~ ZHPDiag v2015.8.24.125 Par Nicolas Coolman (2015/08/24)
~ Démarré par celine (Administrator) (2015/08/25 13:27:59)
~ Site: http://www.nicolascoolman.fr
~ Facebook: https://www.facebook.com/nicolascoolman1
~ Etat de la version: Version OK
~ Mode: Scanner
~ Rapport: C:\Users\celine\Desktop\ZHPDiag.txt
~ Rapport: C:\Users\celine\AppData\Roaming\ZHP\ZHPDiag.txt
~ UAC: Deactivate
~ Démarrage du système: Normal (Normal boot)
Windows 7 Home Premium, 64-bit Service Pack 1 (Build 7601)

---\\ Navigateurs Internet (4) - 0s
GCIE: Google Chrome v26.0.1410.64
MFIE: Mozilla Firefox 40.0.2 (x86 fr) v40.0.2
OPIE: Opera 31.0.1889.174 v31.0.1889.174
MSIE: Internet Explorer v10.0.9200.16635

---\\ Informations sur les produits Windows (4) - 21s
~ Windows Server License Manager Script : OK
~ Licence Script File Génération : OK
Windows Automatic Updates : OK (Auto)
Windows Activation Technologies : OK

---\\ Logiciels de protection (3) - 22s
Avast Free Antivirus v10.3.2225
Malwarebytes Anti-Malware version 2.1.6.1022
Windows Defender W7 (Activate)

---\\ Logiciels d'optimisation (1) - 26s
CCleaner v5.07

---\\ Surveillance de Logiciels (2) - 27s
Adobe Flash Player 18 NPAPI
Adobe Reader XI

---\\ Informations sur le système (6) - 0s
~ Operating System: AMD64 Family 20 Model 1 Stepping 0, AuthenticAMD
~ Operating System: 64-bit
~ Boot mode: Normal (Normal boot)
Total RAM: 3909.532 MB (38% free)
~ System Restore: Activé (Enable)
~ System drive C: has 187 GB free of 595 GB

---\\ Mode de connexion au système (3) - 0s
~ Computer Name: CELINE-PC
~ User Name: celine
~ Logged in as Administrator

---\\ Enumération des unités disques (2) - 0s
~ Drive C: has 187 GB free of 595 GB (System)
~ Drive D: has GB free of 0 GB

---\\ Etat du Centre de Sécurité Windows (11) - 2s
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiSpywareOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallOverride: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoActiveDesktopChanges: Modified
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] EnableLUA: Modified
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: Modified
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: Modified
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK
[HKLM\SYSTEM\CurrentControlSet\Services\COMSysApp] Type: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install] LastSuccessTime : OK

---\\ Recherche particulière de fichiers génériques (23) - 4s
[MD5.332FEAB1435662FC6C672E25BEB37BE3] - (.Microsoft Corporation - Explorateur Windows.) () -- C:\Windows\Explorer.exe [2871808]
[MD5.DD81D91FF3B0763C392422865C9AC12E] - (.Microsoft Corporation - Processus hôte Windows (Rundll32).) () -- C:\Windows\System32\rundll32.exe [45568]
[MD5.94355C28C1970635A31B3FE52EB7CEBA] - (.Microsoft Corporation - Application de démarrage de Windows.) () -- C:\Windows\System32\Wininit.exe [129024]
[MD5.FAF6EC2460AD5FBBD38D8E1AE28B0D77] - (.Microsoft Corporation - Extensions Internet pour Win32.) () -- C:\Windows\System32\wininet.dll [2241024]
[MD5.1151B1BAA6F350B1DB6598E0FEA7C457] - (.Microsoft Corporation - Application d’ouverture de session Windows.) () -- C:\Windows\System32\Winlogon.exe [390656]
[MD5.067FA52BFB59A56110A12312EF9AF243] - (.Microsoft Corporation - Bibliothèque de licences.) () -- C:\Windows\System32\sppcomapi.dll [232448]
[MD5.0D57D091E06BB1E58E72E5D08479FDDF] - (.Microsoft Corporation - DLL client de l’API uilisateur de Windows m.) () -- C:\Windows\System32\fr-FR\user32.dll.mui [20480]
[MD5.1C7857B62DE5994A75B054A9FD4C3825] - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) () -- C:\Windows\System32\drivers\AFD.sys [498688]
[MD5.02062C0B390B7729EDC9E69C680A6F3C] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) () -- C:\Windows\System32\drivers\atapi.sys [24128]
[MD5.B8BD2BB284668C84865658C77574381A] - (.Microsoft Corporation - CD-ROM File System Driver.) () -- C:\Windows\System32\drivers\Cdfs.sys [92160]
[MD5.F036CE71586E93D94DAB220D7BDF4416] - (.Microsoft Corporation - SCSI CD-ROM Driver.) () -- C:\Windows\System32\drivers\Cdrom.sys [147456]
[MD5.9BB2EF44EAA163B29C4A4587887A0FE4] - (.Microsoft Corporation - DFS Namespace Client Driver.) () -- C:\Windows\System32\drivers\DfsC.sys [102400]
[MD5.97BFED39B6B79EB12CDDBFEED51F56BB] - (.Microsoft Corporation - High Definition Audio Bus Driver.) () -- C:\Windows\System32\drivers\HDAudBus.sys [122368]
[MD5.FA55C73D4AFFA7EE23AC4BE53B4592D3] - (.Microsoft Corporation - Pilote de port i8042.) () -- C:\Windows\System32\drivers\i8042prt.sys [105472]
[MD5.AF9B39A7E7B6CAA203B3862582E9F2D0] - (.Microsoft Corporation - IP Network Address Translator.) () -- C:\Windows\System32\drivers\IpNat.sys [116224]
[MD5.A5D9106A73DC88564C825D317CAC68AC] - (.Microsoft Corporation - Windows NT SMB Minirdr.) () -- C:\Windows\System32\drivers\MRxSmb.sys [158208]
[MD5.09594D1089C523423B32A4229263F068] - (.Microsoft Corporation - MBT Transport driver.) () -- C:\Windows\System32\drivers\netBT.sys [261632]
[MD5.B98F8C6E31CD07B2E6F71F7F648E38C0] - (.Microsoft Corporation - Pilote du système de fichiers NT.) () -- C:\Windows\System32\drivers\ntfs.sys [1656680]
[MD5.0086431C29C35BE1DBC43F52CC273887] - (.Microsoft Corporation - Pilote de port parallèle.) () -- C:\Windows\System32\drivers\Parport.sys [97280]
[MD5.471815800AE33E6F1C32FB1B97C490CA] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) () -- C:\Windows\System32\drivers\Rasl2tp.sys [129536]
[MD5.548260A7B8654E024DC30BF8A7C5BAA4] - (.Microsoft Corporation - SMB Transport driver.) () -- C:\Windows\System32\drivers\smb.sys [93184]
[MD5.DDAD5A7AB24D8B65F8D724F5C20FD806] - (.Microsoft Corporation - TDI Translation Driver.) () -- C:\Windows\System32\drivers\tdx.sys [119296]
[MD5.0D08D2F3B3FF84E433346669B5E0F639] - (.Microsoft Corporation - Pilote de cliché instantané du volume.) () -- C:\Windows\System32\drivers\volsnap.sys [295808]

---\\ Processus lancés (100) - 58s
[MD5.5F7E97EA9D7D4B531F59DDB29DDF674D] - (.AMD - AMD External Events Service Module.) -- C:\Windows\system32\atiesrxx.exe [203776] [PID.920] ©
[MD5.203577ABAC6247467CF1EBDFC0749681] - (.Optimal Software s.r.o. - PC Speed Up Service.) -- C:\Program Files (x86)\PC Speed Up\PCSUService.exe [445384] [PID.1072] =>PUP.Optional.PCSpeedUp
[MD5.9A9ADB6E47A61C2258ADF768B1D058E2] - (.AMD - AMD External Events Client Module.) -- C:\Windows\system32\atieclxx.exe [479744] [PID.1176] ©
[MD5.4956380A54B1C9E6BFDF3D80DACB9698] - (.AVAST Software - avast! Service.) -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe [146600] [PID.1476] ©
[MD5.ABDD5AD016AFFD34AD40E944CE94BF59] - (.SEIKO EPSON CORPORATION - eEBAPI Core Process module.) -- C:\Program Files (x86)\Common Files\EPSON\EBAPI\eEBSvc.exe [94208] [PID.1032] ©
[MD5.B33CF4DE909A5B30F526D82053A63C8E] - (.ABBYY - ABBYY network license server.) -- C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe [759048] [PID.1960] ©
[MD5.013697369EAFFA675D0671607F036020] - (.Adobe Systems Incorporated - Adobe Acrobat Update Service.) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [82128] [PID.2096] ©
[MD5.CE25662965FD665531B1A2B151192369] - (.Cinema PlusV17.08 - CinemaPlus-4.5vV17.08 exe.) -- C:\Program Files (x86)\CinemaPlus-4.5vV17.08\c157e037-50d1-4479-b6e0-dd53801f1f9b-6.exe [1505360] [PID.2112] =>PUP.Optional.CrossRider
[MD5.7EF47644B74EBE721CC32211D3C35E76] - (.Apple Inc. - MobileDeviceService.) -- C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [55144] [PID.2160] ©
[MD5.1E70AB382A933B3E74D9C5A16F7B28B5] - (.Cinema PlusV17.08 - CinemaPlus-4.5vV17.08 exe.) -- C:\Program Files (x86)\CinemaPlus-4.5vV17.08\c157e037-50d1-4479-b6e0-dd53801f1f9b-1-6.exe [1558608] [PID.2368] =>PUP.Optional.CrossRider
[MD5.C6FF00DA1605982E616C03BE809FFE2D] - (.Google Inc. - Programme d'installation de Google.) -- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [144200] [PID.2472] ©
[MD5.7C9E009811744E815C545869FF8BD743] - (.csdimedia.com - Max Driver Updater.) -- C:\Program Files (x86)\Max Driver Updater\maxdu.exe [9726168] [PID.2552] =>PUP.Optional.MaxDriverUpdater
[MD5.EBBCD5DFBB1DE70E8F4AF8FA59E401FD] - (.Apple Inc. - Bonjour Service.) -- C:\Program Files\Bonjour\mDNSResponder.exe [462184] [PID.2632] ©
[MD5.790138769D9B8AFC2E4722E63DD6575A] - (.CyberLink Corp. - clear.fi Resident Program.) -- C:\Program Files (x86)\Acer\clear.fi\MVP\clear.fiAgent.exe [120104] [PID.2828] ©
[MD5.32C2CD16DC801AEF9EDAAFEA0DBD769E] - (.Dritek System Inc. - Dritek WMI Service.) -- C:\Program Files (x86)\Launch Manager\dsiwmis.exe [352848] [PID.2876]
[MD5.C058352639E9749EDE92CD9760CACE5F] - (.Dritek System Inc. - Launch Manager Worker.) -- C:\Program Files (x86)\Launch Manager\LMworker.exe [334416] [PID.2952]
[MD5.AC5C64F828C0A6A1350971501AC2A0C7] - (.Acer Incorporated - ePowerSvc.) -- C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe [872552] [PID.2976] ©
[MD5.F74285FC99CC90594619D6C85CCF37B7] - (.Dritek System Inc. - Launch Manager utility process.) -- C:\Program Files (x86)\Launch Manager\LMutilps32.exe [416848] [PID.2984]
[MD5.0191DEE9B9EB7902AF2CF4F67301095D] - (.Acer Incorporated - Global Registration Service.) -- C:\Program Files (x86)\Acer\Registration\GREGsvc.exe [23584] [PID.2120] ©
[MD5.61A8E0AAFAC36659DA093A8073A56A35] - (...) -- C:\Program Files (x86)\ED2F3280-1439984681-815C-3B5B-E06995AD0640\hnst1526.tmp [137728] [PID.2168] =>PUP.Optional.CrossRider
[MD5.70A020EC3EDED7061A92569964FC6201] - (.CyberLink - DMREngine.) -- C:\Program Files (x86)\Acer\clear.fi\MVP\.\Kernel\DMR\DMREngine.exe [169352] [PID.2700] ©
[MD5.5839A8027D6D324A7CD494051A96628C] - (.Symantec Corporation - Norton Online Backup Service.) -- C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe [2804568] [PID.2812] ©
[MD5.6CC09D2F0BA4A09BABC3C41B8FD888F7] - (.NTI Corporation - Backup Manager Module.) -- C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe [257344] [PID.2204] ©
[MD5.5BF00D7670928F70645B16B3FFB91DBF] - (.VoiceFive, Inc. - PremierOpinion.) -- C:\Program Files (x86)\PremierOpinion\pmservice.exe [206136] [PID.2376] =>PUP.Optional.PremierOpinion
[MD5.B16CE7A151B702AD0195D5047B6341BE] - (.Optimal Software s.r.o. - SpeedCheckerService.) -- C:\Program Files (x86)\PC Speed Up\SpeedCheckerService.exe [45000] [PID.1160] =>PUP.Optional.InternetSpeedChecker
[MD5.CBB0434AD181CA8EEAD5CF876DF8AB52] - (...) -- C:\Users\celine\AppData\Local\mpck_fr_017010064\upmpck_fr_017010064.exe [3331728] [PID.2384] =>PUP.Optional.MobilePCStarterKit
[MD5.6F0EA33558994E832D60B6D78245CDBE] - (.Synaptics Incorporated - Synaptics TouchPad Enhancements.) -- C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2723624] [PID.3356] ©
[MD5.BDC4918CF2A9224BDCBF1C78E1D3569E] - (.Realtek Semiconductor - Gestionnaire audio HD Realtek.) -- C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [11831400] [PID.3364]
[MD5.13F8A10F1CD89DB7778C56A60C1B4919] - (.Acer Incorporated - ePowerTray.) -- C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe [1831528] [PID.3372] ©
[MD5.2E570D03FA146EB4B1A40164B3873C7D] - (.Piriform Ltd - CCleaner.) -- C:\Program Files\CCleaner\CCleaner64.exe [8358680] [PID.3388] ©
[MD5.D87A04DD9C7C4D05031139BB0045EA93] - (.Nosibay - Selection Tools.) -- C:\Users\celine\AppData\Roaming\WTools\Selection Tools\Selection Tools.exe [1530640] [PID.3416] =>PUP.Optional.Nosibay
[MD5.5D4FB5AB1F601FC2AFC36B331A961862] - (...) -- C:\ProgramData\6f66c052-8827-4487-9031-09becb0cf541\plugincontainer.exe [1194200] [PID.3432] =>PUP.Optional.CrossRider
[MD5.AC8E8F43012ED96FC3F8907F8DA4083C] - (.Synaptics Incorporated - Synaptics Pointing Device Helper.) -- C:\Program Files\Synaptics\SynTP\SynTPHelper.exe [121640] [PID.3464] ©
[MD5.B3AE90E51839948870DDA73869280D0B] - (.Copyright (C) 2015 - .) -- C:\Users\celine\AppData\Local\wd\wd.exe [327680] [PID.3568]
[MD5.EE6E2A04EB7366D735494824A98D0BDF] - (.Copyright (C) 2015 - .) -- C:\Users\celine\AppData\Local\Chromatic\Utils\Updater.exe [171008] [PID.3580]
[MD5.6F4677B319DE7EA434028F90C6A9E531] - (.News © 2015 - News Application.) -- C:\Users\celine\AppData\Roaming\News\news.exe [373760] [PID.3620] =>PUP.Optional.BredoLab
[MD5.0B864EF18BACD7869C5D52B768514389] - (.GOOBZO - .) -- C:\Program Files (x86)\YouTube Accelerator\YouTubeAccelerator.exe [2226120] [PID.3696] =>PUP.Optional.Goobzo
[MD5.4DA9032A78E39CACB2563FEC7F202033] - (...) -- C:\Program Files (x86)\Optimizer Pro 3.99\OptProSmartScan.exe [423056] [PID.3824] =>PUP.Optional.OptimizerPro
[MD5.E08C40B2FC3D3EBEE62CF377F7D49DFB] - (...) -- C:\Program Files (x86)\Optimizer Pro 3.99\OptProReminder.exe [893072] [PID.3848] =>PUP.Optional.OptimizerPro
[MD5.747D01A34FC5CE922D9C54910E5EBCB4] - (.Live_Soft_Action S.R.L. - GetNowUpdater.) -- C:\Users\celine\AppData\Roaming\GetNowUpdater\bin\GetNowUpdater.exe [7328368] [PID.3932] =>PUP.Optional.GetNow
[MD5.650CFD82FB1D41B3BC4C1C81379F3DF3] - (...) -- C:\ProgramData\87737dd0-ad90-4193-bd48-336966b8d777\plugincontainer.exe [1202952] [PID.3940] =>PUP.Optional.CrossRider
[MD5.E7EA57B35951D093A9647D8D5CE3340D] - (.Egis Technology Inc. - PMM Update Application.) -- C:\Program Files (x86)\EgisTec IPS\PmmUpdate.exe [407920] [PID.3272] ©
[MD5.E1146D6B1BA24F9CFDA120257B9782B4] - (...) -- C:\Program Files (x86)\OLBPre\OLBPre.exe [2463744] [PID.2360] =>PUP.Optional.MyPCBackup
[MD5.F0A99E3E103375FF23815C3E87C0FB57] - (.Dritek System Inc. - Launch Manager.) -- C:\Program Files (x86)\Launch Manager\LManager.exe [1092688] [PID.4156]
[MD5.153F088DFDB3F940AD9DAEB04A3ACC4D] - (.SoftBrain Technologies Ltd. - SmartWeb helper.) -- C:\Users\celine\AppData\Local\SmartWeb\SmartWebHelper.exe [270368] [PID.4176] =>PUP.Optional.SmartWebSearch
[MD5.D6FE9E0F705794A86F87A01B222290EF] - (.AVAST Software - avast! Antivirus.) -- C:\Program Files\AVAST Software\Avast\AvastUI.exe [6109776] [PID.4192] ©
[MD5.344B3152C4DD682DE5834E4E117DEEFF] - (...) -- C:\Program Files (x86)\mpck_fr_017010064\mpck_fr_017010064.exe [3978896] [PID.4216] =>PUP.Optional.MobilePCStarterKit
[MD5.FDD052AEB5B709BC2C39F8024B06BD10] - (...) -- C:\Program Files (x86)\gmsd_fr_005010064\gmsd_fr_005010064.exe [3979920] [PID.4404] =>PUP.Optional.CrossRider
[MD5.2C1499836C15A66C8FDDBEC0DB48CCED] - (...) -- C:\Program Files (x86)\gmsd_fr_005010065\gmsd_fr_005010065.exe [3979920] [PID.4436] =>PUP.Optional.CrossRider
[MD5.74547840E0497483B2CED55FCE1735DC] - (.Dritek System Inc. - MMDx64Fx Application.) -- C:\Program Files (x86)\Launch Manager\MMDx64Fx.exe [228432] [PID.4540]
[MD5.44069C2AC699C8DAD80A96FB1C8DFE57] - (.SoftBrain Technologies Ltd. - SmartWeb Application.) -- C:\Users\celine\AppData\Local\SmartWeb\SmartWebApp.exe [557088] [PID.4684] =>PUP.Optional.SmartWebSearch
[MD5.A1EB2B44E43E4BA2499F5C9A25C5B401] - (.ShopperPro - ShopperPro Update Service.) -- C:\Program Files\Common Files\ShopperPro\spbiu.exe [2346416] [PID.4732] =>PUP.Optional.ShopperPro
[MD5.DC1AA3868108B8FF57F6C8045FCD4603] - (.Egis Technology Inc. - EgisUpdate Release Application.) -- C:\Program Files (x86)\EgisTec IPS\EgisUpdate.exe [201584] [PID.4936] ©
[MD5.C9B9373A0A430C11F0213E359D0772B2] - (.TeamViewer GmbH - TeamViewer Remote Control Application.) -- C:\Program Files (x86)\TeamViewer\Version7\TeamViewer_Service.exe [2848168] [PID.5056]
[MD5.50CD93A35E713D0114612D09474F0E07] - (...) -- C:\Program Files (x86)\Common Files\6f66c052-8827-4487-9031-09becb0cf541\updater.exe [704728] [PID.4588] =>PUP.Optional.CrossRider
[MD5.EEF022CAB6D84F928AD8E29C9E9481DB] - (...) -- C:\Program Files (x86)\Common Files\87737dd0-ad90-4193-bd48-336966b8d777\updater.exe [710408] [PID.3288] =>PUP.Optional.CrossRider
[MD5.A9A44226715526BAC2B78852F1E5EEE2] - (...) -- C:\Program Files (x86)\Coupoon\UpdateCheck.exe [53040] [PID.1556]
[MD5.662BCD1C5B95577800F2A1B6E36C8B9A] - (.VoiceFive, Inc. - PremierOpinion.) -- C:\Program Files (x86)\PremierOpinion\pmropn.exe [3536696] [PID.2724] =>PUP.Optional.PremierOpinion
[MD5.22970F166B43A5FDC9A63981D27AA4E6] - (...) -- C:\Program Files (x86)\WInterEnhancer\WInterEnhancer Internet Enhancer\InternetEnhancerService.exe [1154560] [PID.5328] =>PUP.Optional.Wajam
[MD5.2BACD71123F42CEA603F4E205E1AE337] - (.Microsoft Corp. - Microsoft® Windows Live ID Service.) -- C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2292096] [PID.5376] ©
[MD5.E9A168576AEC62925C939FD8D43FCD41] - (.WN - WN Client Service.) -- C:\Program Files (x86)\Wordinator_1.10.0.20\Service\wsvc.exe [300120] [PID.5680] =>PUP.Optional.Generic
[MD5.52655C3779CBB93C795D9EC92E2FF99B] - (.GOOBZO - .) -- C:\Program Files (x86)\YouTube Accelerator\YouTubeAcceleratorService.exe [1509320] [PID.5776] =>PUP.Optional.Goobzo
[MD5.2A46FFE841EC43001D5A293A54DB34DE] - (.Microsoft Corp. - Microsoft® Windows Live ID Service Monitor.) -- C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE [223104] [PID.6096] ©
[MD5.90B95B6EDAAF0580B3F0E1D7078E9EE3] - (.Acer Incorporated - ePowerEvent.) -- C:\Program Files\Acer\Acer ePower Management\ePowerEvent.exe [467560] [PID.6436] ©
[MD5.CCC3FE1DDCCF99633539B3D7681EF7D7] - (.Avast Software - AvastVirtualBox Interface.) -- C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe [4047768] [PID.6364] ©
[MD5.B055D48079FEE353315A13A17CB38093] - (.Web Bar Media - Web Bar.) -- C:\Program Files\WebBar\2.0.5659.26749\wb.exe [226072] [PID.860] =>PUP.Optional.WebBar
[MD5.BB2A3FB2BAEFB9CB774104D0858DCC20] - (...) -- C:\ProgramData\6f66c052-8827-4487-9031-09becb0cf541\plugins\3\Plugin.exe [1364184] [PID.7988] =>PUP.Optional.CrossRider
[MD5.FC71B2E6AA8F890352F9F1D594A591FF] - (...) -- C:\ProgramData\6f66c052-8827-4487-9031-09becb0cf541\plugins\8\Plugin.exe [1371352] [PID.8064] =>PUP.Optional.CrossRider
[MD5.3E2B45A2F995E1D325D7C1B15935B2DB] - (...) -- C:\ProgramData\87737dd0-ad90-4193-bd48-336966b8d777\plugins\7\Plugin.exe [1046280] [PID.7984] =>PUP.Optional.CrossRider
[MD5.1B8A153D7852300A23D00F5378246A2C] - (...) -- C:\ProgramData\6f66c052-8827-4487-9031-09becb0cf541\plugins\10\Plugin.exe [1073368] [PID.5356] =>PUP.Optional.CrossRider
[MD5.502BE29034259BE9D856A51EDF852686] - (...) -- C:\ProgramData\6f66c052-8827-4487-9031-09becb0cf541\plugins\5\Plugin.exe [1365720] [PID.7244] =>PUP.Optional.CrossRider
[MD5.D584C2A42009E4257103A31421B8146E] - (...) -- C:\ProgramData\87737dd0-ad90-4193-bd48-336966b8d777\plugins\3\Plugin.exe [1363208] [PID.8164] =>PUP.Optional.CrossRider
[MD5.35AF820DB4608A661BA61C303CED05ED] - (...) -- C:\ProgramData\87737dd0-ad90-4193-bd48-336966b8d777\plugins\4\Plugin.exe [913160] [PID.5360] =>PUP.Optional.CrossRider
[MD5.0ABDE7BC25601A8F9AFC4B9F423CF954] - (...) -- C:\ProgramData\6f66c052-8827-4487-9031-09becb0cf541\plugins\6\Plugin.exe [1180376] [PID.6788] =>PUP.Optional.CrossRider
[MD5.C6EFF9AB8504D85FBA34A30B44D50349] - (...) -- C:\ProgramData\87737dd0-ad90-4193-bd48-336966b8d777\plugins\12\Plugin.exe [754952] [PID.7124] =>PUP.Optional.CrossRider
[MD5.35C85096C8C68B0656D61C5896CA35C9] - (...) -- C:\ProgramData\87737dd0-ad90-4193-bd48-336966b8d777\plugins\8\Plugin.exe [1360648] [PID.5284] =>PUP.Optional.CrossRider
[MD5.B7E740D74E078F025539144B49BED6BF] - (...) -- C:\ProgramData\87737dd0-ad90-4193-bd48-336966b8d777\plugins\10\Plugin.exe [1079560] [PID.7588] =>PUP.Optional.CrossRider
[MD5.3469A0C0EC01AD55B76C398CE8AD9C9E] - (...) -- C:\Users\celine\AppData\Local\Temp\isdkuPMPYhaH\ISightHost.exe [3072] [PID.7152]
[MD5.BB2A3FB2BAEFB9CB774104D0858DCC20] - (...) -- C:\ProgramData\6f66c052-8827-4487-9031-09becb0cf541\plugins\3\Plugin.exe [1364184] [PID.3408] =>PUP.Optional.CrossRider
[MD5.D584C2A42009E4257103A31421B8146E] - (...) -- C:\ProgramData\87737dd0-ad90-4193-bd48-336966b8d777\plugins\3\Plugin.exe [1363208] [PID.8256] =>PUP.Optional.CrossRider
[MD5.C6EFF9AB8504D85FBA34A30B44D50349] - (...) -- C:\ProgramData\87737dd0-ad90-4193-bd48-336966b8d777\plugins\12\Plugin.exe [754952] [PID.8632] =>PUP.Optional.CrossRider
[MD5.F2BE3C01E1D4E56D2F4D3132865C690F] - (.VoiceFive, Inc. - PremierOpinion.) -- C:\Program Files (x86)\PremierOpinion\pmropn32.exe [160568] [PID.8744] =>PUP.Optional.PremierOpinion
[MD5.D9C76527EE40E1ED3B024C3641B24193] - (.VoiceFive, Inc. - PremierOpinion.) -- C:\Program Files (x86)\PremierOpinion\pmropn64.exe [190264] [PID.8752] =>PUP.Optional.PremierOpinion
[MD5.3E2B45A2F995E1D325D7C1B15935B2DB] - (...) -- C:\ProgramData\87737dd0-ad90-4193-bd48-336966b8d777\plugins\7\Plugin.exe [1046280] [PID.8876] =>PUP.Optional.CrossRider
[MD5.D8E1AD384B0307F55F1E47DDCEBD83F4] - (...) -- C:\ProgramData\6f66c052-8827-4487-9031-09becb0cf541\plugins\7\Plugin.exe [1051864] [PID.8940] =>PUP.Optional.CrossRider
[MD5.D8E1AD384B0307F55F1E47DDCEBD83F4] - (...) -- C:\ProgramData\6f66c052-8827-4487-9031-09becb0cf541\plugins\7\Plugin.exe [1051864] [PID.4592] =>PUP.Optional.CrossRider
[MD5.B1B0E709BD0DF696CD4242006BBF02C9] - (...) -- C:\ProgramData\6f66c052-8827-4487-9031-09becb0cf541\plugins\2\Plugin.exe [1875672] [PID.4112] =>PUP.Optional.CrossRider
[MD5.F9E078A7F3590E59B02B06CA30231B18] - (...) -- C:\ProgramData\87737dd0-ad90-4193-bd48-336966b8d777\plugins\5\Plugin.exe [1368840] [PID.1708] =>PUP.Optional.CrossRider
[MD5.EE7CFC2E767D611294F3FDDFEDC60EEB] - (...) -- C:\ProgramData\87737dd0-ad90-4193-bd48-336966b8d777\plugins\2\Plugin.exe [1874184] [PID.7172] =>PUP.Optional.CrossRider
[MD5.DB75009D05FCA8CF5030AB4646660687] - (. - EBKC24.) -- C:\Program Files (x86)\WInterEnhancer\WInterEnhancer Internet Enhancer\InternetEnhancer.exe [286208] [PID.8800] =>PUP.Optional.Wajam
[MD5.C23D0E12C5DCD51698A4EADC526FE92C] - (.Optimal Software s.r.o. - PC Speed Up Notifier.) -- C:\Program Files (x86)\PC Speed Up\PCSUNotifier.exe [354760] [PID.7436] =>PUP.Optional.PCSpeedUp
[MD5.4E9592BB2C100E571F82640E59E9ECD5] - (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [1312720] [PID.11756] ©
[MD5.4E9592BB2C100E571F82640E59E9ECD5] - (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [1312720] [PID.9424] ©
[MD5.4E9592BB2C100E571F82640E59E9ECD5] - (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [1312720] [PID.12268] ©
[MD5.4E9592BB2C100E571F82640E59E9ECD5] - (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [1312720] [PID.2188] ©
[MD5.4E9592BB2C100E571F82640E59E9ECD5] - (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [1312720] [PID.11492] ©
[MD5.4E9592BB2C100E571F82640E59E9ECD5] - (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [1312720] [PID.10708] ©
[MD5.4E9592BB2C100E571F82640E59E9ECD5] - (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [1312720] [PID.7104] ©
[MD5.2E3157E1B1A8CAE1103A4AB492C44EA8] - (.Nicolas Coolman - ZHPDiag.) -- C:\Users\celine\Downloads\ZHPDiag3.exe [1904640] [PID.7088] ©
[MD5.D5732D16B5260E531A7E317578AB80D0] - (.The Chromatic Authors - Chromatic.) -- C:\Users\celine\AppData\Local\Chromatic\application\chromatic.exe [858240] [PID.11588] =>PUP.Optional.ChromaticBrowser

---\\ Google Chrome, Démarrage,Recherche,Extensions (3) - 0s
G2 - GCE: Preference [User Data\Default] [ghniahbfffagblmaglgeafcghebaeipj] Get The Results Hub =>PUP.Optional.GetTheResultsHub
G2 - GCE: Preference [User Data\Default] [loaeenplafbdbdcgalcficpbehagljkc] Sale Clipper =>PUP.Optional.SaleClipper
G2 - GCE: Preference [User Data\Default] [poihgldcgdeiiclapfocpigklbcgjlff] Record Page =>PUP.Optional.RecordPage

---\\ Firefox, Plugins,Demarrage,Recherche,Extensions (18) - 27s
M0 - MFSP: prefs.js [celine - faid2y99.default] http://fr.search.yahoo.com/?fr=hp-ddc-bd&type=bl-bfr-tr-rhb-34__alt__ddc_dsssyc_bd_com
P2 - EXT FILE: (...) -- C:\Users\celine\AppData\Roaming\Mozilla\Firefox\Profiles\faid2y99.default\extensions\{26a46a2e-a565-42b9-a3f1-96dc63b2a3cc}.xpi
P2 - EXT FILE: (...) -- C:\Users\celine\AppData\Roaming\Mozilla\Firefox\Profiles\faid2y99.default\extensions\{3dd63e6b-580c-47a3-b808-37c2eab6547d}.xpi
P2 - EXT FILE: (...) -- C:\Users\celine\AppData\Roaming\Mozilla\Firefox\Profiles\faid2y99.default\extensions\{dc7fecd4-e78d-4375-af4a-9d2144a98a94}.xpi
P2 - EXT FILE: (...) -- C:\Users\celine\AppData\Roaming\Mozilla\Firefox\Profiles\faid2y99.default\searchplugins\Dregol.xml =>PUP.Optional.Browser
P2 - EXT FILE: (...) -- C:\Users\celine\AppData\Roaming\Mozilla\Firefox\Profiles\faid2y99.default\searchplugins\yahoo-search.xml =>PUP.Optional.BDYahoo
P2 - EXT FILE: (...) -- C:\Users\celine\AppData\Roaming\Mozilla\Firefox\Profiles\faid2y99.default\searchplugins\yahoo.xml =>PUP.Optional.BDYahoo
P2 - EXT: (.Mozilla - Default.) -- C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
P2 - EXT: (.lightningnewtab.com - deskCut.) -- C:\Users\celine\AppData\Roaming\Mozilla\Firefox\Profiles\faid2y99.default\extensions\deskCutv2@gmail.com =>PUP.Optional.LightningNewTab
P2 - EXT: (.Cinema PlusV17.08 - CinemaPlus-4.5vV17.08.) -- C:\Users\celine\AppData\Roaming\Mozilla\Firefox\Profiles\faid2y99.default\extensions\DXYYH4339170@JXVPYKS65865478.com
P2 - EXT: (.Goobzo - Shopper-Pro.) -- C:\Users\celine\AppData\Roaming\Mozilla\Firefox\Profiles\faid2y99.default\extensions\{746505DC-0E21-4667-97F8-72EA6BCF5EEF} =>PUP.Optional.Goobzo
P2 - EXT: (. - 9a7a67d3304847fbacded0f7ae51f86a.) -- C:\Users\celine\AppData\Roaming\Mozilla\Firefox\Profiles\faid2y99.default\extensions\{9a7a67d3-3048-47fb-acde-d0f7ae51f86a}
P2 - EXT: (. - d48a39ba8f804fce8ee1bc710561c55d.) -- C:\Users\celine\AppData\Roaming\Mozilla\Firefox\Profiles\faid2y99.default\extensions\{d48a39ba-8f80-4fce-8ee1-bc710561c55d}
P2 - FPN: [HKLM] [@adobe.com/FlashPlayer] - (.Adobe Systems Incorporated.) -- C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_18_0_0_232.dll
P2 - FPN: [HKLM] [@Apple.com/iTunes,version=1.0] - (.Apple Inc..) -- C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll
P2 - FPN: [HKLM] [@mcafee.com/SAFFPlugin] - (.McAfee Inc..) -- C:\Program Files (x86)\McAfee\SiteAdvisor\npmcffplg32.dll
P2 - FPN: [HKLM] [@staging.google.com/globalUpdate Update;version=10] - (.globalUpdate.) -- C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\npglobalupdateUpdate4.dll =>PUP.Optional.GlobalUpdate
P2 - FPN: [HKLM] [@staging.google.com/globalUpdate Update;version=4] - (.globalUpdate.) -- C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\npglobalupdateUpdate4.dll =>PUP.Optional.GlobalUpdate

---\\ Opera, Démarrage,Recherche,Plugins (6) - 2s
B2 - EXT: [CinemaPlus-4.5vV17.08] C:\Users\celine\AppData\Roaming\Opera Software\Opera Stable\Extensions\bfaohpmjmhdgnjblojekjlnadhehiadj
B2 - EXT: [{background:{scripts:[background.js]}content_scrip] C:\Users\celine\AppData\Roaming\Opera Software\Opera Stable\Extensions\ghniahbfffagblmaglgeafcghebaeipj
B2 - EXT: [kbnfbcpkiaganjpcanopcgeoehkleeck] C:\Users\celine\AppData\Roaming\Opera Software\Opera Stable\Extensions\kbnfbcpkiaganjpcanopcgeoehkleeck
B2 - EXT: [{background:{scripts:[background.js]}content_scrip] C:\Users\celine\AppData\Roaming\Opera Software\Opera Stable\Extensions\loaeenplafbdbdcgalcficpbehagljkc
B2 - EXT: [pdnfnkhpgegpcingjbfihlkjeighnddk] C:\Users\celine\AppData\Roaming\Opera Software\Opera Stable\Extensions\pdnfnkhpgegpcingjbfihlkjeighnddk
B2 - EXT: [{background:{scripts:[background.js]}content_scrip] C:\Users\celine\AppData\Roaming\Opera Software\Opera Stable\Extensions\poihgldcgdeiiclapfocpigklbcgjlff

---\\ Internet Explorer,Démarrage,Recherche,URLSearchHook (18) - 0s
R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://fr.search.yahoo.com/
R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.mystartsearch.com/ =>PUP.Optional.StartSearch
R0 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://www.mystartsearch.com/ =>PUP.Optional.StartSearch
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.mystartsearch.com/ =>PUP.Optional.StartSearch
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.mystartsearch.com/ =>PUP.Optional.StartSearch
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.mystartsearch.com/ =>PUP.Optional.StartSearch
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.mystartsearch.com/ =>PUP.Optional.StartSearch
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURLs,Tabs = res://ieframe.dll/tabswelcome.htm
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\AboutURLs,Tabs = res://ieframe.dll/tabswelcome.htm
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = http://www.mystartsearch.com/ =>PUP.Optional.StartSearch
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.mystartsearch.com/ =>PUP.Optional.StartSearch
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.mystartsearch.com/ =>PUP.Optional.StartSearch
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk
R3 - URLSearchHook: (no name) - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} Orphean =>.Microsoft Internet Explorer

---\\ Internet Explorer,Proxy Management (8) - 1s
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = <-loopback>
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http=127.0.0.1:50499;https=127.0.0.1:50499 =>Hijacker.Proxy
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyHttp1.1 = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll
R5 - HKLM\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0

---\\ Internet Explorer,IniFiles, Autoloading programs (3) - 0s
F2 - REG:system.ini: UserInit=userinit.exe (.Microsoft Corporation.)
F2 - REG:system.ini: Shell=C:\Windows\explorer.exe (.Microsoft Corporation.)
F2 - REG:system.ini: VMApplet=C:\Windows\SysWOW64\SystemPropertiesPerformance.exe (.Microsoft Corporation.)

---\\ Etude du fichier hosts (1) - 0s
~ Le fichier hôte est sain (The hosts file is clean) (21)

---\\ Browser Helper Object de navigateur (BHO) (3) - 1s
O2 - BHO: avast! Online Security [64Bits] - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} . (.AVAST Software - IE Webrep plugin.) -- C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll ©
O2 - BHO: Windows Live ID Sign-in Helper [64Bits] - {9030D464-4C02-4ABF-8ECC-5164760863C6} . (.Microsoft Corp. - Microsoft® Windows Live ID Login Helper.) -- C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll ©
O2 - BHO: ShopperProBHO [64Bits] - {A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C} . (.Goobzo Ltd. - ShopperPro Extension.) -- C:\ProgramData\ShopperPro\ShopperPro64.dll =>PUP.Optional.ShopperPro

---\\ Applications lancées au démarrage du système (55) - 15s
O4 - HKLM\..\Run: [SynTPEnh] %ProgramFiles%\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [RTHDVCPL] . (.Realtek Semiconductor - Gestionnaire audio HD Realtek.) -- C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
O4 - HKLM\..\Run: [Power Management] . (.Acer Incorporated - ePowerTray.) -- C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe ©
O4 - HKCU\..\Run: [CCleaner Monitoring] . (.Piriform Ltd - CCleaner.) -- C:\Program Files\CCleaner\CCleaner64.exe ©
O4 - HKCU\..\Run: [WindApp] C:\Users\celine\AppData\Roaming\Store\WindApp\WindApp.exe (.not file.) =>PUP.Optional.Nosibay
O4 - HKCU\..\Run: [Selection Tools] . (.Nosibay - Selection Tools.) -- C:\Users\celine\AppData\Roaming\WTools\Selection Tools\Selection Tools.exe =>PUP.Optional.Nosibay
O4 - HKCU\..\Run: [Adobe Reader Synchronizer] . (.Adobe Systems Incorporated - Adobe Collaboration Synchronizer 11.0.) -- C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AdobeCollabSync.exe =>PUP.Optional.Nosibay
O4 - HKCU\..\Run: [Chromatic] . (.The Chromatic Authors - Chromatic.) -- C:\Users\celine\AppData\Local\Chromatic\application\chromatic.exe =>PUP.Optional.ChromaticBrowser
O4 - HKCU\..\Run: [WatchDog] . (.Copyright (C) 2015 - .) -- C:\Users\celine\AppData\Local\wd\wd.exe
O4 - HKCU\..\Run: [Updater] . (.Copyright (C) 2015 - .) -- C:\Users\celine\AppData\Local\Chromatic\Utils\Updater.exe
O4 - HKCU\..\Run: [News] . (.News © 2015 - News Application.) -- C:\Users\celine\AppData\Roaming\News\news.exe =>PUP.Optional.BredoLab
O4 - HKCU\..\Run: [GoobzoYouTubeAccelerator] . (.GOOBZO - .) -- C:\Program Files (x86)\YouTube Accelerator\YouTubeAccelerator.exe =>PUP.Optional.Goobzo
O4 - HKCU\..\Run: [Optimizer Pro] . (...) -- C:\Program Files (x86)\Optimizer Pro 3.99\OptProLauncher.exe =>PUP.Optional.OptimizerPro
O4 - HKCU\..\Run: [GetNowRecovery] . (.LiveSoft Action - GetNowUpdater Recovery.) -- C:\Users\celine\AppData\Roaming\GetNowUpdaterRecovery\recovery\GNUBootstrapper_Recovery.exe =>PUP.Optional.GetNow
O4 - HKCU\..\Run: [GetNowUpdater] . (.Live_Soft_Action S.R.L. - GetNowUpdater.) -- C:\Users\celine\AppData\Roaming\GetNowUpdater\bin\GetNowUpdater.exe =>PUP.Optional.GetNow
O4 - HKCU\..\Run: [PCSpeedUp] . (.Optimal Software s.r.o. - PC Speed Up Notifier.) -- C:\Program Files (x86)\PC Speed Up\PCSUNotifier.exe =>PUP.Optional.PCSpeedUp
O4 - HKCU\..\Run: [UpdateAdmin] . (.DownloadAdmin - .) -- C:\Users\celine\AppData\Local\UpdateAdmin\UpdateAdmin.exe =>PUP.Optional.UpdateAdmin
O4 - HKLM\..\Wow6432Node\Run: [EgisTecPMMUpdate] . (.Egis Technology Inc. - PMM Update Application.) -- C:\Program Files (x86)\EgisTec IPS\PmmUpdate.exe ©
O4 - HKLM\..\Wow6432Node\Run: [EgisUpdate] . (.Egis Technology Inc. - EgisUpdate Release Application.) -- C:\Program Files (x86)\EgisTec IPS\EgisUpdate.exe ©
O4 - HKLM\..\Wow6432Node\Run: [LManager] . (.Dritek System Inc. - Launch Manager.) -- C:\Program Files (x86)\Launch Manager\LManager.exe
O4 - HKLM\..\Wow6432Node\Run: [StartCCC] . (.Advanced Micro Devices, Inc. - Catalyst® Control Center Launcher.) -- C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe
O4 - HKLM\..\Wow6432Node\Run: [AvastUI.exe] . (.AVAST Software - avast! Antivirus.) -- C:\Program Files\AVAST Software\Avast\AvastUI.exe ©
O4 - HKLM\..\Wow6432Node\Run: [mpck_fr_017010064] . (...) -- C:\Program Files (x86)\mpck_fr_017010064\mpck_fr_017010064.exe =>PUP.Optional.MobilePCStarterKit
O4 - HKLM\..\Wow6432Node\Run: [MovieDea] . (.MovieDea - MovieDea.) -- C:\Program Files (x86)\MovieDea\MovieDea.exe =>PUP.Optional.MovieDea
O4 - HKLM\..\Wow6432Node\Run: [SmartWeb] . (.SoftBrain Technologies Ltd. - SmartWeb helper.) -- C:\Users\celine\AppData\Local\SmartWeb\SmartWebHelper.exe =>PUP.Optional.SmartWebSearch
O4 - HKLM\..\Wow6432Node\Run: [gmsd_fr_005010064] . (...) -- C:\Program Files (x86)\gmsd_fr_005010064\gmsd_fr_005010064.exe =>PUP.Optional.CrossRider
O4 - HKLM\..\Wow6432Node\Run: [gmsd_fr_005010065] . (...) -- C:\Program Files (x86)\gmsd_fr_005010065\gmsd_fr_005010065.exe =>PUP.Optional.CrossRider
O4 - HKLM\..\Wow6432Node\RunOnce: [Kesetar] . (.Microsoft Corporation - Microsoft ® Windows Based Script Host.) -- C:\Windows\SysWOW64\wscript.exe ©
O4 - HKLM\..\Wow6432Node\RunOnce: [upgmsd_fr_005010064.exe] . (...) -- C:\Users\celine\AppData\Local\gmsd_fr_005010064\upgmsd_fr_005010064.exe =>PUP.Optional.CrossRider
O4 - HKLM\..\Wow6432Node\RunOnce: [upgmsd_fr_005010065.exe] . (...) -- C:\Users\celine\AppData\Local\gmsd_fr_005010065\upgmsd_fr_005010065.exe =>PUP.Optional.CrossRider
O4 - HKLM\..\Wow6432Node\RunOnce: [upmpck_fr_017010064.exe] . (...) -- C:\Users\celine\AppData\Local\mpck_fr_017010064\upmpck_fr_017010064.exe =>PUP.Optional.MobilePCStarterKit
O4 - HKLM\..\Wow6432Node\RunOnce: [updpcc_en_009010064.exe] . (...) -- C:\Users\celine\AppData\Local\DailyPcClean Support\updpcc_en_009010064.exe =>PUP.Optional.DailyPCClean
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe
O4 - HKUS\.DEFAULT\..\RunOnce: [IsMyWinLockerReboot] . (.Microsoft Corporation - Installateur Windows®.) -- C:\Windows\System32\msiexec.exe ©
O4 - HKUS\.DEFAULT\..\RunOnce: [Del33188760] . (.Microsoft Corporation - Interpréteur de commandes Windows.) -- C:\Windows\System32\cmd.exe ©
O4 - HKUS\.DEFAULT\..\RunOnce: [Del12010438] . (.Microsoft Corporation - Interpréteur de commandes Windows.) -- C:\Windows\System32\cmd.exe ©
O4 - HKUS\S-1-5-18\..\RunOnce: [IsMyWinLockerReboot] . (.Microsoft Corporation - Installateur Windows®.) -- C:\Windows\System32\msiexec.exe ©
O4 - HKUS\S-1-5-18\..\RunOnce: [Del33188760] . (.Microsoft Corporation - Interpréteur de commandes Windows.) -- C:\Windows\System32\cmd.exe ©
O4 - HKUS\S-1-5-18\..\RunOnce: [Del12010438] . (.Microsoft Corporation - Interpréteur de commandes Windows.) -- C:\Windows\System32\cmd.exe ©
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe ©
O4 - HKUS\S-1-5-19\..\RunOnce: [IsMyWinLockerReboot] . (.Microsoft Corporation - Installateur Windows®.) -- C:\Windows\System32\msiexec.exe ©
O4 - HKUS\S-1-5-21-382916488-428852241-3986568732-1000\..\Run: [CCleaner Monitoring] . (.Piriform Ltd - CCleaner.) -- C:\Program Files\CCleaner\CCleaner64.exe ©
O4 - HKUS\S-1-5-21-382916488-428852241-3986568732-1000\..\Run: [WindApp] C:\Users\celine\AppData\Roaming\Store\WindApp\WindApp.exe (.not file.) =>PUP.Optional.Nosibay
O4 - HKUS\S-1-5-21-382916488-428852241-3986568732-1000\..\Run: [Selection Tools] . (.Nosibay - Selection Tools.) -- C:\Users\celine\AppData\Roaming\WTools\Selection Tools\Selection Tools.exe =>PUP.Optional.Nosibay
O4 - HKUS\S-1-5-21-382916488-428852241-3986568732-1000\..\Run: [Adobe Reader Synchronizer] . (.Adobe Systems Incorporated - Adobe Collaboration Synchronizer 11.0.) -- C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AdobeCollabSync.exe =>PUP.Optional.Nosibay
O4 - HKUS\S-1-5-21-382916488-428852241-3986568732-1000\..\Run: [Chromatic] . (.The Chromatic Authors - Chromatic.) -- C:\Users\celine\AppData\Local\Chromatic\application\chromatic.exe =>PUP.Optional.ChromaticBrowser
O4 - HKUS\S-1-5-21-382916488-428852241-3986568732-1000\..\Run: [WatchDog] . (.Copyright (C) 2015 - .) -- C:\Users\celine\AppData\Local\wd\wd.exe
O4 - HKUS\S-1-5-21-382916488-428852241-3986568732-1000\..\Run: [Updater] . (.Copyright (C) 2015 - .) -- C:\Users\celine\AppData\Local\Chromatic\Utils\Updater.exe
O4 - HKUS\S-1-5-21-382916488-428852241-3986568732-1000\..\Run: [News] . (.News © 2015 - News Application.) -- C:\Users\celine\AppData\Roaming\News\news.exe =>PUP.Optional.BredoLab
O4 - HKUS\S-1-5-21-382916488-428852241-3986568732-1000\..\Run: [GoobzoYouTubeAccelerator] . (.GOOBZO - .) -- C:\Program Files (x86)\YouTube Accelerator\YouTubeAccelerator.exe =>PUP.Optional.Goobzo
O4 - HKUS\S-1-5-21-382916488-428852241-3986568732-1000\..\Run: [Optimizer Pro] . (...) -- C:\Program Files (x86)\Optimizer Pro 3.99\OptProLauncher.exe =>PUP.Optional.OptimizerPro
O4 - HKUS\S-1-5-21-382916488-428852241-3986568732-1000\..\Run: [GetNowRecovery] . (.LiveSoft Action - GetNowUpdater Recovery.) -- C:\Users\celine\AppData\Roaming\GetNowUpdaterRecovery\recovery\GNUBootstrapper_Recovery.exe =>PUP.Optional.GetNow
O4 - HKUS\S-1-5-21-382916488-428852241-3986568732-1000\..\Run: [GetNowUpdater] . (.Live_Soft_Action S.R.L. - GetNowUpdater.) -- C:\Users\celine\AppData\Roaming\GetNowUpdater\bin\GetNowUpdater.exe =>PUP.Optional.GetNow
O4 - HKUS\S-1-5-21-382916488-428852241-3986568732-1000\..\Run: [PCSpeedUp] . (.Optimal Software s.r.o. - PC Speed Up Notifier.) -- C:\Program Files (x86)\PC Speed Up\PCSUNotifier.exe =>PUP.Optional.PCSpeedUp
O4 - HKUS\S-1-5-21-382916488-428852241-3986568732-1000\..\Run: [UpdateAdmin] . (.DownloadAdmin - .) -- C:\Users\celine\AppData\Local\UpdateAdmin\UpdateAdmin.exe =>PUP.Optional.UpdateAdmin

