StikyNot.exe 
O4 - GS\Accessories [Public]: Sync Center.lnk . (.Microsoft Corporation - Microsoft Sync Center.)  -- C:\Windows\System32\mobsync.exe 
O4 - GS\Accessories [Public]: Welcome Center.lnk . (.Microsoft Corporation - Mise en route.)  -- C:\Windows\system32\OobeFldr.dll 
O4 - GS\Accessories [Public]: Wordpad.lnk . (.Microsoft Corporation - Application Windows Wordpad.)  -- C:\Program Files (x86)\Windows NT\Accessories\wordpad.exe 
O4 - GS\SystemTools [Public]: Character Map.lnk . (.Microsoft Corporation - Table des caractères.)  -- C:\Windows\system32\charmap.exe 
O4 - GS\SystemTools [Public]: dfrgui.lnk . (.Microsoft Corporation - Défragmenteur de disque Microsoft®.)  -- C:\Windows\system32\dfrgui.exe 
O4 - GS\SystemTools [Public]: Disk Cleanup.lnk . (.Microsoft Corporation - Gestionnaire de nettoyage de disque pour Wi.)  -- C:\Windows\system32\cleanmgr.exe 
O4 - GS\SystemTools [Public]: Resource Monitor.lnk . (.Microsoft Corporation - Moniteur de ressources et de performances.)  -- C:\Windows\system32\perfmon.exe 
O4 - GS\SystemTools [Public]: System Information.lnk . (.Microsoft Corporation - Informations système.)  -- C:\Windows\system32\msinfo32.exe 
O4 - GS\SystemTools [Public]: System Restore.lnk . (.Microsoft Corporation - Restauration du système de Microsoft® Windo.)  -- C:\Windows\system32\rstrui.exe 
O4 - GS\SystemTools [Public]: Task Scheduler.lnk . (...)  -- C:\Windows\system32\taskschd.msc
O4 - GS\SystemTools [Public]: Windows Easy Transfer Reports.lnk . (.Microsoft Corporation - Application post-migration de transfert de.)  -- C:\Windows\system32\migwiz\postmig.exe 
O4 - GS\SystemTools [Public]: Windows Easy Transfer.lnk . (.Microsoft Corporation - Application Transfert de fichiers et paramè.)  -- C:\Windows\system32\migwiz\migwiz.exe 
O4 - GS\QuickLaunch [Natacha]: Google Chrome.lnk . (.Google Inc. - Google Chrome.)  -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe 
O4 - GS\QuickLaunch [Natacha]: Launch Internet Explorer Browser.lnk . (.Microsoft Corporation - Internet Explorer.)  -- C:\Program Files (x86)\Internet Explorer\iexplore.exe 
O4 - GS\QuickLaunch [Natacha]: Microsoft Outlook.lnk . (...)  -- C:\Program Files (x86)\Microsoft Office\Office14\OUTLOOK.exe (.not file.)
O4 - GS\TaskBar [Natacha]: Google Chrome.lnk . (.Google Inc. - Google Chrome.)  -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe 
O4 - GS\TaskBar [Natacha]: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.)  -- C:\Program Files (x86)\Internet Explorer\iexplore.exe 
O4 - GS\TaskBar [Natacha]: Mozilla Firefox.lnk . (.Mozilla Corporation - Firefox.)  -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe 
O4 - GS\TaskBar [Natacha]: Windows Explorer.lnk . (.Microsoft Corporation - Explorateur Windows.)  -- C:\Windows\explorer.exe 
O4 - GS\Program [Natacha]: Internet Explorer (64-bit).lnk . (.Microsoft Corporation - Internet Explorer.)  -- C:\Program Files (x86)\Internet Explorer\iexplore.exe 
O4 - GS\Program [Natacha]: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.)  -- C:\Program Files (x86)\Internet Explorer\iexplore.exe 
O4 - GS\Accessories [Natacha]: Command Prompt.lnk . (.Microsoft Corporation - Interpréteur de commandes Windows.)  -- C:\Windows\system32\cmd.exe 
O4 - GS\Accessories [Natacha]: Notepad.lnk . (.Microsoft Corporation - Bloc-notes.)  -- C:\Windows\system32\notepad.exe 
O4 - GS\Accessories [Natacha]: Run.lnk - Clé orpheline
O4 - GS\Accessories [Natacha]: Windows Explorer.lnk . (.Microsoft Corporation - Explorateur Windows.)  -- C:\Windows\explorer.exe 
O4 - GS\SystemTools [Natacha]: Internet Explorer (No Add-ons).lnk . (.Microsoft Corporation - Internet Explorer.)  -- C:\Program Files (x86)\Internet Explorer\iexplore.exe 
O4 - GS\SystemTools [Natacha]: Private Character Editor.lnk . (.Microsoft Corporation - Éditeur de caractères privés.)  -- C:\Windows\system32\eudcedit.exe 
O4 - GS\SendTo [Natacha]: Skype.lnk . (.Skype Technologies S.A. - Skype.)  -- C:\Program Files (x86)\Skype\Phone\Skype.exe 
O4 - GS\SendTo [Natacha]: Transfert de fichiers Bluetooth.LNK . (.Microsoft Corporation - Pas de description.)  -- C:\Windows\System32\fsquirt.exe 
O4 - GS\Desktop [Natacha]: Connection to 62.73.1.88.lnk . (...)  -- C:\Program Files (x86)\SonicWALL\SonicWALL Global VPN Client\SWGVC.exe (.not file.)
O4 - GS\Desktop [Natacha]: Google Chrome.lnk . (.Google Inc. - Google Chrome.)  -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe 
O4 - GS\Desktop [Natacha]: Remote Desktop Connection.lnk . (.Microsoft Corporation - Connexion Bureau à distance.)  -- C:\Windows\system32\mstsc.exe 
O4 - GS\TaskBar [Cathy]: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.)  -- C:\Program Files (x86)\Internet Explorer\iexplore.exe 
O4 - GS\TaskBar [Cathy]: Mozilla Firefox.lnk . (.Mozilla Corporation - Firefox.)  -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe 
O4 - GS\TaskBar [Cathy]: Windows Explorer.lnk . (.Microsoft Corporation - Explorateur Windows.)  -- C:\Windows\explorer.exe 
O4 - GS\TaskBar [Cathy]: Windows Media Player.lnk . (.Microsoft Corporation - Lecteur Windows Media.)  -- C:\Program Files (x86)\Windows Media Player\wmplayer.exe 
O4 - GS\Program [Cathy]: Internet Explorer (64-bit).lnk . (.Microsoft Corporation - Internet Explorer.)  -- C:\Program Files (x86)\Internet Explorer\iexplore.exe 
O4 - GS\Program [Cathy]: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.)  -- C:\Program Files (x86)\Internet Explorer\iexplore.exe 
O4 - GS\Accessories [Cathy]: Command Prompt.lnk . (.Microsoft Corporation - Interpréteur de commandes Windows.)  -- C:\Windows\system32\cmd.exe 
O4 - GS\Accessories [Cathy]: Notepad.lnk . (.Microsoft Corporation - Bloc-notes.)  -- C:\Windows\system32\notepad.exe 
O4 - GS\Accessories [Cathy]: Run.lnk - Clé orpheline
O4 - GS\Accessories [Cathy]: Windows Explorer.lnk . (.Microsoft Corporation - Explorateur Windows.)  -- C:\Windows\explorer.exe 
O4 - GS\SystemTools [Cathy]: Internet Explorer (No Add-ons).lnk . (.Microsoft Corporation - Internet Explorer.)  -- C:\Program Files (x86)\Internet Explorer\iexplore.exe 
O4 - GS\SystemTools [Cathy]: Private Character Editor.lnk . (.Microsoft Corporation - Éditeur de caractères privés.)  -- C:\Windows\system32\eudcedit.exe 
O4 - GS\SendTo [Cathy]: Skype.lnk . (.Skype Technologies S.A. - Skype.)  -- C:\Program Files (x86)\Skype\Phone\Skype.exe 
O4 - GS\SendTo [Cathy]: Transfert de fichiers Bluetooth.LNK . (.Microsoft Corporation - Pas de description.)  -- C:\Windows\System32\fsquirt.exe 
O4 - GS\Desktop [Cathy]: BreezeCONFIG DS.lnk . (.BreezeCOM - DS Configuration Utility.)  -- C:\Program Files (x86)\BreezeCONFIG DS\brzmgr.exe 
~ Global Startup: 84 Scanned in 00mn 03s



---\\ Applications lancées au démarrage du sytème (O4)
O4 - GS\Startup [Public]: Adobe Reader Synchronizer.lnk . (.Adobe Systems Incorporated - Adobe Collaboration Synchronizer 8.0.)  -- C:\Program Files (x86)\Adobe\Acrobat 8.0\Acrobat\AdobeCollabSync.exe 
O4 - GS\Startup [Public]: Lancement rapide d'Adobe Acrobat.lnk . (...)  -- C:\Windows\Installer\{AC76BA86-1033-F400-7760-000000000003}\_SC_Acrobat.exe
O4 - GS\Startup [Natacha]: SonicWALL Global VPN Client.lnk . (...)  -- C:\Program Files (x86)\SonicWALL\SonicWALL Global VPN Client\SWGVC.exe (.not file.)
O4 - HKLM\..\Run: [BCSSync] . (.Microsoft Corporation - Microsoft Office 2010 component.) -- C:\Program Files\Microsoft Office\Office14\BCSSync.exe 
O4 - HKCU\..\Run: [DAEMON Tools Lite] . (.DT Soft Ltd - DAEMON Tools Lite.) -- C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe 
O4 - HKCU\..\Run: [Facebook Update] . (.Facebook Inc. - Programme d'installation de Facebook.) -- C:\Users\Natacha\AppData\Local\Facebook\Update\FacebookUpdate.exe 
O4 - HKCU\..\Run: [Skype] . (.Skype Technologies S.A. - Skype.) -- C:\Program Files (x86)\Skype\Phone\Skype.exe 
O4 - HKLM\..\Wow6432Node\Run: [avast] . (.AVAST Software - avast! Antivirus.) -- C:\Program Files\AVAST Software\Avast\avastUI.exe 
O4 - HKLM\..\Wow6432Node\Run: [Acrobat Assistant 8.0] . (.Adobe Systems Inc. - AcroTray.) -- C:\Program Files (x86)\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe 
O4 - HKLM\..\Wow6432Node\Run: [DellNetExtender] . (.Dell - NeExtender GUI client.) -- C:\Program Files (x86)\SonicWALL\SSL-VPN\NetExtender\NEGui.exe 
O4 - HKLM\..\Wow6432Node\Run: [SunJavaUpdateSched] . (.Oracle Corporation - Java(TM) Update Scheduler.) -- C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe 
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files (x86)\Windows Sidebar\Sidebar.exe 
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files (x86)\Windows Sidebar\Sidebar.exe 
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe 
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe 
O4 - HKUS\S-1-5-21-2468559752-2934877657-3732706420-1000\..\Run: [DAEMON Tools Lite] . (.DT Soft Ltd - DAEMON Tools Lite.) -- C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe 
O4 - HKUS\S-1-5-21-2468559752-2934877657-3732706420-1000\..\Run: [Facebook Update] . (.Facebook Inc. - Programme d'installation de Facebook.) -- C:\Users\Natacha\AppData\Local\Facebook\Update\FacebookUpdate.exe 
O4 - HKUS\S-1-5-21-2468559752-2934877657-3732706420-1000\..\Run: [Skype] . (.Skype Technologies S.A. - Skype.) -- C:\Program Files (x86)\Skype\Phone\Skype.exe 
~ Application:  Scanned in 00mn 00s



---\\ Invisibilité de l'icône d'options IE dans le panneau de Configuration (O5)
O5 - control.ini: [HKLM\..\Control Panel] inetcpl.cpl=no
~ IE Control Panel: 1 Scanned in 00mn 00s



---\\ Boutons situés sur la barre d'outils principale d'Internet Explorer (O9)
O9 - Extra button: &Envoyer à OneNote [64Bits] - {2670000A-7350-4f3c-8081-5663EE0C6C49} . (.Microsoft Corporation - Microsoft OneNote Internet Explorer Add-in.) -- C:\Program Files (x86)\MICROS~1\Office14\ONBttnIE.dll
O9 - Extra button: Notes &liées OneNote [64Bits] - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} . (.Microsoft Corporation - Microsoft OneNote Internet Explorer Add-in.) -- C:\Program Files (x86)\MICROS~1\Office14\ONBTTN~1.dll
~ IE Extra Buttons:  Scanned in 00mn 00s



---\\ Winsock hijacker (Layered Service Provider) (O10)
O10 - WLSP:\000000000001\Winsock LSP File . (.Microsoft Corporation - Network Location Awareness 2.) -- C:\Windows\system32\NLAapi.dll
O10 - WLSP:\000000000002\Winsock LSP File . (.Microsoft Corporation - Fournisseur Shim d’affectation de noms de messagerie.) -- C:\Windows\system32\napinsp.dll
O10 - WLSP:\000000000003\Winsock LSP File . (.Microsoft Corporation - Fournisseur d’espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll
O10 - WLSP:\000000000004\Winsock LSP File . (.Microsoft Corporation - Fournisseur d’espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll
O10 - WLSP:\000000000005\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\Windows\system32\mswsock.dll
O10 - WLSP:\000000000006\Winsock LSP File . (.Microsoft Corporation - LDAP RnR Provider DLL.) -- C:\Windows\system32\winrnr.dll
O10 - WLSP:\000000000007\Winsock LSP File . (.Microsoft Corporation - Windows Sockets Helper DLL.) -- C:\Windows\system32\wshbth.dll
~ Winsock: 7 Scanned in 00mn 00s



---\\ Modification Domaine/Adresses DNS (O17)
O17 - HKLM\System\CCS\Services\Tcpip\..\{370ED45C-3949-47D3-84B2-40A4A56383FC}: DhcpNameServer = 91.121.161.184 188.165.197.144
O17 - HKLM\System\CCS\Services\Tcpip\..\{B0B82E28-4FB3-45F9-9B62-D98A027ADC5D}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CS1\Services\Tcpip\..\{370ED45C-3949-47D3-84B2-40A4A56383FC}: DhcpNameServer = 91.121.161.184 188.165.197.144
O17 - HKLM\System\CS1\Services\Tcpip\..\{B0B82E28-4FB3-45F9-9B62-D98A027ADC5D}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CS2\Services\Tcpip\..\{370ED45C-3949-47D3-84B2-40A4A56383FC}: DhcpNameServer = 91.121.161.184 188.165.197.144
O17 - HKLM\System\CS2\Services\Tcpip\..\{B0B82E28-4FB3-45F9-9B62-D98A027ADC5D}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
~ Domain:  Scanned in 00mn 00s



---\\ Protocole additionnel (O18)
O18 - Handler: vbscript [64Bits] - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll
O18 - Filter: text/xml [64Bits] - {807573E5-5146-11D5-A672-00B0D022E945} . (.Microsoft Corporation - Microsoft Office XML MIME Filter.) -- C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.dll
~ Protocole Additionnel:  Scanned in 00mn 00s



---\\ Clé de Registre autorun ShellServiceObjectDelayLoad (SSO/SSODL) (O21)
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
~ SSODL: 1 Scanned in 00mn 00s



---\\ Liste des services NT non Microsoft et non désactivés (O23)
O23 - Service:  (AMD External Events Utility) . (.AMD - AMD External Events Service Module.) - C:\Windows\System32\atiesrxx.exe
O23 - Service: avast! Antivirus (avast! Antivirus) . (.AVAST Software - avast! Service.) - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: Intel® PROSet/Wireless Event Log (EvtEng) . (.Intel(R) Corporation - Intel(R) PROSet/Wireless Event Log Service.) - C:\Program Files\Intel\WiFi\bin\EvtEng.exe
O23 - Service: Service Google Update (gupdate) (gupdate) . (.Google Inc. - Programme d'installation de Google.) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Intel® PROSet/Wireless Registry Service (RegSrvc) . (.Intel(R) Corporation - Intel(R) PROSet/Wireless Registry Service.) - C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
O23 - Service: Skype Updater (SkypeUpdate) . (.Skype Technologies - Skype Updater Service.) - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: SonicWALL NetExtender Service (SONICWALL_NetExtender) . (.Dell - SonicWALL NetExtender Windows NT Service.) - C:\Program Files (x86)\SonicWALL\SSL-VPN\NetExtender\NEService64.exe
O23 - Service: SonicWALL Global VPN Client Service (SWGVCSvc) . (.SonicWALL, Inc. - SonicWALL Global VPN Client Service.) - C:\Program Files\SonicWALL\SonicWALL Global VPN Client\SWGVCSvc.exe
O23 - Service: TeamViewer 8 (TeamViewer8) . (.TeamViewer GmbH - TeamViewer 8.) - C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe
~ Services: 9 Scanned in 00mn 06s



---\\ Enumération Active Desktop & MHTML Editor (O24)
O24 - Default MHTML Editor: Last - .(...) -  (.not file.)
~ Desktop Component: 4 Scanned in 00mn 00s



---\\ Enumère les données de BootExecute (BEX) (O34)
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
~ BEX: 1 Scanned in 00mn 00s



---\\ Tâches planifiées en automatique (O39)
O39 - APT:Automatic Planified Task  - C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2468559752-2934877657-3732706420-1000Core.job   [914]
O39 - APT:Automatic Planified Task  - C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2468559752-2934877657-3732706420-1000UA.job   [936]
O39 - APT:Automatic Planified Task  - C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job   [1066]
O39 - APT:Automatic Planified Task  - C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job   [1070]
[MD5.AB3C4A3667AEAD147F175721D8719B78] [APT] [avast! Emergency Update] (.AVAST Software.) -- C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe   [250248]
[MD5.4C0A720AB377391D7D2EDE1ED905A420] [APT] [CCleanerSkipUAC] (.Piriform Ltd.) -- C:\Program Files\CCleaner\CCleaner.exe   [3676952]  =>Piriform Ltd
[MD5.2A3FB4C98F139038E23330D2439DB8A4] [APT] [FacebookUpdateTaskUserS-1-5-21-2468559752-2934877657-3732706420-1000Core] (.Facebook Inc..) -- C:\Users\Natacha\AppData\Local\Facebook\Update\FacebookUpdate.exe   [138096]
[MD5.2A3FB4C98F139038E23330D2439DB8A4] [APT] [FacebookUpdateTaskUserS-1-5-21-2468559752-2934877657-3732706420-1000UA] (.Facebook Inc..) -- C:\Users\Natacha\AppData\Local\Facebook\Update\FacebookUpdate.exe   [138096]
[MD5.F02A533F517EB38333CB12A9E8963773] [APT] [GoogleUpdateTaskMachineCore] (.Google Inc..) -- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe   [136176]
[MD5.F02A533F517EB38333CB12A9E8963773] [APT] [GoogleUpdateTaskMachineUA] (.Google Inc..) -- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe   [136176]
[MD5.6672CC7F35F4648F9B26471304EE6DF8] [APT] [{5E12F220-EB91-4315-96DF-05DBBCCD6DAF}] (.Adobe Systems Incorporated.) -- D:\Adobe Acrobat 8 Professional\Setup.exe   [304760]
~ Scheduled Task: 13 Scanned in 00mn 05s



---\\ Composants installés (ActiveSetup Installed Components) (O40)
O40 - ASIC: Microsoft Windows Media Player [64Bits] - >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (.Microsoft Corporation - Ressources du Lecteur Windows Media.) -- C:\Windows\System32\wmploc.dll
O40 - ASIC: Internet Explorer [64Bits] - >{26923b43-4d38-484f-9b9e-de460746276c} . (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Explorer par utilisateur.) -- C:\Windows\System32\ie4uinit.exe
O40 - ASIC: Browser Customizations [64Bits] - >{60B49E34-C7CC-11D0-8953-00A0C90347FF} . (.Microsoft Corporation - Personnalisation d’IEAK.) -- C:\Windows\System32\iedkcs32.dll
O40 - ASIC: Microsoft Windows Media Player 12.0 [64Bits] - {22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (.Microsoft Corporation - Windows Media Player Extension.) -- C:\Windows\SysWOW64\wmpdxm.dll
O40 - ASIC: Themes Setup [64Bits] - {2C7339CF-2B09-4501-B3F3-F3508C9228ED} . (.Microsoft Corporation - API Windows Theme.) -- C:\Windows\System32\themeui.dll
O40 - ASIC: Microsoft Windows [64Bits] - {44BBA840-CC51-11CF-AAFA-00AA00B6015C} . (.Microsoft Corporation - Windows Mail.) -- C:\Program Files (x86)\Windows Mail\WinMail.exe
O40 - ASIC: Browsing Enhancements [64Bits] - {630b1da0-b465-11d1-9948-00c04f98bbc9} . (.Microsoft Corporation - Extension Shell dossier FTP Microsoft Internet Explorer..) -- C:\Windows\System32\msieftp.dll
O40 - ASIC: Microsoft Windows Media Player [64Bits] - {6BF52A52-394A-11d3-B153-00C04F79FAA6} . (.Microsoft Corporation - Ressources du Lecteur Windows Media.) -- C:\Windows\System32\wmploc.dll
O40 - ASIC: Windows Desktop Update [64Bits] - {89820200-ECBD-11cf-8B85-00AA005B4340} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\Windows\System32\shell32.dll
O40 - ASIC: Web Platform Customizations [64Bits] - {89820200-ECBD-11cf-8B85-00AA005B4383} . (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Explorer par utilisateur.) -- C:\Windows\System32\ie4uinit.exe
O40 - ASIC: (no name) [64Bits] - {89B4C1CD-B018-4511-B0A1-5476DBF70820} . (.Microsoft Corporation - Microsoft .NET IE SECURITY REGISTRATION.) -- C:\Windows\system32\mscories.dll
~ Active Setup: 11 Scanned in 00mn 00s



---\\ Pilotes lancés au démarrage du système (O41)
O41 - Driver: C:\Windows\System32\drivers\afd.sys (AFD) . (.Microsoft Corporation - Ancillary Function Driver for WinSock.) - C:\Windows\system32\drivers\afd.sys
O41 - Driver:  (aswRdr) . (.AVAST Software - avast! WFP Redirect Driver.) - C:\Windows\system32\Drivers\aswrdr2.sys
O41 - Driver: (blbdrive) . (.Microsoft Corporation - BLB Drive Driver.) - C:\Windows\System32\DRIVERS\blbdrive.sys
O41 - Driver:  (cdrom) . (.Microsoft Corporation - SCSI CD-ROM Driver.) - C:\Windows\System32\DRIVERS\cdrom.sys
O41 - Driver: C:\Windows\System32\cscsvc.dll (CSC) . (.Microsoft Corporation - Windows Client Side Caching Driver.) - C:\Windows\System32\drivers\csc.sys
O41 - Driver: C:\Windows\System32\drivers\dfsc.sys (DfsC) . (.Microsoft Corporation - DFS Namespace Client Driver.) - C:\Windows\System32\Drivers\dfsc.sys
O41 - Driver: C:\Windows\System32\drivers\discache.sys (discache) . (.Microsoft Corporation - System Indexer/Cache Driver.) - C:\Windows\System32\drivers\discache.sys
O41 - Driver:  (DNE) . (.Citrix Systems, Inc. - Deterministic Network Enhancer for NDIS 6.) - C:\Windows\System32\DRIVERS\dnelwf64.sys
O41 - Driver:  (mssmbios) . (.Microsoft Corporation - System Management BIOS Driver.) - C:\Windows\System32\DRIVERS\mssmbios.sys
O41 - Driver:  (NetBIOS) . (.Microsoft Corporation - NetBIOS interface driver.) - C:\Windows\System32\DRIVERS\netbios.sys
O41 - Driver: C:\Windows\System32\drivers\netbt.sys (NetBT) . (.Microsoft Corporation - MBT Transport driver.) - C:\Windows\System32\DRIVERS\netbt.sys
O41 - Driver: C:\Windows\System32\drivers\nsiproxy.sys (nsiproxy) . (.Microsoft Corporation - NSI Proxy.) - C:\Windows\System32\drivers\nsiproxy.sys
O41 - Driver: C:\Windows\System32\drivers\pacer.sys (Psched) . (.Microsoft Corporation - Planificateur de paquets QoS.) - C:\Windows\System32\DRIVERS\pacer.sys
O41 - Driver: C:\Windows\System32\wkssvc.dll (rdbss) . (.Microsoft Corporation - Pilote du sous-système de mise en mémoire t.) - C:\Windows\System32\DRIVERS\rdbss.sys
O41 - Driver: C:\Windows\System32\DRIVERS\RDPCDD.sys (RDPCDD) . (.Microsoft Corporation - RDP Miniport.) - C:\Windows\System32\DRIVERS\RDPCDD.sys
O41 - Driver: C:\Windows\System32\drivers\RDPENCDD.sys (RDPENCDD) . (.Microsoft Corporation - RDP Encoder Miniport.) - C:\Windows\System32\drivers\rdpencdd.sys
O41 - Driver: C:\Windows\System32\drivers\RdpRefMp.sys (RDPREFMP) . (.Microsoft Corporation - RDP Reflector Driver Miniport.) - C:\Windows\System32\drivers\rdprefmp.sys
O41 - Driver: C:\Windows\System32\tcpipcfg.dll (tdx) . (.Microsoft Corporation - TDI Translation Driver.) - C:\Windows\System32\DRIVERS\tdx.sys
O41 - Driver:  (TermDD) . (.Microsoft Corporation - Remote Desktop Server Driver.) - C:\Windows\System32\DRIVERS\termdd.sys
O41 - Driver: (VgaSave) . (.Microsoft Corporation - VGA/Super VGA Video Driver.) - C:\Windows\system32\drivers\vga.sys
O41 - Driver: C:\Windows\System32\rascfg.dll (Wanarpv6) . (.Microsoft Corporation - MS Remote Access and Routing ARP Driver.) - C:\Windows\System32\DRIVERS\wanarp.sys
O41 - Driver:  (WfpLwf) . (.Microsoft Corporation - WFP NDIS 6.20 Lightweight Filter Driver.) - C:\Windows\System32\DRIVERS\wfplwf.sys
~ Drivers: 66 Scanned in 00mn 00s



---\\ Logiciels installés (O42)
O42 - Logiciel: 2013 - (.Nicolas Coolman.) [HKLM][64Bits] -- ZHPDiag_is1
O42 - Logiciel: Adobe Acrobat 8 Professional - English, Français, Deutsch - (.Adobe Systems.) [HKLM][64Bits] -- Adobe Acrobat 8 Professional - English, Français, Deutsch
O42 - Logiciel: Adobe Flash Player 11 Plugin - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- Adobe Flash Player Plugin
O42 - Logiciel: Audacity 2.0.3 - (.Audacity Team.) [HKLM][64Bits] -- Audacity_is1
O42 - Logiciel: BreezeCONFIG DS v.4.1.10 - (.Alvarion.) [HKLM][64Bits] -- BrzMgr_is1
O42 - Logiciel: CCleaner - (.Piriform.) [HKLM][64Bits] -- CCleaner  =>Piriform Ltd
O42 - Logiciel: DAEMON Tools Lite - (.DT Soft Ltd.) [HKLM][64Bits] -- DAEMON Tools Lite
O42 - Logiciel: Dell SonicWALL NetExtender - (.Dell.) [HKLM][64Bits] -- Dell SonicWALL NetExtender
O42 - Logiciel: Direct MP3 Joiner 2.3 - (.Piston Software.) [HKLM][64Bits] -- Direct MP3 Joiner_is1
O42 - Logiciel: Facebook Video Calling 1.2.0.287 - (.Skype Limited.) [HKLM][64Bits] -- {B92C5909-1D37-4C51-8397-A28BB28E5DC3}
O42 - Logiciel: Google Chrome - (.Google Inc..) [HKLM][64Bits] -- Google Chrome
O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM][64Bits] -- {A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}
O42 - Logiciel: Intel PROSet Wireless - (...) [HKLM][64Bits] -- ProInst
O42 - Logiciel: Java 7 Update 25 - (.Oracle.) [HKLM][64Bits] -- {26A24AE4-039D-4CA4-87B4-2F83217025FF}
O42 - Logiciel: Microsoft Visio 2010 Service Pack 1 (SP1) - (.Microsoft.) [HKLM][64Bits] -- {90140000-0057-0000-1000-0000000FF1CE}_Office14.VISIO_{9081486B-B26D-42DB-8D31-81C525A9526A}
O42 - Logiciel: Microsoft Visio Premium 2010 - (.Microsoft Corporation.) [HKLM][64Bits] -- Office14.VISIO
O42 - Logiciel: Mozilla Firefox 23.0.1 (x86 fr) - (.Mozilla.) [HKLM][64Bits] -- Mozilla Firefox 23.0.1 (x86 fr)
O42 - Logiciel: Mozilla Maintenance Service - (.Mozilla.) [HKLM][64Bits] -- MozillaMaintenanceService
O42 - Logiciel: MySQL Connector/ODBC 5.2(a) - (.Oracle Corporation.) [HKLM][64Bits] -- {0B374200-B92C-4C30-98E3-85219B1BF95B}
O42 - Logiciel: Remote Desktop Connection Manager - (.Microsoft Corporation.) [HKLM][64Bits] -- {173A2B7F-535A-4403-A454-B41531EF0D7F}
O42 - Logiciel: Skype™ 6.7 - (.Skype Technologies S.A..) [HKLM][64Bits] -- {4E76FF7E-AEBA-4C87-B788-CD47E5425B9D}
O42 - Logiciel: SolidWorks eDrawings 2013 - (.Dassault Systèmes SolidWorks Corp.) [HKLM][64Bits] -- {23AF214D-3360-4979-9132-5586D6E11FC5}
O42 - Logiciel: SonicWALL Global VPN Client - (.SonicWALL.) [HKLM][64Bits] -- {2B0BD3DD-EF7E-43EE-AC58-061E412BFFEF}
O42 - Logiciel: TeamViewer 8 - (.TeamViewer.) [HKLM][64Bits] -- TeamViewer 8
O42 - Logiciel: WinRAR 4.20 (32-bit) - (.win.rar GmbH.) [HKLM][64Bits] -- WinRAR archiver
O42 - Logiciel: avast! Free Antivirus v8.0.1483.0 - (.AVAST Software.) [HKLM][64Bits] -- avast
~ Logic: 68 Scanned in 00mn 00s



