Bonjour,
J'ai des apparitions de pages porno. J'ai réalisé un diagnostic via ZHP Diag mais vu que je n'y comprend rien l'appel à l'aide est nécessaire. Merci d'avance. Ah, je trouve aussi que mes capacités de batteries ont beaucoup diminuées, si il existe des éléments dans le diagnostic qui existe et si quelqu'un peut m'aider. Merci encore d'avance.
Rapport de ZHPDiag v1.31.105 par Nicolas Coolman, Update du 25/06/2012
Run by ergothérapie at 12/07/2012 11:48:41
Web site : http://www.premiumorange.com/zeb-h [...] pdiag.html
Web site : http://nicolascoolman.skyrock.com/
State :
---\\ Web Browser
MSIE: Internet Explorer v
---\\ Windows Product Information
~ Langage: Français
Windows 7 Business Edition, 64-bit Service Pack 1 (Build 7601)
Windows Server License Manager Script : OK
~ Windows(R) 7, OEM_SLP channel
System Locked Preinstallation (OEM_SLP) : OK
Windows ID Activation : OK
~ Windows Partial Key : QB9CK
Windows License : OK
~ Windows Remaining Initializations Number : 2
Software Protection Service (Protection logicielle) : KO
Windows Automatic Updates : OK
Windows Activation Technologies : OK
---\\ System Information
~ Processor: Intel64 Family 6 Model 42 Stepping 7, GenuineIntel
~ Operating System: 64 Bits
Boot mode: Normal (Normal boot)
Total RAM: 3983 MB (47% free)
System Restore: Inconnu (Unknown)
System drive C: has 223 GB (80%) free of 277 GB
---\\ Logged in mode
~ Computer Name: ERGOTHÉRAPIE-PC
~ User Name: ergothérapie
~ All Users Names: HomeGroupUser$, ergothérapie, Administrateur,
~ Unselected Option: ,,,,,,,
Logged in as Administrator
---\\ Environnement Variables
~ System Unit : C:\
~ %AppData% : C:\Users\ergothérapie\AppData\Roaming\
~ %Desktop% : C:\Users\ergothérapie\Desktop\
~ %Favorites% : C:\Users\ergothérapie\Favorites\
~ %LocalAppData% : C:\Users\ergothérapie\AppData\Local\
~ %StartMenu% : C:\Users\ergothérapie\AppData\Roaming\Microsoft\Windows\Start Menu\
~ %Windir% : C:\Windows\
~ %System% : C:\Windows\System32\
---\\ DOS/Devices
C:\ Hard drive, Flash drive, Thumb drive (Free 223 Go of 277 Go)
E:\ CD-ROM drive (Not Inserted)
---\\ Security Center & Tools Informations
~ Scan Security Center in 00mn 00s
---\\
[MD5.332FEAB1435662FC6C672E25BEB37BE3] - (.Microsoft Corporation - Explorateur Windows.) (.25/02/2011 - 07:19:30.) -- C:\Windows\Explorer.exe [2871808]
[MD5.94355C28C1970635A31B3FE52EB7CEBA] - (.Microsoft Corporation - Application de démarrage de Windows.) (.14/07/2009 - 02:39:52.) -- C:\Windows\System32\Wininit.exe [129024]
[MD5.5A45FA344F4AD99D903F4B20E43B89EC] - (.Microsoft Corporation - Extensions Internet pour Win32.) (.02/06/2012 - 13:05:28.) -- C:\Windows\System32\wininet.dll [1392128]
[MD5.1151B1BAA6F350B1DB6598E0FEA7C457] - (.Microsoft Corporation - Application d’ouverture de session Windows.) (.21/11/2010 - 04:24:29.) -- C:\Windows\System32\Winlogon.exe [390656]
[MD5.067FA52BFB59A56110A12312EF9AF243] - (.Microsoft Corporation - Bibliothèque de licences.) (.21/11/2010 - 04:24:16.) -- C:\Windows\System32\sppcomapi.dll [232448]
[MD5.1C7857B62DE5994A75B054A9FD4C3825] - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) (.28/12/2011 - 04:59:24.) -- C:\Windows\system32\Drivers\AFD.sys [498688]
[MD5.02062C0B390B7729EDC9E69C680A6F3C] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) (.14/07/2009 - 02:52:21.) -- C:\Windows\system32\Drivers\atapi.sys [24128]
[MD5.B8BD2BB284668C84865658C77574381A] - (.Microsoft Corporation - CD-ROM File System Driver.) (.14/07/2009 - 00:19:47.) -- C:\Windows\system32\Drivers\Cdfs.sys [92160]
[MD5.F036CE71586E93D94DAB220D7BDF4416] - (.Microsoft Corporation - SCSI CD-ROM Driver.) (.21/11/2010 - 04:23:47.) -- C:\Windows\system32\Drivers\Cdrom.sys [147456]
[MD5.9BB2EF44EAA163B29C4A4587887A0FE4] - (.Microsoft Corporation - DFS Namespace Client Driver.) (.21/11/2010 - 04:24:32.) -- C:\Windows\system32\Drivers\DfsC.sys [102400]
[MD5.97BFED39B6B79EB12CDDBFEED51F56BB] - (.Microsoft Corporation - High Definition Audio Bus Driver.) (.21/11/2010 - 04:23:47.) -- C:\Windows\system32\Drivers\HDAudBus.sys [122368]
[MD5.FA55C73D4AFFA7EE23AC4BE53B4592D3] - (.Microsoft Corporation - Pilote de port i8042.) (.14/07/2009 - 00:19:57.) -- C:\Windows\system32\Drivers\i8042prt.sys [105472]
[MD5.AF9B39A7E7B6CAA203B3862582E9F2D0] - (.Microsoft Corporation - IP Network Address Translator.) (.14/07/2009 - 01:10:03.) -- C:\Windows\system32\Drivers\IpNat.sys [116224]
[MD5.A5D9106A73DC88564C825D317CAC68AC] - (.Microsoft Corporation - Windows NT SMB Minirdr.) (.27/04/2011 - 03:40:40.) -- C:\Windows\system32\Drivers\MRxSmb.sys [158208]
[MD5.09594D1089C523423B32A4229263F068] - (.Microsoft Corporation - MBT Transport driver.) (.21/11/2010 - 04:23:51.) -- C:\Windows\system32\Drivers\netBT.sys [261632]
[MD5.A2F74975097F52A00745F9637451FDD8] - (.Microsoft Corporation - Pilote du système de fichiers NT.) (.11/03/2011 - 07:41:34.) -- C:\Windows\system32\Drivers\ntfs.sys [1659776]
[MD5.0086431C29C35BE1DBC43F52CC273887] - (.Microsoft Corporation - Pilote de port parallèle.) (.14/07/2009 - 01:00:41.) -- C:\Windows\system32\Drivers\Parport.sys [97280]
[MD5.471815800AE33E6F1C32FB1B97C490CA] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) (.21/11/2010 - 04:24:33.) -- C:\Windows\system32\Drivers\Rasl2tp.sys [129536]
[MD5.1B6163C503398B23FF8B939C67747683] - (.Microsoft Corporation - Microsoft RDP Device redirector.) (.21/11/2010 - 04:25:07.) -- C:\Windows\system32\Drivers\rdpdr.sys [165888]
[MD5.548260A7B8654E024DC30BF8A7C5BAA4] - (.Microsoft Corporation - SMB Transport driver.) (.14/07/2009 - 01:09:09.) -- C:\Windows\system32\Drivers\smb.sys [93184]
[MD5.DDAD5A7AB24D8B65F8D724F5C20FD806] - (.Microsoft Corporation - TDI Translation Driver.) (.21/11/2010 - 04:24:32.) -- C:\Windows\system32\Drivers\tdx.sys [119296]
[MD5.DF8126BD41180351A093A3AD2FC8903B] - (.Microsoft Corporation - Pilote de cliché instantané du volume.) (.25/02/2011 - 07:25:38.) -- C:\Windows\system32\Drivers\volsnap.sys [296320]
~ Scan Generic Processes in 00mn 00s
---\\
~ Mes images (My Pictures) : 1/192
~ Mes Favoris (My Favorites) : 1/11
~ Mes Documents (My Documents) : 1/707
~ Mon Bureau (My Desktop) : 1/746
~ Menu demarrer (Programs) : 0/26
~ Scan Hidden Files in 00mn 02s
---\\
[MD5.0892837BF89C842D518AC3A323992B47].(.Sonix.CameraMonitor Application.) -- C:\Windows\vsnp2uvc.exe [662016] [PID.4496]
[MD5.5D61BE7DB55B026A5D61A3EED09D0EAD].(.Google Inc..GoogleToolbarNotifier.) -- C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408] [PID.]
