fenetres pub intempestives

Question

FORUM high-tech

SECURITE

Sécurité

fenetres pub intempestives

Recherche :

28 utilisateurs inconnus

Mot : Pseudo : Filtrer
Page : 1 Bas de page
Auteur	Sujet : fenetres pub intempestives

Alain-st-martin13

Bébé forumeur (De 10 à 49 messages postés)

Bonjour,
Depuis quelques mois, comme beaucoup d'autres membres j'ai de nombreuses fenetres de pub intempestives qui s'ouvrent meme quand je ne suis pas connecté à internet. il me semble que ces fenetres s'ouvrent surtout quand je clique sur "entrée" pour valider une action.
J'ai windows vista et j'ai avast comme anti virus, avec adaware entre autre.
J'ai fait plusieurs restaurations de système sans succés, je pense que je n'ai pas pu remonter assez loin dans le temps.
Je suis disposé à essayer toutes les manipulations possibles mais je ne suis pas spécialiste en informatique.
merci pour votre aide...Alain.

(Publicité)

Page :

1

Haut de page

Sujets relatifs
fenêtres de pub intenpestives [resolu]	apparition de fenêtres "étrangères"
Fenetres intempestives, systemdoctor, drivecleaner....	fenetres intempestives...
besoin d'aide pr elimination fenetres intempestives
Plus de sujets relatifs à : fenetres pub intempestives

Les 5 sujets de discussion précédents	Nombre de réponses	Dernier message
demande installation logiciel payant	5	17/01/2011 à 04:19:07
PCLECHAL.INI: c' est qui? commment s' en débarsser?	1	16/01/2011 à 13:45:28
mon pc rame	13	19/01/2011 à 23:26:21
A propos de HijackThis	4	16/01/2011 à 09:55:31
SOS PC infecté	50	30/01/2011 à 14:36:32

kmisol · Answer 1 · Posté le 16/01/2011 à 15:49:41

:hello: Télécharge RSIT (de random/random) sur le bureau : - Sur le bureau, double clique sur RSIT.exe ; - Clique sur Continue (Disclaimer) dans la fenêtre ; Si la dernière version de HijackThis n'est pas détectée sur ton PC, RSIT le téléchargera et te demandera d'accepter la licence. Lorsque l’ analyse sera achevée, 2 fichiers texte s’ ouvriront (avec le bloc-notes). Poste le contenu de log.txt (celui qui apparaît à l’ écran) ainsi que info.txt (que tu verras dans la Barre des tâches). Tutoriel -> ici

dédétraqué · Answer 2 · Posté le 16/01/2011 à 15:50:35

dédétraqué

Profil : Equipe sécurité

Célèbre sur tout le forum (de 30 000 à 99 999 messages postés)

Salut Alain, bienvenu sur 01net

Grilled :pt1cable:

@++

kmisol

kmisol · Answer 3 · Posté le 16/01/2011 à 17:04:53

kmisol

Imagine ...
Profil : Equipe sécurité

...

dédétraqué :hello:

Alain-st-martin13 · Answer 4 · Posté le 16/01/2011 à 18:04:00

Bonsoir, Voici le premier fichier issu de l'analyse : Logfile of random's system information tool 1.08 (written by random/random) Run by Alain at 2011-01-16 17:47:45 Microsoft® Windows Vista™ Édition Familiale Premium Service Pack 2 System drive C: has 28 GB (9%) free of 293 GB Total RAM: 3070 MB (62% free) Logfile of Trend Micro HijackThis v2.0.4 Scan saved at 17:48:04, on 16/01/2011 Platform: Windows Vista SP2 (WinNT 6.00.1906) MSIE: Internet Explorer v8.00 (8.00.6001.18999) Boot mode: Normal Running processes: C:\Windows\system32\Dwm.exe C:\Windows\Explorer.EXE C:\Windows\system32\taskeng.exe C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe C:\Users\Alain\AppData\Roaming\eoRezo\SoftwareUpdate\SoftwareUpdateHP.exe C:\Program Files\Windows Defender\MSASCui.exe C:\Windows\RtHDVCpl.exe C:\Windows\System32\rundll32.exe C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe C:\Program Files\HP\HP Software Update\hpwuSchd2.exe C:\Program Files\Common Files\logishrd\LComMgr\Communications_Helper.exe C:\Program Files\Logitech\QuickCam\Quickcam.exe C:\Program Files\EoRezo\eorezo.exe C:\Program Files\Alwil Software\Avast5\AvastUI.exe C:\Program Files\DivX\DivX Update\DivXUpdate.exe C:\Program Files\iTunes\iTunesHelper.exe C:\Program Files\Packard Bell\SetUpMyPC\SmpSys.exe C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe C:\Windows\ehome\ehtray.exe C:\Program Files\Windows Media Player\wmpnscfg.exe C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe C:\Windows\ehome\ehmsas.exe C:\Program Files\Common Files\Logishrd\LQCVFX\COCIManager.exe C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe C:\Program Files\HP\Digital Imaging\bin\hpqbam08.exe C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe C:\Program Files\HP\Digital Imaging\bin\hpqgpc01.exe C:\Program Files\iTunes\iTunes.exe C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceHelper.exe C:\Program Files\Common Files\Apple\Apple Application Support\distnoted.exe C:\Program Files\Internet Explorer\iexplore.exe C:\Program Files\Internet Explorer\iexplore.exe C:\Windows\system32\Macromed\Flash\FlashUtil10l_ActiveX.exe C:\Program Files\Microsoft Office\Office12\WINWORD.EXE C:\Users\Alain\Desktop\RSIT.exe C:\Program Files\trend micro\Alain.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://y.lo.st R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.ustart.org R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = O1 - Hosts: ::1 localhost O2 - BHO: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll O2 - BHO: Ask Search Assistant BHO - {9CB65201-89C4-402c-BA80-02D8C59F9B1D} - C:\Program Files\AskTBar\SrchAstt\1.bin\A5SRCHAS.DLL O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.6.5612.1312\swg.dll O2 - BHO: EOBHO - {C10DC1F4-CCDF-4224-A24D-B23AFC3573C8} - C:\Program Files\EoRezo\EoRezoBHO.dll O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_B7C5AC242193BB3E.dll O2 - BHO: CBrowserHelperObject Object - {CA6319C0-31B7-401E-A518-A07C3DB8F777} - C:\Program Files\Google\Google_BAE\BAE.dll O2 - BHO: Ask Toolbar BHO - {FE063DB1-4EC0-403e-8DD8-394C54984B2C} - C:\Program Files\AskTBar\bar\1.bin\ASKTBAR.DLL O2 - BHO: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll O3 - Toolbar: Ask Toolbar - {FE063DB9-4EC0-403e-8DD8-394C54984B2C} - C:\Program Files\AskTBar\bar\1.bin\ASKTBAR.DLL O4 - HKLM\..\Run: %ProgramFiles%\Windows Defender\MSASCui.exe -hide O4 - HKLM\..\Run: RtHDVCpl.exe O4 - HKLM\..\Run: RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit O4 - HKLM\..\Run: "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup O4 - HKLM\..\Run: C:\Program Files\Packard Bell\GOOGLE_EULA\EULALauncher.exe O4 - HKLM\..\Run: C:\Program Files\HP\HP Software Update\HPWuSchd2.exe O4 - HKLM\..\Run: "C:\Program Files\Common Files\LogiShrd\LComMgr\Communications_Helper.exe" O4 - HKLM\..\Run: "C:\Program Files\Logitech\QuickCam\Quickcam.exe" /hide O4 - HKLM\..\Run: C:\Program Files\Common Files\Apple\Mobile Device Support\AppleSyncNotifier.exe O4 - HKLM\..\Run: "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" O4 - HKLM\..\Run: C:\Windows\system32\NeroCheck.exe O4 - HKLM\..\Run: Skytel.exe O4 - HKLM\..\Run: C:\Program Files\HP\Digital Imaging\bin\hpqSRMon.exe O4 - HKLM\..\Run: "C:\Program Files\EoRezo\eorezo.exe" O4 - HKLM\..\Run: "C:\Program Files\Alwil Software\Avast5\avastUI.exe" /nogui O4 - HKLM\..\Run: C:\Program Files\MAGIX\Films_sur_DVD_8\TrayServer.exe O4 - HKLM\..\Run: "C:\Program Files\DivX\DivX Update\DivXUpdate.exe" /CHECKNOW O4 - HKLM\..\Run: "C:\Program Files\QuickTime\QTTask.exe" -atboottime O4 - HKLM\..\Run: "C:\Program Files\iTunes\iTunesHelper.exe" O4 - HKLM\..\RunOnce: C:\Users\Alain\AppData\Roaming\eoRezo\SoftwareUpdate\SoftwareUpdateHP.exe -runonce O4 - HKCU\..\Run: C:\Program Files\Packard Bell\SetUpMyPC\SmpSys.exe O4 - HKCU\..\Run: "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" O4 - HKCU\..