---\\ HKCU & HKLM Software Keys
[HKCU\Software\Adobe]
[HKCU\Software\Ammyy]
[HKCU\Software\AppDataLow\Software\JavaSoft]
[HKCU\Software\AppDataLow]
[HKCU\Software\Audacity]
[HKCU\Software\Avast Software]
[HKCU\Software\Brother]
[HKCU\Software\Classes]
[HKCU\Software\Clients]
[HKCU\Software\DT Soft]
[HKCU\Software\DeterministicNetworks]
[HKCU\Software\Facebook]
[HKCU\Software\Free mp3 Wma Converter]
[HKCU\Software\Google]
[HKCU\Software\IM Providers]
[HKCU\Software\JavaSoft]
[HKCU\Software\Kyocera Mita]
[HKCU\Software\Macromedia]
[HKCU\Software\MozillaPlugins]
[HKCU\Software\Mozilla]
[HKCU\Software\Netscape]
[HKCU\Software\ODBC]
[HKCU\Software\Piriform]
[HKCU\Software\PistonSoft]
[HKCU\Software\Policies]
[HKCU\Software\SkypeRS]
[HKCU\Software\Skype]
[HKCU\Software\Softonic]  =>Toolbar.Conduit
[HKCU\Software\SonicWALL]
[HKCU\Software\TeamViewer]
[HKCU\Software\WinRAR SFX]
[HKCU\Software\WinRAR]
[HKCU\Software\Wow6432Node]
[HKCU\Software\ZebHelpProcess Helper]
[HKCU\Software\eDrawings]
[HKLM\Software\AMD]
[HKLM\Software\ATI Technologies]
[HKLM\Software\Brother]
[HKLM\Software\CBSTEST]
[HKLM\Software\CXT]
[HKLM\Software\Classes]
[HKLM\Software\Clients]
[HKLM\Software\DeterministicNetworks]
[HKLM\Software\IM Providers]
[HKLM\Software\Intel]
[HKLM\Software\Kyocera Mita]
[HKLM\Software\Macromedia]
[HKLM\Software\MozillaPlugins]
[HKLM\Software\Mozilla]
[HKLM\Software\ODBC]
[HKLM\Software\Piriform]
[HKLM\Software\Policies]
[HKLM\Software\RegisteredApplications]
[HKLM\Software\SonicWALL]
[HKLM\Software\Sonic]
[HKLM\Software\Sony Corporation]
[HKLM\Software\Volatile]
[HKLM\Software\Wow6432Node\AVAST Software]
[HKLM\Software\Wow6432Node\Adobe]
[HKLM\Software\Wow6432Node\Ammyy]
[HKLM\Software\Wow6432Node\Brother]
[HKLM\Software\Wow6432Node\Classes]
[HKLM\Software\Wow6432Node\Clients]
[HKLM\Software\Wow6432Node\DT Soft]
[HKLM\Software\Wow6432Node\DeterministicNetworks]
[HKLM\Software\Wow6432Node\Google]
[HKLM\Software\Wow6432Node\Graphics]
[HKLM\Software\Wow6432Node\IM Providers]
[HKLM\Software\Wow6432Node\Intel]
[HKLM\Software\Wow6432Node\JavaSoft]
[HKLM\Software\Wow6432Node\JreMetrics]
[HKLM\Software\Wow6432Node\MAXSOFT-OCRON]
[HKLM\Software\Wow6432Node\Macromedia]
[HKLM\Software\Wow6432Node\Macrovision]
[HKLM\Software\Wow6432Node\MozillaPlugins]
[HKLM\Software\Wow6432Node\Mozilla]
[HKLM\Software\Wow6432Node\MySQL AB]
[HKLM\Software\Wow6432Node\ODBC]
[HKLM\Software\Wow6432Node\Policies]
[HKLM\Software\Wow6432Node\RegisteredApplications]
[HKLM\Software\Wow6432Node\Skype]
[HKLM\Software\Wow6432Node\Sony Corporation]
[HKLM\Software\Wow6432Node\TeamViewer]
[HKLM\Software\Wow6432Node\Uniblue]
[HKLM\Software\Wow6432Node\Volatile]
[HKLM\Software\Wow6432Node\WinRAR]
[HKLM\Software\Wow6432Node\eDrawings]
[HKLM\Software\Wow6432Node\mozilla.org]
[HKLM\Software\Wow6432Node]
~ Key Software: 133 Scanned in 00mn 00s



---\\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43)
O43 - CFD: 16/04/2013 - 15:58:03 - [1173,393] ----D C:\Program Files (x86)\Adobe
O43 - CFD: 29/08/2013 - 20:14:09 - [44,319] ----D C:\Program Files (x86)\Audacity
O43 - CFD: 29/08/2013 - 23:14:15 - [1,609] ----D C:\Program Files (x86)\BreezeCONFIG DS
O43 - CFD: 21/01/2013 - 15:33:16 - [6,716] ----D C:\Program Files (x86)\Cisco
O43 - CFD: 20/08/2013 - 13:25:05 - [294,583] ----D C:\Program Files (x86)\Common Files
O43 - CFD: 21/02/2013 - 21:39:41 - [26,323] ----D C:\Program Files (x86)\DAEMON Tools Lite
O43 - CFD: 29/08/2013 - 20:50:14 - [2,865] ----D C:\Program Files (x86)\Direct MP3 Joiner
O43 - CFD: 26/06/2013 - 16:36:51 - [0,103] ----D C:\Program Files (x86)\Elaborate Bytes
O43 - CFD: 29/08/2013 - 18:55:14 - [0,124] ----D C:\Program Files (x86)\Free mp3 Wma Converter
O43 - CFD: 17/09/2013 - 09:16:54 - [291,434] ----D C:\Program Files (x86)\Google
O43 - CFD: 21/01/2013 - 16:26:49 - [4,616] --H-D C:\Program Files (x86)\InstallShield Installation Information
O43 - CFD: 16/05/2013 - 21:23:01 - [4,933] ----D C:\Program Files (x86)\Internet Explorer
O43 - CFD: 03/05/2013 - 11:41:54 - [122,487] ----D C:\Program Files (x86)\Java
O43 - CFD: 26/06/2013 - 14:27:53 - [37,927] ----D C:\Program Files (x86)\Microsoft Analysis Services
O43 - CFD: 28/06/2013 - 14:35:09 - [28,882] ----D C:\Program Files (x86)\Microsoft Office
O43 - CFD: 26/06/2013 - 14:29:25 - [1,314] ----D C:\Program Files (x86)\Microsoft Visual Studio 8
O43 - CFD: 26/06/2013 - 14:30:56 - [7,789] ----D C:\Program Files (x86)\Microsoft.NET
O43 - CFD: 19/08/2013 - 12:39:49 - [47,920] ----D C:\Program Files (x86)\Mozilla Firefox
O43 - CFD: 21/08/2013 - 07:46:50 - [0,215] ----D C:\Program Files (x86)\Mozilla Maintenance Service
O43 - CFD: 26/06/2013 - 14:39:16 - [0,025] ----D C:\Program Files (x86)\MSBuild
O43 - CFD: 12/07/2013 - 17:44:45 - [11,086] ----D C:\Program Files (x86)\MySQL
O43 - CFD: 14/07/2009 - 09:32:38 - [37,357] ----D C:\Program Files (x86)\Reference Assemblies
O43 - CFD: 10/04/2013 - 20:19:59 - [1,013] ----D C:\Program Files (x86)\Remote Desktop Connection Manager
O43 - CFD: 01/08/2013 - 08:07:34 - [20,004] R---D C:\Program Files (x86)\Skype
O43 - CFD: 05/06/2013 - 19:15:50 - [5,262] ----D C:\Program Files (x86)\SonicWALL
O43 - CFD: 21/01/2013 - 16:31:05 - [0,389] ----D C:\Program Files (x86)\Sony
O43 - CFD: 10/04/2013 - 20:23:54 - [31,976] ----D C:\Program Files (x86)\TeamViewer
O43 - CFD: 14/07/2009 - 08:57:06 - [0] --H-D C:\Program Files (x86)\Uninstall Information
O43 - CFD: 20/05/2013 - 11:58:51 - [1,059] ----D C:\Program Files (x86)\VoiceOperatorPanel
O43 - CFD: 12/04/2011 - 12:43:01 - [0,500] ----D C:\Program Files (x86)\Windows Defender
O43 - CFD: 12/04/2011 - 12:43:01 - [5,895] ----D C:\Program Files (x86)\Windows Mail
O43 - CFD: 12/04/2011 - 12:43:01 - [4,791] ----D C:\Program Files (x86)\Windows Media Player
O43 - CFD: 14/07/2009 - 09:32:38 - [11,632] ----D C:\Program Files (x86)\Windows NT
O43 - CFD: 12/04/2011 - 12:43:01 - [4,213] ----D C:\Program Files (x86)\Windows Photo Viewer
O43 - CFD: 21/11/2010 - 07:31:38 - [0,181] ----D C:\Program Files (x86)\Windows Portable Devices
O43 - CFD: 12/04/2011 - 12:43:01 - [5,717] ----D C:\Program Files (x86)\Windows Sidebar
O43 - CFD: 02/07/2013 - 10:23:30 - [4,131] ----D C:\Program Files (x86)\WinRAR
O43 - CFD: 18/09/2013 - 16:37:44 - [16,882] ----D C:\Program Files (x86)\ZHPDiag
O43 - CFD: 20/04/2013 - 12:20:02 - [71,355] ----D C:\Program Files (x86)\Common Files\Adobe
O43 - CFD: 20/08/2013 - 13:25:10 - [44,814] ----D C:\Program Files (x86)\Common Files\eDrawings2013
O43 - CFD: 03/05/2013 - 11:42:34 - [1,189] ----D C:\Program Files (x86)\Common Files\Java
O43 - CFD: 20/04/2013 - 12:19:57 - [0,625] ----D C:\Program Files (x86)\Common Files\Macrovision Shared
O43 - CFD: 28/06/2013 - 09:27:41 - [125,184] ----D C:\Program Files (x86)\Common Files\microsoft shared
O43 - CFD: 14/07/2009 - 07:20:08 - [0,003] ----D C:\Program Files (x86)\Common Files\Services
O43 - CFD: 25/06/2013 - 12:42:53 - [1,904] ----D C:\Program Files (x86)\Common Files\Skype
O43 - CFD: 14/07/2009 - 07:20:08 - [39,200] ----D C:\Program Files (x86)\Common Files\SpeechEngines
O43 - CFD: 26/06/2013 - 14:15:01 - [10,310] ----D C:\Program Files (x86)\Common Files\System
O43 - CFD: 28/05/2013 - 21:52:01 - [0,303] ----D C:\ProgramData\Adobe
O43 - CFD: 10/04/2013 - 20:21:04 - [0,000] ----D C:\ProgramData\AMMYY
O43 - CFD: 14/07/2009 - 09:08:56 - [0] --H-D C:\ProgramData\Application Data
O43 - CFD: 21/01/2013 - 15:18:33 - [15,234] ----D C:\ProgramData\AVAST Software
O43 - CFD: 26/04/2013 - 13:12:54 - [0,000] ----D C:\ProgramData\Brother
O43 - CFD: 21/01/2013 - 14:36:59 - [0] --H-D C:\ProgramData\Bureau
O43 - CFD: 21/02/2013 - 21:51:38 - [0,002] ----D C:\ProgramData\DAEMON Tools Lite
O43 - CFD: 14/07/2009 - 09:08:56 - [0] --H-D C:\ProgramData\Desktop
O43 - CFD: 14/07/2009 - 09:08:56 - [0] --H-D C:\ProgramData\Documents
O43 - CFD: 21/01/2013 - 14:36:59 - [0] --H-D C:\ProgramData\Favoris
O43 - CFD: 14/07/2009 - 09:08:56 - [0] --H-D C:\ProgramData\Favorites
O43 - CFD: 20/08/2013 - 13:25:37 - [0,030] ----D C:\ProgramData\FLEXnet
O43 - CFD: 21/01/2013 - 15:33:10 - [0,001] ----D C:\ProgramData\Intel
O43 - CFD: 21/01/2013 - 14:36:59 - [0] --H-D C:\ProgramData\Menu Démarrer
O43 - CFD: 27/08/2013 - 15:46:01 - [539,874] -S--D C:\ProgramData\Microsoft
O43 - CFD: 18/09/2013 - 07:35:39 - [0,004] ----D C:\ProgramData\Microsoft Help
O43 - CFD: 21/01/2013 - 14:36:59 - [0] --H-D C:\ProgramData\Modèles
O43 - CFD: 21/01/2013 - 15:20:08 - [0,035] ----D C:\ProgramData\Mozilla
O43 - CFD: 21/01/2013 - 15:34:43 - [0] ----D C:\ProgramData\Roaming
O43 - CFD: 01/08/2013 - 08:07:37 - [32,597] ----D C:\ProgramData\Skype
O43 - CFD: 21/01/2013 - 15:40:57 - [0,140] ----D C:\ProgramData\Sony Corporation
O43 - CFD: 14/07/2009 - 09:08:56 - [0] --H-D C:\ProgramData\Start Menu
O43 - CFD: 03/05/2013 - 11:42:37 - [0,000] ----D C:\ProgramData\Sun
O43 - CFD: 14/07/2009 - 09:08:56 - [0] --H-D C:\ProgramData\Templates
O43 - CFD: 25/04/2013 - 17:12:57 - [18,323] ----D C:\Users\Natacha\AppData\Roaming\Adobe
O43 - CFD: 29/08/2013 - 20:43:43 - [0,001] ----D C:\Users\Natacha\AppData\Roaming\Audacity
O43 - CFD: 17/09/2013 - 09:20:30 - [1,408] ----D C:\Users\Natacha\AppData\Roaming\DAEMON Tools Lite
O43 - CFD: 26/06/2013 - 16:29:47 - [0,000] ----D C:\Users\Natacha\AppData\Roaming\Download Manager
O43 - CFD: 20/08/2013 - 13:26:04 - [0] ----D C:\Users\Natacha\AppData\Roaming\EDrawings
O43 - CFD: 29/08/2013 - 18:49:11 - [0,000] ----D C:\Users\Natacha\AppData\Roaming\FreeAudioPack
O43 - CFD: 21/01/2013 - 14:37:40 - [0] ----D C:\Users\Natacha\AppData\Roaming\Identities
O43 - CFD: 21/01/2013 - 15:34:44 - [0,000] ----D C:\Users\Natacha\AppData\Roaming\Intel
O43 - CFD: 21/01/2013 - 17:20:05 - [0,001] ----D C:\Users\Natacha\AppData\Roaming\Macromedia
O43 - CFD: 12/04/2011 - 12:49:50 - [0] ----D C:\Users\Natacha\AppData\Roaming\Media Center Programs
O43 - CFD: 20/08/2013 - 14:03:25 - [9,641] -S--D C:\Users\Natacha\AppData\Roaming\Microsoft
O43 - CFD: 21/01/2013 - 15:21:03 - [19,479] ----D C:\Users\Natacha\AppData\Roaming\Mozilla
O43 - CFD: 18/09/2013 - 16:37:37 - [10,352] ----D C:\Users\Natacha\AppData\Roaming\Skype
O43 - CFD: 10/04/2013 - 20:24:09 - [0,021] ----D C:\Users\Natacha\AppData\Roaming\SonicWALL
O43 - CFD: 21/01/2013 - 15:30:48 - [0,001] ----D C:\Users\Natacha\AppData\Roaming\Sony Corporation
O43 - CFD: 16/09/2013 - 11:02:15 - [0,024] ----D C:\Users\Natacha\AppData\Roaming\TeamViewer
O43 - CFD: 02/07/2013 - 10:23:49 - [0,000] ----D C:\Users\Natacha\AppData\Roaming\WinRAR
O43 - CFD: 20/05/2013 - 11:28:11 - [0,009] ----D C:\Users\Natacha\AppData\Roaming\Zoiper
O43 - CFD: 20/04/2013 - 14:22:41 - [0,261] ----D C:\Users\Natacha\AppData\Local\Adobe
O43 - CFD: 21/01/2013 - 14:37:18 - [0] ----D C:\Users\Natacha\AppData\Local\Application Data
O43 - CFD: 09/09/2013 - 12:43:06 - [0,445] ----D C:\Users\Natacha\AppData\Local\Diagnostics
O43 - CFD: 11/09/2013 - 08:13:27 - [2,354] ----D C:\Users\Natacha\AppData\Local\ElevatedDiagnostics
O43 - CFD: 04/09/2013 - 19:31:12 - [7,406] ----D C:\Users\Natacha\AppData\Local\Facebook
O43 - CFD: 18/09/2013 - 16:09:36 - [39,162] ----D C:\Users\Natacha\AppData\Local\Google
O43 - CFD: 21/01/2013 - 14:37:18 - [0] ----D C:\Users\Natacha\AppData\Local\Historique
O43 - CFD: 21/01/2013 - 17:20:05 - [0] ----D C:\Users\Natacha\AppData\Local\Macromedia
O43 - CFD: 09/09/2013 - 08:06:00 - [-803,417] ----D C:\Users\Natacha\AppData\Local\Microsoft
O43 - CFD: 10/04/2013 - 20:25:01 - [0,003] ----D C:\Users\Natacha\AppData\Local\Microsoft Corporation
O43 - CFD: 16/05/2013 - 17:08:39 - [0,139] ----D C:\Users\Natacha\AppData\Local\Microsoft Help
O43 - CFD: 21/01/2013 - 15:20:19 - [23,778] ----D C:\Users\Natacha\AppData\Local\Mozilla
O43 - CFD: 29/08/2013 - 20:13:51 - [0] ----D C:\Users\Natacha\AppData\Local\Programs
O43 - CFD: 18/09/2013 - 16:37:49 - [41,105] ----D C:\Users\Natacha\AppData\Local\Temp
O43 - CFD: 21/01/2013 - 14:37:18 - [0] ----D C:\Users\Natacha\AppData\Local\Temporary Internet Files
O43 - CFD: 20/04/2013 - 12:33:26 - [1,174] ----D C:\Users\Natacha\AppData\Local\VirtualStore
O43 - CFD: 14/07/2009 - 08:54:32 - [0,014] R---D C:\Users\Natacha\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
O43 - CFD: 17/05/2013 - 08:01:50 - [0,000] R---D C:\Users\Natacha\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
O43 - CFD: 14/07/2009 - 08:49:38 - [0,001] R---D C:\Users\Natacha\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
O43 - CFD: 17/05/2013 - 08:01:50 - [0,002] R---D C:\Users\Natacha\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
~ Program Folder: 109 Scanned in 00mn 13s



---\\ Derniers fichiers modifiés ou crées sous Windows et System32 (O44)
O44 - LFC:[MD5.CD07D977A353FDC3C1C23BAB6B110D92] - 18/09/2013 - 16:27:16 ---A- . (...) -- C:\Windows\WindowsUpdate.log   [1625385]
O44 - LFC:[MD5.C166BF183DFBE67C1D8EAA170F4500FA] - 18/09/2013 - 16:05:12 ---A- . (...) -- C:\Windows\setupact.log   [538]
O44 - LFC:[MD5.45ABAD46C3C12647D804435154AC3129] - 18/09/2013 - 16:05:11 -S-A- . (...) -- C:\Windows\bootstat.dat   [67584]
O44 - LFC:[MD5.C2BAC79BAFA2D7D72ADDA2BD55DB3193] - 18/09/2013 - 16:05:05 ---A- . (...) -- C:\Windows\MEMORY.DMP   [471492514]
O44 - LFC:[MD5.04CFE6D6CC3B669FE2BAC276BEDC0251] - 18/09/2013 - 09:09:31 ---A- . (...) -- C:\WinUpdateFix.txt   [1225]
O44 - LFC:[MD5.72A0111C504C52E9B72BF0F65771438B] - 18/09/2013 - 07:30:05 ---A- . (...) -- C:\Windows\SysNative\PerfStringBackup.INI   [1572414]
O44 - LFC:[MD5.2E5677FB08584D54204B3E4D473950E5] - 18/09/2013 - 07:30:05 ---A- . (...) -- C:\Windows\SysNative\perfc009.dat   [106622]
O44 - LFC:[MD5.D807156ADB08B91BA06B54ABA0F2F741] - 18/09/2013 - 07:30:05 ---A- . (...) -- C:\Windows\SysNative\perfc00C.dat   [130988]
O44 - LFC:[MD5.AFFA61EDA71068E2CAED8331C6DFB473] - 18/09/2013 - 07:30:05 ---A- . (...) -- C:\Windows\SysNative\perfh009.dat   [616242]
O44 - LFC:[MD5.BAE80B063FFC9095B3126FA6956C7687] - 18/09/2013 - 07:30:05 ---A- . (...) -- C:\Windows\SysNative\perfh00C.dat   [704714]
O44 - LFC:[MD5.72A0111C504C52E9B72BF0F65771438B] - 18/09/2013 - 07:30:05 RSHAD . (...) -- C:\Windows\System32\PerfStringBackup.INI   [1572414]
O44 - LFC:[MD5.2E5677FB08584D54204B3E4D473950E5] - 18/09/2013 - 07:30:05 RSHAD . (...) -- C:\Windows\System32\perfc009.dat   [106622]
O44 - LFC:[MD5.D807156ADB08B91BA06B54ABA0F2F741] - 18/09/2013 - 07:30:05 RSHAD . (...) -- C:\Windows\System32\perfc00C.dat   [130988]
O44 - LFC:[MD5.AFFA61EDA71068E2CAED8331C6DFB473] - 18/09/2013 - 07:30:05 RSHAD . (...) -- C:\Windows\System32\perfh009.dat   [616242]
O44 - LFC:[MD5.BAE80B063FFC9095B3126FA6956C7687] - 18/09/2013 - 07:30:05 RSHAD . (...) -- C:\Windows\System32\perfh00C.dat   [704714]
O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 17/09/2013 - 15:48:04 ---A- . (...) -- C:\Windows\setuperr.log   [0]
O44 - LFC:[MD5.583CFB1D69A2333572C7BA21BA11FA34] - 17/09/2013 - 15:47:46 ---A- . (...) -- C:\Windows\PFRO.log   [1056]
O44 - LFC:[MD5.ED75F1FE0424A6C06ED00639D869FA36] - 17/09/2013 - 15:47:15 ----- . (...) -- C:\bootsqm.dat   [3408]
~ Files: 18 Scanned in 00mn 31s