[MD5.B67322F9FF401846E56F3D719069270E].(..Rainlendar2.) -- C:\Program Files (x86)\Rainlendar2\Rainlendar2.exe [2433024] [PID.5140]
[MD5.270A7537F750EE66EE41BE987CBC0146].(.Gadwin Systems, Inc.Gadwin PrintScreen.) -- C:\Program Files (x86)\Gadwin Systems\PrintScreen\PrintScreen.exe [495616] [PID.5372]
[MD5.89F7C30A91E5581BDF14C62AB46A2B2D].(.McAfee, Inc..McAfee Security Scanner Scheduler.) -- C:\Program Files (x86)\McAfee Security Scan\2.0.181\SSScheduler.exe [255536] [PID.5636]
[MD5.DEBF34BCF45FC4764CFF6F4CEBD1E03C].(.FUJITSU LIMITED.IndicatorUty.exe.) -- C:\Program Files (x86)\Fujitsu\Fujitsu Hotkey Utility\IndicatorUty.exe [48752] [PID.5656]
[MD5.7B89EF5A5A46D4B5924D392D74437CAA].(.FUJITSU LIMITED.Pointing Device Utility.) -- C:\Program Files (x86)\Fujitsu\PointingDeviceUtility\FJPDAutoSet.exe [85104] [PID.5676]
[MD5.9D51EA92A612B37E76E5E4621650C50A].(.Renesas Electronics Corporation.USB 3.0 Monitor.) -- C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [113288] [PID.5752]
[MD5.569E547273C25B019054A12A40400ECE].(.OpenOffice.org.OpenOffice.org 3.2.) -- C:\Program Files (x86)\OpenOffice.org 3\program\soffice.exe [11318784] [PID.5800]
[MD5.4B723F33D7331F20E06F3A2FD76EC1D5].(.OpenOffice.org.OpenOffice.org 3.2.) -- C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin [11312128] [PID.5844]
[MD5.F3D215036C8D2DA75C5AC3459FAC336A].(.CyberLink Corp..CyberLink YouCam Tray.) -- C:\Program Files (x86)\CyberLink\YouCam\YouCamTray.exe [162912] [PID.5868]
[MD5.52DB6CDAC5BC7A1FC884E97C41C91213].(.Sun Microsystems, Inc..Java(TM) Update Scheduler.) -- C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [248040] [PID.5904]
[MD5.C983E62B6FB74457D173BA93F66F6068].(.Avira GmbH.Antivirus System Tray Tool.) -- C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [281768] [PID.5996]
[MD5.52A025AEDE99BFFF745A4CC0DBA5816F].(.Boxore OU.Boxore Client.) -- C:\Program Files (x86)\Boxore\BoxoreClient\boxore.exe [598320] [PID.6076]
[MD5.D18BEF36622511586E0347D3FFD94B35].(.Spigot, Inc..Search Settings.) -- C:\Program Files (x86)\Common Files\Spigot\Search Settings\SearchSettings.exe [1090440] [PID.3536]
[MD5.51138BEEA3E2C21EC44D0932C71762A8].(...) -- ysWOW64\RunDll32.exe [0] [PID.5564]
[MD5.6484076C5566C09105744EFA711EBE61].(.Broadcom Corporation..Bluetooth Headset Skype Proxy.) -- C:\Program Files\WIDCOMM\Bluetooth Software\BluetoothHeadsetProxy.exe [13600] [PID.3376]
[MD5.2E5420E460690BB0C8B44860347A5ADE].(.Mozilla Messaging.Thunderbird.) -- C:\Program Files (x86)\Mozilla Thunderbird\thunderbird.exe [400352] [PID.5036]
[MD5.D3C0837346C49095B8AF9EF54AD7E90A].(.Mozilla Corporation.Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe [913888] [PID.7760]
[MD5.41623176FEF9DF3C113EAADADBB5FB42].(.Mozilla Corporation.Plugin Container for Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe [16864] [PID.4292]
[MD5.7E55EB324D283979E450F71C973110B9].(.Adobe Systems, Inc..Adobe Flash Player 11.3 r300.) -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_3_300_265.exe [1536712] [PID.7784]
[MD5.BE955BAB4EFC2A28BE2692D102FFC85A].(...) -- C:\Program Files (x86)\ZHPDiag\ZHPDiag.exe [3838464] [PID.2604]
~ Scan Processes Running in 00mn 00s
---\\
C:\Users\ergothérapie\AppData\Local\Google\Chrome\User Data\Default\Preferences
G0 - GCSP: Preference [User Data\Default][HomePage] http://www.google.com
G0 - GCSP: Preference [User Data\Default] http://www.google.com
G1 - GCS: Preference [User Data\Default] None
G0 - GCSP: Preference [User Data\Default][HomePage] http://www.google.com
G0 - GCSP: Preference [User Data\Default] http://www.google.com
G2 - GCE: Preference [User Data\Default] [dlnembnfbcpjnepmfjmngjenhhajpdfd] Web Assistant v.2.0.0.442 (Activé)
G2 - GCE: Preference [User Data\Default] [jeaihkehdlhkocphopopahkfjcfcphef] Smart Display v.1.1 (Activé)
~ Scan Google Browser in 00mn 00s
---\\
C:\Users\ergothérapie\AppData\Roaming\Mozilla\Firefox\Profiles\3q78x2ul.default\prefs.js
C:\Users\ergothérapie\AppData\Roaming\Mozilla\Firefox\Profiles\3q78x2ul.default\user.js
M3 - MFPP: Plugins - [ergothérapie] -- C:\Program Files (x86)\Mozilla FireFox\searchplugins\amazon-france.xml
M3 - MFPP: Plugins - [ergothérapie] -- C:\Program Files (x86)\Mozilla FireFox\searchplugins\bing.xml
M3 - MFPP: Plugins - [ergothérapie] -- C:\Program Files (x86)\Mozilla FireFox\searchplugins\cnrtl-tlfi-fr.xml
M3 - MFPP: Plugins - [ergothérapie] -- C:\Program Files (x86)\Mozilla FireFox\searchplugins\eBay-france.xml
M3 - MFPP: Plugins - [ergothérapie] -- C:\Program Files (x86)\Mozilla FireFox\searchplugins\google.xml
M3 - MFPP: Plugins - [ergothérapie] -- C:\Program Files (x86)\Mozilla FireFox\searchplugins\wikipedia-fr.xml
M3 - MFPP: Plugins - [ergothérapie] -- C:\Program Files (x86)\Mozilla FireFox\searchplugins\yahoo-france.xml
M3 - MFPP: Plugins - [ergothérapie] -- C:\Program Files (x86)\Mozilla FireFox\searchplugins\yahoo.xml
M0 - MFSP: prefs.js [ergothérapie - 3q78x2ul.default] http://mystart.incredibar.com
M2 - MFEP: prefs.js [ergothérapie - 3q78x2ul.default\ffxtlbr@incredibar.com] [] incredibar.com v1.5.0 (.incredibar.com.)
M2 - MFEP: prefs.js [ergothérapie - 3q78x2ul.default\{9b53772a-8259-495d-a6b2-fa5966fe52e1}] [] Video Clip Grab Community Toolbar v3.14.1.0 (.Conduit Ltd..)
~ Scan Firefox Browser in 00mn 00s
---\\
R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://mystart.incredibar.com
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ts.fujitsu.com
R3 - URLSearchHook: (no name) [64Bits] - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (...) (No version) -- (.not file.)
R3 - URLSearchHook: (no name) [64Bits] - {B922D405-6D13-4A2B-AE89-08A030DA4402} . (...) (No version) -- (.not file.)
R3 - URLSearchHook: (no name) [64Bits] - {9b53772a-8259-495d-a6b2-fa5966fe52e1} . (...) (No version) -- (.not file.)
~ Scan IE Browser in 00mn 00s
---\\
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll
~ Scan Proxy management in 00mn 00s
---\\
~ Le fichier hosts est sain (The hosts file is clean).
~ Scan Hosts File in 00mn 00s
~ Nombre de lignes (Lines number): 0
---\\
O4 - HKCU\..\Run: [swg] . (.Google Inc. - GoogleToolbarNotifier.) -- C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [Touch Quick Launch Panel] . (.Fujitsu - Touch Quick Launch Panel.) -- C:\Program Files (x86)\Fujitsu\TouchQuickLaunchPanel\TouchLauncher.exe
O4 - HKCU\..\Run: [Rainlendar2] . (. - Rainlendar2.) -- C:\Program Files (x86)\Rainlendar2\Rainlendar2.exe
O4 - HKCU\..\Run: [Gadwin PrintScreen] . (.Gadwin Systems, Inc - Gadwin PrintScreen.) -- C:\Program Files (x86)\Gadwin Systems\PrintScreen\PrintScreen.exe
~ Scan Application in 00mn 00s
---\\
O4 - Global Startup: C:\Users\ergothérapie\Desktop\Gadwin PrintScreen.lnk . (.Gadwin Systems, Inc.) -- C:\Program Files (x86)\Gadwin Systems\PrintScreen\PrintScreen.exe
O4 - Global Startup: C:\Users\ergothérapie\Desktop\Tap'Touche 4.0.lnk . (.De Marque Inc..) -- C:\Program Files (x86)\Tap'Touche 4\TTouche.exe
O4 - Global Startup: C:\Users\ergothérapie\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk . (.Google Inc..) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
O4 - Global Startup: C:\Users\ergothérapie\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk . (.Microsoft Corporation.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
O4 - Global Startup: C:\Users\ergothérapie\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Mozilla Thunderbird.lnk . (.Mozilla Messaging.) -- C:\Program Files (x86)\Mozilla Thunderbird\thunderbird.exe
~ Scan Global Startup in 00mn 00s
---\\
O8 - Extra context menu item: Envoyer au périphérique &Bluetooth... . (...) -- C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O8 - Extra context menu item: Envoyer l'&image au périphérique Bluetooth... . (...) -- C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
~ Scan IE Menu Contextuel in 00mn 00s
---\\
O24 - Default MHTML Editor: Last - .(...) - (.not file.)
~ Scan Desktop Component in 00mn 00s
---\\
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\Adobe Flash Player Updater.job
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\SoftwareUpdateTaskMachineCore.job