---\\ Raccourcis Global Startup (12) - 13s
O4 - GS\Desktop [Administrateur]: GetNowUpdater.lnk . (.Live_Soft_Action S.R.L. - GetNowUpdater.) C:\Users\celine\AppData\Roaming\GetNowUpdater\bin\GetNowUpdater.exe =>PUP.Optional.GetNow
O4 - GS\Desktop [Administrateur]: MyPC Backup.lnk . (...) C:\Program Files (x86)\OLBPre\OLBPre.exe =>PUP.Optional.MyPCBackup
O4 - GS\Startup [Administrateur]: MyPC Backup.lnk . (...) C:\Program Files (x86)\OLBPre\OLBPre.exe =>PUP.Optional.MyPCBackup
O4 - GS\Startup [Administrateur]: SmartWeb.lnk . (.SoftBrain Technologies Ltd. - SmartWeb helper.) C:\Users\celine\AppData\Local\SmartWeb\SmartWebHelper.exe =>PUP.Optional.SmartWebSearch
O4 - GS\Desktop [celine]: GetNowUpdater.lnk . (.Live_Soft_Action S.R.L. - GetNowUpdater.) C:\Users\celine\AppData\Roaming\GetNowUpdater\bin\GetNowUpdater.exe =>PUP.Optional.GetNow
O4 - GS\Desktop [celine]: MyPC Backup.lnk . (...) C:\Program Files (x86)\OLBPre\OLBPre.exe =>PUP.Optional.MyPCBackup
O4 - GS\Startup [celine]: MyPC Backup.lnk . (...) C:\Program Files (x86)\OLBPre\OLBPre.exe =>PUP.Optional.MyPCBackup
O4 - GS\Startup [celine]: SmartWeb.lnk . (.SoftBrain Technologies Ltd. - SmartWeb helper.) C:\Users\celine\AppData\Local\SmartWeb\SmartWebHelper.exe =>PUP.Optional.SmartWebSearch
O4 - GS\Desktop [Invité]: GetNowUpdater.lnk . (.Live_Soft_Action S.R.L. - GetNowUpdater.) C:\Users\celine\AppData\Roaming\GetNowUpdater\bin\GetNowUpdater.exe =>PUP.Optional.GetNow
O4 - GS\Desktop [Invité]: MyPC Backup.lnk . (...) C:\Program Files (x86)\OLBPre\OLBPre.exe =>PUP.Optional.MyPCBackup
O4 - GS\Startup [Invité]: MyPC Backup.lnk . (...) C:\Program Files (x86)\OLBPre\OLBPre.exe =>PUP.Optional.MyPCBackup
O4 - GS\Startup [Invité]: SmartWeb.lnk . (.SoftBrain Technologies Ltd. - SmartWeb helper.) C:\Users\celine\AppData\Local\SmartWeb\SmartWebHelper.exe =>PUP.Optional.SmartWebSearch

---\\ Winsock hijacker (Layered Service Provider) (9) - 1s
O10 - WLSP:\Catalog_Entries\000000000001\Winsock LSP File . (.GOOBZO.) -- C:\Program Files (x86)\YouTube Accelerator\ytalsp.dll =>Hijacker.Winsock
O10 - WLSP:\Catalog_Entries\000000000002\Winsock LSP File . (.GOOBZO.) -- C:\Program Files (x86)\YouTube Accelerator\ytalsp.dll =>Hijacker.Winsock
O10 - WLSP:\Catalog_Entries\000000000003\Winsock LSP File . (.GOOBZO.) -- C:\Program Files (x86)\YouTube Accelerator\ytalsp.dll =>Hijacker.Winsock
O10 - WLSP:\Catalog_Entries\000000000004\Winsock LSP File . (.GOOBZO.) -- C:\Program Files (x86)\YouTube Accelerator\ytalsp.dll =>Hijacker.Winsock
O10 - WLSP:\Catalog_Entries\000000000005\Winsock LSP File . (.GOOBZO.) -- C:\Program Files (x86)\YouTube Accelerator\ytalsp.dll =>Hijacker.Winsock
O10 - WLSP:\Catalog_Entries\000000000006\Winsock LSP File . (.GOOBZO.) -- C:\Program Files (x86)\YouTube Accelerator\ytalsp.dll =>Hijacker.Winsock
O10 - WLSP:\Catalog_Entries\000000000007\Winsock LSP File . (.GOOBZO.) -- C:\Program Files (x86)\YouTube Accelerator\ytalsp.dll =>Hijacker.Winsock
O10 - WLSP:\Catalog_Entries\000000000008\Winsock LSP File . (.GOOBZO.) -- C:\Program Files (x86)\YouTube Accelerator\ytalsp.dll =>Hijacker.Winsock
O10 - WLSP:\Catalog_Entries\000000000019\Winsock LSP File . (.GOOBZO.) -- C:\Program Files (x86)\YouTube Accelerator\ytalsp.dll =>Hijacker.Winsock

---\\ Modification Domaine/Adresses DNS (15) - 0s
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: NameServer = 82.163.143.137,82.163.142.139
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 62.201.129.201 62.201.129.202
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 62.201.142.101
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 212.27.40.241 212.27.40.240
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: NameServer = 82.163.143.137,82.163.142.139
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: DhcpNameServer = 62.201.129.201 62.201.129.202
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: DhcpNameServer = 62.201.142.101
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: DhcpNameServer = 212.27.40.241 212.27.40.240
O17 - HKLM\System\CS2\Services\Tcpip\Parameters: NameServer = 82.163.143.137,82.163.142.139
O17 - HKLM\System\CS2\Services\Tcpip\Parameters: DhcpNameServer = 62.201.129.201 62.201.129.202
O17 - HKLM\System\CS2\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CS2\Services\Tcpip\Parameters: DhcpNameServer = 62.201.142.101
O17 - HKLM\System\CS2\Services\Tcpip\Parameters: DhcpNameServer = 212.27.40.241 212.27.40.240

---\\ Protocole additionnel (20) - 1s
O18 - Handler: about [64Bits] - {3050F406-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll ©
O18 - Handler: cdl [64Bits] - {3dd53d40-7b8b-11D0-b013-00aa0059ce02} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll ©
O18 - Handler: dvd [64Bits] - {12D51199-0DB5-46FE-A120-47A3D7D937CC} . (.Microsoft Corporation - Contrôle ActiveX pour le flux vidéo.) -- C:\Windows\System32\MSVidCtl.dll ©
O18 - Handler: file [64Bits] - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll ©
O18 - Handler: ftp [64Bits] - {79eac9e3-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll ©
O18 - Handler: http [64Bits] - {79eac9e2-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll ©
O18 - Handler: https [64Bits] - {79eac9e5-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll ©
O18 - Handler: its [64Bits] - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\Windows\System32\itss.dll ©
O18 - Handler: javascript [64Bits] - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll ©
O18 - Handler: local [64Bits] - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll ©
O18 - Handler: mailto [64Bits] - {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll ©
O18 - Handler: mhtml [64Bits] - {05300401-BCBC-11d0-85E3-00C04FD85AB4} . (.Microsoft Corporation - Microsoft Internet Messaging API Resources.) -- C:\Windows\System32\inetcomm.dll ©
O18 - Handler: mk [64Bits] - {79eac9e6-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll ©
O18 - Handler: ms-its [64Bits] - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\Windows\System32\itss.dll ©
O18 - Handler: res [64Bits] - {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll ©
O18 - Handler: tv [64Bits] - {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} . (.Microsoft Corporation - Contrôle ActiveX pour le flux vidéo.) -- C:\Windows\System32\MSVidCtl.dll ©
O18 - Handler: vbscript [64Bits] - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll ©
O18 - Filter: application/octet-stream [64Bits] - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll ©
O18 - Filter: application/x-complus [64Bits] - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll ©
O18 - Filter: application/x-msdownload [64Bits] - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll ©

---\\ Liste des services NT non Microsoft et non désactivés (32) - 5s
O23 - Service: ABBYY FineReader 9.0 Sprint Licensing Service (ABBYY.Licensing.FineReader.Sprint.9.0) . (.ABBYY - ABBYY network license server.) - C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe ©
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) . (.Adobe Systems Incorporated - Adobe Acrobat Update Service.) - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe ©
O23 - Service: (AMD External Events Utility) . (.AMD - AMD External Events Service Module.) - C:\Windows\system32\atiesrxx.exe ©
O23 - Service: Apple Mobile Device (Apple Mobile Device) . (.Apple Inc. - MobileDeviceService.) - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe ©
O23 - Service: Avast Antivirus (avast! Antivirus) . (.AVAST Software - avast! Service.) - C:\Program Files\AVAST Software\Avast\AvastSvc.exe ©
O23 - Service: Service Bonjour (Bonjour Service) . (.Apple Inc. - Bonjour Service.) - C:\Program Files\Bonjour\mDNSResponder.exe ©
O23 - Service: CoupoonService64 (CoupoonService64) . (...) - C:\Program Files (x86)\Coupoon\iiwjljrnpc64.exe
O23 - Service: Dritek WMI Service (DsiWMIService) . (.Dritek System Inc. - Dritek WMI Service.) - C:\Program Files (x86)\Launch Manager\dsiwmis.exe
O23 - Service: Acer ePower Service (ePowerSvc) . (.Acer Incorporated - ePowerSvc.) - C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe ©
O23 - Service: EpsonBidirectionalService (EpsonBidirectionalService) . (.SEIKO EPSON CORPORATION - eEBAPI Core Process module.) - C:\Program Files (x86)\Common Files\EPSON\EBAPI\eEBSvc.exe ©
O23 - Service: globalUpdate Update Service (globalUpdate) (globalUpdate) . (.globalUpdate - globalUpdate Update.) - C:\Program Files (x86)\globalUpdate\Update\globalupdate.exe =>PUP.Optional.GlobalUpdate
O23 - Service: GREGService (GREGService) . (.Acer Incorporated - Global Registration Service.) - C:\Program Files (x86)\Acer\Registration\GREGsvc.exe ©
O23 - Service: Google Update Service (gupdate) (gupdate) . (.Google Inc. - Programme d'installation de Google.) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe ©
O23 - Service: Text Box Internet Access (jybiqyqo) . (...) - C:\Program Files (x86)\ED2F3280-1439984681-815C-3B5B-E06995AD0640\hnst1526.tmp =>PUP.Optional.CrossRider
O23 - Service: (MBAMService) . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) - C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe ©
O23 - Service: Norton Online Backup (NOBU) . (.Symantec Corporation - Norton Online Backup Service.) - C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe ©
O23 - Service: NTI IScheduleSvc (NTI IScheduleSvc) . (.NTI Corporation - Backup Manager Module.) - C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe ©
O23 - Service: PC Speed Up Service (PCSUService) . (.Optimal Software s.r.o. - PC Speed Up Service.) - C:\Program Files (x86)\PC Speed Up\PCSUService.exe =>PUP.Optional.PCSpeedUp
O23 - Service: PremierOpinion (PremierOpinion) . (.VoiceFive, Inc. - PremierOpinion.) - C:\Program Files (x86)\PremierOpinion\pmservice.exe =>PUP.Optional.PremierOpinion
O23 - Service: SpeedChecker Service (SCService) . (.Optimal Software s.r.o. - SpeedCheckerService.) - C:\Program Files (x86)\PC Speed Up\SpeedCheckerService.exe =>PUP.Optional.InternetSpeedChecker
O23 - Service: Service Mgr GetTheResultsHub (Service Mgr GetTheResultsHub) . (...) - C:\ProgramData\6f66c052-8827-4487-9031-09becb0cf541\plugincontainer.exe =>PUP.Optional.GetTheResultsHub*
O23 - Service: Service Mgr RecordPage (Service Mgr RecordPage) . (...) - C:\ProgramData\87737dd0-ad90-4193-bd48-336966b8d777\plugincontainer.exe =>PUP.Optional.RecordPage*
O23 - Service: Skype Updater (SkypeUpdate) . (.Skype Technologies - Skype Updater Service.) - C:\Program Files (x86)\Skype\Updater\Updater.exe ©
O23 - Service: ShopperPro Update (SPBIUpd) . (.ShopperPro - ShopperPro Update Service.) - C:\Program Files\Common Files\ShopperPro\spbiu.exe =>PUP.Optional.ShopperPro
O23 - Service: TeamViewer 7 (TeamViewer7) . (.TeamViewer GmbH - TeamViewer Remote Control Application.) - C:\Program Files (x86)\TeamViewer\Version7\TeamViewer_Service.exe
O23 - Service: Update Mgr GetTheResultsHub (Update Mgr GetTheResultsHub) . (...) - C:\Program Files (x86)\Common Files\6f66c052-8827-4487-9031-09becb0cf541\updater.exe =>PUP.Optional.GetTheResultsHub*
O23 - Service: Update Mgr RecordPage (Update Mgr RecordPage) . (...) - C:\Program Files (x86)\Common Files\87737dd0-ad90-4193-bd48-336966b8d777\updater.exe =>PUP.Optional.RecordPage*
O23 - Service: UpdateCheck (UpdateCheck) . (...) - C:\Program Files (x86)\Coupoon\UpdateCheck.exe
O23 - Service: Web Bar Service (wbsvc) (wbsvc) . (.Web Bar Media - Web Bar Service.) - C:\Program Files\WebBar\wbsvc.exe =>PUP.Optional.WebBar
O23 - Service: WInterEnhancer Service (WInterEnhancer Service) . (...) - C:\Program Files (x86)\WInterEnhancer\WInterEnhancer Internet Enhancer\InternetEnhancerService.exe =>PUP.Optional.Wajam
O23 - Service: WN 1.10.0.20 Client Service (wsvc_1.10.0.20) . (.WN - WN Client Service.) - C:\Program Files (x86)\Wordinator_1.10.0.20\Service\wsvc.exe =>PUP.Optional.WN
O23 - Service: YouTubeAcceleratorService (YouTubeAcceleratorService) . (.GOOBZO - .) - C:\Program Files (x86)\YouTube Accelerator\YouTubeAcceleratorService.exe =>PUP.Optional.Goobzo

---\\ Tâches planifiées en automatique (72) - 19s
O39 - APT: Orphean - (...) -- C:\Windows\Tasks\41cb378e-838f-4ec7-b018-1a05c5a4919d-10_user.job [2116] =>PUP.Optional.CrossRider
O39 - APT: Orphean - (...) -- C:\Windows\Tasks\Adobe Flash Player Updater.job [1002]
O39 - APT: Orphean - (...) -- C:\Windows\Tasks\c157e037-50d1-4479-b6e0-dd53801f1f9b-1-6.job [3140] =>PUP.Optional.CrossRider
O39 - APT: Orphean - (...) -- C:\Windows\Tasks\c157e037-50d1-4479-b6e0-dd53801f1f9b-1-7.job [3476] =>PUP.Optional.CrossRider
O39 - APT: Orphean - (...) -- C:\Windows\Tasks\c157e037-50d1-4479-b6e0-dd53801f1f9b-10_user.job [2114] =>PUP.Optional.CrossRider
O39 - APT: Orphean - (...) -- C:\Windows\Tasks\c157e037-50d1-4479-b6e0-dd53801f1f9b-11.job [5186] =>PUP.Optional.CrossRider
O39 - APT: Orphean - (...) -- C:\Windows\Tasks\c157e037-50d1-4479-b6e0-dd53801f1f9b-3.job [4496] =>PUP.Optional.CrossRider
O39 - APT: Orphean - (...) -- C:\Windows\Tasks\c157e037-50d1-4479-b6e0-dd53801f1f9b-4.job [4496] =>PUP.Optional.CrossRider
O39 - APT: Orphean - (...) -- C:\Windows\Tasks\c157e037-50d1-4479-b6e0-dd53801f1f9b-5.job [2448] =>PUP.Optional.CrossRider
O39 - APT: Orphean - (...) -- C:\Windows\Tasks\c157e037-50d1-4479-b6e0-dd53801f1f9b-5_user.job [2448] =>PUP.Optional.CrossRider
O39 - APT: Orphean - (...) -- C:\Windows\Tasks\c157e037-50d1-4479-b6e0-dd53801f1f9b-6.job [5520] =>PUP.Optional.CrossRider
O39 - APT: Orphean - (...) -- C:\Windows\Tasks\c157e037-50d1-4479-b6e0-dd53801f1f9b-7.job [5184] =>PUP.Optional.CrossRider
O39 - APT: Orphean - (...) -- C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-382916488-428852241-3986568732-1000Core.job [1078]
O39 - APT: Orphean - (...) -- C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-382916488-428852241-3986568732-1000UA.job [1100]
O39 - APT: Orphean - (...) -- C:\Windows\Tasks\globalUpdateUpdateTaskMachineCore.job [1002] =>PUP.Optional.GlobalUpdate
O39 - APT: Orphean - (...) -- C:\Windows\Tasks\globalUpdateUpdateTaskMachineUA.job [1006] =>PUP.Optional.GlobalUpdate
O39 - APT: Orphean - (...) -- C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job [894]
O39 - APT: Orphean - (...) -- C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job [898]
O39 - APT: Orphean - (...) -- C:\Windows\Tasks\MAXDriverUpdater_UPDATES.job [286] =>PUP.Optional.MaxDriverUpdater
O39 - APT: Orphean - (...) -- C:\Windows\Tasks\Optscan.job [342]
O39 - APT: Orphean - (...) -- C:\Windows\Tasks\PC SpeedUp Service Deactivator.job [342]
O39 - APT: Orphean - (...) -- C:\Windows\Tasks\Superclean.job [342]
O39 - APT: Orphean - (...) -- C:\Windows\System32\Tasks\41cb378e-838f-4ec7-b018-1a05c5a4919d-10_user [5144] =>PUP.Optional.CrossRider
O39 - APT: Orphean - (...) -- C:\Windows\System32\Tasks\Ad-Aware Antivirus Scheduled Scan [4326]
O39 - APT: Orphean - (...) -- C:\Windows\System32\Tasks\Adobe Acrobat Update Task [3886]
O39 - APT: Orphean - (...) -- C:\Windows\System32\Tasks\Adobe Flash Player Updater [3940]
O39 - APT: Orphean - (...) -- C:\Windows\System32\Tasks\avast! Emergency Update [4182]
O39 - APT: Orphean - (...) -- C:\Windows\System32\Tasks\c157e037-50d1-4479-b6e0-dd53801f1f9b-1-6 [6168] =>PUP.Optional.CrossRider
O39 - APT: Orphean - (...) -- C:\Windows\System32\Tasks\c157e037-50d1-4479-b6e0-dd53801f1f9b-1-7 [6506] =>PUP.Optional.CrossRider
O39 - APT: Orphean - (...) -- C:\Windows\System32\Tasks\c157e037-50d1-4479-b6e0-dd53801f1f9b-10_user [5142] =>PUP.Optional.CrossRider
O39 - APT: Orphean - (...) -- C:\Windows\System32\Tasks\c157e037-50d1-4479-b6e0-dd53801f1f9b-11 [8216] =>PUP.Optional.CrossRider
O39 - APT: Orphean - (...) -- C:\Windows\System32\Tasks\c157e037-50d1-4479-b6e0-dd53801f1f9b-3 [7526] =>PUP.Optional.CrossRider
O39 - APT: Orphean - (...) -- C:\Windows\System32\Tasks\c157e037-50d1-4479-b6e0-dd53801f1f9b-4 [7526] =>PUP.Optional.CrossRider
O39 - APT: Orphean - (...) -- C:\Windows\System32\Tasks\c157e037-50d1-4479-b6e0-dd53801f1f9b-5 [5478] =>PUP.Optional.CrossRider
O39 - APT: Orphean - (...) -- C:\Windows\System32\Tasks\c157e037-50d1-4479-b6e0-dd53801f1f9b-5_user [5478] =>PUP.Optional.CrossRider
O39 - APT: Orphean - (...) -- C:\Windows\System32\Tasks\c157e037-50d1-4479-b6e0-dd53801f1f9b-6 [8548] =>PUP.Optional.CrossRider
O39 - APT: Orphean - (...) -- C:\Windows\System32\Tasks\c157e037-50d1-4479-b6e0-dd53801f1f9b-7 [8214] =>PUP.Optional.CrossRider
O39 - APT: Orphean - (...) -- C:\Windows\System32\Tasks\CCleanerSkipUAC [2794]
O39 - APT: Orphean - (...) -- C:\Windows\System32\Tasks\clear.fi [3418]
O39 - APT: Orphean - (...) -- C:\Windows\System32\Tasks\clear.fiAgent [3348]
O39 - APT: Orphean - (...) -- C:\Windows\System32\Tasks\CloudAURORAVILLE [22218]
O39 - APT: Orphean - (...) -- C:\Windows\System32\Tasks\DailyPCClean Schedule [3244] =>PUP.Optional.DailyPCClean
O39 - APT: Orphean - (...) -- C:\Windows\System32\Tasks\DMREngine [3366]
O39 - APT: Orphean - (...) -- C:\Windows\System32\Tasks\Dregol rane [4162] =>PUP.Optional.Browser
O39 - APT: Orphean - (...) -- C:\Windows\System32\Tasks\FacebookUpdateTaskUserS-1-5-21-382916488-428852241-3986568732-1000Core [3710]
O39 - APT: Orphean - (...) -- C:\Windows\System32\Tasks\FacebookUpdateTaskUserS-1-5-21-382916488-428852241-3986568732-1000UA [4078]
O39 - APT: Orphean - (...) -- C:\Windows\System32\Tasks\globalUpdateUpdateTaskMachineCore [3750] =>PUP.Optional.GlobalUpdate
O39 - APT: Orphean - (...) -- C:\Windows\System32\Tasks\globalUpdateUpdateTaskMachineUA [4004] =>PUP.Optional.GlobalUpdate
O39 - APT: Orphean - (...) -- C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore [3642]
O39 - APT: Orphean - (...) -- C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA [3894]
O39 - APT: Orphean - (...) -- C:\Windows\System32\Tasks\LaunchPreSignup [3988]
O39 - APT: Orphean - (...) -- C:\Windows\System32\Tasks\MAXDriverUpdaterRunAtStartup [3150] =>PUP.Optional.MaxDriverUpdater
O39 - APT: Orphean - (...) -- C:\Windows\System32\Tasks\MAXDriverUpdater_UPDATES [3032] =>PUP.Optional.MaxDriverUpdater
O39 - APT: Orphean - (...) -- C:\Windows\System32\Tasks\Opera scheduled Autoupdate 1436540930 [3858]
O39 - APT: Orphean - (...) -- C:\Windows\System32\Tasks\Optimizer Pro Schedule [3260] =>PUP.Optional.OptimizerPro
O39 - APT: Orphean - (...) -- C:\Windows\System32\Tasks\Optscan [3256]
O39 - APT: Orphean - (...) -- C:\Windows\System32\Tasks\PC SpeedUp Service Deactivator [2722]
O39 - APT: Orphean - (...) -- C:\Windows\System32\Tasks\Selection Tools Update [3752] =>PUP.Optional.Nosibay
O39 - APT: Orphean - (...) -- C:\Windows\System32\Tasks\ShopperPro [4506] =>PUP.Optional.ShopperPro
O39 - APT: Orphean - (...) -- C:\Windows\System32\Tasks\SmartWeb Upgrade Trigger Task [4040] =>PUP.Optional.SmartWebSearch
O39 - APT: Orphean - (...) -- C:\Windows\System32\Tasks\SPBIW_UpdateTask_Time_3534353734333339332d3450415755322a6c232a6c45 [4240]
O39 - APT: Orphean - (...) -- C:\Windows\System32\Tasks\Superclean [3256]
O39 - APT: Orphean - (...) -- C:\Windows\System32\Tasks\UpdateAdmin [3844] =>PUP.Optional.UpdateAdmin
O39 - APT: Orphean - (...) -- C:\Windows\System32\Tasks\WebBarLaunchTask [3262] =>PUP.Optional.WebBar
O39 - APT: Orphean - (...) -- C:\Windows\System32\Tasks\WebBarUpdateTask [3786] =>PUP.Optional.WebBar
O39 - APT: Orphean - (...) -- C:\Windows\System32\Tasks\WindApp Update [3718] =>PUP.Optional.Nosibay
O39 - APT: Orphean - (...) -- C:\Windows\System32\Tasks\YTAUpdate [3452]
O39 - APT: Orphean - (...) -- C:\Windows\System32\Tasks\YTAUpdate_logon [3266]
O39 - APT: Orphean - (...) -- C:\Windows\System32\Tasks\{19DEF4E2-5EE6-4FC7-9D90-D76B28830705} [3100]
O39 - APT: Orphean - (...) -- C:\Windows\System32\Tasks\{4E713DCF-E325-4761-9D30-0638326DD861} [3226]
O39 - APT: Orphean - (...) -- C:\Windows\System32\Tasks\{A9DC1881-0535-4565-8E04-2B8F08D775AC} [3106]
O39 - APT: Orphean - (...) -- C:\Windows\System32\Tasks\{AFB92CF5-0E76-49E9-B7CB-827E6733ED43} [3182]

---\\ Logiciels installés (114) - 51s
O42 - Logiciel: CCleaner - (.Piriform.) [HKLM][64Bits] -- CCleaner ©
O42 - Logiciel: Defraggler - (.Piriform.) [HKLM][64Bits] -- Defraggler ©
O42 - Logiciel: EPSON XP-205 207 Series Printer Uninstall - (.SEIKO EPSON Corporation.) [HKLM][64Bits] -- EPSON XP-205 207 Series ©
O42 - Logiciel: MyPC Backup - (.MyPC Backup.) [HKLM][64Bits] -- OLBPre =>PUP.Optional.MyPCBackup
O42 - Logiciel: PC Speed Up - (.Optimal Software s.r.o..) [HKLM][64Bits] -- PCSU-SL_is1
O42 - Logiciel: Synaptics Pointing Device Driver - (.Synaptics Incorporated.) [HKLM][64Bits] -- SynTPDeinstKey ©
O42 - Logiciel: MyWinLocker - (.Egis Technology Inc..) [HKLM][64Bits] -- {0B78ECB0-1A6B-4E6D-89D7-0E7CE77F0427} ©
O42 - Logiciel: Web Bar 2.0.5659.26749 - (.Web Bar Media.) [HKLM][64Bits] -- {0BCE8B0A-1E76-44E5-9909-3CF804D92E4D}_is1 =>PUP.Optional.WebBar
O42 - Logiciel: ATI Catalyst Install Manager - (.ATI Technologies, Inc..) [HKLM][64Bits] -- {418A4FC6-0C6A-57DE-9EAF-FDFB669999F2}
O42 - Logiciel: iTunes - (.Apple Inc..) [HKLM][64Bits] -- {4BDE7544-0A08-4AD9-8A8F-4B7944471C36} ©
O42 - Logiciel: Bonjour - (.Apple Inc..) [HKLM][64Bits] -- {6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D} ©
O42 - Logiciel: Microsoft Silverlight - (.Microsoft Corporation.) [HKLM][64Bits] -- {89F4137D-6C26-4A84-BDB8-2E5A4BB71E00} ©
O42 - Logiciel: Microsoft Image Composite Editor - (.Microsoft Corporation.) [HKLM][64Bits] -- {B821CDAA-34DE-46FD-87C9-E6EE7158DB5D} ©
O42 - Logiciel: Apple Mobile Device Support - (.Apple Inc..) [HKLM][64Bits] -- {B8AD779A-82DA-4365-A7D0-AD3DCFC55CFF} ©
O42 - Logiciel: WMV9/VC-1 Video Playback - (.ATI Technologies Inc..) [HKLM][64Bits] -- {E40EC00B-EE04-DC80-1903-F3A0225BD512} ©
O42 - Logiciel: ABBYY FineReader 9.0 Sprint - (.ABBYY.) [HKLM][64Bits] -- ABBYY FineReader 9.0 Sprint ©
O42 - Logiciel: Acer Registration - (.Acer Incorporated.) [HKLM][64Bits] -- Acer Registration ©
O42 - Logiciel: Acer ScreenSaver - (.Acer Incorporated.) [HKLM][64Bits] -- Acer Screensaver ©
O42 - Logiciel: Welcome Center - (.Acer Incorporated.) [HKLM][64Bits] -- Acer Welcome Center ©
O42 - Logiciel: Adobe AIR - (.Adobe Systems Inc..) [HKLM][64Bits] -- Adobe AIR ©
O42 - Logiciel: Adobe Flash Player 18 ActiveX - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- Adobe Flash Player ActiveX ©
O42 - Logiciel: Adobe Flash Player 18 NPAPI - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- Adobe Flash Player NPAPI ©
O42 - Logiciel: Avast Free Antivirus - (.AVAST Software.) [HKLM][64Bits] -- avast ©
O42 - Logiciel: CinemaPlus-4.5vV17.08 - (.Cinema PlusV17.08.) [HKLM][64Bits] -- CinemaPlus-4.5vV17.08 =>PUP.Optional.CrossRider
O42 - Logiciel: ConvilogSV2 - (.Convilog.) [HKLM][64Bits] -- ConvilogSV2
O42 - Logiciel: DailyPCClean v4.1 - (.Tuto4PC.Com.) [HKLM][64Bits] -- DailyPCClean_is1 =>PUP.Optional.DailyPCClean
O42 - Logiciel: DailyPcClean Support - (.Tuto4PC.Com.) [HKLM][64Bits] -- dpcc_en_009010064_is1 =>PUP.Optional.DailyPCClean
O42 - Logiciel: Get The Results Hub - (.Get The Results Hub.) [HKLM][64Bits] -- Get The Results Hub =>PUP.Optional.GetTheResultsHub
O42 - Logiciel: GamesDesktop 001.005010064 - (.GAMESDESKTOP.) [HKLM][64Bits] -- gmsd_fr_005010064_is1 =>PUP.Optional.GamesDesktop
O42 - Logiciel: GamesDesktop 001.005010065 - (.GAMESDESKTOP.) [HKLM][64Bits] -- gmsd_fr_005010065_is1 =>PUP.Optional.GamesDesktop
O42 - Logiciel: Google Chrome - (.Google Inc..) [HKLM][64Bits] -- Google Chrome ©
O42 - Logiciel: Identity Card - (.Acer Incorporated.) [HKLM][64Bits] -- Identity Card ©
O42 - Logiciel: Acer Crystal Eye Webcam - (.CyberLink Corp..) [HKLM][64Bits] -- InstallShield_{01FB4998-33C4-4431-85ED-079E3EEFE75D} ©
O42 - Logiciel: Acer Backup Manager - (.NTI Corporation.) [HKLM][64Bits] -- InstallShield_{0B61BBD5-DA3C-409A-8730-0C3DC3B0F270} ©
O42 - Logiciel: MyWinLocker Suite - (.Egis Technology Inc..) [HKLM][64Bits] -- InstallShield_{17DF9714-60C9-43C9-A9C2-32BCAED44CBE} ©
O42 - Logiciel: clear.fi - (.CyberLink Corp..) [HKLM][64Bits] -- InstallShield_{2637C347-9DAD-11D6-9EA2-00055D0CA761} ©
O42 - Logiciel: newsXpresso - (.esobi Inc..) [HKLM][64Bits] -- InstallShield_{613C0AC5-3A67-4B94-8B13-9176AD83F5BF}
O42 - Logiciel: NTI Media Maker 9 - (.NTI Corporation.) [HKLM][64Bits] -- InstallShield_{D3D5C4E8-040F-4C6F-8105-41D43CF94F44} ©
O42 - Logiciel: Launch Manager - (.Acer Inc..) [HKLM][64Bits] -- LManager
O42 - Logiciel: Malwarebytes Anti-Malware version 2.1.6.1022 - (.Malwarebytes Corporation.) [HKLM][64Bits] -- Malwarebytes Anti-Malware_is1 ©
O42 - Logiciel: Max Driver Updater - (.csmedia.com.) [HKLM][64Bits] -- Max Driver Updater_is1 =>PUP.Optional.MaxDriverUpdater
O42 - Logiciel: MovieDea 1.0 - (.MovieDea.) [HKLM][64Bits] -- MovieDea =>PUP.Optional.MovieDea
O42 - Logiciel: Mozilla Firefox 40.0.2 (x86 fr) - (.Mozilla.) [HKLM][64Bits] -- Mozilla Firefox 40.0.2 (x86 fr) ©
O42 - Logiciel: Mozilla Maintenance Service - (.Mozilla.) [HKLM][64Bits] -- MozillaMaintenanceService ©
O42 - Logiciel: MobilePCStarterKit 001.017010064 - (.MOBILEPCSTARTERKIT.) [HKLM][64Bits] -- mpck_fr_017010064_is1 =>PUP.Optional.MobilePCStarterKit
O42 - Logiciel: mystartsearch uninstall - (.mystartsearch.) [HKLM][64Bits] -- mystartsearch uninstall =>PUP.Optional.StartSearch
O42 - Logiciel: Opera Stable 31.0.1889.174 - (.Opera Software.) [HKLM][64Bits] -- Opera 31.0.1889.174 ©
O42 - Logiciel: Optimizer Pro v3.2 - (.PCUtilities Software Limited.) [HKLM][64Bits] -- Optimizer Pro_is1 =>PUP.Optional.OptimizerPro
O42 - Logiciel: Origin - (.Electronic Arts, Inc..) [HKLM][64Bits] -- Origin ©
O42 - Logiciel: Record Page - (.Record Page.) [HKLM][64Bits] -- Record Page =>PUP.Optional.RecordPage
O42 - Logiciel: Run_Dregol - (.Run_Dregol.) [HKLM][64Bits] -- Run_Dregol =>PUP.Optional.Browser
O42 - Logiciel: Shopper-Pro - (...) [HKLM][64Bits] -- ShopperPro =>PUP.Optional.ShopperPro
O42 - Logiciel: SmartWeb - (.SoftBrain Technologies Ltd..) [HKLM][64Bits] -- SmartWeb =>PUP.Optional.SmartWebSearch
O42 - Logiciel: TeamViewer 7 - (.TeamViewer.) [HKLM][64Bits] -- TeamViewer 7 ©
O42 - Logiciel: VLC media player 2.0.2 - (.VideoLAN.) [HKLM][64Bits] -- VLC media player ©
O42 - Logiciel: Remote Desktop Access (VuuPC) - (.CMI Limited.) [HKLM][64Bits] -- VOPackage =>PUP.Optional.Downware
O42 - Logiciel: Wajam - (.WInterEnhancer.) [HKLM][64Bits] -- WInterEnhancer =>PUP.Optional.Wajam
O42 - Logiciel: Wordinator 1.10.0.20 - (.Wordinator.) [HKLM][64Bits] -- Wordinator_1.10.0.20 =>PUP.Optional.Generic
O42 - Logiciel: YouTube Accelerator - (.Goobzo Ltd..) [HKLM][64Bits] -- YouTube Accelerator =>PUP.Optional.Goobzo
O42 - Logiciel: Zombie News - (.Time Lapse Solutions.) [HKLM][64Bits] -- ZombieNews =>PUP.Optional.ZombieNews
O42 - Logiciel: MaxDriverUpdater Service - (.CSDI.) [HKLM][64Bits] -- zz.1174.mdu =>PUP.Optional.MaxDriverUpdater
O42 - Logiciel: Acer Crystal Eye Webcam - (.CyberLink Corp..) [HKLM][64Bits] -- {01FB4998-33C4-4431-85ED-079E3EEFE75D} ©
O42 - Logiciel: Backup Manager V3 - (.NTI Corporation.) [HKLM][64Bits] -- {0B61BBD5-DA3C-409A-8730-0C3DC3B0F270} ©
O42 - Logiciel: MediaEspresso - (.CyberLink Corp..) [HKLM][64Bits] -- {14C4C3B6-F1F4-401F-8C86-03E8E19AAC8C} ©
O42 - Logiciel: MyWinLocker Suite - (.Egis Technology Inc..) [HKLM][64Bits] -- {17DF9714-60C9-43C9-A9C2-32BCAED44CBE} ©
O42 - Logiciel: Catalyst Control Center - Branding - (.ATI.) [HKLM][64Bits] -- {1895E5C2-A9F8-4757-AD7B-0E9EA8BA1C46} ©
O42 - Logiciel: Junk Mail filter update - (.Microsoft Corporation.) [HKLM][64Bits] -- {1F6AB0E7-8CDD-4B93-8A23-AA9EB2FEFCE4} ©
O42 - Logiciel: Facebook Video Calling 3.1.0.521 - (.Skype Limited.) [HKLM][64Bits] -- {2091F234-EB58-4B80-8C96-8EB78C808CF7} ©
O42 - Logiciel: clear.fi - (.CyberLink Corp..) [HKLM][64Bits] -- {2637C347-9DAD-11D6-9EA2-00055D0CA761} ©
O42 - Logiciel: Java 7 Update 17 - (.Oracle.) [HKLM][64Bits] -- {26A24AE4-039D-4CA4-87B4-2F83217017FF} ©
O42 - Logiciel: Acrobat.com - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {287ECFA4-719A-2143-A09B-D6A12DE54E40} ©
O42 - Logiciel: Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver - (.Atheros Communications Inc..) [HKLM][64Bits] -- {3108C217-BE83-42E4-AE9E-A56A2A92E549}
O42 - Logiciel: FSV 1.40.0901 - (.GIE SESAM-Vitale.) [HKLM][64Bits] -- {31CAD4E1-4418-4C66-8D73-4281D4990D12} ©
O42 - Logiciel: MyWinLocker 4 - (.Egis Technology Inc..) [HKLM][64Bits] -- {39F15B50-A977-4CA6-B1C3-6A8724CDA025} ©
O42 - Logiciel: Acer ePower Management - (.Acer Incorporated.) [HKLM][64Bits] -- {3DB0448D-AD82-4923-B305-D001E521A964} ©
O42 - Logiciel: Norton Online Backup - (.Symantec Corporation.) [HKLM][64Bits] -- {40A66DF6-22D3-44B5-A7D3-83B118A2C0DC} ©
O42 - Logiciel: clear.fi Client - (.Acer Incorporated.) [HKLM][64Bits] -- {43AAE145-83CF-4C96-9A5E-756CEFCE879F} ©
O42 - Logiciel: Coupoon version 1.0 - (.Coupoon.) [HKLM][64Bits] -- {49F8B4F8-0CD4-4BE4-A9E8-B13A071F7C90}_is1
O42 - Logiciel: Skype™ 6.1 - (.Skype Technologies S.A..) [HKLM][64Bits] -- {4E76FF7E-AEBA-4C87-B788-CD47E5425B9D} ©
O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM][64Bits] -- {60EC980A-BDA2-4CB6-A427-B07A5498B4CA} ©
O42 - Logiciel: newsXpresso - (.esobi Inc..) [HKLM][64Bits] -- {613C0AC5-3A67-4B94-8B13-9176AD83F5BF}
O42 - Logiciel: GALSS v3.36 - (.GIE SESAM-Vitale.) [HKLM][64Bits] -- {674C6EFF-8591-48AB-94AB-D9DC35F9BB5E} ©
O42 - Logiciel: Apple Software Update - (.Apple Inc..) [HKLM][64Bits] -- {789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE} ©
O42 - Logiciel: Acer eRecovery Management - (.Acer Incorporated.) [HKLM][64Bits] -- {7F811A54-5A09-4579-90E1-C93498E230D9} ©
O42 - Logiciel: Flip Words - (.Oberon Media.) [HKLM][64Bits] -- {82C36957-D2B8-4EF2-B88C-5FA03AA848C7-110109903} ©
O42 - Logiciel: Galapago - (.Oberon Media.) [HKLM][64Bits] -- {82C36957-D2B8-4EF2-B88C-5FA03AA848C7-111307457} ©
O42 - Logiciel: Dream Day First Home - (.Oberon Media.) [HKLM][64Bits] -- {82C36957-D2B8-4EF2-B88C-5FA03AA848C7-113832110} ©
O42 - Logiciel: Farm Frenzy 3 Ice Age - (.Oberon Media.) [HKLM][64Bits] -- {82C36957-D2B8-4EF2-B88C-5FA03AA848C7-118399487} ©
O42 - Logiciel: Mesh Runtime - (.Microsoft Corporation.) [HKLM][64Bits] -- {8C6D6116-B724-4810-8F2D-D047E6B7D68E} ©
O42 - Logiciel: Software Updater - (.SEIKO EPSON CORPORATION.) [HKLM][64Bits] -- {8DBC5A0A-31C4-46C7-B252-6B593EA11A87} ©
O42 - Logiciel: MSVCRT - (.Microsoft.) [HKLM][64Bits] -- {8DD46C6A-0056-4FEC-B70A-28BB16A1F11F} ©
O42 - Logiciel: UpdateAdmin - (.DownloadAdmin.) [HKLM][64Bits] -- {8F1CD30B-3A84-4B95-BFA4-CC0F885B8463} =>PUP.Optional.UpdateAdmin
O42 - Logiciel: Realtek USB 2.0 Card Reader - (.Realtek Semiconductor Corp..) [HKLM][64Bits] -- {96AE7E41-E34E-47D0-AC07-1091A8127911} ©
O42 - Logiciel: Adobe AIR - (.Adobe Systems Inc..) [HKLM][64Bits] -- {A2BCA9F1-566C-4805-97D1-7FDC93386723} ©
O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM][64Bits] -- {A92DAB39-4E2C-4304-9AB6-BC44E68B55E2} ©
O42 - Logiciel: Adobe Refresh Manager - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {AC76BA86-0804-1033-1959-001824147215} ©
O42 - Logiciel: Adobe Reader XI (11.0.12) - Français - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {AC76BA86-7AD7-1036-7B44-AB0000000001} ©
O42 - Logiciel: Shredder - (.Egis Technology Inc..) [HKLM][64Bits] -- {C2695E83-CF1D-43D1-84FE-B3BEC561012A} ©
O42 - Logiciel: Acer GameZone Console - (.Oberon Media, Inc..) [HKLM][64Bits] -- {C97623E2-0614-4845-B199-8E8BEC8E131C}_is1 ©
O42 - Logiciel: Buzzdock - (.Alactro LLC.) [HKLM][64Bits] -- {cfd32d46-7d3f-483f-bace-7172aec5592d} =>PUP.Optional.BuzzDock
O42 - Logiciel: MSVCRT_amd64 - (.Microsoft.) [HKLM][64Bits] -- {D0B44725-3666-492D-BEF6-587A14BD9BD9} ©
O42 - Logiciel: eBay Worldwide - (.OEM.) [HKLM][64Bits] -- {D3E5A972-9A15-427D-AE78-8181A5FD943C}
O42 - Logiciel: WiFi Station - (.Hercules.) [HKLM][64Bits] -- {DECE22F4-EEDD-4615-BC56-2F4827FAD64B} ©
O42 - Logiciel: D3DX10 - (.Microsoft.) [HKLM][64Bits] -- {E09C4DB7-630C-4F06-A631-8EA7239923AF} ©
O42 - Logiciel: CloudScout Parental Control version 1.3 - (.www.Cloud Guard.me.) [HKLM][64Bits] -- {E1527582-8509-4011-B922-29E3FB548882}_is1
O42 - Logiciel: Apple Application Support - (.Apple Inc..) [HKLM][64Bits] -- {EB879750-CCBD-4013-BFD5-0294D4DA5BD0} ©
O42 - Logiciel: PremierOpinion - (.VoiceFive, Inc..) [HKLM][64Bits] -- {eeb86aef-4a5d-4b75-9d74-f16d438fc286} =>PUP.Optional.PremierOpinion
O42 - Logiciel: Realtek High Definition Audio Driver - (.Realtek Semiconductor Corp..) [HKLM][64Bits] -- {F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC} ©
O42 - Logiciel: ABBYY FineReader 9.0 Sprint - (.ABBYY.) [HKLM][64Bits] -- {F9000000-0018-0000-0000-074957833700} ©
O42 - Logiciel: Chromatic - (...) [HKCU][64Bits] -- Chromatic
O42 - Logiciel: GetNowUpdater - (.AppScion.) [HKCU][64Bits] -- GetNowUpdater =>PUP.Optional.LiveSoftAction
O42 - Logiciel: News - (...) [HKCU][64Bits] -- News
O42 - Logiciel: Selection Tools - (.WTools.) [HKCU][64Bits] -- Selection Tools =>PUP.Optional.Nosibay
O42 - Logiciel: WindApp - (.Store.) [HKCU][64Bits] -- WindApp =>PUP.Optional.Nosibay