---\\ Derniers fichiers créés dans Windows Prefetcher (O45)
O45 - LFCP:[MD5.E0D4CFF82D9191AE7366AB167C18A631] - 13/09/2013 - 08:26:48 ---A- - C:\Windows\Prefetch\ATBROKER.EXE-2E15A492.pf
O45 - LFCP:[MD5.A8CDC75332D781CA52C480D96079275B] - 13/09/2013 - 08:26:58 ---A- - C:\Windows\Prefetch\DWM.EXE-6FFD3DA8.pf
O45 - LFCP:[MD5.E644933C32781E5BF9E159D78A28ECA2] - 13/09/2013 - 08:26:58 ---A- - C:\Windows\Prefetch\USERINIT.EXE-2257A3E7.pf
O45 - LFCP:[MD5.38C89EE349365478F4234DE639A921B9] - 13/09/2013 - 08:27:54 ---A- - C:\Windows\Prefetch\AgCx_SC4.db
O45 - LFCP:[MD5.2833112EF0CD762F228F478FFC903302] - 16/09/2013 - 08:04:07 ---A- - C:\Windows\Prefetch\SETUP.OVR-56BCD126.pf
O45 - LFCP:[MD5.D69057A34B60EC28622743C14BA15DA2] - 16/09/2013 - 11:01:40 ---A- - C:\Windows\Prefetch\TEAMVIEWER_SETUP.EXE-B8678101.pf
O45 - LFCP:[MD5.068CFB17237926743C13D67D28F9ECF8] - 16/09/2013 - 11:37:15 ---A- - C:\Windows\Prefetch\RUNDLL32.EXE-ECC065AF.pf
O45 - LFCP:[MD5.D6BFA68C9EACCE114BC85F94B6FED181] - 16/09/2013 - 11:39:34 ---A- - C:\Windows\Prefetch\RUNDLL32.EXE-AE2AEB22.pf
O45 - LFCP:[MD5.681332E40BF0FD61D707923FFFF62F93] - 16/09/2013 - 11:56:43 ---A- - C:\Windows\Prefetch\TEAMVIEWER.EXE-8C9D9595.pf
O45 - LFCP:[MD5.D30755783B92610DA7BA6121EBF624D8] - 16/09/2013 - 11:56:45 ---A- - C:\Windows\Prefetch\TV_W32.EXE-7CD40EA9.pf
O45 - LFCP:[MD5.DF624E5C5E5A27BFAA0B1C3BC9F8CAA2] - 16/09/2013 - 11:56:45 ---A- - C:\Windows\Prefetch\TV_X64.EXE-54D6669F.pf
O45 - LFCP:[MD5.77839EE20486AE823CEE5BB9B1324AEE] - 16/09/2013 - 15:02:54 ---A- - C:\Windows\Prefetch\DLLHOST.EXE-76936ED5.pf
O45 - LFCP:[MD5.81176507C65EF7B22C1DFB8130F243D0] - 16/09/2013 - 15:36:30 ---A- - C:\Windows\Prefetch\MSPAINT.EXE-76E10B24.pf
O45 - LFCP:[MD5.423692DC15C4BB6F805541EE764EC499] - 16/09/2013 - 18:25:05 ---A- - C:\Windows\Prefetch\RUNDLL32.EXE-2FFF6E6A.pf
O45 - LFCP:[MD5.EBA54FF3D1F8125AEA6EAE3A6EA7FDA5] - 16/09/2013 - 18:30:32 ---A- - C:\Windows\Prefetch\SCANPST.EXE-5149C975.pf
O45 - LFCP:[MD5.2573C6CA8A3F59D268D75593AD571A33] - 16/09/2013 - 18:52:58 ---A- - C:\Windows\Prefetch\AgCx_SC1.db.trx
O45 - LFCP:[MD5.DC26688CCA6C30797DB3B7A917501FDE] - 16/09/2013 - 18:53:59 ---A- - C:\Windows\Prefetch\AgCx_SC1.db
O45 - LFCP:[MD5.DCE037222B922DD35453C211156FB244] - 17/09/2013 - 08:09:32 ---A- - C:\Windows\Prefetch\RUNDLL32.EXE-5E5A1ED0.pf
O45 - LFCP:[MD5.3FF274C2D8FCCBA4762D64941E3C9269] - 17/09/2013 - 08:37:43 ---A- - C:\Windows\Prefetch\USERACCOUNTCONTROLSETTINGS.EX-1B2F66BE.pf
O45 - LFCP:[MD5.388C386D8E14A6EB39B8CCB7E5C852F3] - 17/09/2013 - 08:37:48 ---A- - C:\Windows\Prefetch\DLLHOST.EXE-0F564EEF.pf
O45 - LFCP:[MD5.811CEF2207441DDCE5C1C9D1165D9DB5] - 17/09/2013 - 08:37:48 ---A- - C:\Windows\Prefetch\DLLHOST.EXE-7CE224E3.pf
O45 - LFCP:[MD5.52BDC68374D99337814ED9F399C1B7A2] - 17/09/2013 - 08:38:01 ---A- - C:\Windows\Prefetch\VERCLSID.EXE-7C52E31C.pf
O45 - LFCP:[MD5.DB5E406DB4E8633F9A8F830EF484F478] - 17/09/2013 - 08:48:02 ---A- - C:\Windows\Prefetch\OFFICESUITE2010SP1-KB2460049--B2DA3F88.pf
O45 - LFCP:[MD5.30C39D9BDE9D18BE08BBBB05A2C8BA21] - 17/09/2013 - 09:05:19 ---A- - C:\Windows\Prefetch\RUNDLL32.EXE-DE9673F9.pf
O45 - LFCP:[MD5.26364253CA301B8662FBC6A69BDC01C8] - 17/09/2013 - 09:13:07 ---A- - C:\Windows\Prefetch\CCSETUP405.EXE-8AB60CE4.pf
O45 - LFCP:[MD5.FA193AE5289F78491EF714953A811F66] - 17/09/2013 - 09:13:14 ---A- - C:\Windows\Prefetch\PING.EXE-371F41E2.pf
O45 - LFCP:[MD5.D2B20ED90C3A7B1ABFE4ED4D00777AAC] - 17/09/2013 - 09:13:25 ---A- - C:\Windows\Prefetch\PF-CHROME-W78.EXE-E2E95B0B.pf
O45 - LFCP:[MD5.A18FAD9EEB74AE7206B14D9B944AB28E] - 17/09/2013 - 09:13:26 ---A- - C:\Windows\Prefetch\GOOGLEUPDATESETUP_LATEST.EXE-6F8DCC7B.pf
O45 - LFCP:[MD5.78C7844089120EE40BF37EED1B69FF61] - 17/09/2013 - 09:13:28 ---A- - C:\Windows\Prefetch\GOOGLEUPDATE.EXE-E2A8728E.pf
O45 - LFCP:[MD5.B9C3FEFB47531DDDD4E9CA92A5F824D6] - 17/09/2013 - 09:16:43 ---A- - C:\Windows\Prefetch\CCLEANER64.EXE-779BD542.pf  =>Piriform Ltd
O45 - LFCP:[MD5.E73A4D67ACD237862C40488069392D52] - 17/09/2013 - 09:17:00 ---A- - C:\Windows\Prefetch\SETUP.EXE-CB691684.pf
O45 - LFCP:[MD5.3466E89B65927C5A9D9C93D0F821B6D2] - 17/09/2013 - 09:17:01 ---A- - C:\Windows\Prefetch\29.0.1547.66_CHROME_INSTALLER-531D1E4A.pf
O45 - LFCP:[MD5.B11E077DFC2FFF91835847C9E7638B2E] - 17/09/2013 - 09:18:17 ---A- - C:\Windows\Prefetch\GOOGLEUPDATESETUP.EXE-7A34CC31.pf
O45 - LFCP:[MD5.78F08172244EB78AFB873ED9885859AD] - 17/09/2013 - 09:18:18 ---A- - C:\Windows\Prefetch\GOOGLEUPDATE.EXE-4AEAAE84.pf
O45 - LFCP:[MD5.90D6B765580429251E2B60058131D833] - 17/09/2013 - 09:23:38 ---A- - C:\Windows\Prefetch\HELPER.EXE-0A7740EE.pf
O45 - LFCP:[MD5.D6250199E6D781A01AF4D36732B7D0B6] - 17/09/2013 - 09:25:01 ---A- - C:\Windows\Prefetch\RUNDLL32.EXE-28BF826E.pf
O45 - LFCP:[MD5.0F0DDC1744EA79A47744B3AAC6623E7F] - 17/09/2013 - 09:25:05 ---A- - C:\Windows\Prefetch\MSDT.EXE-09841468.pf
O45 - LFCP:[MD5.59CBAE816D9CBE0BD2D967B6655A0271] - 17/09/2013 - 09:41:44 ---A- - C:\Windows\Prefetch\WUAPP.EXE-C6167071.pf
O45 - LFCP:[MD5.D76527AA9C9281D426BDD83A18EB4BBC] - 17/09/2013 - 10:13:56 ---A- - C:\Windows\Prefetch\HELPPANE.EXE-FEDC965B.pf
O45 - LFCP:[MD5.4F84C1C725426E6628A2C6A63EEE8C6B] - 17/09/2013 - 10:42:57 ---A- - C:\Windows\Prefetch\MRTSTUB.EXE-C87CB949.pf
O45 - LFCP:[MD5.845A1C24F880E37D4688D59C39920B95] - 17/09/2013 - 11:19:36 ---A- - C:\Windows\Prefetch\TEAMVIEWER_SETUP(1).EXE-9F19C48B.pf
O45 - LFCP:[MD5.0688EB0D1BD85187740C3C6946A4688B] - 17/09/2013 - 11:19:52 ---A- - C:\Windows\Prefetch\TEAMVIEWER_.EXE-F22FB927.pf
O45 - LFCP:[MD5.75F071345332D04C40327CEC525267D7] - 17/09/2013 - 11:20:09 ---A- - C:\Windows\Prefetch\TEAMVIEWER.EXE-E8FC132C.pf
O45 - LFCP:[MD5.F32182ABF82C1B09314EFB356995F175] - 17/09/2013 - 11:20:12 ---A- - C:\Windows\Prefetch\TV_W32.EXE-1496A620.pf
O45 - LFCP:[MD5.BC352BD204F461FA9A8B1AF7DF0598B1] - 17/09/2013 - 11:20:13 ---A- - C:\Windows\Prefetch\TV_X64.EXE-EC98FE16.pf
O45 - LFCP:[MD5.6865EB67B943DDA26B4509CD5D0CB85C] - 17/09/2013 - 11:49:45 ---A- - C:\Windows\Prefetch\MSHTA.EXE-854F6B45.pf
O45 - LFCP:[MD5.730FEA843EC51A396FDA4E91A1D08425] - 17/09/2013 - 20:18:59 ---A- - C:\Windows\Prefetch\DTLITE.EXE-368347E6.pf
O45 - LFCP:[MD5.318EE4037B5034698EC273C905453C1D] - 17/09/2013 - 20:29:52 ---A- - C:\Windows\Prefetch\SVCHOST.EXE-C871F054.pf
O45 - LFCP:[MD5.81D8F6CA81EDB10A7AF9000484987826] - 17/09/2013 - 20:31:26 ---A- - C:\Windows\Prefetch\MRT.EXE-851529F7.pf
O45 - LFCP:[MD5.C5945E0106DEB4CA8F113DBF5C28484A] - 17/09/2013 - 20:31:26 ---A- - C:\Windows\Prefetch\WINDOWS-KB890830-X64-V5.4(1).-5F2E3DB8.pf
O45 - LFCP:[MD5.67B7D1EF564CDDBF73B1A7709F78DF71] - 18/09/2013 - 07:11:01 ---A- - C:\Windows\Prefetch\WUAUCLT.EXE-70318591.pf
O45 - LFCP:[MD5.EF5CAE6EB2B0388EEC6A26B5F316B9DD] - 18/09/2013 - 07:11:30 ---A- - C:\Windows\Prefetch\AgCx_SC2.db
O45 - LFCP:[MD5.55D5778A1D52BEE821EFE1421B9D37C9] - 18/09/2013 - 07:34:10 ---A- - C:\Windows\Prefetch\BCSSYNC.EXE-3F6C64A2.pf
O45 - LFCP:[MD5.CFFCB1B303A219061718A104124255CD] - 18/09/2013 - 07:55:54 ---A- - C:\Windows\Prefetch\WMPNSCFG.EXE-FC0D39BF.pf
O45 - LFCP:[MD5.D2AC09A3DA8FB717D2D266C020C0A433] - 18/09/2013 - 07:59:12 ---A- - C:\Windows\Prefetch\PRINTISOLATIONHOST.EXE-E0CD10A9.pf
O45 - LFCP:[MD5.DCE574BC396282EB7CB403BA510E2187] - 18/09/2013 - 08:01:28 ---A- - C:\Windows\Prefetch\DINOTIFY.EXE-35A869D6.pf
O45 - LFCP:[MD5.4CF9664821699BF83DB4B81DD08E8C45] - 18/09/2013 - 08:03:07 ---A- - C:\Windows\Prefetch\DRVINST.EXE-4CB4314A.pf
O45 - LFCP:[MD5.7096B5BF75D1BF5412E81012A31903C7] - 18/09/2013 - 08:03:59 ---A- - C:\Windows\Prefetch\RDCMAN.EXE-E998A637.pf
O45 - LFCP:[MD5.F45F84CBA16FC58B5501C2367AC61A1F] - 18/09/2013 - 08:07:37 ---A- - C:\Windows\Prefetch\UPDATER.EXE-EA1310CB.pf
O45 - LFCP:[MD5.AF453FCEA4F31BF863F59791C5B8BA60] - 18/09/2013 - 09:08:18 ---A- - C:\Windows\Prefetch\NTOSBOOT-B00DFAAD.pf
O45 - LFCP:[MD5.EFD69705216DEBB4584AAA5B1586A587] - 18/09/2013 - 09:38:00 ---A- - C:\Windows\Prefetch\RUNONCE.EXE-0E293DD6.pf
O45 - LFCP:[MD5.7D5F857DBAF6889CE937286D6FD3D4BC] - 18/09/2013 - 09:38:01 ---A- - C:\Windows\Prefetch\ADOBECOLLABSYNC.EXE-A0DFC5CF.pf
O45 - LFCP:[MD5.DF5102C4EC0AAA6BA1A80FEC71F58E16] - 18/09/2013 - 09:38:09 ---A- - C:\Windows\Prefetch\SKYPE.EXE-E71BF59F.pf
O45 - LFCP:[MD5.E54653E480D3A3C3E9D99BE6270F9098] - 18/09/2013 - 09:38:25 ---A- - C:\Windows\Prefetch\SEARCHINDEXER.EXE-4A6353B9.pf
O45 - LFCP:[MD5.8D6F5CBF4078427E80D3E83427484593] - 18/09/2013 - 09:39:06 ---A- - C:\Windows\Prefetch\MOBSYNC.EXE-C5E2284F.pf
O45 - LFCP:[MD5.B368215E14C184C09060AD160ED60418] - 18/09/2013 - 09:47:22 ---A- - C:\Windows\Prefetch\SDIAGNHOST.EXE-8D72177C.pf
O45 - LFCP:[MD5.51C028831ABBAE774DB9781BAF4B1CAF] - 18/09/2013 - 10:12:52 ---A- - C:\Windows\Prefetch\MSIEXEC.EXE-A2D55CB6.pf
O45 - LFCP:[MD5.EE90E85F2465B5A7BBBB3FB511EE352E] - 18/09/2013 - 10:12:52 ---A- - C:\Windows\Prefetch\MSIEXEC.EXE-E09A077A.pf
O45 - LFCP:[MD5.AF1D5080D39907600FEF21285B097B40] - 18/09/2013 - 10:13:34 ---A- - C:\Windows\Prefetch\SC.EXE-945D79AE.pf
O45 - LFCP:[MD5.292405D3F89C9A2F8AEEF59FD0D85983] - 18/09/2013 - 11:03:23 ---A- - C:\Windows\Prefetch\DLLHOST.EXE-B2EB1806.pf
O45 - LFCP:[MD5.7AB8D96562CC4DBD1F938F2087EA7851] - 18/09/2013 - 11:03:24 ---A- - C:\Windows\Prefetch\SVCHOST.EXE-7CFEDEA3.pf
O45 - LFCP:[MD5.C15B787173F72B249CABFBFC00FC05DA] - 18/09/2013 - 11:03:24 ---A- - C:\Windows\Prefetch\VSSVC.EXE-B8AFC319.pf
O45 - LFCP:[MD5.8F4F52CF4BDD3544C03F314B9C06D186] - 18/09/2013 - 11:14:14 ---A- - C:\Windows\Prefetch\OSPPSVC.EXE-E53D3CC0.pf
O45 - LFCP:[MD5.5BABA8C87E1F6319758EED28EF45F3D7] - 18/09/2013 - 11:22:37 ---A- - C:\Windows\Prefetch\WSQMCONS.EXE-118B52B7.pf
O45 - LFCP:[MD5.55D451E4CEF9B16320291017B4861C72] - 18/09/2013 - 11:23:40 ---A- - C:\Windows\Prefetch\WERFAULT.EXE-E69F695A.pf
O45 - LFCP:[MD5.A53C3F2BBD337AB291308F2439BF6307] - 18/09/2013 - 11:23:49 ---A- - C:\Windows\Prefetch\SVCHOST.EXE-F1EE8788.pf
O45 - LFCP:[MD5.A2B944E051E26283034047D7EE273092] - 18/09/2013 - 11:26:21 ---A- - C:\Windows\Prefetch\EXCEL.EXE-53A22446.pf
O45 - LFCP:[MD5.F809BD5205F732F5146516CBE7318350] - 18/09/2013 - 11:28:21 ---A- - C:\Windows\Prefetch\ACROBAT.EXE-BE276382.pf
O45 - LFCP:[MD5.018561941BF38EEEC2A302EF4DCF915D] - 18/09/2013 - 11:29:10 ---A- - C:\Windows\Prefetch\WINWORD.EXE-778F7C2B.pf
O45 - LFCP:[MD5.5C19A60374E7B471345589903652FDAC] - 18/09/2013 - 11:31:03 ---A- - C:\Windows\Prefetch\OUTLOOK.EXE-C6B7F77A.pf
O45 - LFCP:[MD5.B5488BA4D1BEFC6D719229CB47CBADAD] - 18/09/2013 - 12:18:42 ---A- - C:\Windows\Prefetch\Layout.ini
O45 - LFCP:[MD5.3FBF6F6801DB0FF0EF60B84A568329BC] - 18/09/2013 - 12:32:13 ---A- - C:\Windows\Prefetch\AgGlUAD_P_S-1-5-21-2468559752-2934877657-3732706420-1000.db
O45 - LFCP:[MD5.E15F2EB6C04114B6BF0D2248EEAFA656] - 18/09/2013 - 12:32:13 ---A- - C:\Windows\Prefetch\AgGlUAD_S-1-5-21-2468559752-2934877657-3732706420-1000.db
O45 - LFCP:[MD5.5AB3F932052F38133A57F0C1D77FB4BA] - 18/09/2013 - 13:47:17 ---A- - C:\Windows\Prefetch\MMC.EXE-F39CDED6.pf
O45 - LFCP:[MD5.6570D4434F27F0BB3ACDF7C64D5CDC8B] - 18/09/2013 - 13:49:39 ---A- - C:\Windows\Prefetch\DLLHOST.EXE-6A473D35.pf
O45 - LFCP:[MD5.383D43231585269A076F647C86846614] - 18/09/2013 - 13:51:20 ---A- - C:\Windows\Prefetch\MSDT.EXE-C20E6F0C.pf
O45 - LFCP:[MD5.FAEC46341AD655D467A23331AC821508] - 18/09/2013 - 13:51:39 ---A- - C:\Windows\Prefetch\SC.EXE-1CF1DE92.pf
O45 - LFCP:[MD5.96508C626FBD3F95F2D2E44ABE563EAB] - 18/09/2013 - 13:51:44 ---A- - C:\Windows\Prefetch\REGSVR32.EXE-D5170E12.pf
O45 - LFCP:[MD5.82385C8BFC9FEACD356D04F8BE0FD827] - 18/09/2013 - 13:51:51 ---A- - C:\Windows\Prefetch\SFC.EXE-E2935AC8.pf
O45 - LFCP:[MD5.9008DD3A35A07DD190CFD604CFAB5118] - 18/09/2013 - 13:51:56 ---A- - C:\Windows\Prefetch\CSC.EXE-A3B8D95D.pf
O45 - LFCP:[MD5.6E0CA7AA18E0D7357C096FFC83BA1E34] - 18/09/2013 - 13:51:56 ---A- - C:\Windows\Prefetch\CVTRES.EXE-069169FB.pf
O45 - LFCP:[MD5.C5D05D5B2B5F232B65232CF3F352A51B] - 18/09/2013 - 13:52:02 ---A- - C:\Windows\Prefetch\NETSH.EXE-CD959116.pf
O45 - LFCP:[MD5.5DC60EC2F7FA48044FDC3F958FECD47D] - 18/09/2013 - 13:52:07 ---A- - C:\Windows\Prefetch\MAKECAB.EXE-4CDBAF68.pf
O45 - LFCP:[MD5.457E57C2E79DAF1CA67BDB4113F123C8] - 18/09/2013 - 13:52:10 ---A- - C:\Windows\Prefetch\BITSADMIN.EXE-0A2CB6DB.pf
O45 - LFCP:[MD5.07232E6D354F321789545F95E977DC22] - 18/09/2013 - 13:52:11 ---A- - C:\Windows\Prefetch\NET.EXE-40D48057.pf
O45 - LFCP:[MD5.EACCE369DE56B1A5894B7076E60E4D0F] - 18/09/2013 - 13:52:11 ---A- - C:\Windows\Prefetch\NET1.EXE-3D280034.pf
O45 - LFCP:[MD5.BAC594ACA1C2990A2F8B27681032877B] - 18/09/2013 - 13:52:18 ---A- - C:\Windows\Prefetch\SDIAGNHOST.EXE-99BBAB60.pf
O45 - LFCP:[MD5.C32A8E0617E39DB50FC55E74A3098D18] - 18/09/2013 - 13:55:09 ---A- - C:\Windows\Prefetch\LOGONUI.EXE-09140401.pf
O45 - LFCP:[MD5.C5CAA201034BBCAB6F37E64ADF03FD86] - 18/09/2013 - 13:55:09 ---A- - C:\Windows\Prefetch\PfSvPerfStats.bin
O45 - LFCP:[MD5.069C35B1BA566C7FF8A46E29D1052436] - 18/09/2013 - 13:59:10 ---A- - C:\Windows\Prefetch\WMIPRVSE.EXE-1628051C.pf
O45 - LFCP:[MD5.8E93B9E3FD8713AAE119166637865F6A] - 18/09/2013 - 14:12:00 ---A- - C:\Windows\Prefetch\EXPLORER.EXE-A80E4F97.pf
O45 - LFCP:[MD5.CF07E8E8D3A4ADED8085AAF2451D7480] - 18/09/2013 - 14:57:53 ---A- - C:\Windows\Prefetch\SNDVOL.EXE-5D4CC7D6.pf
O45 - LFCP:[MD5.B44996666749DB6E8D991884F8D5772D] - 18/09/2013 - 15:51:51 ---A- - C:\Windows\Prefetch\AgGlFaultHistory.db
O45 - LFCP:[MD5.12EC5492F30090116C048B8FF7793A5D] - 18/09/2013 - 15:51:51 ---A- - C:\Windows\Prefetch\AgGlFgAppHistory.db
O45 - LFCP:[MD5.620681324B44BC6906D3D4D48ACBACE5] - 18/09/2013 - 15:51:51 ---A- - C:\Windows\Prefetch\AgGlGlobalHistory.db
O45 - LFCP:[MD5.F88F533C1C54131EBBF8EFA8FDE85D2C] - 18/09/2013 - 15:51:51 ---A- - C:\Windows\Prefetch\AgRobust.db
O45 - LFCP:[MD5.25603B4420A65E6E58C622A840280FE0] - 18/09/2013 - 15:58:14 ---A- - C:\Windows\Prefetch\FLASHPLAYERPLUGIN_11_5_502_14-30A8047D.pf
O45 - LFCP:[MD5.0A63771CADE51D319717E141D1EEC290] - 18/09/2013 - 15:58:14 ---A- - C:\Windows\Prefetch\PLUGIN-CONTAINER.EXE-F1B02F03.pf
O45 - LFCP:[MD5.48811F75D565FC932B0414BAE66860B5] - 18/09/2013 - 16:06:25 ---A- - C:\Windows\Prefetch\AVASTEMUPDATE.EXE-6EF4B603.pf
O45 - LFCP:[MD5.90188C96674A45BBEC6A8164AEBE067B] - 18/09/2013 - 16:06:28 ---A- - C:\Windows\Prefetch\SWGVC.EXE-7074D7F8.pf
O45 - LFCP:[MD5.3F46E552C3745D89E15AE19E17F81DCE] - 18/09/2013 - 16:06:35 ---A- - C:\Windows\Prefetch\AVAST.SETUP-B1D66586.pf
O45 - LFCP:[MD5.D4D0E2643471DA713317F1E55E992EB1] - 18/09/2013 - 16:06:39 ---A- - C:\Windows\Prefetch\JUSCHED.EXE-60F1FB86.pf
O45 - LFCP:[MD5.66B37BBC7ABE1B7F576AB515F1DE2198] - 18/09/2013 - 16:06:39 ---A- - C:\Windows\Prefetch\NEGUI.EXE-C688FB22.pf
O45 - LFCP:[MD5.A0BBD3BA8E27932B02EFC34605A5E0E3] - 18/09/2013 - 16:07:03 ---A- - C:\Windows\Prefetch\FNPLICENSINGSERVICE.EXE-72A4F77B.pf
O45 - LFCP:[MD5.47F2009B6381EFAF34359708A46F19C6] - 18/09/2013 - 16:07:08 ---A- - C:\Windows\Prefetch\ACRODIST.EXE-61F4FE9B.pf
O45 - LFCP:[MD5.F8B3DBEAB86EB90B1BE0B31596972C71] - 18/09/2013 - 16:07:11 ---A- - C:\Windows\Prefetch\MSTSC.EXE-76A46E8A.pf
O45 - LFCP:[MD5.A7095F7AED8C3120C06C3484F275B3D9] - 18/09/2013 - 16:07:33 ---A- - C:\Windows\Prefetch\MSCORSVW.EXE-57D17DAF.pf
O45 - LFCP:[MD5.5614DB49A93DBAC412161C6430841302] - 18/09/2013 - 16:07:33 ---A- - C:\Windows\Prefetch\MSCORSVW.EXE-C3C515BD.pf
O45 - LFCP:[MD5.651F705DCAF77328AFDBDC523BF1ACEB] - 18/09/2013 - 16:07:40 ---A- - C:\Windows\Prefetch\AVBUGREPORT.EXE-3B5B9E84.pf
O45 - LFCP:[MD5.9EEBA57F6AB7BF917E314A10069673B8] - 18/09/2013 - 16:07:45 ---A- - C:\Windows\Prefetch\SPPSVC.EXE-B0F8131B.pf
O45 - LFCP:[MD5.B4E4DBB5D66AB6EA4673B66E8B61E6FD] - 18/09/2013 - 16:07:46 ---A- - C:\Windows\Prefetch\SVCHOST.EXE-05F624AB.pf
O45 - LFCP:[MD5.F87474C8ED9D3F58E8C33F2DC8204813] - 18/09/2013 - 16:07:49 ---A- - C:\Windows\Prefetch\WMPNETWK.EXE-D9F2A96F.pf
O45 - LFCP:[MD5.EA672C8EAE830B5FF5C75022E5FA1A9E] - 18/09/2013 - 16:08:06 ---A- - C:\Windows\Prefetch\FIREFOX.EXE-18ACFCFF.pf
O45 - LFCP:[MD5.8B49359A416A9CE716E1A3D6B4E13CF8] - 18/09/2013 - 16:08:34 ---A- - C:\Windows\Prefetch\TASKHOST.EXE-7238F31D.pf
O45 - LFCP:[MD5.166DD5EDB63717DA7C4E9AD927B23742] - 18/09/2013 - 16:09:22 ---A- - C:\Windows\Prefetch\CRASHREPORTER.EXE-E090245C.pf
O45 - LFCP:[MD5.715BC8EFD5159FE447B05B424263F8C5] - 18/09/2013 - 16:09:29 ---A- - C:\Windows\Prefetch\WMIADAP.EXE-F8DFDFA2.pf
O45 - LFCP:[MD5.477D1A4F1BE3B65EE98B23D9C41F144D] - 18/09/2013 - 16:18:56 ---A- - C:\Windows\Prefetch\RUNDLL32.EXE-A3E35360.pf
O45 - LFCP:[MD5.DDF1E85678DF807737B94809EA2CDC65] - 18/09/2013 - 16:21:37 ---A- - C:\Windows\Prefetch\CMD.EXE-4A81B364.pf
O45 - LFCP:[MD5.6D4D0387B1BD688ED1A8C74F156FD7E4] - 18/09/2013 - 16:23:00 ---A- - C:\Windows\Prefetch\GOOGLEUPDATE.EXE-B95715F5.pf
O45 - LFCP:[MD5.F9A58E6BC6A414D471032A6A59983EC3] - 18/09/2013 - 16:23:10 ---A- - C:\Windows\Prefetch\TRUSTEDINSTALLER.EXE-3CC531E5.pf
O45 - LFCP:[MD5.FA03210CCABD03E19CE7E91B25B72E86] - 18/09/2013 - 16:26:35 ---A- - C:\Windows\Prefetch\DLLHOST.EXE-ECB71776.pf
O45 - LFCP:[MD5.400B4E3078253BFE9923EE8197C6BAE8] - 18/09/2013 - 16:34:33 ---A- - C:\Windows\Prefetch\SEARCHFILTERHOST.EXE-77482212.pf
O45 - LFCP:[MD5.739297063806EB8B83564C729659E7DE] - 18/09/2013 - 16:34:33 ---A- - C:\Windows\Prefetch\SEARCHPROTOCOLHOST.EXE-0CB8CADE.pf
O45 - LFCP:[MD5.0B4B0C97EFF4DA84D725619B22339D44] - 18/09/2013 - 16:35:03 ---A- - C:\Windows\Prefetch\DLLHOST.EXE-5E46FA0D.pf
O45 - LFCP:[MD5.C1ECE2C59D07C32350282CDF69B90C62] - 18/09/2013 - 16:35:05 ---A- - C:\Windows\Prefetch\FACEBOOKUPDATE.EXE-37B357E1.pf
O45 - LFCP:[MD5.4B20BB060E873C34E07A9F4FB3DB567F] - 18/09/2013 - 16:35:10 ---A- - C:\Windows\Prefetch\TASKENG.EXE-48D4E289.pf
O45 - LFCP:[MD5.EA1115EA624AA15DC315DBD8BE75FBD1] - 18/09/2013 - 16:35:25 ---A- - C:\Windows\Prefetch\CONSENT.EXE-531BD9EA.pf
O45 - LFCP:[MD5.021061CD00445BF09BA2EFF3DD346203] - 18/09/2013 - 16:35:30 ---A- - C:\Windows\Prefetch\DLLHOST.EXE-766398D2.pf
O45 - LFCP:[MD5.2167DB3A7AD485510FB6D0C4BAB59074] - 18/09/2013 - 16:35:34 ---A- - C:\Windows\Prefetch\AUDIODG.EXE-BDFD3029.pf
O45 - LFCP:[MD5.4E34702971AC5AB3EF797E4D45A2AC58] - 18/09/2013 - 16:37:16 ---A- - C:\Windows\Prefetch\CONHOST.EXE-1F3E9D7E.pf
O45 - LFCP:[MD5.9242387DD40BA1CB187C5918CF70BA09] - 18/09/2013 - 16:37:16 ---A- - C:\Windows\Prefetch\WERMGR.EXE-0F2AC88C.pf
O45 - LFCP:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 25/10/2158 - 05:59:09  - C:\Windows\Prefetch\ReadyBoot
~ Prefetcher: 142 Scanned in 00mn 02s



---\\ Opérations et fonctions au démarrage de Windows Explorer (O46)
O46 - SEH:ShellExecuteHooks - Groove GFS Stub Execution Hook [64Bits] - {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL
~ ShellExecuteHooks:  Scanned in 00mn 00s



---\\ Déni du service (Local Security Authority) (O48)
O48 - LSA:Local Security Authority Authentication Packages . (.Microsoft Corporation - Microsoft Authentication Package v1.0.) -- C:\Windows\System32\msv1_0.dll
O48 - LSA:Local Security Authority Notification Packages . (.Microsoft Corporation - Moteur du client de l’Éditeur de configuration de sécurité Windows.) -- C:\Windows\System32\scecli.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Package de sécurité Kerberos.) -- C:\Windows\System32\kerberos.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Microsoft Authentication Package v1.0.) -- C:\Windows\System32\msv1_0.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - TLS / SSL Security Provider.) -- C:\Windows\System32\schannel.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Microsoft Digest Access.) -- C:\Windows\System32\wdigest.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Web Service Security Package.) -- C:\Windows\System32\tspkg.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Pku2u Security Package.) -- C:\Windows\System32\pku2u.dll
~ LSA: 8 Scanned in 00mn 00s



---\\ Contrôle du Safe Boot (CSB) (O49)
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\sermouse.sys . (.Microsoft Corporation - Pilote de filtre souris série.) -- C:\Windows\System32\Drivers\sermouse.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\vga.sys . (.Microsoft Corporation - VGA/Super VGA Video Driver.) -- C:\Windows\System32\Drivers\vga.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\vgasave.sys . (...) -- C:\Windows\System32\Drivers\vgasave.sys (.not file.)
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\volmgr.sys . (.Microsoft Corporation - Volume Manager Driver.) -- C:\Windows\System32\Drivers\volmgr.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\volmgrx.sys . (.Microsoft Corporation - Pilote d’extension du gestionnaire de volumes.) -- C:\Windows\System32\Drivers\volmgrx.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\ipnat.sys . (.Microsoft Corporation - IP Network Address Translator.) -- C:\Windows\System32\Drivers\ipnat.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\nsiproxy.sys . (.Microsoft Corporation - NSI Proxy.) -- C:\Windows\System32\Drivers\nsiproxy.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\rdpencdd.sys . (.Microsoft Corporation - RDP Encoder Miniport.) -- C:\Windows\System32\Drivers\rdpencdd.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\sermouse.sys . (.Microsoft Corporation - Pilote de filtre souris série.) -- C:\Windows\System32\Drivers\sermouse.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\vga.sys . (.Microsoft Corporation - VGA/Super VGA Video Driver.) -- C:\Windows\System32\Drivers\vga.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\vgasave.sys . (...) -- C:\Windows\System32\Drivers\vgasave.sys (.not file.)
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\volmgr.sys . (.Microsoft Corporation - Volume Manager Driver.) -- C:\Windows\System32\Drivers\volmgr.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\volmgrx.sys . (.Microsoft Corporation - Pilote d’extension du gestionnaire de volumes.) -- C:\Windows\System32\Drivers\volmgrx.sys
~ CSB: 13 Scanned in 00mn 00s



---\\ Clé de registre Shell MountPoints2 (MPKS) (O51)
O51 - MPSK:{9435c7d1-de4b-11e2-ad85-00214ffbbca6}\AutoRun\command. (...) -- I:\SETUP.exe (.not file.)
O51 - MPSK:{c2fa19c0-7c4e-11e2-a65c-806e6f6e6963}\AutoRun\command. (.Microsoft Corporation - Microsoft Setup Bootstrapper.) -- G:\SETUP.exe
~ Keys:  Scanned in 00mn 00s



---\\ Recherche d'infection sur les pilotes (HKLM)(TDSD) (O52)
O52 - TDSD: \Drivers32\"msacm.l3acm"="C:\Windows\System32\l3codeca.acm" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\Windows\System32\l3codeca.acm
O52 - TDSD: \drivers.desc\"C:\Windows\System32\l3codeca.acm"="Fraunhofer IIS MPEG Layer-3 Codec" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\Windows\System32\l3codeca.acm
~ TDSD: 2 Scanned in 00mn 00s



---\\ Enumération des clés de registre StartupReg (SMSR) (O53)
O53 - SMSR:HKLM\...\startupreg\ISBMgr.exe  [Key] . (.Sony Corporation - Pas de description.) -- C:\Program Files (x86)\Sony\ISB Utility\ISBMgr.exe
~ SMSR Keys: 1 Scanned in 00mn 00s



---\\ Enumération des clés de registre SecurityProviders (MCSP) (O54)
O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Microsoft Corporation - Credential Delegation Security Package.) -- C:\Windows\System32\credssp.dll
O54 - MCSP:[HKLM\...\ControlSet001\Control] - (SecurityProviders) - (.Microsoft Corporation - Credential Delegation Security Package.) -- C:\Windows\System32\credssp.dll
~ MSCP: 2 Scanned in 00mn 00s



---\\ Enumération des clés de registre PoliciesSystem (MWPS) (O55)
O55 - MWPS:[HKLM\...\Policies\System] - "ConsentPromptBehaviorAdmin"=5
O55 - MWPS:[HKLM\...\Policies\System] - "ConsentPromptBehaviorUser"=3
O55 - MWPS:[HKLM\...\Policies\System] - "EnableInstallerDetection"=1
O55 - MWPS:[HKLM\...\Policies\System] - "EnableLUA"=1
O55 - MWPS:[HKLM\...\Policies\System] - "EnableSecureUIAPaths"=1
O55 - MWPS:[HKLM\...\Policies\System] - "EnableUIADesktopToggle"=0
O55 - MWPS:[HKLM\...\Policies\System] - "EnableVirtualization"=1
O55 - MWPS:[HKLM\...\Policies\System] - "PromptOnSecureDesktop"=0
O55 - MWPS:[HKLM\...\Policies\System] - "ValidateAdminCodeSignatures"=0
O55 - MWPS:[HKLM\...\Policies\System] - "dontdisplaylastusername"=0
O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticecaption"=0
O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticetext"=0
O55 - MWPS:[HKLM\...\Policies\System] - "scforceoption"=0
O55 - MWPS:[HKLM\...\Policies\System] - "shutdownwithoutlogon"=1
O55 - MWPS:[HKLM\...\Policies\System] - "undockwithoutlogon"=1
O55 - MWPS:[HKLM\...\Policies\System] - "FilterAdministratorToken"=0
~ MWPS: 16 Scanned in 00mn 00s