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\SoftwareUpdateTaskMachineUA.job
[MD5.00000000000000000000000000000000] [APT] [{16D6C2CE-B68E-43E7-93DF-32E9488FB4DB}] (...) -- C:\Users\ergothérapie\Downloads\ZHPDiag2(1).exe (.not file.)
[MD5.D3C0837346C49095B8AF9EF54AD7E90A] [APT] [{762DA78A-582F-4B22-B875-A257800473A2}] (.Mozilla Corporation.) -- c:\program files (x86)\mozilla firefox\firefox.exe
[MD5.FDA6B888126372205BA642775AEB486E] [APT] [Norton Error Analyzer 18.7.2.3] (.Symantec Corporation.) -- C:\Program Files (x86)\Norton Internet Security\Engine\18.7.2.3\SymErr.exe
~ Scan Scheduled Task in 00mn 01s
---\\ (None)
---\\
O43 - CFD: 03/04/2012 - 10:02:49 - [109,775] ----D C:\Program Files (x86)\Adobe
O43 - CFD: 02/07/2012 - 11:32:09 - [0,755] ----D C:\Program Files (x86)\Application Updater
O43 - CFD: 02/02/2012 - 11:39:00 - [165,396] ----D C:\Program Files (x86)\Avira
O43 - CFD: 09/06/2012 - 00:27:49 - [1,179] ----D C:\Program Files (x86)\Boxore
O43 - CFD: 25/11/2011 - 23:45:33 - [6,384] ----D C:\Program Files (x86)\Cisco
O43 - CFD: 24/06/2012 - 18:57:36 - [44,118] ----D C:\Program Files (x86)\ClipGrab
O43 - CFD: 02/07/2012 - 11:32:07 - [220,008] ----D C:\Program Files (x86)\Common Files
O43 - CFD: 05/01/2012 - 11:34:38 - [0,609] ----D C:\Program Files (x86)\Conduit
O43 - CFD: 25/11/2011 - 16:06:29 - [122,984] ----D C:\Program Files (x86)\CyberLink
O43 - CFD: 25/11/2011 - 16:04:13 - [0,177] ----D C:\Program Files (x86)\eBay
O43 - CFD: 05/12/2011 - 18:18:56 - [10,152] ----D C:\Program Files (x86)\Free Devis Factures
O43 - CFD: 18/05/2011 - 20:05:39 - [12,506] ----D C:\Program Files (x86)\Fujitsu
O43 - CFD: 04/07/2012 - 14:34:52 - [3,490] ----D C:\Program Files (x86)\Gadwin Systems
O43 - CFD: 07/07/2012 - 10:05:58 - [318,243] ----D C:\Program Files (x86)\Google
O43 - CFD: 09/06/2012 - 00:07:18 - [2,014] ----D C:\Program Files (x86)\Incredibar.com
O43 - CFD: 25/11/2011 - 16:06:31 - [113,860] --H-D C:\Program Files (x86)\InstallShield Installation Information
O43 - CFD: 25/11/2011 - 23:45:08 - [13,190] ----D C:\Program Files (x86)\Intel
O43 - CFD: 25/11/2011 - 16:07:15 - [71,084] ----D C:\Program Files (x86)\Intel Corporation
O43 - CFD: 12/07/2012 - 08:49:34 - [5,795] ----D C:\Program Files (x86)\Internet Explorer
O43 - CFD: 25/11/2011 - 17:51:23 - [86,366] ----D C:\Program Files (x86)\Java
O43 - CFD: 25/11/2011 - 17:53:02 - [15,541] ----D C:\Program Files (x86)\JRE
O43 - CFD: 05/12/2011 - 18:20:34 - [9,439] ----D C:\Program Files (x86)\McAfee Security Scan
O43 - CFD: 25/11/2011 - 17:58:46 - [35,324] ----D C:\Program Files (x86)\Microsoft Office
O43 - CFD: 26/04/2012 - 10:47:58 - [1,126] ----D C:\Program Files (x86)\Microsoft Security Client
O43 - CFD: 16/05/2012 - 14:18:05 - [40,838] ----D C:\Program Files (x86)\Microsoft Silverlight
O43 - CFD: 18/05/2011 - 20:12:18 - [1,745] ----D C:\Program Files (x86)\Microsoft SQL Server Compact Edition
O43 - CFD: 29/12/2011 - 13:28:31 - [315,516] ----D C:\Program Files (x86)\Microsoft Touch Pack for Windows 7
O43 - CFD: 12/12/2011 - 19:28:17 - [5,405] ----D C:\Program Files (x86)\Microsoft XNA
O43 - CFD: 18/05/2011 - 19:52:20 - [0,023] ----D C:\Program Files (x86)\Microsoft.NET
O43 - CFD: 24/06/2012 - 19:32:27 - [41,597] ----D C:\Program Files (x86)\Mozilla Firefox
O43 - CFD: 25/06/2012 - 09:08:31 - [0,195] ----D C:\Program Files (x86)\Mozilla Maintenance Service
O43 - CFD: 04/07/2012 - 16:17:10 - [40,543] ----D C:\Program Files (x86)\Mozilla Thunderbird
O43 - CFD: 14/07/2009 - 07:32:38 - [0,025] ----D C:\Program Files (x86)\MSBuild
O43 - CFD: 25/11/2011 - 17:58:29 - [26,600] ----D C:\Program Files (x86)\MSECache
O43 - CFD: 18/05/2011 - 20:06:22 - [190,856] ----D C:\Program Files (x86)\Norton Internet Security
O43 - CFD: 18/05/2011 - 20:05:58 - [23,713] ----D C:\Program Files (x86)\NortonInstaller
O43 - CFD: 18/05/2011 - 19:47:46 - [4,334] ----D C:\Program Files (x86)\O2Micro
O43 - CFD: 18/05/2011 - 19:48:36 - [1,535] ----D C:\Program Files (x86)\O2Micro OZ776 SCR Driver
O43 - CFD: 25/11/2011 - 17:53:01 - [370,139] ----D C:\Program Files (x86)\OpenOffice.org 3
O43 - CFD: 14/12/2011 - 13:53:50 - [31,314] ----D C:\Program Files (x86)\PDFCreator
O43 - CFD: 02/07/2012 - 11:32:08 - [1,327] ----D C:\Program Files (x86)\pdfforge Toolbar
O43 - CFD: 04/07/2012 - 14:29:19 - [20,827] ----D C:\Program Files (x86)\Rainlendar2
O43 - CFD: 18/05/2011 - 19:44:01 - [3,205] ----D C:\Program Files (x86)\Realtek
O43 - CFD: 14/07/2009 - 07:32:38 - [45,547] ----D C:\Program Files (x86)\Reference Assemblies
O43 - CFD: 25/11/2011 - 16:02:20 - [0,984] ----D C:\Program Files (x86)\Renesas Electronics
O43 - CFD: 26/11/2011 - 22:33:41 - [31,089] R---D C:\Program Files (x86)\Skype
O43 - CFD: 09/06/2012 - 00:27:32 - [2,993] ----D C:\Program Files (x86)\Software
O43 - CFD: 22/06/2012 - 14:51:46 - [199,637] ----D C:\Program Files (x86)\Tap'Touche 4
O43 - CFD: 07/07/2012 - 10:23:01 - [45,787] ----D C:\Program Files (x86)\Tap'Touche Garfield
O43 - CFD: 18/05/2011 - 19:44:26 - [0] --H-D C:\Program Files (x86)\Temp
O43 - CFD: 09/06/2012 - 00:06:31 - [10,206] ----D C:\Program Files (x86)\Tux4kids
O43 - CFD: 09/06/2012 - 00:02:07 - [29,328] ----D C:\Program Files (x86)\TuxType
O43 - CFD: 14/07/2009 - 06:57:06 - [0] --H-D C:\Program Files (x86)\Uninstall Information
O43 - CFD: 25/11/2011 - 18:00:44 - [78,849] ----D C:\Program Files (x86)\VideoLAN
O43 - CFD: 24/06/2012 - 18:57:46 - [4,965] ----D C:\Program Files (x86)\Video_Clip_Grab
O43 - CFD: 12/12/2011 - 19:31:21 - [13,812] ----D C:\Program Files (x86)\Virtual Earth 3D
O43 - CFD: 11/04/2011 - 20:14:11 - [0,775] ----D C:\Program Files (x86)\Windows Defender
O43 - CFD: 18/05/2011 - 20:12:55 - [228,964] ----D C:\Program Files (x86)\Windows Live
O43 - CFD: 11/04/2011 - 20:14:11 - [8,577] ----D C:\Program Files (x86)\Windows Mail
O43 - CFD: 11/04/2011 - 20:14:11 - [5,266] ----D C:\Program Files (x86)\Windows Media Player
O43 - CFD: 14/07/2009 - 07:32:38 - [12,325] ----D C:\Program Files (x86)\Windows NT
O43 - CFD: 11/04/2011 - 20:14:11 - [4,484] ----D C:\Program Files (x86)\Windows Photo Viewer
O43 - CFD: 21/11/2010 - 05:31:38 - [0,181] ----D C:\Program Files (x86)\Windows Portable Devices
O43 - CFD: 11/04/2011 - 20:14:11 - [10,166] ----D C:\Program Files (x86)\Windows Sidebar
O43 - CFD: 12/07/2012 - 11:43:54 - [12,855] ----D C:\Program Files (x86)\ZHPDiag
O43 - CFD: 03/04/2012 - 10:02:53 - [6,178] ----D C:\Program Files (x86)\Common Files\Adobe
O43 - CFD: 18/05/2011 - 19:43:58 - [2,009] ----D C:\Program Files (x86)\Common Files\InstallShield
O43 - CFD: 18/05/2011 - 19:40:11 - [13,589] ----D C:\Program Files (x86)\Common Files\Intel
O43 - CFD: 25/11/2011 - 16:07:16 - [68,636] ----D C:\Program Files (x86)\Common Files\Intel Corporation
O43 - CFD: 25/11/2011 - 17:51:42 - [1,175] ----D C:\Program Files (x86)\Common Files\Java
O43 - CFD: 12/12/2011 - 19:28:18 - [58,796] ----D C:\Program Files (x86)\Common Files\microsoft shared
O43 - CFD: 25/11/2011 - 23:45:18 - [0,155] ----D C:\Program Files (x86)\Common Files\postureAgent
O43 - CFD: 14/07/2009 - 05:20:08 - [0,003] ----D C:\Program Files (x86)\Common Files\Services
O43 - CFD: 25/11/2011 - 23:47:26 - [6,019] ----D C:\Program Files (x86)\Common Files\SNP2UVC
O43 - CFD: 14/07/2009 - 05:20:08 - [39,212] ----D C:\Program Files (x86)\Common Files\SpeechEngines
O43 - CFD: 02/07/2012 - 11:32:07 - [12,399] ----D C:\Program Files (x86)\Common Files\Spigot
O43 - CFD: 26/11/2011 - 22:33:35 - [0,593] ----D C:\Program Files (x86)\Common Files\Symantec Shared
O43 - CFD: 25/11/2011 - 17:19:18 - [11,245] ----D C:\Program Files (x86)\Common Files\System
O43 - CFD: 18/05/2011 - 20:08:50 - [0] ----D C:\Program Files (x86)\Common Files\Windows Live
O43 - CFD: 03/04/2012 - 10:02:58 - [136,586] ----D C:\ProgramData\Adobe
O43 - CFD: 14/07/2009 - 07:08:56 - [0] --H-D C:\ProgramData\Application Data
O43 - CFD: 12/12/2011 - 19:31:55 - [206,608] ----D C:\ProgramData\Applications
O43 - CFD: 02/02/2012 - 11:39:00 - [67,922] ----D C:\ProgramData\Avira
O43 - CFD: 14/07/2009 - 07:08:56 - [0] --H-D C:\ProgramData\Desktop