---\\ HKCU & HKLM Software Keys (193) - 53s
HKLM\SOFTWARE\Wow6432Node\0caf8c5b-8389-434f-81a9-1b08e795693e =>PUP.Optional.CrossRider
HKLM\SOFTWARE\Wow6432Node\5da059a482fd494db3f252126fbc3d5b =>PUP.Optional.CrossRider
HKLM\SOFTWARE\Wow6432Node\ABBYY
HKLM\SOFTWARE\Wow6432Node\Acer Incorporated
HKLM\SOFTWARE\Wow6432Node\Adobe
HKLM\SOFTWARE\Wow6432Node\AdwCleaner
HKLM\SOFTWARE\Wow6432Node\AIM Toolbar
HKLM\SOFTWARE\Wow6432Node\AMD
HKLM\SOFTWARE\Wow6432Node\AppDataLow
HKLM\SOFTWARE\Wow6432Node\Apple Computer, Inc.
HKLM\SOFTWARE\Wow6432Node\Apple Inc.
HKLM\SOFTWARE\Wow6432Node\ArenaHD =>PUP.Optional.CrossRider
HKLM\SOFTWARE\Wow6432Node\AskPartnerNetwork =>Toolbar.AskBar
HKLM\SOFTWARE\Wow6432Node\Atheros Communications Inc.
HKLM\SOFTWARE\Wow6432Node\ATI
HKLM\SOFTWARE\Wow6432Node\ATI Technologies
HKLM\SOFTWARE\Wow6432Node\AVAST Software
HKLM\SOFTWARE\Wow6432Node\CinemaPlus-4.5vV17.08 =>PUP.Optional.CrossRider
HKLM\SOFTWARE\Wow6432Node\CinemaPlus-4.5vV17.08-nv =>PUP.Optional.CrossRider
HKLM\SOFTWARE\Wow6432Node\CinemaPlus-4.5vV17.08-nv-ie =>PUP.Optional.CrossRider
HKLM\SOFTWARE\Wow6432Node\Conduit =>PUP.Optional.Conduit
HKLM\SOFTWARE\Wow6432Node\coupoon =>PUP.Optional.Multiplug
HKLM\SOFTWARE\Wow6432Node\csdimedia =>PUP.Optional.MaxDriverUpdater
HKLM\SOFTWARE\Wow6432Node\CyberLink
HKLM\SOFTWARE\Wow6432Node\DAILYPCCLEAN =>PUP.Optional.DailyPCClean
HKLM\SOFTWARE\Wow6432Node\dfa8f721-9e62-ee70-23d9-97eab932f43e =>PUP.Optional.CrossRider
HKLM\SOFTWARE\Wow6432Node\Dritek
HKLM\SOFTWARE\Wow6432Node\EgisTec IPS
HKLM\SOFTWARE\Wow6432Node\EgisTec MyWinLocker
HKLM\SOFTWARE\Wow6432Node\EgisTec MyWinLockerSuite
HKLM\SOFTWARE\Wow6432Node\EgisTec Shredder
HKLM\SOFTWARE\Wow6432Node\Electronic Arts
HKLM\SOFTWARE\Wow6432Node\EPSON
HKLM\SOFTWARE\Wow6432Node\EpsonNet
HKLM\SOFTWARE\Wow6432Node\fa89413c-c5c5-4b3e-8458-5a4dc8ccc442 =>PUP.Optional.CrossRider
HKLM\SOFTWARE\Wow6432Node\GAMESDESKTOP =>PUP.Optional.GamesDesktop
HKLM\SOFTWARE\Wow6432Node\GetTheResultsHub =>PUP.Optional.GetTheResultsHub
HKLM\SOFTWARE\Wow6432Node\GIE SESAM VITALE
HKLM\SOFTWARE\Wow6432Node\GlobalUpdate =>PUP.Optional.GlobalUpdate
HKLM\SOFTWARE\Wow6432Node\Goobzo =>PUP.Optional.Goobzo
HKLM\SOFTWARE\Wow6432Node\Google
HKLM\SOFTWARE\Wow6432Node\Hercules
HKLM\SOFTWARE\Wow6432Node\HighDefAction =>PUP.Optional.CrossRider
HKLM\SOFTWARE\Wow6432Node\IHProtect =>PUP.Optional.AgentODR
HKLM\SOFTWARE\Wow6432Node\IM Providers
HKLM\SOFTWARE\Wow6432Node\Iminent =>PUP.Optional.IMBooster
HKLM\SOFTWARE\Wow6432Node\IncrediMail
HKLM\SOFTWARE\Wow6432Node\InstalledBrowserExtensions =>PUP.Optional.BrowserExtensions
HKLM\SOFTWARE\Wow6432Node\Intel
HKLM\SOFTWARE\Wow6432Node\JavaSoft
HKLM\SOFTWARE\Wow6432Node\JreMetrics
HKLM\SOFTWARE\Wow6432Node\Licenses
HKLM\SOFTWARE\Wow6432Node\Macromedia
HKLM\SOFTWARE\Wow6432Node\Macrovision
HKLM\SOFTWARE\Wow6432Node\Malwarebytes' Anti-Malware
HKLM\SOFTWARE\Wow6432Node\MaxDrivrUpdater =>PUP.Optional.MaxDriverUpdater
HKLM\SOFTWARE\Wow6432Node\McAfee
HKLM\SOFTWARE\Wow6432Node\McAfee.com
HKLM\SOFTWARE\Wow6432Node\McAfeeInstaller
HKLM\SOFTWARE\Wow6432Node\MOBILEPCSTARTERKIT =>PUP.Optional.MobilePCStarterKit
HKLM\SOFTWARE\Wow6432Node\MovieDea =>PUP.Optional.MovieDea
HKLM\SOFTWARE\Wow6432Node\Mozilla
HKLM\SOFTWARE\Wow6432Node\mozilla.org
HKLM\SOFTWARE\Wow6432Node\MozillaPlugins
HKLM\SOFTWARE\Wow6432Node\mystartsearchSoftware =>PUP.Optional.StartSearch
HKLM\SOFTWARE\Wow6432Node\NewTech Infosystems
HKLM\SOFTWARE\Wow6432Node\Oberon Media
HKLM\SOFTWARE\Wow6432Node\ODBC
HKLM\SOFTWARE\Wow6432Node\OEM
HKLM\SOFTWARE\Wow6432Node\Opendisc
HKLM\SOFTWARE\Wow6432Node\Opera Software
HKLM\SOFTWARE\Wow6432Node\Origin
HKLM\SOFTWARE\Wow6432Node\Origin Games
HKLM\SOFTWARE\Wow6432Node\Realtek
HKLM\SOFTWARE\Wow6432Node\Realtek Semiconductor Corp.
HKLM\SOFTWARE\Wow6432Node\RecordPage =>PUP.Optional.RecordPage
HKLM\SOFTWARE\Wow6432Node\SBAMSvc
HKLM\SOFTWARE\Wow6432Node\SearchProtect =>PUP.Optional.SearchProtect
HKLM\SOFTWARE\Wow6432Node\searchult =>PUP.Optional.Generic
HKLM\SOFTWARE\Wow6432Node\ShopperPro =>PUP.Optional.ShopperPro
HKLM\SOFTWARE\Wow6432Node\Skype
HKLM\SOFTWARE\Wow6432Node\SpeedBit
HKLM\SOFTWARE\Wow6432Node\Speedchecker Limited =>PUP.Optional.InternetSpeedChecker
HKLM\SOFTWARE\Wow6432Node\SupDp =>PUP.Optional.SupTab
HKLM\SOFTWARE\Wow6432Node\supTab =>PUP.Optional.SupTab
HKLM\SOFTWARE\Wow6432Node\supWindowsMangerProtect =>PUP.Optional.WpManager
HKLM\SOFTWARE\Wow6432Node\TeamViewer
HKLM\SOFTWARE\Wow6432Node\Tutorials =>PUP.Optional.AgenceExclusive
HKLM\SOFTWARE\Wow6432Node\VideoLAN
HKLM\SOFTWARE\Wow6432Node\VirualDiskRedist
HKLM\SOFTWARE\Wow6432Node\Volatile
HKLM\SOFTWARE\Wow6432Node\WInterEnhancer =>PUP.Optional.Wajam
HKLM\SOFTWARE\Wow6432Node\Wordinator_1.10.0.20 =>PUP.Optional.Generic
HKLM\SOFTWARE\Wow6432Node\WordSurfer_1.10.0.19 =>PUP.Optional.WordSurfer
HKLM\SOFTWARE\Wow6432Node\Wow6432Node
HKLM\SOFTWARE\Wow6432Node\YorkNewCin =>PUP.Optional.CrossRider
HKLM\SOFTWARE\Wow6432Node\RegisteredApplications
HKCU\SOFTWARE\ABBYY
HKCU\SOFTWARE\Acer
HKCU\SOFTWARE\Adobe
HKCU\SOFTWARE\AOL
HKCU\SOFTWARE\APN PIP =>PUP.Optional.Conduit
HKCU\SOFTWARE\AppDataLow
HKCU\SOFTWARE\Apple Computer, Inc.
HKCU\SOFTWARE\Apple Inc.
HKCU\SOFTWARE\Appscion =>PUP.Optional.LiveSoftAction
HKCU\SOFTWARE\AppscionUpdater =>PUP.Optional.LiveSoftAction
HKCU\SOFTWARE\ArenaHD =>PUP.Optional.CrossRider
HKCU\SOFTWARE\AskPartnerNetwork =>Toolbar.AskBar
HKCU\SOFTWARE\ATI
HKCU\SOFTWARE\AVAST Software
HKCU\SOFTWARE\Brother
HKCU\SOFTWARE\Chromatic
HKCU\SOFTWARE\Chromium
HKCU\SOFTWARE\CHUPDT
HKCU\SOFTWARE\CinemaPlus-4.5vV17.08 =>PUP.Optional.CrossRider
HKCU\SOFTWARE\CinemaPlus-4.5vV17.08-nv =>PUP.Optional.CrossRider
HKCU\SOFTWARE\CinemaPlus-4.5vV17.08-nv-ie =>PUP.Optional.CrossRider
HKCU\SOFTWARE\Com NotificationV09.08 =>PUP.Optional.ComNotification
HKCU\SOFTWARE\Convilog
HKCU\SOFTWARE\Convilog SI
HKCU\SOFTWARE\csdimedia =>PUP.Optional.MaxDriverUpdater
HKCU\SOFTWARE\Cyberlink
HKCU\SOFTWARE\DailyPcClean =>PUP.Optional.DailyPCClean
HKCU\SOFTWARE\DownloadAdmin =>PUP.Optional.UpdateAdmin
HKCU\SOFTWARE\Dritek
HKCU\SOFTWARE\EgisTec MyWinLocker
HKCU\SOFTWARE\Electronic Arts
HKCU\SOFTWARE\eMule
HKCU\SOFTWARE\Epson
HKCU\SOFTWARE\EPSON Download Navigator
HKCU\SOFTWARE\EPSON Software Updater
HKCU\SOFTWARE\Facebook
HKCU\SOFTWARE\GetNowUpdater =>PUP.Optional.LiveSoftAction
HKCU\SOFTWARE\globalUpdate =>PUP.Optional.GlobalUpdate
HKCU\SOFTWARE\Goobzo =>PUP.Optional.Goobzo
HKCU\SOFTWARE\Google
HKCU\SOFTWARE\HighDefAction =>PUP.Optional.CrossRider
HKCU\SOFTWARE\HomeTab =>PUP.Optional.CertifiedToolbar
HKCU\SOFTWARE\IM Providers
HKCU\SOFTWARE\InstalledBrowserExtensions =>PUP.Optional.BrowserExtensions
HKCU\SOFTWARE\JavaSoft
HKCU\SOFTWARE\Kromtech
HKCU\SOFTWARE\Linkey =>PUP.Optional.LinkeySearch
HKCU\SOFTWARE\Local AppWizard-Generated Applications
HKCU\SOFTWARE\Macromedia
HKCU\SOFTWARE\MCAFEE
HKCU\SOFTWARE\Modern UI Test
HKCU\SOFTWARE\Mozilla
HKCU\SOFTWARE\MozillaPlugins
HKCU\SOFTWARE\Netscape
HKCU\SOFTWARE\Nosibay =>PUP.Optional.SPointer
HKCU\SOFTWARE\Oberon Media
HKCU\SOFTWARE\OEM
HKCU\SOFTWARE\Opendisc
HKCU\SOFTWARE\Opera Software
HKCU\SOFTWARE\Optimizer Pro =>PUP.Optional.OptimizerPro
HKCU\SOFTWARE\PC SOFT
HKCU\SOFTWARE\Piriform
HKCU\SOFTWARE\ProductSetup =>Adware.InstallCore
HKCU\SOFTWARE\Realtek
HKCU\SOFTWARE\run_dregol =>PUP.Optional.Browser
HKCU\SOFTWARE\SearchProtectWS =>PUP.Optional.SearchProtect
HKCU\SOFTWARE\SecuROM
HKCU\SOFTWARE\SEIKO EPSON CORPORATION
HKCU\SOFTWARE\SimplyTech =>PUP.Optional.SimplyTech
HKCU\SOFTWARE\Skype
HKCU\SOFTWARE\SkypeRS
HKCU\SOFTWARE\Speedchecker Limited =>PUP.Optional.InternetSpeedChecker
HKCU\SOFTWARE\Store =>PUP.Optional.Generic
HKCU\SOFTWARE\Super Optimizer =>PUP.Optional.SuperOptimizer
HKCU\SOFTWARE\Synaptics
HKCU\SOFTWARE\TeamViewer
HKCU\SOFTWARE\TNT2 =>PUP.Optional.TidyNetwork
HKCU\SOFTWARE\Trolltech
HKCU\SOFTWARE\tstamptoken =>PUP.Optional.MaxComputerCleaner
HKCU\SOFTWARE\tutoriales
HKCU\SOFTWARE\Tutorials =>PUP.Optional.AgenceExclusive
HKCU\SOFTWARE\TutoTag =>PUP.Optional.AgenceExclusive
HKCU\SOFTWARE\undefined
HKCU\SOFTWARE\WajIEnhance =>PUP.Optional.Wajam
HKCU\SOFTWARE\WD
HKCU\SOFTWARE\Windows Live Writer
HKCU\SOFTWARE\WInterEnhancer =>PUP.Optional.Wajam
HKCU\SOFTWARE\Wow6432Node
HKCU\SOFTWARE\WTools
HKCU\SOFTWARE\YorkNewCin =>PUP.Optional.CrossRider
HKCU\SOFTWARE\ZebHelpProcess Helper
HKCU\SOFTWARE\AppDataLow\Software
HKCU\SOFTWARE\AppDataLow\Software\Crossrider =>PUP.Optional.CrossRider
HKCU\SOFTWARE\AppDataLow\Software\DynConIE =>PUP.Optional.DynConIE
HKCU\SOFTWARE\AppDataLow\Software\JavaSoft
HKCU\SOFTWARE\AppDataLow\Software\SmartWeb =>PUP.Optional.SmartWebSearch