---\\ Enumération des clés de registre PoliciesExplorer (MWPE) (O56)
O56 - MWPE:[HKLM\...\policies\Explorer] - "NoActiveDesktop"=1
O56 - MWPE:[HKLM\...\policies\Explorer] - "NoActiveDesktopChanges"=1
O56 - MWPE:[HKLM\...\policies\Explorer] - "ForceActiveDesktopOn"=0
~ MWPE Keys: 3 Scanned in 00mn 00s



---\\ Liste des pilotes du système (SDL) (O58)
O58 - SDL:[MD5.2F6B34B83843F0C5118B63AC634F5BF4] - 14/07/2009 - 05:52:21 ---A- . (.Adaptec, Inc. - Adaptec Windows SAS/SATA Storport Driver.) -- C:\Windows\System32\Drivers\adp94xx.sys   [491088]
~ Drivers: 16 Scanned in 00mn 00s



---\\ Derniers fichiers modifiés ou crées (Utilisateur) (O61)
O61 - LFC: 16/09/2013 - 11:01:31 ---A- . (.TeamViewer GmbH.) -- C:\Users\Natacha\Downloads\TeamViewer_Setup.exe   [4959400]
O61 - LFC: 16/09/2013 - 11:57:15 ---A- . (...) -- C:\Users\Natacha\AppData\Roaming\TeamViewer\MRU\RemoteSupport\569976411.tvc   [70]
O61 - LFC: 16/09/2013 - 11:57:40 ---A- . (...) -- C:\Users\Natacha\AppData\Roaming\TeamViewer\MRU\RemoteSupport\535950489.tvc   [70]
O61 - LFC: 16/09/2013 - 12:17:51 ---A- . (...) -- C:\Users\Natacha\AppData\Roaming\TeamViewer\Connections.txt   [400]
O61 - LFC: 16/09/2013 - 12:29:22 ---A- . (...) -- C:\Users\Natacha\AppData\Roaming\Skype\ktychou13\chatsync\75\759507a0b70782eb.dat   [15916]
O61 - LFC: 16/09/2013 - 18:18:31 ---A- . (...) -- C:\Users\Natacha\AppData\Roaming\Adobe\Acrobat\8.0\JavaScripts\glob.js   [0]
O61 - LFC: 16/09/2013 - 18:18:31 ---A- . (...) -- C:\Users\Natacha\AppData\Roaming\Adobe\Acrobat\8.0\JavaScripts\glob.settings.js   [10]
O61 - LFC: 16/09/2013 - 18:32:09 --HA- . (...) -- C:\Users\Natacha\Documents\Default.rdp   [2002]
O61 - LFC: 16/09/2013 - 18:57:03 ---A- . (...) -- C:\Users\Natacha\AppData\Roaming\Skype\shared_httpfe\queue.db   [155648]
O61 - LFC: 17/09/2013 - 08:12:17 ---A- . (...) -- C:\Users\Natacha\AppData\Roaming\Microsoft\Outlook\PB4S-Configuration-c.versini@caspeo.fr.xml   [918]
O61 - LFC: 17/09/2013 - 08:34:53 ---A- . (...) -- C:\Users\Natacha\AppData\Roaming\Microsoft\Outlook\OUTLOOK_KTY.srs   [4096]
O61 - LFC: 17/09/2013 - 08:38:33 ---A- . (.Microsoft Corporation ?.) -- C:\Users\Natacha\Downloads\MicrosoftFixit50670.msi   [1052672]
O61 - LFC: 17/09/2013 - 08:47:33 ---A- . (.Microsoft Corporation.) -- C:\Users\Natacha\Downloads\officesuite2010sp1-kb2460049-x64-fullfile-en-us.exe   [461215096]
O61 - LFC: 17/09/2013 - 08:49:35 ---A- . (...) -- C:\Users\Natacha\AppData\Roaming\Microsoft\Outlook\OUTLOOK_KTY.xml   [2735]
O61 - LFC: 17/09/2013 - 08:54:49 ---A- . (...) -- C:\Users\Natacha\AppData\Local\ElevatedDiagnostics\2560293460\2013091704.000\DataStoreAndWULogFiles.zip   [162861]
O61 - LFC: 17/09/2013 - 08:59:15 ---A- . (...) -- C:\Users\Natacha\AppData\Local\ElevatedDiagnostics\2560293460\2013091704.000\WindowsUpdateDiagnostic.0.debugreport.xml   [12987]
O61 - LFC: 17/09/2013 - 08:59:16 ---A- . (...) -- C:\Users\Natacha\AppData\Local\ElevatedDiagnostics\2560293460\2013091704.000\BITSDiagnostic.0.debugreport.xml   [10216]
O61 - LFC: 17/09/2013 - 09:02:06 ---A- . (...) -- C:\Users\Natacha\AppData\Local\ElevatedDiagnostics\2560293460\2013091704.000\WindowsUpdateDiagnostic.1.debugreport.xml   [8449]
O61 - LFC: 17/09/2013 - 09:02:07 ---A- . (...) -- C:\Users\Natacha\AppData\Local\ElevatedDiagnostics\2560293460\2013091704.000\BITSDiagnostic.1.debugreport.xml   [4895]
O61 - LFC: 17/09/2013 - 09:02:07 ---A- . (...) -- C:\Users\Natacha\AppData\Local\ElevatedDiagnostics\2560293460\2013091704.000\results.xsl   [49097]
O61 - LFC: 17/09/2013 - 09:02:13 ---A- . (...) -- C:\Users\Natacha\AppData\Local\ElevatedDiagnostics\2560293460\2013091704.000\CheckSURLog.cab   [6614]
O61 - LFC: 17/09/2013 - 09:02:55 ---A- . (...) -- C:\Users\Natacha\AppData\Local\ElevatedDiagnostics\2560293460\2013091704.000\WindowsUpdateDiagnostic.2.debugreport.xml   [6936]
O61 - LFC: 17/09/2013 - 09:02:56 ---A- . (...) -- C:\Users\Natacha\AppData\Local\ElevatedDiagnostics\2560293460\2013091704.000\BITSDiagnostic.2.debugreport.xml   [4559]
O61 - LFC: 17/09/2013 - 09:02:56 ---A- . (...) -- C:\Users\Natacha\AppData\Local\ElevatedDiagnostics\2560293460\2013091704.000\ResultReport.xml   [8025]
O61 - LFC: 17/09/2013 - 09:02:56 ---A- . (...) -- C:\Users\Natacha\AppData\Local\ElevatedDiagnostics\2560293460\2013091704.000\results.xml   [209]
O61 - LFC: 17/09/2013 - 09:12:46 ---A- . (.Piriform Ltd.) -- C:\Users\Natacha\Downloads\ccsetup405.exe   [4454952]
O61 - LFC: 17/09/2013 - 09:13:15 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Temp\nstEE26.tmp\System.dll   [11264]
O61 - LFC: 17/09/2013 - 09:24:57 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Diagnostics\2560293460\2013091705.000\results.xsl   [49097]
O61 - LFC: 17/09/2013 - 09:42:02 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Diagnostics\2560293460\2013091705.000\NetworkDiagnostics.0.debugreport.xml   [1334]
O61 - LFC: 17/09/2013 - 09:42:02 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Diagnostics\2560293460\2013091705.000\ResultReport.xml   [39124]
O61 - LFC: 17/09/2013 - 09:42:02 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Diagnostics\2560293460\2013091705.000\WindowsUpdateDiagnostic.0.debugreport.xml   [2561]
O61 - LFC: 17/09/2013 - 09:42:02 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Diagnostics\2560293460\2013091705.000\results.xml   [284]
O61 - LFC: 17/09/2013 - 09:42:02 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Diagnostics\2560293460\latest.cab   [12658]
O61 - LFC: 17/09/2013 - 10:37:12 ---A- . (.Microsoft Corporation.) -- C:\Users\Natacha\Downloads\Windows-KB890830-x64-V5.4(1).exe   [21743240]
O61 - LFC: 17/09/2013 - 10:39:41 ---A- . (...) -- C:\Users\Natacha\Downloads\Windows6.1-KB947821-v28-x64(2).msu   [423572207]
O61 - LFC: 17/09/2013 - 11:19:07 ---A- . (.TeamViewer GmbH.) -- C:\Users\Natacha\Downloads\TeamViewer_Setup(1).exe   [4959400]
O61 - LFC: 17/09/2013 - 11:49:33 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Temp\TeamViewer\Version7\7.hta   [1072]
O61 - LFC: 17/09/2013 - 12:21:20 ---A- . (...) -- C:\Users\Natacha\AppData\Roaming\Skype\ktychou13\chatsync\7c\7cf05804d98950df.dat   [8900]
O61 - LFC: 17/09/2013 - 15:43:37 ---A- . (...) -- C:\Users\Natacha\AppData\Roaming\Microsoft\Office\Recent\Echéances.xls.LNK   [1027]
O61 - LFC: 17/09/2013 - 15:43:46 ---A- . (...) -- C:\Users\Natacha\AppData\Roaming\Microsoft\Office\Recent\Copie de Relancer (2).xls.LNK   [1087]
O61 - LFC: 17/09/2013 - 15:50:15 ---A- . (...) -- C:\Users\Natacha\AppData\Roaming\Microsoft\Office\Recent\Bureau.LNK   [885]
O61 - LFC: 17/09/2013 - 15:50:16 ---A- . (...) -- C:\Users\Natacha\AppData\Roaming\Microsoft\Office\Recent\ecran bleu.docx.LNK   [1037]
O61 - LFC: 18/09/2013 - 08:13:33 ---A- . (...) -- C:\Users\Natacha\AppData\Roaming\Skype\ktychou13\chatsync\69\693f148e37e50591.dat   [15681]
O61 - LFC: 18/09/2013 - 08:13:33 ---A- . (...) -- C:\Users\Natacha\AppData\Roaming\Skype\ktychou13\chatsync\b8\b8b59d110ae92520.dat   [13744]
O61 - LFC: 18/09/2013 - 09:03:18 ---A- . (...) -- C:\Users\Natacha\Downloads\winupdatefix.exe   [548774]
O61 - LFC: 18/09/2013 - 09:30:18 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Temp\MSI5d6af.LOG   [84682]
O61 - LFC: 18/09/2013 - 09:30:51 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Temp\MATS-Temp\CABgcrdpqk4.mnp\SapInfo.xml   [245]
O61 - LFC: 18/09/2013 - 09:58:19 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Temp\MATS-Temp\Results\Windows Update_result.cab   [21023]
O61 - LFC: 18/09/2013 - 10:12:38 ---A- . (.Microsoft Corporation ©.) -- C:\Users\Natacha\Downloads\MicrosoftFixit50202.msi   [689664]
O61 - LFC: 18/09/2013 - 10:13:21 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Temp\wuredist.cab   [0]
O61 - LFC: 18/09/2013 - 10:14:12 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Temp\MSI1871a.LOG   [550062]
O61 - LFC: 18/09/2013 - 11:02:53 ---A- . (.Uniblue Systems Ltd.) -- C:\Users\Natacha\Downloads\speedupmypc.exe   [1331000]  =>Rogue.SpeedUpMyPC
O61 - LFC: 18/09/2013 - 11:04:20 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Temp\Setup Log 2013-09-18 #001.txt   [1351]
O61 - LFC: 18/09/2013 - 11:04:20 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Temp\Setup Log 2013-09-18 #002.txt   [24923]
O61 - LFC: 18/09/2013 - 11:04:23 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Temp\comtypes_cache\sump-27\Accessibility.py   [181]
O61 - LFC: 18/09/2013 - 11:04:23 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Temp\comtypes_cache\sump-27\Accessibility.pyo   [367]
O61 - LFC: 18/09/2013 - 11:04:23 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Temp\comtypes_cache\sump-27\_00020430_0000_0000_C000_000000000046_0_2_0.py   [14153]
O61 - LFC: 18/09/2013 - 11:04:23 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Temp\comtypes_cache\sump-27\_00020430_0000_0000_C000_000000000046_0_2_0.pyo   [8898]
O61 - LFC: 18/09/2013 - 11:04:23 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Temp\comtypes_cache\sump-27\_1EA4DBF0_3C3B_11CF_810C_00AA00389B71_0_1_1.py   [18791]
O61 - LFC: 18/09/2013 - 11:04:23 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Temp\comtypes_cache\sump-27\_1EA4DBF0_3C3B_11CF_810C_00AA00389B71_0_1_1.pyo   [9832]
O61 - LFC: 18/09/2013 - 11:04:23 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Temp\comtypes_cache\sump-27\stdole.py   [174]
O61 - LFC: 18/09/2013 - 11:04:23 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Temp\comtypes_cache\sump-27\stdole.pyo   [353]
O61 - LFC: 18/09/2013 - 11:14:04 ---A- . (...) -- C:\Users\Natacha\AppData\Roaming\Microsoft\Office\Recent\courrier client 0892.docx.LNK   [1087]
O61 - LFC: 18/09/2013 - 11:26:16 ---A- . (...) -- C:\Users\Natacha\AppData\Roaming\Microsoft\Office\Recent\Ardelis.xlsx.LNK   [1022]
O61 - LFC: 18/09/2013 - 11:28:21 ---A- . (...) -- C:\Users\Natacha\AppData\Roaming\Adobe\Acrobat\8.0\Natacha-VAIO.err   [148590]
O61 - LFC: 18/09/2013 - 11:28:21 ---A- . (...) -- C:\Users\Natacha\AppData\Roaming\Adobe\Acrobat\8.0\organizer70\files.MYD   [286236]
O61 - LFC: 18/09/2013 - 11:28:21 ---A- . (...) -- C:\Users\Natacha\AppData\Roaming\Adobe\Acrobat\8.0\organizer70\files.MYI   [2048]
O61 - LFC: 18/09/2013 - 11:29:00 ---A- . (...) -- C:\Users\Natacha\AppData\Roaming\Microsoft\Office\Recent\MAURI EXPERTA_130625 (2).docx.LNK   [1107]
O61 - LFC: 18/09/2013 - 11:29:00 --H-- . (...) -- C:\Users\Natacha\AppData\Roaming\Microsoft\Office\Recent\index.dat   [368]
O61 - LFC: 18/09/2013 - 11:29:04 ---A- . (...) -- C:\Users\Natacha\AppData\Roaming\Microsoft\Templates\LiveContent\Managed\Document Themes\1036\TC101955421[[fn=Emploi du temps]].dotx   [276683]
O61 - LFC: 18/09/2013 - 11:31:01 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Temp\CVRC66B.tmp.cvr   [0]
O61 - LFC: 18/09/2013 - 11:31:13 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Temp\ExchangePerflog_8484fa31fb8c3c550bb5cc1b.dat   [4572]
O61 - LFC: 18/09/2013 - 12:12:47 ---A- . (...) -- C:\Users\Natacha\AppData\Roaming\Skype\ktychou13\chatsync\2a\2aba3c952f975eb4.dat   [14999]
O61 - LFC: 18/09/2013 - 13:19:32 ---A- . (...) -- C:\Users\Natacha\AppData\Roaming\Skype\ktychou13\chatsync\ef\ef6f2d971e1c61be.dat   [14202]
O61 - LFC: 18/09/2013 - 13:51:54 ---A- . (...) -- C:\Users\Natacha\AppData\Local\ElevatedDiagnostics\2560293460\2013091809.000\BITSDiagnostic.0.debugreport.xml   [9355]
O61 - LFC: 18/09/2013 - 13:51:54 ---A- . (...) -- C:\Users\Natacha\AppData\Local\ElevatedDiagnostics\2560293460\2013091809.000\WindowsUpdateDiagnostic.0.debugreport.xml   [10060]
O61 - LFC: 18/09/2013 - 13:51:54 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Temp\WindowsUpdateTroubleShooterRC_Param.xml.txt   [6]
O61 - LFC: 18/09/2013 - 13:51:54 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Temp\WindowsUpdateTroubleShooterRC_VF.xml.txt   [68]
O61 - LFC: 18/09/2013 - 13:51:55 ---A- . (...) -- C:\Users\Natacha\AppData\Local\ElevatedDiagnostics\2560293460\2013091809.000\results.xsl   [49097]
O61 - LFC: 18/09/2013 - 13:51:56 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Temp\wuZipFilePaths   [242]
O61 - LFC: 18/09/2013 - 13:52:01 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Temp\WindowsUpdateTroubleShooter_resolverRan   [34]
O61 - LFC: 18/09/2013 - 13:52:07 ---A- . (...) -- C:\Users\Natacha\AppData\Local\ElevatedDiagnostics\2560293460\2013091809.000\CheckSURLog.cab   [12064]
O61 - LFC: 18/09/2013 - 13:52:07 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Temp\WUDiagTempFolder\CheckSURLog.cab   [12064]
O61 - LFC: 18/09/2013 - 13:52:07 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Temp\WUDiagTempFolder\output.txt   [922]
O61 - LFC: 18/09/2013 - 13:52:08 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Temp\wurunSeq.txt   [192]
O61 - LFC: 18/09/2013 - 13:54:54 ---A- . (...) -- C:\Users\Natacha\AppData\Local\ElevatedDiagnostics\2560293460\2013091809.000\BITSDiagnostic.1.debugreport.xml   [4575]
O61 - LFC: 18/09/2013 - 13:54:54 ---A- . (...) -- C:\Users\Natacha\AppData\Local\ElevatedDiagnostics\2560293460\2013091809.000\ResultReport.xml   [6679]
O61 - LFC: 18/09/2013 - 13:54:54 ---A- . (...) -- C:\Users\Natacha\AppData\Local\ElevatedDiagnostics\2560293460\2013091809.000\WindowsUpdateDiagnostic.1.debugreport.xml   [6904]
O61 - LFC: 18/09/2013 - 13:54:54 ---A- . (...) -- C:\Users\Natacha\AppData\Local\ElevatedDiagnostics\2560293460\2013091809.000\results.xml   [209]
O61 - LFC: 18/09/2013 - 13:54:54 ---A- . (...) -- C:\Users\Natacha\AppData\Local\ElevatedDiagnostics\2560293460\latest.cab   [24010]
O61 - LFC: 18/09/2013 - 13:54:59 --HA- . (...) -- C:\Users\Natacha\AppData\Local\IconCache.db   [8684021]
O61 - LFC: 18/09/2013 - 13:55:01 ---A- . (...) -- C:\Users\Natacha\AppData\Roaming\Skype\ktychou13\httpfe\cookies.dat   [2]
O61 - LFC: 18/09/2013 - 13:55:01 ---A- . (...) -- C:\Users\Natacha\AppData\Roaming\Skype\ktychou13\simcache\streamlist   [44]
O61 - LFC: 18/09/2013 - 13:56:45 ---A- . (...) -- C:\Users\Natacha\AppData\Roaming\Skype\ktychou13\mmanager\mediacache.ldb   [40]
O61 - LFC: 18/09/2013 - 13:56:45 ---A- . (...) -- C:\Users\Natacha\AppData\Roaming\Skype\ktychou13\thmanager\thumbcache.ldb   [40]
O61 - LFC: 18/09/2013 - 14:53:42 ---A- . (...) -- C:\Users\Natacha\AppData\Roaming\Skype\ktychou13\chatsync\5e\5e0b49b0088f3d3b.dat   [6895]
O61 - LFC: 18/09/2013 - 14:54:48 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Temp\wmplog00.sqm   [1556]
O61 - LFC: 18/09/2013 - 15:59:18 ---A- . (...) -- C:\Users\Natacha\AppData\Roaming\Skype\ktychou13\chatsync\53\538efd2c1dafa2a7.dat   [27739]
O61 - LFC: 18/09/2013 - 16:06:11 ---A- . (...) -- C:\Users\Natacha\AppData\Roaming\Adobe\Acrobat\8.0\Synchronizer\adobesynchronizersu80   [0]
O61 - LFC: 18/09/2013 - 16:06:16 ---A- . (...) -- C:\Users\Natacha\AppData\Roaming\Skype\shared_dynco\dc.db   [2224128]
O61 - LFC: 18/09/2013 - 16:06:16 ---A- . (...) -- C:\Users\Natacha\AppData\Roaming\Skype\shared_dynco\dc.db-journal   [8720]
O61 - LFC: 18/09/2013 - 16:06:36 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Temp\Skype\DbTemp\temp-Ks2Orjv4laZd2eJB8H3fLfIF   [0]
O61 - LFC: 18/09/2013 - 16:06:40 ---A- . (...) -- C:\Users\Natacha\AppData\Roaming\Skype\ktychou13\eas.db   [53248]
O61 - LFC: 18/09/2013 - 16:06:45 ---A- . (...) -- C:\Users\Natacha\AppData\Roaming\Skype\ktychou13\qikdb\qik_main.db   [28672]
O61 - LFC: 18/09/2013 - 16:06:48 ---A- . (...) -- C:\Users\Natacha\AppData\Roaming\Skype\ktychou13\msn.db   [49152]
O61 - LFC: 18/09/2013 - 16:06:48 ---A- . (...) -- C:\Users\Natacha\AppData\Roaming\Skype\ktychou13\msn.db-journal   [37448]
O61 - LFC: 18/09/2013 - 16:07:07 ---A- . (...) -- C:\Users\Natacha\AppData\Roaming\Adobe\Acrobat\Distiller 8\Cache\PSHFList1   [88740]
O61 - LFC: 18/09/2013 - 16:07:24 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Temp\Skype\DbTemp\temp-9bHFSMy2eN7LrBw2OrpoPPR4   [0]
O61 - LFC: 18/09/2013 - 16:09:37 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extension Rules\CURRENT   [16]
O61 - LFC: 18/09/2013 - 16:09:37 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extension Rules\MANIFEST-000002   [50]
O61 - LFC: 18/09/2013 - 16:09:37 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\First Run   [0]
O61 - LFC: 18/09/2013 - 16:09:39 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\User StyleSheets\Custom.css   [0]
O61 - LFC: 18/09/2013 - 16:09:40 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Archived History   [57344]
O61 - LFC: 18/09/2013 - 16:09:40 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Archived History-journal   [512]
O61 - LFC: 18/09/2013 - 16:09:41 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\8.0.1483_0\popup.html   [5820]
O61 - LFC: 18/09/2013 - 16:09:42 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\8.0.1483_0\_locales\be\messages.json   [5431]
O61 - LFC: 18/09/2013 - 16:09:42 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\8.0.1483_0\_locales\ur\messages.json   [5085]
O61 - LFC: 18/09/2013 - 16:09:42 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\8.0.1483_0\skin\images\avast_logo.png   [1796]
O61 - LFC: 18/09/2013 - 16:09:42 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\8.0.1483_0\skin\images\background-sitecorrect.png   [54751]
O61 - LFC: 18/09/2013 - 16:09:42 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\8.0.1483_0\skin\images\close.png   [1156]
O61 - LFC: 18/09/2013 - 16:09:42 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\8.0.1483_0\skin\images\disabled.png   [626]
O61 - LFC: 18/09/2013 - 16:09:42 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\8.0.1483_0\skin\images\grey.png   [1763]
O61 - LFC: 18/09/2013 - 16:09:42 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\8.0.1483_0\skin\images\icon_incorrect.png   [4733]
O61 - LFC: 18/09/2013 - 16:09:42 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\8.0.1483_0\skin\images\icons\corporate-small-disable.png   [2087]
O61 - LFC: 18/09/2013 - 16:09:42 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\8.0.1483_0\skin\images\icons\corporate-small-selected.png   [1939]
O61 - LFC: 18/09/2013 - 16:09:42 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\8.0.1483_0\skin\images\icons\corporate.png   [3215]
O61 - LFC: 18/09/2013 - 16:09:42 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\8.0.1483_0\skin\images\icons\drugs-small-disable.png   [2265]
O61 - LFC: 18/09/2013 - 16:09:42 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\8.0.1483_0\skin\images\icons\drugs-small-selected.png   [2263]
O61 - LFC: 18/09/2013 - 16:09:42 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\8.0.1483_0\skin\images\icons\drugs.png   [5828]
O61 - LFC: 18/09/2013 - 16:09:42 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\8.0.1483_0\skin\images\icons\gambling-small-disable.png   [2303]
O61 - LFC: 18/09/2013 - 16:09:42 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\8.0.1483_0\skin\images\icons\gambling-small-selected.png   [2155]
O61 - LFC: 18/09/2013 - 16:09:42 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\8.0.1483_0\skin\images\icons\gambling.png   [4773]
O61 - LFC: 18/09/2013 - 16:09:42 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\8.0.1483_0\skin\images\icons\green-1.png   [3829]
O61 - LFC: 18/09/2013 - 16:09:42 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\8.0.1483_0\skin\images\icons\green-2.png   [3549]
O61 - LFC: 18/09/2013 - 16:09:42 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\8.0.1483_0\skin\images\icons\green-3.png   [3075]
O61 - LFC: 18/09/2013 - 16:09:42 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\8.0.1483_0\skin\images\icons\green-hover.png   [1593]
O61 - LFC: 18/09/2013 - 16:09:42 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\8.0.1483_0\skin\images\icons\green-selected.png   [2977]
O61 - LFC: 18/09/2013 - 16:09:42 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\8.0.1483_0\skin\images\icons\green.png   [1590]
O61 - LFC: 18/09/2013 - 16:09:42 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\8.0.1483_0\skin\images\icons\green1-16.png   [1416]
O61 - LFC: 18/09/2013 - 16:09:42 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\8.0.1483_0\skin\images\icons\green1-small.png   [1408]
O61 - LFC: 18/09/2013 - 16:09:42 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\8.0.1483_0\skin\images\icons\green2-16.png   [1430]
O61 - LFC: 18/09/2013 - 16:09:42 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\8.0.1483_0\skin\images\icons\green2-small.png   [1426]
O61 - LFC: 18/09/2013 - 16:09:42 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\8.0.1483_0\skin\images\icons\green3-16.png   [1406]
O61 - LFC: 18/09/2013 - 16:09:42 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\8.0.1483_0\skin\images\icons\green3-small.png   [1396]
O61 - LFC: 18/09/2013 - 16:09:42 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\8.0.1483_0\skin\images\icons\grey-0.png   [3955]
O61 - LFC: 18/09/2013 - 16:09:42 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\8.0.1483_0\skin\images\icons\grey-3.png   [3110]
O61 - LFC: 18/09/2013 - 16:09:42 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\8.0.1483_0\skin\images\icons\grey-small.png   [1433]
O61 - LFC: 18/09/2013 - 16:09:42 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\8.0.1483_0\skin\images\icons\grey3-16.png   [1451]
O61 - LFC: 18/09/2013 - 16:09:42 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\8.0.1483_0\skin\images\icons\illegal-small-disable.png   [2318]
O61 - LFC: 18/09/2013 - 16:09:42 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\8.0.1483_0\skin\images\icons\illegal-small-selected.png   [2320]
O61 - LFC: 18/09/2013 - 16:09:42 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\8.0.1483_0\skin\images\icons\illegal.png   [6501]
O61 - LFC: 18/09/2013 - 16:09:42 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\8.0.1483_0\skin\images\icons\it-small-disable.png   [2139]
O61 - LFC: 18/09/2013 - 16:09:43 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\8.0.1483_0\skin\css\anchor.css   [139]
O61 - LFC: 18/09/2013 - 16:09:43 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\8.0.1483_0\skin\css\popup.css   [10292]
O61 - LFC: 18/09/2013 - 16:09:43 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\8.0.1483_0\skin\images\icons\it-small-selected.png   [1957]
O61 - LFC: 18/09/2013 - 16:09:43 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\8.0.1483_0\skin\images\icons\it.png   [3884]
O61 - LFC: 18/09/2013 - 16:09:43 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\8.0.1483_0\skin\images\icons\limet-hover.png   [1300]
O61 - LFC: 18/09/2013 - 16:09:43 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\8.0.1483_0\skin\images\icons\limet-selected.png   [2791]
O61 - LFC: 18/09/2013 - 16:09:43 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\8.0.1483_0\skin\images\icons\limet.png   [1298]
O61 - LFC: 18/09/2013 - 16:09:43 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\8.0.1483_0\skin\images\icons\line-dark-horizontal.png   [1810]
O61 - LFC: 18/09/2013 - 16:09:43 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\8.0.1483_0\skin\images\icons\line-light-horizontal.png   [1787]
O61 - LFC: 18/09/2013 - 16:09:43 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\8.0.1483_0\skin\images\icons\news-small-disable.png   [2057]
O61 - LFC: 18/09/2013 - 16:09:43 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\8.0.1483_0\skin\images\icons\news-small-selected.png   [1961]
O61 - LFC: 18/09/2013 - 16:09:43 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\8.0.1483_0\skin\images\icons\news.png   [3762]
O61 - LFC: 18/09/2013 - 16:09:43 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\8.0.1483_0\skin\images\icons\orange-hover.png   [1303]
O61 - LFC: 18/09/2013 - 16:09:43 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\8.0.1483_0\skin\images\icons\orange-selected.png   [2788]
O61 - LFC: 18/09/2013 - 16:09:43 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\8.0.1483_0\skin\images\icons\orange.png   [1304]
O61 - LFC: 18/09/2013 - 16:09:43 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\8.0.1483_0\skin\images\icons\orange1-16.png   [1389]
O61 - LFC: 18/09/2013 - 16:09:43 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\8.0.1483_0\skin\images\icons\orange2-16.png   [1406]
O61 - LFC: 18/09/2013 - 16:09:43 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\8.0.1483_0\skin\images\icons\orange3-16.png   [1363]
O61 - LFC: 18/09/2013 - 16:09:43 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\8.0.1483_0\skin\images\icons\pornography-small-disable.png   [2124]
O61 - LFC: 18/09/2013 - 16:09:43 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\8.0.1483_0\skin\images\icons\pornography-small-selected.png   [1984]
O61 - LFC: 18/09/2013 - 16:09:43 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\8.0.1483_0\skin\images\icons\pornography.png   [4104]
O61 - LFC: 18/09/2013 - 16:09:43 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\8.0.1483_0\skin\images\icons\red-1.png   [3741]
O61 - LFC: 18/09/2013 - 16:09:43 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\8.0.1483_0\skin\images\icons\red-2.png   [3479]
O61 - LFC: 18/09/2013 - 16:09:43 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\8.0.1483_0\skin\images\icons\red-3.png   [2716]
O61 - LFC: 18/09/2013 - 16:09:43 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\8.0.1483_0\skin\images\icons\red-hover.png   [1549]
O61 - LFC: 18/09/2013 - 16:09:43 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\8.0.1483_0\skin\images\icons\red-selected.png   [2939]
O61 - LFC: 18/09/2013 - 16:09:43 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\8.0.1483_0\skin\images\icons\red.png   [1552]
O61 - LFC: 18/09/2013 - 16:09:43 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\8.0.1483_0\skin\images\icons\red1-16.png   [1376]
O61 - LFC: 18/09/2013 - 16:09:43 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\8.0.1483_0\skin\images\icons\red1-small.png   [1367]
O61 - LFC: 18/09/2013 - 16:09:43 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\8.0.1483_0\skin\images\icons\red2-16.png   [1386]
O61 - LFC: 18/09/2013 - 16:09:43 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\8.0.1483_0\skin\images\icons\red2-small.png   [1377]
O61 - LFC: 18/09/2013 - 16:09:43 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\8.0.1483_0\skin\images\icons\red3-16.png   [1361]
O61 - LFC: 18/09/2013 - 16:09:43 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\8.0.1483_0\skin\images\icons\red3-small.png   [1352]
O61 - LFC: 18/09/2013 - 16:09:43 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\8.0.1483_0\skin\images\icons\shopping-small-disable.png   [2122]
O61 - LFC: 18/09/2013 - 16:09:43 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\8.0.1483_0\skin\images\icons\shopping-small-selected.png   [2075]
O61 - LFC: 18/09/2013 - 16:09:43 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\8.0.1483_0\skin\images\icons\shopping.png   [5208]
O61 - LFC: 18/09/2013 - 16:09:43 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\8.0.1483_0\skin\images\icons\social-small-disable.png   [2235]
O61 - LFC: 18/09/2013 - 16:09:43 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\8.0.1483_0\skin\images\icons\social-small-selected.png   [2147]
O61 - LFC: 18/09/2013 - 16:09:43 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\8.0.1483_0\skin\images\icons\social.png   [5147]
O61 - LFC: 18/09/2013 - 16:09:43 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\8.0.1483_0\skin\images\icons\violence-small-disable.png   [2245]
O61 - LFC: 18/09/2013 - 16:09:43 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\8.0.1483_0\skin\images\icons\violence-small-selected.png   [2109]
O61 - LFC: 18/09/2013 - 16:09:43 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\8.0.1483_0\skin\images\icons\violence.png   [4866]
O61 - LFC: 18/09/2013 - 16:09:43 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\8.0.1483_0\skin\images\icons\weapons-small-disable.png   [2245]
O61 - LFC: 18/09/2013 - 16:09:43 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\8.0.1483_0\skin\images\icons\weapons-small-selected.png   [2109]
O61 - LFC: 18/09/2013 - 16:09:43 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\8.0.1483_0\skin\images\icons\weapons.png   [6701]
O61 - LFC: 18/09/2013 - 16:09:43 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\8.0.1483_0\skin\images\icons\yellow-1.png   [3818]
O61 - LFC: 18/09/2013 - 16:09:43 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\8.0.1483_0\skin\images\icons\yellow-2.png   [3525]
O61 - LFC: 18/09/2013 - 16:09:43 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\8.0.1483_0\skin\images\icons\yellow-3.png   [2697]
O61 - LFC: 18/09/2013 - 16:09:43 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\8.0.1483_0\skin\images\icons\yellow-hover.png   [1304]
O61 - LFC: 18/09/2013 - 16:09:43 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\8.0.1483_0\skin\images\icons\yellow-selected.png   [2782]
O61 - LFC: 18/09/2013 - 16:09:43 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\8.0.1483_0\skin\images\icons\yellow.png   [1304]
O61 - LFC: 18/09/2013 - 16:09:43 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\8.0.1483_0\skin\images\icons\yellow1-16.png   [1337]
O61 - LFC: 18/09/2013 - 16:09:43 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\8.0.1483_0\skin\images\icons\yellow1-small.png   [1379]
O61 - LFC: 18/09/2013 - 16:09:43 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\8.0.1483_0\skin\images\icons\yellow2-16.png   [1345]
O61 - LFC: 18/09/2013 - 16:09:43 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\8.0.1483_0\skin\images\icons\yellow2-small.png   [1395]
O61 - LFC: 18/09/2013 - 16:09:43 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\8.0.1483_0\skin\images\icons\yellow3-16.png   [1302]
O61 - LFC: 18/09/2013 - 16:09:43 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\8.0.1483_0\skin\images\icons\yellow3-small.png   [1363]
O61 - LFC: 18/09/2013 - 16:09:44 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\8.0.1483_0\_locales\ar\messages.json   [10153]
O61 - LFC: 18/09/2013 - 16:09:44 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\8.0.1483_0\_locales\bg\messages.json   [10140]
O61 - LFC: 18/09/2013 - 16:09:44 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\8.0.1483_0\_locales\bn\messages.json   [10607]
O61 - LFC: 18/09/2013 - 16:09:44 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\8.0.1483_0\_locales\ca\messages.json   [4769]
O61 - LFC: 18/09/2013 - 16:09:44 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\8.0.1483_0\_locales\cs\messages.json   [5275]
O61 - LFC: 18/09/2013 - 16:09:44 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\8.0.1483_0\_locales\da\messages.json   [4605]
O61 - LFC: 18/09/2013 - 16:09:44 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\8.0.1483_0\_locales\de\messages.json   [4735]
O61 - LFC: 18/09/2013 - 16:09:44 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\8.0.1483_0\_locales\el\messages.json   [10662]
O61 - LFC: 18/09/2013 - 16:09:44 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\8.0.1483_0\_locales\en\messages.json   [4607]
O61 - LFC: 18/09/2013 - 16:09:44 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\8.0.1483_0\_locales\en_GB\messages.json   [4607]
O61 - LFC: 18/09/2013 - 16:09:44 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\8.0.1483_0\_locales\es\messages.json   [4734]
O61 - LFC: 18/09/2013 - 16:09:44 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\8.0.1483_0\_locales\et\messages.json   [4620]
O61 - LFC: 18/09/2013 - 16:09:44 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\8.0.1483_0\_locales\fa\messages.json   [8761]
O61 - LFC: 18/09/2013 - 16:09:44 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\8.0.1483_0\_locales\fi\messages.json   [4889]
O61 - LFC: 18/09/2013 - 16:09:44 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\8.0.1483_0\_locales\fr\messages.json   [4843]
O61 - LFC: 18/09/2013 - 16:09:44 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\8.0.1483_0\_locales\he\messages.json   [8683]
O61 - LFC: 18/09/2013 - 16:09:44 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\8.0.1483_0\_locales\hi\messages.json   [10046]
O61 - LFC: 18/09/2013 - 16:09:44 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\8.0.1483_0\_locales\hr\messages.json   [4556]
O61 - LFC: 18/09/2013 - 16:09:44 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\8.0.1483_0\_locales\hu\messages.json   [5349]
O61 - LFC: 18/09/2013 - 16:09:44 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\8.0.1483_0\_locales\id\messages.json   [4525]
O61 - LFC: 18/09/2013 - 16:09:44 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\8.0.1483_0\_locales\it\messages.json   [4516]
O61 - LFC: 18/09/2013 - 16:09:44 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\8.0.1483_0\_locales\ja\messages.json   [7668]
O61 - LFC: 18/09/2013 - 16:09:44 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\8.0.1483_0\_locales\ko\messages.json   [6375]
O61 - LFC: 18/09/2013 - 16:09:44 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\8.0.1483_0\_locales\lv\messages.json   [5236]
O61 - LFC: 18/09/2013 - 16:09:44 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\8.0.1483_0\_locales\ms\messages.json   [4503]
O61 - LFC: 18/09/2013 - 16:09:44 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\8.0.1483_0\_locales\nb\messages.json   [4633]
O61 - LFC: 18/09/2013 - 16:09:44 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\8.0.1483_0\_locales\nl\messages.json   [4569]
O61 - LFC: 18/09/2013 - 16:09:44 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\8.0.1483_0\_locales\pl\messages.json   [4978]
O61 - LFC: 18/09/2013 - 16:09:44 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\8.0.1483_0\_locales\pt_BR\messages.json   [4804]
O61 - LFC: 18/09/2013 - 16:09:44 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\8.0.1483_0\_locales\pt_PT\messages.json   [4627]
O61 - LFC: 18/09/2013 - 16:09:44 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\8.0.1483_0\_locales\ro\messages.json   [4914]
O61 - LFC: 18/09/2013 - 16:09:44 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\8.0.1483_0\_locales\ru\messages.json   [11327]
O61 - LFC: 18/09/2013 - 16:09:44 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\8.0.1483_0\_locales\sk\messages.json   [5106]
O61 - LFC: 18/09/2013 - 16:09:44 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\8.0.1483_0\_locales\sl\messages.json   [4578]
O61 - LFC: 18/09/2013 - 16:09:44 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\8.0.1483_0\_locales\sr\messages.json   [4547]
O61 - LFC: 18/09/2013 - 16:09:44 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\8.0.1483_0\_locales\sv\messages.json   [4821]
O61 - LFC: 18/09/2013 - 16:09:44 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\8.0.1483_0\_locales\th\messages.json   [10495]
O61 - LFC: 18/09/2013 - 16:09:44 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\8.0.1483_0\_locales\tr\messages.json   [4912]
O61 - LFC: 18/09/2013 - 16:09:44 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\8.0.1483_0\_locales\uk\messages.json   [11186]
O61 - LFC: 18/09/2013 - 16:09:44 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\8.0.1483_0\_locales\vi\messages.json   [6350]
O61 - LFC: 18/09/2013 - 16:09:44 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\8.0.1483_0\_locales\zh_CN\messages.json   [5418]
O61 - LFC: 18/09/2013 - 16:09:44 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\8.0.1483_0\_locales\zh_TW\messages.json   [5749]
O61 - LFC: 18/09/2013 - 16:09:44 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\8.0.1483_0\libs\avastwrc.js   [21020]
O61 - LFC: 18/09/2013 - 16:09:44 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\8.0.1483_0\libs\dateFormat.js   [3751]
O61 - LFC: 18/09/2013 - 16:09:44 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\8.0.1483_0\libs\jquery-1.5.2.js   [219227]
O61 - LFC: 18/09/2013 - 16:09:44 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\8.0.1483_0\libs\jquery.1.8.js   [92556]
O61 - LFC: 18/09/2013 - 16:09:44 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\8.0.1483_0\libs\jquery.js   [190963]
O61 - LFC: 18/09/2013 - 16:09:44 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\8.0.1483_0\libs\pbj.js   [8166]
O61 - LFC: 18/09/2013 - 16:09:44 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\8.0.1483_0\libs\protobuf.js   [59857]
O61 - LFC: 18/09/2013 - 16:09:44 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\8.0.1483_0\libs\query.js   [45956]
O61 - LFC: 18/09/2013 - 16:09:44 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\8.0.1483_0\libs\wrc_gpb.js   [18260]
O61 - LFC: 18/09/2013 - 16:09:44 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\8.0.1483_0\manifest.json   [5271]
O61 - LFC: 18/09/2013 - 16:09:44 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\8.0.1483_0\scripts\anchor.js   [22643]
O61 - LFC: 18/09/2013 - 16:09:44 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\8.0.1483_0\scripts\background.js   [30990]
O61 - LFC: 18/09/2013 - 16:09:44 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\8.0.1483_0\scripts\jquery.js   [190963]
O61 - LFC: 18/09/2013 - 16:09:44 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\8.0.1483_0\scripts\pbj.js   [8166]
O61 - LFC: 18/09/2013 - 16:09:44 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\8.0.1483_0\scripts\popup.js   [10992]
O61 - LFC: 18/09/2013 - 16:09:44 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\8.0.1483_0\scripts\protobuf.js   [59851]
O61 - LFC: 18/09/2013 - 16:09:44 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\8.0.1483_0\scripts\ratings.js   [20607]
O61 - LFC: 18/09/2013 - 16:09:44 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\8.0.1483_0\scripts\test_rules.js   [10189]
O61 - LFC: 18/09/2013 - 16:09:44 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\8.0.1483_0\scripts\warnDlg.js   [26475]
O61 - LFC: 18/09/2013 - 16:09:44 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\8.0.1483_0\scripts\wrc_gpb.js   [3544]
O61 - LFC: 18/09/2013 - 16:09:44 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\8.0.1483_0\skin\images\icons\green3-24.png   [722]
O61 - LFC: 18/09/2013 - 16:09:44 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\8.0.1483_0\skin\images\icons\grey0-16.png   [537]
O61 - LFC: 18/09/2013 - 16:09:45 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extension State\CURRENT   [16]
O61 - LFC: 18/09/2013 - 16:09:45 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extension State\MANIFEST-000002   [50]
O61 - LFC: 18/09/2013 - 16:09:47 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Managed Mode Settings   [8]
O61 - LFC: 18/09/2013 - 16:09:48 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Session Storage\CURRENT   [16]
O61 - LFC: 18/09/2013 - 16:09:48 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Session Storage\MANIFEST-000002   [50]
O61 - LFC: 18/09/2013 - 16:09:49 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0\_locales\iw\messages.json   [19337]
O61 - LFC: 18/09/2013 - 16:09:49 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0\_locales\no\messages.json   [12707]
O61 - LFC: 18/09/2013 - 16:09:49 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0\background.js   [1368]
O61 - LFC: 18/09/2013 - 16:09:49 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0\i18n\load_symbols.js   [2447]
O61 - LFC: 18/09/2013 - 16:09:50 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extension Rules\LOG   [0]
O61 - LFC: 18/09/2013 - 16:09:50 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0\i18n\locale_name.js   [13935]
O61 - LFC: 18/09/2013 - 16:09:50 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0\i18n\locale_name_ar.js   [54117]
O61 - LFC: 18/09/2013 - 16:09:50 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0\i18n\locale_name_bg.js   [51067]
O61 - LFC: 18/09/2013 - 16:09:50 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0\i18n\locale_name_ca.js   [15513]
O61 - LFC: 18/09/2013 - 16:09:50 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0\i18n\locale_name_cs.js   [19494]
O61 - LFC: 18/09/2013 - 16:09:50 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0\i18n\locale_name_da.js   [14038]
O61 - LFC: 18/09/2013 - 16:09:50 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0\i18n\locale_name_de.js   [15552]
O61 - LFC: 18/09/2013 - 16:09:50 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0\i18n\locale_name_el.js   [55324]
O61 - LFC: 18/09/2013 - 16:09:50 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0\i18n\locale_name_en_gb.js   [13942]
O61 - LFC: 18/09/2013 - 16:09:50 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0\i18n\locale_name_es.js   [15179]
O61 - LFC: 18/09/2013 - 16:09:50 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0\i18n\locale_name_es_419.js   [15179]
O61 - LFC: 18/09/2013 - 16:09:50 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0\i18n\locale_name_fi.js   [14370]
O61 - LFC: 18/09/2013 - 16:09:50 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0\i18n\locale_name_fil.js   [13992]
O61 - LFC: 18/09/2013 - 16:09:50 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0\i18n\locale_name_fr.js   [15435]
O61 - LFC: 18/09/2013 - 16:09:50 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0\i18n\locale_name_hi.js   [47597]
O61 - LFC: 18/09/2013 - 16:09:50 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0\i18n\locale_name_hr.js   [14656]
O61 - LFC: 18/09/2013 - 16:09:50 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0\i18n\locale_name_hu.js   [16140]
O61 - LFC: 18/09/2013 - 16:09:50 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0\i18n\locale_name_id.js   [13888]
O61 - LFC: 18/09/2013 - 16:09:50 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0\i18n\locale_name_it.js   [13943]
O61 - LFC: 18/09/2013 - 16:09:50 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0\i18n\locale_name_iw.js   [35117]
O61 - LFC: 18/09/2013 - 16:09:50 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0\i18n\locale_name_ja.js   [34352]
O61 - LFC: 18/09/2013 - 16:09:50 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0\i18n\locale_name_ko.js   [29930]
O61 - LFC: 18/09/2013 - 16:09:50 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0\i18n\locale_name_lt.js   [17128]
O61 - LFC: 18/09/2013 - 16:09:50 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0\i18n\locale_name_lv.js   [17105]
O61 - LFC: 18/09/2013 - 16:09:50 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0\i18n\locale_name_nl.js   [14243]
O61 - LFC: 18/09/2013 - 16:09:50 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0\i18n\locale_name_no.js   [14395]
O61 - LFC: 18/09/2013 - 16:09:50 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0\i18n\locale_name_pl.js   [15282]
O61 - LFC: 18/09/2013 - 16:09:50 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0\i18n\locale_name_pt_br.js   [15497]
O61 - LFC: 18/09/2013 - 16:09:50 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0\i18n\locale_name_pt_pt.js   [15486]
O61 - LFC: 18/09/2013 - 16:09:50 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0\i18n\locale_name_ro.js   [16064]
O61 - LFC: 18/09/2013 - 16:09:50 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0\i18n\locale_name_ru.js   [54888]
O61 - LFC: 18/09/2013 - 16:09:50 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0\i18n\locale_name_sk.js   [19282]
O61 - LFC: 18/09/2013 - 16:09:50 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0\i18n\locale_name_sl.js   [19834]
O61 - LFC: 18/09/2013 - 16:09:50 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0\i18n\locale_name_sr.js   [50705]
O61 - LFC: 18/09/2013 - 16:09:50 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0\i18n\locale_name_sv.js   [14839]
O61 - LFC: 18/09/2013 - 16:09:50 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0\i18n\locale_name_th.js   [50049]
O61 - LFC: 18/09/2013 - 16:09:50 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0\i18n\locale_name_tr.js   [15702]
O61 - LFC: 18/09/2013 - 16:09:50 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0\i18n\locale_name_uk.js   [55785]
O61 - LFC: 18/09/2013 - 16:09:50 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0\i18n\locale_name_vi.js   [22382]
O61 - LFC: 18/09/2013 - 16:09:50 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0\i18n\locale_name_zh_cn.js   [26826]
O61 - LFC: 18/09/2013 - 16:09:50 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0\i18n\locale_name_zh_tw.js   [26509]
O61 - LFC: 18/09/2013 - 16:09:50 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0\i18n\symbols.js   [3135]
O61 - LFC: 18/09/2013 - 16:09:50 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0\i18n\symbols_ar.js   [6384]
O61 - LFC: 18/09/2013 - 16:09:50 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0\i18n\symbols_bg.js   [5653]
O61 - LFC: 18/09/2013 - 16:09:50 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0\i18n\symbols_ca.js   [3447]
O61 - LFC: 18/09/2013 - 16:09:50 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0\i18n\symbols_cs.js   [3639]
O61 - LFC: 18/09/2013 - 16:09:50 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0\i18n\symbols_da.js   [3294]
O61 - LFC: 18/09/2013 - 16:09:50 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0\i18n\symbols_de.js   [3287]
O61 - LFC: 18/09/2013 - 16:09:50 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0\i18n\symbols_el.js   [5843]
O61 - LFC: 18/09/2013 - 16:09:50 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0\i18n\symbols_en_gb.js   [3245]
O61 - LFC: 18/09/2013 - 16:09:50 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0\i18n\symbols_es.js   [3342]