O43 - CFD: 14/07/2009 - 07:08:56 - [0] --H-D C:\ProgramData\Documents
O43 - CFD: 14/07/2009 - 07:08:56 - [0] --H-D C:\ProgramData\Favorites
O43 - CFD: 15/12/2011 - 10:40:29 - [2,339] ----D C:\ProgramData\Free Devis Factures
O43 - CFD: 25/11/2011 - 16:05:19 - [0,001] ----D C:\ProgramData\Fujitsu
O43 - CFD: 25/11/2011 - 15:57:21 - [0,514] ----D C:\ProgramData\Google
O43 - CFD: 25/11/2011 - 16:07:15 - [0,011] ----D C:\ProgramData\Intel
O43 - CFD: 07/07/2012 - 10:08:07 - [5,476] ----D C:\ProgramData\LDM
O43 - CFD: 25/11/2011 - 18:20:44 - [0,335] ----D C:\ProgramData\McAfee
O43 - CFD: 25/11/2011 - 18:20:44 - [0,001] ----D C:\ProgramData\McAfee Security Scan
O43 - CFD: 25/11/2011 - 18:01:47 - [467,365] -S--D C:\ProgramData\Microsoft
O43 - CFD: 08/05/2012 - 16:46:01 - [0,004] ----D C:\ProgramData\Mozilla
O43 - CFD: 25/11/2011 - 15:57:44 - [1303,489] ----D C:\ProgramData\Norton
O43 - CFD: 18/05/2011 - 20:05:58 - [1,509] ----D C:\ProgramData\NortonInstaller
O43 - CFD: 29/12/2011 - 20:02:18 - [0,001] ----D C:\ProgramData\Partner
O43 - CFD: 25/11/2011 - 23:46:09 - [0] ----D C:\ProgramData\Roaming
O43 - CFD: 26/11/2011 - 22:33:16 - [24,242] ----D C:\ProgramData\Skype
O43 - CFD: 14/07/2009 - 07:08:56 - [0] --H-D C:\ProgramData\Start Menu
O43 - CFD: 25/11/2011 - 17:51:42 - [0,000] ----D C:\ProgramData\Sun
O43 - CFD: 25/11/2011 - 16:05:38 - [0,086] ----D C:\ProgramData\Temp
O43 - CFD: 14/07/2009 - 07:08:56 - [0] --H-D C:\ProgramData\Templates
O43 - CFD: 25/11/2011 - 18:22:04 - [2,018] ----D C:\Users\ergothérapie\AppData\Roaming\Adobe
O43 - CFD: 18/05/2011 - 20:51:05 - [0,000] ----D C:\Users\ergothérapie\AppData\Roaming\Fujitsu
O43 - CFD: 25/11/2011 - 16:09:47 - [2,456] ----D C:\Users\ergothérapie\AppData\Roaming\Fujitsu Launch Center
O43 - CFD: 25/11/2011 - 16:38:22 - [0] ----D C:\Users\ergothérapie\AppData\Roaming\Google
O43 - CFD: 21/11/2010 - 04:51:08 - [0] ----D C:\Users\ergothérapie\AppData\Roaming\Identities
O43 - CFD: 25/11/2011 - 23:46:36 - [0,001] ----D C:\Users\ergothérapie\AppData\Roaming\Intel
O43 - CFD: 25/11/2011 - 18:22:04 - [0,036] ----D C:\Users\ergothérapie\AppData\Roaming\Macromedia
O43 - CFD: 07/07/2012 - 00:09:20 - [7,079] -S--D C:\Users\ergothérapie\AppData\Roaming\Microsoft
O43 - CFD: 25/11/2011 - 18:13:53 - [27,204] ----D C:\Users\ergothérapie\AppData\Roaming\Mozilla
O43 - CFD: 25/11/2011 - 17:54:50 - [5,027] ----D C:\Users\ergothérapie\AppData\Roaming\OpenOffice.org
O43 - CFD: 14/12/2011 - 13:47:28 - [0,001] ----D C:\Users\ergothérapie\AppData\Roaming\pdfforge
O43 - CFD: 07/06/2012 - 23:31:40 - [3,806] ----D C:\Users\ergothérapie\AppData\Roaming\Skype
O43 - CFD: 25/11/2011 - 18:28:43 - [962,366] ----D C:\Users\ergothérapie\AppData\Roaming\Thunderbird
O43 - CFD: 04/07/2012 - 14:46:26 - [0] ----D C:\Users\ergothérapie\AppData\Roaming\TuxType
O43 - CFD: 24/06/2012 - 17:00:11 - [1,041] ----D C:\Users\ergothérapie\AppData\Roaming\vlc
O43 - CFD: 30/12/2011 - 17:50:37 - [0] ----D C:\Users\ergothérapie\AppData\Roaming\Windows Live Writer
O43 - CFD: 26/11/2011 - 13:05:14 - [0,065] ----D C:\Users\ergothérapie\AppData\Roaming\WTablet
O43 - CFD: 03/04/2012 - 10:02:26 - [0,079] ----D C:\Users\ergothérapie\AppData\Local\Adobe
O43 - CFD: 25/11/2011 - 15:57:29 - [0] ----D C:\Users\ergothérapie\AppData\Local\Application Data
O43 - CFD: 25/11/2011 - 16:01:48 - [0] ----D C:\Users\ergothérapie\AppData\Local\Broadcom
O43 - CFD: 05/01/2012 - 11:34:34 - [0,063] ----D C:\Users\ergothérapie\AppData\Local\Conduit
O43 - CFD: 07/07/2012 - 10:10:03 - [15,339] ----D C:\Users\ergothérapie\AppData\Local\CrashDumps
O43 - CFD: 05/12/2011 - 16:53:39 - [1,701] ----D C:\Users\ergothérapie\AppData\Local\Diagnostics
O43 - CFD: 29/12/2011 - 12:59:48 - [0,005] ----D C:\Users\ergothérapie\AppData\Local\Fujitsu
O43 - CFD: 07/07/2012 - 10:06:52 - [7,414] ----D C:\Users\ergothérapie\AppData\Local\Google
O43 - CFD: 25/11/2011 - 15:57:29 - [0] ----D C:\Users\ergothérapie\AppData\Local\Historique
O43 - CFD: 12/12/2011 - 19:25:35 - [0] ----D C:\Users\ergothérapie\AppData\Local\Intel WiDi
O43 - CFD: 12/12/2011 - 19:31:36 - [0,002] ----D C:\Users\ergothérapie\AppData\Local\IsolatedStorage
O43 - CFD: 07/07/2012 - 00:09:20 - [0] ----D C:\Users\ergothérapie\AppData\Local\Macromedia
O43 - CFD: 07/07/2012 - 00:09:20 - [138,291] ----D C:\Users\ergothérapie\AppData\Local\Microsoft
O43 - CFD: 13/12/2011 - 17:53:55 - [0,001] ----D C:\Users\ergothérapie\AppData\Local\Microsoft Games
O43 - CFD: 13/12/2011 - 18:09:17 - [0,178] ----D C:\Users\ergothérapie\AppData\Local\MigWiz
O43 - CFD: 25/11/2011 - 18:13:42 - [782,185] ----D C:\Users\ergothérapie\AppData\Local\Mozilla
O43 - CFD: 07/07/2012 - 10:00:15 - [0,003] ----D C:\Users\ergothérapie\AppData\Local\Nexway
O43 - CFD: 09/06/2012 - 00:27:31 - [0] ----D C:\Users\ergothérapie\AppData\Local\Software
O43 - CFD: 12/07/2012 - 11:44:02 - [242,888] ----D C:\Users\ergothérapie\AppData\Local\Temp
O43 - CFD: 25/11/2011 - 15:57:29 - [0] ----D C:\Users\ergothérapie\AppData\Local\Temporary Internet Files
O43 - CFD: 26/11/2011 - 21:38:52 - [46,757] ----D C:\Users\ergothérapie\AppData\Local\Thunderbird
O43 - CFD: 05/12/2011 - 18:27:43 - [0,111] ----D C:\Users\ergothérapie\AppData\Local\VirtualStore
O43 - CFD: 04/06/2012 - 15:09:13 - [0,082] ----D C:\Users\ergothérapie\AppData\Local\Windows Live
O43 - CFD: 30/12/2011 - 17:50:42 - [0,620] ----D C:\Users\ergothérapie\AppData\Local\Windows Live Writer
O43 - CFD: 02/04/2012 - 11:53:09 - [0] ----D C:\Users\ergothérapie\AppData\Local\{0004BF3F-77AC-46FE-9B54-E02277A291F4}
O43 - CFD: 29/12/2011 - 13:25:57 - [0] ----D C:\Users\ergothérapie\AppData\Local\{06650EB6-0C70-47DB-9B4F-34FEA98D4AA6}
O43 - CFD: 30/12/2011 - 17:48:25 - [0] ----D C:\Users\ergothérapie\AppData\Local\{0CC3DC8E-EBB1-4997-9A0D-9700224895B1}
O43 - CFD: 07/12/2011 - 17:04:42 - [0] ----D C:\Users\ergothérapie\AppData\Local\{11A4D1F9-5130-4A75-B2E5-4467A2AA216C}
O43 - CFD: 24/05/2012 - 17:17:03 - [0] ----D C:\Users\ergothérapie\AppData\Local\{14494B1C-FFA8-4383-BC41-8F2400679075}
O43 - CFD: 09/05/2012 - 15:14:58 - [0] ----D C:\Users\ergothérapie\AppData\Local\{1B22D86B-5ECB-4E73-A577-4D4A3BE3B9C9}
O43 - CFD: 30/12/2011 - 17:15:03 - [0] ----D C:\Users\ergothérapie\AppData\Local\{26FBE4E8-93B5-4553-A0BA-21519DAB30B2}
O43 - CFD: 29/12/2011 - 13:08:21 - [0] ----D C:\Users\ergothérapie\AppData\Local\{2996D1D8-7052-45D3-9821-EBB9A6DA3B9D}
O43 - CFD: 31/05/2012 - 17:49:34 - [0] ----D C:\Users\ergothérapie\AppData\Local\{33265B56-225D-4654-89F6-3BB911476733}
O43 - CFD: 09/05/2012 - 15:23:32 - [0] ----D C:\Users\ergothérapie\AppData\Local\{432AA1DF-B5F6-456A-9D4D-692AAEF3A45B}
O43 - CFD: 19/04/2012 - 13:56:34 - [0] ----D C:\Users\ergothérapie\AppData\Local\{444482FE-32B5-4372-922D-F38A8A736CBB}
O43 - CFD: 03/01/2012 - 16:07:20 - [0] ----D C:\Users\ergothérapie\AppData\Local\{4DFCE65C-E1CB-47C1-9BD0-B889BAB9A99F}
O43 - CFD: 22/04/2012 - 16:31:04 - [0] ----D C:\Users\ergothérapie\AppData\Local\{52A53BF4-BA0B-4D57-A350-CC01B44C67E5}
O43 - CFD: 30/12/2011 - 17:11:01 - [0] ----D C:\Users\ergothérapie\AppData\Local\{57DFFA32-41A9-4B2D-9431-8B4A51179284}
O43 - CFD: 18/05/2012 - 11:43:55 - [0] ----D C:\Users\ergothérapie\AppData\Local\{596879C0-090D-458A-8F89-3ADF9565B8D7}
O43 - CFD: 19/04/2012 - 13:56:51 - [0] ----D C:\Users\ergothérapie\AppData\Local\{5E27755C-BFB9-4D11-878D-4E6BB762A688}
O43 - CFD: 09/05/2012 - 15:09:17 - [0] ----D C:\Users\ergothérapie\AppData\Local\{5F1F81C8-019A-43A3-B577-F8EF4B54C08D}
O43 - CFD: 18/05/2012 - 22:04:46 - [0] ----D C:\Users\ergothérapie\AppData\Local\{67D9A7E8-4E3B-4371-96D2-13FB9F39E39E}
O43 - CFD: 09/05/2012 - 15:05:03 - [0] ----D C:\Users\ergothérapie\AppData\Local\{6F033282-2355-4E85-8647-86515F3C2ACA}
O43 - CFD: 18/05/2012 - 22:16:45 - [0] ----D C:\Users\ergothérapie\AppData\Local\{759AFA47-CAAA-4936-9BD8-E91F00DA10DE}
O43 - CFD: 22/06/2012 - 15:39:14 - [0] ----D C:\Users\ergothérapie\AppData\Local\{782612B3-A4A5-4845-BCCD-07F8C71B9411}
O43 - CFD: 23/05/2012 - 14:25:21 - [0] ----D C:\Users\ergothérapie\AppData\Local\{7DF06A8C-A4BB-410D-9DC1-D8FEBB2D1D76}
O43 - CFD: 29/12/2011 - 13:08:20 - [0] ----D C:\Users\ergothérapie\AppData\Local\{7F8B282D-DC8E-4E92-870A-8AE0EC0944B2}