---\\ Contenu des dossiers Programmes (953) - 272s
O43 - CFD: 2013/05/10 09:16:49 - [] D -- C:\Program Files (x86)\ABBYY FineReader 9.0 Sprint
O43 - CFD: 2015/08/17 15:45:49 - [] D -- C:\Program Files (x86)\Acer
O43 - CFD: 2015/08/19 13:58:16 - [] D -- C:\Program Files (x86)\Acer GameZone
O43 - CFD: 2013/03/14 18:40:33 - [] D -- C:\Program Files (x86)\Ad-Aware Antivirus
O43 - CFD: 2012/12/28 11:26:53 - [] D -- C:\Program Files (x86)\Adobe
O43 - CFD: 2012/01/08 16:45:27 - [] D -- C:\Program Files (x86)\Apple Software Update
O43 - CFD: 2011/05/27 17:00:40 - [] D -- C:\Program Files (x86)\ATI Technologies
O43 - CFD: 2012/01/08 16:44:25 - [] D -- C:\Program Files (x86)\Bonjour
O43 - CFD: 2015/08/17 15:46:52 - [] D -- C:\Program Files (x86)\CinemaPlus-4.5vV17.08 =>PUP.Optional.CrossRider
O43 - CFD: 2015/08/18 16:52:55 - [] D -- C:\Program Files (x86)\CloudScout Parental Control =>PUP.Optional.CloudScout
O43 - CFD: 2015/08/19 13:46:39 - [] D -- C:\Program Files (x86)\Com NotificationV09.08 =>PUP.Optional.ComNotification
O43 - CFD: 2015/08/20 15:02:27 - [] D -- C:\Program Files (x86)\Common Files
O43 - CFD: 2015/08/20 17:13:17 - [] D -- C:\Program Files (x86)\Coupoon =>PUP.Optional.Multiplug
O43 - CFD: 2011/05/27 17:19:11 - [] D -- C:\Program Files (x86)\Cyberlink
O43 - CFD: 2015/08/19 14:32:23 - [] D -- C:\Program Files (x86)\DailyPCClean =>PUP.Optional.DailyPCClean
O43 - CFD: 2015/08/19 14:32:13 - [] D -- C:\Program Files (x86)\DailyPcClean Support =>PUP.Optional.DailyPCClean
O43 - CFD: 2015/08/17 15:45:49 - [] D -- C:\Program Files (x86)\e4b2636e-1a27-497e-9e7b-3abeffda1f18 =>PUP.Optional.CrossRider
O43 - CFD: 2015/08/20 14:28:37 - [] D -- C:\Program Files (x86)\ED2F3280-1439984681-815C-3B5B-E06995AD0640 =>PUP.Optional.CrossRider
O43 - CFD: 2011/05/05 18:08:06 - [] D -- C:\Program Files (x86)\EgisTec IPS
O43 - CFD: 2011/05/05 18:08:21 - [] D -- C:\Program Files (x86)\EgisTec MyWinLocker
O43 - CFD: 2011/05/05 18:06:56 - [] D -- C:\Program Files (x86)\EgisTec MyWinLockerSuite
O43 - CFD: 2011/05/05 18:08:59 - [] D -- C:\Program Files (x86)\EgisTec Shredder
O43 - CFD: 2015/08/19 14:26:36 - [0] D -- C:\Program Files (x86)\epson
O43 - CFD: 2015/08/19 15:03:23 - [] D -- C:\Program Files (x86)\EPSON Software
O43 - CFD: 2015/08/18 16:51:21 - [] D -- C:\Program Files (x86)\Get The Results Hub =>PUP.Optional.GetTheResultsHub
O43 - CFD: 2015/08/17 15:44:47 - [] D -- C:\Program Files (x86)\globalUpdate =>PUP.Optional.GlobalUpdate
O43 - CFD: 2015/08/19 18:20:03 - [] D -- C:\Program Files (x86)\gmsd_fr_005010064 =>PUP.Optional.CrossRider
O43 - CFD: 2015/08/19 21:36:04 - [] D -- C:\Program Files (x86)\gmsd_fr_005010065 =>PUP.Optional.CrossRider
O43 - CFD: 2013/05/19 19:33:50 - [] D -- C:\Program Files (x86)\Google
O43 - CFD: 2015/08/19 21:19:10 - [0] D -- C:\Program Files (x86)\GUMAF8.tmp
O43 - CFD: 2012/04/09 13:10:22 - [] D -- C:\Program Files (x86)\Hercules
O43 - CFD: 2015/08/19 14:41:00 - [] HD -- C:\Program Files (x86)\InstallShield Installation Information
O43 - CFD: 2013/07/19 15:28:55 - [] D -- C:\Program Files (x86)\Internet Explorer
O43 - CFD: 2012/03/19 21:19:21 - [] D -- C:\Program Files (x86)\iTunes
O43 - CFD: 2013/04/06 20:20:58 - [] D -- C:\Program Files (x86)\Java
O43 - CFD: 2011/05/27 16:56:51 - [] D -- C:\Program Files (x86)\Launch Manager
O43 - CFD: 2015/06/27 13:33:20 - [] D -- C:\Program Files (x86)\Malwarebytes Anti-Malware
O43 - CFD: 2015/07/25 13:44:44 - [] D -- C:\Program Files (x86)\Max Driver Updater =>PUP.Optional.MaxDriverUpdater
O43 - CFD: 2015/07/25 13:44:33 - [] D -- C:\Program Files (x86)\MaxDrivrUpdater =>PUP.Optional.MaxDriverUpdater
O43 - CFD: 2015/08/12 21:56:22 - [] D -- C:\Program Files (x86)\MaxDrivrUpdater_v79.1174 =>PUP.Optional.MaxDriverUpdater
O43 - CFD: 2011/10/11 16:54:07 - [] D -- C:\Program Files (x86)\McAfee
O43 - CFD: 2015/06/27 12:33:38 - [0] D -- C:\Program Files (x86)\Microsoft
O43 - CFD: 2012/02/16 13:51:30 - [] D -- C:\Program Files (x86)\Microsoft Application Virtualization Client
O43 - CFD: 2011/10/19 09:33:52 - [] D -- C:\Program Files (x86)\Microsoft Office
O43 - CFD: 2013/07/19 15:38:09 - [] D -- C:\Program Files (x86)\Microsoft Silverlight
O43 - CFD: 2011/05/05 17:55:23 - [] D -- C:\Program Files (x86)\Microsoft SQL Server Compact Edition
O43 - CFD: 2011/10/19 17:43:22 - [] D -- C:\Program Files (x86)\Microsoft.NET
O43 - CFD: 2015/07/10 16:40:57 - [] D -- C:\Program Files (x86)\MiuiTab =>PUP.Optional.MiuiTab
O43 - CFD: 2015/08/19 14:17:24 - [] D -- C:\Program Files (x86)\MovieDea =>PUP.Optional.MovieDea
O43 - CFD: 2015/08/24 13:47:49 - [] D -- C:\Program Files (x86)\Mozilla Firefox
O43 - CFD: 2015/08/19 15:03:24 - [] D -- C:\Program Files (x86)\Mozilla Maintenance Service
O43 - CFD: 2015/08/19 13:42:34 - [] D -- C:\Program Files (x86)\mpck_fr_017010064 =>PUP.Optional.MobilePCStarterKit
O43 - CFD: 2009/07/14 07:32:38 - [] D -- C:\Program Files (x86)\MSBuild
O43 - CFD: 2011/05/05 18:18:14 - [] D -- C:\Program Files (x86)\newsXpresso
O43 - CFD: 2011/05/27 17:11:30 - [] D -- C:\Program Files (x86)\NTI
O43 - CFD: 2011/10/06 14:39:11 - [] D -- C:\Program Files (x86)\OEM
O43 - CFD: 2015/08/19 14:54:50 - [] D -- C:\Program Files (x86)\OLBPre =>PUP.Optional.MyPCBackup
O43 - CFD: 2015/08/20 15:23:56 - [] D -- C:\Program Files (x86)\Opera
O43 - CFD: 2015/08/19 14:53:01 - [] D -- C:\Program Files (x86)\Optimizer Pro 3.99 =>PUP.Optional.OptimizerPro
O43 - CFD: 2015/06/27 14:54:47 - [] D -- C:\Program Files (x86)\Origin
O43 - CFD: 2015/07/24 13:04:00 - [0] D -- C:\Program Files (x86)\Origin Games
O43 - CFD: 2015/08/25 13:17:08 - [] D -- C:\Program Files (x86)\PC Speed Up
O43 - CFD: 2015/08/25 11:54:10 - [] D -- C:\Program Files (x86)\PremierOpinion =>PUP.Optional.PremierOpinion
O43 - CFD: 2011/05/27 17:03:24 - [] D -- C:\Program Files (x86)\Realtek
O43 - CFD: 2015/08/20 15:02:35 - [] D -- C:\Program Files (x86)\Record Page =>PUP.Optional.RecordPage
O43 - CFD: 2009/07/14 07:32:38 - [] D -- C:\Program Files (x86)\Reference Assemblies
O43 - CFD: 2015/07/10 15:46:25 - [] D -- C:\Program Files (x86)\santesocial
O43 - CFD: 2011/10/10 09:56:14 - [] D -- C:\Program Files (x86)\SESAM
O43 - CFD: 2015/08/19 14:47:43 - [] D -- C:\Program Files (x86)\ShopperPro =>PUP.Optional.ShopperPro
O43 - CFD: 2013/03/31 12:06:29 - [] RD -- C:\Program Files (x86)\Skype
O43 - CFD: 2015/06/27 12:35:03 - [] D -- C:\Program Files (x86)\Software =>PUP.Optional.Boxore
O43 - CFD: 2011/05/05 18:10:46 - [] D -- C:\Program Files (x86)\Symantec
O43 - CFD: 2012/11/21 10:33:13 - [] D -- C:\Program Files (x86)\TeamViewer
O43 - CFD: 2011/05/27 17:04:14 - [0] HD -- C:\Program Files (x86)\Temp
O43 - CFD: 2009/07/14 06:57:06 - [0] HD -- C:\Program Files (x86)\Uninstall Information
O43 - CFD: 2011/10/10 14:05:45 - [] D -- C:\Program Files (x86)\VideoLAN
O43 - CFD: 2015/07/10 16:41:23 - [] D -- C:\Program Files (x86)\Wajam =>PUP.Optional.Wajam
O43 - CFD: 2013/07/20 08:05:18 - [] D -- C:\Program Files (x86)\Windows Defender
O43 - CFD: 2012/06/28 22:35:12 - [] D -- C:\Program Files (x86)\Windows Live
O43 - CFD: 2011/05/28 02:39:09 - [] D -- C:\Program Files (x86)\Windows Mail
O43 - CFD: 2011/05/28 02:39:09 - [] D -- C:\Program Files (x86)\Windows Media Player
O43 - CFD: 2009/07/14 07:32:38 - [] D -- C:\Program Files (x86)\Windows NT
O43 - CFD: 2011/05/28 02:39:08 - [] D -- C:\Program Files (x86)\Windows Photo Viewer
O43 - CFD: 2010/11/21 05:31:38 - [] D -- C:\Program Files (x86)\Windows Portable Devices
O43 - CFD: 2011/05/28 02:39:09 - [] D -- C:\Program Files (x86)\Windows Sidebar
O43 - CFD: 2015/07/10 16:41:50 - [] D -- C:\Program Files (x86)\WInterEnhancer =>PUP.Optional.Wajam
O43 - CFD: 2015/07/10 17:11:01 - [] D -- C:\Program Files (x86)\Wordinator_1.10.0.20 =>PUP.Optional.Generic
O43 - CFD: 2015/08/19 14:48:22 - [] D -- C:\Program Files (x86)\YouTube Accelerator
O43 - CFD: 2013/04/29 20:03:17 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ABBYY FineReader 9.0 Sprint
O43 - CFD: 2011/05/05 17:00:27 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories
O43 - CFD: 2013/03/24 14:43:04 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acer
O43 - CFD: 2011/05/05 18:14:41 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acer Backup Manager
O43 - CFD: 2011/05/27 17:27:09 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acer Crystal Eye Webcam
O43 - CFD: 2015/08/19 13:57:57 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acer GameZone
O43 - CFD: 2011/05/27 16:54:06 - [] AD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AcerSystem
O43 - CFD: 2009/07/14 06:57:13 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools
O43 - CFD: 2015/08/19 17:32:04 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVAST Software
O43 - CFD: 2011/05/27 17:00:48 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Catalyst Control Center
O43 - CFD: 2015/06/27 18:39:59 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
O43 - CFD: 2011/05/27 17:21:47 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\clear.fi
O43 - CFD: 2015/07/10 15:44:18 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ConvilogSV2
O43 - CFD: 2015/08/19 14:32:28 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DailyPCClean =>PUP.Optional.DailyPCClean
O43 - CFD: 2015/06/28 09:13:27 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Defraggler
O43 - CFD: 2011/05/05 18:09:02 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EgisTec
O43 - CFD: 2012/07/02 19:23:55 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\eMule
O43 - CFD: 2015/08/20 14:27:47 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Epson Software
O43 - CFD: 2015/08/19 13:57:55 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
O43 - CFD: 2015/08/19 21:36:03 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GAMESDESKTOP =>PUP.Optional.GamesDesktop
O43 - CFD: 2013/05/19 19:33:45 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
O43 - CFD: 2012/03/19 21:19:24 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
O43 - CFD: 2009/07/14 06:57:09 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Maintenance
O43 - CFD: 2015/06/27 13:33:25 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
O43 - CFD: 2015/07/25 13:44:44 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Max Driver Updater =>PUP.Optional.MaxDriverUpdater
O43 - CFD: 2011/10/06 14:38:51 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\McAfee Family Protection
O43 - CFD: 2011/10/19 09:34:55 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office Starter (Français)
O43 - CFD: 2013/07/19 14:51:07 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
O43 - CFD: 2015/08/19 13:42:34 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MOBILEPCSTARTERKIT =>PUP.Optional.MobilePCStarterKit
O43 - CFD: 2011/05/05 18:18:14 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\newsXpresso
O43 - CFD: 2011/05/05 18:10:46 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Norton Online Backup
O43 - CFD: 2011/05/27 17:13:09 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NTI Media Maker 9
O43 - CFD: 2015/08/19 14:53:01 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Optimizer Pro v3.2 =>PUP.Optional.OptimizerPro
O43 - CFD: 2015/06/27 14:54:10 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Origin
O43 - CFD: 2015/08/20 14:21:29 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PC Speed Up
O43 - CFD: 2015/08/25 13:13:23 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PremierOpinion =>PUP.Optional.PremierOpinion
O43 - CFD: 2013/03/31 12:06:32 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
O43 - CFD: 2013/01/21 15:03:06 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
O43 - CFD: 2010/11/21 09:16:41 - [0] RHD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tablet PC
O43 - CFD: 2015/08/20 15:02:59 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\UpdateAdmin =>PUP.Optional.UpdateAdmin
O43 - CFD: 2013/01/18 17:32:52 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
O43 - CFD: 2012/06/28 22:35:05 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live
O43 - CFD: 2015/07/10 16:41:51 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WInterEnhancer =>PUP.Optional.Wajam
O43 - CFD: 2015/08/19 14:45:07 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\YouTube Accelerator
O43 - CFD: 2015/08/17 16:06:43 - [] D -- C:\ProgramData\1201874700404408440
O43 - CFD: 2015/08/25 11:55:32 - [] D -- C:\ProgramData\6f66c052-8827-4487-9031-09becb0cf541
O43 - CFD: 2015/08/25 11:55:31 - [] D -- C:\ProgramData\87737dd0-ad90-4193-bd48-336966b8d777
O43 - CFD: 2013/06/17 16:03:30 - [] D -- C:\ProgramData\ABBYY
O43 - CFD: 2015/08/25 12:36:12 - [] D -- C:\ProgramData\abc =>PUP.Optional.BundleInstaller
O43 - CFD: 2012/12/28 11:47:18 - [] D -- C:\ProgramData\Adobe
O43 - CFD: 2012/01/08 16:45:11 - [] D -- C:\ProgramData\Apple
O43 - CFD: 2012/01/08 16:46:50 - [] D -- C:\ProgramData\Apple Computer
O43 - CFD: 2011/10/06 14:38:26 - [0] SHD -- C:\ProgramData\Application Data
O43 - CFD: 2012/01/21 14:55:18 - [] D -- C:\ProgramData\ATI
O43 - CFD: 2015/06/27 13:47:48 - [] D -- C:\ProgramData\AVAST Software
O43 - CFD: 2011/05/05 18:15:39 - [] D -- C:\ProgramData\BackupManager
O43 - CFD: 2012/03/19 21:21:49 - [] D -- C:\ProgramData\boost_interprocess
O43 - CFD: 2011/10/06 14:38:26 - [0] SHD -- C:\ProgramData\Bureau
O43 - CFD: 2015/08/19 13:11:48 - [] D -- C:\ProgramData\c5656c1a00006269
O43 - CFD: 2015/08/25 13:10:27 - [] D -- C:\ProgramData\clear.fi
O43 - CFD: 2011/05/27 17:23:56 - [] D -- C:\ProgramData\CLSK
O43 - CFD: 2012/06/09 15:20:20 - [] D -- C:\ProgramData\CyberLink
O43 - CFD: 2011/10/06 14:38:26 - [0] SHD -- C:\ProgramData\Documents
O43 - CFD: 2013/02/15 21:39:53 - [] D -- C:\ProgramData\EA Core
O43 - CFD: 2011/05/27 16:54:01 - [] D -- C:\ProgramData\EgisTec
O43 - CFD: 2011/05/27 16:53:58 - [] D -- C:\ProgramData\EgisTec IPS
O43 - CFD: 2012/12/25 01:37:29 - [] D -- C:\ProgramData\Electronic Arts
O43 - CFD: 2012/07/02 19:18:45 - [] D -- C:\ProgramData\eMule
O43 - CFD: 2013/05/10 09:23:54 - [] D -- C:\ProgramData\EPSON
O43 - CFD: 2011/10/06 14:38:26 - [0] SHD -- C:\ProgramData\Favoris
O43 - CFD: 2011/05/27 17:10:34 - [] D -- C:\ProgramData\FLEXnet
O43 - CFD: 2013/03/14 18:40:23 - [] D -- C:\ProgramData\GFI Software
O43 - CFD: 2015/07/10 16:40:55 - [] D -- C:\ProgramData\IHProtectUpDate =>PUP.Optional.AgentODR
O43 - CFD: 2015/08/18 16:52:15 - [] D -- C:\ProgramData\InstallSightSDK =>PUP.Optional.WebBar
O43 - CFD: 2012/05/22 18:40:53 - [] D -- C:\ProgramData\InterAction studios
O43 - CFD: 2013/03/14 16:52:06 - [] D -- C:\ProgramData\Lavasoft
O43 - CFD: 2015/06/27 13:33:13 - [] D -- C:\ProgramData\Malwarebytes
O43 - CFD: 2012/11/25 12:10:33 - [] D -- C:\ProgramData\McAfee
O43 - CFD: 2011/10/06 14:38:26 - [0] SHD -- C:\ProgramData\Menu Démarrer
O43 - CFD: 2015/06/27 12:33:38 - [] SD -- C:\ProgramData\Microsoft
O43 - CFD: 2011/10/31 17:18:01 - [] D -- C:\ProgramData\Microsoft Help
O43 - CFD: 2011/10/06 14:38:26 - [0] SHD -- C:\ProgramData\Modèles
O43 - CFD: 2015/08/25 11:57:12 - [] D -- C:\ProgramData\MovieDeaConfig =>PUP.Optional.MovieDea
O43 - CFD: 2012/05/07 10:56:56 - [] D -- C:\ProgramData\Mozilla
O43 - CFD: 2011/05/05 18:18:20 - [] D -- C:\ProgramData\newsXpresso
O43 - CFD: 2011/05/27 17:13:15 - [] D -- C:\ProgramData\NTI Launcher
O43 - CFD: 2011/05/05 17:31:50 - [] D -- C:\ProgramData\OberonGameConsole
O43 - CFD: 2011/10/06 14:41:55 - [] D -- C:\ProgramData\oem
O43 - CFD: 2015/06/27 14:55:43 - [] D -- C:\ProgramData\Origin
O43 - CFD: 2015/08/19 18:22:42 - [] D -- C:\ProgramData\Package Cache
O43 - CFD: 2015/07/10 15:49:46 - [] D -- C:\ProgramData\santesocial
O43 - CFD: 2015/07/24 13:23:53 - [0] D -- C:\ProgramData\ScanCVL
O43 - CFD: 2015/08/19 14:48:00 - [] D -- C:\ProgramData\ShopperPro =>PUP.Optional.ShopperPro
O43 - CFD: 2013/03/31 12:06:59 - [] D -- C:\ProgramData\Skype
O43 - CFD: 2015/06/27 12:35:03 - [] D -- C:\ProgramData\Software =>PUP.Optional.Boxore
O43 - CFD: 2013/04/06 19:55:05 - [] D -- C:\ProgramData\Sun
O43 - CFD: 2011/05/05 18:10:46 - [] D -- C:\ProgramData\Symantec
O43 - CFD: 2015/08/25 13:09:37 - [] AD -- C:\ProgramData\Temp
O43 - CFD: 2012/04/07 13:43:15 - [] D -- C:\ProgramData\UAB
O43 - CFD: 2013/05/10 09:14:50 - [] D -- C:\ProgramData\UDL
O43 - CFD: 2011/10/23 12:36:00 - [] D -- C:\ProgramData\VirtualizedApplications
O43 - CFD: 2015/07/10 16:40:25 - [] D -- C:\ProgramData\WindowsMangerProtect =>PUP.Optional.WpManager
O43 - CFD: 2015/07/28 09:45:22 - [] D -- C:\ProgramData\ZombieNews =>PUP.Optional.ZombieNews
O43 - CFD: 2015/07/10 16:54:10 - [] D -- C:\ProgramData\{0147E984-51C5-3802-E043-488030C19B0E}
O43 - CFD: 2015/08/24 19:44:49 - [] D -- C:\ProgramData\{379ae63f-4fde-5986-379a-ae63f4fd98fd}
O43 - CFD: 2015/08/19 11:37:35 - [] D -- C:\ProgramData\{4a704f5a-0f2b-cb90-4a70-04f5a0f23d68}
O43 - CFD: 2015/08/18 15:21:11 - [] D -- C:\ProgramData\{60383ff4-637e-4fc1-6038-83ff4637ffd1}
O43 - CFD: 2015/08/18 16:54:58 - [] D -- C:\ProgramData\{7410af54-1eac-bf01-7410-0af541eabd50}
O43 - CFD: 2012/01/08 16:47:41 - [] D -- C:\ProgramData\{93E26451-CD9A-43A5-A2FA-C42392EA4001}
O43 - CFD: 2015/08/25 12:57:11 - [] D -- C:\Program Files (x86)\Common Files\6f66c052-8827-4487-9031-09becb0cf541
O43 - CFD: 2015/08/25 11:57:54 - [] D -- C:\Program Files (x86)\Common Files\87737dd0-ad90-4193-bd48-336966b8d777
O43 - CFD: 2013/04/29 20:01:38 - [] D -- C:\Program Files (x86)\Common Files\ABBYY
O43 - CFD: 2012/12/28 11:27:04 - [] D -- C:\Program Files (x86)\Common Files\Adobe
O43 - CFD: 2011/05/27 16:53:12 - [] D -- C:\Program Files (x86)\Common Files\Adobe AIR
O43 - CFD: 2012/03/19 21:18:35 - [] D -- C:\Program Files (x86)\Common Files\Apple
O43 - CFD: 2011/05/27 17:01:04 - [] D -- C:\Program Files (x86)\Common Files\ATI Technologies
O43 - CFD: 2011/10/19 09:33:52 - [] D -- C:\Program Files (x86)\Common Files\DESIGNER
O43 - CFD: 2011/05/05 18:08:03 - [] D -- C:\Program Files (x86)\Common Files\EgisTec
O43 - CFD: 2013/05/10 09:20:25 - [] D -- C:\Program Files (x86)\Common Files\EPSON
O43 - CFD: 2011/05/27 17:03:16 - [] D -- C:\Program Files (x86)\Common Files\InstallShield
O43 - CFD: 2013/04/06 19:55:03 - [] D -- C:\Program Files (x86)\Common Files\Java
O43 - CFD: 2011/05/27 17:10:32 - [] D -- C:\Program Files (x86)\Common Files\Macrovision Shared
O43 - CFD: 2011/10/11 16:53:51 - [] D -- C:\Program Files (x86)\Common Files\mcafee
O43 - CFD: 2013/05/20 16:14:02 - [] D -- C:\Program Files (x86)\Common Files\microsoft shared
O43 - CFD: 2011/05/05 17:19:05 - [] D -- C:\Program Files (x86)\Common Files\Oberon Media
O43 - CFD: 2009/07/14 05:20:08 - [] D -- C:\Program Files (x86)\Common Files\Services
O43 - CFD: 2013/03/31 12:06:29 - [] D -- C:\Program Files (x86)\Common Files\Skype
O43 - CFD: 2009/07/14 05:20:08 - [] D -- C:\Program Files (x86)\Common Files\SpeechEngines
O43 - CFD: 2011/11/10 13:24:23 - [] D -- C:\Program Files (x86)\Common Files\System
O43 - CFD: 2011/05/05 17:38:17 - [] D -- C:\Program Files (x86)\Common Files\Windows Live
O43 - CFD: 2013/03/14 18:39:07 - [] D -- C:\Users\celine\AppData\Roaming\Ad-Aware Antivirus
O43 - CFD: 2012/12/28 11:43:25 - [] D -- C:\Users\celine\AppData\Roaming\Adobe
O43 - CFD: 2012/01/08 17:09:01 - [] D -- C:\Users\celine\AppData\Roaming\Apple Computer
O43 - CFD: 2012/01/21 14:55:18 - [] D -- C:\Users\celine\AppData\Roaming\ATI
O43 - CFD: 2015/06/27 14:51:31 - [] D -- C:\Users\celine\AppData\Roaming\AVAST Software
O43 - CFD: 2011/10/22 13:55:36 - [] RD -- C:\Users\celine\AppData\Roaming\Brother
O43 - CFD: 2015/07/25 13:44:57 - [] D -- C:\Users\celine\AppData\Roaming\csdimedia =>PUP.Optional.MaxDriverUpdater
O43 - CFD: 2011/10/06 14:39:27 - [] D -- C:\Users\celine\AppData\Roaming\CyberLink
O43 - CFD: 2015/08/19 14:32:35 - [] D -- C:\Users\celine\AppData\Roaming\DailyPCClean =>PUP.Optional.DailyPCClean
O43 - CFD: 2015/07/10 16:39:03 - [] D -- C:\Users\celine\AppData\Roaming\driver
O43 - CFD: 2015/07/10 17:01:06 - [] D -- C:\Users\celine\AppData\Roaming\DriverTurbo =>PUP.Optional.DriverTurbo
O43 - CFD: 2013/02/18 11:56:08 - [] D -- C:\Users\celine\AppData\Roaming\dvdcss
O43 - CFD: 2013/05/10 17:35:49 - [] D -- C:\Users\celine\AppData\Roaming\Epson
O43 - CFD: 2015/08/20 14:21:03 - [] D -- C:\Users\celine\AppData\Roaming\GetNowUpdater =>PUP.Optional.GetNow
O43 - CFD: 2015/08/20 14:20:43 - [] D -- C:\Users\celine\AppData\Roaming\GetNowUpdaterRecovery =>PUP.Optional.GetNow
O43 - CFD: 2011/10/06 14:41:20 - [] D -- C:\Users\celine\AppData\Roaming\Identities
O43 - CFD: 2012/04/09 13:09:19 - [] D -- C:\Users\celine\AppData\Roaming\InstallShield
O43 - CFD: 2011/10/06 14:41:57 - [] D -- C:\Users\celine\AppData\Roaming\Macromedia
O43 - CFD: 2010/11/21 09:16:41 - [0] D -- C:\Users\celine\AppData\Roaming\Media Center Programs
O43 - CFD: 2015/07/10 16:42:51 - [] SD -- C:\Users\celine\AppData\Roaming\Microsoft
O43 - CFD: 2011/10/10 09:27:18 - [] D -- C:\Users\celine\AppData\Roaming\Mozilla
O43 - CFD: 2015/08/19 17:08:11 - [] D -- C:\Users\celine\AppData\Roaming\mystartsearch =>PUP.Optional.StartSearch
O43 - CFD: 2015/08/19 14:47:37 - [] D -- C:\Users\celine\AppData\Roaming\News =>PUP.Optional.BredoLab
O43 - CFD: 2015/08/19 14:55:05 - [0] D -- C:\Users\celine\AppData\Roaming\Nosibay =>PUP.Optional.BubbleDock
O43 - CFD: 2015/07/10 17:09:19 - [] D -- C:\Users\celine\AppData\Roaming\Opera Software
O43 - CFD: 2015/08/19 14:58:57 - [] D -- C:\Users\celine\AppData\Roaming\Optimizer Pro =>PUP.Optional.OptimizerPro
O43 - CFD: 2013/08/14 13:49:37 - [] D -- C:\Users\celine\AppData\Roaming\Origin
O43 - CFD: 2012/06/09 15:20:04 - [] D -- C:\Users\celine\AppData\Roaming\PowerCinema
O43 - CFD: 2012/12/25 18:57:24 - [] RHD -- C:\Users\celine\AppData\Roaming\SecuROM
O43 - CFD: 2015/07/10 17:09:48 - [] D -- C:\Users\celine\AppData\Roaming\Shortcut
O43 - CFD: 2015/06/27 18:45:12 - [] D -- C:\Users\celine\AppData\Roaming\Skype
O43 - CFD: 2013/07/20 08:05:12 - [] D -- C:\Users\celine\AppData\Roaming\SoftGrid Client
O43 - CFD: 2012/07/31 13:33:48 - [] D -- C:\Users\celine\AppData\Roaming\SprillRichiEng
O43 - CFD: 2015/07/10 16:43:23 - [] D -- C:\Users\celine\AppData\Roaming\Store =>PUP.Optional.Nosibay
O43 - CFD: 2015/07/10 15:35:05 - [] D -- C:\Users\celine\AppData\Roaming\TeamViewer
O43 - CFD: 2011/10/19 09:35:26 - [0] D -- C:\Users\celine\AppData\Roaming\TP
O43 - CFD: 2015/08/12 22:44:31 - [] D -- C:\Users\celine\AppData\Roaming\vlc
O43 - CFD: 2015/08/19 13:44:41 - [] D -- C:\Users\celine\AppData\Roaming\VOPackage =>PUP.Optional.Downware
O43 - CFD: 2011/10/31 17:09:17 - [0] D -- C:\Users\celine\AppData\Roaming\Windows Live Writer
O43 - CFD: 2015/07/10 16:43:35 - [] D -- C:\Users\celine\AppData\Roaming\WTools
O43 - CFD: 2015/08/25 13:31:00 - [] D -- C:\Users\celine\AppData\Roaming\ZHP
O43 - CFD: 2015/07/11 16:54:06 - [] HD -- C:\Users\celine\AppData\Local\441430b15714fd7c
O43 - CFD: 2015/08/18 17:02:04 - [] D -- C:\Users\celine\AppData\Local\ABBYY
O43 - CFD: 2011/10/06 14:39:14 - [] D -- C:\Users\celine\AppData\Local\Acer
O43 - CFD: 2012/12/28 11:25:26 - [] D -- C:\Users\celine\AppData\Local\Adobe
O43 - CFD: 2012/01/08 16:45:30 - [] D -- C:\Users\celine\AppData\Local\Apple
O43 - CFD: 2012/01/08 16:47:53 - [] D -- C:\Users\celine\AppData\Local\Apple Computer
O43 - CFD: 2011/10/06 14:38:40 - [0] SHD -- C:\Users\celine\AppData\Local\Application Data
O43 - CFD: 2012/01/21 14:55:18 - [] D -- C:\Users\celine\AppData\Local\ATI
O43 - CFD: 2015/08/19 14:45:58 - [] D -- C:\Users\celine\AppData\Local\Chromatic =>PUP.Optional.Chromatic
O43 - CFD: 2015/08/19 14:43:30 - [] D -- C:\Users\celine\AppData\Local\CrashRpt =>.Legitimate.CrashReports
O43 - CFD: 2012/10/31 13:50:23 - [] D -- C:\Users\celine\AppData\Local\Cyberlink
O43 - CFD: 2015/08/25 13:07:58 - [] D -- C:\Users\celine\AppData\Local\DailyPcClean Support =>PUP.Optional.DailyPCClean
O43 - CFD: 2013/03/14 16:47:31 - [] D -- C:\Users\celine\AppData\Local\Downloaded Installations
O43 - CFD: 2011/10/06 14:41:59 - [] D -- C:\Users\celine\AppData\Local\EgisTec IPS
O43 - CFD: 2015/08/18 16:58:55 - [] D -- C:\Users\celine\AppData\Local\ElevatedDiagnostics
O43 - CFD: 2012/07/02 19:18:00 - [] D -- C:\Users\celine\AppData\Local\eMule
O43 - CFD: 2011/11/09 19:26:21 - [] D -- C:\Users\celine\AppData\Local\Facebook
O43 - CFD: 2015/08/20 14:24:25 - [] D -- C:\Users\celine\AppData\Local\GetNowUpdater =>PUP.Optional.GetNow
O43 - CFD: 2015/08/17 15:44:47 - [] D -- C:\Users\celine\AppData\Local\globalUpdate =>PUP.Optional.GlobalUpdate
O43 - CFD: 2015/08/25 13:07:40 - [] D -- C:\Users\celine\AppData\Local\gmsd_fr_005010064 =>PUP.Optional.CrossRider
O43 - CFD: 2015/08/25 13:07:48 - [] D -- C:\Users\celine\AppData\Local\gmsd_fr_005010065 =>PUP.Optional.CrossRider
O43 - CFD: 2011/10/10 10:05:39 - [] D -- C:\Users\celine\AppData\Local\Google
O43 - CFD: 2011/10/06 14:38:40 - [0] SHD -- C:\Users\celine\AppData\Local\Historique
O43 - CFD: 2015/08/19 14:43:42 - [] D -- C:\Users\celine\AppData\Local\Installer =>PUP.Optional.InstallPedia
O43 - CFD: 2012/06/26 15:18:08 - [] D -- C:\Users\celine\AppData\Local\Macromedia
O43 - CFD: 2015/08/20 14:21:25 - [] D -- C:\Users\celine\AppData\Local\Microsoft
O43 - CFD: 2013/03/25 21:17:27 - [] D -- C:\Users\celine\AppData\Local\Microsoft Games
O43 - CFD: 2011/10/31 17:17:57 - [0] D -- C:\Users\celine\AppData\Local\Microsoft Help
O43 - CFD: 2015/07/25 13:51:46 - [] D -- C:\Users\celine\AppData\Local\Mozilla
O43 - CFD: 2015/08/25 13:11:34 - [] D -- C:\Users\celine\AppData\Local\mpck_fr_017010064 =>PUP.Optional.MobilePCStarterKit
O43 - CFD: 2012/07/21 20:07:30 - [] D -- C:\Users\celine\AppData\Local\Oberon Games
O43 - CFD: 2015/07/10 17:09:21 - [] D -- C:\Users\celine\AppData\Local\Opera Software
O43 - CFD: 2013/08/14 13:49:37 - [] D -- C:\Users\celine\AppData\Local\Origin
O43 - CFD: 2013/07/15 02:21:45 - [] D -- C:\Users\celine\AppData\Local\PowerCinema
O43 - CFD: 2015/06/27 13:32:56 - [] D -- C:\Users\celine\AppData\Local\Programs
O43 - CFD: 2015/08/19 14:28:37 - [] D -- C:\Users\celine\AppData\Local\SmartWeb =>PUP.Optional.SmartWebSearch
O43 - CFD: 2011/10/19 09:35:12 - [] D -- C:\Users\celine\AppData\Local\SoftGrid Client
O43 - CFD: 2015/08/25 13:33:12 - [] D -- C:\Users\celine\AppData\Local\Temp
O43 - CFD: 2011/10/06 14:38:40 - [0] SHD -- C:\Users\celine\AppData\Local\Temporary Internet Files
O43 - CFD: 2015/08/20 15:02:55 - [] D -- C:\Users\celine\AppData\Local\UpdateAdmin =>PUP.Optional.UpdateAdmin
O43 - CFD: 2011/10/06 14:38:55 - [0] D -- C:\Users\celine\AppData\Local\VirtualStore
O43 - CFD: 2011/12/28 16:38:39 - [] D -- C:\Users\celine\AppData\Local\WBFSManager
O43 - CFD: 2015/08/19 14:47:04 - [] D -- C:\Users\celine\AppData\Local\wd =>PUP.Optional.WatchDog
O43 - CFD: 2015/08/23 16:01:38 - [] D -- C:\Users\celine\AppData\Local\WebBar =>PUP.Optional.WebBar
O43 - CFD: 2013/06/01 14:04:09 - [] D -- C:\Users\celine\AppData\Local\Windows Live
O43 - CFD: 2011/10/31 17:09:25 - [] D -- C:\Users\celine\AppData\Local\Windows Live Writer
O43 - CFD: 2012/02/28 10:31:03 - [0] D -- C:\Users\celine\AppData\Local\{009480EE-F840-4A90-8FDD-EFFE1E208F87}
O43 - CFD: 2013/06/06 12:25:02 - [0] D -- C:\Users\celine\AppData\Local\{00DCEFF6-A215-46BE-A2F3-6EBAFF71DCBB}
O43 - CFD: 2012/07/27 10:05:20 - [0] D -- C:\Users\celine\AppData\Local\{016374BB-BEA5-4121-A662-FC4A7C035CA8}
O43 - CFD: 2012/01/12 15:15:03 - [0] D -- C:\Users\celine\AppData\Local\{017C938D-3139-4FD6-B34E-01662DBA8F89}
O43 - CFD: 2012/08/26 14:29:00 - [0] D -- C:\Users\celine\AppData\Local\{01F339AE-DE1F-4CB1-ABBA-860B595C1A0F}
O43 - CFD: 2012/06/28 20:25:41 - [0] D -- C:\Users\celine\AppData\Local\{02176858-EFD8-4515-A036-DCCDAA6E796C}
O43 - CFD: 2012/05/31 14:42:08 - [0] D -- C:\Users\celine\AppData\Local\{027F80E8-AC7E-4360-9859-A32127239FE0}
O43 - CFD: 2012/11/03 09:57:29 - [0] D -- C:\Users\celine\AppData\Local\{0378FF78-47F6-4A2D-B709-9E099B0555DC}
O43 - CFD: 2013/06/28 18:01:10 - [0] D -- C:\Users\celine\AppData\Local\{037F772B-042B-48C6-AD5C-010168AA42BB}
O43 - CFD: 2012/01/14 14:09:07 - [0] D -- C:\Users\celine\AppData\Local\{037FB379-AFFB-45C2-9E9D-25B9BD623B4F}
O43 - CFD: 2013/05/16 00:49:11 - [0] D -- C:\Users\celine\AppData\Local\{038B4538-98E7-4132-A360-F94ED75EF1EB}
O43 - CFD: 2012/06/04 12:27:45 - [0] D -- C:\Users\celine\AppData\Local\{03EB0674-15E6-4E7A-B316-708EAB16E2AF}
O43 - CFD: 2013/03/22 14:01:21 - [0] D -- C:\Users\celine\AppData\Local\{05A11D4D-ADB5-4A3C-B217-68C58341C1E6}
O43 - CFD: 2013/05/19 23:31:08 - [0] D -- C:\Users\celine\AppData\Local\{05B76578-86BA-4699-BE3E-1A23581E00DF}
O43 - CFD: 2013/06/07 14:49:50 - [0] D -- C:\Users\celine\AppData\Local\{05DB3F6D-1EE7-4D34-93A1-697C69C027CA}
O43 - CFD: 2013/02/12 03:55:41 - [0] D -- C:\Users\celine\AppData\Local\{06BFD796-FBEC-4C5F-866A-6960D56E7A07}
O43 - CFD: 2012/06/28 20:23:11 - [0] D -- C:\Users\celine\AppData\Local\{072E098B-F23C-405D-8D16-9A045320CA01}
O43 - CFD: 2012/06/26 15:27:14 - [0] D -- C:\Users\celine\AppData\Local\{0775E034-0633-48E0-A325-4F239BEF30F8}
O43 - CFD: 2012/10/06 21:10:19 - [0] D -- C:\Users\celine\AppData\Local\{07C8DFDE-90B8-44E1-99D9-F877BEF366FB}
O43 - CFD: 2012/03/06 15:43:22 - [0] D -- C:\Users\celine\AppData\Local\{081B8D30-9E91-484B-816C-B23872E6917E}
O43 - CFD: 2012/10/02 13:05:30 - [0] D -- C:\Users\celine\AppData\Local\{084E8236-DB92-4E02-9175-4BF44EA56BAD}
O43 - CFD: 2012/06/28 21:46:49 - [0] D -- C:\Users\celine\AppData\Local\{08FAB073-D146-45A7-A642-6EFD059C72B0}
O43 - CFD: 2012/03/12 14:42:18 - [0] D -- C:\Users\celine\AppData\Local\{08FF8991-FD20-452B-A21C-9981FCE0D325}
O43 - CFD: 2012/05/07 11:00:40 - [0] D -- C:\Users\celine\AppData\Local\{0A082615-7C43-4BE9-B8E9-CA05F4659937}
O43 - CFD: 2012/05/30 19:26:47 - [0] D -- C:\Users\celine\AppData\Local\{0A2FA233-81AE-4F97-9DF0-CB64C0CA9B78}
O43 - CFD: 2012/06/09 10:12:07 - [0] D -- C:\Users\celine\AppData\Local\{0A355732-C0FF-4AA9-8B70-38B57C9C7BF1}
O43 - CFD: 2012/01/26 15:08:46 - [0] D -- C:\Users\celine\AppData\Local\{0AD1B0D1-E806-4302-93A2-3B0700DB820D}
O43 - CFD: 2013/03/08 11:02:54 - [0] D -- C:\Users\celine\AppData\Local\{0C14BB68-06F2-4963-A236-2E3989A5BF44}
O43 - CFD: 2012/06/19 19:03:34 - [0] D -- C:\Users\celine\AppData\Local\{0C7F9D2C-067A-4D79-8521-95721AAD50B9}
O43 - CFD: 2012/05/13 09:31:10 - [0] D -- C:\Users\celine\AppData\Local\{0D1F5B3D-69A9-4A76-B7B5-C8BB56BBD16A}
O43 - CFD: 2012/07/01 20:30:52 - [0] D -- C:\Users\celine\AppData\Local\{0D2DA6C4-2C05-4B84-A381-7CB086275F5A}
O43 - CFD: 2012/09/18 03:55:11 - [0] D -- C:\Users\celine\AppData\Local\{0D4EF6CE-94B0-4CFF-8E66-FBC75F840014}
O43 - CFD: 2013/07/02 08:41:42 - [0] D -- C:\Users\celine\AppData\Local\{0D5FF060-1F30-45F1-9883-A3EA5B599262}
O43 - CFD: 2012/10/28 07:55:46 - [0] D -- C:\Users\celine\AppData\Local\{0DEB0EC1-67E3-41E0-B229-369E20030E62}
O43 - CFD: 2013/06/14 01:00:09 - [0] D -- C:\Users\celine\AppData\Local\{0ED853AD-7934-49B1-A0AE-257DF8E2D975}
O43 - CFD: 2013/06/01 05:19:37 - [0] D -- C:\Users\celine\AppData\Local\{0F0C9061-6B9F-48DD-A31B-696A17B5168A}
O43 - CFD: 2012/07/25 11:11:05 - [0] D -- C:\Users\celine\AppData\Local\{0F7C270D-CDAF-40E4-A6D9-468BBCEF1F7B}
O43 - CFD: 2012/08/20 21:24:28 - [0] D -- C:\Users\celine\AppData\Local\{0FC929BF-5033-463B-A196-7C3B5422F220}
O43 - CFD: 2012/02/08 21:46:31 - [0] D -- C:\Users\celine\AppData\Local\{0FE14E83-4058-45F6-A642-2EBC774F6278}
O43 - CFD: 2012/03/12 14:42:34 - [0] D -- C:\Users\celine\AppData\Local\{104F8BD3-5595-4C6D-85A7-9F24E518FAF7}
O43 - CFD: 2013/05/16 05:22:18 - [0] D -- C:\Users\celine\AppData\Local\{1090D480-5FBB-48A9-B3A8-7235894120D8}
O43 - CFD: 2012/02/19 14:02:06 - [0] D -- C:\Users\celine\AppData\Local\{115AF0EB-F57A-494E-A91A-1BD08DA4B9F5}
O43 - CFD: 2012/10/27 09:12:54 - [0] D -- C:\Users\celine\AppData\Local\{11BD70FD-4E04-4DEB-9941-9E56C88D378F}
O43 - CFD: 2012/06/24 10:50:59 - [0] D -- C:\Users\celine\AppData\Local\{125D9196-D59E-4994-81FE-14DEFF48074A}
O43 - CFD: 2012/07/22 20:38:35 - [0] D -- C:\Users\celine\AppData\Local\{1330738E-4B46-4841-BE71-A3D30642C3BF}
O43 - CFD: 2012/06/20 19:17:36 - [0] D -- C:\Users\celine\AppData\Local\{13BCD28C-416E-4585-9E00-8579BA9D336F}
O43 - CFD: 2012/06/01 12:00:24 - [0] D -- C:\Users\celine\AppData\Local\{141C1EBD-29BD-4E7D-9117-E0CF5110217F}
O43 - CFD: 2012/06/09 17:36:19 - [0] D -- C:\Users\celine\AppData\Local\{143C5D03-F2CB-4E28-AAE4-6687DCC63E73}
O43 - CFD: 2012/03/17 13:06:32 - [0] D -- C:\Users\celine\AppData\Local\{1468F81B-D1D0-4AA1-B4BD-D6B7FFD4E9FE}
O43 - CFD: 2012/06/28 20:25:17 - [0] D -- C:\Users\celine\AppData\Local\{14B1B508-E7F4-4F0A-B371-1496E192FD20}
O43 - CFD: 2012/05/15 20:27:43 - [0] D -- C:\Users\celine\AppData\Local\{154A495F-185B-408F-9478-8533BB59FD5A}
O43 - CFD: 2012/06/17 21:07:27 - [0] D -- C:\Users\celine\AppData\Local\{159B6377-38A0-4C5C-A24D-603ADE76E65E}
O43 - CFD: 2012/06/20 22:28:32 - [0] D -- C:\Users\celine\AppData\Local\{15ADDE86-1102-4037-9D03-0E5FFA0F657B}
O43 - CFD: 2012/10/20 08:59:14 - [0] D -- C:\Users\celine\AppData\Local\{15C50345-2FE6-4D4D-8FD5-62D1FF5C3A15}
O43 - CFD: 2012/05/30 11:05:05 - [0] D -- C:\Users\celine\AppData\Local\{167E0534-CB08-4913-B12C-661B860C5CF5}
O43 - CFD: 2012/01/08 14:14:25 - [0] D -- C:\Users\celine\AppData\Local\{16D56651-8F9A-414C-A594-B497FAA6B748}
O43 - CFD: 2012/05/18 14:08:56 - [0] D -- C:\Users\celine\AppData\Local\{17109434-D773-408F-A15D-AAB6CB5203C8}
O43 - CFD: 2012/09/08 04:43:43 - [0] D -- C:\Users\celine\AppData\Local\{18BC5453-B501-408D-BF80-01699A3B528D}
O43 - CFD: 2012/06/28 17:04:58 - [0] D -- C:\Users\celine\AppData\Local\{1AA836A5-7D25-42FC-8DAE-3A59FB100C06}
O43 - CFD: 2012/03/06 14:05:29 - [0] D -- C:\Users\celine\AppData\Local\{1AC9AB8C-D095-489D-929E-6561EF1F8D34}
O43 - CFD: 2012/03/24 19:42:54 - [0] D -- C:\Users\celine\AppData\Local\{1B581A6D-CA67-4761-9805-71BDF4D7BBD7}
O43 - CFD: 2011/10/22 15:55:54 - [0] D -- C:\Users\celine\AppData\Local\{1BAC6BA8-B1A6-43A8-8DA9-2D45D607A2F0}
O43 - CFD: 2012/08/09 09:49:52 - [0] D -- C:\Users\celine\AppData\Local\{1C2EEBF2-2EC9-4E6B-85A7-C643BB574031}
O43 - CFD: 2012/06/07 17:09:40 - [0] D -- C:\Users\celine\AppData\Local\{1D1CF1DF-A3D2-4E62-A4A6-25339E58DFA7}
O43 - CFD: 2012/11/02 10:00:24 - [0] D -- C:\Users\celine\AppData\Local\{1D34C771-22FE-4213-BD85-ACF67C61DFEC}
O43 - CFD: 2012/06/27 17:12:43 - [0] D -- C:\Users\celine\AppData\Local\{1DB68CAF-5125-4E2A-B094-DEF733425D91}
O43 - CFD: 2012/06/04 21:23:50 - [0] D -- C:\Users\celine\AppData\Local\{1DC19EC2-AE8C-4B77-BCE6-2F6FC60EB872}
O43 - CFD: 2012/01/29 15:05:41 - [0] D -- C:\Users\celine\AppData\Local\{1E248AC6-2B52-4FC8-967B-AA990CC18C0C}
O43 - CFD: 2015/07/24 13:54:34 - [] D -- C:\Users\celine\AppData\Local\{1E352869-3A9D-44D1-5705-6139736D9DA1}
O43 - CFD: 2012/06/28 21:45:22 - [0] D -- C:\Users\celine\AppData\Local\{1EA2DD19-79D2-4CC7-AE49-E1534780F919}
O43 - CFD: 2012/08/17 21:14:09 - [0] D -- C:\Users\celine\AppData\Local\{1F12EB61-0610-453F-B967-C113AE640387}
O43 - CFD: 2012/06/28 20:26:25 - [0] D -- C:\Users\celine\AppData\Local\{1F134BC4-444B-4E38-8439-71EE01DBC409}
O43 - CFD: 2012/03/05 17:53:54 - [0] D -- C:\Users\celine\AppData\Local\{1F93036A-C973-4DE2-BA66-47D031CB6F3C}
O43 - CFD: 2012/05/07 11:00:26 - [0] D -- C:\Users\celine\AppData\Local\{1FF6C7BA-D9B3-4290-8BA7-FE72995EACB4}
O43 - CFD: 2012/08/16 13:36:56 - [0] D -- C:\Users\celine\AppData\Local\{2115D421-3DEE-438E-81D9-880AF6C2B88A}
O43 - CFD: 2012/02/08 22:15:46 - [0] D -- C:\Users\celine\AppData\Local\{2119CF45-9C95-4009-9804-781448A5AB4E}
O43 - CFD: 2012/05/31 08:19:42 - [0] D -- C:\Users\celine\AppData\Local\{2135FED0-FA7C-4F23-9CB0-F86BF50A0622}
O43 - CFD: 2012/01/12 20:25:27 - [0] D -- C:\Users\celine\AppData\Local\{2181E834-FF4A-44B3-8AED-D0F4150B2D29}
O43 - CFD: 2012/04/29 16:25:22 - [0] D -- C:\Users\celine\AppData\Local\{21CD36D9-CDFD-40E2-A97E-9E0851816666}
O43 - CFD: 2013/06/19 12:19:58 - [0] D -- C:\Users\celine\AppData\Local\{22D740FE-ACE6-4816-BD8B-5BF04C0A095D}
O43 - CFD: 2012/05/02 19:32:23 - [0] D -- C:\Users\celine\AppData\Local\{23E6E921-8EEA-4E9C-9D9F-A2700B586246}
O43 - CFD: 2012/07/02 10:16:12 - [0] D -- C:\Users\celine\AppData\Local\{256829AF-587A-45C6-B926-D079F624935E}
O43 - CFD: 2013/06/23 17:51:05 - [0] D -- C:\Users\celine\AppData\Local\{25EB320D-29FC-4116-81C9-9111D15D0CE8}
O43 - CFD: 2012/03/17 18:02:10 - [0] D -- C:\Users\celine\AppData\Local\{26F60743-3604-4527-951F-CA5212ECBC57}
O43 - CFD: 2012/02/25 23:56:06 - [0] D -- C:\Users\celine\AppData\Local\{28BCFD8D-A357-4574-98AD-0AA2F2B35CA1}
O43 - CFD: 2012/10/26 17:12:07 - [0] D -- C:\Users\celine\AppData\Local\{28C6AD55-5628-4EC2-8E76-10E3C0F87796}
O43 - CFD: 2013/01/10 20:09:48 - [0] D -- C:\Users\celine\AppData\Local\{29AF0A9A-0C4F-4119-A51E-870E5279A26A}
O43 - CFD: 2012/12/02 14:22:24 - [0] D -- C:\Users\celine\AppData\Local\{2A6F1F24-A8D3-4646-8040-CF4175187647}
O43 - CFD: 2013/05/05 10:45:02 - [0] D -- C:\Users\celine\AppData\Local\{2AC145CD-16F1-4330-BCF2-E2EFF6B9776C}
O43 - CFD: 2012/08/15 19:44:00 - [0] D -- C:\Users\celine\AppData\Local\{2AFBEEE2-7D1C-44FF-BD4A-2CA905C6DB7F}
O43 - CFD: 2012/04/11 19:30:58 - [0] D -- C:\Users\celine\AppData\Local\{2B1E49E4-62B1-4485-9A5A-915F84E9143B}
O43 - CFD: 2012/08/07 00:41:50 - [0] D -- C:\Users\celine\AppData\Local\{2B3385DF-E392-4C1A-99D7-4197F8F88B4E}
O43 - CFD: 2013/07/07 10:57:32 - [0] D -- C:\Users\celine\AppData\Local\{2B534B82-CACB-42C3-9CDB-60E2A5A48006}
O43 - CFD: 2012/09/18 14:15:37 - [0] D -- C:\Users\celine\AppData\Local\{2B6A4820-6BE2-44AB-885C-453C7988F3B2}
O43 - CFD: 2012/08/12 11:11:34 - [0] D -- C:\Users\celine\AppData\Local\{2B7F9AB8-C7B1-40BB-84F5-F87B0118937D}
O43 - CFD: 2012/03/02 20:28:48 - [0] D -- C:\Users\celine\AppData\Local\{2B818E9D-1B28-4916-8ED7-E3F9F321585D}
O43 - CFD: 2013/01/02 13:57:23 - [0] D -- C:\Users\celine\AppData\Local\{2BA1F08B-1FAC-4250-85EC-D7C27C0023DE}
O43 - CFD: 2012/06/28 20:25:27 - [0] D -- C:\Users\celine\AppData\Local\{2C549953-5F92-4C41-B779-E024BFFEAAC7}
O43 - CFD: 2013/03/11 11:00:41 - [0] D -- C:\Users\celine\AppData\Local\{2D6AB59C-21A4-4A46-8356-3C9FED7EA768}
O43 - CFD: 2012/10/29 17:32:55 - [0] D -- C:\Users\celine\AppData\Local\{2D81253D-D50D-4EC5-837D-EF77FF013B3A}
O43 - CFD: 2012/08/19 10:28:10 - [0] D -- C:\Users\celine\AppData\Local\{2E0080CD-EAD4-4F4F-86E1-CD06FCAD00AC}
O43 - CFD: 2013/06/19 00:16:53 - [0] D -- C:\Users\celine\AppData\Local\{2E4B00A4-FBD3-4692-AD42-FC34116462CC}
O43 - CFD: 2012/07/11 08:37:39 - [0] D -- C:\Users\celine\AppData\Local\{2EA84D7C-02C1-4E53-8393-A1F51F6581F7}
O43 - CFD: 2012/05/05 09:38:37 - [0] D -- C:\Users\celine\AppData\Local\{2EAA691C-0D37-48A5-934A-63F47C6CFDDF}
O43 - CFD: 2012/08/10 16:44:07 - [0] D -- C:\Users\celine\AppData\Local\{2EBF6647-6353-4D96-A44F-51A5CF511B01}
O43 - CFD: 2012/09/28 14:00:49 - [0] D -- C:\Users\celine\AppData\Local\{2EEECE6B-7561-4640-84EB-50B3873AAB73}
O43 - CFD: 2012/05/26 10:21:41 - [0] D -- C:\Users\celine\AppData\Local\{2F01FA8C-1A8C-4CD2-890F-4A8E105A428D}
O43 - CFD: 2013/04/28 08:46:31 - [0] D -- C:\Users\celine\AppData\Local\{300F11A1-9BF7-4D10-B033-0587C5CC69D4}
O43 - CFD: 2012/09/13 10:20:19 - [0] D -- C:\Users\celine\AppData\Local\{303B3D69-EC0C-4ECF-90D2-CEC54AE01AF3}
O43 - CFD: 2012/06/28 20:15:54 - [0] D -- C:\Users\celine\AppData\Local\{30C8AB60-E3B0-4263-AE8D-8ACB85E6091E}
O43 - CFD: 2013/04/27 04:55:10 - [0] D -- C:\Users\celine\AppData\Local\{310B410E-69D7-4632-90A5-CE76137167D4}
O43 - CFD: 2013/06/17 15:33:16 - [0] D -- C:\Users\celine\AppData\Local\{311E4248-1646-4F46-A63A-7775E32C1244}
O43 - CFD: 2013/05/17 13:48:50 - [0] D -- C:\Users\celine\AppData\Local\{315F036B-3662-4616-BE01-EE51D8F27FE9}
O43 - CFD: 2012/09/10 10:22:13 - [0] D -- C:\Users\celine\AppData\Local\{31AC4074-3882-41B0-ABA8-04937D64DB3B}
O43 - CFD: 2013/03/02 23:59:01 - [0] D -- C:\Users\celine\AppData\Local\{31B285E4-A228-404B-9DA2-D9D56F23C22A}
O43 - CFD: 2012/05/27 10:16:01 - [0] D -- C:\Users\celine\AppData\Local\{328F30B8-CBD3-4B07-9DFA-B92E86F45BD0}
O43 - CFD: 2012/06/29 19:07:53 - [0] D -- C:\Users\celine\AppData\Local\{32AAD4E7-60A3-4806-98D4-8F8ECDCB11A1}
O43 - CFD: 2012/02/02 10:31:02 - [0] D -- C:\Users\celine\AppData\Local\{32C45904-729C-4043-B19C-0C5C4E5CD6A6}
O43 - CFD: 2012/05/09 08:49:58 - [0] D -- C:\Users\celine\AppData\Local\{32D50935-2695-4C6A-97BD-073C2D4B6D44}
O43 - CFD: 2012/03/14 20:43:20 - [0] D -- C:\Users\celine\AppData\Local\{336D3C5F-1005-48B1-9EC7-00030099E3EF}
O43 - CFD: 2012/01/13 18:19:17 - [0] D -- C:\Users\celine\AppData\Local\{34029D2D-6701-461B-9F0F-0A284685B3D7}
O43 - CFD: 2012/08/13 10:47:54 - [0] D -- C:\Users\celine\AppData\Local\{34745BD9-6414-4380-9BEF-D676E511145A}
O43 - CFD: 2012/06/01 19:02:19 - [0] D -- C:\Users\celine\AppData\Local\{3562081D-8158-4BBD-9667-023A115DA8D9}
O43 - CFD: 2012/08/11 11:24:01 - [0] D -- C:\Users\celine\AppData\Local\{3593BA4F-D9B5-440B-9F63-AEF396F26367}
O43 - CFD: 2012/01/27 13:19:34 - [0] D -- C:\Users\celine\AppData\Local\{3645F1BC-04AD-496E-8522-980C3BED2BE4}
O43 - CFD: 2013/06/13 12:45:58 - [0] D -- C:\Users\celine\AppData\Local\{36D60189-4F03-46E0-97F8-D90659182E92}
O43 - CFD: 2012/07/11 08:38:12 - [0] D -- C:\Users\celine\AppData\Local\{36DFCE44-9FBF-418A-BB82-2B50912C5F51}
O43 - CFD: 2013/04/06 20:13:18 - [0] D -- C:\Users\celine\AppData\Local\{36F4B974-AD7A-4D6D-9675-B58FDDA78959}
O43 - CFD: 2013/06/27 17:59:48 - [0] D -- C:\Users\celine\AppData\Local\{37BD5388-A9E8-4AFD-989B-5B0A80086324}
O43 - CFD: 2012/01/28 14:32:06 - [0] D -- C:\Users\celine\AppData\Local\{380FC7A2-B29C-46DA-845A-31303C6A0F03}
O43 - CFD: 2012/05/29 14:32:39 - [0] D -- C:\Users\celine\AppData\Local\{384EE899-9A31-410C-918A-E746844ED4C9}
O43 - CFD: 2012/06/27 17:12:28 - [0] D -- C:\Users\celine\AppData\Local\{391F8897-C945-4FA1-8B90-648000C53220}
O43 - CFD: 2012/06/21 10:28:04 - [0] D -- C:\Users\celine\AppData\Local\{3998467F-9EDA-4A66-9E6D-98466E00DFEB}
O43 - CFD: 2012/11/18 10:47:31 - [0] D -- C:\Users\celine\AppData\Local\{39F97A31-9A8D-4001-AB7D-7F48380BE51F}
O43 - CFD: 2013/02/19 16:34:59 - [0] D -- C:\Users\celine\AppData\Local\{3ACA495E-1B31-48CD-ADA6-E8FAC327684D}
O43 - CFD: 2012/09/30 16:49:20 - [0] D -- C:\Users\celine\AppData\Local\{3C8AE81F-AB30-4E05-81FF-472070CA8BBE}
O43 - CFD: 2013/04/07 10:34:31 - [0] D -- C:\Users\celine\AppData\Local\{3D154DF4-C1F4-497D-826D-C7E6582F3448}
O43 - CFD: 2012/03/08 06:39:08 - [0] D -- C:\Users\celine\AppData\Local\{3D54E284-0746-40B8-934A-59F6C6D1C7A1}
O43 - CFD: 2012/01/12 20:25:41 - [0] D -- C:\Users\celine\AppData\Local\{3DD93F03-24AB-4FF1-81CD-2C1113762111}
O43 - CFD: 2012/07/08 18:53:55 - [0] D -- C:\Users\celine\AppData\Local\{3E4763AF-3037-4A29-B4FA-D3919E800D96}
O43 - CFD: 2012/03/25 14:06:02 - [0] D -- C:\Users\celine\AppData\Local\{3E60C5DB-263C-451F-A4C8-AD96F525DC52}
O43 - CFD: 2011/10/23 15:21:38 - [0] D -- C:\Users\celine\AppData\Local\{3E6D2CF5-64F6-4271-9A13-48D7E304685A}
O43 - CFD: 2012/03/23 16:09:44 - [0] D -- C:\Users\celine\AppData\Local\{3E83EE9A-0CCF-43F8-8B83-E6A26082F744}
O43 - CFD: 2012/06/15 17:07:50 - [0] D -- C:\Users\celine\AppData\Local\{3FC10B61-3C5B-4721-A55A-01CF930BFD48}
O43 - CFD: 2013/04/27 17:32:13 - [0] D -- C:\Users\celine\AppData\Local\{40352206-35AD-41C9-B4EC-BC7C731E4AA6}
O43 - CFD: 2012/07/25 11:10:38 - [0] D -- C:\Users\celine\AppData\Local\{40764F66-3FC1-4086-B117-0A522433D686}
O43 - CFD: 2012/09/23 09:48:08 - [0] D -- C:\Users\celine\AppData\Local\{41318533-A534-4614-A424-96F856EC7CCA}
O43 - CFD: 2013/02/08 20:06:31 - [0] D -- C:\Users\celine\AppData\Local\{41EBC7FF-10F9-4A90-8805-EDA930760979}
O43 - CFD: 2012/12/26 14:44:46 - [0] D -- C:\Users\celine\AppData\Local\{42E5B652-FB37-4938-89B3-14DE1DDEA5F8}
O43 - CFD: 2013/02/21 14:25:32 - [0] D -- C:\Users\celine\AppData\Local\{43B25080-D825-4889-9496-F54DF5770A08}
O43 - CFD: 2012/08/08 12:55:52 - [0] D -- C:\Users\celine\AppData\Local\{43D7F5ED-42E7-43B5-B0B1-2BCDBA8D2E73}
O43 - CFD: 2012/05/22 23:26:53 - [0] D -- C:\Users\celine\AppData\Local\{44960A2E-1BD2-4085-B083-52FD428A2E5B}
O43 - CFD: 2012/05/31 18:02:55 - [0] D -- C:\Users\celine\AppData\Local\{44A1BD2C-4D34-488F-9868-9403274C4AFA}
O43 - CFD: 2012/07/18 20:17:07 - [0] D -- C:\Users\celine\AppData\Local\{44AD76F5-F824-4E30-90B0-5EF5C223BCFE}
O43 - CFD: 2013/06/25 16:55:12 - [0] D -- C:\Users\celine\AppData\Local\{44C1A756-D086-4440-8A87-9CA0EF67E89C}
O43 - CFD: 2012/08/17 21:13:53 - [0] D -- C:\Users\celine\AppData\Local\{45522678-F30F-4416-A045-EE3B4DCCD265}
O43 - CFD: 2012/08/08 12:55:35 - [0] D -- C:\Users\celine\AppData\Local\{460398FD-3B81-47D9-AFAB-507D1FBB4FA9}
O43 - CFD: 2012/07/09 19:54:10 - [0] D -- C:\Users\celine\AppData\Local\{466460A7-61E4-46A3-8994-7AEB5DE2FF90}
O43 - CFD: 2012/02/08 10:37:27 - [0] D -- C:\Users\celine\AppData\Local\{47361F8E-4FBE-4D55-AFF5-CD167B8C7679}
O43 - CFD: 2012/01/28 02:20:49 - [0] D -- C:\Users\celine\AppData\Local\{473B3E2D-4F37-400E-BE8E-68F8E9FFCD78}
O43 - CFD: 2011/10/22 17:04:10 - [0] D -- C:\Users\celine\AppData\Local\{4770CB31-8D88-44DD-92AB-AFA249BD9BB1}
O43 - CFD: 2012/03/25 14:05:48 - [0] D -- C:\Users\celine\AppData\Local\{4790274A-CC3E-4261-BE56-D7920AF23600}
O43 - CFD: 2013/05/19 11:30:14 - [0] D -- C:\Users\celine\AppData\Local\{47C9ABF4-42A9-4427-8880-2D45F5886F80}
O43 - CFD: 2012/04/07 10:12:15 - [0] D -- C:\Users\celine\AppData\Local\{485C0510-5853-4E90-ADF7-926670499D14}
O43 - CFD: 2012/01/29 15:05:55 - [0] D -- C:\Users\celine\AppData\Local\{48D0DADD-03A4-414C-8607-8B00B99F214F}
O43 - CFD: 2013/04/01 17:42:46 - [0] D -- C:\Users\celine\AppData\Local\{4918C8CE-6B72-4BEE-A929-0963E86C6182}
O43 - CFD: 2012/06/19 17:01:12 - [0] D -- C:\Users\celine\AppData\Local\{49255995-A401-4B8D-B3C6-F8442F905D9F}
O43 - CFD: 2011/10/31 17:09:59 - [0] D -- C:\Users\celine\AppData\Local\{49585E43-95C5-4305-81C3-1165D2740E06}
O43 - CFD: 2012/03/17 18:02:26 - [0] D -- C:\Users\celine\AppData\Local\{49E56F1A-ADAB-4909-B881-A45F6616C0B5}
O43 - CFD: 2012/06/28 20:24:30 - [0] D -- C:\Users\celine\AppData\Local\{4B215C47-AAFF-442B-BC92-EC213FADF171}
O43 - CFD: 2012/03/17 13:06:46 - [0] D -- C:\Users\celine\AppData\Local\{4BC82436-8ED9-48C3-9977-41A2CCD804C2}
O43 - CFD: 2012/03/11 07:22:28 - [0] D -- C:\Users\celine\AppData\Local\{4BEB2105-F4F6-4BF1-94EE-4F800301ED68}
O43 - CFD: 2012/12/24 01:15:15 - [0] D -- C:\Users\celine\AppData\Local\{4C422ABD-891D-4E52-920C-F92C20545F9A}
O43 - CFD: 2012/06/28 17:03:43 - [0] D -- C:\Users\celine\AppData\Local\{4C65BA14-7B21-410E-957F-22D3C4C5443E}
O43 - CFD: 2012/01/08 16:25:12 - [0] D -- C:\Users\celine\AppData\Local\{4CEB0F10-FCE5-4A80-AF51-BF8755AB9854}
O43 - CFD: 2013/05/19 00:17:15 - [0] D -- C:\Users\celine\AppData\Local\{4D0D7D38-D8B6-4A03-B8A8-413D352DCF3A}
O43 - CFD: 2012/04/06 14:05:23 - [0] D -- C:\Users\celine\AppData\Local\{4DA7D85D-900C-4A5C-86DC-8AE45096D4DD}
O43 - CFD: 2013/01/25 15:32:42 - [0] D -- C:\Users\celine\AppData\Local\{4E3FBB22-FEC5-4C3A-A746-0E08EE73D950}
O43 - CFD: 2012/12/15 16:06:21 - [0] D -- C:\Users\celine\AppData\Local\{4E427601-4B44-4541-84BD-E5FB70C7CF40}
O43 - CFD: 2012/01/20 10:33:24 - [0] D -- C:\Users\celine\AppData\Local\{4FA7DDF2-B765-4F94-840D-D83F2E591FAF}
O43 - CFD: 2012/10/30 10:15:00 - [0] D -- C:\Users\celine\AppData\Local\{5037692B-107C-4DE4-9D69-D3353AB3F5B6}
O43 - CFD: 2012/09/20 06:07:39 - [0] D -- C:\Users\celine\AppData\Local\{504D9752-ABAD-4FFA-A8BC-06A4B2808EA2}
O43 - CFD: 2012/03/10 19:21:40 - [0] D -- C:\Users\celine\AppData\Local\{5073E3D2-2687-42DD-9DAB-478172B1834C}
O43 - CFD: 2012/10/08 09:30:14 - [0] D -- C:\Users\celine\AppData\Local\{507AC627-B660-4EC2-AD66-45CD3B283043}
O43 - CFD: 2012/10/01 22:03:43 - [0] D -- C:\Users\celine\AppData\Local\{508FAAEE-EC3B-48C4-AC68-9813E84AC610}
O43 - CFD: 2012/06/12 11:33:24 - [0] D -- C:\Users\celine\AppData\Local\{509B433C-74D2-4BDD-9710-AA3BB1970C81}
O43 - CFD: 2013/03/25 14:56:44 - [0] D -- C:\Users\celine\AppData\Local\{50A522DA-816B-422D-81D1-3AD9A12D10CF}
O43 - CFD: 2012/06/28 17:04:25 - [0] D -- C:\Users\celine\AppData\Local\{50B60FE5-87CD-45E5-83AC-399B76F3026A}
O43 - CFD: 2012/11/30 06:48:47 - [0] D -- C:\Users\celine\AppData\Local\{51DE5A1C-6C9E-461A-AC96-96D46058D72D}
O43 - CFD: 2012/08/14 10:11:43 - [0] D -- C:\Users\celine\AppData\Local\{520143DC-2A82-42E2-A8C2-7A0BC33A033A}
O43 - CFD: 2013/03/05 15:53:06 - [0] D -- C:\Users\celine\AppData\Local\{52CBC72C-1C87-48F6-8695-4253B70FFF30}
O43 - CFD: 2012/02/08 21:46:03 - [0] D -- C:\Users\celine\AppData\Local\{53789DB9-971F-4BA1-8D45-CE6101F66063}
O43 - CFD: 2013/01/14 20:04:21 - [0] D -- C:\Users\celine\AppData\Local\{53BE64DB-8DE1-4E0F-A818-D1F53C2C1F4A}
O43 - CFD: 2012/02/11 10:36:25 - [0] D -- C:\Users\celine\AppData\Local\{54258311-60FB-4AE5-9E45-3D505AA3ED57}
O43 - CFD: 2012/03/21 11:42:39 - [0] D -- C:\Users\celine\AppData\Local\{542A5466-E732-4A51-9998-33C837964815}
O43 - CFD: 2012/10/25 17:00:46 - [0] D -- C:\Users\celine\AppData\Local\{5450D36F-D8EA-4C74-9B0C-07330BE70FA9}
O43 - CFD: 2013/02/18 12:26:47 - [0] D -- C:\Users\celine\AppData\Local\{5453E277-EE4F-4235-9576-E8EE53FF6ABC}
O43 - CFD: 2012/06/05 22:29:43 - [0] D -- C:\Users\celine\AppData\Local\{54647C0F-667C-43D4-BBE4-13EB5663FD13}
O43 - CFD: 2013/07/03 13:48:53 - [0] D -- C:\Users\celine\AppData\Local\{54778CBB-581A-4E67-B8DF-B3A84556B095}
O43 - CFD: 2011/11/21 13:20:14 - [0] D -- C:\Users\celine\AppData\Local\{547A607D-8527-4D8E-AE9E-36D5EEE8BD3A}
O43 - CFD: 2013/01/05 16:01:34 - [0] D -- C:\Users\celine\AppData\Local\{547E44D1-72B5-4820-9067-36C464975C87}
O43 - CFD: 2013/05/03 17:45:05 - [0] D -- C:\Users\celine\AppData\Local\{54E2F11C-4DD3-4060-A15A-71486F01A28F}
O43 - CFD: 2012/04/09 09:29:39 - [0] D -- C:\Users\celine\AppData\Local\{550DA2E4-881B-40F6-A26E-A636B3682F32}
O43 - CFD: 2012/06/28 20:23:20 - [0] D -- C:\Users\celine\AppData\Local\{55B2D497-1CAA-48E9-B771-CE1DD47E3971}
O43 - CFD: 2012/02/03 11:37:36 - [0] D -- C:\Users\celine\AppData\Local\{55C474F9-243D-48AF-8083-F9CAF3084D3F}
O43 - CFD: 2012/05/02 19:32:38 - [0] D -- C:\Users\celine\AppData\Local\{565E2F2C-F4E1-4826-B4B1-D76B5D681BDF}
O43 - CFD: 2012/10/24 07:29:34 - [0] D -- C:\Users\celine\AppData\Local\{56739AD8-6845-455E-A1D2-9CD310C527DD}
O43 - CFD: 2012/07/11 08:37:50 - [0] D -- C:\Users\celine\AppData\Local\{574BF1EB-1424-49D5-B716-C0A05E293838}
O43 - CFD: 2013/06/20 08:46:45 - [0] D -- C:\Users\celine\AppData\Local\{5789E43D-A055-4863-BF1A-64F0B186A556}
O43 - CFD: 2013/02/14 18:13:01 - [0] D -- C:\Users\celine\AppData\Local\{579C86C3-20C3-4BCE-83D3-2F1A4E415471}
O43 - CFD: 2012/09/08 09:58:46 - [0] D -- C:\Users\celine\AppData\Local\{58691082-523E-404A-9691-0BAE1F405FC7}
O43 - CFD: 2012/06/28 21:51:13 - [0] D -- C:\Users\celine\AppData\Local\{58B86E93-F5F3-4FA2-929E-B44CC2B09B29}
O43 - CFD: 2012/08/26 01:05:42 - [0] D -- C:\Users\celine\AppData\Local\{58DDE138-F0E5-4A56-8141-C293CAD1E87E}
O43 - CFD: 2012/04/04 09:54:04 - [0] D -- C:\Users\celine\AppData\Local\{58E2DB26-ACF5-4E31-8716-72E7B56ABB88}
O43 - CFD: 2012/06/04 21:24:04 - [0] D -- C:\Users\celine\AppData\Local\{59305EA9-69EE-4A25-95BE-C2059D94E9D6}
O43 - CFD: 2012/04/05 10:26:11 - [0] D -- C:\Users\celine\AppData\Local\{59ED37EF-44C2-4862-81A5-D1AF3034623F}
O43 - CFD: 2012/11/06 09:51:11 - [0] D -- C:\Users\celine\AppData\Local\{5A1E680F-577D-4A69-B9FD-41A71853FA20}
O43 - CFD: 2012/05/26 10:22:05 - [0] D -- C:\Users\celine\AppData\Local\{5A7CC947-818C-4A80-9C14-279AA31F4F9F}
O43 - CFD: 2012/03/16 15:45:38 - [0] D -- C:\Users\celine\AppData\Local\{5AE057D9-F600-4365-AF3F-81632438CB64}
O43 - CFD: 2012/08/02 21:13:38 - [0] D -- C:\Users\celine\AppData\Local\{5B4B438C-18DD-4840-BA35-1D287F2537CA}
O43 - CFD: 2012/05/16 09:25:01 - [0] D -- C:\Users\celine\AppData\Local\{5C1028E1-4E5C-41E8-AD52-3A0F62093F5C}
O43 - CFD: 2012/06/28 21:45:34 - [0] D -- C:\Users\celine\AppData\Local\{5C23A654-C96F-4FC7-8CD4-6A34B60656A5}
O43 - CFD: 2012/01/28 02:20:28 - [0] D -- C:\Users\celine\AppData\Local\{5D48DC47-D4C7-47D2-A5AA-14599FEDDF31}
O43 - CFD: 2012/06/26 13:19:03 - [0] D -- C:\Users\celine\AppData\Local\{5E36B737-811F-4FD7-B25B-AF298FFB46D2}
O43 - CFD: 2012/01/13 18:19:01 - [0] D -- C:\Users\celine\AppData\Local\{5FC06AD2-5721-48C7-BD4C-2D7FA4568CCF}
O43 - CFD: 2012/10/20 19:01:38 - [0] D -- C:\Users\celine\AppData\Local\{5FF9B6B2-49A4-4261-AE48-AB40EC73F12A}
O43 - CFD: 2012/03/21 11:42:59 - [0] D -- C:\Users\celine\AppData\Local\{6071066F-25B5-4BA9-9EC7-68936DD5CE82}
O43 - CFD: 2012/05/31 20:15:43 - [0] D -- C:\Users\celine\AppData\Local\{60A4FB93-B293-47B4-B3F3-29E0E7061A00}
O43 - CFD: 2013/05/03 05:44:25 - [0] D -- C:\Users\celine\AppData\Local\{60D057DA-56D1-4730-A418-ADDFD3E9B231}
O43 - CFD: 2012/02/08 13:43:04 - [0] D -- C:\Users\celine\AppData\Local\{62669791-67EB-4DAC-8DC7-BAD450091BDC}
O43 - CFD: 2012/05/16 09:25:16 - [0] D -- C:\Users\celine\AppData\Local\{6273971B-2357-48C8-9590-96FAE2316A41}
O43 - CFD: 2012/10/09 09:21:19 - [0] D -- C:\Users\celine\AppData\Local\{628E1AED-7B47-4EAC-BBC8-987C7546372A}
O43 - CFD: 2012/09/11 10:24:34 - [0] D -- C:\Users\celine\AppData\Local\{6297CE0E-2BBC-484A-8F17-983AC20232C5}
O43 - CFD: 2012/06/22 22:39:20 - [0] D -- C:\Users\celine\AppData\Local\{62C7E36A-1862-4B35-ADA0-1F97FD5DCBB3}
O43 - CFD: 2012/11/05 09:41:49 - [0] D -- C:\Users\celine\AppData\Local\{62C92E25-CC34-4E9E-AC41-0070440D4570}
O43 - CFD: 2012/07/11 08:38:00 - [0] D -- C:\Users\celine\AppData\Local\{62FC49F5-8F9D-4011-8739-BD8763023E98}
O43 - CFD: 2012/07/03 20:05:34 - [0] D -- C:\Users\celine\AppData\Local\{635ECC49-5A76-4B04-98FA-42C2DDD13051}
O43 - CFD: 2013/05/07 22:25:14 - [0] D -- C:\Users\celine\AppData\Local\{639AB063-DAC8-408F-92DE-37B62BB604CE}
O43 - CFD: 2012/06/28 21:45:44 - [0] D -- C:\Users\celine\AppData\Local\{640B59B0-52D8-4206-918B-517F96788B9D}
O43 - CFD: 2012/05/05 09:38:51 - [0] D -- C:\Users\celine\AppData\Local\{6430FAD7-E04D-4EE5-B9F9-6DB37D0E8FCC}
O43 - CFD: 2013/01/06 09:31:49 - [0] D -- C:\Users\celine\AppData\Local\{644CE38A-203E-4F80-A3CD-29FEA21A0F7F}
O43 - CFD: 2012/06/21 21:16:47 - [0] D -- C:\Users\celine\AppData\Local\{6456E400-806B-4360-B207-588FACF5E5DB}
O43 - CFD: 2012/11/24 08:08:16 - [0] D -- C:\Users\celine\AppData\Local\{645B0313-2539-42EB-89D0-D62A44F7A8FE}
O43 - CFD: 2013/05/02 16:54:12 - [0] D -- C:\Users\celine\AppData\Local\{651432A3-1807-409F-9316-82FE5B5130D8}
O43 - CFD: 2013/01/09 13:42:54 - [0] D -- C:\Users\celine\AppData\Local\{65A1477E-7D44-4112-8952-D8CE13383489}
O43 - CFD: 2012/11/08 19:00:18 - [0] D -- C:\Users\celine\AppData\Local\{65D74651-FB92-4C21-8A9C-ABFD8973B468}
O43 - CFD: 2012/08/24 21:30:17 - [0] D -- C:\Users\celine\AppData\Local\{65D8C7F7-1C65-46B3-8B26-65837B28C115}
O43 - CFD: 2012/05/26 14:22:21 - [0] D -- C:\Users\celine\AppData\Local\{66641B4E-841D-4EF7-9644-DB853617F23A}
O43 - CFD: 2012/06/28 20:23:59 - [0] D -- C:\Users\celine\AppData\Local\{6732F4E1-1B7B-4305-B785-728A8B743ED6}
O43 - CFD: 2012/12/10 13:54:53 - [0] D -- C:\Users\celine\AppData\Local\{67F17FBA-40F8-4086-A262-198FCFC7A14A}
O43 - CFD: 2012/06/28 20:16:00 - [0] D -- C:\Users\celine\AppData\Local\{680319B0-A42A-46E5-86FB-B22BF895FE7F}
O43 - CFD: 2012/02/09 18:01:43 - [0] D -- C:\Users\celine\AppData\Local\{6839C493-4871-460F-878D-4191AC3ACBAA}
O43 - CFD: 2012/06/19 17:00:55 - [0] D -- C:\Users\celine\AppData\Local\{68D53F27-BBF1-4570-9505-AC7DD3F2F25A}
O43 - CFD: 2012/11/11 14:13:58 - [0] D -- C:\Users\celine\AppData\Local\{68F8EE78-DCBC-4E12-8EE6-0A8B4C70FF38}
O43 - CFD: 2012/02/25 23:56:22 - [0] D -- C:\Users\celine\AppData\Local\{696F6FF9-BD9B-48C8-AD10-B495F7979F4E}
O43 - CFD: 2012/05/28 16:18:30 - [0] D -- C:\Users\celine\AppData\Local\{69848F49-F74F-4242-8F09-54A7A21DD857}
O43 - CFD: 2013/01/17 12:57:40 - [0] D -- C:\Users\celine\AppData\Local\{6A2B6E46-044F-49B8-8F4D-2456073184C6}
O43 - CFD: 2013/03/28 11:17:25 - [0] D -- C:\Users\celine\AppData\Local\{6A785565-6BDF-463C-BFEA-974149FA1B83}
O43 - CFD: 2012/06/28 17:03:54 - [0] D -- C:\Users\celine\AppData\Local\{6AB06E75-121C-452D-9905-9754E29ABF03}
O43 - CFD: 2013/06/20 08:54:13 - [0] D -- C:\Users\celine\AppData\Local\{6B1867F9-426E-418F-9F6F-04F0210D06E9}
O43 - CFD: 2012/12/23 06:08:45 - [0] D -- C:\Users\celine\AppData\Local\{6B42DBC0-D1F2-4F53-9ECF-D078B4844C5F}
O43 - CFD: 2012/07/13 12:48:27 - [0] D -- C:\Users\celine\AppData\Local\{6B49A488-6EAE-41D9-B74A-5B2C9AE99FF9}
O43 - CFD: 2012/02/10 14:50:01 - [0] D -- C:\Users\celine\AppData\Local\{6C8E41B0-0545-453C-8305-CDC71CADBEBD}
O43 - CFD: 2013/01/21 05:31:23 - [0] D -- C:\Users\celine\AppData\Local\{6D3B8688-D66B-45B9-9D17-FCE6F7AC6D17}
O43 - CFD: 2013/05/12 10:20:28 - [0] D -- C:\Users\celine\AppData\Local\{6D8B8AF8-17FB-41FA-8738-ACBC709635FB}
O43 - CFD: 2012/03/02 20:28:35 - [0] D -- C:\Users\celine\AppData\Local\{6DB1DC0B-EE65-4F96-95B4-50D69F0075EB}
O43 - CFD: 2013/05/28 15:16:04 - [0] D -- C:\Users\celine\AppData\Local\{6DB4211F-E5A4-4DF6-973F-355B0B7F4904}
O43 - CFD: 2012/06/26 15:17:38 - [0] D -- C:\Users\celine\AppData\Local\{6EA02652-2178-4A0A-BBE9-2DA8B0BF6112}
O43 - CFD: 2012/02/16 14:40:38 - [0] D -- C:\Users\celine\AppData\Local\{6F8A3C6D-260F-45AE-BED7-9758CE71A52B}
O43 - CFD: 2013/01/20 06:54:54 - [0] D -- C:\Users\celine\AppData\Local\{6FB04B2B-1F33-49F8-B2CD-D3AE7B6A2043}
O43 - CFD: 2012/02/28 10:31:18 - [0] D -- C:\Users\celine\AppData\Local\{6FDDF300-0236-40B2-B0BD-D39947CF5EA5}
O43 - CFD: 2012/06/24 10:51:12 - [0] D -- C:\Users\celine\AppData\Local\{7013A19C-A750-4F64-80BB-F5C3038E143C}
O43 - CFD: 2013/07/03 14:19:33 - [0] D -- C:\Users\celine\AppData\Local\{702081BA-ADC1-4F7E-804B-D25C1709C2B6}
O43 - CFD: 2012/08/25 12:19:08 - [0] D -- C:\Users\celine\AppData\Local\{703F98B1-F186-466F-9FB0-608724305A38}
O43 - CFD: 2012/06/26 15:17:53 - [0] D -- C:\Users\celine\AppData\Local\{7060E089-3C3E-4BA7-9B33-BDE5412F0E50}
O43 - CFD: 2012/01/20 10:33:08 - [0] D -- C:\Users\celine\AppData\Local\{717EF7C7-0D31-4EAF-AC93-14217A338BFF}
O43 - CFD: 2013/01/19 14:38:26 - [0] D -- C:\Users\celine\AppData\Local\{733774A5-5188-47CC-B731-3AF4B0617958}
O43 - CFD: 2012/03/23 16:09:31 - [0] D -- C:\Users\celine\AppData\Local\{7497091E-CB01-41DC-B347-495594D3498B}
O43 - CFD: 2012/11/25 12:08:07 - [0] D -- C:\Users\celine\AppData\Local\{75A291F9-D36B-4CB5-B512-1D67C4955211}
O43 - CFD: 2012/10/21 23:59:14 - [0] D -- C:\Users\celine\AppData\Local\{75FF160C-9CEF-4285-86F8-DFA0CC75CC79}
O43 - CFD: 2012/07/03 20:05:19 - [0] D -- C:\Users\celine\AppData\Local\{7626DE89-F1BD-4C5A-9603-AFE2F3FC8453}
O43 - CFD: 2013/01/06 22:41:32 - [0] D -- C:\Users\celine\AppData\Local\{769983C1-7C53-474F-AE8D-DE907F1D0EF8}
O43 - CFD: 2012/03/10 01:08:37 - [0] D -- C:\Users\celine\AppData\Local\{77E888E4-1388-407E-BE31-B22139194AB0}
O43 - CFD: 2012/06/12 11:33:09 - [0] D -- C:\Users\celine\AppData\Local\{78BC54F9-5877-4A4B-B69D-507B13C3B387}
O43 - CFD: 2012/10/31 10:37:33 - [0] D -- C:\Users\celine\AppData\Local\{78E3379A-DAE2-4BA1-9104-B19F3CEE87CE}
O43 - CFD: 2012/04/14 12:27:19 - [0] D -- C:\Users\celine\AppData\Local\{78E68100-F735-405E-BD93-9CF86E841963}
O43 - CFD: 2012/11/16 10:59:03 - [0] D -- C:\Users\celine\AppData\Local\{79B934D9-0544-4CB8-9AE4-89E12AEFA9E2}
O43 - CFD: 2013/06/17 03:27:23 - [0] D -- C:\Users\celine\AppData\Local\{79E65898-FB2B-4352-9662-75A932BFDB47}
O43 - CFD: 2013/07/19 15:43:02 - [0] D -- C:\Users\celine\AppData\Local\{79FE0B13-C9AF-4D16-985C-E3DF7B333CA8}
O43 - CFD: 2012/06/21 22:03:54 - [0] D -- C:\Users\celine\AppData\Local\{7AB2466C-A219-4410-82F5-AAE209DC0383}
O43 - CFD: 2013/07/19 14:43:11 - [0] D -- C:\Users\celine\AppData\Local\{7B4082CB-8389-4E08-9C07-B3AFF61BE996}
O43 - CFD: 2013/01/03 15:19:29 - [0] D -- C:\Users\celine\AppData\Local\{7B466EB6-3DA3-4316-8F94-8105CED628D6}
O43 - CFD: 2012/05/08 12:29:26 - [0] D -- C:\Users\celine\AppData\Local\{7B486674-19D5-4820-8AFA-1771983721BA}
O43 - CFD: 2012/12/13 17:07:07 - [0] D -- C:\Users\celine\AppData\Local\{7BD0495F-DDFA-4EDC-A0E6-E2507D09E631}
O43 - CFD: 2012/03/24 19:42:39 - [0] D -- C:\Users\celine\AppData\Local\{7C1C966F-3B16-44B1-93ED-A3C2464E1A93}
O43 - CFD: 2012/07/06 09:09:42 - [0] D -- C:\Users\celine\AppData\Local\{7C8AE6BA-56EF-4DD4-8556-BD060E305ACE}
O43 - CFD: 2012/04/10 06:01:29 - [0] D -- C:\Users\celine\AppData\Local\{7D6DEDC4-D512-4EEC-984A-D7AD25B5D719}
O43 - CFD: 2012/02/28 20:57:44 - [0] D -- C:\Users\celine\AppData\Local\{7DB69108-6F22-48B0-9C3E-1DF53C40522B}
O43 - CFD: 2012/06/28 21:46:22 - [0] D -- C:\Users\celine\AppData\Local\{7DEA8FA3-0B6B-4E68-B7CE-E97CE28CF699}
O43 - CFD: 2012/10/21 07:02:17 - [0] D -- C:\Users\celine\AppData\Local\{7E55264A-EED9-45C0-BCA8-D95C1D9F919F}
O43 - CFD: 2012/10/11 10:35:49 - [0] D -- C:\Users\celine\AppData\Local\{7EBDEA29-4F75-48C7-8972-9188AB5681E5}
O43 - CFD: 2012/12/05 11:09:44 - [0] D -- C:\Users\celine\AppData\Local\{7F085BE8-F6CF-43DB-830B-3F5354A1C169}
O43 - CFD: 2012/12/04 14:07:37 - [0] D -- C:\Users\celine\AppData\Local\{7F341603-8301-4525-9AE3-946AE28E1E75}
O43 - CFD: 2013/05/29 13:12:38 - [0] D -- C:\Users\celine\AppData\Local\{7F7C7658-B1EE-45B6-80A4-2D13AACB3311}
O43 - CFD: 2012/06/28 20:24:56 - [0] D -- C:\Users\celine\AppData\Local\{7FD86D98-C17C-473C-9AE9-36A0EDF50B27}
O43 - CFD: 2012/02/18 11:31:36 - [0] D -- C:\Users\celine\AppData\Local\{80333421-BF49-4407-BC09-7BD9BED39AEC}
O43 - CFD: 2012/07/21 19:43:06 - [0] D -- C:\Users\celine\AppData\Local\{803F7DB3-2435-407A-9984-448337209B06}
O43 - CFD: 2013/03/13 16:03:59 - [0] D -- C:\Users\celine\AppData\Local\{8044AF67-351A-420C-A01E-2C6F7EA053DA}
O43 - CFD: 2012/01/26 07:27:54 - [0] D -- C:\Users\celine\AppData\Local\{806A347A-F1A6-4747-8EAC-F264EBEB35A8}
O43 - CFD: 2012/08/20 09:23:47 - [0] D -- C:\Users\celine\AppData\Local\{80B89223-0BC1-4B8C-A479-946FFC5BCFB8}
O43 - CFD: 2012/11/26 14:03:23 - [0] D -- C:\Users\celine\AppData\Local\{80CD5198-7670-4859-8677-8EA3E6E25794}
O43 - CFD: 2012/02/09 15:03:38 - [0] D -- C:\Users\celine\AppData\Local\{8110B7C9-4E21-4E66-AB06-C8982E315A64}
O43 - CFD: 2013/01/08 14:07:54 - [0] D -- C:\Users\celine\AppData\Local\{812ED6E0-419C-467E-B30A-B9DDCDCAAE02}
O43 - CFD: 2012/07/02 22:19:57 - [0] D -- C:\Users\celine\AppData\Local\{81C886AB-6C9F-4114-904E-86CD86DF7F4C}
O43 - CFD: 2012/01/17 12:46:58 - [0] D -- C:\Users\celine\AppData\Local\{81F533A2-6502-427C-9F51-F56560A4947A}
O43 - CFD: 2012/06/21 14:35:19 - [0] D -- C:\Users\celine\AppData\Local\{821CDC3C-FAF2-4A17-9235-F875BE2E4822}
O43 - CFD: 2013/02/26 18:17:36 - [0] D -- C:\Users\celine\AppData\Local\{825C54BA-D837-411B-9AC8-0859708ACC92}
O43 - CFD: 2012/08/03 00:39:48 - [0] D -- C:\Users\celine\AppData\Local\{826E8B5F-8039-45A5-8C36-FB7C5072B437}
O43 - CFD: 2012/04/14 12:28:10 - [0] D -- C:\Users\celine\AppData\Local\{82AF3155-2D6E-4F31-90F9-561DC3B99F07}
O43 - CFD: 2013/07/28 09:35:29 - [0] D -- C:\Users\celine\AppData\Local\{8326A5CE-FD59-44E9-866F-9790BDCE5D6F}
O43 - CFD: 2012/07/18 08:12:01 - [0] D -- C:\Users\celine\AppData\Local\{832B4A75-22AA-4AF4-98B7-A2535E47B48F}
O43 - CFD: 2012/02/08 22:16:00 - [0] D -- C:\Users\celine\AppData\Local\{83A3353D-2B42-4264-BC19-95FBBA7ABA90}
O43 - CFD: 2012/06/28 20:23:21 - [0] D -- C:\Users\celine\AppData\Local\{83AE2433-5B28-4F55-B46C-AEF34E5C6584}
O43 - CFD: 2012/12/31 07:20:59 - [0] D -- C:\Users\celine\AppData\Local\{83CD3479-7368-4645-B4DD-2A29D9A780E2}
O43 - CFD: 2013/03/07 13:09:15 - [0] D -- C:\Users\celine\AppData\Local\{83DBD046-FEEB-4311-9EC2-AFD1AD1F08B9}
O43 - CFD: 2012/07/08 18:53:38 - [0] D -- C:\Users\celine\AppData\Local\{844F43BC-AB72-46F0-9414-28CC5339360B}
O43 - CFD: 2013/05/10 06:24:09 - [0] D -- C:\Users\celine\AppData\Local\{848F6D6F-C483-4C2E-8A8F-EA53BF151FEE}
O43 - CFD: 2012/09/09 22:23:02 - [0] D -- C:\Users\celine\AppData\Local\{851F0518-CE80-45F9-A015-1412C21EDF9C}
O43 - CFD: 2011/10/22 16:57:17 - [0] D -- C:\Users\celine\AppData\Local\{85781344-45D4-4BCD-AD5B-39EC85E7052B}
O43 - CFD: 2012/01/22 19:04:46 - [0] D -- C:\Users\celine\AppData\Local\{8587FFF0-0D9A-4C27-B35C-DB63788FB039}
O43 - CFD: 2012/03/17 01:47:18 - [0] D -- C:\Users\celine\AppData\Local\{85929B37-7E69-4FFF-8269-B7BBF32FE831}
O43 - CFD: 2012/07/24 20:11:08 - [0] D -- C:\Users\celine\AppData\Local\{8608522E-3CEC-456E-8587-61EBAF47ACD9}
O43 - CFD: 2011/10/22 16:46:39 - [0] D -- C:\Users\celine\AppData\Local\{86AADC5B-86DC-4C0F-8066-F6577C2C4C7A}
O43 - CFD: 2012/06/25 20:50:37 - [0] D -- C:\Users\celine\AppData\Local\{87F5B2B3-93D3-4515-8A26-773A14D199E3}
O43 - CFD: 2012/10/28 13:01:35 - [0] D -- C:\Users\celine\AppData\Local\{880155B4-E71B-4B33-8410-5407D69C257E}
O43 - CFD: 2013/02/14 03:57:38 - [0] D -- C:\Users\celine\AppData\Local\{889C88BF-695F-4A74-969A-8579171ED1A2}
O43 - CFD: 2012/02/19 14:01:52 - [0] D -- C:\Users\celine\AppData\Local\{891C437F-F118-4F48-9309-36D4329A5923}
O43 - CFD: 2012/04/15 15:10:11 - [0] D -- C:\Users\celine\AppData\Local\{89AF6C7E-5D11-4260-9E7F-5888661870DE}
O43 - CFD: 2012/08/12 11:11:07 - [0] D -- C:\Users\celine\AppData\Local\{8A12F5E2-91CE-48A6-A8AA-1427DEB93C83}
O43 - CFD: 2012/05/30 19:27:04 - [0] D -- C:\Users\celine\AppData\Local\{8B008883-10BC-442A-9382-BF646F071FDC}
O43 - CFD: 2012/04/29 16:25:37 - [0] D -- C:\Users\celine\AppData\Local\{8B431F44-58B2-46DE-BA3B-AC529CD0B495}
O43 - CFD: 2012/06/13 10:23:24 - [0] D -- C:\Users\celine\AppData\Local\{8BE50E9B-8FC3-4F64-B2AA-1A6B56B620F2}
O43 - CFD: 2012/06/28 20:26:47 - [0] D -- C:\Users\celine\AppData\Local\{8C9DBD90-32F3-4242-948B-263774898407}
O43 - CFD: 2012/07/12 15:30:31 - [0] D -- C:\Users\celine\AppData\Local\{8D275A64-97F9-4647-9895-E26A0D6F65DC}
O43 - CFD: 2013/02/20 13:57:37 - [0] D -- C:\Users\celine\AppData\Local\{8D47B5DD-CFBB-4A18-BD90-9C167B9ABA86}
O43 - CFD: 2012/05/27 10:15:47 - [0] D -- C:\Users\celine\AppData\Local\{8E968E9A-F489-431B-8EC6-993BC0D20592}
O43 - CFD: 2013/03/24 13:53:48 - [0] D -- C:\Users\celine\AppData\Local\{8F158559-AB70-4AD7-B729-EA063DEB7329}
O43 - CFD: 2012/05/22 23:26:38 - [0] D -- C:\Users\celine\AppData\Local\{8F45922E-F949-4D87-836C-C8D7C21B1A3C}
O43 - CFD: 2013/06/02 19:52:21 - [0] D -- C:\Users\celine\AppData\Local\{90098AE4-3D51-4394-814F-062A8F1BFA06}
O43 - CFD: 2012/01/14 14:08:53 - [0] D -- C:\Users\celine\AppData\Local\{9058ABBE-93D6-45AD-AD56-607340A1CEB1}
O43 - CFD: 2012/02/13 16:55:35 - [0] D -- C:\Users\celine\AppData\Local\{907FFB93-161E-4EF0-9E1C-3BE7261B1F1F}
O43 - CFD: 2012/07/29 14:24:39 - [0] D -- C:\Users\celine\AppData\Local\{90D44306-7A86-49EA-8342-51C789204D41}
O43 - CFD: 2012/03/14 20:43:39 - [0] D -- C:\Users\celine\AppData\Local\{90EA5106-EFD7-4D56-8097-62A670A82296}
O43 - CFD: 2012/05/31 14:42:22 - [0] D -- C:\Users\celine\AppData\Local\{91371E65-4978-4183-B9D6-1AC9FBEDC999}
O43 - CFD: 2012/01/28 14:32:20 - [0] D -- C:\Users\celine\AppData\Local\{9155ED01-3B65-46D1-855B-CFE7CF9F4A79}
O43 - CFD: 2012/06/25 20:50:52 - [0] D -- C:\Users\celine\AppData\Local\{918CD7EC-A7BF-4E73-9C54-6C88C6AF7690}
O43 - CFD: 2012/08/28 06:04:48 - [0] D -- C:\Users\celine\AppData\Local\{91AB6D47-034E-47B1-BAB0-5332F93A117F}
O43 - CFD: 2012/11/14 11:56:40 - [0] D -- C:\Users\celine\AppData\Local\{91CF535C-30B2-4C61-AAB0-51C1239D08E6}
O43 - CFD: 2012/07/04 12:30:33 - [0] D -- C:\Users\celine\AppData\Local\{91FC1778-8771-4716-B0A8-96BB7F1AEED4}
O43 - CFD: 2013/06/29 19:29:01 - [0] D -- C:\Users\celine\AppData\Local\{926394BD-BBAD-459E-B753-7043AA6D3303}
O43 - CFD: 2012/06/13 10:23:11 - [0] D -- C:\Users\celine\AppData\Local\{9266CF09-0F07-4BE5-BAD2-60D55D8C623D}
O43 - CFD: 2011/10/22 17:04:06 - [0] D -- C:\Users\celine\AppData\Local\{926DA9C6-EEB5-4E05-A565-889FFF6BC1C8}
O43 - CFD: 2013/04/05 16:33:14 - [0] D -- C:\Users\celine\AppData\Local\{92713EE0-FE33-4550-B531-B4167EE96E4F}
O43 - CFD: 2012/07/07 15:03:20 - [0] D -- C:\Users\celine\AppData\Local\{92CA11A7-3EAA-4592-838B-198E0962F967}
O43 - CFD: 2012/07/16 11:03:30 - [0] D -- C:\Users\celine\AppData\Local\{92D9EBFF-9D10-4489-A9D9-1CD6829FF935}
O43 - CFD: 2013/06/26 04:55:50 - [0] D -- C:\Users\celine\AppData\Local\{92E4928A-65FF-48C5-AEF0-04D94848CCEF}
O43 - CFD: 2012/03/08 06:39:24 - [0] D -- C:\Users\celine\AppData\Local\{935E8E50-EC60-47F5-B053-CEE8F1047865}
O43 - CFD: 2013/02/13 03:56:44 - [0] D -- C:\Users\celine\AppData\Local\{9416B07B-2639-43DA-94D8-9CD671C066F0}
O43 - CFD: 2012/06/04 12:27:29 - [0] D -- C:\Users\celine\AppData\Local\{945BAFA9-103C-4EF3-B93D-5AD74C48A75A}
O43 - CFD: 2012/09/15 15:43:53 - [0] D -- C:\Users\celine\AppData\Local\{952C556D-F79C-4D11-BBDC-21E6D29F3E6B}
O43 - CFD: 2012/06/28 17:04:04 - [0] D -- C:\Users\celine\AppData\Local\{9583906C-48CB-450B-89EE-F65D6EFA1B62}
O43 - CFD: 2013/01/15 08:04:57 - [0] D -- C:\Users\celine\AppData\Local\{958BEA92-CD33-404B-925C-9F3FD2224E84}
O43 - CFD: 2013/06/30 19:48:42 - [0] D -- C:\Users\celine\AppData\Local\{9599F3E9-384D-48B6-8A42-1772A52B07BC}
O43 - CFD: 2012/06/28 20:26:15 - [0] D -- C:\Users\celine\AppData\Local\{95AD8486-8621-4D5F-8E01-9A905090848C}
O43 - CFD: 2012/05/17 12:36:18 - [0] D -- C:\Users\celine\AppData\Local\{963A16A8-1C2D-404C-A9C8-D2FB488A0C16}
O43 - CFD: 2013/05/21 23:06:41 - [0] D -- C:\Users\celine\AppData\Local\{96C39B55-B156-4D7D-9776-F95B31A1B731}
O43 - CFD: 2012/11/27 14:26:41 - [0] D -- C:\Users\celine\AppData\Local\{9769843E-575C-4D60-918E-170D74972D41}
O43 - CFD: 2011/11/17 19:11:38 - [0] D -- C:\Users\celine\AppData\Local\{977C29E1-2EAC-4D3A-8B71-C5ED7429A961}
O43 - CFD: 2012/10/17 14:19:10 - [0] D -- C:\Users\celine\AppData\Local\{980F4244-7626-4411-8D30-E5D683E4C2F7}
O43 - CFD: 2012/08/18 12:24:41 - [0] D -- C:\Users\celine\AppData\Local\{9883E84B-5E3F-4FAE-873F-346DFC57B350}
O43 - CFD: 2012/06/14 12:02:36 - [0] D -- C:\Users\celine\AppData\Local\{98C11811-ACEE-4B3F-9300-7C2BFDCE5D5F}
O43 - CFD: 2012/02/02 21:57:28 - [0] D -- C:\Users\celine\AppData\Local\{99199255-6C44-4C3E-81E8-A8184E745604}
O43 - CFD: 2012/11/04 17:30:19 - [0] D -- C:\Users\celine\AppData\Local\{99F9BE5B-8EDF-4333-9AC0-7F3F3A9A6BBC}
O43 - CFD: 2013/06/05 09:43:40 - [0] D -- C:\Users\celine\AppData\Local\{9A07EDB4-B221-4B2C-BAE6-B539FABD84A3}
O43 - CFD: 2012/05/29 14:32:24 - [0] D -- C:\Users\celine\AppData\Local\{9A5DD912-CBF3-4390-86E1-CE7FF2164915}
O43 - CFD: 2013/05/20 13:33:33 - [0] D -- C:\Users\celine\AppData\Local\{9B45D7E6-66A0-4497-BF7F-01298863EACB}
O43 - CFD: 2012/02/08 13:42:51 - [0] D -- C:\Users\celine\AppData\Local\{9B6173F9-1A7C-422C-8661-BA126A3AC334}
O43 - CFD: 2012/06/14 12:02:22 - [0] D -- C:\Users\celine\AppData\Local\{9B94CB25-778D-4319-ABAA-F137922E1F77}
O43 - CFD: 2012/05/30 11:04:40 - [0] D -- C:\Users\celine\AppData\Local\{9D2E2470-6FD3-4BA0-9F36-D94892C2CF2D}
O43 - CFD: 2012/07/26 14:27:48 - [0] D -- C:\Users\celine\AppData\Local\{9E40B3BB-F414-4C0E-86D2-A4A987D2BD71}
O43 - CFD: 2012/01/26 15:08:29 - [0] D -- C:\Users\celine\AppData\Local\{9E46D448-B3A0-4C21-A713-92B4D864F8E7}
O43 - CFD: 2013/01/10 06:52:24 - [0] D -- C:\Users\celine\AppData\Local\{9E6C7117-D311-4961-92D0-EA81703204D9}
O43 - CFD: 2013/01/14 07:14:20 - [0] D -- C:\Users\celine\AppData\Local\{9EBFD4B7-6D51-468B-8331-7449653E447A}
O43 - CFD: 2012/08/11 11:23:34 - [0] D -- C:\Users\celine\AppData\Local\{9ECFC27A-0FAD-4C11-882E-9645F81E64D3}
O43 - CFD: 2012/04/12 19:16:54 - [0] D -- C:\Users\celine\AppData\Local\{9ED56E2B-1D35-4E2C-86AD-39E704E82A46}
O43 - CFD: 2012/07/12 15:30:14 - [0] D -- C:\Users\celine\AppData\Local\{9EEDBA04-8319-424C-A6DF-031C3D5954B9}
O43 - CFD: 2012/09/09 02:25:29 - [0] D -- C:\Users\celine\AppData\Local\{9F20CCB7-C16F-483A-B732-A1995E3AEA54}
O43 - CFD: 2012/01/23 21:21:53 - [0] D -- C:\Users\celine\AppData\Local\{9F627D68-CF25-4E4D-9AAA-4970BF1F5F61}
O43 - CFD: 2012/12/27 07:34:03 - [0] D -- C:\Users\celine\AppData\Local\{9FF7B956-22A5-4834-A47F-DD504872A1F1}
O43 - CFD: 2013/06/20 00:20:17 - [0] D -- C:\Users\celine\AppData\Local\{A114A189-F7E1-4FF6-AE77-6777E1BF0409}
O43 - CFD: 2012/07/17 19:43:30 - [0] D -- C:\Users\celine\AppData\Local\{A192F76D-31C6-4C0F-9B6F-939DA335EE56}
O43 - CFD: 2015/06/27 12:27:12 - [0] D -- C:\Users\celine\AppData\Local\{A1D266EB-D9D3-44D9-AECF-52E1C602093B}
O43 - CFD: 2012/06/22 22:39:04 - [0] D -- C:\Users\celine\AppData\Local\{A29D12AF-6A19-4A46-AC7E-5FF569A38065}
O43 - CFD: 2013/03/25 01:54:06 - [0] D -- C:\Users\celine\AppData\Local\{A2B5E972-E408-439A-AA99-DE5EAE6DFE26}
O43 - CFD: 2012/06/20 19:17:22 - [0] D -- C:\Users\celine\AppData\Local\{A336C98A-881E-4FF3-A05F-ACC7F7BE9227}
O43 - CFD: 2012/03/06 14:05:15 - [0] D -- C:\Users\celine\AppData\Local\{A33E3E34-B6E9-4F93-B4B6-5E325D5737DB}
O43 - CFD: 2012/10/07 11:05:16 - [0] D -- C:\Users\celine\AppData\Local\{A3BFCA4D-A67A-428F-BD8A-DC1FFEFA3291}
O43 - CFD: 2013/07/01 20:41:04 - [0] D -- C:\Users\celine\AppData\Local\{A3D83706-981B-48FA-B47C-0C3371426EB6}
O43 - CFD: 2012/12/22 12:31:23 - [0] D -- C:\Users\celine\AppData\Local\{A4F71290-B127-4B41-A105-13540DD88B48}
O43 - CFD: 2012/07/09 19:54:27 - [0] D -- C:\Users\celine\AppData\Local\{A6539A13-004E-457C-BACA-6EBA11B093CF}
O43 - CFD: 2012/10/03 12:53:40 - [0] D -- C:\Users\celine\AppData\Local\{A698415F-079A-4FB4-83C9-6B207F1B0EC0}
O43 - CFD: 2013/04/08 11:54:46 - [0] D -- C:\Users\celine\AppData\Local\{A7B9CB1D-2241-4995-A6A5-E5612DD9B982}
O43 - CFD: 2012/06/28 20:26:57 - [0] D -- C:\Users\celine\AppData\Local\{A80D4DEF-F22A-48E5-BF99-D39387C87C4B}
O43 - CFD: 2012/09/19 03:44:37 - [0] D -- C:\Users\celine\AppData\Local\{A82AE7DB-1584-4972-A234-AEA3076F3BE1}
O43 - CFD: 2013/03/12 06:37:38 - [0] D -- C:\Users\celine\AppData\Local\{A842B30D-ABF0-4D6F-92A1-CE855FF7F3C4}
O43 - CFD: 2012/03/16 18:56:59 - [0] D -- C:\Users\celine\AppData\Local\{A89C2BF1-60A1-4032-85AD-717805A4DBF9}
O43 - CFD: 2012/06/21 14:35:33 - [0] D -- C:\Users\celine\AppData\Local\{A9197295-0C05-4637-BD84-94F6B5D904CD}
O43 - CFD: 2012/12/19 12:34:46 - [0] D -- C:\Users\celine\AppData\Local\{A924F950-8FF7-4C07-90FA-01B49BDB7706}
O43 - CFD: 2012/09/16 21:32:06 - [0] D -- C:\Users\celine\AppData\Local\{A98179ED-C259-448E-8652-AAEDF5B6EB75}
O43 - CFD: 2012/06/26 15:51:38 - [0] D -- C:\Users\celine\AppData\Local\{AA0B0205-F4EE-40E7-8B9F-232EE16ACB72}
O43 - CFD: 2012/06/28 21:45:13 - [0] D -- C:\Users\celine\AppData\Local\{AA750694-A8A3-45C4-8E4B-BC7BAA7D5A61}
O43 - CFD: 2012/11/19 11:04:32 - [0] D -- C:\Users\celine\AppData\Local\{ACC0F635-3539-4AAD-96C5-B0B5E87AB601}
O43 - CFD: 2012/06/19 19:11:34 - [0] D -- C:\Users\celine\AppData\Local\{ACDB6F5D-AFF4-41EA-86FC-3A82CF1ABEAC}
O43 - CFD: 2012/12/27 21:10:14 - [0] D -- C:\Users\celine\AppData\Local\{AD1FE21E-EF80-4B78-88B8-845208D14198}
O43 - CFD: 2012/06/06 21:17:20 - [0] D -- C:\Users\celine\AppData\Local\{AD295831-6E40-409D-9A6E-8D315661620D}
O43 - CFD: 2012/06/01 12:00:07 - [0] D -- C:\Users\celine\AppData\Local\{AD29AE76-B7F5-4612-BC8F-CE72A26C7CE8}
O43 - CFD: 2012/03/16 18:56:45 - [0] D -- C:\Users\celine\AppData\Local\{AE7118FA-75E8-4AE8-9CDD-6C79AD26B2C3}
O43 - CFD: 2012/05/20 21:54:42 - [0] D -- C:\Users\celine\AppData\Local\{AE8A910E-BC18-45C6-9E10-C54F42F9E3DA}
O43 - CFD: 2012/02/02 21:57:15 - [0] D -- C:\Users\celine\AppData\Local\{AEDEBDD0-D12F-4113-BE38-557F3E7DF87C}
O43 - CFD: 2012/06/28 20:24:20 - [0] D -- C:\Users\celine\AppData\Local\{AF56A79D-387B-46A4-B6D2-76C0F876D0BF}
O43 - CFD: 2013/03/21 08:25:25 - [0] D -- C:\Users\celine\AppData\Local\{AF61BAB0-09A2-4C22-A6E9-62A0D0D2FB55}
O43 - CFD: 2013/05/07 10:24:30 - [0] D -- C:\Users\celine\AppData\Local\{AF936B78-4BAD-4BCD-8CCA-D2E161753EF7}
O43 - CFD: 2012/05/09 08:50:12 - [0] D -- C:\Users\celine\AppData\Local\{AFBAC624-B8B8-4693-8791-A194E160CC9B}
O43 - CFD: 2012/02/18 11:31:50 - [0] D -- C:\Users\celine\AppData\Local\{B03958E1-53AF-43F1-8CC2-D43B3F3312A4}
O43 - CFD: 2013/05/04 17:51:00 - [0] D -- C:\Users\celine\AppData\Local\{B03ADDC0-33DB-4CA9-BED4-31C9B48D13B7}
O43 - CFD: 2013/03/20 14:43:02 - [0] D -- C:\Users\celine\AppData\Local\{B0590556-38F4-4246-B21E-185D84B7DC8B}
O43 - CFD: 2012/05/13 09:30:57 - [0] D -- C:\Users\celine\AppData\Local\{B06D6570-6617-450F-9B42-2199674ECDBC}
O43 - CFD: 2012/06/19 14:27:43 - [0] D -- C:\Users\celine\AppData\Local\{B0826941-D882-4C9A-878F-8B810DE7CC90}
O43 - CFD: 2013/05/22 15:00:08 - [0] D -- C:\Users\celine\AppData\Local\{B0AD14BE-71C6-4901-81AC-5E6EC1CA9828}
O43 - CFD: 2013/03/10 18:37:40 - [0] D -- C:\Users\celine\AppData\Local\{B123F1AC-B569-4FDC-BBCA-34954E45552E}
O43 - CFD: 2013/07/01 08:40:29 - [0] D -- C:\Users\celine\AppData\Local\{B183CB82-7AC3-4F03-A760-316787D47EDC}
O43 - CFD: 2012/05/18 14:09:15 - [0] D -- C:\Users\celine\AppData\Local\{B20C1001-F01F-4FA4-9ECD-6B586DA4F5C2}
O43 - CFD: 2013/07/05 13:11:34 - [0] D -- C:\Users\celine\AppData\Local\{B26115AA-3632-4D28-BB15-8B4C5101BC0E}
O43 - CFD: 2012/06/03 15:22:45 - [0] D -- C:\Users\celine\AppData\Local\{B27213C2-BD66-40DA-9063-4F6A3940C3A6}
O43 - CFD: 2013/03/18 14:52:35 - [0] D -- C:\Users\celine\AppData\Local\{B373EEBC-B536-4EAC-83DD-03A4C0B7E560}
O43 - CFD: 2012/01/08 16:25:27 - [0] D -- C:\Users\celine\AppData\Local\{B3A6ECFF-57B5-4436-96AB-847ED9455CDB}
O43 - CFD: 2012/02/03 11:37:12 - [0] D -- C:\Users\celine\AppData\Local\{B42B4896-0B30-4D7E-A578-90731480BFF5}
O43 - CFD: 2012/02/16 14:40:53 - [0] D -- C:\Users\celine\AppData\Local\{B45501EA-863D-4A3A-9A55-8631C40881FC}
O43 - CFD: 2012/08/31 22:34:43 - [0] D -- C:\Users\celine\AppData\Local\{B4B6DE74-18C4-476B-B59C-CE896F2A5037}
O43 - CFD: 2012/03/05 17:34:54 - [0] D -- C:\Users\celine\AppData\Local\{B4D43C0A-91B7-4E05-8F0E-A610DCA334ED}
O43 - CFD: 2012/06/29 19:07:27 - [0] D -- C:\Users\celine\AppData\Local\{B4D51152-C774-4A81-98D3-F3DE960743E2}
O43 - CFD: 2012/05/28 16:18:45 - [0] D -- C:\Users\celine\AppData\Local\{B4DBB3B3-FE65-4D41-B201-0C29E56EA545}
O43 - CFD: 2013/05/18 12:17:14 - [0] D -- C:\Users\celine\AppData\Local\{B541CD97-6061-4338-A648-1B25D1C8EE9B}
O43 - CFD: 2011/11/21 13:20:35 - [0] D -- C:\Users\celine\AppData\Local\{B548CFAF-4C88-43D5-B843-37A02FD18405}
O43 - CFD: 2011/11/16 20:27:41 - [0] D -- C:\Users\celine\AppData\Local\{B55C1DD6-805B-44E7-BB48-AF9DE8898329}
O43 - CFD: 2012/03/17 01:47:04 - [0] D -- C:\Users\celine\AppData\Local\{B6477449-0046-4595-9E66-C76D9D98F9AB}
O43 - CFD: 2012/06/06 08:17:52 - [0] D -- C:\Users\celine\AppData\Local\{B674B20B-9067-4AC9-86FB-B51F2C1F9E56}
O43 - CFD: 2012/03/10 19:21:24 - [0] D -- C:\Users\celine\AppData\Local\{B6C6DB32-374A-4035-8C73-841F46FC83B8}
O43 - CFD: 2013/06/28 06:00:31 - [0] D -- C:\Users\celine\AppData\Local\{B6D94AB0-4541-4599-806F-E38F6DA7CF80}
O43 - CFD: 2012/11/30 18:49:24 - [0] D -- C:\Users\celine\AppData\Local\{B759B063-A921-4DC5-8801-2D8C6D1D530C}
O43 - CFD: 2012/01/09 13:08:04 - [0] D -- C:\Users\celine\AppData\Local\{B77A08CC-F7D9-4951-9092-582165C51037}
O43 - CFD: 2012/05/31 20:16:10 - [0] D -- C:\Users\celine\AppData\Local\{B7A3B796-8023-435D-A042-EC15D6A3970D}
O43 - CFD: 2012/03/10 01:08:23 - [0] D -- C:\Users\celine\AppData\Local\{B8C97B44-7C38-4F1E-9920-8BB140D55C35}
O43 - CFD: 2013/05/21 11:06:20 - [0] D -- C:\Users\celine\AppData\Local\{B9290E09-2066-4635-8B2E-4354118DEA7E}
O43 - CFD: 2012/09/12 19:45:45 - [0] D -- C:\Users\celine\AppData\Local\{B986B132-057C-44EF-BBFD-2602DE2E9C20}
O43 - CFD: 2012/07/14 12:37:17 - [0] D -- C:\Users\celine\AppData\Local\{B9D432FC-37CF-43FE-A6E5-889C53BEF41F}
O43 - CFD: 2015/06/27 12:57:44 - [0] D -- C:\Users\celine\AppData\Local\{BA781E74-571F-41D1-8FCE-7944527D65B4}
O43 - CFD: 2011/10/22 17:07:29 - [0] D -- C:\Users\celine\AppData\Local\{BAA00D78-D3BF-4DCF-99D1-B138FA64D5CC}
O43 - CFD: 2012/06/26 13:19:18 - [0] D -- C:\Users\celine\AppData\Local\{BBEB7C47-E830-4E1D-A183-B4BDF536FD30}
O43 - CFD: 2013/05/21 01:33:59 - [0] D -- C:\Users\celine\AppData\Local\{BC37BA66-A71A-4872-B2D9-9B4B068D17B7}
O43 - CFD: 2012/03/06 15:43:07 - [0] D -- C:\Users\celine\AppData\Local\{BC6512DF-FC18-4012-B59E-D976D7EC565B}
O43 - CFD: 2013/04/29 12:27:48 - [0] D -- C:\Users\celine\AppData\Local\{BD2EECC3-24C6-4483-BB43-97D1287AFBFD}
O43 - CFD: 2011/11/21 13:13:28 - [0] D -- C:\Users\celine\AppData\Local\{BD6BE424-0A57-4950-B6AE-669530E87936}
O43 - CFD: 2012/06/05 12:16:34 - [0] D -- C:\Users\celine\AppData\Local\{BD95C0C4-E6A0-4930-93CB-9341E268878B}
O43 - CFD: 2013/01/23 15:47:28 - [0] D -- C:\Users\celine\AppData\Local\{BE966B8E-D503-412E-B7D5-A0CF935EE529}
O43 - CFD: 2012/05/13 13:17:48 - [0] D -- C:\Users\celine\AppData\Local\{BEC45D7B-EB50-4596-8AEB-29E353E575D3}
O43 - CFD: 2013/06/10 00:58:49 - [0] D -- C:\Users\celine\AppData\Local\{BEDABB2C-53B2-4B2A-B9A7-843D6D7B07FF}
O43 - CFD: 2013/03/09 12:23:13 - [0] D -- C:\Users\celine\AppData\Local\{BF259810-2400-4B02-8E46-2C6E97E15D84}
O43 - CFD: 2012/08/15 19:44:15 - [0] D -- C:\Users\celine\AppData\Local\{BF35BABE-A451-488D-81B8-958BE2E290E4}
O43 - CFD: 2012/06/03 15:22:41 - [0] D -- C:\Users\celine\AppData\Local\{BF518A4D-4CA6-4DB4-BA05-D80DA103D24F}
O43 - CFD: 2012/06/28 20:26:36 - [0] D -- C:\Users\celine\AppData\Local\{BF543B6F-FD45-4BC9-9B2D-75B0083BECF1}
O43 - CFD: 2012/06/26 15:51:55 - [0] D -- C:\Users\celine\AppData\Local\{C02C1054-90EC-4FE2-87C2-4F0EB951E9ED}
O43 - CFD: 2013/05/04 05:50:21 - [0] D -- C:\Users\celine\AppData\Local\{C0696A32-5198-4119-990B-3A5A78CD462A}
O43 - CFD: 2013/05/14 18:24:24 - [0] D -- C:\Users\celine\AppData\Local\{C0B97BE2-5822-48B0-915F-30B066EBF417}
O43 - CFD: 2012/06/28 17:04:48 - [0] D -- C:\Users\celine\AppData\Local\{C11A20CD-9575-4245-9703-374F3C8EBE38}
O43 - CFD: 2012/09/17 12:46:55 - [0] D -- C:\Users\celine\AppData\Local\{C187694A-76E3-40E5-8C76-7C2398454808}
O43 - CFD: 2013/06/05 21:44:22 - [0] D -- C:\Users\celine\AppData\Local\{C1FEDA10-66D9-4B0D-B6E8-4957610EBF31}
O43 - CFD: 2012/08/21 13:31:04 - [0] D -- C:\Users\celine\AppData\Local\{C2B24159-951A-40F4-A532-5F9DD6D2131E}
O43 - CFD: 2012/08/17 09:09:37 - [0] D -- C:\Users\celine\AppData\Local\{C30AA4DA-30A4-4519-B473-19EE9E9E67F3}
O43 - CFD: 2012/10/23 06:04:04 - [0] D -- C:\Users\celine\AppData\Local\{C401F3B7-9993-4B62-B98D-43BF46B986FE}
O43 - CFD: 2012/10/15 19:46:01 - [0] D -- C:\Users\celine\AppData\Local\{C51F4B27-67FC-413F-8395-9FCF057471EE}
O43 - CFD: 2012/07/02 10:15:58 - [0] D -- C:\Users\celine\AppData\Local\{C527F6FC-6E66-456B-AD03-E487141F6DE7}
O43 - CFD: 2012/09/06 14:21:29 - [0] D -- C:\Users\celine\AppData\Local\{C54EFB36-AE63-4108-A239-8F315B75A4D3}
O43 - CFD: 2013/07/15 10:19:07 - [0] D -- C:\Users\celine\AppData\Local\{C58C18F3-D09A-45FE-B220-19CE3133D639}
O43 - CFD: 2013/03/14 11:50:26 - [0] D -- C:\Users\celine\AppData\Local\{C58C414C-1509-40A7-B5C1-835A1AD201AB}
O43 - CFD: 2012/03/05 17:35:16 - [0] D -- C:\Users\celine\AppData\Local\{C59603F8-FBC1-44B2-BC9E-6EED56CBBB6C}
O43 - CFD: 2013/06/14 13:47:02 - [0] D -- C:\Users\celine\AppData\Local\{C5F2A0CD-1B62-40D4-B273-CAEE4F807B9C}
O43 - CFD: 2012/08/24 09:29:54 - [0] D -- C:\Users\celine\AppData\Local\{C641DBD0-7F78-4737-92C4-00C1CFE47C8D}
O43 - CFD: 2012/06/01 14:21:29 - [0] D -- C:\Users\celine\AppData\Local\{C6DF66D5-6FAC-40B5-9E9A-B7C37116BBA8}
O43 - CFD: 2012/07/31 10:13:37 - [0] D -- C:\Users\celine\AppData\Local\{C6E61C88-9999-4418-B256-DC2F01431656}
O43 - CFD: 2013/05/11 22:19:46 - [0] D -- C:\Users\celine\AppData\Local\{C7471608-EB37-4EB4-A687-8D50D05F0934}
O43 - CFD: 2012/01/17 12:46:45 - [0] D -- C:\Users\celine\AppData\Local\{C83E5513-9249-4DBC-B6E7-13F56F9D10B3}
O43 - CFD: 2012/05/31 18:03:11 - [0] D -- C:\Users\celine\AppData\Local\{C8428CA8-C158-4449-B2AE-26119DB505EB}
O43 - CFD: 2012/12/26 14:48:12 - [0] D -- C:\Users\celine\AppData\Local\{C84A3ABE-B5F8-4720-AC61-251E2E6A987A}
O43 - CFD: 2013/05/23 10:44:43 - [0] D -- C:\Users\celine\AppData\Local\{C85AFB62-4CAB-4BB5-89B6-B6E783F4AF44}
O43 - CFD: 2012/10/13 15:16:46 - [0] D -- C:\Users\celine\AppData\Local\{C85FE891-BA10-4B2E-B25F-11612BB6AE40}
O43 - CFD: 2013/02/11 02:29:27 - [0] D -- C:\Users\celine\AppData\Local\{C8A2E4AE-5C90-45B6-A5E1-26BA82501752}
O43 - CFD: 2012/05/28 18:44:28 - [0] D -- C:\Users\celine\AppData\Local\{C8BCC796-9DA7-4179-BEBA-B5218F780E98}
O43 - CFD: 2013/06/30 20:13:27 - [0] D -- C:\Users\celine\AppData\Local\{C8DFF7B9-0A53-4E9D-A278-9A6A600E2F26}
O43 - CFD: 2012/08/29 10:21:03 - [0] D -- C:\Users\celine\AppData\Local\{C9E4F145-DADD-43EB-858A-A1B93952FE6C}
O43 - CFD: 2012/06/01 14:21:04 - [0] D -- C:\Users\celine\AppData\Local\{C9F089B5-34F9-48F2-9DC7-6ABF7BA92653}
O43 - CFD: 2012/07/05 12:01:44 - [0] D -- C:\Users\celine\AppData\Local\{CA18D2D9-93A1-4C07-8A6E-B8968433F7F9}
O43 - CFD: 2013/06/22 16:43:57 - [0] D -- C:\Users\celine\AppData\Local\{CAA7CEB5-511C-45B8-A7F5-1D515C2BFC49}
O43 - CFD: 2012/08/01 20:48:08 - [0] D -- C:\Users\celine\AppData\Local\{CCF5E971-F9C9-4D43-B6CE-A8EA5B2E77D5}
O43 - CFD: 2013/01/22 15:20:20 - [0] D -- C:\Users\celine\AppData\Local\{CD36A755-C6D1-4050-A5AD-A5A6264E8220}
O43 - CFD: 2013/03/26 02:57:27 - [0] D -- C:\Users\celine\AppData\Local\{CD4C77CE-165F-4015-AE9C-94F21D09437C}
O43 - CFD: 2012/02/09 18:02:01 - [0] D -- C:\Users\celine\AppData\Local\{CDA758B0-EFF1-45AF-80A4-52128596E071}
O43 - CFD: 2012/02/13 16:56:02 - [0] D -- C:\Users\celine\AppData\Local\{CDD6C2EC-B869-4C9F-9EB9-293A65511F0D}
O43 - CFD: 2012/06/18 14:40:26 - [0] D -- C:\Users\celine\AppData\Local\{CE7666DE-23ED-4F0D-901F-457680C5B139}
O43 - CFD: 2012/01/22 10:40:14 - [0] D -- C:\Users\celine\AppData\Local\{CE7B761D-6D93-4F5C-8F50-AC02E17DFD4D}
O43 - CFD: 2012/10/10 08:16:42 - [0] D -- C:\Users\celine\AppData\Local\{CE92D259-16E8-49A3-8CD2-54A7203C06AD}
O43 - CFD: 2012/06/01 19:02:03 - [0] D -- C:\Users\celine\AppData\Local\{CEBAD334-BDC4-453A-9E92-4D22CBD69362}
O43 - CFD: 2012/08/18 12:24:01 - [0] D -- C:\Users\celine\AppData\Local\{CF0D2C70-C520-4D92-835E-BECB789B5C87}
O43 - CFD: 2012/01/10 12:51:39 - [0] D -- C:\Users\celine\AppData\Local\{CF3106E3-1B23-40E3-9AB3-2F5F214010A0}
O43 - CFD: 2012/02/11 10:36:41 - [0] D -- C:\Users\celine\AppData\Local\{CF5A5567-74D8-4334-803D-604318CEB6EA}
O43 - CFD: 2012/08/27 02:29:23 - [0] D -- C:\Users\celine\AppData\Local\{CF5F6A58-6656-4F6D-A0C4-A7E05C1493B6}
O43 - CFD: 2012/03/16 15:45:53 - [0] D -- C:\Users\celine\AppData\Local\{CFB5944B-0A88-455E-A831-EA7363067783}
O43 - CFD: 2012/11/17 21:01:41 - [0] D -- C:\Users\celine\AppData\Local\{CFC18033-8930-47E9-9DE4-69DFA789CA9B}
O43 - CFD: 2012/06/28 21:45:55 - [0] D -- C:\Users\celine\AppData\Local\{CFCC86D6-7AC1-46A7-8AEE-F8292A49F994}
O43 - CFD: 2012/01/22 19:05:00 - [0] D -- C:\Users\celine\AppData\Local\{CFE758E4-624B-4861-911D-BB7199A9D882}
O43 - CFD: 2012/07/18 08:11:43 - [0] D -- C:\Users\celine\AppData\Local\{D075DC04-58E4-4502-83CA-2A33A437D30D}
O43 - CFD: 2012/08/08 00:52:08 - [0] D -- C:\Users\celine\AppData\Local\{D164B6D1-8801-4BA8-8322-0F7F37475784}
O43 - CFD: 2012/09/11 22:24:53 - [0] D -- C:\Users\celine\AppData\Local\{D1DAB5E8-D23E-4F5B-B6CC-EF92302D837D}
O43 - CFD: 2012/07/21 04:29:28 - [0] D -- C:\Users\celine\AppData\Local\{D2323CC2-8E9F-4760-A6D5-B0C0D88A6845}
O43 - CFD: 2012/07/19 08:46:09 - [0] D -- C:\Users\celine\AppData\Local\{D23A282B-FAEB-490B-B754-272253BFF664}
O43 - CFD: 2012/01/16 10:23:27 - [0] D -- C:\Users\celine\AppData\Local\{D2556A4C-992F-41F6-9C09-155B8F417F00}
O43 - CFD: 2012/01/23 21:22:07 - [0] D -- C:\Users\celine\AppData\Local\{D29DD8BE-561E-4C08-9CF5-F6BCEDEFB6F4}
O43 - CFD: 2013/01/29 11:17:15 - [0] D -- C:\Users\celine\AppData\Local\{D2F78396-55BF-41F8-AC95-2497EC786134}
O43 - CFD: 2013/03/03 22:18:20 - [0] D -- C:\Users\celine\AppData\Local\{D3005D5F-E5AF-4B95-9B04-AB3226196FAD}
O43 - CFD: 2012/05/20 21:54:58 - [0] D -- C:\Users\celine\AppData\Local\{D3ABA52F-19B2-4DC7-A1F0-F808DFE80B24}
O43 - CFD: 2013/01/09 13:45:17 - [0] D -- C:\Users\celine\AppData\Local\{D3E40945-53F2-41A2-A6A6-E696C175E071}
O43 - CFD: 2012/06/21 21:17:02 - [0] D -- C:\Users\celine\AppData\Local\{D50D2D8B-17CF-444D-8EA3-186DC79173DF}
O43 - CFD: 2012/06/28 20:24:09 - [0] D -- C:\Users\celine\AppData\Local\{D55B8CA6-2754-4DC4-A628-8B3685AF8668}
O43 - CFD: 2012/07/10 20:31:11 - [0] D -- C:\Users\celine\AppData\Local\{D5616A9D-3967-42C2-B0B5-6B7185E6E2E1}
O43 - CFD: 2012/10/19 11:23:41 - [0] D -- C:\Users\celine\AppData\Local\{D65DF90D-D25D-4DF0-8FFB-B2A7F5B53EB9}
O43 - CFD: 2012/05/17 12:36:33 - [0] D -- C:\Users\celine\AppData\Local\{D6C3C919-164F-4EC9-84D7-4DA662B36047}
O43 - CFD: 2012/07/26 14:27:30 - [0] D -- C:\Users\celine\AppData\Local\{D6DE5F3B-CF04-4CE2-8CA8-99A93F7E9F6D}
O43 - CFD: 2012/01/22 10:39:59 - [0] D -- C:\Users\celine\AppData\Local\{D6E6B12B-B5E8-403A-B1DC-B3254B946308}
O43 - CFD: 2013/07/03 14:26:48 - [0] D -- C:\Users\celine\AppData\Local\{D75F6856-44D1-4B4E-AF79-A8D7196B1956}
O43 - CFD: 2012/06/06 21:17:04 - [0] D -- C:\Users\celine\AppData\Local\{D85A408C-E07D-45B7-95B0-53C757BE7A49}
O43 - CFD: 2013/06/16 02:47:22 - [0] D -- C:\Users\celine\AppData\Local\{D862FF9F-C7EA-4801-9C0B-F656DDACD868}
O43 - CFD: 2012/03/19 21:22:27 - [0] D -- C:\Users\celine\AppData\Local\{D8E8B2C0-7BC3-492E-BF1F-5A611EFB2441}
O43 - CFD: 2013/01/18 05:58:28 - [0] D -- C:\Users\celine\AppData\Local\{D92091C2-DA4F-4148-AE5D-1429F06FDDD6}
O43 - CFD: 2012/06/21 22:18:05 - [0] D -- C:\Users\celine\AppData\Local\{D9CA8744-15AD-490C-BA0F-9A0E4886F070}
O43 - CFD: 2012/12/11 15:18:57 - [0] D -- C:\Users\celine\AppData\Local\{DC98EBC1-7B8F-4DFE-9687-40B654DD66A3}
O43 - CFD: 2012/06/19 14:26:50 - [0] D -- C:\Users\celine\AppData\Local\{DCFC0525-440E-441B-BAFE-3FAEF18974BF}
O43 - CFD: 2012/07/10 20:30:53 - [0] D -- C:\Users\celine\AppData\Local\{DD0B8F53-7840-41D2-960A-81A969640283}
O43 - CFD: 2012/06/28 20:26:05 - [0] D -- C:\Users\celine\AppData\Local\{DD69C781-966F-489C-AD70-CCBE4F3463F6}
O43 - CFD: 2013/02/15 22:02:33 - [0] D -- C:\Users\celine\AppData\Local\{DD8A6F1C-654D-444F-9C87-30BFF36CCCED}
O43 - CFD: 2012/02/02 10:30:47 - [0] D -- C:\Users\celine\AppData\Local\{DDFB0AA8-1B48-4D96-BDE8-8F722D86BD61}
O43 - CFD: 2013/01/31 14:02:17 - [0] D -- C:\Users\celine\AppData\Local\{DE8D00B1-93E0-41E4-98D5-64D9F2A5F6E9}
O43 - CFD: 2013/03/31 12:04:30 - [0] D -- C:\Users\celine\AppData\Local\{DE914BA1-FF9D-4F1B-B1A1-356BB86DE515}
O43 - CFD: 2012/02/28 20:57:59 - [0] D -- C:\Users\celine\AppData\Local\{DEE4CBD4-EBC3-4A7E-9009-247A230BE828}
O43 - CFD: 2012/06/09 17:36:03 - [0] D -- C:\Users\celine\AppData\Local\{DF5E81AB-D5CD-4488-8376-B2FC7A19C6FD}
O43 - CFD: 2012/09/14 13:35:16 - [0] D -- C:\Users\celine\AppData\Local\{E0156EF4-90E2-45BF-BFD0-28BC4EF067A2}
O43 - CFD: 2012/06/05 22:29:26 - [0] D -- C:\Users\celine\AppData\Local\{E06AAAF6-7521-42C6-82DA-4228A4999A3E}
O43 - CFD: 2012/08/02 21:13:23 - [0] D -- C:\Users\celine\AppData\Local\{E0884FD8-4F7B-4D0D-AE88-9430F71D9F56}
O43 - CFD: 2012/08/28 18:44:56 - [0] D -- C:\Users\celine\AppData\Local\{E0CA4870-75D4-4119-A874-04A833B3798D}
O43 - CFD: 2011/10/22 17:04:39 - [0] D -- C:\Users\celine\AppData\Local\{E1289475-3BFD-40B0-8DAD-F6A714644733}
O43 - CFD: 2013/03/26 14:58:07 - [0] D -- C:\Users\celine\AppData\Local\{E1E764E9-DF00-41B2-B4DE-329EC6DFC933}
O43 - CFD: 2012/06/11 11:52:59 - [0] D -- C:\Users\celine\AppData\Local\{E2BC972F-D3A0-4556-B8CB-6543141D6D91}
O43 - CFD: 2012/06/28 16:49:46 - [0] D -- C:\Users\celine\AppData\Local\{E2FD978A-969F-426E-9DE9-17D56D37144F}
O43 - CFD: 2012/05/13 13:18:02 - [0] D -- C:\Users\celine\AppData\Local\{E323EBE7-57C0-418C-834B-5CE3B964C2BA}
O43 - CFD: 2012/06/28 20:25:06 - [0] D -- C:\Users\celine\AppData\Local\{E36FB0CF-DE06-4381-8BCA-55452CC8DABF}
O43 - CFD: 2013/02/28 12:31:57 - [0] D -- C:\Users\celine\AppData\Local\{E3DB12B7-2B8E-4BAB-A5E7-323E959430EA}
O43 - CFD: 2013/05/26 18:49:47 - [0] D -- C:\Users\celine\AppData\Local\{E45F4B55-6707-4CAB-A2BD-E918D1746554}
O43 - CFD: 2012/06/24 13:53:01 - [0] D -- C:\Users\celine\AppData\Local\{E4BAA14E-7226-4623-BBEC-5098A5C9D5CC}
O43 - CFD: 2012/06/28 20:23:49 - [0] D -- C:\Users\celine\AppData\Local\{E4F77592-67CB-4B7B-9517-CC25B2494F23}
O43 - CFD: 2012/02/02 09:17:44 - [0] D -- C:\Users\celine\AppData\Local\{E70AC9C4-AF29-4183-9419-E842186BF2FA}
O43 - CFD: 2012/08/07 12:46:15 - [0] D -- C:\Users\celine\AppData\Local\{E79363E5-1414-400A-8C11-3D52F1C4833C}
O43 - CFD: 2013/01/16 21:48:44 - [0] D -- C:\Users\celine\AppData\Local\{E7BDB6E6-1379-4ADE-B922-1583B7A3B799}
O43 - CFD: 2012/06/09 10:12:22 - [0] D -- C:\Users\celine\AppData\Local\{E7C12A9C-21B3-425A-A313-BA7C7D4EE4D7}
O43 - CFD: 2012/06/28 16:50:03 - [0] D -- C:\Users\celine\AppData\Local\{E8642454-5F67-447A-A82D-BE0762D97B70}
O43 - CFD: 2012/03/05 17:54:15 - [0] D -- C:\Users\celine\AppData\Local\{E8F46676-3FE1-479A-A5F4-0F9AD2A4C4D7}
O43 - CFD: 2012/07/08 18:58:08 - [0] D -- C:\Users\celine\AppData\Local\{E91464EF-017B-43CF-BF89-78FD8710AC7F}
O43 - CFD: 2012/06/28 21:46:22 - [0] D -- C:\Users\celine\AppData\Local\{E927DBAB-73C7-42C1-9D04-93B6E31EF5EA}
O43 - CFD: 2013/04/10 19:15:39 - [0] D -- C:\Users\celine\AppData\Local\{E9FF64A1-ED4A-4AF5-B36C-FB4BE784DDCF}
O43 - CFD: 2012/05/26 14:22:34 - [0] D -- C:\Users\celine\AppData\Local\{EA021598-18E7-4498-A850-C4B12B21127D}
O43 - CFD: 2013/06/16 15:26:42 - [0] D -- C:\Users\celine\AppData\Local\{EAC92687-6F97-4D4B-8ACA-D2F25BFABF4F}
O43 - CFD: 2012/01/10 12:51:24 - [0] D -- C:\Users\celine\AppData\Local\{EC2576E1-92FA-4623-9B41-9F0123F41B56}
O43 - CFD: 2012/12/07 10:53:49 - [0] D -- C:\Users\celine\AppData\Local\{EC433E46-21AC-4FD9-BFF3-0809E316529B}
O43 - CFD: 2012/06/28 21:46:50 - [0] D -- C:\Users\celine\AppData\Local\{EC9144F8-FEF1-4687-AF89-94CEC44B173F}
O43 - CFD: 2012/07/23 09:25:08 - [0] D -- C:\Users\celine\AppData\Local\{ED11ACC7-89E7-4E4C-8625-DFB38B82E00F}
O43 - CFD: 2012/01/12 15:14:49 - [0] D -- C:\Users\celine\AppData\Local\{ED1E01EB-4AEE-40C5-A34B-70702E088DE7}
O43 - CFD: 2012/02/10 14:49:46 - [0] D -- C:\Users\celine\AppData\Local\{EE09AC86-0BB8-4ABE-B0F3-30733083E2C5}
O43 - CFD: 2012/05/08 12:29:42 - [0] D -- C:\Users\celine\AppData\Local\{EE1B42CB-E05E-451E-BCEA-EC184FE12C8D}
O43 - CFD: 2013/01/28 11:15:04 - [0] D -- C:\Users\celine\AppData\Local\{EE47D9CA-B830-4930-B7C4-A90B2DAF92A9}
O43 - CFD: 2012/12/16 09:13:18 - [0] D -- C:\Users\celine\AppData\Local\{EEC8D819-7881-4410-98C9-63D83DC8EF62}
O43 - CFD: 2013/06/11 13:13:15 - [0] D -- C:\Users\celine\AppData\Local\{F03B117C-2818-40FC-A27F-EB3F5F139121}
O43 - CFD: 2012/06/28 17:04:15 - [0] D -- C:\Users\celine\AppData\Local\{F09E0707-CF05-409F-AB62-297B1E139525}
O43 - CFD: 2012/01/26 07:27:35 - [0] D -- C:\Users\celine\AppData\Local\{F155A4EA-2DA4-479B-9915-52754A775317}
O43 - CFD: 2012/10/12 08:31:30 - [0] D -- C:\Users\celine\AppData\Local\{F1EBD179-9BE6-45A7-9A94-7E2679F9B5BC}
O43 - CFD: 2012/07/20 14:51:02 - [0] D -- C:\Users\celine\AppData\Local\{F22B8E5F-8F3C-49BA-B00C-3E1B7F3D9056}
O43 - CFD: 2012/10/14 05:28:24 - [0] D -- C:\Users\celine\AppData\Local\{F2CDF817-C688-448A-B8C1-A0C2D0B39ADE}
O43 - CFD: 2013/06/07 00:25:33 - [0] D -- C:\Users\celine\AppData\Local\{F2D4AEC9-9AC1-4993-87DE-1BBBF3B718EB}
O43 - CFD: 2012/02/09 15:03:53 - [0] D -- C:\Users\celine\AppData\Local\{F38975C1-EC01-47DF-BA33-63BD077040CD}
O43 - CFD: 2012/01/09 13:08:20 - [0] D -- C:\Users\celine\AppData\Local\{F3B1C970-0BE1-4E39-93F5-4F18F70179EA}
O43 - CFD: 2012/06/06 08:17:38 - [0] D -- C:\Users\celine\AppData\Local\{F3CC9DEE-FBCB-46A9-BA47-29F3D89AA34B}
O43 - CFD: 2012/01/16 10:23:53 - [0] D -- C:\Users\celine\AppData\Local\{F44AD917-284F-4478-A9F5-89F544E9BB1A}
O43 - CFD: 2012/06/11 11:52:29 - [0] D -- C:\Users\celine\AppData\Local\{F44E9639-78BE-4F98-B835-0C269BEE7393}
O43 - CFD: 2013/06/10 21:08:42 - [0] D -- C:\Users\celine\AppData\Local\{F4C08112-A9CF-433F-8FFA-604234701D24}
O43 - CFD: 2012/05/28 18:44:42 - [0] D -- C:\Users\celine\AppData\Local\{F50D30F8-506A-44B7-86D6-773F201CF712}
O43 - CFD: 2012/05/31 08:19:57 - [0] D -- C:\Users\celine\AppData\Local\{F56EEF80-BB87-4E33-9E65-AF542B0CACAF}
O43 - CFD: 2013/06/17 18:56:34 - [0] D -- C:\Users\celine\AppData\Local\{F5866408-3C5A-4A62-9180-D08C2219AA70}
O43 - CFD: 2012/04/11 02:33:37 - [0] D -- C:\Users\celine\AppData\Local\{F5A22B6C-435E-469C-BC78-E28421CA1C01}
O43 - CFD: 2012/06/28 17:05:09 - [0] D -- C:\Users\celine\AppData\Local\{F61A8EB9-D99B-4459-922C-C970D536361D}
O43 - CFD: 2012/02/08 10:37:10 - [0] D -- C:\Users\celine\AppData\Local\{F6793B4C-B597-4A7D-B9E9-9426EB50A0EE}
O43 - CFD: 2012/07/02 22:20:13 - [0] D -- C:\Users\celine\AppData\Local\{F6D4B48F-176D-418D-BB35-6872016F9DB4}
O43 - CFD: 2012/01/27 13:19:48 - [0] D -- C:\Users\celine\AppData\Local\{F7677780-1B72-465C-B08C-CD495B4BFCDB}
O43 - CFD: 2011/10/23 15:21:35 - [0] D -- C:\Users\celine\AppData\Local\{F77AFE04-346A-4243-856D-1A99904775A0}
O43 - CFD: 2012/12/25 16:10:02 - [0] D -- C:\Users\celine\AppData\Local\{F7990F14-820A-480F-8B09-BC3A4452F379}
O43 - CFD: 2013/06/12 05:06:39 - [0] D -- C:\Users\celine\AppData\Local\{F7B3777E-6294-4490-8B1F-EF558DCCADD1}
O43 - CFD: 2013/02/18 00:26:24 - [0] D -- C:\Users\celine\AppData\Local\{F81C58F1-A1BC-46B8-AED5-FEB051C40DDF}
O43 - CFD: 2012/07/14 12:36:56 - [0] D -- C:\Users\celine\AppData\Local\{F829FA08-B0F9-4456-9F92-F4ADAAA645DA}
O43 - CFD: 2013/05/15 12:48:45 - [0] D -- C:\Users\celine\AppData\Local\{F9034EAE-953E-4562-A658-D550ACBD8175}
O43 - CFD: 2012/08/06 12:35:50 - [0] D -- C:\Users\celine\AppData\Local\{FA1F2035-D333-4A58-95DD-85F5CE568F79}
O43 - CFD: 2012/06/05 12:16:50 - [0] D -- C:\Users\celine\AppData\Local\{FABC35E1-51E6-4EA9-ADE7-6793BFE32072}
O43 - CFD: 2012/07/05 12:02:02 - [0] D -- C:\Users\celine\AppData\Local\{FAC017F3-C5F4-483E-93C8-65B10B12B852}
O43 - CFD: 2012/12/09 11:43:32 - [0] D -- C:\Users\celine\AppData\Local\{FAFC2A89-CFC8-4DCC-AB47-83F0224E739E}
O43 - CFD: 2012/12/01 13:31:51 - [0] D -- C:\Users\celine\AppData\Local\{FC228294-770A-400B-8043-74735EC58D42}
O43 - CFD: 2012/06/07 17:09:24 - [0] D -- C:\Users\celine\AppData\Local\{FC7BBA31-0563-49E9-9F7D-9BEF825083C7}
O43 - CFD: 2013/06/04 21:08:41 - [0] D -- C:\Users\celine\AppData\Local\{FCF640C0-0CC2-4463-959A-22E6E15379DD}
O43 - CFD: 2012/12/28 11:10:21 - [0] D -- C:\Users\celine\AppData\Local\{FD775F78-6AD7-447F-A9BF-5885BCDA21B8}
O43 - CFD: 2012/06/21 10:28:18 - [0] D -- C:\Users\celine\AppData\Local\{FDB222DE-FB1C-41D0-A534-5483FB36F5AE}
O43 - CFD: 2012/11/01 04:51:47 - [0] D -- C:\Users\celine\AppData\Local\{FDEB63D0-23D4-4AAB-BEB6-C78504D6BB5E}
O43 - CFD: 2013/05/08 10:26:00 - [0] D -- C:\Users\celine\AppData\Local\{FE7798A0-DC8D-4B28-822C-A0D49FD9857E}
O43 - CFD: 2013/02/17 12:25:34 - [0] D -- C:\Users\celine\AppData\Local\{FEFAB09E-2DE9-47BA-9E5D-88C262E339A2}
O43 - CFD: 2012/05/15 20:28:00 - [0] D -- C:\Users\celine\AppData\Local\{FF4CCA12-CA65-4860-A3B5-CD29FABD56CA}
O43 - CFD: 2012/03/19 21:22:42 - [0] D -- C:\Users\celine\AppData\Local\{FF776A47-E6BF-4E24-AC77-8CD3A9DBFB25}
O43 - CFD: 2012/07/15 11:46:57 - [0] D -- C:\Users\celine\AppData\Local\{FF86809C-D282-4C0B-93F2-B32C45BB18F1}
O43 - CFD: 2012/03/11 07:22:13 - [0] D -- C:\Users\celine\AppData\Local\{FFC54C8C-ABED-47E3-A35A-BEABB74B46E0}
O43 - CFD: 2009/07/14 06:54:32 - [] RD -- C:\Users\celine\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
O43 - CFD: 2015/08/19 15:07:08 - [] RD -- C:\Users\celine\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
O43 - CFD: 2009/07/14 06:49:38 - [] RD -- C:\Users\celine\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
O43 - CFD: 2015/08/19 13:49:41 - [] D -- C:\Users\celine\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MovieDea =>PUP.Optional.MovieDea
O43 - CFD: 2015/08/19 14:47:22 - [] D -- C:\Users\celine\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\News
O43 - CFD: 2015/08/19 15:07:08 - [] RD -- C:\Users\celine\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
O43 - CFD: 2015/08/19 13:44:43 - [] D -- C:\Users\celine\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\VOPackage =>PUP.Optional.Downware