O61 - LFC: 18/09/2013 - 16:09:50 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0\i18n\symbols_es_419.js   [3336]
O61 - LFC: 18/09/2013 - 16:09:50 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0\i18n\symbols_fi.js   [3591]
O61 - LFC: 18/09/2013 - 16:09:50 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0\i18n\symbols_fil.js   [3259]
O61 - LFC: 18/09/2013 - 16:09:50 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0\i18n\symbols_fr.js   [3422]
O61 - LFC: 18/09/2013 - 16:09:50 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0\i18n\symbols_hi.js   [6181]
O61 - LFC: 18/09/2013 - 16:09:50 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0\i18n\symbols_hr.js   [3414]
O61 - LFC: 18/09/2013 - 16:09:50 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0\i18n\symbols_hu.js   [3644]
O61 - LFC: 18/09/2013 - 16:09:50 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0\i18n\symbols_id.js   [3203]
O61 - LFC: 18/09/2013 - 16:09:50 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0\i18n\symbols_it.js   [3307]
O61 - LFC: 18/09/2013 - 16:09:50 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0\i18n\symbols_iw.js   [5722]
O61 - LFC: 18/09/2013 - 16:09:50 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0\i18n\symbols_ja.js   [3798]
O61 - LFC: 18/09/2013 - 16:09:50 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0\i18n\symbols_ko.js   [4048]
O61 - LFC: 18/09/2013 - 16:09:50 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0\i18n\symbols_lt.js   [3562]
O61 - LFC: 18/09/2013 - 16:09:50 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0\i18n\symbols_lv.js   [3569]
O61 - LFC: 18/09/2013 - 16:09:50 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0\i18n\symbols_nl.js   [3286]
O61 - LFC: 18/09/2013 - 16:09:50 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0\i18n\symbols_no.js   [3307]
O61 - LFC: 18/09/2013 - 16:09:50 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0\i18n\symbols_pl.js   [3430]
O61 - LFC: 18/09/2013 - 16:09:50 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0\i18n\symbols_pt_br.js   [3405]
O61 - LFC: 18/09/2013 - 16:09:50 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0\i18n\symbols_pt_pt.js   [3425]
O61 - LFC: 18/09/2013 - 16:09:50 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0\i18n\symbols_ro.js   [3418]
O61 - LFC: 18/09/2013 - 16:09:50 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0\i18n\symbols_ru.js   [5819]
O61 - LFC: 18/09/2013 - 16:09:50 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0\i18n\symbols_sk.js   [3430]
O61 - LFC: 18/09/2013 - 16:09:50 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0\i18n\symbols_sl.js   [3381]
O61 - LFC: 18/09/2013 - 16:09:50 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0\i18n\symbols_sr.js   [5689]
O61 - LFC: 18/09/2013 - 16:09:50 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0\i18n\symbols_sv.js   [3376]
O61 - LFC: 18/09/2013 - 16:09:50 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0\i18n\symbols_th.js   [6459]
O61 - LFC: 18/09/2013 - 16:09:50 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0\i18n\symbols_tr.js   [3455]
O61 - LFC: 18/09/2013 - 16:09:50 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0\i18n\symbols_uk.js   [5684]
O61 - LFC: 18/09/2013 - 16:09:50 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0\i18n\symbols_vi.js   [3888]
O61 - LFC: 18/09/2013 - 16:09:50 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0\i18n\symbols_zh_cn.js   [4089]
O61 - LFC: 18/09/2013 - 16:09:50 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0\i18n\symbols_zh_tw.js   [3964]
O61 - LFC: 18/09/2013 - 16:09:50 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0\images\1x\amex.png   [2052]
O61 - LFC: 18/09/2013 - 16:09:50 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0\images\1x\bank.png   [234]
O61 - LFC: 18/09/2013 - 16:09:50 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0\images\1x\check.png   [235]
O61 - LFC: 18/09/2013 - 16:09:50 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0\images\1x\checkmark.png   [239]
O61 - LFC: 18/09/2013 - 16:09:50 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0\images\1x\close_dialog.png   [139]
O61 - LFC: 18/09/2013 - 16:09:50 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0\images\1x\close_dialog_hover.png   [214]
O61 - LFC: 18/09/2013 - 16:09:50 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0\images\1x\close_dialog_pressed.png   [213]
O61 - LFC: 18/09/2013 - 16:09:50 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0\images\1x\cvc-amex.png   [1344]
O61 - LFC: 18/09/2013 - 16:09:50 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0\images\1x\cvc.png   [1343]
O61 - LFC: 18/09/2013 - 16:09:50 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0\images\1x\discover.png   [1700]
O61 - LFC: 18/09/2013 - 16:09:50 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0\images\1x\info_icon.png   [1354]
O61 - LFC: 18/09/2013 - 16:09:50 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0\images\1x\jcb.png   [1179]
O61 - LFC: 18/09/2013 - 16:09:50 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0\images\1x\lock.png   [182]
O61 - LFC: 18/09/2013 - 16:09:50 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0\images\1x\mastercard.png   [1818]
O61 - LFC: 18/09/2013 - 16:09:50 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0\images\1x\stored_value.png   [1141]
O61 - LFC: 18/09/2013 - 16:09:50 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0\images\1x\visa.png   [1710]
O61 - LFC: 18/09/2013 - 16:09:50 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0\images\2x\amex.png   [3446]
O61 - LFC: 18/09/2013 - 16:09:50 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0\images\2x\bank.png   [412]
O61 - LFC: 18/09/2013 - 16:09:50 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0\images\2x\check.png   [631]
O61 - LFC: 18/09/2013 - 16:09:50 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0\images\2x\checkmark.png   [358]
O61 - LFC: 18/09/2013 - 16:09:50 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0\images\2x\close_dialog.png   [170]
O61 - LFC: 18/09/2013 - 16:09:50 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0\images\2x\close_dialog_hover.png   [385]
O61 - LFC: 18/09/2013 - 16:09:50 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0\images\2x\close_dialog_pressed.png   [390]
O61 - LFC: 18/09/2013 - 16:09:50 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0\images\2x\cvc-amex.png   [1748]
O61 - LFC: 18/09/2013 - 16:09:50 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0\images\2x\cvc.png   [1744]
O61 - LFC: 18/09/2013 - 16:09:50 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0\images\2x\discover.png   [2928]
O61 - LFC: 18/09/2013 - 16:09:50 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0\images\2x\info_icon.png   [1817]
O61 - LFC: 18/09/2013 - 16:09:50 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0\images\2x\jcb.png   [2874]
O61 - LFC: 18/09/2013 - 16:09:50 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0\images\2x\lock.png   [298]
O61 - LFC: 18/09/2013 - 16:09:50 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0\images\2x\mastercard.png   [3585]
O61 - LFC: 18/09/2013 - 16:09:50 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0\images\2x\stored_value.png   [1985]
O61 - LFC: 18/09/2013 - 16:09:50 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0\images\2x\visa.png   [2584]
O61 - LFC: 18/09/2013 - 16:09:50 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0\images\wallet-icon-sm.png   [1528]
O61 - LFC: 18/09/2013 - 16:09:50 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0\images\wallet-icon-tiny.png   [800]
O61 - LFC: 18/09/2013 - 16:09:50 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0\main.html   [950]
O61 - LFC: 18/09/2013 - 16:09:50 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0\payments.js   [257480]
O61 - LFC: 18/09/2013 - 16:09:50 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0\pbhelper.html   [119]
O61 - LFC: 18/09/2013 - 16:09:50 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0\pbhelper.js   [581]
O61 - LFC: 18/09/2013 - 16:09:50 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0\styles\payments.css   [13283]
O61 - LFC: 18/09/2013 - 16:09:51 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\128.png   [3524]
O61 - LFC: 18/09/2013 - 16:09:51 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\_locales\ar\messages.json   [401]
O61 - LFC: 18/09/2013 - 16:09:51 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\_locales\bg\messages.json   [427]
O61 - LFC: 18/09/2013 - 16:09:51 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\_locales\ca\messages.json   [250]
O61 - LFC: 18/09/2013 - 16:09:51 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\_locales\cs\messages.json   [255]
O61 - LFC: 18/09/2013 - 16:09:51 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\_locales\da\messages.json   [242]
O61 - LFC: 18/09/2013 - 16:09:51 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\_locales\de\messages.json   [226]
O61 - LFC: 18/09/2013 - 16:09:51 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\_locales\el\messages.json   [475]
O61 - LFC: 18/09/2013 - 16:09:51 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\_locales\en\messages.json   [227]
O61 - LFC: 18/09/2013 - 16:09:51 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\_locales\es\messages.json   [240]
O61 - LFC: 18/09/2013 - 16:09:51 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\_locales\no\messages.json   [216]
O61 - LFC: 18/09/2013 - 16:09:51 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\manifest.json   [785]
O61 - LFC: 18/09/2013 - 16:09:51 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0\_locales\ar\messages.json   [52790]
O61 - LFC: 18/09/2013 - 16:09:51 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0\_locales\bg\messages.json   [41117]
O61 - LFC: 18/09/2013 - 16:09:51 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0\_locales\ca\messages.json   [16920]
O61 - LFC: 18/09/2013 - 16:09:51 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0\_locales\cs\messages.json   [21633]
O61 - LFC: 18/09/2013 - 16:09:51 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0\_locales\da\messages.json   [15723]
O61 - LFC: 18/09/2013 - 16:09:51 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0\_locales\de\messages.json   [16303]
O61 - LFC: 18/09/2013 - 16:09:51 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0\_locales\el\messages.json   [45461]
O61 - LFC: 18/09/2013 - 16:09:51 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0\_locales\en\messages.json   [16620]
O61 - LFC: 18/09/2013 - 16:09:51 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0\_locales\en_GB\messages.json   [15076]
O61 - LFC: 18/09/2013 - 16:09:51 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0\_locales\es\messages.json   [17148]
O61 - LFC: 18/09/2013 - 16:09:51 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0\_locales\es_419\messages.json   [16477]
O61 - LFC: 18/09/2013 - 16:09:51 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0\_locales\fi\messages.json   [15881]
O61 - LFC: 18/09/2013 - 16:09:51 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0\_locales\fil\messages.json   [16003]
O61 - LFC: 18/09/2013 - 16:09:51 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0\_locales\fr\messages.json   [20254]
O61 - LFC: 18/09/2013 - 16:09:51 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0\_locales\hi\messages.json   [38236]
O61 - LFC: 18/09/2013 - 16:09:51 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0\_locales\hr\messages.json   [22320]
O61 - LFC: 18/09/2013 - 16:09:51 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0\_locales\hu\messages.json   [20750]
O61 - LFC: 18/09/2013 - 16:09:51 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0\_locales\id\messages.json   [15356]
O61 - LFC: 18/09/2013 - 16:09:51 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0\_locales\it\messages.json   [16030]
O61 - LFC: 18/09/2013 - 16:09:51 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0\_locales\ja\messages.json   [24124]
O61 - LFC: 18/09/2013 - 16:09:51 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0\_locales\ko\messages.json   [21891]
O61 - LFC: 18/09/2013 - 16:09:51 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0\_locales\lt\messages.json   [21284]
O61 - LFC: 18/09/2013 - 16:09:51 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0\_locales\lv\messages.json   [21167]
O61 - LFC: 18/09/2013 - 16:09:51 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0\_locales\nl\messages.json   [15358]
O61 - LFC: 18/09/2013 - 16:09:51 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0\_locales\pl\messages.json   [23217]
O61 - LFC: 18/09/2013 - 16:09:51 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0\_locales\pt_BR\messages.json   [16741]
O61 - LFC: 18/09/2013 - 16:09:51 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0\_locales\pt_PT\messages.json   [17074]
O61 - LFC: 18/09/2013 - 16:09:51 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0\_locales\ro\messages.json   [20402]
O61 - LFC: 18/09/2013 - 16:09:51 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0\_locales\ru\messages.json   [57898]
O61 - LFC: 18/09/2013 - 16:09:51 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0\_locales\sk\messages.json   [20607]
O61 - LFC: 18/09/2013 - 16:09:51 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0\_locales\sl\messages.json   [22304]
O61 - LFC: 18/09/2013 - 16:09:51 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0\_locales\sr\messages.json   [58404]
O61 - LFC: 18/09/2013 - 16:09:51 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0\_locales\sv\messages.json   [15748]
O61 - LFC: 18/09/2013 - 16:09:51 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0\_locales\th\messages.json   [41806]
O61 - LFC: 18/09/2013 - 16:09:51 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0\_locales\tr\messages.json   [18435]
O61 - LFC: 18/09/2013 - 16:09:51 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0\_locales\uk\messages.json   [59279]
O61 - LFC: 18/09/2013 - 16:09:51 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0\_locales\vi\messages.json   [23117]
O61 - LFC: 18/09/2013 - 16:09:51 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0\_locales\zh_CN\messages.json   [20233]
O61 - LFC: 18/09/2013 - 16:09:51 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0\_locales\zh_TW\messages.json   [20013]
O61 - LFC: 18/09/2013 - 16:09:51 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0\icon_128.png   [9460]
O61 - LFC: 18/09/2013 - 16:09:51 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0\icon_16.png   [702]
O61 - LFC: 18/09/2013 - 16:09:51 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0\manifest.json   [1426]
O61 - LFC: 18/09/2013 - 16:09:52 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\no\messages.json   [195]
O61 - LFC: 18/09/2013 - 16:09:52 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\main.html   [92]
O61 - LFC: 18/09/2013 - 16:09:52 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\main.js   [98]
O61 - LFC: 18/09/2013 - 16:09:52 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\_locales\fi\messages.json   [222]
O61 - LFC: 18/09/2013 - 16:09:52 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\_locales\fil\messages.json   [236]
O61 - LFC: 18/09/2013 - 16:09:52 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\_locales\fr\messages.json   [249]
O61 - LFC: 18/09/2013 - 16:09:52 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\_locales\he\messages.json   [419]
O61 - LFC: 18/09/2013 - 16:09:52 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\_locales\hi\messages.json   [408]
O61 - LFC: 18/09/2013 - 16:09:52 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\_locales\hr\messages.json   [220]
O61 - LFC: 18/09/2013 - 16:09:52 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\_locales\hu\messages.json   [253]
O61 - LFC: 18/09/2013 - 16:09:52 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\_locales\id\messages.json   [231]
O61 - LFC: 18/09/2013 - 16:09:52 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\_locales\it\messages.json   [224]
O61 - LFC: 18/09/2013 - 16:09:52 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\_locales\ja\messages.json   [349]
O61 - LFC: 18/09/2013 - 16:09:52 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\_locales\ko\messages.json   [323]
O61 - LFC: 18/09/2013 - 16:09:52 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\_locales\lt\messages.json   [266]
O61 - LFC: 18/09/2013 - 16:09:52 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\_locales\lv\messages.json   [245]
O61 - LFC: 18/09/2013 - 16:09:52 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\_locales\nl\messages.json   [225]
O61 - LFC: 18/09/2013 - 16:09:52 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\_locales\pl\messages.json   [274]
O61 - LFC: 18/09/2013 - 16:09:52 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\_locales\pt_BR\messages.json   [237]
O61 - LFC: 18/09/2013 - 16:09:52 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\_locales\pt_PT\messages.json   [236]
O61 - LFC: 18/09/2013 - 16:09:52 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\_locales\ro\messages.json   [248]
O61 - LFC: 18/09/2013 - 16:09:52 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\_locales\ru\messages.json   [394]
O61 - LFC: 18/09/2013 - 16:09:52 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\_locales\sk\messages.json   [241]
O61 - LFC: 18/09/2013 - 16:09:52 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\_locales\sl\messages.json   [245]
O61 - LFC: 18/09/2013 - 16:09:52 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\_locales\sr\messages.json   [437]
O61 - LFC: 18/09/2013 - 16:09:52 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\_locales\sv\messages.json   [238]
O61 - LFC: 18/09/2013 - 16:09:52 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\_locales\th\messages.json   [365]
O61 - LFC: 18/09/2013 - 16:09:52 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\_locales\tr\messages.json   [255]
O61 - LFC: 18/09/2013 - 16:09:52 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\_locales\uk\messages.json   [442]
O61 - LFC: 18/09/2013 - 16:09:52 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\_locales\vi\messages.json   [310]
O61 - LFC: 18/09/2013 - 16:09:52 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\_locales\zh_CN\messages.json   [257]
O61 - LFC: 18/09/2013 - 16:09:52 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\_locales\zh_TW\messages.json   [269]
O61 - LFC: 18/09/2013 - 16:09:53 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\ar\messages.json   [374]
O61 - LFC: 18/09/2013 - 16:09:53 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\bg\messages.json   [428]
O61 - LFC: 18/09/2013 - 16:09:53 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\ca\messages.json   [207]
O61 - LFC: 18/09/2013 - 16:09:53 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\cs\messages.json   [230]
O61 - LFC: 18/09/2013 - 16:09:53 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\da\messages.json   [216]
O61 - LFC: 18/09/2013 - 16:09:53 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\de\messages.json   [217]
O61 - LFC: 18/09/2013 - 16:09:53 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\el\messages.json   [416]
O61 - LFC: 18/09/2013 - 16:09:53 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\en_GB\messages.json   [208]
O61 - LFC: 18/09/2013 - 16:09:53 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\en_US\messages.json   [209]
O61 - LFC: 18/09/2013 - 16:09:53 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\es\messages.json   [206]
O61 - LFC: 18/09/2013 - 16:09:53 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\es_419\messages.json   [206]
O61 - LFC: 18/09/2013 - 16:09:53 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\et\messages.json   [216]
O61 - LFC: 18/09/2013 - 16:09:53 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\fi\messages.json   [216]
O61 - LFC: 18/09/2013 - 16:09:53 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\fil\messages.json   [219]
O61 - LFC: 18/09/2013 - 16:09:53 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\fr\messages.json   [224]
O61 - LFC: 18/09/2013 - 16:09:53 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\he\messages.json   [293]
O61 - LFC: 18/09/2013 - 16:09:53 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\hi\messages.json   [375]
O61 - LFC: 18/09/2013 - 16:09:53 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\hu\messages.json   [251]
O61 - LFC: 18/09/2013 - 16:09:53 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\id\messages.json   [209]
O61 - LFC: 18/09/2013 - 16:09:53 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\it\messages.json   [213]
O61 - LFC: 18/09/2013 - 16:09:53 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\ja\messages.json   [263]
O61 - LFC: 18/09/2013 - 16:09:53 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\ko\messages.json   [254]
O61 - LFC: 18/09/2013 - 16:09:53 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\lt\messages.json   [234]
O61 - LFC: 18/09/2013 - 16:09:53 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\lv\messages.json   [232]
O61 - LFC: 18/09/2013 - 16:09:53 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\ms\messages.json   [207]
O61 - LFC: 18/09/2013 - 16:09:53 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\nl\messages.json   [217]
O61 - LFC: 18/09/2013 - 16:09:53 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\pl\messages.json   [217]
O61 - LFC: 18/09/2013 - 16:09:53 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\pt_BR\messages.json   [206]
O61 - LFC: 18/09/2013 - 16:09:53 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\pt_PT\messages.json   [208]
O61 - LFC: 18/09/2013 - 16:09:53 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\ro\messages.json   [225]
O61 - LFC: 18/09/2013 - 16:09:53 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\ru\messages.json   [434]
O61 - LFC: 18/09/2013 - 16:09:53 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\sk\messages.json   [225]
O61 - LFC: 18/09/2013 - 16:09:53 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\sl\messages.json   [218]
O61 - LFC: 18/09/2013 - 16:09:53 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\sr\messages.json   [380]
O61 - LFC: 18/09/2013 - 16:09:53 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\sv\messages.json   [214]
O61 - LFC: 18/09/2013 - 16:09:53 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\th\messages.json   [329]
O61 - LFC: 18/09/2013 - 16:09:53 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\tr\messages.json   [243]
O61 - LFC: 18/09/2013 - 16:09:53 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\uk\messages.json   [428]
O61 - LFC: 18/09/2013 - 16:09:53 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\vi\messages.json   [252]
O61 - LFC: 18/09/2013 - 16:09:53 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\zh_CN\messages.json   [233]
O61 - LFC: 18/09/2013 - 16:09:53 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\zh_TW\messages.json   [233]
O61 - LFC: 18/09/2013 - 16:09:53 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\icon_128.png   [3009]
O61 - LFC: 18/09/2013 - 16:09:53 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\icon_16.png   [143]
O61 - LFC: 18/09/2013 - 16:09:53 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\manifest.json   [724]
O61 - LFC: 18/09/2013 - 16:09:53 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\128.png   [5367]
O61 - LFC: 18/09/2013 - 16:09:53 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\16.png   [499]
O61 - LFC: 18/09/2013 - 16:09:53 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\32.png   [1154]
O61 - LFC: 18/09/2013 - 16:09:53 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\48.png   [1872]
O61 - LFC: 18/09/2013 - 16:09:53 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\ar\messages.json   [423]
O61 - LFC: 18/09/2013 - 16:09:53 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\bg\messages.json   [515]
O61 - LFC: 18/09/2013 - 16:09:53 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\ca\messages.json   [330]
O61 - LFC: 18/09/2013 - 16:09:53 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\cs\messages.json   [355]
O61 - LFC: 18/09/2013 - 16:09:53 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\da\messages.json   [328]
O61 - LFC: 18/09/2013 - 16:09:53 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\de\messages.json   [307]
O61 - LFC: 18/09/2013 - 16:09:53 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\el\messages.json   [569]
O61 - LFC: 18/09/2013 - 16:09:53 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\en\messages.json   [314]
O61 - LFC: 18/09/2013 - 16:09:53 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\en_GB\messages.json   [314]
O61 - LFC: 18/09/2013 - 16:09:53 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\en_US\messages.json   [314]
O61 - LFC: 18/09/2013 - 16:09:53 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\es\messages.json   [340]
O61 - LFC: 18/09/2013 - 16:09:53 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\es_419\messages.json   [341]
O61 - LFC: 18/09/2013 - 16:09:53 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\et\messages.json   [314]
O61 - LFC: 18/09/2013 - 16:09:53 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\fi\messages.json   [305]
O61 - LFC: 18/09/2013 - 16:09:53 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\fil\messages.json   [337]
O61 - LFC: 18/09/2013 - 16:09:53 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\fr\messages.json   [329]
O61 - LFC: 18/09/2013 - 16:09:53 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\he\messages.json   [471]
O61 - LFC: 18/09/2013 - 16:09:53 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\hi\messages.json   [326]
O61 - LFC: 18/09/2013 - 16:09:53 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\hr\messages.json   [340]
O61 - LFC: 18/09/2013 - 16:09:53 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\hu\messages.json   [336]
O61 - LFC: 18/09/2013 - 16:09:53 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\id\messages.json   [319]
O61 - LFC: 18/09/2013 - 16:09:53 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\it\messages.json   [324]
O61 - LFC: 18/09/2013 - 16:09:53 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\ja\messages.json   [388]
O61 - LFC: 18/09/2013 - 16:09:53 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\no\messages.json   [300]
O61 - LFC: 18/09/2013 - 16:09:53 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\manifest.json   [817]
O61 - LFC: 18/09/2013 - 16:09:54 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\ko\messages.json   [380]
O61 - LFC: 18/09/2013 - 16:09:54 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\lt\messages.json   [359]
O61 - LFC: 18/09/2013 - 16:09:54 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\lv\messages.json   [360]
O61 - LFC: 18/09/2013 - 16:09:54 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\nl\messages.json   [323]
O61 - LFC: 18/09/2013 - 16:09:54 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\pl\messages.json   [336]
O61 - LFC: 18/09/2013 - 16:09:54 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\pt_BR\messages.json   [332]
O61 - LFC: 18/09/2013 - 16:09:54 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\pt_PT\messages.json   [331]
O61 - LFC: 18/09/2013 - 16:09:54 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\ro\messages.json   [332]
O61 - LFC: 18/09/2013 - 16:09:54 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\ru\messages.json   [471]
O61 - LFC: 18/09/2013 - 16:09:54 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\sk\messages.json   [338]
O61 - LFC: 18/09/2013 - 16:09:54 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\sl\messages.json   [329]
O61 - LFC: 18/09/2013 - 16:09:54 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\sr\messages.json   [483]
O61 - LFC: 18/09/2013 - 16:09:54 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\sv\messages.json   [333]
O61 - LFC: 18/09/2013 - 16:09:54 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\th\messages.json   [472]
O61 - LFC: 18/09/2013 - 16:09:54 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\tr\messages.json   [330]
O61 - LFC: 18/09/2013 - 16:09:54 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\uk\messages.json   [501]
O61 - LFC: 18/09/2013 - 16:09:54 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\vi\messages.json   [363]
O61 - LFC: 18/09/2013 - 16:09:54 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\zh_CN\messages.json   [346]
O61 - LFC: 18/09/2013 - 16:09:54 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\zh_TW\messages.json   [346]
O61 - LFC: 18/09/2013 - 16:09:54 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1\128.png   [5920]
O61 - LFC: 18/09/2013 - 16:09:54 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1\_locales\ar\messages.json   [556]
O61 - LFC: 18/09/2013 - 16:09:54 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1\_locales\bg\messages.json   [492]
O61 - LFC: 18/09/2013 - 16:09:54 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1\_locales\ca\messages.json   [262]
O61 - LFC: 18/09/2013 - 16:09:54 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1\_locales\cs\messages.json   [289]
O61 - LFC: 18/09/2013 - 16:09:54 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1\_locales\da\messages.json   [240]
O61 - LFC: 18/09/2013 - 16:09:54 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1\_locales\de\messages.json   [239]
O61 - LFC: 18/09/2013 - 16:09:54 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1\_locales\el\messages.json   [624]
O61 - LFC: 18/09/2013 - 16:09:54 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1\_locales\en\messages.json   [215]
O61 - LFC: 18/09/2013 - 16:09:54 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1\_locales\es\messages.json   [281]
O61 - LFC: 18/09/2013 - 16:09:54 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1\_locales\fi\messages.json   [284]
O61 - LFC: 18/09/2013 - 16:09:54 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1\_locales\fil\messages.json   [234]
O61 - LFC: 18/09/2013 - 16:09:54 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1\_locales\fr\messages.json   [272]
O61 - LFC: 18/09/2013 - 16:09:54 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1\_locales\hi\messages.json   [391]
O61 - LFC: 18/09/2013 - 16:09:54 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1\_locales\hr\messages.json   [246]
O61 - LFC: 18/09/2013 - 16:09:54 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1\_locales\hu\messages.json   [234]
O61 - LFC: 18/09/2013 - 16:09:54 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1\_locales\id\messages.json   [242]
O61 - LFC: 18/09/2013 - 16:09:54 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1\_locales\it\messages.json   [260]
O61 - LFC: 18/09/2013 - 16:09:54 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1\_locales\ja\messages.json   [364]
O61 - LFC: 18/09/2013 - 16:09:54 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1\_locales\ko\messages.json   [328]
O61 - LFC: 18/09/2013 - 16:09:54 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1\_locales\lt\messages.json   [269]
O61 - LFC: 18/09/2013 - 16:09:54 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1\_locales\lv\messages.json   [262]
O61 - LFC: 18/09/2013 - 16:09:54 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1\_locales\nl\messages.json   [232]
O61 - LFC: 18/09/2013 - 16:09:54 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1\_locales\no\messages.json   [210]
O61 - LFC: 18/09/2013 - 16:09:54 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1\_locales\pl\messages.json   [292]
O61 - LFC: 18/09/2013 - 16:09:54 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1\_locales\pt_BR\messages.json   [230]
O61 - LFC: 18/09/2013 - 16:09:54 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1\_locales\pt_PT\messages.json   [231]
O61 - LFC: 18/09/2013 - 16:09:54 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1\_locales\ro\messages.json   [281]
O61 - LFC: 18/09/2013 - 16:09:54 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1\_locales\ru\messages.json   [482]
O61 - LFC: 18/09/2013 - 16:09:54 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1\_locales\se\messages.json   [210]
O61 - LFC: 18/09/2013 - 16:09:54 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1\_locales\sk\messages.json   [238]
O61 - LFC: 18/09/2013 - 16:09:54 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1\_locales\sl\messages.json   [249]
O61 - LFC: 18/09/2013 - 16:09:54 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1\_locales\sr\messages.json   [511]
O61 - LFC: 18/09/2013 - 16:09:54 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1\_locales\th\messages.json   [471]
O61 - LFC: 18/09/2013 - 16:09:54 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1\_locales\tr\messages.json   [250]
O61 - LFC: 18/09/2013 - 16:09:54 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1\_locales\uk\messages.json   [536]
O61 - LFC: 18/09/2013 - 16:09:54 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1\_locales\vi\messages.json   [257]
O61 - LFC: 18/09/2013 - 16:09:54 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1\_locales\zh_CN\messages.json   [339]
O61 - LFC: 18/09/2013 - 16:09:54 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1\_locales\zh_TW\messages.json   [321]
O61 - LFC: 18/09/2013 - 16:09:54 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1\manifest.json   [755]
O61 - LFC: 18/09/2013 - 16:09:55 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\128.png   [7654]
O61 - LFC: 18/09/2013 - 16:09:55 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\ar\messages.json   [422]
O61 - LFC: 18/09/2013 - 16:09:55 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\bg\messages.json   [559]
O61 - LFC: 18/09/2013 - 16:09:55 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\ca\messages.json   [265]
O61 - LFC: 18/09/2013 - 16:09:55 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\cs\messages.json   [283]
O61 - LFC: 18/09/2013 - 16:09:55 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\da\messages.json   [251]
O61 - LFC: 18/09/2013 - 16:09:55 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\de\messages.json   [256]
O61 - LFC: 18/09/2013 - 16:09:55 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\el\messages.json   [565]
O61 - LFC: 18/09/2013 - 16:09:55 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\en_GB\messages.json   [249]
O61 - LFC: 18/09/2013 - 16:09:55 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\en_US\messages.json   [249]
O61 - LFC: 18/09/2013 - 16:09:55 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\es\messages.json   [259]
O61 - LFC: 18/09/2013 - 16:09:55 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\es_419\messages.json   [259]
O61 - LFC: 18/09/2013 - 16:09:55 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\et\messages.json   [259]
O61 - LFC: 18/09/2013 - 16:09:55 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\eu\messages.json   [243]
O61 - LFC: 18/09/2013 - 16:09:55 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\fi\messages.json   [277]
O61 - LFC: 18/09/2013 - 16:09:55 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\fil\messages.json   [260]
O61 - LFC: 18/09/2013 - 16:09:55 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\fr\messages.json   [260]
O61 - LFC: 18/09/2013 - 16:09:55 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\he\messages.json   [438]
O61 - LFC: 18/09/2013 - 16:09:55 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\hi\messages.json   [492]
O61 - LFC: 18/09/2013 - 16:09:55 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\hr\messages.json   [263]
O61 - LFC: 18/09/2013 - 16:09:55 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\hu\messages.json   [276]
O61 - LFC: 18/09/2013 - 16:09:55 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\id\messages.json   [261]
O61 - LFC: 18/09/2013 - 16:09:55 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\it\messages.json   [258]
O61 - LFC: 18/09/2013 - 16:09:55 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\ja\messages.json   [395]
O61 - LFC: 18/09/2013 - 16:09:55 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\ko\messages.json   [365]
O61 - LFC: 18/09/2013 - 16:09:55 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\lt\messages.json   [309]
O61 - LFC: 18/09/2013 - 16:09:55 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\lv\messages.json   [262]
O61 - LFC: 18/09/2013 - 16:09:55 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\ms\messages.json   [254]
O61 - LFC: 18/09/2013 - 16:09:55 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\nl\messages.json   [250]
O61 - LFC: 18/09/2013 - 16:09:55 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\no\messages.json   [218]
O61 - LFC: 18/09/2013 - 16:09:55 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\pl\messages.json   [261]
O61 - LFC: 18/09/2013 - 16:09:55 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\pt_BR\messages.json   [250]
O61 - LFC: 18/09/2013 - 16:09:55 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\pt_PT\messages.json   [272]
O61 - LFC: 18/09/2013 - 16:09:55 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\ro\messages.json   [309]
O61 - LFC: 18/09/2013 - 16:09:55 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\ru\messages.json   [614]
O61 - LFC: 18/09/2013 - 16:09:55 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\sk\messages.json   [293]
O61 - LFC: 18/09/2013 - 16:09:55 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\sl\messages.json   [268]
O61 - LFC: 18/09/2013 - 16:09:55 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\sr\messages.json   [467]
O61 - LFC: 18/09/2013 - 16:09:55 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\sv\messages.json   [261]
O61 - LFC: 18/09/2013 - 16:09:55 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\th\messages.json   [521]
O61 - LFC: 18/09/2013 - 16:09:55 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\tr\messages.json   [302]
O61 - LFC: 18/09/2013 - 16:09:55 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\uk\messages.json   [657]
O61 - LFC: 18/09/2013 - 16:09:55 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\vi\messages.json   [321]
O61 - LFC: 18/09/2013 - 16:09:55 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\zh_CN\messages.json   [360]
O61 - LFC: 18/09/2013 - 16:09:55 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\zh_TW\messages.json   [348]
O61 - LFC: 18/09/2013 - 16:09:55 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\manifest.json   [996]
O61 - LFC: 18/09/2013 - 16:09:56 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Extension State\LOG   [0]
O61 - LFC: 18/09/2013 - 16:09:58 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Session Storage\LOG   [0]
O61 - LFC: 18/09/2013 - 16:10:20 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Login Data   [12288]
O61 - LFC: 18/09/2013 - 16:10:20 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Login Data-journal   [512]
O61 - LFC: 18/09/2013 - 16:10:26 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\NHKF5FV2\macromedia.com\support\flashplayer\sys\settings.sol   [379]
O61 - LFC: 18/09/2013 - 16:10:37 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\README   [180]
O61 - LFC: 18/09/2013 - 16:11:59 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\fr-FR-3-0.bdic   [1074744]
O61 - LFC: 18/09/2013 - 16:12:06 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Safe Browsing Download   [804308]
O61 - LFC: 18/09/2013 - 16:12:07 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Safe Browsing Bloom   [2455052]
O61 - LFC: 18/09/2013 - 16:12:07 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Safe Browsing Bloom Prefix Set   [434078]
O61 - LFC: 18/09/2013 - 16:12:07 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Safe Browsing Csd Whitelist   [135124]
O61 - LFC: 18/09/2013 - 16:12:07 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Safe Browsing Download Whitelist   [19680]
O61 - LFC: 18/09/2013 - 16:12:07 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Safe Browsing Extension Blacklist   [6284]
O61 - LFC: 18/09/2013 - 16:13:24 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_www.icloud.com_0.localstorage   [3072]
O61 - LFC: 18/09/2013 - 16:13:24 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_www.icloud.com_0.localstorage-journal   [3608]
O61 - LFC: 18/09/2013 - 16:15:58 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\PepperFlash\11.8.800.170\manifest.fingerprint   [14]
O61 - LFC: 18/09/2013 - 16:15:58 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\PepperFlash\11.8.800.170\manifest.json   [2054]
O61 - LFC: 18/09/2013 - 16:15:58 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\PepperFlash\11.8.800.170\pepflashplayer.dll   [13612424]
O61 - LFC: 18/09/2013 - 16:16:25 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Top Sites   [20480]
O61 - LFC: 18/09/2013 - 16:16:25 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Top Sites-journal   [12824]
O61 - LFC: 18/09/2013 - 16:17:57 ---A- . (...) -- C:\Users\Natacha\AppData\Roaming\Skype\ktychou13\keyval.db   [45056]
O61 - LFC: 18/09/2013 - 16:17:57 ---A- . (...) -- C:\Users\Natacha\AppData\Roaming\Skype\ktychou13\keyval.db-journal   [33344]
O61 - LFC: 18/09/2013 - 16:17:59 ---A- . (...) -- C:\Users\Natacha\AppData\Roaming\Skype\ktychou13\bistats.db   [192512]
O61 - LFC: 18/09/2013 - 16:17:59 ---A- . (...) -- C:\Users\Natacha\AppData\Roaming\Skype\ktychou13\bistats.db-journal   [37448]
O61 - LFC: 18/09/2013 - 16:18:01 ---A- . (...) -- C:\Users\Natacha\AppData\Roaming\Skype\ktychou13\config.xml   [12535]
O61 - LFC: 18/09/2013 - 16:29:27 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Network Action Predictor   [58368]
O61 - LFC: 18/09/2013 - 16:29:27 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Network Action Predictor-journal   [11864]
O61 - LFC: 18/09/2013 - 16:29:27 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Shortcuts   [12288]
O61 - LFC: 18/09/2013 - 16:29:27 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Shortcuts-journal   [8720]
O61 - LFC: 18/09/2013 - 16:30:25 ---A- . (...) -- C:\Users\Natacha\AppData\Roaming\Skype\ktychou13\chatsync\20\20623fa88ba6d313.dat   [9931]
O61 - LFC: 18/09/2013 - 16:32:21 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Web Data   [73728]
O61 - LFC: 18/09/2013 - 16:32:21 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Web Data-journal   [10792]
O61 - LFC: 18/09/2013 - 16:32:24 ---A- . (...) -- C:\Users\Natacha\AppData\Roaming\Skype\ktychou13\dc.db   [118784]
O61 - LFC: 18/09/2013 - 16:32:38 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_www.ovh.com_0.localstorage   [3072]
O61 - LFC: 18/09/2013 - 16:32:38 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_www.ovh.com_0.localstorage-journal   [512]
O61 - LFC: 18/09/2013 - 16:34:18 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Visited Links   [0]
O61 - LFC: 18/09/2013 - 16:34:23 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Origin Bound Certs   [12288]
O61 - LFC: 18/09/2013 - 16:34:24 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Origin Bound Certs-journal   [3608]
O61 - LFC: 18/09/2013 - 16:34:26 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Favicons   [36864]
O61 - LFC: 18/09/2013 - 16:34:26 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Favicons-journal   [16384]
O61 - LFC: 18/09/2013 - 16:34:26 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\History Index 2013-09   [356352]
O61 - LFC: 18/09/2013 - 16:34:26 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\History Index 2013-09-journal   [16384]
O61 - LFC: 18/09/2013 - 16:34:33 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\TransportSecurity   [963]
O61 - LFC: 18/09/2013 - 16:34:57 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\History   [102400]
O61 - LFC: 18/09/2013 - 16:34:57 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\History-journal   [16384]
O61 - LFC: 18/09/2013 - 16:34:58 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Local State   [42666]
O61 - LFC: 18/09/2013 - 16:35:17 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Safe Browsing Cookies   [6144]
O61 - LFC: 18/09/2013 - 16:35:17 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Safe Browsing Cookies-journal   [4640]
O61 - LFC: 18/09/2013 - 16:37:37 ---A- . (...) -- C:\Users\Natacha\AppData\Roaming\Skype\shared.xml   [93528]
O61 - LFC: 18/09/2013 - 16:38:21 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Cookies   [21504]
O61 - LFC: 18/09/2013 - 16:38:21 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Cookies-journal   [12896]
O61 - LFC: 18/09/2013 - 16:38:37 ---A- . (...) -- C:\Users\Natacha\AppData\Local\Google\Chrome\User Data\Default\Preferences   [96863]
O61 - LFC: 18/09/2013 - 16:38:44 ---A- . (...) -- C:\Users\Natacha\AppData\Roaming\Skype\ktychou13\main.db   [4120576]
O61 - LFC: 18/09/2013 - 16:38:44 ---A- . (...) -- C:\Users\Natacha\AppData\Roaming\Skype\ktychou13\main.db-journal   [189296]
~ 29 Fichiers temporaires (Temporary files)
~ Files: 722 Scanned in 00mn 21s