O43 - CFD: 28/06/2012 - 16:23:56 - [0] ----D C:\Users\ergothérapie\AppData\Local\{8ABA8737-60BF-41C0-AE2A-0C134ED4F956}
O43 - CFD: 22/05/2012 - 17:58:56 - [0] ----D C:\Users\ergothérapie\AppData\Local\{8D517677-3D0D-4099-AEEB-FB604340AE91}
O43 - CFD: 30/12/2011 - 18:52:43 - [0] ----D C:\Users\ergothérapie\AppData\Local\{8EC88D11-73E5-45D0-A809-252ED0BCDB49}
O43 - CFD: 09/05/2012 - 15:05:03 - [0] ----D C:\Users\ergothérapie\AppData\Local\{9E32EFDC-4C49-43A5-A628-4E15266B39AC}
O43 - CFD: 23/05/2012 - 14:30:04 - [0] ----D C:\Users\ergothérapie\AppData\Local\{A08FD104-EF57-4646-80AD-628334758291}
O43 - CFD: 22/05/2012 - 17:52:01 - [0] ----D C:\Users\ergothérapie\AppData\Local\{A38CFE55-918A-4C5C-89FF-AB1599F346F6}
O43 - CFD: 02/07/2012 - 22:16:47 - [0] ----D C:\Users\ergothérapie\AppData\Local\{BE9E8D9C-D244-4795-8F30-7981B8333028}
O43 - CFD: 29/12/2011 - 12:57:16 - [0] ----D C:\Users\ergothérapie\AppData\Local\{C265AE91-6536-440D-B08D-8A569BB0D481}
O43 - CFD: 18/05/2012 - 22:28:42 - [0] ----D C:\Users\ergothérapie\AppData\Local\{C3F0C169-8360-4B43-B77B-C3952F27B847}
O43 - CFD: 29/12/2011 - 12:57:05 - [0] ----D C:\Users\ergothérapie\AppData\Local\{D17AEA68-334C-49D8-A29C-09F596CF9990}
O43 - CFD: 29/12/2011 - 13:15:22 - [0] ----D C:\Users\ergothérapie\AppData\Local\{D953BF89-9EA7-4F64-BDA7-EF3E67A60722}
O43 - CFD: 09/05/2012 - 15:07:00 - [0] ----D C:\Users\ergothérapie\AppData\Local\{DBB8B243-ACB6-41B6-97E9-0D8F64B00363}
O43 - CFD: 30/05/2012 - 16:21:37 - [0] ----D C:\Users\ergothérapie\AppData\Local\{E92BE09E-ED87-40C1-86D0-8D9F9E53E2C0}
O43 - CFD: 22/04/2012 - 16:31:03 - [0] ----D C:\Users\ergothérapie\AppData\Local\{ED452EA7-3104-4BA1-A4F2-885280B06B10}
O43 - CFD: 30/12/2011 - 18:52:42 - [0] ----D C:\Users\ergothérapie\AppData\Local\{EDE71F73-3DB1-455F-8DDA-6FE3894C61D9}
O43 - CFD: 03/01/2012 - 16:10:40 - [0] ----D C:\Users\ergothérapie\AppData\Local\{EF124C0E-7FC0-4074-A3F8-7BD5541E7FAF}
O43 - CFD: 29/12/2011 - 13:15:21 - [0] ----D C:\Users\ergothérapie\AppData\Local\{F1EF153A-7F4D-4B36-8323-757916E54431}
O43 - CFD: 31/05/2012 - 17:49:34 - [0] ----D C:\Users\ergothérapie\AppData\Local\{F502AB7F-0840-408F-9B73-E39EE9D1DEB4}
O43 - CFD: 08/12/2011 - 14:18:39 - [0] ----D C:\Users\ergothérapie\AppData\Local\{F562A15A-A38E-4911-ADDF-2D6894747340}
O43 - CFD: 22/05/2012 - 17:45:40 - [0] ----D C:\Users\ergothérapie\AppData\Local\{FFB3912B-BBD9-44E2-BDDF-1CCDFCC25A19}
O43 - CFD: 14/07/2009 - 06:54:32 - [0,014] R---D C:\Users\ergothérapie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
O43 - CFD: 12/07/2012 - 08:59:37 - [0,000] R---D C:\Users\ergothérapie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
O43 - CFD: 25/11/2011 - 16:06:31 - [0,007] ----D C:\Users\ergothérapie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CyberLink YouCam
O43 - CFD: 04/07/2012 - 14:34:53 - [0] ----D C:\Users\ergothérapie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Gadwin Systems
O43 - CFD: 14/07/2009 - 06:49:38 - [0,001] R---D C:\Users\ergothérapie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
O43 - CFD: 12/07/2012 - 11:38:48 - [0,002] R---D C:\Users\ergothérapie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
O43 - CFD: 09/06/2012 - 00:06:42 - [0] ----D C:\Users\ergothérapie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Tuxtype2
O43 - CFD: 03/04/2012 - 10:02:49 - [109,775] ----D C:\Program Files (x86)\Adobe
O43 - CFD: 02/07/2012 - 11:32:09 - [0,755] ----D C:\Program Files (x86)\Application Updater
O43 - CFD: 02/02/2012 - 11:39:00 - [165,396] ----D C:\Program Files (x86)\Avira
O43 - CFD: 09/06/2012 - 00:27:49 - [1,179] ----D C:\Program Files (x86)\Boxore
O43 - CFD: 25/11/2011 - 23:45:33 - [6,384] ----D C:\Program Files (x86)\Cisco
O43 - CFD: 24/06/2012 - 18:57:36 - [44,118] ----D C:\Program Files (x86)\ClipGrab
O43 - CFD: 02/07/2012 - 11:32:07 - [220,008] ----D C:\Program Files (x86)\Common Files
O43 - CFD: 05/01/2012 - 11:34:38 - [0,609] ----D C:\Program Files (x86)\Conduit
O43 - CFD: 25/11/2011 - 16:06:29 - [122,984] ----D C:\Program Files (x86)\CyberLink
O43 - CFD: 25/11/2011 - 16:04:13 - [0,177] ----D C:\Program Files (x86)\eBay
O43 - CFD: 05/12/2011 - 18:18:56 - [10,152] ----D C:\Program Files (x86)\Free Devis Factures
O43 - CFD: 18/05/2011 - 20:05:39 - [12,506] ----D C:\Program Files (x86)\Fujitsu
O43 - CFD: 04/07/2012 - 14:34:52 - [3,490] ----D C:\Program Files (x86)\Gadwin Systems
O43 - CFD: 07/07/2012 - 10:05:58 - [318,243] ----D C:\Program Files (x86)\Google
O43 - CFD: 09/06/2012 - 00:07:18 - [2,014] ----D C:\Program Files (x86)\Incredibar.com
O43 - CFD: 25/11/2011 - 16:06:31 - [113,860] --H-D C:\Program Files (x86)\InstallShield Installation Information
O43 - CFD: 25/11/2011 - 23:45:08 - [13,190] ----D C:\Program Files (x86)\Intel
O43 - CFD: 25/11/2011 - 16:07:15 - [71,084] ----D C:\Program Files (x86)\Intel Corporation
O43 - CFD: 12/07/2012 - 08:49:34 - [5,795] ----D C:\Program Files (x86)\Internet Explorer
O43 - CFD: 25/11/2011 - 17:51:23 - [86,366] ----D C:\Program Files (x86)\Java
O43 - CFD: 25/11/2011 - 17:53:02 - [15,541] ----D C:\Program Files (x86)\JRE
O43 - CFD: 05/12/2011 - 18:20:34 - [9,439] ----D C:\Program Files (x86)\McAfee Security Scan
O43 - CFD: 25/11/2011 - 17:58:46 - [35,324] ----D C:\Program Files (x86)\Microsoft Office
O43 - CFD: 26/04/2012 - 10:47:58 - [1,126] ----D C:\Program Files (x86)\Microsoft Security Client
O43 - CFD: 16/05/2012 - 14:18:05 - [40,838] ----D C:\Program Files (x86)\Microsoft Silverlight
O43 - CFD: 18/05/2011 - 20:12:18 - [1,745] ----D C:\Program Files (x86)\Microsoft SQL Server Compact Edition
O43 - CFD: 29/12/2011 - 13:28:31 - [315,516] ----D C:\Program Files (x86)\Microsoft Touch Pack for Windows 7
O43 - CFD: 12/12/2011 - 19:28:17 - [5,405] ----D C:\Program Files (x86)\Microsoft XNA
O43 - CFD: 18/05/2011 - 19:52:20 - [0,023] ----D C:\Program Files (x86)\Microsoft.NET
O43 - CFD: 24/06/2012 - 19:32:27 - [41,597] ----D C:\Program Files (x86)\Mozilla Firefox
O43 - CFD: 25/06/2012 - 09:08:31 - [0,195] ----D C:\Program Files (x86)\Mozilla Maintenance Service
O43 - CFD: 04/07/2012 - 16:17:10 - [40,543] ----D C:\Program Files (x86)\Mozilla Thunderbird
O43 - CFD: 14/07/2009 - 07:32:38 - [0,025] ----D C:\Program Files (x86)\MSBuild
O43 - CFD: 25/11/2011 - 17:58:29 - [26,600] ----D C:\Program Files (x86)\MSECache
O43 - CFD: 18/05/2011 - 20:06:22 - [190,856] ----D C:\Program Files (x86)\Norton Internet Security
O43 - CFD: 18/05/2011 - 20:05:58 - [23,713] ----D C:\Program Files (x86)\NortonInstaller
O43 - CFD: 18/05/2011 - 19:47:46 - [4,334] ----D C:\Program Files (x86)\O2Micro
O43 - CFD: 18/05/2011 - 19:48:36 - [1,535] ----D C:\Program Files (x86)\O2Micro OZ776 SCR Driver
O43 - CFD: 25/11/2011 - 17:53:01 - [370,139] ----D C:\Program Files (x86)\OpenOffice.org 3
O43 - CFD: 14/12/2011 - 13:53:50 - [31,314] ----D C:\Program Files (x86)\PDFCreator
O43 - CFD: 02/07/2012 - 11:32:08 - [1,327] ----D C:\Program Files (x86)\pdfforge Toolbar
O43 - CFD: 04/07/2012 - 14:29:19 - [20,827] ----D C:\Program Files (x86)\Rainlendar2
O43 - CFD: 18/05/2011 - 19:44:01 - [3,205] ----D C:\Program Files (x86)\Realtek
O43 - CFD: 14/07/2009 - 07:32:38 - [45,547] ----D C:\Program Files (x86)\Reference Assemblies
O43 - CFD: 25/11/2011 - 16:02:20 - [0,984] ----D C:\Program Files (x86)\Renesas Electronics
O43 - CFD: 26/11/2011 - 22:33:41 - [31,089] R---D C:\Program Files (x86)\Skype
O43 - CFD: 09/06/2012 - 00:27:32 - [2,993] ----D C:\Program Files (x86)\Software
O43 - CFD: 22/06/2012 - 14:51:46 - [199,637] ----D C:\Program Files (x86)\Tap'Touche 4
O43 - CFD: 07/07/2012 - 10:23:01 - [45,787] ----D C:\Program Files (x86)\Tap'Touche Garfield
O43 - CFD: 18/05/2011 - 19:44:26 - [0] --H-D C:\Program Files (x86)\Temp
O43 - CFD: 09/06/2012 - 00:06:31 - [10,206] ----D C:\Program Files (x86)\Tux4kids
O43 - CFD: 09/06/2012 - 00:02:07 - [29,328] ----D C:\Program Files (x86)\TuxType
O43 - CFD: 14/07/2009 - 06:57:06 - [0] --H-D C:\Program Files (x86)\Uninstall Information
O43 - CFD: 25/11/2011 - 18:00:44 - [78,849] ----D C:\Program Files (x86)\VideoLAN