---\\ Derniers fichiers créés dans Windows Prefetcher (8) - 33s
O45 - LFCP:[MD5.0D2E5CDCBF86283C5ECF7022A1503A59] 2015/08/19 12:29:05 A -- C:\Windows\Prefetch\BUBBLE DOCK UPDATE.EXE-DB1A6498.pf =>PUP.Optional.BubbleDock
O45 - LFCP:[MD5.A8887C398310E8274D9CCDFA3F6A2BFE] 2015/08/25 13:13:00 A -- C:\Windows\Prefetch\GLOBALUPDATE.EXE-AFA6DA21.pf =>PUP.Optional.GlobalUpdate
O45 - LFCP:[MD5.1470B302E62BBEC1C00279C1FAA01752] 2015/08/25 13:12:57 A -- C:\Windows\Prefetch\GLOBALUPDATECRASHHANDLER.EXE-3B319581.pf =>PUP.Optional.GlobalUpdate
O45 - LFCP:[MD5.446DC67BAC98CBCB6A1F5722CA287A4A] 2015/08/20 14:40:44 A -- C:\Windows\Prefetch\PCSUSD.EXE-6524099D.pf =>PUP.Optional.PCSpeedUp
O45 - LFCP:[MD5.52266A611D1242EE45A7DD2A72F088FB] 2015/08/25 13:16:45 A -- C:\Windows\Prefetch\PCSUUCC.EXE-6310E211.pf =>PUP.Optional.PCSpeedUp
O45 - LFCP:[MD5.FA14D88BBF31F2DC79001390A0FE21EF] 2015/08/24 19:45:16 A -- C:\Windows\Prefetch\SELECTION TOOLS UPDATE.EXE-4421733B.pf =>PUP.Optional.Nosibay
O45 - LFCP:[MD5.0289E45E34FA7DE37E2A4E7348BBA206] 2015/08/18 16:52:17 A -- C:\Windows\Prefetch\WEBBAR_7212015.EXE-E551BDC0.pf =>PUP.Optional.WebBar
O45 - LFCP:[MD5.0302A1520C5226CACE46FF06C6FAACCD] 2015/08/18 16:52:18 A -- C:\Windows\Prefetch\WEBBAR_7212015.TMP-66D431AB.pf =>PUP.Optional.WebBar