---\\ Liste les services legacy du registre (LALS) (O64)
O64 - Services: CurCS - 28/12/2011 - C:\Windows\system32\drivers\afd.sys (AFD)  .(.Microsoft Corporation - Ancillary Function Driver for WinSock.) - LEGACY_AFD
O64 - Services: CurCS - 07/03/2013 - C:\Windows\System32\Drivers\aswFsBlk.sys (aswFsBlk)  .(.AVAST Software - avast! File System Access Blocking Driver.) - LEGACY_ASWFSBLK
O64 - Services: CurCS - 07/03/2013 - C:\Windows\system32\drivers\aswMonFlt.sys (aswMonFlt)  .(.AVAST Software - avast! File System Minifilter for Windows 2.) - LEGACY_ASWMONFLT
O64 - Services: CurCS - 07/03/2013 - C:\Windows\system32\Drivers\aswrdr2.sys (aswRdr)  .(.AVAST Software - avast! WFP Redirect Driver.) - LEGACY_ASWRDR
O64 - Services: CurCS - 07/03/2013 - Pas de propriétaire (aswRvrt)  .(...) - LEGACY_ASWRVRT
O64 - Services: CurCS - 28/06/2013 - C:\Windows\System32\Drivers\aswSnx.sys (aswSnx)  .(.AVAST Software - avast! Virtualization Driver.) - LEGACY_ASWSNX
O64 - Services: CurCS - 28/06/2013 - C:\Windows\System32\Drivers\aswSP.sys (aswSP)  .(.AVAST Software - avast! self protection module.) - LEGACY_ASWSP
O64 - Services: CurCS - 07/03/2013 - C:\Windows\System32\Drivers\aswTdi.sys (aswTdi)  .(.AVAST Software - avast! TDI Filter Driver.) - LEGACY_ASWTDI
O64 - Services: CurCS - 28/06/2013 - Pas de propriétaire (aswVmm)  .(...) - LEGACY_ASWVMM
O64 - Services: CurCS - 14/07/2009 - C:\Windows\System32\drivers\atapi.sys (atapi)  .(.Microsoft Corporation - ATAPI IDE Miniport Driver.) - LEGACY_ATAPI
O64 - Services: CurCS - 14/07/2009 - C:\Windows\System32\Drivers\Beep.sys (Beep)  .(.Microsoft Corporation - BEEP Driver.) - LEGACY_BEEP
O64 - Services: CurCS - 05/07/2012 - C:\Windows\system32\browser.dll (bowser)  .(.Microsoft Corporation - DLL du service Explorateur d’ordinateurs.) - LEGACY_BOWSER
O64 - Services: CurCS - 14/07/2009 - C:\Windows\System32\DRIVERS\cdfs.sys (cdfs)  .(.Microsoft Corporation - CD-ROM File System Driver.) - LEGACY_CDFS
O64 - Services: CurCS - 14/07/2009 - C:\Windows\system32\clfs.sys (CLFS)  .(.Microsoft Corporation - Common Log File System Driver.) - LEGACY_CLFS
O64 - Services: CurCS - 02/06/2012 - C:\Windows\System32\Drivers\cng.sys (CNG)  .(.Microsoft Corporation - Kernel Cryptography, Next Generation.) - LEGACY_CNG
O64 - Services: CurCS - 21/11/2010 - C:\Windows\system32\cscsvc.dll (CSC)  .(.Microsoft Corporation - DLL du service CSC.) - LEGACY_CSC
O64 - Services: CurCS - 21/11/2010 - C:\Windows\system32\drivers\dfsc.sys (DfsC)  .(.Microsoft Corporation - DFS Namespace Client Driver.) - LEGACY_DFSC
O64 - Services: CurCS - 14/07/2009 - C:\Windows\system32\drivers\discache.sys (discache)  .(.Microsoft Corporation - System Indexer/Cache Driver.) - LEGACY_DISCACHE
O64 - Services: CurCS - 04/08/2011 - C:\Windows\System32\DRIVERS\dnelwf64.sys (DNE)  .(.Citrix Systems, Inc. - Deterministic Network Enhancer for NDIS 6.) - LEGACY_DNE
O64 - Services: CurCS - 10/04/2013 - C:\Windows\system32\drivers\dxgkrnl.sys (DXGKrnl)  .(.Microsoft Corporation - DirectX Graphics Kernel.) - LEGACY_DXGKRNL
O64 - Services: CurCS - 14/07/2009 - C:\Windows\System32\Drivers\fastfat.sys (fastfat)  .(.Microsoft Corporation - Fast FAT File System Driver.) - LEGACY_FASTFAT
O64 - Services: CurCS - 14/07/2009 - C:\Windows\system32\drivers\fileinfo.sys (FileInfo)  .(.Microsoft Corporation - FileInfo Filter Driver.) - LEGACY_FILEINFO
O64 - Services: CurCS - 21/11/2010 - C:\Windows\system32\drivers\fltmgr.sys (FltMgr)  .(.Microsoft Corporation - Gestionnaire de filtres de système de fichi.) - LEGACY_FLTMGR
O64 - Services: CurCS - 24/01/2013 - C:\Windows\system32\drivers\fvevol.sys (fvevol)  .(.Microsoft Corporation - BitLocker Drive Encryption Driver.) - LEGACY_FVEVOL
O64 - Services: CurCS - 21/11/2010 - C:\Windows\system32\drivers\http.sys (HTTP)  .(.Microsoft Corporation - HTTP Pile du protocole.) - LEGACY_HTTP
O64 - Services: CurCS - 21/11/2010 - C:\Windows\system32\drivers\hwpolicy.sys (hwpolicy)  .(.Microsoft Corporation - Hardware Policy Driver.) - LEGACY_HWPOLICY
O64 - Services: CurCS - 02/06/2012 - C:\Windows\System32\Drivers\ksecdd.sys (KSecDD)  .(.Microsoft Corporation - Kernel Security Support Provider Interface.) - LEGACY_KSECDD
O64 - Services: CurCS - 02/06/2012 - C:\Windows\System32\Drivers\ksecpkg.sys (KSecPkg)  .(.Microsoft Corporation - Kernel Security Support Provider Interface.) - LEGACY_KSECPKG
O64 - Services: CurCS - 14/07/2009 - C:\Windows\System32\DRIVERS\lltdio.sys (lltdio)  .(.Microsoft Corporation - Link-Layer Topology Mapper I/O Driver.) - LEGACY_LLTDIO
O64 - Services: CurCS - 14/07/2009 - C:\Windows\system32\drivers\luafv.sys (luafv)  .(.Microsoft Corporation - Pilote de filtre de virtualisation de fichi.) - LEGACY_LUAFV
O64 - Services: CurCS - 21/11/2010 - C:\Windows\system32\drivers\mountmgr.sys (mountmgr)  .(.Microsoft Corporation - Gestionnaire des points de montage.) - LEGACY_MOUNTMGR
O64 - Services: CurCS - 14/07/2009 - C:\Windows\system32\FirewallAPI.dll (mpsdrv)  .(.Microsoft Corporation - API du Pare-feu Windows.) - LEGACY_MPSDRV
O64 - Services: CurCS - 21/11/2010 - C:\Windows\system32\wkssvc.dll (mrxsmb)  .(.Microsoft Corporation - DLL du service Station de travail.) - LEGACY_MRXSMB
O64 - Services: CurCS - 21/11/2010 - C:\Windows\system32\wkssvc.dll (mrxsmb10)  .(.Microsoft Corporation - DLL du service Station de travail.) - LEGACY_MRXSMB10
O64 - Services: CurCS - 21/11/2010 - C:\Windows\system32\wkssvc.dll (mrxsmb20)  .(.Microsoft Corporation - DLL du service Station de travail.) - LEGACY_MRXSMB20
O64 - Services: CurCS - 14/07/2009 - C:\Windows\System32\drivers\msisadrv.sys (msisadrv)  .(.Microsoft Corporation - ISA Driver.) - LEGACY_MSISADRV
O64 - Services: CurCS - 14/07/2009 - C:\Windows\system32\drivers\mup.sys (Mup)  .(.Microsoft Corporation - Multiple UNC Provider Driver.) - LEGACY_MUP
O64 - Services: CurCS - 14/07/2009 - C:\Windows\System32\DRIVERS\nwifi.sys (NativeWifiP)  .(.Microsoft Corporation - Pilote de miniport WiFi natif.) - LEGACY_NATIVEWIFIP
O64 - Services: CurCS - 22/08/2012 - C:\Windows\system32\drivers\ndis.sys (NDIS)  .(.Microsoft Corporation - Pilote NDIS 6.20.) - LEGACY_NDIS
O64 - Services: CurCS - 21/11/2010 - C:\Windows\System32\DRIVERS\ndisuio.sys (Ndisuio)  .(.Microsoft Corporation - Pilote d’E/S du mode utilisateur NDIS.) - LEGACY_NDISUIO
O64 - Services: CurCS - 14/07/2009 - C:\Windows\System32\DRIVERS\netbios.sys (NetBIOS)  .(.Microsoft Corporation - NetBIOS interface driver.) - LEGACY_NETBIOS
O64 - Services: CurCS - 21/11/2010 - C:\Windows\system32\drivers\netbt.sys (NetBT)  .(.Microsoft Corporation - MBT Transport driver.) - LEGACY_NETBT
O64 - Services: CurCS - 14/07/2009 - C:\Windows\system32\drivers\nsiproxy.sys (nsiproxy)  .(.Microsoft Corporation - NSI Proxy.) - LEGACY_NSIPROXY
O64 - Services: CurCS - 14/07/2009 - C:\Windows\System32\drivers\pcw.sys (pcw)  .(.Microsoft Corporation - Performance Counters for Windows Driver.) - LEGACY_PCW
O64 - Services: CurCS - 14/07/2009 - C:\Windows\System32\drivers\peauth.sys (PEAUTH)  .(.Microsoft Corporation - Protected Environment Authentication and Au.) - LEGACY_PEAUTH
O64 - Services: CurCS - 21/11/2010 - C:\Windows\System32\drivers\pacer.sys (Psched)  .(.Microsoft Corporation - Planificateur de paquets QoS.) - LEGACY_PSCHED
O64 - Services: CurCS - 21/11/2010 - C:\Windows\system32\wkssvc.dll (rdbss)  .(.Microsoft Corporation - DLL du service Station de travail.) - LEGACY_RDBSS
O64 - Services: CurCS - 14/07/2009 - C:\Windows\system32\DRIVERS\RDPCDD.sys (RDPCDD)  .(.Microsoft Corporation - RDP Miniport.) - LEGACY_RDPCDD
O64 - Services: CurCS - 14/07/2009 - C:\Windows\system32\drivers\RDPENCDD.sys (RDPENCDD)  .(.Microsoft Corporation - RDP Encoder Miniport.) - LEGACY_RDPENCDD
O64 - Services: CurCS - 14/07/2009 - C:\Windows\system32\drivers\RdpRefMp.sys (RDPREFMP)  .(.Microsoft Corporation - RDP Reflector Driver Miniport.) - LEGACY_RDPREFMP
O64 - Services: CurCS - 14/07/2009 - C:\Windows\System32\DRIVERS\rspndr.sys (rspndr)  .(.Microsoft Corporation - Link-Layer Topology Responder Driver for ND.) - LEGACY_RSPNDR
O64 - Services: CurCS - 11/06/2009 - C:\Windows\System32\Drivers\secdrv.sys (secdrv)  .(.Macrovision Corporation, Macrovision Europe - Macrovision SECURITY Driver.) - LEGACY_SECDRV
O64 - Services: CurCS - 14/07/2009 - C:\Windows\System32\Drivers\spldr.sys (spldr)  .(.Microsoft Corporation - loader for security processor.) - LEGACY_SPLDR
O64 - Services: CurCS - 21/02/2013 - C:\Windows\system32\Drivers\sptd.sys (sptd)  .(.Duplex Secure Ltd. - SCSI Pass Through Direct Host.) - LEGACY_SPTD
O64 - Services: CurCS - 21/11/2010 - C:\Windows\system32\srvsvc.dll (srv)  .(.Microsoft Corporation - DLL du service Serveur.) - LEGACY_SRV
O64 - Services: CurCS - 21/11/2010 - C:\Windows\system32\srvsvc.dll (srv2)  .(.Microsoft Corporation - DLL du service Serveur.) - LEGACY_SRV2
O64 - Services: CurCS - 29/04/2011 - C:\Windows\System32\DRIVERS\srvnet.sys (srvnet)  .(.Microsoft Corporation - Server Network driver.) - LEGACY_SRVNET
O64 - Services: CurCS - 21/11/2010 - C:\Windows\system32\vmstorfltres.dll (storflt)  .(.Microsoft Corporation - Fichier DLL de ressources du filtre de stoc.) - LEGACY_STORFLT
O64 - Services: CurCS - 03/04/2012 - C:\Windows\system32\Drivers\SWIPsec.sys (SWIPsec)  .(.SonicWALL, Inc. - SonicWALL VPN Client IPsec Driver.) - LEGACY_SWIPSEC
O64 - Services: CurCS - 21/11/2010 - C:\Windows\system32\tcpipcfg.dll (Tcpip)  .(.Microsoft Corporation - Objets de configuration du réseau.) - LEGACY_TCPIP
O64 - Services: CurCS - 03/10/2012 - C:\Windows\System32\drivers\tcpipreg.sys (tcpipreg)  .(.Microsoft Corporation - TCP/IP Registry Compatibility Driver.) - LEGACY_TCPIPREG
O64 - Services: CurCS - 21/11/2010 - C:\Windows\system32\tcpipcfg.dll (tdx)  .(.Microsoft Corporation - Objets de configuration du réseau.) - LEGACY_TDX
O64 - Services: CurCS - 21/11/2010 - C:\Windows\System32\DRIVERS\udfs.sys (udfs)  .(.Microsoft Corporation - UDF File System Driver.) - LEGACY_UDFS
O64 - Services: CurCS - 14/07/2009 - C:\Windows\system32\drivers\vga.sys (VgaSave)  .(.Microsoft Corporation - VGA/Super VGA Video Driver.) - LEGACY_VGASAVE
O64 - Services: CurCS - 21/11/2010 - C:\Windows\system32\drivers\volmgrx.sys (volmgrx)  .(.Microsoft Corporation - Pilote d’extension du gestionnaire de volum.) - LEGACY_VOLMGRX
O64 - Services: CurCS - 21/11/2010 - C:\Windows\System32\drivers\volsnap.sys (volsnap)  .(.Microsoft Corporation - Pilote de cliché instantané du volume.) - LEGACY_VOLSNAP
O64 - Services: CurCS - 14/07/2009 - C:\Windows\system32\rascfg.dll (Wanarpv6)  .(.Microsoft Corporation - Objets de configuration RAS.) - LEGACY_WANARPV6
O64 - Services: CurCS - 26/07/2012 - C:\Windows\System32\drivers\Wdf01000.sys (Wdf01000)  .(.Microsoft Corporation - Runtime de l’infrastructure de pilotes en m.) - LEGACY_WDF01000
O64 - Services: CurCS - 14/07/2009 - C:\Windows\System32\DRIVERS\wfplwf.sys (WfpLwf)  .(.Microsoft Corporation - WFP NDIS 6.20 Lightweight Filter Driver.) - LEGACY_WFPLWF
O64 - Services: CurCS - 26/07/2012 - C:\Windows\System32\drivers\WudfPf.sys (WudfPf)  .(.Microsoft Corporation - Windows Driver Foundation - User-mode Drive.) - LEGACY_WUDFPF
~ Legacy: 79 Scanned in 00mn 00s