O43 - CFD: 24/06/2012 - 18:57:46 - [4,965] ----D C:\Program Files (x86)\Video_Clip_Grab
O43 - CFD: 12/12/2011 - 19:31:21 - [13,812] ----D C:\Program Files (x86)\Virtual Earth 3D
O43 - CFD: 11/04/2011 - 20:14:11 - [0,775] ----D C:\Program Files (x86)\Windows Defender
O43 - CFD: 18/05/2011 - 20:12:55 - [228,964] ----D C:\Program Files (x86)\Windows Live
O43 - CFD: 11/04/2011 - 20:14:11 - [8,577] ----D C:\Program Files (x86)\Windows Mail
O43 - CFD: 11/04/2011 - 20:14:11 - [5,266] ----D C:\Program Files (x86)\Windows Media Player
O43 - CFD: 14/07/2009 - 07:32:38 - [12,325] ----D C:\Program Files (x86)\Windows NT
O43 - CFD: 11/04/2011 - 20:14:11 - [4,484] ----D C:\Program Files (x86)\Windows Photo Viewer
O43 - CFD: 21/11/2010 - 05:31:38 - [0,181] ----D C:\Program Files (x86)\Windows Portable Devices
O43 - CFD: 11/04/2011 - 20:14:11 - [10,166] ----D C:\Program Files (x86)\Windows Sidebar
O43 - CFD: 12/07/2012 - 11:43:54 - [12,855] ----D C:\Program Files (x86)\ZHPDiag
O43 - CFD: 03/04/2012 - 10:02:53 - [6,178] ----D C:\Program Files (x86)\Common Files\Adobe
O43 - CFD: 18/05/2011 - 19:43:58 - [2,009] ----D C:\Program Files (x86)\Common Files\InstallShield
O43 - CFD: 18/05/2011 - 19:40:11 - [13,589] ----D C:\Program Files (x86)\Common Files\Intel
O43 - CFD: 25/11/2011 - 16:07:16 - [68,636] ----D C:\Program Files (x86)\Common Files\Intel Corporation
O43 - CFD: 25/11/2011 - 17:51:42 - [1,175] ----D C:\Program Files (x86)\Common Files\Java
O43 - CFD: 12/12/2011 - 19:28:18 - [58,796] ----D C:\Program Files (x86)\Common Files\microsoft shared
O43 - CFD: 25/11/2011 - 23:45:18 - [0,155] ----D C:\Program Files (x86)\Common Files\postureAgent
O43 - CFD: 14/07/2009 - 05:20:08 - [0,003] ----D C:\Program Files (x86)\Common Files\Services
O43 - CFD: 25/11/2011 - 23:47:26 - [6,019] ----D C:\Program Files (x86)\Common Files\SNP2UVC
O43 - CFD: 14/07/2009 - 05:20:08 - [39,212] ----D C:\Program Files (x86)\Common Files\SpeechEngines
O43 - CFD: 02/07/2012 - 11:32:07 - [12,399] ----D C:\Program Files (x86)\Common Files\Spigot
O43 - CFD: 26/11/2011 - 22:33:35 - [0,593] ----D C:\Program Files (x86)\Common Files\Symantec Shared
O43 - CFD: 25/11/2011 - 17:19:18 - [11,245] ----D C:\Program Files (x86)\Common Files\System
O43 - CFD: 18/05/2011 - 20:08:50 - [0] ----D C:\Program Files (x86)\Common Files\Windows Live
~ Scan Program Folder in 00mn 01s
---\\
O44 - LFC:[MD5.AD78A8A133C51705834CAFFBDE8EA39F] - 12/07/2012 - 10:46:55 ---A- . (...) -- C:\Windows\WindowsUpdate.log [2063658]
O44 - LFC:[MD5.AC6D96E8C7D01323DC94A35B39FB3E92] - 12/07/2012 - 10:46:36 -S-A- . (...) -- C:\Windows\bootstat.dat [67584]
O44 - LFC:[MD5.3F66B9E89DCDE65927D1B0CE258C0D24] - 12/07/2012 - 07:51:02 ---A- . (...) -- C:\Windows\SysNative\FNTCACHE.DAT [291440]
O44 - LFC:[MD5.D62AC614B75F290F5E9FF8934418FB24] - 12/07/2012 - 07:51:02 ---A- . (...) -- C:\Windows\setupact.log [77337]
O44 - LFC:[MD5.FF4FC41BCC1CA3901E514F79A27CA2AA] - 09/07/2012 - 10:03:01 ---A- . (...) -- C:\Windows\PFRO.log [20300]
O44 - LFC:[MD5.167700B0110F7DFDD3628C6098F24A70] - 05/07/2012 - 08:23:49 ---A- . (...) -- C:\Windows\SysNative\PerfStringBackup.INI [5165730]
O44 - LFC:[MD5.B67758CE097FE3D126787BB121A394F2] - 05/07/2012 - 08:23:49 ---A- . (...) -- C:\Windows\SysNative\perfc007.dat [148696]
O44 - LFC:[MD5.6782578C52BEFB33E1B5C2C4AF18B8E0] - 05/07/2012 - 08:23:49 ---A- . (...) -- C:\Windows\SysNative\perfc009.dat [122108]
O44 - LFC:[MD5.8C267583E9EE3418788BA22E9F924412] - 05/07/2012 - 08:23:49 ---A- . (...) -- C:\Windows\SysNative\perfc00A.dat [158238]
O44 - LFC:[MD5.6867C26B0A57746CB1C3AEE7E01AC117] - 05/07/2012 - 08:23:49 ---A- . (...) -- C:\Windows\SysNative\perfc00C.dat [149820]
O44 - LFC:[MD5.245ACCD0584C9DFC6CB4FACC7AE54491] - 05/07/2012 - 08:23:49 ---A- . (...) -- C:\Windows\SysNative\perfc010.dat [146702]
O44 - LFC:[MD5.0774687EE0B8E85A2B9C84A057BAF174] - 05/07/2012 - 08:23:49 ---A- . (...) -- C:\Windows\SysNative\perfc013.dat [152830]
O44 - LFC:[MD5.C3FA064A7ED00C026D59A4E9C711D4E5] - 05/07/2012 - 08:23:49 ---A- . (...) -- C:\Windows\SysNative\perfh007.dat [688668]
O44 - LFC:[MD5.C3C615946EF7C529662EE6056D07C465] - 05/07/2012 - 08:23:49 ---A- . (...) -- C:\Windows\SysNative\perfh009.dat [654276]
O44 - LFC:[MD5.05B0E4CE908CD9EF874DE0FF55CB4843] - 05/07/2012 - 08:23:49 ---A- . (...) -- C:\Windows\SysNative\perfh00A.dat [737228]
O44 - LFC:[MD5.5AE9F50ADDB60B99A8816CE499295E2C] - 05/07/2012 - 08:23:49 ---A- . (...) -- C:\Windows\SysNative\perfh00C.dat [747434]
O44 - LFC:[MD5.8ADB1E31EE32F397E39F3E807856530A] - 05/07/2012 - 08:23:49 ---A- . (...) -- C:\Windows\SysNative\perfh010.dat [731920]
O44 - LFC:[MD5.2DA85D9FE3D26AA41ECF743BCB6418AF] - 05/07/2012 - 08:23:49 ---A- . (...) -- C:\Windows\SysNative\perfh013.dat [735098]
O44 - LFC:[MD5.167700B0110F7DFDD3628C6098F24A70] - 05/07/2012 - 08:23:49 ---A- . (...) -- C:\Windows\System32\PerfStringBackup.INI [5165730]
O44 - LFC:[MD5.611E083B563A8C44072D252CE4CCFEFE] - 21/06/2012 - 13:55:49 ---A- . (.InstallShield Software Corporation - InstallShield® unInstaller.) -- C:\Windows\IsUn0c0c.exe [327168]
O44 - LFC:[MD5.53E83F1F6CF9D62F32801CF66D8352A8] - 01/05/2012 - 06:40:20 . (...) -- C:\Windows\System32\profsvc.dll [5165730]]
O44 - LFC:[MD5.6D5DCC1579B3961D791ABDE286A1CB5E] - 26/04/2012 - 06:41:56 . (...) -- C:\Windows\System32\rdpwsx.dll [5165730]]]]
O44 - LFC:[MD5.5B236296E233CAA6BF86BE0C6501A224] - 26/04/2012 - 06:41:55 . (...) -- C:\Windows\System32\rdpcorekmts.dll [5165730]]]
O44 - LFC:[MD5.85D6E8F735865B502D65D1D91A79E3F3] - 23/02/2010 - 09:16:17 . (...) -- C:\Windows\System32\browserchoice.exe []
O44 - LFC:[MD5.113E5B86AD397E6A9BF29B5DB2EFAF06] - 06/11/2001 - 08:35:02 R--A- . (...) -- C:\Windows\xobglu16.dll [63488]
O44 - LFC:[MD5.213139D0320FE0C880CDCE3E3053C318] - 06/11/2001 - 08:35:02 R--A- . (...) -- C:\Windows\xobglu32.dll [23552]
~ Scan Files in 00mn 08s
---\\ (None)
---\\
O51 - MPSK:{00ab9259-c031-11e1-9f29-60d819effc5c}\AutoRun\command. (...) -- D:\LaunchU3.exe (.not file.)
~ Scan Keys in 00mn 00s
---\\ (None)
---\\
O58 - SDL:[MD5.2F6B34B83843F0C5118B63AC634F5BF4] - 14/07/2009 - 02:52:21 ---A- . (.Adaptec, Inc. - Adaptec Windows SAS/SATA Storport Driver.) -- C:\Windows\System32\Drivers\adp94xx.sys [491088]
~ Scan Drivers in 00mn 00s
---\\
O67 - Shell Spawning: <.html> <FirefoxHTML>[HKCU\..\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe
O67 - Shell Spawning: <.html> <FirefoxHTML>[HKCR\..\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe
~ Scan Keys in 00mn 00s
---\\ (None)
---\\
O69 - SBI: prefs.js [ergothérapie - 3q78x2ul.default] user_pref("{336D0C35-8A85-403a-B9D2-65C292C39087}.ScriptData_WSG_whiteList", "{\"search.babylon.com\":\"q\",\"search.sweetim.com\"[...]
O69 - SBI: SearchScopes [HKCU] {69142F0E-8193-41E1-9845-658C2C2E12BA} [DefaultScope] - (Google) - http://www.google.com
O69 - SBI: SearchScopes [HKCU] {7D41850D-2051-45FE-B39B-198AFD9A1B67} - (Yahoo! Search) - http://fr.search.yahoo.com
O69 - SBI: SearchScopes [HKCU] {CFF4DB9B-135F-47c0-9269-B4C6572FD61A} - (MyStart Search) - http://mystart.incredibar.com
~ Scan Keys in 00mn 00s
---\\ (None)
---\\
[MD5.34481EC7655E7D3F9A0ADE75727CE1C9] [SPRF][20/02/2012] (...) -- C:\Users\ergothérapie\AppData\Local\Temp\00B1038E-CC5B-4774-9FFC-000065626596.dat [38420]
[MD5.C232AF8846B42C42FE98791AD331BC1D] [SPRF][26/03/2012] (...) -- C:\Users\ergothérapie\AppData\Local\Temp\01534F26-5D17-45F1-81AD-921924A178C7.dat [38761]
[MD5.6D83EFD87440F8F21AD21E08FAC1A0B7] [SPRF][10/05/2012] (...) -- C:\Users\ergothérapie\AppData\Local\Temp\0298241E-AB92-468E-975B-8FF5FCE730FD.dat [38087]
[MD5.581CFC79CE99FFB7ED8D65EEBABD642D] [SPRF][28/02/2012] (...) -- C:\Users\ergothérapie\AppData\Local\Temp\04241915-1170-40E5-8983-2A745ED9618B.dat [37993]
[MD5.06ACE8A43ED2C63CC0A44FA13B1B73A2] [SPRF][05/06/2012] (...) -- C:\Users\ergothérapie\AppData\Local\Temp\077CF879-1223-47B0-A526-2511E3AF347B.dat [42434]
[MD5.6921B703D794BED7C1C8F8CE74642EE2] [SPRF][27/02/2012] (...) -- C:\Users\ergothérapie\AppData\Local\Temp\07D2D7C3-B2C5-476A-8360-2910E266667E.dat [38420]
[MD5.B56807DD9900E2FEF804ED6E8C4A1966] [SPRF][09/05/2012] (...) -- C:\Users\ergothérapie\AppData\Local\Temp\0829D4A9-6DD6-49E6-AB93-104A21AF74D1.dat [38370]