---\\ Liste des pilotes du système (76) - 31s
O58 - SDL:2009/07/14 03:52:21 A . (.Adaptec, Inc. - Adaptec Windows SAS/SATA Storport Driver.) -- C:\Windows\System32\drivers\adp94xx.sys [491088] ©
O58 - SDL:2009/07/14 03:52:21 A . (.Adaptec, Inc. - Adaptec Windows SATA Storport Driver.) -- C:\Windows\System32\drivers\adpahci.sys [339536] ©
O58 - SDL:2009/07/14 03:52:21 A . (.Adaptec, Inc. - Adaptec StorPort Ultra320 SCSI Driver (X64).) -- C:\Windows\System32\drivers\adpu320.sys [182864] ©
O58 - SDL:2009/07/14 03:52:21 A . (.Acer Laboratories Inc. - ALi mini IDE Driver.) -- C:\Windows\System32\drivers\aliide.sys [15440] ©
O58 - SDL:2011/03/11 08:41:12 A . (.Advanced Micro Devices - AHCI 1.2 Device Driver.) -- C:\Windows\System32\drivers\amdsata.sys [107904] ©
O58 - SDL:2009/07/14 03:52:20 A . (.AMD Technologies Inc. - AMD Technology AHCI Compatible Controller D.) -- C:\Windows\System32\drivers\amdsbs.sys [194128] ©
O58 - SDL:2011/03/11 08:41:12 A . (.Advanced Micro Devices - Storage Filter Driver.) -- C:\Windows\System32\drivers\amdxata.sys [27008] ©
O58 - SDL:2009/07/14 03:52:21 A . (.Adaptec, Inc. - Adaptec RAID Storport Driver.) -- C:\Windows\System32\drivers\arc.sys [87632] ©
O58 - SDL:2009/07/14 03:52:21 A . (.Adaptec, Inc. - Adaptec SAS RAID WS03 Driver.) -- C:\Windows\System32\drivers\arcsas.sys [97856] ©
O58 - SDL:2015/08/19 17:29:58 A . (.AVAST Software - avast! HWID.) -- C:\Windows\System32\drivers\aswHwid.sys [28656] ©
O58 - SDL:2015/08/19 17:29:58 A . (.AVAST Software - avast! File System Minifilter for Windows 2.) -- C:\Windows\System32\drivers\aswMonFlt.sys [90968] ©
O58 - SDL:2011/11/28 19:52:22 A . (.AVAST Software - avast! TDI RDR Driver.) -- C:\Windows\System32\drivers\aswRdr.sys [42328] ©
O58 - SDL:2015/08/19 17:29:57 A . (.AVAST Software - avast! WFP Redirect Driver.) -- C:\Windows\System32\drivers\aswRdr2.sys [93528] ©
O58 - SDL:2015/08/19 17:29:59 A . (.AVAST Software - avast! Revert.) -- C:\Windows\System32\drivers\aswRvrt.sys [65224] ©
O58 - SDL:2015/08/19 17:29:08 A . (.AVAST Software - avast! Virtualization Driver.) -- C:\Windows\System32\drivers\aswSnx.sys [1048856] ©
O58 - SDL:2015/08/19 17:29:59 A . (.AVAST Software - avast! self protection module.) -- C:\Windows\System32\drivers\aswSP.sys [447944] ©
O58 - SDL:2015/08/19 17:30:00 A . (.AVAST Software - Stream Filter.) -- C:\Windows\System32\drivers\aswStm.sys [150672] ©
O58 - SDL:2015/08/19 17:29:59 A . (.AVAST Software - avast! VM Monitor.) -- C:\Windows\System32\drivers\aswVmm.sys [274808] ©
O58 - SDL:2011/03/17 11:42:38 A . (.Atheros Communications, Inc. - Atheros Extensible Wireless LAN device driv.) -- C:\Windows\System32\drivers\athrx.sys [2712064] ©
O58 - SDL:2011/03/30 08:46:46 A . (.Advanced Micro Devices - AMD High Definition Audio Function Driver.) -- C:\Windows\System32\drivers\AtihdW76.sys [114704] ©
O58 - SDL:2011/05/07 03:29:52 A . (.ATI Technologies Inc. - ATI Radeon Kernel Mode Driver.) -- C:\Windows\System32\drivers\atikmdag.sys [9078784] ©
O58 - SDL:2011/05/07 00:53:00 A . (.Advanced Micro Devices, Inc. - AMD multi-vendor Miniport Driver.) -- C:\Windows\System32\drivers\atikmpag.sys [299520]
O58 - SDL:2009/06/10 22:34:23 A . (.Broadcom Corporation - Broadcom NetXtreme Gigabit Ethernet NDIS6.x.) -- C:\Windows\System32\drivers\b57nd60a.sys [270848] ©
O58 - SDL:2009/06/10 22:41:06 A . (.Brother Industries, Ltd. - Windows ME USB Mass-Storage Bulk-Only Lower.) -- C:\Windows\System32\drivers\BrFiltLo.sys [18432] ©
O58 - SDL:2009/06/10 22:41:06 A . (.Brother Industries, Ltd. - Windows ME USB Mass-Storage Bulk-Only Upper.) -- C:\Windows\System32\drivers\BrFiltUp.sys [8704] ©
O58 - SDL:2009/07/14 03:19:07 A . (.Brother Industries Ltd. - Pilote Brother Série I/F (WDM).) -- C:\Windows\System32\drivers\BrSerId.sys [286720] ©
O58 - SDL:2009/06/10 22:41:10 A . (.Brother Industries Ltd. - Brother Serial driver (WDM version).) -- C:\Windows\System32\drivers\BrSerWdm.sys [47104] ©
O58 - SDL:2009/06/10 22:41:10 A . (.Brother Industries Ltd. - Brother USB MDM Driver.) -- C:\Windows\System32\drivers\BrUsbMdm.sys [14976] ©
O58 - SDL:2009/06/10 22:41:10 A . (.Brother Industries Ltd. - Brother USB Serial Driver.) -- C:\Windows\System32\drivers\BrUsbSer.sys [14720] ©
O58 - SDL:2009/06/10 22:34:28 A . (.Broadcom Corporation - Broadcom NetXtreme II GigE VBD.) -- C:\Windows\System32\drivers\bxvbda.sys [468480] ©
O58 - SDL:2009/07/14 03:52:31 A . (.CMD Technology, Inc. - CMD PCI IDE Bus Driver.) -- C:\Windows\System32\drivers\cmdide.sys [17488] ©
O58 - SDL:2009/07/14 03:47:48 A . (.Emulex - Storport Miniport Driver for LightPulse HBA.) -- C:\Windows\System32\drivers\elxstor.sys [530496] ©
O58 - SDL:2009/06/10 22:34:33 A . (.Broadcom Corporation - Broadcom NetXtreme II 10 GigE VBD.) -- C:\Windows\System32\drivers\evbda.sys [3286016] ©
O58 - SDL:2009/05/18 14:17:08 A . (.GEAR Software Inc. - CD DVD Filter.) -- C:\Windows\System32\drivers\GEARAspiWDM.sys [34152] ©
O58 - SDL:2009/06/10 22:31:59 A . (.Hauppauge Computer Works, Inc. - Hauppauge WinTV 885 Consumer IR Driver for.) -- C:\Windows\System32\drivers\hcw85cir.sys [31232] ©
O58 - SDL:2010/11/21 05:23:47 A . (.Hewlett-Packard Company - Smart Array SAS/SATA Controller Media Drive.) -- C:\Windows\System32\drivers\HpSAMD.sys [78720] ©
O58 - SDL:2011/03/11 08:41:26 A . (.Intel Corporation - Intel Matrix Storage Manager driver - x64.) -- C:\Windows\System32\drivers\iaStorV.sys [410496] ©
O58 - SDL:2009/07/14 03:48:04 A . (.Intel Corp./ICP vortex GmbH - Intel/ICP Raid Storport Driver.) -- C:\Windows\System32\drivers\iirsp.sys [44112] ©
O58 - SDL:2010/07/29 01:25:10 A . (.Initio Corporation - Initio Default Vendor Specific Device Drive.) -- C:\Windows\System32\drivers\ivusb.sys [29720]
O58 - SDL:2011/03/23 04:20:58 A . (.Atheros Communications, Inc. - Atheros L1c PCI-E Gigabit Ethernet Controll.) -- C:\Windows\System32\drivers\L1C62x64.sys [77936] ©
O58 - SDL:2009/07/14 03:48:04 A . (.LSI Corporation - LSI Fusion-MPT FC Driver (StorPort).) -- C:\Windows\System32\drivers\lsi_fc.sys [114752] ©
O58 - SDL:2009/07/14 03:48:04 A . (.LSI Corporation - LSI Fusion-MPT SAS Driver (StorPort).) -- C:\Windows\System32\drivers\lsi_sas.sys [106560] ©
O58 - SDL:2009/07/14 03:48:04 A . (.LSI Corporation - LSI SAS Gen2 Driver (StorPort).) -- C:\Windows\System32\drivers\lsi_sas2.sys [65600] ©
O58 - SDL:2009/07/14 03:48:04 A . (.LSI Corporation - LSI Fusion-MPT SCSI Driver (StorPort).) -- C:\Windows\System32\drivers\lsi_scsi.sys [115776] ©
O58 - SDL:2015/04/14 09:37:42 A . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Windows\System32\drivers\mbam.sys [25816] ©
O58 - SDL:2015/04/14 09:37:46 A . (.Malwarebytes Corporation - Malwarebytes Chameleon Protection Driver.) -- C:\Windows\System32\drivers\mbamchameleon.sys [107736] ©
O58 - SDL:2015/06/27 13:34:20 A . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Windows\System32\drivers\MBAMSwissArmy.sys [136408] ©
O58 - SDL:2009/07/14 03:48:04 A . (.LSI Corporation - MEGASAS RAID Controller Driver for Windows.) -- C:\Windows\System32\drivers\megasas.sys [35392] ©
O58 - SDL:2009/07/14 03:48:04 A . (.LSI Corporation, Inc. - LSI MegaRAID Software RAID Driver.) -- C:\Windows\System32\drivers\MegaSR.sys [284736] ©
O58 - SDL:2015/04/14 09:37:56 A . (.Malwarebytes Corporation - Malwarebytes Web Access Control.) -- C:\Windows\System32\drivers\mwac.sys [63704] ©
O58 - SDL:2011/05/05 18:08:18 A . (.Egis Technology Inc. - PSD Filter Driver.) -- C:\Windows\System32\drivers\mwlPSDFilter.sys [22912] ©
O58 - SDL:2011/05/05 18:08:18 A . (.Egis Technology Inc. - MyWinLocker PSD Named Pipe Driver.) -- C:\Windows\System32\drivers\mwlPSDNserv.sys [20328] ©
O58 - SDL:2011/05/05 18:08:18 A . (.Egis Technology Inc. - MyWinLocker PSD Virtual Disk Driver.) -- C:\Windows\System32\drivers\mwlPSDVDisk.sys [62584] ©
O58 - SDL:2011/08/02 18:38:44 A . (.Apple Inc. - Apple Mobile Device Ethernet.) -- C:\Windows\System32\drivers\netaapl64.sys [22528] ©
O58 - SDL:2015/04/03 00:22:32 A . (.NetFilterSDK.com - NetFilter SDK WFP Driver (WPP).) -- C:\Windows\System32\drivers\netfilter64.sys [46376]
O58 - SDL:2009/07/14 03:48:26 A . (.IBM Corporation - IBM ServeRAID Controller Driver.) -- C:\Windows\System32\drivers\nfrd960.sys [51264] ©
O58 - SDL:2015/08/19 17:29:05 A . (.AVAST Software - avast! NG snapshot driver.) -- C:\Windows\System32\drivers\ngvss.sys [115152] ©
O58 - SDL:2011/03/10 06:01:45 A . (.NTI Corporation - NTI CD-ROM Filter Driver.) -- C:\Windows\System32\drivers\NTIDrvr.sys [18432] ©
O58 - SDL:2011/03/11 08:41:34 A . (.NVIDIA Corporation - NVIDIA® nForce(TM) RAID Driver.) -- C:\Windows\System32\drivers\nvraid.sys [148352] ©
O58 - SDL:2011/03/11 08:41:34 A . (.NVIDIA Corporation - NVIDIA® nForce(TM) Sata Performance Driver.) -- C:\Windows\System32\drivers\nvstor.sys [166272] ©
O58 - SDL:2009/07/14 03:45:46 A . (.QLogic Corporation - QLogic Fibre Channel Stor Miniport Driver.) -- C:\Windows\System32\drivers\ql2300.sys [1524816] ©
O58 - SDL:2009/07/14 03:45:45 A . (.QLogic Corporation - QLogic iSCSI Storport Miniport Driver.) -- C:\Windows\System32\drivers\ql40xx.sys [128592] ©
O58 - SDL:2011/04/26 13:45:50 A . (.Realtek Semiconductor Corp. - Realtek(r) High Definition Audio Function D.) -- C:\Windows\System32\drivers\RTKVHD64.sys [2852200] ©
O58 - SDL:2010/12/01 10:12:06 A . (.Realtek Semiconductor Corp. - Realtek USB Mass Storage Driver for 2K/XP/V.) -- C:\Windows\System32\drivers\RtsUStor.sys [250984] ©
O58 - SDL:2009/06/10 22:37:19 A . (.Macrovision Corporation, Macrovision Europe Limited, - Macrovision SECURITY Driver.) -- C:\Windows\System32\drivers\secdrv.sys [23040]
O58 - SDL:2009/07/14 03:45:45 A . (.Silicon Integrated Systems Corp. - SiS RAID Stor Miniport Driver.) -- C:\Windows\System32\drivers\sisraid2.sys [43584] ©
O58 - SDL:2009/07/14 03:45:46 A . (.Silicon Integrated Systems - SiS AHCI Stor-Miniport Driver.) -- C:\Windows\System32\drivers\sisraid4.sys [80464] ©
O58 - SDL:2009/07/14 03:45:55 A . (.Promise Technology - Promise SuperTrak EX Series Driver for Win.) -- C:\Windows\System32\drivers\stexstor.sys [24656] ©
O58 - SDL:2011/03/28 05:44:46 A . (.Synaptics Incorporated - Synaptics Touchpad Driver.) -- C:\Windows\System32\drivers\SynTP.sys [1417776] ©
O58 - SDL:2011/03/10 06:01:45 A . (.NTI Corporation - NTI CD-ROM Filter Driver.) -- C:\Windows\System32\drivers\UBHelper.sys [17408] ©
O58 - SDL:2012/02/15 12:01:50 A . (.Apple, Inc. - Apple Mobile Device USB Driver.) -- C:\Windows\System32\drivers\usbaapl64.sys [52736]
O58 - SDL:2010/11/28 22:50:38 A . (.Advanced Micro Devices - AMD USB Filter Driver.) -- C:\Windows\System32\drivers\usbfilter.sys [44672] ©
O58 - SDL:2009/07/14 03:45:55 A . (.VIA Technologies, Inc. - VIA Generic PCI IDE Bus Driver.) -- C:\Windows\System32\drivers\viaide.sys [17488] ©
O58 - SDL:2009/07/14 03:45:55 A . (.VIA Technologies Inc.,Ltd - VIA RAID DRIVER FOR AMD-X86-64.) -- C:\Windows\System32\drivers\vsmraid.sys [161872] ©
O58 - SDL:2015/07/06 21:08:28 A . (.WN - WN TDI Driver x64.) -- C:\Windows\System32\drivers\wfd_vt_1_10_0_20.sys [61312] =>PUP.Optional.Generic
O58 - SDL:2015/07/06 21:08:28 A . (.WN - WN WFP Driver x64.) -- C:\Windows\System32\drivers\wfd_vw_1_10_0_20.sys [57728] =>PUP.Optional.Generic