---\\ Associations Shell Spawning (O67)
O67 - Shell Spawning: <.bat> <batfile>[HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.cpl> <cplfile>[HKLM\..\cplopen\Command] (.Microsoft Corporation - Windows Control Panel.) -- C:\Windows\System32\control.exe
O67 - Shell Spawning: <.cmd> <cmdfile>[HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.com> <comfile>[HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.evt> <evtfile>[HKLM\..\open\Command] (.Microsoft Corporation - Lanceur du composant logiciel enfichable Observateur d’événements.) -- C:\Windows\System32\eventvwr.exe
O67 - Shell Spawning: <.exe> <exefile>[HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.html> <ChromeHTML>[HKLM\..\open\Command] (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
O67 - Shell Spawning: <.js> <JSFile>[HKLM\..\open\Command] (.Microsoft Corporation - Microsoft ® Windows Based Script Host.) -- C:\Windows\System32\WScript.exe
O67 - Shell Spawning: <.reg> <regfile>[HKLM\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\Windows\regedit.exe
O67 - Shell Spawning: <.html> <FirefoxHTML>[HKCU\..\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe
O67 - Shell Spawning: <.bat> <batfile>[HKCR\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.cpl> <cplfile>[HKCR\..\cplopen\Command] (.Microsoft Corporation - Windows Control Panel.) -- C:\Windows\System32\control.exe
O67 - Shell Spawning: <.cmd> <cmdfile>[HKCR\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.com> <comfile>[HKCR\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.evt> <evtfile>[HKCR\..\open\Command] (.Microsoft Corporation - Lanceur du composant logiciel enfichable Observateur d’événements.) -- C:\Windows\System32\eventvwr.exe
O67 - Shell Spawning: <.exe> <exefile>[HKCR\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.html> <FirefoxHTML>[HKCR\..\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe
O67 - Shell Spawning: <.js> <JSFile>[HKCR\..\open\Command] (.Microsoft Corporation - Microsoft ® Windows Based Script Host.) -- C:\Windows\System32\WScript.exe
O67 - Shell Spawning: <.reg> <regfile>[HKCR\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\Windows\regedit.exe
~ FASS Keys: 19 Scanned in 00mn 00s



---\\ Menu de démarrage Internet (SMI) (O68)
O68 - StartMenuInternet: <FIREFOX.EXE> <Mozilla Firefox>[HKLM\..\Shell\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe
O68 - StartMenuInternet: <Google Chrome> <Google Chrome>[HKLM\..\Shell\open\Command] (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
O68 - StartMenuInternet: <IEXPLORE.EXE> <Internet Explorer>[HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
~ Keys:  Scanned in 00mn 00s



---\\ Recherche d'infection sur les navigateurs internet (SBI) (O69)
O69 - SBI: SearchScopes [HKCU] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} [DefaultScope] - (Bing) - http://www.bing.com
~ Keys:  Scanned in 00mn 00s



---\\ Enumère les service demarrés par Svchost (SSS) (O83)
O83 - Search Svchost Services: AeLookupSvc (AeLookupSvc) . (.Microsoft Corporation - Service Expérience d’application.) -- C:\Windows\System32\aelupsvc.dll   [72192]
O83 - Search Svchost Services: CertPropSvc (CertPropSvc) . (.Microsoft Corporation - Service de propagation de certificats de cartes à puce Microsoft.) -- C:\Windows\System32\certprop.dll   [80384]
O83 - Search Svchost Services: SCPolicySvc (SCPolicySvc) . (.Microsoft Corporation - Service de propagation de certificats de cartes à puce Microsoft.) -- C:\Windows\System32\certprop.dll   [80384]
O83 - Search Svchost Services: lanmanserver (lanmanserver) . (.Microsoft Corporation - DLL du service Serveur.) -- C:\Windows\System32\srvsvc.dll   [236032]
O83 - Search Svchost Services: gpsvc (gpsvc) . (.Microsoft Corporation - Client de stratégie de groupe.) -- C:\Windows\System32\gpsvc.dll   [777728]
O83 - Search Svchost Services: IKEEXT (IKEEXT) . (.Microsoft Corporation - Extension IKE.) -- C:\Windows\System32\ikeext.dll   [853504]
O83 - Search Svchost Services: AudioSrv (AudioSrv) . (.Microsoft Corporation - Service Audio Windows.) -- C:\Windows\System32\Audiosrv.dll   [679424]
O83 - Search Svchost Services: Rasauto (Rasauto) . (.Microsoft Corporation - Gestionnaire de numérotation automatique d’accès distant.) -- C:\Windows\System32\rasauto.dll   [99328]
O83 - Search Svchost Services: Rasman (Rasman) . (.Microsoft Corporation - Gestionnaire de connexions d’accès distant.) -- C:\Windows\System32\rasmans.dll   [344064]
O83 - Search Svchost Services: Remoteaccess (Remoteaccess) . (.Microsoft Corporation - Gestionnaire d’interface dynamique.) -- C:\Windows\System32\mprdim.dll   [97792]
O83 - Search Svchost Services: SENS (SENS) . (.Microsoft Corporation - Service de notification d’événements système (SENS).) -- C:\Windows\System32\sens.dll   [64512]
O83 - Search Svchost Services: Sharedaccess (Sharedaccess) . (.Microsoft Corporation - Composants de l’application d’assistance à Microsoft NAT.) -- C:\Windows\System32\ipnathlp.dll   [359424]
O83 - Search Svchost Services: Tapisrv (Tapisrv) . (.Microsoft Corporation - Serveur de téléphonie Microsoft® Windows(TM).) -- C:\Windows\System32\tapisrv.dll   [316928]
O83 - Search Svchost Services: TermService (TermService) . (.Microsoft Corporation - Gestionnaire des connexions distantes du serveur hôte de session Burea.) -- C:\Windows\System32\termsrv.dll   [680960]
O83 - Search Svchost Services: wuauserv (wuauserv) . (.Microsoft Corporation - Agent de mise à jour automatique Windows Update.) -- C:\Windows\system32\wuaueng.dll   [2428952]
O83 - Search Svchost Services: BITS (BITS) . (.Microsoft Corporation - Service de transfert intelligent en arrière-plan.) -- C:\Windows\System32\qmgr.dll   [849920]
O83 - Search Svchost Services: ShellHWDetection (ShellHWDetection) . (.Microsoft Corporation - Dll des services Windows Shell.) -- C:\Windows\System32\shsvcs.dll   [370688]
O83 - Search Svchost Services: iphlpsvc (iphlpsvc) . (.Microsoft Corporation - Service offrant une connectivité IPv6 sur un réseau IPv4..) -- C:\Windows\System32\iphlpsvc.dll   [569344]
O83 - Search Svchost Services: seclogon (seclogon) . (.Microsoft Corporation - DLL de service d’ouverture de session secondaire.) -- C:\Windows\system32\seclogon.dll   [30720]
O83 - Search Svchost Services: AppInfo (AppInfo) . (.Microsoft Corporation - Service Informations d’application.) -- C:\Windows\System32\appinfo.dll   [70144]
O83 - Search Svchost Services: msiscsi (msiscsi) . (.Microsoft Corporation - Service de découverte iSCSI.) -- C:\Windows\System32\iscsiexe.dll   [156672]
O83 - Search Svchost Services: MMCSS (MMCSS) . (.Microsoft Corporation - Service Planificateur de classes multimédias.) -- C:\Windows\System32\mmcss.dll   [67584]
O83 - Search Svchost Services: winmgmt (winmgmt) . (.Microsoft Corporation - WMI.) -- C:\Windows\System32\wbem\WMIsvc.dll   [242688]
O83 - Search Svchost Services: SessionEnv (SessionEnv) . (.Microsoft Corporation - Service Configuration des services Bureau à distance.) -- C:\Windows\System32\sessenv.dll   [121856]
O83 - Search Svchost Services: browser (browser) . (.Microsoft Corporation - DLL du service Explorateur d’ordinateurs.) -- C:\Windows\System32\browser.dll   [136704]
O83 - Search Svchost Services: EapHost (EapHost) . (.Microsoft Corporation - Service EAPHost Microsoft.) -- C:\Windows\System32\eapsvc.dll   [111104]
O83 - Search Svchost Services: schedule (schedule) . (.Microsoft Corporation - Service du Planificateur de tâches.) -- C:\Windows\System32\schedsvc.dll   [1110016]
O83 - Search Svchost Services: hkmsvc (hkmsvc) . (.Microsoft Corporation - Service Gestion des clés.) -- C:\Windows\System32\kmsvc.dll   [90624]
O83 - Search Svchost Services: wercplsupport (wercplsupport) . (.Microsoft Corporation - Rapports et solutions aux problèmes.) -- C:\Windows\System32\wercplsupport.dll   [84480]
O83 - Search Svchost Services: ProfSvc (ProfSvc) . (.Microsoft Corporation - ProfSvc.) -- C:\Windows\System32\profsvc.dll   [209920]
O83 - Search Svchost Services: Themes (Themes) . (.Microsoft Corporation - DLL du service des thèmes Windows Shell.) -- C:\Windows\System32\themeservice.dll   [44544]
O83 - Search Svchost Services: BDESVC (BDESVC) . (.Microsoft Corporation - Service BDE.) -- C:\Windows\System32\bdesvc.dll   [100864]
O83 - Search Svchost Services: AppMgmt (AppMgmt) . (.Microsoft Corporation - Service Installation de logiciels.) -- C:\Windows\System32\appmgmts.dll   [193536]
~ Services: 33 Scanned in 00mn 00s



---\\ Recherche particulière à la racine du système (SPRF) (O84)
[MD5.161C716F044F2E85D7BB7182ABC00B63] [SPRF][18/09/2013] (...) -- C:\Users\Natacha\AppData\Local\Temp\ExchangePerflog_8484fa31fb8c3c550bb5cc1b.dat   [4572]
[MD5.2FA3823F28A02E5910ABC38AA65CB63A] [SPRF][23/05/2013] (...) -- C:\Users\Natacha\Desktop\AA_v3.exe   [735512]
[MD5.70AC7B178171E0C898B5AC0503F55CA8] [SPRF][17/09/2013] (...) -- C:\Users\Natacha\Desktop\cc_20130917_092118.reg   [114888]
[MD5.D94364B77C65DBB821723AE84BA9A0BB] [SPRF][11/09/2013] (...) -- C:\Users\Natacha\Desktop\récup.reg   [277977634]
[MD5.831CC84609ABE74AB26DFCFF1938473A] [SPRF][18/09/2013] (.Nicolas Coolman - ZHPDiag Setup.) -- C:\Users\Natacha\Desktop\ZHPDiag2.exe   [5143397]
[MD5.01EE03230DA351044751327C46CC34CB] [SPRF][25/01/2013] (.Dell - NELaunchX Module.) -- C:\Windows\Downloaded Program Files\NELaunchX.dll   [310784]
~ Files: 6 Scanned in 00mn 05s