[MD5.AA9CD90BDDF81D0A74AD2067F51E7156] [SPRF][28/02/2012] (...) -- C:\Users\ergothérapie\AppData\Local\Temp\08635976-4E44-4F69-BE7A-6D5AE1EC4222.dat [37993]
[MD5.8A8CA8CF5226D3F3EE97FA058C94A048] [SPRF][07/12/2011] (...) -- C:\Users\ergothérapie\AppData\Local\Temp\0907CA35-EE9C-493A-969E-7BB1B3997A88.dat [38478]
[MD5.2B4935297BCF34711FC4E2A16B204F56] [SPRF][16/04/2012] (...) -- C:\Users\ergothérapie\AppData\Local\Temp\096EBD63-EDF0-4E1F-B435-46C62C54139D.dat [39136]
[MD5.C563F4A2276D0588CB1C9A8E4FC53702] [SPRF][09/06/2012] (...) -- C:\Users\ergothérapie\AppData\Local\Temp\0A190ADA-81D3-4F06-8E09-40115F528609.dat [38087]
[MD5.E126EDDB1E58BBEF0BA1271C809E8D25] [SPRF][08/03/2012] (...) -- C:\Users\ergothérapie\AppData\Local\Temp\0B2CA789-127F-45F8-998D-B0A13209DAA2.dat [41498]
[MD5.68980F4A5C87740BA5F2BFF58850283C] [SPRF][07/07/2012] (...) -- C:\Users\ergothérapie\AppData\Local\Temp\0C5DA630-868C-40AE-AE94-115DB2A04008.dat [38709]
[MD5.532BCB66CE0429AEAACA1E5FC209C85E] [SPRF][07/06/2012] (...) -- C:\Users\ergothérapie\AppData\Local\Temp\0D18B1BA-C9A7-4A30-86F5-32AAF06CEBF5.dat [37731]
[MD5.F37C44AEEF3B7B6CB403DE461B2DDA2E] [SPRF][05/06/2012] (...) -- C:\Users\ergothérapie\AppData\Local\Temp\0D38F0AB-2DFC-402E-AB4E-3779D4841FEB.dat [42434]
[MD5.649E81385EB6F2E042608F53B0A73F32] [SPRF][05/03/2012] (...) -- C:\Users\ergothérapie\AppData\Local\Temp\0D829074-826B-41AF-ADA3-71E0B833C392.dat [37993]
[MD5.F675CCCB3681042B885D52D6731372BB] [SPRF][03/06/2012] (...) -- C:\Users\ergothérapie\AppData\Local\Temp\0DCE0034-28CA-4274-A122-83827360349E.dat [41660]
[MD5.6363741EF1E6A4D1D51300B0DBF55D7A] [SPRF][27/02/2012] (...) -- C:\Users\ergothérapie\AppData\Local\Temp\0EE3D5EB-40C1-42C0-BB70-363A9513DBC7.dat [38137]
[MD5.00ED13D08A5F92B51D0753F2FB1CC12F] [SPRF][29/02/2012] (...) -- C:\Users\ergothérapie\AppData\Local\Temp\0F4D68AA-E708-4A40-B09D-A11DF125F5C9.dat [38137]
[MD5.9DB1A3FDC6F819CFE210EE57876A1D87] [SPRF][10/04/2012] (...) -- C:\Users\ergothérapie\AppData\Local\Temp\0FCEAAEF-DD48-49FD-9B5C-EFFD8992BF61.dat [42434]
[MD5.67F3CC7B2D477F98AAF8DAF4BE1EE0DD] [SPRF][07/12/2011] (...) -- C:\Users\ergothérapie\AppData\Local\Temp\103311CF-BBA3-4A3E-B9D4-268ADE7C7B43.dat [38761]
[MD5.5390EEBF59C78758C72476DD32E28FF4] [SPRF][17/04/2012] (...) -- C:\Users\ergothérapie\AppData\Local\Temp\1047FD35-D058-4C62-B54E-CCC3A3ECF621.dat [38434]
[MD5.CC639604F68EEA46B42BC7EE1D31FD4F] [SPRF][15/05/2012] (...) -- C:\Users\ergothérapie\AppData\Local\Temp\1052EFAC-813F-4337-919B-18DAC9505306.dat [41660]
[MD5.F22D226ACC5A9EC0EDD1D020D9CE20C9] [SPRF][30/05/2012] (...) -- C:\Users\ergothérapie\AppData\Local\Temp\10D21461-598B-4705-A287-D6A2D8628934.dat [38502]
[MD5.C6069D115CF42810B8545959ED2BFB5D] [SPRF][03/02/2012] (...) -- C:\Users\ergothérapie\AppData\Local\Temp\11F26B89-73D4-4AF0-99C9-910569514FDF.dat [42486]
[MD5.AF84516E76D82A56A1E0A1B8A2B0D494] [SPRF][17/01/2012] (...) -- C:\Users\ergothérapie\AppData\Local\Temp\11FD69E2-0CD9-4331-B4BE-A1B329839579.dat [37781]
[MD5.84BEC421C92B49F59455015F44880A7A] [SPRF][07/12/2011] (...) -- C:\Users\ergothérapie\AppData\Local\Temp\13777B4C-A314-4CFF-A1C5-AC0CEBE2BB1B.dat [38478]
[MD5.D4881AB3DD320A3B228713A1F0969D2B] [SPRF][09/06/2012] (...) -- C:\Users\ergothérapie\AppData\Local\Temp\1638312F-0264-49D1-ABB3-2C17585DC6C2.dat [38370]
[MD5.BC25EB88FB59BA930850EC23990AA4D5] [SPRF][08/03/2012] (...) -- C:\Users\ergothérapie\AppData\Local\Temp\19747B77-9077-4ACD-B3AF-AD93B45AC8D7.dat [38769]
[MD5.994B160B1DBCA855C379AC7AB04C0F7A] [SPRF][11/04/2012] (...) -- C:\Users\ergothérapie\AppData\Local\Temp\199DA6CD-17DD-4249-B39C-43D5ED2D5A7E.dat [42434]
[MD5.F6434E6B8022BD96CAAE418CE83AA6A0] [SPRF][27/04/2012] (...) -- C:\Users\ergothérapie\AppData\Local\Temp\1B898642-F8D6-4206-99B5-80D2941B4784.dat [40155]
[MD5.BE2D567D29B67F770F2752F0F93B51E1] [SPRF][23/04/2012] (...) -- C:\Users\ergothérapie\AppData\Local\Temp\1CDBC530-EDE9-4F6F-AC88-0FCB52005802.dat [37943]
[MD5.46A878FF4799DEA1A38C244B5BAFCC34] [SPRF][23/04/2012] (...) -- C:\Users\ergothérapie\AppData\Local\Temp\1DB9CEAB-C134-48AD-9897-19EDFE4D361D.dat [37660]
[MD5.BA7BE143A52BF251FF5E4B34056D7888] [SPRF][16/04/2012] (...) -- C:\Users\ergothérapie\AppData\Local\Temp\208BD74D-5ED3-4BEA-B014-8FF2E60C6219.dat [39136]
[MD5.974E4C3C54E3A2F88968140278487687] [SPRF][16/04/2012] (...) -- C:\Users\ergothérapie\AppData\Local\Temp\209C9165-C923-458D-B8B9-13A6A226B23C.dat [41804]
[MD5.BF9121221A6A1AAC7DE95F48B8932196] [SPRF][04/04/2012] (...) -- C:\Users\ergothérapie\AppData\Local\Temp\215DC2DF-62B9-47F9-9372-5CE78A6AC8BA.dat [38370]
[MD5.7A51AB3B944A28F61D50F33101E192DD] [SPRF][30/12/2011] (...) -- C:\Users\ergothérapie\AppData\Local\Temp\2188C060-5A3F-4603-A5A9-FAC343374896.dat [38420]
[MD5.58A32D0EEC5A1E464113EB96411CD558] [SPRF][02/04/2012] (...) -- C:\Users\ergothérapie\AppData\Local\Temp\22ECEA3D-161D-4858-B6EB-4B6325C9C3C2.dat [42486]
[MD5.496652CFBA514A7FE09FBDDDE1150935] [SPRF][03/02/2012] (...) -- C:\Users\ergothérapie\AppData\Local\Temp\23658F9A-C8EC-4E57-8114-7261015ABFAA.dat [42486]
[MD5.D05B07A94AC566C0C714E484BC1BC4E4] [SPRF][07/12/2011] (...) -- C:\Users\ergothérapie\AppData\Local\Temp\23FD9D08-C3ED-45F9-8A2D-F92AB0BCB319.dat [38478]
[MD5.67F00C29E4800B20E27DBC7371180489] [SPRF][03/02/2012] (...) -- C:\Users\ergothérapie\AppData\Local\Temp\2892B8A6-3F84-4D41-B7C6-9C431C77B169.dat [42486]
[MD5.9F2A41868DBA5EE674C8596C3C4F7AE5] [SPRF][30/05/2012] (...) -- C:\Users\ergothérapie\AppData\Local\Temp\28DF0D36-B78A-475F-80EC-CA8177DB1ED4.dat [42434]
[MD5.A03CC37C6ACA6A936F31673B9538862A] [SPRF][11/04/2012] (...) -- C:\Users\ergothérapie\AppData\Local\Temp\29FFBDBF-01B9-4D6B-AAC2-5E49F369C2E7.dat [42434]
[MD5.5A6D7DE230D6B5459A5CE9635546A324] [SPRF][29/03/2012] (...) -- C:\Users\ergothérapie\AppData\Local\Temp\2B0C38F4-C66F-49B7-8938-AF5E46565D1B.dat [38549]
[MD5.687ABBCC88E70D0C21E591B1AED7AE75] [SPRF][02/04/2012] (...) -- C:\Users\ergothérapie\AppData\Local\Temp\2D5F25F1-323C-47CD-962E-7504862BCB88.dat [42486]
[MD5.AA34CAA28AD0258D3B39CE3D82A02E21] [SPRF][09/06/2012] (...) -- C:\Users\ergothérapie\AppData\Local\Temp\2E8FB13F-F4F2-47DD-972D-691A7239FC41.dat [38370]
[MD5.C1A38DB921FFB95D076D24A7E4A74169] [SPRF][05/03/2012] (...) -- C:\Users\ergothérapie\AppData\Local\Temp\30B2F902-CEE4-47CB-8485-0457B2F53E60.dat [37781]
[MD5.CC085A355CA8DFE0A2262C2173090784] [SPRF][02/04/2012] (...) -- C:\Users\ergothérapie\AppData\Local\Temp\323DD915-41C4-4904-BCFA-194AEDD48941.dat [42486]
[MD5.BC28DBB5158F02BB63D391F7EEC4418D] [SPRF][04/05/2012] (...) -- C:\Users\ergothérapie\AppData\Local\Temp\32804DBA-E70B-4EDF-A19A-CF58096F9AF8.dat [42007]
[MD5.F19712F8DA6A3192ED11C1B566FB1195] [SPRF][08/03/2012] (...) -- C:\Users\ergothérapie\AppData\Local\Temp\32EDD73E-3BCD-467A-8DDD-897BBD074D47.dat [38420]
[MD5.9A1F2AB1B28AF18259B457FB754D23FD] [SPRF][09/05/2012] (...) -- C:\Users\ergothérapie\AppData\Local\Temp\349570A7-7F7E-456E-B70A-EF306CEBBF56.dat [38370]
[MD5.BA78138CF24863BC38A7ACD400D02D05] [SPRF][14/05/2012] (...) -- C:\Users\ergothérapie\AppData\Local\Temp\35BCA1B0-E838-4116-AF33-D2DEBF42D101.dat [37943]
[MD5.D24F077BE053EC3CBC50A80403CDE319] [SPRF][17/02/2012] (...) -- C:\Users\ergothérapie\AppData\Local\Temp\366EAF24-45C8-49EE-832A-F49E7C9BE4B9.dat [39188]
[MD5.FD9BEDDAF07EADB84ACD875D5813A008] [SPRF][12/05/2012] (...) -- C:\Users\ergothérapie\AppData\Local\Temp\373CD69A-E32A-4EF1-91ED-E7AD788885D5.dat [42087]
[MD5.79C66F6F66D9E9269C44C2222DBF3865] [SPRF][26/03/2012] (...) -- C:\Users\ergothérapie\AppData\Local\Temp\37AC9EED-825E-448F-84FA-06FC2EA0530E.dat [40701]
[MD5.2F7D3AD23CC397884AEC4564F430D932] [SPRF][02/07/2012] (...) -- C:\Users\ergothérapie\AppData\Local\Temp\38F4A7EE-1E07-4F64-B85E-74B2E22401E5.dat [38370]
[MD5.4DA0CC38733A681257336D72182F0872] [SPRF][04/04/2012] (...) -- C:\Users\ergothérapie\AppData\Local\Temp\3A0035A9-07CC-43B4-85A8-6E1FB28EB5AE.dat [42137]
[MD5.D54DEDD3F319EE4152DB3B49EA4C11D0] [SPRF][20/02/2012] (...) -- C:\Users\ergothérapie\AppData\Local\Temp\3A710255-3E7F-4E3B-9D9A-CBF9C4D05594.dat [38420]