---\\ Derniers fichiers modifiés ou crées (Utilisateur) (16) - 65s
O61 - LFC: 2015/08/18 15:27:26 A . (.Today Developed Install.) -- C:\Users\celine\Downloads\EPSON EXPRESSION HOME XP-322 driver.exe [899752]
O61 - LFC: 2015/08/19 13:44:41 A . (..) -- C:\Users\celine\AppData\Roaming\VOPackage\Uninstall.exe [64158] =>PUP.Optional.Downware
O61 - LFC: 2015/08/19 13:43:19 A . (..) -- C:\Users\celine\AppData\Roaming\VOPackage\VOPackage.exe [966779] =>PUP.Optional.Downware
O61 - LFC: 2015/08/17 22:47:00 A . (..) -- C:\Users\celine\AppData\Roaming\mystartsearch\key.dll [57856] =>PUP.Optional.StartSearch
O61 - LFC: 2015/08/17 22:45:44 A . (.Skytech Co., Ltd..) -- C:\Users\celine\AppData\Roaming\mystartsearch\UninstallManager.exe [1783808] =>PUP.Optional.StartSearch
O61 - LFC: 2015/08/18 17:13:53 A . (..) -- C:\Users\celine\AppData\Local\mpck_fr_017010064\upmpck_fr_017010064.exe [3331728] =>PUP.Optional.MobilePCStarterKit
O61 - LFC: 2015/08/25 12:55:08 A . (..) -- C:\Users\celine\AppData\Local\mpck_fr_017010064\Download\myoffergroup_fr.exe [4781128] =>PUP.Optional.MobilePCStarterKit
O61 - LFC: 2015/08/19 14:43:20 A . (.Copyright (C) 2014.) -- C:\Users\celine\AppData\Local\Installer\Install_30397\DCytaiesmt_smtyc_setup.exe [1222640]
O61 - LFC: 2015/08/19 14:43:20 A . (.Copyright (C) 2014.) -- C:\Users\celine\AppData\Local\Installer\Install_20516\DCytaiesmt_smtyc_setup.exe [1222640]
O61 - LFC: 2015/08/19 16:42:57 A . (..) -- C:\Users\celine\AppData\Local\Google\Chrome\User Data\PepperFlash\18.0.0.209\pepflashplayer.dll [16307888]
O61 - LFC: 2015/08/19 11:12:27 A . (..) -- C:\Users\celine\AppData\Local\gmsd_fr_005010065\upgmsd_fr_005010065.exe [3333776] =>PUP.Optional.CrossRider
O61 - LFC: 2015/08/18 15:45:07 A . (..) -- C:\Users\celine\AppData\Local\gmsd_fr_005010064\upgmsd_fr_005010064.exe [3333776] =>PUP.Optional.CrossRider
O61 - LFC: 2015/08/20 14:19:05 A . (.LiveSoft Action.) -- C:\Users\celine\AppData\Local\GetNowUpdater\inst\Bootstrapper\GetNowUpdaterUninstall.exe [1409592] =>PUP.Optional.GetNow
O61 - LFC: 2015/08/18 17:28:52 A . (..) -- C:\Users\celine\AppData\Local\DailyPcClean Support\updpcc_en_009010064.exe [3336336] =>PUP.Optional.DailyPCClean
O61 - LFC: 2015/08/25 13:10:51 A . (..) -- C:\Users\celine\AppData\Local\ATI\ACE\Manifest.Bin [26821]
O61 - LFC: 2015/08/20 14:39:22 A . (..) -- C:\Users\celine\AppData\Local\Adobe\Acrobat\11.0\UserCache.bin [84011]

---\\ Associations Shell Spawning (11) - 1s
O67 - Shell Spawning: <.bat> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.cpl> [HKLM\..\cplopen\Command] (.Microsoft Corporation - Windows Control Panel.) -- C:\Windows\System32\control.exe
O67 - Shell Spawning: <.cmd> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.com> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.evt> [HKLM\..\open\Command] (.Microsoft Corporation - Lanceur du composant logiciel enfichable Ob.) -- C:\Windows\System32\eventvwr.exe
O67 - Shell Spawning: <.exe> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.html> [HKLM\..\open\Command] (.Opera Software - Opera Internet Browser.) -- C:\Program Files (x86)\Opera\launcher.exe
O67 - Shell Spawning: <.js> [HKLM\..\open\Command] (.Microsoft Corporation - Microsoft ® Windows Based Script Host.) -- C:\Windows\System32\wscript.exe
O67 - Shell Spawning: <.reg> [HKLM\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\Windows\regedit.exe
O67 - Shell Spawning: <.scr> [HKLM\..\open\Command] (...) -- "%1" /S
O67 - Shell Spawning: <.html> [HKCU\..\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe

---\\ Menu de démarrage Internet (17) - 1s
O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.The Chromatic Authors - Chromatic.) -- C:\Users\celine\AppData\Local\Chromatic\application\chromatic.exe =>PUP.Optional.ChromaticBrowser
O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe
O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Google Inc. - Google Chrome.) -- chrome.exe
O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- iexplore.exe
O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Opera Software - Opera Internet Browser.) -- C:\Program Files (x86)\Opera\Launcher.exe
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ShowIconsCommand] (.Mozilla Corporation - Firefox Helper.) -- C:\Program Files (x86)\Mozilla Firefox\uninstall\helper.exe
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ShowIconsCommand] (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ShowIconsCommand] (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Expl.) -- C:\Windows\System32\ie4uinit.exe
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ShowIconsCommand] (.Opera Software - Opera Internet Browser.) -- C:\Program Files (x86)\Opera\launcher.exe
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ReinstallCommand] (.Mozilla Corporation - Firefox Helper.) -- C:\Program Files (x86)\Mozilla Firefox\uninstall\helper.exe
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ReinstallCommand] (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ReinstallCommand] (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Expl.) -- C:\Windows\System32\ie4uinit.exe
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ReinstallCommand] (.Opera Software - Opera Internet Browser.) -- C:\Program Files (x86)\Opera\launcher.exe
O68 - StartMenuInternet: [HKLM\..\InstallInfo\HideIconsCommand] (.Mozilla Corporation - Firefox Helper.) -- C:\Program Files (x86)\Mozilla Firefox\uninstall\helper.exe
O68 - StartMenuInternet: [HKLM\..\InstallInfo\HideIconsCommand] (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
O68 - StartMenuInternet: [HKLM\..\InstallInfo\HideIconsCommand] (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Expl.) -- C:\Windows\System32\ie4uinit.exe
O68 - StartMenuInternet: [HKLM\..\InstallInfo\HideIconsCommand] (.Opera Software - Opera Internet Browser.) -- C:\Program Files (x86)\Opera\launcher.exe

---\\ Recherche d'infection sur les navigateurs (20) - 57s
O69 - SBI: prefs.js [celine - faid2y99.default] user_pref("extensions.aDXYYH4339170JXVPYKS65865478com74261.74261.internaldb.monetization_plugin_bundledUrls.expiration", "Fri Feb [...] =>PUP.Optional.Monetization
O69 - SBI: prefs.js [celine - faid2y99.default] user_pref("extensions.aDXYYH4339170JXVPYKS65865478com74261.74261.internaldb.monetization_plugin_bundledUrls.value", "%7B%22dealply[...] =>PUP.Optional.Monetization
O69 - SBI: prefs.js [celine - faid2y99.default] user_pref("extensions.aDXYYH4339170JXVPYKS65865478com74261.74261.internaldb.monetization_plugin_bundledWithHash.expiration", "Fri [...] =>PUP.Optional.Monetization
O69 - SBI: prefs.js [celine - faid2y99.default] user_pref("extensions.aDXYYH4339170JXVPYKS65865478com74261.74261.internaldb.monetization_plugin_bundledWithHash.value", "null"); =>PUP.Optional.Monetization
O69 - SBI: prefs.js [celine - faid2y99.default] user_pref("extensions.aDXYYH4339170JXVPYKS65865478com74261.74261.internaldb.monetization_plugin_notBundledArr_.expiration", "Fri F[...] =>PUP.Optional.Monetization
O69 - SBI: prefs.js [celine - faid2y99.default] user_pref("extensions.aDXYYH4339170JXVPYKS65865478com74261.74261.internaldb.monetization_plugin_notBundledArr_.value", "%5B%5D"); =>PUP.Optional.Monetization
O69 - SBI: prefs.js [celine - faid2y99.default] user_pref("extensions.aDXYYH4339170JXVPYKS65865478com74261.74261.internaldb.monetization_plugin_regBundledWithSoftware.expiration"[...] =>PUP.Optional.Monetization
O69 - SBI: prefs.js [celine - faid2y99.default] user_pref("extensions.aDXYYH4339170JXVPYKS65865478com74261.74261.internaldb.monetization_plugin_regBundledWithSoftware.value", "%7[...] =>PUP.Optional.Monetization
O69 - SBI: prefs.js [celine - faid2y99.default] user_pref("extensions.aDXYYH4339170JXVPYKS65865478com74261.74261.name", "CinemaPlus-4.5v"); =>PUP.Optional.CrossRider
O69 - SBI: prefs.js [celine - faid2y99.default] user_pref("extensions.aDXYYH4339170JXVPYKS65865478com74261.74261.publisher", "Cinema Plus"); =>PUP.Optional.CrossRider
O69 - SBI: prefs.js [celine - faid2y99.default] user_pref("extensions.crossrider.bic", "14f40f9aab3c950d219c854ac8ab4656"); =>PUP.Optional.CrossRider
O69 - SBI: prefs.js [celine - faid2y99.default] user_pref("extensions.deskCutv2@gmail.com.install-event-fired", true); =>PUP.Optional.DeskCut
O69 - SBI: prefs.js [celine - faid2y99.default] user_pref("extensions.xpiState", "{\"app-profile\":{\"deskCutv2@gmail.com\":{\"d\":\"C:\\\\Users\\\\celine\\\\AppData\\\\Roaming\\[...] =>PUP.Optional.DeskCut
O69 - SBI: prefs.js [celine - faid2y99.default] user_pref("extensions.{746505DC-0E21-4667-97F8-72EA6BCF5EEF}.install-event-fired", true); =>PUP.Optional.ShopperPro
O69 - SBI: SearchScopes [HKCU] OldSearch - (Dregol) - http://www.mystartsearch.com/ =>PUP.Optional.StartSearch
O69 - SBI: SearchScopes [HKCU] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} [DefaultScope] - (Yahoo Search!) - http://fr.search.yahoo.com/
O69 - SBI: SearchScopes [HKCU] {2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0} - (e) - http://www.mystartsearch.com/ =>PUP.Optional.StartSearch
O69 - SBI: SearchScopes [HKCU] {33BB0A4E-99AF-4226-BDF6-49120163DE86} - (Yahoo Search!) - http://fr.search.yahoo.com/
O69 - SBI: SearchScopes [HKCU] {c9ab6446-7efc-47fe-966c-dc54324eff9f} - (e) - http://www.mystartsearch.com/ =>PUP.Optional.StartSearch
O69 - SBI: SearchScopes [HKCU] {E733165D-CBCF-4FDA-883E-ADEF965B476C} - (Google) - http://www.mystartsearch.com/ =>PUP.Optional.StartSearch

---\\ Enumère les services démarrés par Svchost (32) - 7s
O83 - Search Svchost Services: AeLookupSvc (AeLookupSvc) . (.Microsoft Corporation - Service Expérience d’application.) -- C:\Windows\System32\aelupsvc.dll [72192]
O83 - Search Svchost Services: CertPropSvc (CertPropSvc) . (.Microsoft Corporation - Service de propagation de certificats de ca.) -- C:\Windows\System32\certprop.dll [80384]
O83 - Search Svchost Services: SCPolicySvc (SCPolicySvc) . (.Microsoft Corporation - Service de propagation de certificats de ca.) -- C:\Windows\System32\certprop.dll [80384]
O83 - Search Svchost Services: lanmanserver (lanmanserver) . (.Microsoft Corporation - DLL du service Serveur.) -- C:\Windows\system32\srvsvc.dll [236032]
O83 - Search Svchost Services: gpsvc (gpsvc) . (.Microsoft Corporation - Client de stratégie de groupe.) -- C:\Windows\System32\gpsvc.dll [777728]
O83 - Search Svchost Services: IKEEXT (IKEEXT) . (.Microsoft Corporation - Extension IKE.) -- C:\Windows\System32\ikeext.dll [853504]
O83 - Search Svchost Services: AudioSrv (AudioSrv) . (.Microsoft Corporation - Service Audio Windows.) -- C:\Windows\System32\Audiosrv.dll [679424]
O83 - Search Svchost Services: Rasauto (Rasauto) . (.Microsoft Corporation - Gestionnaire de numérotation automatique d’.) -- C:\Windows\System32\rasauto.dll [99328]
O83 - Search Svchost Services: Rasman (Rasman) . (.Microsoft Corporation - Gestionnaire de connexions d’accès distant.) -- C:\Windows\System32\rasmans.dll [344064]
O83 - Search Svchost Services: Remoteaccess (Remoteaccess) . (.Microsoft Corporation - Gestionnaire d’interface dynamique.) -- C:\Windows\System32\mprdim.dll [97792]
O83 - Search Svchost Services: SENS (SENS) . (.Microsoft Corporation - Service de notification d’événements systèm.) -- C:\Windows\System32\Sens.dll [64512]
O83 - Search Svchost Services: Sharedaccess (Sharedaccess) . (.Microsoft Corporation - Composants de l’application d’assistance à.) -- C:\Windows\System32\ipnathlp.dll [359424]
O83 - Search Svchost Services: Tapisrv (Tapisrv) . (.Microsoft Corporation - Serveur de téléphonie Microsoft® Windows(TM.) -- C:\Windows\System32\tapisrv.dll [316928]
O83 - Search Svchost Services: TermService (TermService) . (.Microsoft Corporation - Gestionnaire des connexions distantes du se.) -- C:\Windows\System32\termsrv.dll [680960]
O83 - Search Svchost Services: wuauserv (wuauserv) . (.Microsoft Corporation - Agent de mise à jour automatique Windows Up.) -- C:\Windows\system32\wuaueng.dll [2428952]
O83 - Search Svchost Services: BITS (BITS) . (.Microsoft Corporation - Service de transfert intelligent en arrière.) -- C:\Windows\System32\qmgr.dll [849920]
O83 - Search Svchost Services: ShellHWDetection (ShellHWDetection) . (.Microsoft Corporation - Dll des services Windows Shell.) -- C:\Windows\System32\shsvcs.dll [370688]
O83 - Search Svchost Services: iphlpsvc (iphlpsvc) . (.Microsoft Corporation - Service offrant une connectivité IPv6 sur u.) -- C:\Windows\System32\iphlpsvc.dll [569344]
O83 - Search Svchost Services: seclogon (seclogon) . (.Microsoft Corporation - DLL de service d’ouverture de session secon.) -- C:\Windows\system32\seclogon.dll [30720]
O83 - Search Svchost Services: AppInfo (AppInfo) . (.Microsoft Corporation - Service Informations d’application.) -- C:\Windows\System32\appinfo.dll [70144]
O83 - Search Svchost Services: msiscsi (msiscsi) . (.Microsoft Corporation - Service de découverte iSCSI.) -- C:\Windows\system32\iscsiexe.dll [156672]
O83 - Search Svchost Services: MMCSS (MMCSS) . (.Microsoft Corporation - Service Planificateur de classes multimédia.) -- C:\Windows\system32\mmcss.dll [67584]
O83 - Search Svchost Services: winmgmt (winmgmt) . (.Microsoft Corporation - WMI.) -- C:\Windows\system32\wbem\WMIsvc.dll [242688]
O83 - Search Svchost Services: SessionEnv (SessionEnv) . (.Microsoft Corporation - Service Configuration des services Bureau à.) -- C:\Windows\System32\SessEnv.dll [121856]
O83 - Search Svchost Services: browser (browser) . (.Microsoft Corporation - DLL du service Explorateur d’ordinateurs.) -- C:\Windows\System32\browser.dll [136704]
O83 - Search Svchost Services: EapHost (EapHost) . (.Microsoft Corporation - Service EAPHost Microsoft.) -- C:\Windows\System32\eapsvc.dll [111104]
O83 - Search Svchost Services: schedule (schedule) . (.Microsoft Corporation - Service du Planificateur de tâches.) -- C:\Windows\system32\schedsvc.dll [1110016]
O83 - Search Svchost Services: hkmsvc (hkmsvc) . (.Microsoft Corporation - Service Gestion des clés.) -- C:\Windows\system32\kmsvc.dll [90624]
O83 - Search Svchost Services: wercplsupport (wercplsupport) . (.Microsoft Corporation - Rapports et solutions aux problèmes.) -- C:\Windows\System32\wercplsupport.dll [84480]
O83 - Search Svchost Services: ProfSvc (ProfSvc) . (.Microsoft Corporation - ProfSvc.) -- C:\Windows\system32\profsvc.dll [209920]
O83 - Search Svchost Services: Themes (Themes) . (.Microsoft Corporation - DLL du service des thèmes Windows Shell.) -- C:\Windows\system32\themeservice.dll [44544]
O83 - Search Svchost Services: BDESVC (BDESVC) . (.Microsoft Corporation - Service BDE.) -- C:\Windows\System32\bdesvc.dll [100864]

---\\ Liste des exceptions du parefeu Windows (21) - 23s
O87 - FAEL: "TCP Query User{46D5F161-A58B-4BD3-862B-3DF7D98C1524}C:\users\celine\documents\emule\emule.exe" [In-None-P6-TRUE] .(.http://www.emule-project.net - eMule.) -- C:\users\celine\documents\emule\emule.exe
O87 - FAEL: "UDP Query User{73AB0069-9D38-440E-8A9B-DCB36A482F59}C:\users\celine\documents\emule\emule.exe" [In-None-P17-TRUE] .(.http://www.emule-project.net - eMule.) -- C:\users\celine\documents\emule\emule.exe
O87 - FAEL: "{5E69B177-D3DE-4528-8032-C16BF3907223}" [In-None-P6-TRUE] .(.TeamViewer GmbH - TeamViewer Remote Control Application.) -- C:\Program Files (x86)\TeamViewer\Version7\TeamViewer.exe
O87 - FAEL: "{C6B8A82C-B923-4160-AEDD-6DBE846069EB}" [In-None-P17-TRUE] .(.TeamViewer GmbH - TeamViewer Remote Control Application.) -- C:\Program Files (x86)\TeamViewer\Version7\TeamViewer.exe
O87 - FAEL: "{9C30C9AC-9546-43DD-928B-2F1D00A3B5F1}" [In-None-P6-TRUE] .(.TeamViewer GmbH - TeamViewer Remote Control Application.) -- C:\Program Files (x86)\TeamViewer\Version7\TeamViewer_Service.exe
O87 - FAEL: "{FA6284DB-249C-46B6-9F69-B3BEEE4FE9C0}" [In-None-P17-TRUE] .(.TeamViewer GmbH - TeamViewer Remote Control Application.) -- C:\Program Files (x86)\TeamViewer\Version7\TeamViewer_Service.exe
O87 - FAEL: "{3BCBBFAD-F4BA-4639-9695-4979EE63C41B}" [In-None-P6-TRUE] .(...) -- D:\Network\EpsonNetSetup\ENEasyApp.exe (.not file.)
O87 - FAEL: "{12B4D2C8-86B4-424E-8CD3-138132319BE4}" [In-None-P17-TRUE] .(...) -- D:\Network\EpsonNetSetup\ENEasyApp.exe (.not file.)
O87 - FAEL: "TCP Query User{F828AFB3-0A46-49EB-9835-E14B2C546B9D}C:\program files (x86)\epson software\event manager\eeventmanager.exe" [In-None-P6-TRUE] .(...) -- C:\program files (x86)\epson software\event manager\eeventmanager.exe (.not file.)
O87 - FAEL: "UDP Query User{5BA86ED8-87C1-433C-AC8E-87EEF6A24ADE}C:\program files (x86)\epson software\event manager\eeventmanager.exe" [In-None-P17-TRUE] .(...) -- C:\program files (x86)\epson software\event manager\eeventmanager.exe (.not file.)
O87 - FAEL: "TCP Query User{C8160645-6362-4AA9-BDDB-583C32EDBF40}C:\program files (x86)\epson software\event manager\eeventmanager.exe" [In-None-P6-TRUE] .(...) -- C:\program files (x86)\epson software\event manager\eeventmanager.exe (.not file.)
O87 - FAEL: "UDP Query User{7AB36C56-0BEA-4D65-83C9-742B1FB1FB32}C:\program files (x86)\epson software\event manager\eeventmanager.exe" [In-None-P17-TRUE] .(...) -- C:\program files (x86)\epson software\event manager\eeventmanager.exe (.not file.)
O87 - FAEL: "{D1C9DE97-D17A-4CB0-9ACD-4D87C5F993F5}" [In-None-P17-TRUE] .(.csdimedia.com - Max Driver Updater.) -- C:\Program Files (x86)\Max Driver Updater\maxdu.exe =>PUP.Optional.MaxDriverUpdater
O87 - FAEL: "{3E4FB27F-4EAA-4D32-BBDF-49FF1F114D73}" [In-None-P6-TRUE] .(.The Chromatic Authors - Chromatic.) -- C:\Users\celine\AppData\Local\Chromatic\Application\chromatic.exe =>PUP.Optional.ChromaticBrowser
O87 - FAEL: "{69A95138-4682-4DF7-B83D-B9BDB43CEEF5}" [In-None-P17-TRUE] .(.The Chromatic Authors - Chromatic.) -- C:\Users\celine\AppData\Local\Chromatic\Application\chromatic.exe =>PUP.Optional.ChromaticBrowser
O87 - FAEL: "{8C150F17-FD42-4F2F-AB8D-B5DA4A7B77AE}" [In-None-P6-TRUE] .(...) -- C:\Users\celine\AppData\Local\Chromatic\Utils\Updater.exe
O87 - FAEL: "{FC19DE1D-0DD6-4A4C-B289-F96B08DACD4C}" [In-None-P17-TRUE] .(...) -- C:\Users\celine\AppData\Local\Chromatic\Utils\Updater.exe
O87 - FAEL: "{B560BF53-A6B2-42C4-8A9C-DC28B0F2F808}" [In-None-P6-TRUE] .(...) -- C:\Users\celine\AppData\Local\wd\wd.exe
O87 - FAEL: "{5449D9BC-9E58-4BFB-B104-CFC31AF4AB3D}" [In-None-P17-TRUE] .(...) -- C:\Users\celine\AppData\Local\wd\wd.exe
O87 - FAEL: "{0797E7D3-7CB1-439E-AB3B-672AD8FB51A6}" [In-None-P6-TRUE] .(.VoiceFive, Inc. - PremierOpinion.) -- C:\Program Files (x86)\PremierOpinion\pmropn.exe =>PUP.Optional.PremierOpinion
O87 - FAEL: "{32248B5F-5CDA-44E0-86A1-095A6CE13D82}" [In-None-P17-TRUE] .(.VoiceFive, Inc. - PremierOpinion.) -- C:\Program Files (x86)\PremierOpinion\pmropn.exe =>PUP.Optional.PremierOpinion

---\\ Enumère les codes produits des logiciels (3) - 62s
O90 - PUC: "1F1CA1BF74F8ECD41ADED0BF0A4F554B" . (.Driver Mender.) -- C:\Windows\Installer\{FB1AC1F1-8F47-4DCE-A1ED-0DFBA0F455B4}\ARPPRODUCTICON.exe =>PUP.Optional.DriverMender
O90 - PUC: "B03DC1F848A359B4FB4ACCF088B54836" . (.UpdateAdmin.) -- C:\Windows\Installer\{8F1CD30B-3A84-4B95-BFA4-CC0F885B8463}\icon.ico =>PUP.Optional.UpdateAdmin
O90 - PUC: "DE596686F3BBD5140BBD81FC35F5B705" . (.Driver Manager.) -- C:\Windows\Installer\{686695ED-BB3F-415D-B0DB-18CF535F7B50}\ARPPRODUCTICON.exe =>PUP.Optional.DriverManager

---\\ Recherche des packages WindowsInstaller (1) - 132s
[MD5.] [WIS][2015/08/20 15:02:41] (.DownloadAdmin - Windows Installer XML Toolset (3.8.1128.0).) -- C:\Windows\Installer\3cba20.msi [372736] =>PUP.Optional.UpdateAdmin

---\\ Services non Microsoft (SR=Démarré,SS=Stoppé) (45) - 493s

SR - Auto [2009/05/14 17:07:14] [ 759048] ABBYY FineReader 9.0 Sprint Licensing Service (ABBYY.Licensing.FineReader.Sprint.9.0) . (.ABBYY.) - C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe ©
SR - Auto [2015/07/07 20:12:28] [ 82128] Adobe Acrobat Update Service (AdobeARMservice) . (.Adobe Systems Incorporated.) - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe ©
SS - Demand [2015/08/17 16:37:30] [ 269000] Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) . (.Adobe Systems Incorporated.) - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe ©
SR - Auto [2011/05/07 01:28:50] [ 203776] (AMD External Events Utility) . (.AMD.) - C:\Windows\system32\atiesrxx.exe ©
SR - Auto [2012/02/27 01:15:42] [ 55144] Apple Mobile Device (Apple Mobile Device) . (.Apple Inc..) - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe ©
SR - Auto [2015/08/19 17:29:29] [ 146600] Avast Antivirus (avast! Antivirus) . (.AVAST Software.) - C:\Program Files\AVAST Software\Avast\AvastSvc.exe ©
SR - Demand [2015/08/19 17:29:00] [ 4047768] AvastVBox COM Service (AvastVBoxSvc) . (.Avast Software.) - C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe ©
SR - Auto [2011/08/31 00:05:32] [ 462184] Service Bonjour (Bonjour Service) . (.Apple Inc..) - C:\Program Files\Bonjour\mDNSResponder.exe ©
SS - Auto [2015/04/03 00:22:32] [ 172344] CoupoonService64 (CoupoonService64) . (...) - C:\Program Files (x86)\Coupoon\iiwjljrnpc64.exe
SR - Auto [2011/03/31 14:38:36] [ 352848] Dritek WMI Service (DsiWMIService) . (.Dritek System Inc..) - C:\Program Files (x86)\Launch Manager\dsiwmis.exe
SS - Demand [2010/09/28 03:09:54] [ 172912] EgisTec Ticket Service (EgisTec Ticket Service) . (.Egis Technology Inc..) - C:\Program Files (x86)\Common Files\EgisTec\Services\EgisTicketService.exe ©
SR - Auto [2011/05/10 14:01:08] [ 872552] Acer ePower Service (ePowerSvc) . (.Acer Incorporated.) - C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe ©
SR - Auto [2006/12/19 18:23:20] [ 94208] EpsonBidirectionalService (EpsonBidirectionalService) . (.SEIKO EPSON CORPORATION.) - C:\Program Files (x86)\Common Files\EPSON\EBAPI\eEBSvc.exe ©
SS - Demand [2011/05/27 17:10:32] [ 655624] FLEXnet Licensing Service (FLEXnet Licensing Service) . (.Acresso Software Inc..) - C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
SS - Auto [2015/08/19 13:46:00] [ 68608] globalUpdate Update Service (globalUpdate) (globalUpdate) . (.globalUpdate.) - C:\Program Files (x86)\globalUpdate\Update\globalupdate.exe =>PUP.Optional.GlobalUpdate
SS - Demand [2015/08/19 13:46:00] [ 68608] globalUpdate Update Service (globalUpdatem) (globalUpdatem) . (.globalUpdate.) - C:\Program Files (x86)\globalUpdate\Update\globalupdate.exe =>PUP.Optional.GlobalUpdate
SR - Auto [2010/01/08 15:21:22] [ 23584] GREGService (GREGService) . (.Acer Incorporated.) - C:\Program Files (x86)\Acer\Registration\GREGsvc.exe ©
SS - Auto [2015/08/19 21:17:37] [ 144200] Google Update Service (gupdate) (gupdate) . (.Google Inc..) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe ©
SS - Demand [2015/08/19 21:17:37] [ 144200] Google Update Service (gupdatem) (gupdatem) . (.Google Inc..) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe ©
SS - Disabled [2015/06/24 04:08:12] [ 125112] IHProtect Service (IHProtect Service) . (.XTab system.) - C:\Program Files (x86)\MiuiTab\ProtectService.exe =>PUP.Optional.AgentODR
SS - Demand [2012/03/06 20:05:44] [ 934760] Service de l’iPod (iPod Service) . (.Apple Inc..) - C:\Program Files\iPod\bin\iPodService.exe ©
SR - Auto [2015/08/19 13:45:38] [ 137728] Text Box Internet Access (jybiqyqo) . (...) - C:\Program Files (x86)\ED2F3280-1439984681-815C-3B5B-E06995AD0640\hnst1526.tmp =>PUP.Optional.CrossRider
SS - Auto [2015/04/14 09:36:30] [ 1080120] (MBAMService) . (.Malwarebytes Corporation.) - C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe ©
SS - Demand [2015/08/19 14:44:43] [ 149160] Mozilla Maintenance Service (MozillaMaintenance) . (.Mozilla Foundation.) - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe ©
SR - Auto [2010/06/02 00:31:28] [ 2804568] Norton Online Backup (NOBU) . (.Symantec Corporation.) - C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe ©
SR - Auto [2011/03/09 19:11:22] [ 257344] NTI IScheduleSvc (NTI IScheduleSvc) . (.NTI Corporation.) - C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe ©
SS - Demand [2015/06/27 14:53:46] [ 1997168] Origin Client Service (Origin Client Service) . (.Electronic Arts.) - C:\Program Files (x86)\Origin\OriginClientService.exe ©
SR - Auto [2015/08/14 14:47:16] [ 445384] PC Speed Up Service (PCSUService) . (.Optimal Software s.r.o..) - C:\Program Files (x86)\PC Speed Up\PCSUService.exe =>PUP.Optional.PCSpeedUp
SR - Auto [2015/07/21 18:19:10] [ 206136] PremierOpinion (PremierOpinion) . (.VoiceFive, Inc..) - C:\Program Files (x86)\PremierOpinion\pmservice.exe =>PUP.Optional.PremierOpinion
SS - Disabled [2015/08/20 15:30:31] [ 758784] Disk Run (qurycyhy) . (...) - C:\Program Files (x86)\ED2F3280-1439984681-815C-3B5B-E06995AD0640\knstABB2.tmpfs =>PUP.Optional.CrossRider
SR - Auto [2015/08/18 16:55:42] [ 45000] SpeedChecker Service (SCService) . (.Optimal Software s.r.o..) - C:\Program Files (x86)\PC Speed Up\SpeedCheckerService.exe =>PUP.Optional.InternetSpeedChecker
SR - Auto [2015/08/25 11:55:28] [ 1194200] Service Mgr GetTheResultsHub (Service Mgr GetTheResultsHub) . (...) - C:\ProgramData\6f66c052-8827-4487-9031-09becb0cf541\plugincontainer.exe =>PUP.Optional.GetTheResultsHub
SR - Auto [2015/08/25 11:55:28] [ 1202952] Service Mgr RecordPage (Service Mgr RecordPage) . (...) - C:\ProgramData\87737dd0-ad90-4193-bd48-336966b8d777\plugincontainer.exe =>PUP.Optional.RecordPage
SS - Auto [2013/01/08 12:55:20] [ 161536] Skype Updater (SkypeUpdate) . (.Skype Technologies.) - C:\Program Files (x86)\Skype\Updater\Updater.exe ©
SR - Auto [2015/08/18 15:10:08] [ 2346416] ShopperPro Update (SPBIUpd) . (.ShopperPro.) - C:\Program Files\Common Files\ShopperPro\spbiu.exe =>PUP.Optional.ShopperPro
SR - Auto [2012/10/23 11:47:48] [ 2848168] TeamViewer 7 (TeamViewer7) . (.TeamViewer GmbH.) - C:\Program Files (x86)\TeamViewer\Version7\TeamViewer_Service.exe
SR - Auto [2015/08/25 12:56:48] [ 704728] Update Mgr GetTheResultsHub (Update Mgr GetTheResultsHub) . (...) - C:\Program Files (x86)\Common Files\6f66c052-8827-4487-9031-09becb0cf541\updater.exe =>PUP.Optional.GetTheResultsHub
SR - Auto [2015/08/25 11:57:44] [ 710408] Update Mgr RecordPage (Update Mgr RecordPage) . (...) - C:\Program Files (x86)\Common Files\87737dd0-ad90-4193-bd48-336966b8d777\updater.exe =>PUP.Optional.RecordPage
SR - Auto [2015/08/19 18:13:54] [ 53040] UpdateCheck (UpdateCheck) . (...) - C:\Program Files (x86)\Coupoon\UpdateCheck.exe
SS - Auto [2015/06/30 15:52:02] [ 37144] Web Bar Service (wbsvc) (wbsvc) . (.Web Bar Media.) - C:\Program Files\WebBar\wbsvc.exe =>PUP.Optional.WebBar
SS - Disabled [2015/07/10 16:40:15] [ 707240] WindowsMangerProtect Service (WindowsMangerProtect) . (.DTools LIMITED.) - C:\ProgramData\WindowsMangerProtect\ProtectWindowsManager.exe =>PUP.Optional.WpManager
SR - Auto [2015/06/29 13:17:28] [ 1154560] WInterEnhancer Service (WInterEnhancer Service) . (...) - C:\Program Files (x86)\WInterEnhancer\WInterEnhancer Internet Enhancer\InternetEnhancerService.exe =>PUP.Optional.Wajam
SR - Auto [2015/07/06 21:08:30] [ 300120] WN 1.10.0.20 Client Service (wsvc_1.10.0.20) . (.WN.) - C:\Program Files (x86)\Wordinator_1.10.0.20\Service\wsvc.exe =>PUP.Optional.Generic
SR - Auto [2015/08/19 14:44:26] [ 1509320] YouTubeAcceleratorService (YouTubeAcceleratorService) . (.GOOBZO.) - C:\Program Files (x86)\YouTube Accelerator\YouTubeAcceleratorService.exe =>PUP.Optional.Goobzo

---\\ Recherche de clés de registre Tracing (4) - 4s
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\MaxDrivrUpdater_Service_RASAPI32 =>PUP.Optional.MaxDriverUpdater
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\MaxDrivrUpdater_Service_RASMANCS =>PUP.Optional.MaxDriverUpdater
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\SpeedCheckerService_RASAPI32 =>PUP.Optional.InternetSpeedChecker
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\SpeedCheckerService_RASMANCS =>PUP.Optional.InternetSpeedChecker