\Run: C:\Windows\ehome\ehTray.exe O4 - HKCU\..\Run: "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background O4 - HKCU\..\Run: C:\Program Files\Windows Media Player\WMPNSCFG.exe O4 - HKUS\S-1-5-19\..\Run: %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL') O4 - HKUS\S-1-5-19\..\Run: rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL') O4 - HKUS\S-1-5-20\..\Run: %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU') O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL O9 - Extra button: Afficher ou masquer l'HP Smart Web Printing - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll O17 - HKLM\System\CCS\Services\Tcpip\..\{05341615-9D20-4255-94B7-7BB9F3BC8A28}: NameServer = 212.27.53.252,212.27.54.252 O17 - HKLM\System\CS1\Services\Tcpip\..\{05341615-9D20-4255-94B7-7BB9F3BC8A28}: NameServer = 212.27.53.252,212.27.54.252 O17 - HKLM\System\CS2\Services\Tcpip\..\{05341615-9D20-4255-94B7-7BB9F3BC8A28}: NameServer = 212.27.53.252,212.27.54.252 O17 - HKLM\System\CS3\Services\Tcpip\..\{05341615-9D20-4255-94B7-7BB9F3BC8A28}: NameServer = 212.27.53.252,212.27.54.252 O17 - HKLM\System\CS4\Services\Tcpip\..\{05341615-9D20-4255-94B7-7BB9F3BC8A28}: NameServer = 212.27.53.252,212.27.54.252 O17 - HKLM\System\CS5\Services\Tcpip\..\{05341615-9D20-4255-94B7-7BB9F3BC8A28}: NameServer = 212.27.53.252,212.27.54.252 O17 - HKLM\System\CS6\Services\Tcpip\..\{05341615-9D20-4255-94B7-7BB9F3BC8A28}: NameServer = 212.27.53.252,212.27.54.252 O17 - HKLM\System\CS7\Services\Tcpip\..\{05341615-9D20-4255-94B7-7BB9F3BC8A28}: NameServer = 212.27.53.252,212.27.54.252 O17 - HKLM\System\CS8\Services\Tcpip\..\{05341615-9D20-4255-94B7-7BB9F3BC8A28}: NameServer = 212.27.53.252,212.27.54.252 O17 - HKLM\System\CS9\Services\Tcpip\..\{05341615-9D20-4255-94B7-7BB9F3BC8A28}: NameServer = 212.27.53.252,212.27.54.252 O17 - HKLM\System\CS10\Services\Tcpip\..\{05341615-9D20-4255-94B7-7BB9F3BC8A28}: NameServer = 212.27.53.252,212.27.54.252 O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~4\GOEC62~1.DLL O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\Windows\system32\browseui.dll O23 - Service: Adobe Active File Monitor V6 (AdobeActiveFileMonitor6.0) - Unknown owner - C:\Program Files\Adobe\Photoshop Elements 6.0\PhotoshopElementsFileAgent.exe O23 - Service: @%SystemRoot%\system32\aelupsvc.dll,-1 (AeLookupSvc) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe O23 - Service: @%systemroot%\system32\appinfo.dll,-100 (Appinfo) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe O23 - Service: @%SystemRoot%\system32\audiosrv.dll,-204 (AudioEndpointBuilder) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\audiosrv.dll,-200 (Audiosrv) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe O23 - Service: avast! Mail Scanner - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe O23 - Service: avast! Web Scanner - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe O23 - Service: @%SystemRoot%\system32\bfe.dll,-1001 (BFE) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\qmgr.dll,-1000 (BITS) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe O23 - Service: @%systemroot%\system32\browser.dll,-100 (Browser) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\System32\certprop.dll,-11 (CertPropSvc) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\cryptsvc.dll,-1001 (CryptSvc) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @oleres.dll,-5012 (DcomLaunch) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @dfsrres.dll,-101 (DFSR) - Unknown owner - C:\Windows\system32\DFSR.exe O23 - Service: @%SystemRoot%\system32\dhcpcsvc.dll,-100 (Dhcp) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\System32\dnsapi.dll,-101 (Dnscache) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%systemroot%\system32\dot3svc.dll,-1102 (dot3svc) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%systemroot%\system32\dps.dll,-500 (DPS) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%systemroot%\system32\eapsvc.dll,-1 (EapHost) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\ehome\ehrecvr.exe,-101 (ehRecvr) - Unknown owner - C:\Windows\ehome\ehRecvr.exe O23 - Service: @%SystemRoot%\ehome\ehsched.exe,-101 (ehSched) - Unknown owner - C:\Windows\ehome\ehsched.exe O23 - Service: @%SystemRoot%\ehome\ehstart.dll,-101 (ehstart) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\emdmgmt.dll,-1000 (EMDMgmt) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\wevtsvc.dll,-200 (Eventlog) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @comres.dll,-2450 (EventSystem) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%systemroot%\system32\fdPHost.dll,-100 (fdPHost) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%systemroot%\system32\fdrespub.dll,-100 (FDResPub) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: Firebird Server - MAGIX Instance (FirebirdServerMAGIXInstance) - MAGIX® - C:\Program Files\MAGIX\Common\Database\bin\fbserver.exe