[MD5.D6C0B0508C131D3548691C0DE7F53B9B] [SPRF][16/04/2012] (...) -- C:\Users\ergothérapie\AppData\Local\Temp\3CB21746-D552-49AB-AD63-7BF6143FAC09.dat [39136]
[MD5.D8ACF427D753C021B20DC881A5518EAC] [SPRF][29/05/2012] (...) -- C:\Users\ergothérapie\AppData\Local\Temp\3D47F0FB-1686-45F5-9071-B702EA024324.dat [42087]
[MD5.B23B460F40CBEB4B865F0514004CBD43] [SPRF][10/04/2012] (...) -- C:\Users\ergothérapie\AppData\Local\Temp\3E95DD06-A785-4769-9E86-F89265108540.dat [42434]
[MD5.FC78E06E2C765BD161FD16185A0C166C] [SPRF][29/02/2012] (...) -- C:\Users\ergothérapie\AppData\Local\Temp\3F1FED3B-F111-413E-8122-4D50D2A3A198.dat [38137]
[MD5.AC3B43EC326C6E3A8353357515A971FF] [SPRF][26/03/2012] (...) -- C:\Users\ergothérapie\AppData\Local\Temp\3F354157-264F-4DE1-B59D-CC5A0E08CA7C.dat [41328]
[MD5.741251843576AE2BB556024A630BFE0A] [SPRF][10/05/2012] (...) -- C:\Users\ergothérapie\AppData\Local\Temp\3F40DA36-1703-4AF8-95DF-071A2891CB9C.dat [38370]
[MD5.C232EABFF5EF8F7D3F821B4BD66F8B53] [SPRF][30/03/2012] (...) -- C:\Users\ergothérapie\AppData\Local\Temp\3FD17514-1B0F-449C-B431-DA5552783577.dat [38137]
[MD5.480C6F33934BC6B8DAC3BC425C432EFD] [SPRF][28/02/2012] (...) -- C:\Users\ergothérapie\AppData\Local\Temp\40261120-2A17-4084-986D-E84D6E57214D.dat [37781]
[MD5.C1C6A3E2E91FEBE6F6010B36DB7502C0] [SPRF][17/04/2012] (...) -- C:\Users\ergothérapie\AppData\Local\Temp\412410CC-CC05-49C0-8B55-2774AB889526.dat [38717]
[MD5.79523C9081F17C80F20805745AF20C85] [SPRF][22/04/2012] (...) -- C:\Users\ergothérapie\AppData\Local\Temp\43246742-85EA-44B2-8E34-B8A22861C386.dat [41660]
[MD5.E366F4F2F75293CFD6077EEA808204E0] [SPRF][27/04/2012] (...) -- C:\Users\ergothérapie\AppData\Local\Temp\44437180-4655-43E4-BE56-73EC34E7A437.dat [40155]
[MD5.2C061D4C0484E8D08C944283C8959B11] [SPRF][30/03/2012] (...) -- C:\Users\ergothérapie\AppData\Local\Temp\44AC2296-407B-4338-9D17-FCC56B0B0414.dat [38420]
[MD5.A66867CA175AE986D322973D133FFB19] [SPRF][07/12/2011] (...) -- C:\Users\ergothérapie\AppData\Local\Temp\44DE5D28-BC3F-43F3-A374-F49F0EBE8AB6.dat [38761]
[MD5.35AC082A67F900FD5C1395B9DFF99445] [SPRF][23/02/2012] (...) -- C:\Users\ergothérapie\AppData\Local\Temp\45C06F20-4F47-442B-B68B-A26E94C49634.dat [38769]
[MD5.E7C3D74E13835E11587A1B3DBD83A424] [SPRF][22/04/2012] (...) -- C:\Users\ergothérapie\AppData\Local\Temp\464A4ECC-9FFC-4AD5-99D4-18BC1849DBE3.dat [41660]
[MD5.237642ADE33219CA043C32A0120FA003] [SPRF][30/03/2012] (...) -- C:\Users\ergothérapie\AppData\Local\Temp\467B80D8-192C-4D9F-A438-A804F291510B.dat [38420]
[MD5.9F6FCD28FA908BF5B21FFE29B9F19A5A] [SPRF][29/02/2012] (...) -- C:\Users\ergothérapie\AppData\Local\Temp\473041CF-A1C4-4C77-AD43-757FA2233277.dat [38420]
[MD5.B234C08A24F6472026FAFF1507B86F68] [SPRF][16/04/2012] (...) -- C:\Users\ergothérapie\AppData\Local\Temp\48728879-3795-4E63-B06F-2AA466072796.dat [42087]
[MD5.575AA037F81015AA50B344C6DA7734B0] [SPRF][24/02/2012] (...) -- C:\Users\ergothérapie\AppData\Local\Temp\48F67CF8-B693-44CC-9796-998BA04159C1.dat [38122]
[MD5.75BB30841DE01B6A1EE28FFBDBDA42B2] [SPRF][05/04/2012] (...) -- C:\Users\ergothérapie\AppData\Local\Temp\4AA49DAC-9B90-4963-9E62-CF95AC02C24A.dat [42087]
[MD5.8E3DD9B69F535863A7786C5D4F9E93EC] [SPRF][05/04/2012] (...) -- C:\Users\ergothérapie\AppData\Local\Temp\4B21085C-EFC0-4022-9D96-1D9CDDDA4776.dat [42087]
[MD5.8452D94966B5A1AEC354A7CD5B9EC051] [SPRF][30/05/2012] (...) -- C:\Users\ergothérapie\AppData\Local\Temp\4E1982FA-6E48-45B2-9C25-2631339F74E5.dat [38502]
[MD5.E7123D9A54011880ACBC52DD7588E34B] [SPRF][13/05/2012] (...) -- C:\Users\ergothérapie\AppData\Local\Temp\50BBF3EA-84E9-45CB-9FD3-8D33988B09E3.dat [37731]
[MD5.92239AAF5C48E1121991E6DF35A4622F] [SPRF][08/03/2012] (...) -- C:\Users\ergothérapie\AppData\Local\Temp\515E272F-B685-4148-9BA9-89E9721F4F4C.dat [38769]
[MD5.F500527225BA5699B01FF7E78DF5F019] [SPRF][07/06/2012] (...) -- C:\Users\ergothérapie\AppData\Local\Temp\543AF7AD-B33C-48D0-A026-D9480A2962D9.dat [41660]
[MD5.32325AAD382E37F76417B7F34D2AE8F6] [SPRF][28/12/2011] (...) -- C:\Users\ergothérapie\AppData\Local\Temp\54DF9DED-F5E7-4514-89FB-65862C97337E.dat [38420]
[MD5.C890BA3BA542BA24D775E9A87F5D2ECC] [SPRF][05/04/2012] (...) -- C:\Users\ergothérapie\AppData\Local\Temp\559AE7F1-19FF-4D4C-B411-72D50004FD9E.dat [42087]
[MD5.FBD53BB9899855150C7E44E28C7FD52B] [SPRF][29/02/2012] (...) -- C:\Users\ergothérapie\AppData\Local\Temp\5612B4A2-E0AE-40BE-AF98-D503FCAC8E35.dat [38420]
[MD5.EE5CF23A76D94653449BEBC16BF4472D] [SPRF][22/02/2012] (...) -- C:\Users\ergothérapie\AppData\Local\Temp\56453E70-992C-4F8C-B589-877D800518AA.dat [38420]
[MD5.3B17C225B8D08AEE4D70075E90D077F8] [SPRF][22/02/2012] (...) -- C:\Users\ergothérapie\AppData\Local\Temp\57707053-4CC2-4D61-A6D0-C5F1A907367B.dat [38420]
[MD5.17190AD9EB5CE8B5E40D89C5DDEDF618] [SPRF][15/05/2012] (...) -- C:\Users\ergothérapie\AppData\Local\Temp\57DE1717-0D94-4827-98A1-A64FA333E84A.dat [42007]
[MD5.9DD81D3296E080BC60505D124ECBB6D6] [SPRF][08/03/2012] (...) -- C:\Users\ergothérapie\AppData\Local\Temp\59A043E2-492B-4431-9054-FA483415EC5E.dat [38486]
[MD5.9191B3DF16F6010BD25097F12391DB6C] [SPRF][11/07/2012] (...) -- C:\Users\ergothérapie\AppData\Local\Temp\5A997F56-27AF-4DD0-B3EA-BC80128372CB.dat [38370]
[MD5.2E16AB33411651C1CAE463E302137C6D] [SPRF][20/02/2012] (...) -- C:\Users\ergothérapie\AppData\Local\Temp\5ABB6237-F40A-45FA-8BD0-1A2FE0F24765.dat [38420]
[MD5.F46B1BE55C66D7EEF2A286C021203B70] [SPRF][25/05/2012] (...) -- C:\Users\ergothérapie\AppData\Local\Temp\5B48FC40-721B-40CB-A162-AE70D585B9CB.dat [38370]
[MD5.15B225866EB20604141D69B86EA62745] [SPRF][10/04/2012] (...) -- C:\Users\ergothérapie\AppData\Local\Temp\5D22969C-F609-4418-91C8-5AB3BF6DF4C8.dat [42434]
[MD5.4A528209D38F36B82C601CF69F6569D3] [SPRF][03/02/2012] (...) -- C:\Users\ergothérapie\AppData\Local\Temp\5E1A3AE3-E8E7-43AF-9B98-59FDE7393898.dat [42486]
[MD5.07719CEB3BE7A338AA7036B9AD9BC0D0] [SPRF][05/04/2012] (...) -- C:\Users\ergothérapie\AppData\Local\Temp\60222D18-5E4F-40F2-807A-A1619186327D.dat [41804]
[MD5.61731B3237369C0BA1218D5202DDFA1E] [SPRF][04/04/2012] (...) -- C:\Users\ergothérapie\AppData\Local\Temp\60C4E302-E5D3-432C-98CB-3B669832888A.dat [38370]
[MD5.F4DD13580F83AAD6A84C9867FE4AD03E] [SPRF][25/04/2012] (...) -- C:\Users\ergothérapie\AppData\Local\Temp\620C3E59-0D90-4B9F-ACFE-18C26748E109.dat [38370]
[MD5.4245E319C6D4D657C100E5B12A655A93] [SPRF][23/02/2012] (...) -- C:\Users\ergothérapie\AppData\Local\Temp\62593150-5586-4DFB-83ED-23E71D62C288.dat [42137]
[MD5.F3F7FD6ABC2961F6447760BA38D0D603] [SPRF][28/02/2012] (...) -- C:\Users\ergothérapie\AppData\Local\Temp\63946AE0-F06D-4D25-AF82-D195972206BE.dat [42137]
[MD5.B6A616994D18FD8CDED11D4A45750E41] [SPRF][07/12/2011] (...) -- C:\Users\ergothérapie\AppData\Local\Temp\648AC710-2A52-4EC0-9D22-6C3C905F8D98.dat [38761]
[MD5.1CA7DB2363EF0B58FF0398C2F3FE2982] [SPRF][20/02/2012] (...) -- C:\Users\ergothérapie\AppData\Local\Temp\64A2D951-8318-48B7-BCED-F4A8FD2ECEF3.dat [42486]
[MD5.ECF2E7C3F07300994B69C03B1F249D86] [SPRF][17/02/2012] (...) -- C:\Users\ergothérapie\AppData\Local\Temp\65925C98-1A57-4FFA-8F96-9434DA999CD1.dat [38420]
[MD5.7814200D21A951E11C2DF5B529E381EE] [SPRF][20/02/2012] (...) -- C:\Users\ergothérapie\AppData\Local\Temp\663E83DC-637F-4A12-9718-384C1679969F.dat [38420]
[MD5.A9A61DC9938E4AF102A26FCC58F2D8C0] [SPRF][10/05/2012] (...) -- C:\Users\ergothérapie\AppData\Local\Temp\686EF6FD-EEE3-4FB8-9166-2FAAA8E4F53B.dat [38370]
[MD5.9B939571A42AE0FBB3C9B426D238DE87] [SPRF][30/05/2012] (...) -- C:\Users\ergothérapie\AppData\Local\Temp\68DDF1B5-247A-48A6-81F1-4F26600A325E.dat [42434]
[MD5.1D55300490434CED820FF866E8BDE09F] [SPRF][15/05/2012] (...) -- C:\Users\ergothérapie\AppData\Local\Temp\696FC99B-8B1B-4DEA-B925-CC72D211802F.dat [42007]
[MD5.A027B7E227683B28BE436D324BBE0427] [SPRF][20/02/2012] (...) -- C:\Users\ergothérapie\AppData\Local\Temp\697B797E-FAB7-4F57-9430-E77A444985D3.dat [38420]
[MD5.94B9B8130B79D41B45A5AA5BE5A5A2E1] [SPRF][22/04/2012] (...) -- C:\Users\ergothérapie\AppData\Local\Temp\6A3169EC-4CBD-4D6C-B8D6-779C674A61F0.dat [42087]
[MD5.E9CA9B5F408D091E4495E53B93BB3FDF] [SPRF][22/04/2012] (...) -- C:\Use