---\\ Scan Additionnel (350) - 1s
C:\Program Files (x86)\PC Speed Up\PCSUService.exe =>PUP.Optional.PCSpeedUp
C:\Program Files (x86)\CinemaPlus-4.5vV17.08\c157e037-50d1-4479-b6e0-dd53801f1f9b-6.exe =>PUP.Optional.CrossRider
C:\Program Files (x86)\CinemaPlus-4.5vV17.08\c157e037-50d1-4479-b6e0-dd53801f1f9b-1-6.exe =>PUP.Optional.CrossRider
C:\Program Files (x86)\Max Driver Updater\maxdu.exe =>PUP.Optional.MaxDriverUpdater
C:\Program Files (x86)\ED2F3280-1439984681-815C-3B5B-E06995AD0640\hnst1526.tmp =>PUP.Optional.CrossRider
C:\Program Files (x86)\PremierOpinion\pmservice.exe =>PUP.Optional.PremierOpinion
C:\Program Files (x86)\PC Speed Up\SpeedCheckerService.exe =>PUP.Optional.InternetSpeedChecker
C:\Users\celine\AppData\Local\mpck_fr_017010064\upmpck_fr_017010064.exe =>PUP.Optional.MobilePCStarterKit
C:\Users\celine\AppData\Roaming\WTools\Selection Tools\Selection Tools.exe =>PUP.Optional.Nosibay
C:\ProgramData\6f66c052-8827-4487-9031-09becb0cf541\plugincontainer.exe =>PUP.Optional.CrossRider
C:\Users\celine\AppData\Roaming\News\news.exe =>PUP.Optional.BredoLab
C:\Program Files (x86)\YouTube Accelerator\YouTubeAccelerator.exe =>PUP.Optional.Goobzo
C:\Program Files (x86)\Optimizer Pro 3.99\OptProSmartScan.exe =>PUP.Optional.OptimizerPro
C:\Program Files (x86)\Optimizer Pro 3.99\OptProReminder.exe =>PUP.Optional.OptimizerPro
C:\Users\celine\AppData\Roaming\GetNowUpdater\bin\GetNowUpdater.exe =>PUP.Optional.GetNow
C:\ProgramData\87737dd0-ad90-4193-bd48-336966b8d777\plugincontainer.exe =>PUP.Optional.CrossRider
C:\Program Files (x86)\OLBPre\OLBPre.exe =>PUP.Optional.MyPCBackup
C:\Users\celine\AppData\Local\SmartWeb\SmartWebHelper.exe =>PUP.Optional.SmartWebSearch
C:\Program Files (x86)\mpck_fr_017010064\mpck_fr_017010064.exe =>PUP.Optional.MobilePCStarterKit
C:\Program Files (x86)\gmsd_fr_005010064\gmsd_fr_005010064.exe =>PUP.Optional.CrossRider
C:\Program Files (x86)\gmsd_fr_005010065\gmsd_fr_005010065.exe =>PUP.Optional.CrossRider
C:\Users\celine\AppData\Local\SmartWeb\SmartWebApp.exe =>PUP.Optional.SmartWebSearch
C:\Program Files\Common Files\ShopperPro\spbiu.exe =>PUP.Optional.ShopperPro
C:\Program Files (x86)\Common Files\6f66c052-8827-4487-9031-09becb0cf541\updater.exe =>PUP.Optional.CrossRider
C:\Program Files (x86)\Common Files\87737dd0-ad90-4193-bd48-336966b8d777\updater.exe =>PUP.Optional.CrossRider
C:\Program Files (x86)\PremierOpinion\pmropn.exe =>PUP.Optional.PremierOpinion
C:\Program Files (x86)\WInterEnhancer\WInterEnhancer Internet Enhancer\InternetEnhancerService.exe =>PUP.Optional.Wajam
C:\Program Files (x86)\Wordinator_1.10.0.20\Service\wsvc.exe =>PUP.Optional.Generic
C:\Program Files (x86)\YouTube Accelerator\YouTubeAcceleratorService.exe =>PUP.Optional.Goobzo
C:\Program Files\WebBar\2.0.5659.26749\wb.exe =>PUP.Optional.WebBar
C:\ProgramData\6f66c052-8827-4487-9031-09becb0cf541\plugins\3\Plugin.exe =>PUP.Optional.CrossRider
C:\ProgramData\6f66c052-8827-4487-9031-09becb0cf541\plugins\8\Plugin.exe =>PUP.Optional.CrossRider
C:\ProgramData\87737dd0-ad90-4193-bd48-336966b8d777\plugins\7\Plugin.exe =>PUP.Optional.CrossRider
C:\ProgramData\6f66c052-8827-4487-9031-09becb0cf541\plugins\10\Plugin.exe =>PUP.Optional.CrossRider
C:\ProgramData\6f66c052-8827-4487-9031-09becb0cf541\plugins\5\Plugin.exe =>PUP.Optional.CrossRider
C:\ProgramData\87737dd0-ad90-4193-bd48-336966b8d777\plugins\3\Plugin.exe =>PUP.Optional.CrossRider
C:\ProgramData\87737dd0-ad90-4193-bd48-336966b8d777\plugins\4\Plugin.exe =>PUP.Optional.CrossRider
C:\ProgramData\6f66c052-8827-4487-9031-09becb0cf541\plugins\6\Plugin.exe =>PUP.Optional.CrossRider
C:\ProgramData\87737dd0-ad90-4193-bd48-336966b8d777\plugins\12\Plugin.exe =>PUP.Optional.CrossRider
C:\ProgramData\87737dd0-ad90-4193-bd48-336966b8d777\plugins\8\Plugin.exe =>PUP.Optional.CrossRider
C:\ProgramData\87737dd0-ad90-4193-bd48-336966b8d777\plugins\10\Plugin.exe =>PUP.Optional.CrossRider
C:\Program Files (x86)\PremierOpinion\pmropn32.exe =>PUP.Optional.PremierOpinion
C:\Program Files (x86)\PremierOpinion\pmropn64.exe =>PUP.Optional.PremierOpinion
C:\ProgramData\6f66c052-8827-4487-9031-09becb0cf541\plugins\7\Plugin.exe =>PUP.Optional.CrossRider
C:\ProgramData\6f66c052-8827-4487-9031-09becb0cf541\plugins\2\Plugin.exe =>PUP.Optional.CrossRider
C:\ProgramData\87737dd0-ad90-4193-bd48-336966b8d777\plugins\5\Plugin.exe =>PUP.Optional.CrossRider
C:\ProgramData\87737dd0-ad90-4193-bd48-336966b8d777\plugins\2\Plugin.exe =>PUP.Optional.CrossRider
C:\Program Files (x86)\WInterEnhancer\WInterEnhancer Internet Enhancer\InternetEnhancer.exe =>PUP.Optional.Wajam
C:\Program Files (x86)\PC Speed Up\PCSUNotifier.exe =>PUP.Optional.PCSpeedUp
C:\Users\celine\AppData\Local\Chromatic\application\chromatic.exe =>PUP.Optional.ChromaticBrowser
C:\Users\celine\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghniahbfffagblmaglgeafcghebaeipj
C:\Users\celine\AppData\Local\Google\Chrome\User Data\Default\Extensions\loaeenplafbdbdcgalcficpbehagljkc
C:\Users\celine\AppData\Local\Google\Chrome\User Data\Default\Extensions\poihgldcgdeiiclapfocpigklbcgjlff
C:\Users\celine\AppData\Roaming\Mozilla\Firefox\Profiles\faid2y99.default\searchplugins\Dregol.xml =>PUP.Optional.Browser
C:\Users\celine\AppData\Roaming\Mozilla\Firefox\Profiles\faid2y99.default\searchplugins\yahoo-search.xml =>PUP.Optional.BDYahoo
C:\Users\celine\AppData\Roaming\Mozilla\Firefox\Profiles\faid2y99.default\searchplugins\yahoo.xml =>PUP.Optional.BDYahoo
C:\Users\celine\AppData\Roaming\Mozilla\Firefox\Profiles\faid2y99.default\extensions\deskCutv2@gmail.com =>PUP.Optional.LightningNewTab
C:\Users\celine\AppData\Roaming\Mozilla\Firefox\Profiles\faid2y99.default\extensions\{746505DC-0E21-4667-97F8-72EA6BCF5EEF} =>PUP.Optional.Goobzo
C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\npglobalupdateUpdate4.dll =>PUP.Optional.GlobalUpdate
C:\ProgramData\ShopperPro\ShopperPro64.dll =>PUP.Optional.ShopperPro
HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C} =>PUP.Optional.ShopperPro
C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AdobeCollabSync.exe =>PUP.Optional.Nosibay
C:\Program Files (x86)\Optimizer Pro 3.99\OptProLauncher.exe =>PUP.Optional.OptimizerPro
C:\Users\celine\AppData\Roaming\GetNowUpdaterRecovery\recovery\GNUBootstrapper_Recovery.exe =>PUP.Optional.GetNow
C:\Users\celine\AppData\Local\UpdateAdmin\UpdateAdmin.exe =>PUP.Optional.UpdateAdmin
C:\Program Files (x86)\MovieDea\MovieDea.exe =>PUP.Optional.MovieDea
C:\Users\celine\AppData\Local\gmsd_fr_005010064\upgmsd_fr_005010064.exe =>PUP.Optional.CrossRider
C:\Users\celine\AppData\Local\gmsd_fr_005010065\upgmsd_fr_005010065.exe =>PUP.Optional.CrossRider
C:\Users\celine\AppData\Local\DailyPcClean Support\updpcc_en_009010064.exe =>PUP.Optional.DailyPCClean
C:\Program Files (x86)\YouTube Accelerator\ytalsp.dll =>Hijacker.Winsock
HKLM\SYSTEM\CurrentControlSet\Services\globalUpdate =>PUP.Optional.GlobalUpdate
C:\Program Files (x86)\globalUpdate\Update\globalupdate.exe =>PUP.Optional.GlobalUpdate
HKLM\SYSTEM\CurrentControlSet\Services\jybiqyqo =>PUP.Optional.CrossRider
HKLM\SYSTEM\CurrentControlSet\Services\PCSUService =>PUP.Optional.PCSpeedUp
HKLM\SYSTEM\CurrentControlSet\Services\PremierOpinion =>PUP.Optional.PremierOpinion
HKLM\SYSTEM\CurrentControlSet\Services\SCService =>PUP.Optional.InternetSpeedChecker
HKLM\SYSTEM\CurrentControlSet\Services\Service Mgr GetTheResultsHub =>PUP.Optional.GetTheResultsHub*
C:\ProgramData\6f66c052-8827-4487-9031-09becb0cf541\plugincontainer.exe =>PUP.Optional.GetTheResultsHub*
HKLM\SYSTEM\CurrentControlSet\Services\Service Mgr RecordPage =>PUP.Optional.RecordPage*
C:\ProgramData\87737dd0-ad90-4193-bd48-336966b8d777\plugincontainer.exe =>PUP.Optional.RecordPage*
HKLM\SYSTEM\CurrentControlSet\Services\SPBIUpd =>PUP.Optional.ShopperPro
HKLM\SYSTEM\CurrentControlSet\Services\Update Mgr GetTheResultsHub =>PUP.Optional.GetTheResultsHub*
C:\Program Files (x86)\Common Files\6f66c052-8827-4487-9031-09becb0cf541\updater.exe =>PUP.Optional.GetTheResultsHub*
HKLM\SYSTEM\CurrentControlSet\Services\Update Mgr RecordPage =>PUP.Optional.RecordPage*
C:\Program Files (x86)\Common Files\87737dd0-ad90-4193-bd48-336966b8d777\updater.exe =>PUP.Optional.RecordPage*
HKLM\SYSTEM\CurrentControlSet\Services\wbsvc =>PUP.Optional.WebBar
C:\Program Files\WebBar\wbsvc.exe =>PUP.Optional.WebBar
HKLM\SYSTEM\CurrentControlSet\Services\WInterEnhancer Service =>PUP.Optional.Wajam
HKLM\SYSTEM\CurrentControlSet\Services\wsvc_1.10.0.20 =>PUP.Optional.WN
C:\Program Files (x86)\Wordinator_1.10.0.20\Service\wsvc.exe =>PUP.Optional.WN
HKLM\SYSTEM\CurrentControlSet\Services\YouTubeAcceleratorService =>PUP.Optional.Goobzo
C:\Windows\Tasks\41cb378e-838f-4ec7-b018-1a05c5a4919d-10_user.job =>PUP.Optional.CrossRider
C:\Windows\Tasks\c157e037-50d1-4479-b6e0-dd53801f1f9b-1-6.job =>PUP.Optional.CrossRider
C:\Windows\Tasks\c157e037-50d1-4479-b6e0-dd53801f1f9b-1-7.job =>PUP.Optional.CrossRider
C:\Windows\Tasks\c157e037-50d1-4479-b6e0-dd53801f1f9b-10_user.job =>PUP.Optional.CrossRider
C:\Windows\Tasks\c157e037-50d1-4479-b6e0-dd53801f1f9b-11.job =>PUP.Optional.CrossRider
C:\Windows\Tasks\c157e037-50d1-4479-b6e0-dd53801f1f9b-3.job =>PUP.Optional.CrossRider
C:\Windows\Tasks\c157e037-50d1-4479-b6e0-dd53801f1f9b-4.job =>PUP.Optional.CrossRider
C:\Windows\Tasks\c157e037-50d1-4479-b6e0-dd53801f1f9b-5.job =>PUP.Optional.CrossRider
C:\Windows\Tasks\c157e037-50d1-4479-b6e0-dd53801f1f9b-5_user.job =>PUP.Optional.CrossRider
C:\Windows\Tasks\c157e037-50d1-4479-b6e0-dd53801f1f9b-6.job =>PUP.Optional.CrossRider
C:\Windows\Tasks\c157e037-50d1-4479-b6e0-dd53801f1f9b-7.job =>PUP.Optional.CrossRider
C:\Windows\Tasks\globalUpdateUpdateTaskMachineCore.job =>PUP.Optional.GlobalUpdate
C:\Windows\Tasks\globalUpdateUpdateTaskMachineUA.job =>PUP.Optional.GlobalUpdate
C:\Windows\Tasks\MAXDriverUpdater_UPDATES.job =>PUP.Optional.MaxDriverUpdater
C:\Windows\System32\Tasks\41cb378e-838f-4ec7-b018-1a05c5a4919d-10_user =>PUP.Optional.CrossRider
C:\Windows\System32\Tasks\c157e037-50d1-4479-b6e0-dd53801f1f9b-1-6 =>PUP.Optional.CrossRider
C:\Windows\System32\Tasks\c157e037-50d1-4479-b6e0-dd53801f1f9b-1-7 =>PUP.Optional.CrossRider
C:\Windows\System32\Tasks\c157e037-50d1-4479-b6e0-dd53801f1f9b-10_user =>PUP.Optional.CrossRider
C:\Windows\System32\Tasks\c157e037-50d1-4479-b6e0-dd53801f1f9b-11 =>PUP.Optional.CrossRider
C:\Windows\System32\Tasks\c157e037-50d1-4479-b6e0-dd53801f1f9b-3 =>PUP.Optional.CrossRider
C:\Windows\System32\Tasks\c157e037-50d1-4479-b6e0-dd53801f1f9b-4 =>PUP.Optional.CrossRider
C:\Windows\System32\Tasks\c157e037-50d1-4479-b6e0-dd53801f1f9b-5 =>PUP.Optional.CrossRider
C:\Windows\System32\Tasks\c157e037-50d1-4479-b6e0-dd53801f1f9b-5_user =>PUP.Optional.CrossRider
C:\Windows\System32\Tasks\c157e037-50d1-4479-b6e0-dd53801f1f9b-6 =>PUP.Optional.CrossRider
C:\Windows\System32\Tasks\c157e037-50d1-4479-b6e0-dd53801f1f9b-7 =>PUP.Optional.CrossRider
C:\Windows\System32\Tasks\DailyPCClean Schedule =>PUP.Optional.DailyPCClean
C:\Windows\System32\Tasks\Dregol rane =>PUP.Optional.Browser
C:\Windows\System32\Tasks\globalUpdateUpdateTaskMachineCore =>PUP.Optional.GlobalUpdate
C:\Windows\System32\Tasks\globalUpdateUpdateTaskMachineUA =>PUP.Optional.GlobalUpdate
C:\Windows\System32\Tasks\MAXDriverUpdaterRunAtStartup =>PUP.Optional.MaxDriverUpdater
C:\Windows\System32\Tasks\MAXDriverUpdater_UPDATES =>PUP.Optional.MaxDriverUpdater
C:\Windows\System32\Tasks\Optimizer Pro Schedule =>PUP.Optional.OptimizerPro
C:\Windows\System32\Tasks\Selection Tools Update =>PUP.Optional.Nosibay
C:\Windows\System32\Tasks\ShopperPro =>PUP.Optional.ShopperPro
C:\Windows\System32\Tasks\SmartWeb Upgrade Trigger Task =>PUP.Optional.SmartWebSearch
C:\Windows\System32\Tasks\UpdateAdmin =>PUP.Optional.UpdateAdmin
C:\Windows\System32\Tasks\WebBarLaunchTask =>PUP.Optional.WebBar
C:\Windows\System32\Tasks\WebBarUpdateTask =>PUP.Optional.WebBar
C:\Windows\System32\Tasks\WindApp Update =>PUP.Optional.Nosibay
HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\OLBPre =>PUP.Optional.MyPCBackup
HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{0BCE8B0A-1E76-44E5-9909-3CF804D92E4D}_is1 =>PUP.Optional.WebBar
HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\CinemaPlus-4.5vV17.08 =>PUP.Optional.CrossRider
HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\DailyPCClean_is1 =>PUP.Optional.DailyPCClean
HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\dpcc_en_009010064_is1 =>PUP.Optional.DailyPCClean
HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Get The Results Hub =>PUP.Optional.GetTheResultsHub
HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\gmsd_fr_005010064_is1 =>PUP.Optional.GamesDesktop
HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\gmsd_fr_005010065_is1 =>PUP.Optional.GamesDesktop
HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Max Driver Updater_is1 =>PUP.Optional.MaxDriverUpdater
HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\MovieDea =>PUP.Optional.MovieDea
HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\mpck_fr_017010064_is1 =>PUP.Optional.MobilePCStarterKit
HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\mystartsearch uninstall =>PUP.Optional.StartSearch
HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Optimizer Pro_is1 =>PUP.Optional.OptimizerPro
HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Record Page =>PUP.Optional.RecordPage
HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Run_Dregol =>PUP.Optional.Browser
HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\ShopperPro =>PUP.Optional.ShopperPro
HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\SmartWeb =>PUP.Optional.SmartWebSearch
HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\VOPackage =>PUP.Optional.Downware
HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\WInterEnhancer =>PUP.Optional.Wajam
HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Wordinator_1.10.0.20 =>PUP.Optional.Generic
HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\YouTube Accelerator =>PUP.Optional.Goobzo
HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\ZombieNews =>PUP.Optional.ZombieNews
HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\zz.1174.mdu =>PUP.Optional.MaxDriverUpdater
HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{8F1CD30B-3A84-4B95-BFA4-CC0F885B8463} =>PUP.Optional.UpdateAdmin
HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{cfd32d46-7d3f-483f-bace-7172aec5592d} =>PUP.Optional.BuzzDock
HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{eeb86aef-4a5d-4b75-9d74-f16d438fc286} =>PUP.Optional.PremierOpinion
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\GetNowUpdater =>PUP.Optional.LiveSoftAction
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Selection Tools =>PUP.Optional.Nosibay
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\WindApp =>PUP.Optional.Nosibay
HKLM\SOFTWARE\Wow6432Node\0caf8c5b-8389-434f-81a9-1b08e795693e =>PUP.Optional.CrossRider
HKLM\SOFTWARE\Wow6432Node\5da059a482fd494db3f252126fbc3d5b =>PUP.Optional.CrossRider
HKLM\SOFTWARE\Wow6432Node\ArenaHD =>PUP.Optional.CrossRider
HKLM\SOFTWARE\Wow6432Node\AskPartnerNetwork =>Toolbar.AskBar
HKLM\SOFTWARE\Wow6432Node\CinemaPlus-4.5vV17.08 =>PUP.Optional.CrossRider
HKLM\SOFTWARE\Wow6432Node\CinemaPlus-4.5vV17.08-nv =>PUP.Optional.CrossRider
HKLM\SOFTWARE\Wow6432Node\CinemaPlus-4.5vV17.08-nv-ie =>PUP.Optional.CrossRider
HKLM\SOFTWARE\Wow6432Node\Conduit =>PUP.Optional.Conduit
HKLM\SOFTWARE\Wow6432Node\coupoon =>PUP.Optional.Multiplug
HKLM\SOFTWARE\Wow6432Node\csdimedia =>PUP.Optional.MaxDriverUpdater
HKLM\SOFTWARE\Wow6432Node\DAILYPCCLEAN =>PUP.Optional.DailyPCClean
HKLM\SOFTWARE\Wow6432Node\dfa8f721-9e62-ee70-23d9-97eab932f43e =>PUP.Optional.CrossRider
HKLM\SOFTWARE\Wow6432Node\fa89413c-c5c5-4b3e-8458-5a4dc8ccc442 =>PUP.Optional.CrossRider
HKLM\SOFTWARE\Wow6432Node\GAMESDESKTOP =>PUP.Optional.GamesDesktop
HKLM\SOFTWARE\Wow6432Node\GetTheResultsHub =>PUP.Optional.GetTheResultsHub
HKLM\SOFTWARE\Wow6432Node\GlobalUpdate =>PUP.Optional.GlobalUpdate
HKLM\SOFTWARE\Wow6432Node\Goobzo =>PUP.Optional.Goobzo
HKLM\SOFTWARE\Wow6432Node\HighDefAction =>PUP.Optional.CrossRider
HKLM\SOFTWARE\Wow6432Node\IHProtect =>PUP.Optional.AgentODR
HKLM\SOFTWARE\Wow6432Node\Iminent =>PUP.Optional.IMBooster
HKLM\SOFTWARE\Wow6432Node\InstalledBrowserExtensions =>PUP.Optional.BrowserExtensions
HKLM\SOFTWARE\Wow6432Node\MaxDrivrUpdater =>PUP.Optional.MaxDriverUpdater
HKLM\SOFTWARE\Wow6432Node\MOBILEPCSTARTERKIT =>PUP.Optional.MobilePCStarterKit
HKLM\SOFTWARE\Wow6432Node\MovieDea =>PUP.Optional.MovieDea
HKLM\SOFTWARE\Wow6432Node\mystartsearchSoftware =>PUP.Optional.StartSearch
HKLM\SOFTWARE\Wow6432Node\RecordPage =>PUP.Optional.RecordPage
HKLM\SOFTWARE\Wow6432Node\SearchProtect =>PUP.Optional.SearchProtect
HKLM\SOFTWARE\Wow6432Node\searchult =>PUP.Optional.Generic
HKLM\SOFTWARE\Wow6432Node\ShopperPro =>PUP.Optional.ShopperPro
HKLM\SOFTWARE\Wow6432Node\Speedchecker Limited =>PUP.Optional.InternetSpeedChecker
HKLM\SOFTWARE\Wow6432Node\SupDp =>PUP.Optional.SupTab
HKLM\SOFTWARE\Wow6432Node\supTab =>PUP.Optional.SupTab
HKLM\SOFTWARE\Wow6432Node\supWindowsMangerProtect =>PUP.Optional.WpManager
HKLM\SOFTWARE\Wow6432Node\Tutorials =>PUP.Optional.AgenceExclusive
HKLM\SOFTWARE\Wow6432Node\WInterEnhancer =>PUP.Optional.Wajam
HKLM\SOFTWARE\Wow6432Node\Wordinator_1.10.0.20 =>PUP.Optional.Generic
HKLM\SOFTWARE\Wow6432Node\WordSurfer_1.10.0.19 =>PUP.Optional.WordSurfer
HKLM\SOFTWARE\Wow6432Node\YorkNewCin =>PUP.Optional.CrossRider
HKCU\SOFTWARE\APN PIP =>PUP.Optional.Conduit
HKCU\SOFTWARE\Appscion =>PUP.Optional.LiveSoftAction
HKCU\SOFTWARE\AppscionUpdater =>PUP.Optional.LiveSoftAction
HKCU\SOFTWARE\ArenaHD =>PUP.Optional.CrossRider
HKCU\SOFTWARE\AskPartnerNetwork =>Toolbar.AskBar
HKCU\SOFTWARE\CinemaPlus-4.5vV17.08 =>PUP.Optional.CrossRider
HKCU\SOFTWARE\CinemaPlus-4.5vV17.08-nv =>PUP.Optional.CrossRider
HKCU\SOFTWARE\CinemaPlus-4.5vV17.08-nv-ie =>PUP.Optional.CrossRider
HKCU\SOFTWARE\Com NotificationV09.08 =>PUP.Optional.ComNotification
HKCU\SOFTWARE\csdimedia =>PUP.Optional.MaxDriverUpdater
HKCU\SOFTWARE\DailyPcClean =>PUP.Optional.DailyPCClean
HKCU\SOFTWARE\DownloadAdmin =>PUP.Optional.UpdateAdmin
HKCU\SOFTWARE\GetNowUpdater =>PUP.Optional.LiveSoftAction
HKCU\SOFTWARE\globalUpdate =>PUP.Optional.GlobalUpdate
HKCU\SOFTWARE\Goobzo =>PUP.Optional.Goobzo
HKCU\SOFTWARE\HighDefAction =>PUP.Optional.CrossRider
HKCU\SOFTWARE\HomeTab =>PUP.Optional.CertifiedToolbar
HKCU\SOFTWARE\InstalledBrowserExtensions =>PUP.Optional.BrowserExtensions
HKCU\SOFTWARE\Linkey =>PUP.Optional.LinkeySearch
HKCU\SOFTWARE\Nosibay =>PUP.Optional.SPointer
HKCU\SOFTWARE\Optimizer Pro =>PUP.Optional.OptimizerPro
HKCU\SOFTWARE\ProductSetup =>Adware.InstallCore
HKCU\SOFTWARE\run_dregol =>PUP.Optional.Browser
HKCU\SOFTWARE\SearchProtectWS =>PUP.Optional.SearchProtect
HKCU\SOFTWARE\SimplyTech =>PUP.Optional.SimplyTech
HKCU\SOFTWARE\Speedchecker Limited =>PUP.Optional.InternetSpeedChecker
HKCU\SOFTWARE\Store =>PUP.Optional.Generic
HKCU\SOFTWARE\Super Optimizer =>PUP.Optional.SuperOptimizer
HKCU\SOFTWARE\TNT2 =>PUP.Optional.TidyNetwork
HKCU\SOFTWARE\tstamptoken =>PUP.Optional.MaxComputerCleaner
HKCU\SOFTWARE\Tutorials =>PUP.Optional.AgenceExclusive
HKCU\SOFTWARE\TutoTag =>PUP.Optional.AgenceExclusive
HKCU\SOFTWARE\WajIEnhance =>PUP.Optional.Wajam
HKCU\SOFTWARE\WInterEnhancer =>PUP.Optional.Wajam
HKCU\SOFTWARE\YorkNewCin =>PUP.Optional.CrossRider
HKCU\SOFTWARE\AppDataLow\Software\Crossrider =>PUP.Optional.CrossRider
HKCU\SOFTWARE\AppDataLow\Software\DynConIE =>PUP.Optional.DynConIE
HKCU\SOFTWARE\AppDataLow\Software\SmartWeb =>PUP.Optional.SmartWebSearch
C:\Program Files (x86)\CinemaPlus-4.5vV17.08 =>PUP.Optional.CrossRider
C:\Program Files (x86)\CloudScout Parental Control =>PUP.Optional.CloudScout
C:\Program Files (x86)\Com NotificationV09.08 =>PUP.Optional.ComNotification
C:\Program Files (x86)\Coupoon =>PUP.Optional.Multiplug
C:\Program Files (x86)\DailyPCClean =>PUP.Optional.DailyPCClean
C:\Program Files (x86)\DailyPcClean Support =>PUP.Optional.DailyPCClean
C:\Program Files (x86)\e4b2636e-1a27-497e-9e7b-3abeffda1f18 =>PUP.Optional.CrossRider
C:\Program Files (x86)\ED2F3280-1439984681-815C-3B5B-E06995AD0640 =>PUP.Optional.CrossRider
C:\Program Files (x86)\Get The Results Hub =>PUP.Optional.GetTheResultsHub
C:\Program Files (x86)\globalUpdate =>PUP.Optional.GlobalUpdate
C:\Program Files (x86)\gmsd_fr_005010064 =>PUP.Optional.CrossRider
C:\Program Files (x86)\gmsd_fr_005010065 =>PUP.Optional.CrossRider
C:\Program Files (x86)\Max Driver Updater =>PUP.Optional.MaxDriverUpdater
C:\Program Files (x86)\MaxDrivrUpdater =>PUP.Optional.MaxDriverUpdater
C:\Program Files (x86)\MaxDrivrUpdater_v79.1174 =>PUP.Optional.MaxDriverUpdater
C:\Program Files (x86)\MiuiTab =>PUP.Optional.MiuiTab
C:\Program Files (x86)\MovieDea =>PUP.Optional.MovieDea
C:\Program Files (x86)\mpck_fr_017010064 =>PUP.Optional.MobilePCStarterKit
C:\Program Files (x86)\OLBPre =>PUP.Optional.MyPCBackup
C:\Program Files (x86)\Optimizer Pro 3.99 =>PUP.Optional.OptimizerPro
C:\Program Files (x86)\PremierOpinion =>PUP.Optional.PremierOpinion
C:\Program Files (x86)\Record Page =>PUP.Optional.RecordPage
C:\Program Files (x86)\ShopperPro =>PUP.Optional.ShopperPro
C:\Program Files (x86)\Software =>PUP.Optional.Boxore
C:\Program Files (x86)\Wajam =>PUP.Optional.Wajam
C:\Program Files (x86)\WInterEnhancer =>PUP.Optional.Wajam
C:\Program Files (x86)\Wordinator_1.10.0.20 =>PUP.Optional.Generic
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DailyPCClean =>PUP.Optional.DailyPCClean
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GAMESDESKTOP =>PUP.Optional.GamesDesktop
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Max Driver Updater =>PUP.Optional.MaxDriverUpdater
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MOBILEPCSTARTERKIT =>PUP.Optional.MobilePCStarterKit
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Optimizer Pro v3.2 =>PUP.Optional.OptimizerPro
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PremierOpinion =>PUP.Optional.PremierOpinion
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\UpdateAdmin =>PUP.Optional.UpdateAdmin
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WInterEnhancer =>PUP.Optional.Wajam
C:\ProgramData\abc =>PUP.Optional.BundleInstaller
C:\ProgramData\IHProtectUpDate =>PUP.Optional.AgentODR
C:\ProgramData\InstallSightSDK =>PUP.Optional.WebBar
C:\ProgramData\MovieDeaConfig =>PUP.Optional.MovieDea
C:\ProgramData\ShopperPro =>PUP.Optional.ShopperPro
C:\ProgramData\Software =>PUP.Optional.Boxore
C:\ProgramData\WindowsMangerProtect =>PUP.Optional.WpManager
C:\ProgramData\ZombieNews =>PUP.Optional.ZombieNews
C:\Users\celine\AppData\Roaming\csdimedia =>PUP.Optional.MaxDriverUpdater
C:\Users\celine\AppData\Roaming\DailyPCClean =>PUP.Optional.DailyPCClean
C:\Users\celine\AppData\Roaming\DriverTurbo =>PUP.Optional.DriverTurbo
C:\Users\celine\AppData\Roaming\GetNowUpdater =>PUP.Optional.GetNow
C:\Users\celine\AppData\Roaming\GetNowUpdaterRecovery =>PUP.Optional.GetNow
C:\Users\celine\AppData\Roaming\mystartsearch =>PUP.Optional.StartSearch
C:\Users\celine\AppData\Roaming\News =>PUP.Optional.BredoLab
C:\Users\celine\AppData\Roaming\Nosibay =>PUP.Optional.BubbleDock
C:\Users\celine\AppData\Roaming\Optimizer Pro =>PUP.Optional.OptimizerPro
C:\Users\celine\AppData\Roaming\Store =>PUP.Optional.Nosibay
C:\Users\celine\AppData\Roaming\VOPackage =>PUP.Optional.Downware
C:\Users\celine\AppData\Local\Chromatic =>PUP.Optional.Chromatic
C:\Users\celine\AppData\Local\CrashRpt =>.Legitimate.CrashReports
C:\Users\celine\AppData\Local\DailyPcClean Support =>PUP.Optional.DailyPCClean
C:\Users\celine\AppData\Local\GetNowUpdater =>PUP.Optional.GetNow
C:\Users\celine\AppData\Local\globalUpdate =>PUP.Optional.GlobalUpdate
C:\Users\celine\AppData\Local\gmsd_fr_005010064 =>PUP.Optional.CrossRider
C:\Users\celine\AppData\Local\gmsd_fr_005010065 =>PUP.Optional.CrossRider
C:\Users\celine\AppData\Local\Installer =>PUP.Optional.InstallPedia
C:\Users\celine\AppData\Local\mpck_fr_017010064 =>PUP.Optional.MobilePCStarterKit
C:\Users\celine\AppData\Local\SmartWeb =>PUP.Optional.SmartWebSearch
C:\Users\celine\AppData\Local\UpdateAdmin =>PUP.Optional.UpdateAdmin
C:\Users\celine\AppData\Local\wd =>PUP.Optional.WatchDog
C:\Users\celine\AppData\Local\WebBar =>PUP.Optional.WebBar
C:\Users\celine\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MovieDea =>PUP.Optional.MovieDea
C:\Users\celine\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\VOPackage =>PUP.Optional.Downware
C:\Windows\Prefetch\BUBBLE DOCK UPDATE.EXE-DB1A6498.pf =>PUP.Optional.BubbleDock
C:\Windows\Prefetch\GLOBALUPDATE.EXE-AFA6DA21.pf =>PUP.Optional.GlobalUpdate
C:\Windows\Prefetch\GLOBALUPDATECRASHHANDLER.EXE-3B319581.pf =>PUP.Optional.GlobalUpdate
C:\Windows\Prefetch\PCSUSD.EXE-6524099D.pf =>PUP.Optional.PCSpeedUp
C:\Windows\Prefetch\PCSUUCC.EXE-6310E211.pf =>PUP.Optional.PCSpeedUp
C:\Windows\Prefetch\SELECTION TOOLS UPDATE.EXE-4421733B.pf =>PUP.Optional.Nosibay
C:\Windows\Prefetch\WEBBAR_7212015.EXE-E551BDC0.pf =>PUP.Optional.WebBar
C:\Windows\Prefetch\WEBBAR_7212015.TMP-66D431AB.pf =>PUP.Optional.WebBar
C:\Windows\System32\drivers\wfd_vt_1_10_0_20.sys =>PUP.Optional.Generic
C:\Windows\System32\drivers\wfd_vw_1_10_0_20.sys =>PUP.Optional.Generic
C:\Users\celine\AppData\Roaming\VOPackage\Uninstall.exe =>PUP.Optional.Downware
C:\Users\celine\AppData\Roaming\VOPackage\VOPackage.exe =>PUP.Optional.Downware
C:\Users\celine\AppData\Roaming\mystartsearch\key.dll =>PUP.Optional.StartSearch
C:\Users\celine\AppData\Roaming\mystartsearch\UninstallManager.exe =>PUP.Optional.StartSearch
C:\Users\celine\AppData\Local\mpck_fr_017010064\Download\myoffergroup_fr.exe =>PUP.Optional.MobilePCStarterKit
C:\Users\celine\AppData\Local\GetNowUpdater\inst\Bootstrapper\GetNowUpdaterUninstall.exe =>PUP.Optional.GetNow
C:\Windows\Installer\{FB1AC1F1-8F47-4DCE-A1ED-0DFBA0F455B4}\ARPPRODUCTICON.exe =>PUP.Optional.DriverMender
HKLM\Software\Classes\Installer\Products\1F1CA1BF74F8ECD41ADED0BF0A4F554B =>PUP.Optional.DriverMender
HKLM\Software\Classes\Installer\Features\1F1CA1BF74F8ECD41ADED0BF0A4F554B =>PUP.Optional.DriverMender
C:\Windows\Installer\{8F1CD30B-3A84-4B95-BFA4-CC0F885B8463}\icon.ico =>PUP.Optional.UpdateAdmin
HKLM\Software\Classes\Installer\Products\B03DC1F848A359B4FB4ACCF088B54836 =>PUP.Optional.UpdateAdmin
HKLM\Software\Classes\Installer\Features\B03DC1F848A359B4FB4ACCF088B54836 =>PUP.Optional.UpdateAdmin
C:\Windows\Installer\{686695ED-BB3F-415D-B0DB-18CF535F7B50}\ARPPRODUCTICON.exe =>PUP.Optional.DriverManager
HKLM\Software\Classes\Installer\Products\DE596686F3BBD5140BBD81FC35F5B705 =>PUP.Optional.DriverManager
HKLM\Software\Classes\Installer\Features\DE596686F3BBD5140BBD81FC35F5B705 =>PUP.Optional.DriverManager
C:\Windows\Installer\3cba20.msi =>PUP.Optional.UpdateAdmin
HKLM\SYSTEM\CurrentControlSet\Services\globalUpdatem =>PUP.Optional.GlobalUpdate
HKLM\SYSTEM\CurrentControlSet\Services\IHProtect Service =>PUP.Optional.AgentODR
C:\Program Files (x86)\MiuiTab\ProtectService.exe =>PUP.Optional.AgentODR
HKLM\SYSTEM\CurrentControlSet\Services\qurycyhy =>PUP.Optional.CrossRider
C:\Program Files (x86)\ED2F3280-1439984681-815C-3B5B-E06995AD0640\knstABB2.tmpfs =>PUP.Optional.CrossRider
HKLM\SYSTEM\CurrentControlSet\Services\Service Mgr GetTheResultsHub =>PUP.Optional.GetTheResultsHub
C:\ProgramData\6f66c052-8827-4487-9031-09becb0cf541\plugincontainer.exe =>PUP.Optional.GetTheResultsHub
HKLM\SYSTEM\CurrentControlSet\Services\Service Mgr RecordPage =>PUP.Optional.RecordPage
C:\ProgramData\87737dd0-ad90-4193-bd48-336966b8d777\plugincontainer.exe =>PUP.Optional.RecordPage
HKLM\SYSTEM\CurrentControlSet\Services\Update Mgr GetTheResultsHub =>PUP.Optional.GetTheResultsHub
C:\Program Files (x86)\Common Files\6f66c052-8827-4487-9031-09becb0cf541\updater.exe =>PUP.Optional.GetTheResultsHub
HKLM\SYSTEM\CurrentControlSet\Services\Update Mgr RecordPage =>PUP.Optional.RecordPage
C:\Program Files (x86)\Common Files\87737dd0-ad90-4193-bd48-336966b8d777\updater.exe =>PUP.Optional.RecordPage
HKLM\SYSTEM\CurrentControlSet\Services\WindowsMangerProtect =>PUP.Optional.WpManager
C:\ProgramData\WindowsMangerProtect\ProtectWindowsManager.exe =>PUP.Optional.WpManager
HKLM\SYSTEM\CurrentControlSet\Services\wsvc_1.10.0.20 =>PUP.Optional.Generic
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\MaxDrivrUpdater_Service_RASAPI32 =>PUP.Optional.MaxDriverUpdater
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\MaxDrivrUpdater_Service_RASMANCS =>PUP.Optional.MaxDriverUpdater
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\SpeedCheckerService_RASAPI32 =>PUP.Optional.InternetSpeedChecker
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\SpeedCheckerService_RASMANCS =>PUP.Optional.InternetSpeedChecker

---\\ Récapitulatif des éléments trouvées sur votre station (72) - 0s
http://www.nicolascoolman.fr/rogue-pcspeedup/ =>PUP.Optional.PCSpeedUp
http://www.nicolascoolman.fr/pup-crossrider/ =>PUP.Optional.CrossRider
http://www.nicolascoolman.fr/blog =>PUP.Optional.MaxDriverUpdater
http://www.nicolascoolman.fr/adware-premieropinion/ =>PUP.Optional.PremierOpinion
http://www.nicolascoolman.fr/pup-internetspeedchecker/ =>PUP.Optional.InternetSpeedChecker
http://www.nicolascoolman.fr/blog =>PUP.Optional.MobilePCStarterKit
http://www.nicolascoolman.fr/blog =>PUP.Optional.Nosibay
http://www.nicolascoolman.fr/blog =>PUP.Optional.BredoLab
http://www.nicolascoolman.fr/pup-goobzo/ =>PUP.Optional.Goobzo
http://www.nicolascoolman.fr/pup-optimizerpro/ =>PUP.Optional.OptimizerPro
http://www.nicolascoolman.fr/pup-getnow/ =>PUP.Optional.GetNow
http://www.nicolascoolman.fr/pup-mypcbackup/ =>PUP.Optional.MyPCBackup
http://www.nicolascoolman.fr/pup-smartwebsearch/ =>PUP.Optional.SmartWebSearch
http://www.nicolascoolman.fr/pup-shopperpro/ =>PUP.Optional.ShopperPro
http://www.nicolascoolman.fr/pup-wajam/ =>PUP.Optional.Wajam
http://www.nicolascoolman.fr/blog =>PUP.Optional.Generic
http://www.nicolascoolman.fr/blog =>PUP.Optional.WebBar
http://www.nicolascoolman.fr/blog =>PUP.Optional.ChromaticBrowser
http://www.nicolascoolman.fr/pup-optional-gettheresults =>PUP.Optional.GetTheResultsHub
http://www.nicolascoolman.fr/pup-optional-saleclipper/ =>PUP.Optional.SaleClipper
http://www.nicolascoolman.fr/pup-recordpage/ =>PUP.Optional.RecordPage
http://www.nicolascoolman.fr/hijacker-browsers/ =>PUP.Optional.Browser
http://www.nicolascoolman.fr/blog =>PUP.Optional.BDYahoo
http://www.nicolascoolman.fr/blog =>PUP.Optional.LightningNewTab
http://www.nicolascoolman.fr/pup-globalupdate/ =>PUP.Optional.GlobalUpdate
http://www.nicolascoolman.fr/pup-optional-startsearch/ =>PUP.Optional.StartSearch
http://www.nicolascoolman.fr/blog =>PUP.Optional.UpdateAdmin
http://www.nicolascoolman.fr/blog =>PUP.Optional.MovieDea
http://www.nicolascoolman.fr/pup-optional-dailypcclean/ =>PUP.Optional.DailyPCClean
http://www.nicolascoolman.fr/blog =>PUP.Optional.GetTheResultsHub*
http://www.nicolascoolman.fr/blog =>PUP.Optional.RecordPage*
http://www.nicolascoolman.fr/blog =>PUP.Optional.WN
http://www.nicolascoolman.fr/blog =>PUP.Optional.GamesDesktop
http://www.nicolascoolman.fr/adware-downware/ =>PUP.Optional.Downware
http://www.nicolascoolman.fr/blog =>PUP.Optional.ZombieNews
http://www.nicolascoolman.fr/blog =>PUP.Optional.BuzzDock
http://www.nicolascoolman.fr/blog =>PUP.Optional.LiveSoftAction
http://www.nicolascoolman.fr/blog =>Toolbar.AskBar
http://www.nicolascoolman.fr/toolbar-conduit/ =>PUP.Optional.Conduit
http://www.nicolascoolman.fr/pup-mutiplug/ =>PUP.Optional.Multiplug
http://www.nicolascoolman.fr/blog =>PUP.Optional.AgentODR
http://www.nicolascoolman.fr/adware-imbooster/ =>PUP.Optional.IMBooster
http://www.nicolascoolman.fr/blog =>PUP.Optional.BrowserExtensions
http://www.nicolascoolman.fr/pup-searchprotect/ =>PUP.Optional.SearchProtect
http://www.nicolascoolman.fr/pup-suptab/ =>PUP.Optional.SupTab
http://www.nicolascoolman.fr/pup-wpmanager/ =>PUP.Optional.WpManager
http://www.nicolascoolman.fr/spyware-agenceexclusive/ =>PUP.Optional.AgenceExclusive
http://www.nicolascoolman.fr/blog =>PUP.Optional.WordSurfer
http://www.nicolascoolman.fr/blog =>PUP.Optional.ComNotification
http://www.nicolascoolman.fr/pup-certifiedtoolbar/ =>PUP.Optional.CertifiedToolbar
http://www.nicolascoolman.fr/pup-linkeysearch/ =>PUP.Optional.LinkeySearch
http://www.nicolascoolman.fr/adware-spointer/ =>PUP.Optional.SPointer
http://www.nicolascoolman.fr/adware-installcore/ =>Adware.InstallCore
http://www.nicolascoolman.fr/blog =>PUP.Optional.SimplyTech
http://www.nicolascoolman.fr/blog =>PUP.Optional.SuperOptimizer
http://www.nicolascoolman.fr/adware-tidynetwork/ =>PUP.Optional.TidyNetwork
http://www.nicolascoolman.fr/blog =>PUP.Optional.MaxComputerCleaner
http://www.nicolascoolman.fr/blog =>PUP.Optional.DynConIE
http://www.nicolascoolman.fr/blog =>PUP.Optional.CloudScout
http://www.nicolascoolman.fr/blog =>PUP.Optional.MiuiTab
http://www.nicolascoolman.fr/adware-boxore/ =>PUP.Optional.Boxore
http://www.nicolascoolman.fr/blog =>PUP.Optional.BundleInstaller
http://www.nicolascoolman.fr/blog =>PUP.Optional.DriverTurbo
http://www.nicolascoolman.fr/pup-bubbledock/ =>PUP.Optional.BubbleDock
http://www.nicolascoolman.fr/pup-chromatic/ =>PUP.Optional.Chromatic
http://www.nicolascoolman.fr/blog =>.Legitimate.CrashReports
http://www.nicolascoolman.fr/adware-installpedia/ =>PUP.Optional.InstallPedia
http://www.nicolascoolman.fr/blog =>PUP.Optional.WatchDog
http://www.nicolascoolman.fr/blog =>PUP.Optional.Monetization
http://www.nicolascoolman.fr/blog =>PUP.Optional.DeskCut
http://www.nicolascoolman.fr/blog =>PUP.Optional.DriverMender
http://www.nicolascoolman.fr/blog =>PUP.Optional.DriverManager

~ End of the scan, 72811 items in 1521 seconds (2413)(0)()