---\\ Liste des exceptions du parefeu (FirewallRules) (O87)
O87 - FAEL: "RemoteAssistance-PnrpSvc-UDP-OUT-Active" | Out - Domain - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteAssistance-PnrpSvc-UDP-In-EdgeScope-Active" | In - Domain - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteAssistance-SSDPSrv-Out-TCP-Active" | Out - Domain - P6 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteAssistance-SSDPSrv-In-TCP-Active" | In - Domain - P6 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteAssistance-SSDPSrv-Out-UDP-Active" | Out - Domain - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteAssistance-SSDPSrv-In-UDP-Active" | In - Domain - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteAssistance-Out-TCP-Active" | Out - Domain - P6 - TRUE | .(.Microsoft Corporation - Assistance à distance Windows.) -- C:\Windows\system32\msra.exe
O87 - FAEL: "RemoteAssistance-In-TCP-EdgeScope-Active" | In - Domain - P6 - TRUE | .(.Microsoft Corporation - Assistance à distance Windows.) -- C:\Windows\system32\msra.exe
O87 - FAEL: "RemoteAssistance-DCOM-In-TCP-NoScope-Active" | In - Domain - P6 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteAssistance-RAServer-Out-TCP-NoScope-Active" | Out - Domain - P6 - TRUE | .(.Microsoft Corporation - Serveur COM d’assistance à distance Windows.) -- C:\Windows\system32\raserver.exe
O87 - FAEL: "RemoteAssistance-RAServer-In-TCP-NoScope-Active" | In - Domain - P6 - TRUE | .(.Microsoft Corporation - Serveur COM d’assistance à distance Windows.) -- C:\Windows\system32\raserver.exe
O87 - FAEL: "RemoteAssistance-PnrpSvc-UDP-OUT" | Out - Public - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteAssistance-PnrpSvc-UDP-In-EdgeScope" | In - Public - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteAssistance-Out-TCP" | Out - Public - P6 - TRUE | .(.Microsoft Corporation - Assistance à distance Windows.) -- C:\Windows\system32\msra.exe
O87 - FAEL: "RemoteAssistance-In-TCP-EdgeScope" | In - Public - P6 - TRUE | .(.Microsoft Corporation - Assistance à distance Windows.) -- C:\Windows\system32\msra.exe
O87 - FAEL: "RemoteFwAdmin-RPCSS-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteFwAdmin-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteFwAdmin-RPCSS-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteFwAdmin-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteEventLogSvc-RPCSS-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteEventLogSvc-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteEventLogSvc-RPCSS-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteEventLogSvc-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "MSDTC-RPCSS-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "MSDTC-KTMRM-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "MSDTC-Out-TCP" | Out - Public - P6 - FALSE | .(.Microsoft Corporation - Service Microsoft Distributed Transaction Coordinator.) -- C:\Windows\system32\msdtc.exe
O87 - FAEL: "MSDTC-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Service Microsoft Distributed Transaction Coordinator.) -- C:\Windows\system32\msdtc.exe
O87 - FAEL: "MSDTC-RPCSS-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "MSDTC-KTMRM-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "MSDTC-Out-TCP-NoScope" | Out - Domain - P6 - FALSE | .(.Microsoft Corporation - Service Microsoft Distributed Transaction Coordinator.) -- C:\Windows\system32\msdtc.exe
O87 - FAEL: "MSDTC-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Service Microsoft Distributed Transaction Coordinator.) -- C:\Windows\system32\msdtc.exe
O87 - FAEL: "RemoteTask-RPCSS-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteTask-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteTask-RPCSS-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteTask-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteSvcAdmin-RPCSS-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteSvcAdmin-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Applications Services et Contrôleur.) -- C:\Windows\system32\services.exe
O87 - FAEL: "RemoteSvcAdmin-RPCSS-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteSvcAdmin-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Applications Services et Contrôleur.) -- C:\Windows\system32\services.exe
O87 - FAEL: "NETDIS-FDRESPUB-WSD-Out-UDP" | Out - Domain - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "NETDIS-FDRESPUB-WSD-In-UDP" | In - Domain - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "NETDIS-LLMNR-Out-UDP" | Out - Domain - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "NETDIS-LLMNR-In-UDP" | In - Domain - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "NETDIS-FDPHOST-Out-UDP" | Out - Domain - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "NETDIS-FDPHOST-In-UDP" | In - Domain - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "NETDIS-UPnP-Out-TCP" | Out - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "NETDIS-SSDPSrv-Out-UDP" | Out - Domain - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "NETDIS-SSDPSrv-In-UDP" | In - Domain - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "NETDIS-FDRESPUB-WSD-Out-UDP-Active" | Out - Private - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "NETDIS-FDRESPUB-WSD-In-UDP-Active" | In - Private - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "NETDIS-LLMNR-Out-UDP-Active" | Out - Private - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "NETDIS-LLMNR-In-UDP-Active" | In - Private - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "NETDIS-FDPHOST-Out-UDP-Active" | Out - Private - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "NETDIS-FDPHOST-In-UDP-Active" | In - Private - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "NETDIS-UPnP-Out-TCP-Active" | Out - Private - P6 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "NETDIS-SSDPSrv-Out-UDP-Active" | Out - Private - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "NETDIS-SSDPSrv-In-UDP-Active" | In - Private - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "WMI-ASYNC-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Sink to receive asynchronous callbacks for WMI client application.) -- C:\Windows\system32\wbem\unsecapp.exe
O87 - FAEL: "WMI-WINMGMT-Out-TCP" | Out - Public - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "WMI-WINMGMT-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "WMI-RPCSS-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "WMI-ASYNC-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Sink to receive asynchronous callbacks for WMI client application.) -- C:\Windows\system32\wbem\unsecapp.exe
O87 - FAEL: "WMI-WINMGMT-Out-TCP-NoScope" | Out - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "WMI-WINMGMT-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "WMI-RPCSS-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "MsiScsi-Out-TCP" | Out - Public - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "MsiScsi-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "MsiScsi-Out-TCP-NoScope" | Out - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "MsiScsi-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "PerfLogsAlerts-DCOM-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "PerfLogsAlerts-PLASrv-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Performance Logs and Alerts DCOM Server.) -- C:\Windows\system32\plasrv.exe
O87 - FAEL: "PerfLogsAlerts-DCOM-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "PerfLogsAlerts-PLASrv-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Performance Logs and Alerts DCOM Server.) -- C:\Windows\system32\plasrv.exe
O87 - FAEL: "CoreNet-GP-LSASS-Out-TCP" | Out - Domain - P6 - TRUE | .(.Microsoft Corporation - Local Security Authority Process.) -- C:\Windows\system32\lsass.exe
O87 - FAEL: "CoreNet-DNS-Out-UDP" | Out - None - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "CoreNet-GP-Out-TCP" | Out - Domain - P6 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "CoreNet-IPHTTPS-Out" | Out - None - P6 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "CoreNet-Teredo-Out" | Out - None - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "CoreNet-Teredo-In" | In - None - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "CoreNet-DHCPV6-Out" | Out - None - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "CoreNet-DHCPV6-In" | In - None - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "CoreNet-DHCP-Out" | Out - None - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "CoreNet-DHCP-In" | In - None - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "FPS-LLMNR-Out-UDP" | Out - Domain - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "FPS-LLMNR-In-UDP" | In - Domain - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "FPS-SpoolSvc-In-TCP" | In - Public - P6 - TRUE | .(.Microsoft Corporation - Application sous-système spouleur.) -- C:\Windows\system32\spoolsv.exe
O87 - FAEL: "FPS-SpoolSvc-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Application sous-système spouleur.) -- C:\Windows\system32\spoolsv.exe
O87 - FAEL: "Collab-PNRP-SSDPSrv-Out-UDP" | Out - None - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "Collab-PNRP-SSDPSrv-In-UDP" | In - None - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "Collab-PNRP-Out-UDP" | Out - None - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "Collab-PNRP-In-UDP" | In - None - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "Collab-P2PHost-WSD-Out-UDP" | Out - None - P17 - FALSE | .(.Microsoft Corporation - Voisinage immédiat.) -- C:\Windows\system32\p2phost.exe
O87 - FAEL: "Collab-P2PHost-WSD-In-UDP" | In - None - P17 - FALSE | .(.Microsoft Corporation - Voisinage immédiat.) -- C:\Windows\system32\p2phost.exe
O87 - FAEL: "Collab-P2PHost-Out-TCP" | Out - None - P6 - FALSE | .(.Microsoft Corporation - Voisinage immédiat.) -- C:\Windows\system32\p2phost.exe
O87 - FAEL: "Collab-P2PHost-In-TCP" | In - None - P6 - TRUE | .(.Microsoft Corporation - Voisinage immédiat.) -- C:\Windows\system32\p2phost.exe
O87 - FAEL: "RVM-RPCSS-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RVM-VDSLDR-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Virtual Disk Service Loader.) -- C:\Windows\system32\vdsldr.exe
O87 - FAEL: "RVM-VDS-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Service de disque virtuel.) -- C:\Windows\system32\vds.exe
O87 - FAEL: "RVM-RPCSS-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RVM-VDSLDR-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Virtual Disk Service Loader.) -- C:\Windows\system32\vdsldr.exe
O87 - FAEL: "RVM-VDS-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Service de disque virtuel.) -- C:\Windows\system32\vds.exe
O87 - FAEL: "PNRPMNRS-SSDPSrv-Out-UDP" | Out - None - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "PNRPMNRS-SSDPSrv-In-UDP" | In - None - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "PNRPMNRS-PNRP-Out-UDP" | Out - None - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "PNRPMNRS-PNRP-In-UDP" | In - None - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "Microsoft-Windows-HomeGroup-ProvSvc-UDP3540-Out" | Out - Private - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "Microsoft-Windows-HomeGroup-ProvSvc-UDP3540-In" | In - Private - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "Microsoft-Windows-HomeGroup-ProvSvc-TCP3587-Out" | Out - Private - P6 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "Microsoft-Windows-HomeGroup-ProvSvc-TCP3587-In" | In - Private - P6 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "WMPNSS-UPnP-Out-TCP" | Out - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "WMPNSS-Out-TCP" |Out - Public - P6 - FALSE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.)
O87 - FAEL: "WMPNSS-In-TCP" |In - Public - P6 - FALSE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.)
O87 - FAEL: "WMPNSS-Out-UDP" |Out - Public - P17 - FALSE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.)
O87 - FAEL: "WMPNSS-In-UDP" |In - Public - P17 - FALSE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.)
O87 - FAEL: "WMPNSS-WMP-Out-TCP" | Out - Public - P6 - FALSE | .(.Microsoft Corporation - Lecteur Windows Media.) -- C:\Program Files (x86)\Windows Media Player\wmplayer.exe
O87 - FAEL: "WMPNSS-WMP-Out-UDP" | Out - Public - P17 - FALSE | .(.Microsoft Corporation - Lecteur Windows Media.) -- C:\Program Files (x86)\Windows Media Player\wmplayer.exe
O87 - FAEL: "WMPNSS-WMP-In-UDP" | In - Public - P17 - FALSE | .(.Microsoft Corporation - Lecteur Windows Media.) -- C:\Program Files (x86)\Windows Media Player\wmplayer.exe
O87 - FAEL: "WMPNSS-SSDPSrv-Out-UDP" | Out - Domain - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "WMPNSS-SSDPSrv-In-UDP" | In - Domain - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "WMPNSS-QWave-Out-TCP" | Out - Public - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "WMPNSS-QWave-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "WMPNSS-QWave-Out-UDP" | Out - Public - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "WMPNSS-QWave-In-UDP" | In - Public - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "WMPNSS-Out-TCP-NoScope" |Out - Domain - P6 - FALSE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.)
O87 - FAEL: "WMPNSS-In-TCP-NoScope" |In - Domain - P6 - FALSE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.)
O87 - FAEL: "WMPNSS-Out-UDP-NoScope" |Out - Domain - P17 - FALSE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.)
O87 - FAEL: "WMPNSS-In-UDP-NoScope" |In - Domain - P17 - FALSE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.)
O87 - FAEL: "WMPNSS-WMP-Out-TCP-NoScope" | Out - Domain - P6 - FALSE | .(.Microsoft Corporation - Lecteur Windows Media.) -- C:\Program Files (x86)\Windows Media Player\wmplayer.exe
O87 - FAEL: "WMPNSS-WMP-Out-UDP-NoScope" | Out - Domain - P17 - FALSE | .(.Microsoft Corporation - Lecteur Windows Media.) -- C:\Program Files (x86)\Windows Media Player\wmplayer.exe
O87 - FAEL: "WMPNSS-WMP-In-UDP-NoScope" | In - Domain - P17 - FALSE | .(.Microsoft Corporation - Lecteur Windows Media.) -- C:\Program Files (x86)\Windows Media Player\wmplayer.exe
O87 - FAEL: "WMPNSS-QWave-Out-TCP-NoScope" | Out - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "WMPNSS-QWave-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "WMPNSS-QWave-Out-UDP-NoScope" | Out - Domain - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "WMPNSS-QWave-In-UDP-NoScope" | In - Domain - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "WMP-Out-TCP" | Out - Domain - P6 - FALSE | .(.Microsoft Corporation - Lecteur Windows Media.) -- C:\Program Files (x86)\Windows Media Player\wmplayer.exe
O87 - FAEL: "WMP-Out-UDP" | Out - Domain - P17 - FALSE | .(.Microsoft Corporation - Lecteur Windows Media.) -- C:\Program Files (x86)\Windows Media Player\wmplayer.exe
O87 - FAEL: "WMP-In-UDP" | In - Domain - P17 - FALSE | .(.Microsoft Corporation - Lecteur Windows Media.) -- C:\Program Files (x86)\Windows Media Player\wmplayer.exe
O87 - FAEL: "SNMPTRAP-In-UDP-NoScope" | In - Domain - P17 - FALSE | .(.Microsoft Corporation - Interruption SNMP.) -- C:\Windows\system32\snmptrap.exe
O87 - FAEL: "SNMPTRAP-In-UDP" | In - Public - P17 - FALSE | .(.Microsoft Corporation - Interruption SNMP.) -- C:\Windows\system32\snmptrap.exe
O87 - FAEL: "RemoteDesktop-UserMode-In-TCP" | In - None - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "Microsoft-Windows-PeerDist-WSD-In" | In - None - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "Microsoft-Windows-PeerDist-WSD-Out" | Out - None - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "NetPres-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Connect to a Network Projector.) -- C:\Windows\system32\netproj.exe
O87 - FAEL: "NetPres-Out-TCP-NoScope" | Out - Domain - P6 - FALSE | .(.Microsoft Corporation - Connect to a Network Projector.) -- C:\Windows\system32\netproj.exe
O87 - FAEL: "NetPres-WSD-In-UDP" | In - None - P17 - FALSE | .(.Microsoft Corporation - Connect to a Network Projector.) -- C:\Windows\system32\netproj.exe
O87 - FAEL: "NetPres-WSD-Out-UDP" | Out - None - P17 - FALSE | .(.Microsoft Corporation - Connect to a Network Projector.) -- C:\Windows\system32\netproj.exe
O87 - FAEL: "NetPres-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Connect to a Network Projector.) -- C:\Windows\system32\netproj.exe
O87 - FAEL: "NetPres-Out-TCP" | Out - Public - P6 - FALSE | .(.Microsoft Corporation - Connect to a Network Projector.) -- C:\Windows\system32\netproj.exe
O87 - FAEL: "WPDMTP-Out-TCP-NoScope" | Out - Domain - P6 - FALSE | .(.Microsoft Corporation - Windows Driver Foundation - Processus hôte de l’infrastructure de pilotes.) -- C:\Windows\system32\wudfhost.exe
O87 - FAEL: "WPDMTP-Out-TCP" | Out - Public - P6 - FALSE | .(.Microsoft Corporation - Windows Driver Foundation - Processus hôte de l’infrastructure de pilotes.) -- C:\Windows\system32\wudfhost.exe
O87 - FAEL: "WPDMTP-SSDPSrv-In-UDP" | In - None - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "WPDMTP-SSDPSrv-Out-UDP" | Out - None - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "WPDMTP-UPnPHost-Out-TCP" | Out - None - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "WPDMTP-UPnP-Out-TCP" | Out - None - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "MCX-SSDPSrv-In-UDP" | In - None - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "MCX-SSDPSrv-Out-UDP" | Out - None - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "MCX-In-TCP" | In - None - P6 - FALSE | .(.Microsoft Corporation - Windows Media Center.) -- C:\Windows\ehome\ehshell.exe
O87 - FAEL: "MCX-Out-TCP" | Out - None - P6 - FALSE | .(.Microsoft Corporation - Windows Media Center.) -- C:\Windows\ehome\ehshell.exe
O87 - FAEL: "MCX-QWave-In-UDP" | In - None - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "MCX-QWave-Out-UDP" | Out - None - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "MCX-QWave-In-TCP" | In - None - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "MCX-QWave-Out-TCP" | Out - None - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "MCX-In-UDP" | In - None - P17 - FALSE | .(.Microsoft Corporation - Windows Media Center.) -- C:\Windows\ehome\ehshell.exe
O87 - FAEL: "MCX-Out-UDP" | Out - None - P17 - FALSE | .(.Microsoft Corporation - Windows Media Center.) -- C:\Windows\ehome\ehshell.exe
O87 - FAEL: "MCX-MCX2SVC-Out-TCP" | Out - None - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "MCX-Prov-Out-TCP" | Out - None - P6 - FALSE | .(.Microsoft Corporation - MCX2 Provisioning library.) -- C:\Windows\ehome\mcx2prov.exe
O87 - FAEL: "MCX-PlayTo-Out-TCP" | Out - None - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "MCX-McrMgr-Out-TCP" | Out - None - P6 - FALSE | .(.Microsoft Corporation - Media Center Extender Manager.) -- C:\Windows\ehome\mcrmgr.exe
O87 - FAEL: "MCX-PlayTo-Out-UDP" | Out - None - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "MCX-FDPHost-Out-TCP" | Out - None - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "SPPSVC-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Service de la plateforme de protection logicielle Microsoft.) -- C:\Windows\system32\sppsvc.exe
O87 - FAEL: "SPPSVC-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Service de la plateforme de protection logicielle Microsoft.) -- C:\Windows\system32\sppsvc.exe
O87 - FAEL: "TCP Query User{17DBF9AE-2201-4465-A159-D449891DDE6B}C:\program files\sonicwall\sonicwall global vpn client\swgvc.exe" | In - Private - P6 - TRUE | .(.SonicWALL, Inc..) -- C:\program files\sonicwall\sonicwall global vpn client\swgvc.exe
O87 - FAEL: "UDP Query User{6DB5DD5A-DE2A-483A-912C-3A2ABBD89BD2}C:\program files\sonicwall\sonicwall global vpn client\swgvc.exe" | In - Private - P17 - TRUE | .(.SonicWALL, Inc..) -- C:\program files\sonicwall\sonicwall global vpn client\swgvc.exe
O87 - FAEL: "TCP Query User{0647C2DE-FCCB-4AC4-9C0E-96B00EE98659}C:\program files\sonicwall\sonicwall global vpn client\swgvc.exe" | In - Public - P6 - TRUE | .(.SonicWALL, Inc..) -- C:\program files\sonicwall\sonicwall global vpn client\swgvc.exe
O87 - FAEL: "UDP Query User{495C98F1-A2D8-4D78-BE4E-386930706FA7}C:\program files\sonicwall\sonicwall global vpn client\swgvc.exe" | In - Public - P17 - TRUE | .(.SonicWALL, Inc..) -- C:\program files\sonicwall\sonicwall global vpn client\swgvc.exe
O87 - FAEL: "{4BAF8F62-9F12-412C-B8B4-3A6C66B6E99E}" | In - Private - P17 - TRUE | .(.Microsoft Corporation - Lecteur Windows Media.) -- C:\Program Files (x86)\Windows Media Player\wmplayer.exe
O87 - FAEL: "{0C1CD7E3-6DA4-4E27-A11E-D9FC6524B3B4}" | Out - Private - P17 - TRUE | .(.Microsoft Corporation - Lecteur Windows Media.) -- C:\Program Files (x86)\Windows Media Player\wmplayer.exe
O87 - FAEL: "{E4A5BE1B-0CC8-4296-958A-633D39F5EA4B}" | Out - Private - P6 - TRUE | .(.Microsoft Corporation - Lecteur Windows Media.) -- C:\Program Files (x86)\Windows Media Player\wmplayer.exe
O87 - FAEL: "{142DA4CD-4108-44EE-8387-23EE69C809F5}" | In - Private - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "{AB7D4BB3-267C-4B2B-AD2B-AEF6CCBBDD46}" | Out - Private - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "{6597AB7E-D5B5-4180-8CB9-F8D4D763B616}" | In - Private - P6 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "{DCD9AB51-5A91-4E66-9974-957803995B06}" | Out - Private - P6 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "{C3162F16-CEA3-4D26-B9AA-718E4022555C}" | In - Private - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "{8F4E23F1-FE24-454A-8D6B-4A9CBC93DA36}" | Out - Private - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "{2BF57F92-4FE2-4893-ABC7-AE37F9ECAA36}" | In - Private - P17 - TRUE | .(.Microsoft Corporation - Lecteur Windows Media.) -- C:\Program Files (x86)\Windows Media Player\wmplayer.exe
O87 - FAEL: "{F9224053-3A57-4E92-A86C-5E4EBB00FCC3}" | Out - Private - P17 - TRUE | .(.Microsoft Corporation - Lecteur Windows Media.) -- C:\Program Files (x86)\Windows Media Player\wmplayer.exe
O87 - FAEL: "{63E77962-F68E-499E-B75F-266CEAB35076}" | Out - Private - P6 - TRUE | .(.Microsoft Corporation - Lecteur Windows Media.) -- C:\Program Files (x86)\Windows Media Player\wmplayer.exe
O87 - FAEL: "{128D0445-1F5D-46AB-AECA-4620B886F7A2}" |In - Private - P17 - TRUE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.)
O87 - FAEL: "{8E1123D3-18D9-477C-874C-0693AC33C904}" |Out - Private - P17 - TRUE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.)
O87 - FAEL: "{AAD5650B-28A3-46F5-B3C1-6728A4DF3C35}" |In - Private - P6 - TRUE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.)
O87 - FAEL: "{E4E4399F-1471-4434-BED9-CC20395A334E}" |Out - Private - P6 - TRUE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.)
O87 - FAEL: "{A679D662-4339-4DAC-8265-233EFB627416}" | Out - Private - P6 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "{09A011CC-528D-4D5E-A448-E7FC0202A6E4}" | In - Private - P6 - TRUE | .(.Microsoft Corporation - Application sous-système spouleur.) -- C:\Windows\system32\spoolsv.exe
O87 - FAEL: "{6AEFBA6C-DA45-4339-991C-3A44DF6D3517}" | In - Private - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "{C327CF63-3C1A-450F-98B1-59C81EC710C6}" | Out - Private - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "{B19D262A-FEA8-4C3D-BEF3-819AC5E879A4}" | In - Public - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "{B2A3B849-B621-4E4B-A5B5-0D0CF4583729}" | Out - Public - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "{9A08A51C-1E6F-4BBD-BBB7-4D424C6F0971}" | In - Public - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "{32E5CE30-BC58-4E68-949D-DD40FE873F95}" | Out - Public - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "{44BFA73F-B929-4729-BAA1-DFE45882857E}" | Out - Public - P6 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "{D7CD6090-2A84-4F52-8511-BE869D35AC63}" | In - Public - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "{D3D12A8A-D406-4C1A-A30F-85B4D51A606F}" | Out - Public - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "{9F3BF9F6-F10B-4BD1-B8A9-2061CA4AA55C}" | In - Public - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "{92BCA1E6-7E09-4CC2-B755-2031B13CA0EE}" | Out - Public - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "{C5030B95-6A72-4305-9241-3A75314BF7CE}" | In - Public - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "{D740B67F-0CA7-4EDB-8DA2-8F7097F0D14C}" | Out - Public - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "{D80C880B-3602-4BEE-BC55-E76D83D712A4}" | In - Private - P6 - TRUE | .(.TeamViewer GmbH - TeamViewer 8.) -- C:\Program Files (x86)\TeamViewer\Version8\TeamViewer.exe
O87 - FAEL: "{927E4266-0E10-4CB9-AE95-9C5BF398A6E3}" | In - Private - P17 - TRUE | .(.TeamViewer GmbH - TeamViewer 8.) -- C:\Program Files (x86)\TeamViewer\Version8\TeamViewer.exe
O87 - FAEL: "{D0CA3953-1AB1-4D2B-B340-144A68EDDE1E}" | In - Private - P6 - TRUE | .(.TeamViewer GmbH - TeamViewer 8.) -- C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe
O87 - FAEL: "{76A6D093-48A9-4001-9F58-67C4671029FE}" | In - Private - P17 - TRUE | .(.TeamViewer GmbH - TeamViewer 8.) -- C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe
O87 - FAEL: "{75A495D8-1572-41FC-ABBA-1DE457885792}" | In - None - P17 - TRUE | .(.Skype Technologies S.A. - Skype.) -- C:\Program Files (x86)\Skype\Phone\Skype.exe
O87 - FAEL: "{41E5BDDA-1ED9-4701-9340-3E7EA62150BF}" | In - Public - P6 - TRUE | .(.Microsoft Corporation - Microsoft SharePoint Workspace.) -- C:\Program Files\Microsoft Office\Office14\GROOVE.exe
O87 - FAEL: "{C6E0C4F1-9D04-455D-94ED-1AFC06CDD5C5}" | In - Public - P17 - TRUE | .(.Microsoft Corporation - Microsoft SharePoint Workspace.) -- C:\Program Files\Microsoft Office\Office14\GROOVE.exe
O87 - FAEL: "{95C6D6B3-94B9-4E21-AFED-4FC26937BC4E}" | In - Public - P6 - TRUE | .(.Microsoft Corporation - Microsoft OneNote.) -- C:\Program Files\Microsoft Office\Office14\ONENOTE.exe
O87 - FAEL: "{8922F725-1FBF-4CF2-B15E-E5308DD84DC9}" | In - Public - P17 - TRUE | .(.Microsoft Corporation - Microsoft OneNote.) -- C:\Program Files\Microsoft Office\Office14\ONENOTE.exe
O87 - FAEL: "{C16DC32A-539E-41F7-BEC9-BE84ADD57666}" | In - Public - P17 - TRUE | .(.Microsoft Corporation - Microsoft Outlook.) -- C:\Program Files\Microsoft Office\Office14\outlook.exe
O87 - FAEL: "TCP Query User{9D23262E-25C3-4012-B5F4-3DAD3C583A4B}C:\program files (x86)\breezeconfig ds\brzmgr.exe" | In - Public - P6 - TRUE | .(.BreezeCOM - DS Configuration Utility.) -- C:\program files (x86)\breezeconfig ds\brzmgr.exe
O87 - FAEL: "UDP Query User{FDF819A1-FE96-42B3-A268-3B4760279867}C:\program files (x86)\breezeconfig ds\brzmgr.exe" | In - Public - P17 - TRUE | .(.BreezeCOM - DS Configuration Utility.) -- C:\program files (x86)\breezeconfig ds\brzmgr.exe
O87 - FAEL: "{92403179-1DB7-4084-AF79-CBA4BFF428A4}" | In - None - P17 - TRUE | .(.Skype Limited - Facebook Video Calling.) -- C:\Users\Natacha\AppData\Local\Facebook\Video\Skype\FacebookVideoCalling.exe
~ Firewall: 220 Scanned in 00mn 01s



---\\ Enumère les codes produits des logiciels (PUC) (O90)
O90 - PUC: "002473B0C29B03C4893E5812B9B19FB5" . (.MySQL Connector/ODBC 5.2(a).) -- C:\Windows\Installer\{0B374200-B92C-4C30-98E3-85219B1BF95B}\MySQLConnector.ico
O90 - PUC: "68AB67CA3301004F7706000000000030" . (.Adobe Acrobat 8 Professional - English, Français, Deutsch.) -- C:\Windows\Installer\{AC76BA86-1033-F400-7760-000000000003}\_SC_Acrobat.exe
O90 - PUC: "6A6C7A2588B61D7429E2F9A8E780E9A6" . (.Logiciel Intel(R) PROSet/Wireless WiFi.) -- C:\Windows\Installer\{52A7C6A6-6B88-47D1-922E-9F8A7E089E6A}\ARPPRODUCTICON.exe
O90 - PUC: "D412FA3206339794192355686D1EF15C" . (.SolidWorks eDrawings 2013.) -- C:\Windows\Installer\{23AF214D-3360-4979-9132-5586D6E11FC5}\eModelViewer1.exe
O90 - PUC: "DD3DB0B2E7FEEE34CA8560E114B2FFFE" . (.SonicWALL Global VPN Client.) -- C:\Windows\Installer\{2B0BD3DD-EF7E-43EE-AC58-061E412BFFEF}\_6FEFF9B68218417F98F549.exe
O90 - PUC: "E7FF67E4ABEA78C47B88DC745E24B5D9" . (.Skype™ 6.7.) -- C:\Windows\Installer\{4E76FF7E-AEBA-4C87-B788-CD47E5425B9D}\SkypeIcon.exe
O90 - PUC: "F7B2A371A53530444A454B5113FED0F7" . (.Remote Desktop Connection Manager.) -- C:\Windows\Installer\{173A2B7F-535A-4403-A454-B41531EF0D7F}\_6FEFF9B68218417F98F549.exe
~ Update Products: 37 Scanned in 00mn 00s



---\\ Recherche des packages WindowsInstaller (WIS) (O93) (NTFS)
[MD5.D46BB543E03D58B26DE2132EDC763C82] [WIS][21/01/2013] (.Intel(R) Corporation - Intel(R) WiFi.) -- C:\Windows\Installer\20d5f7.msi   [35692032]
[MD5.1474D26378C9B1B19F003398BF6D73AF] [WIS][24/05/2013] (.Dassault Systèmes SolidWorks Corp. - SolidWorks eDrawings 2013.) -- C:\Windows\Installer\5de4d9.msi   [6555648]
[MD5.E40EC80EB976D8B814FE137E4C49308F] [WIS][19/04/2013] (.Tlapia - sysTPL.) -- C:\Windows\Installer\6a77c9c.msi   [1376256]
[MD5.B1C861317B5A5D0755FBC53352C4B0A3] [WIS][01/08/2013] (.Skype Technologies S.A. - Skype.) -- C:\Windows\Installer\7553e.msi   [22614016]
~ WIS: 42 Scanned in 00mn 08s



---\\ Etat général des services not Microsoft (EGS) (SR=Running, SS=Stopped)
SR - | Auto 18/08/2009 203264 |  (AMD External Events Utility) . (.AMD.) - C:\Windows\System32\atiesrxx.exe
SR - | Auto 07/03/2013 45248 |  (avast! Antivirus) . (.AVAST Software.) - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
SR - | Auto 20/08/2008 1449984 |  (EvtEng) . (.Intel(R) Corporation.) - C:\Program Files\Intel\WiFi\bin\EvtEng.exe
SR - | Demand 20/04/2013 654848 |  (FLEXnet Licensing Service) . (.Macrovision Europe Ltd..) - C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
SS - | Auto 17/09/2013 136176 |  (gupdate) . (.Google Inc..) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
SS - | Demand 17/09/2013 136176 |  (gupdatem) . (.Google Inc..) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
SS - | Demand 19/08/2013 117656 |  (MozillaMaintenance) . (.Mozilla Foundation.) - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
SR - | Auto 20/08/2008 826368 |  (RegSrvc) . (.Intel(R) Corporation.) - C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
SS - | Auto 25/07/2013 162672 |  (SkypeUpdate) . (.Skype Technologies.) - C:\Program Files (x86)\Skype\Updater\Updater.exe
SR - | Auto 05/03/2013 581632 |  (SONICWALL_NetExtender) . (.Dell.) - C:\Program Files (x86)\SonicWALL\SSL-VPN\NetExtender\NEService64.exe
SR - | Auto 03/04/2012 287016 |  (SWGVCSvc) . (.SonicWALL, Inc..) - C:\Program Files\SonicWALL\SonicWALL Global VPN Client\SWGVCSvc.exe
SR - | Auto 23/04/2013 3574624 |  (TeamViewer8) . (.TeamViewer GmbH.) - C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe
SR - | Auto 14/07/2009 27136 | C:\Program Files (x86)\Windows Defender\mpsvc.dll (WinDefend) . (.Microsoft Corporation.) - C:\Windows\System32\svchost.exe
SR - | Auto 11/07/1658 0 |  (WMPNetworkSvc) . (...) - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe
SR - | Auto 14/07/2009 27136 | C:\Windows\system32\wuaueng.dll (wuauserv) . (.Microsoft Corporation.) - C:\Windows\System32\svchost.exe
~ Services:  Scanned in 00mn 10s



---\\ Recherche d'infection sur le Master Boot Record (MBR)(O80)
Run by Natacha at 18/09/2013 16:39:47
~ OS 64 not supported by MBR tool
~ MBR: 0 Scanned in 00mn 00s



---\\ Recherche d'infection sur le Master Boot Record (MBRCheck)(O80)
Written by ad13, http://ad13.geekstog
Run by Natacha at 18/09/2013 16:39:49

********* Dump file Name *********
C:\PhysicalDisk0_MBR.bin
~ MBR:  Scanned in 00mn 02s



---\\ Liste des émulateurs de CD/DVD (MBR Hook)
O42 - Logiciel: DAEMON Tools Lite - (.DT Soft Ltd.) [HKLM][64Bits] -- DAEMON Tools Lite
~ Emulateurs:  Scanned in 00mn 02s



---\\ Scan Additionnel (O88)
Database Version : 12920 - (17/09/2013)
Clés trouvées (Keys found) : 7
Valeurs trouvées (Values found) : 0
Dossiers trouvés  (Folders found) : 0
Fichiers trouvés  (Files found) : 1

[HKLM\Software\Classes\Interface\{3f607e46-0d3c-4442-b1de-de7fa4768f5c}]   =>Adware.RecordNRip
[HKLM\Software\Wow6432Node\Classes\Interface\{3f607e46-0d3c-4442-b1de-de7fa4768f5c}]   =>Adware.RecordNRip
[HKLM\Software\Classes\TypeLib\{93e3d79c-0786-48ff-9329-93bc9f6dc2b3}]   =>Adware.RecordNRip
[HKLM\Software\Classes\Interface\{fe0273d1-99df-4ac0-87d5-1371c6271785}]   =>Adware.RecordNRip
[HKLM\Software\Wow6432Node\Classes\Interface\{fe0273d1-99df-4ac0-87d5-1371c6271785}]   =>Adware.RecordNRip
[HKLM\Software\Classes\Interface\{79FB5FC8-44B9-4AF5-BADD-CCE547F953E5}]   =>Toolbar.Ask
[HKCU\Software\Softonic]   =>Toolbar.Conduit
C:\Users\Natacha\Downloads\speedupmypc.exe   =>Rogue.SpeedUpMyPC^
~ Additionnel Scan: 203565 Items scanned in 00mn 26s



---\\ Récapitulatif des détections trouvées sur votre station
~ http://nicolascoolman.webs.com/apps/blog/show/29507721-toolbar-conduit   =>Toolbar.Conduit
~ http://nicolascoolman.webs.com/apps/blog/show/33047509-rogue-speedupmypc   =>Rogue.SpeedUpMyPC
~ http://nicolascoolman.webs.com/apps/blog/show/27350807-adware-recordnrip   =>Adware.RecordNRip
~ http://nicolascoolman.webs.com/apps/blog/show/28927746-toolbar-ask   =>Toolbar.Ask
~ MSI: 4 link(s) detected in 00mn 26s



End of the scan (2192 lines in 03mn 12s)(0)