O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe O23 - Service: @%systemroot%\system32\FntCache.dll,-100 (FontCache) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: Generic Service for HID Keyboard Input Collections (GenericHidService) - Unknown owner - C:\Program Files\Packard bell\SAXO27\HIDSERVICE.EXE O23 - Service: Google Desktop Manager 5.9.1005.12335 (GoogleDesktopManager-051210-111108) - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe O23 - Service: @gpapi.dll,-112 (gpsvc) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: Google Update Service (gupdate) (gupdate) - Unknown owner - C:\Program Files\Google\Update\GoogleUpdate.exe O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe O23 - Service: @%SystemRoot%\System32\hidserv.dll,-101 (hidserv) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\kmsvc.dll,-6 (hkmsvc) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: hpqcxs08 - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: Service HP CUE DeviceDiscovery (hpqddsvc) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: HP Network Devices Support (HPSLPSVC) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\ikeext.dll,-501 (IKEEXT) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%systemroot%\system32\IPBusEnum.dll,-102 (IPBusEnum) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\iphlpsvc.dll,-200 (iphlpsvc) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe O23 - Service: @comres.dll,-2946 (KtmRm) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%systemroot%\system32\srvsvc.dll,-100 (LanmanServer) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%systemroot%\system32\wkssvc.dll,-100 (LanmanWorkstation) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: Lavasoft Ad-Aware Service - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe O23 - Service: @%SystemRoot%\system32\lltdres.dll,-1 (lltdsvc) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\lmhsvc.dll,-101 (lmhosts) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: LVCOMSer - Logitech Inc. - C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe O23 - Service: Process Monitor (LVPrcSrv) - Logitech Inc. - C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe O23 - Service: @%systemroot%\system32\mmcss.dll,-100 (MMCSS) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\FirewallAPI.dll,-23090 (MpsSvc) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe O23 - Service: @%SystemRoot%\system32\iscsidsc.dll,-5000 (MSiSCSI) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\msimsg.dll,-27 (msiserver) - Unknown owner - C:\Windows\system32\msiexec.exe O23 - Service: @%SystemRoot%\system32\qagentrt.dll,-6 (napagent) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: Nero BackItUp Scheduler 4.0 - Nero AG - C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe O23 - Service: Net Driver HPZ12 - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe O23 - Service: @%SystemRoot%\system32\netman.dll,-109 (Netman) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\netprof.dll,-246 (netprofm) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\System32\nlasvc.dll,-1 (NlaSvc) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: NMIndexingService - Unknown owner - C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe (file missing) O23 - Service: @%SystemRoot%\system32\nsisvc.dll,-200 (nsi) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe O23 - Service: @%SystemRoot%\system32\p2psvc.dll,-8004 (p2pimsvc) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\p2psvc.dll,-8006 (p2psvc) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\pcasvc.dll,-1 (PcaSvc) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%systemroot%\system32\pla.dll,-500 (pla) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: PLFlash DeviceIoControl Service - Prolific Technology Inc. - C:\Windows\system32\IoctlSvc.exe O23 - Service: @%SystemRoot%\system32\umpnpmgr.dll,-100 (PlugPlay) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: Pml Driver HPZ12 - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\p2psvc.dll,-8002 (PNRPAutoReg) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\p2psvc.dll,-8000 (PNRPsvc) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\System32\polstore.dll,-5010 (PolicyAgent) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%systemroot%\system32\profsvc.dll,-300 (ProfSvc) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe O23 - Service: @%SystemRoot%\system32\qwave.dll,-1 (QWAVE) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%Systemroot%\system32\rasauto.dll,-200 (RasAuto) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%Systemroot%\system32\rasmans.dll,-200 (RasMan) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @regsvc.dll,-1 (RemoteRegistry) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe O23 - Service: @oleres.dll,-5010 (RpcSs) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe O23 - Service: @%SystemRoot%\System32\SCardSvr.dll,-1 (SCardSvr) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\schedsvc.dll,-100 (Schedule) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\System32\certprop.dll,-13 (SCPolicySvc) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\sdrsvc.dll,-107 (SDRSVC) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\seclogon.dll,-7001 (seclogon) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\Sens.dll,-200 (SENS) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe O23 - Service: @%SystemRoot%\System32\SessEnv.dll,-1026 (SessionEnv) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\ipnathlp.dll,-106 (SharedAccess) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\System32\shsvcs.dll,-12288 (ShellHWDetection) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\SLsvc.exe,-101 (slsvc) - Unknown owner - C:\Windows\system32\SLsvc.exe O23 - Service: @%SystemRoot%\system32\SLUINotify.dll,-103 (SLUINotify) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe O23 - Service: @%systemroot%\system32\ssdpsrv.dll,-100 (SSDPSRV) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\sstpsvc.dll,-200 (SstpSvc) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\wiaservc.dll,-9 (stisvc) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\System32\swprv.dll,-103 (swprv) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\sysmain.dll,-1000 (SysMain) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\TabSvc.dll,-100 (TabletInputService) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\tapisrv.dll,-10100 (TapiSrv) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\tbssvc.dll,-100 (TBS) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\System32\termsrv.dll,-268 (TermService) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\System32\shsvcs.dll,-8192 (Themes) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%systemroot%\system32\mmcss.dll,-102 (THREADORDER) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\trkwks.dll,-1 (TrkWks) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\servicing\TrustedInstaller.exe,-100 (TrustedInstaller) - Unknown owner - C:\Windows\servicing\TrustedInstaller.exe O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe O23 - Service: @%systemroot%\system32\upnphost.dll,-213 (upnphost) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: UPnPService - Magix AG - C:\Program Files\Common Files\MAGIX Shared\UPnPService\UPnPService.exe O23 - Service: @%SystemRoot%\system32\dwm.exe,-2000 (UxSms) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe O23 - Service: @%SystemRoot%\system32\w32time.dll,-200 (W32Time) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\wcncsvc.dll,-3 (wcncsvc) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\WcsPlugInService.dll,-200 (WcsPlugInService) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%systemroot%\system32\wdi.dll,-502 (WdiServiceHost) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%systemroot%\system32\wdi.dll,-500 (WdiSystemHost) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%systemroot%\system32\webclnt.dll,-100 (WebClient) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\wecsvc.dll,-200 (Wecsvc) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\System32\wercplsupport.dll,-101 (wercplsupport) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\System32\wersvc.dll,-100 (WerSvc) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%ProgramFiles%\Windows Defender\MsMpRes.dll,-103 (WinDefend) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\winhttp.dll,-100 (WinHttpAutoProxySvc) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%Systemroot%\system32\wbem\wmisvc.dll,-205 (Winmgmt) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%Systemroot%\system32\wsmsvc.dll,-101 (WinRM) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\System32\wlansvc.dll,-257 (Wlansvc) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe O23 - Service: @%ProgramFiles%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files\Windows Media Player\wmpnetwk.exe O23 - Service: @%SystemRoot%\system32\wpcsvc.dll,-100 (WPCSvc) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\wpdbusenum.dll,-100 (WPDBusEnum) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe,-100 (WPFFontCache_v0400) - Unknown owner - C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe O23 - Service: @%SystemRoot%\System32\wscsvc.dll,-200 (wscsvc) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%systemroot%\system32\SearchIndexer.exe,-103 (WSearch) - Unknown owner - C:\Windows\system32\SearchIndexer.exe O23 - Service: @%systemroot%\system32\wuaueng.dll,-105 (wuauserv) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\wudfsvc.dll,-1000 (wudfsvc) - Unknown owner - C:\Windows\system32\svchost.exe -- End of file - 26498 bytes ======Scheduled tasks folder====== C:\Windows\tasks\Ad-Aware Update (Weekly).job C:\Windows\tasks\Extension de garantie-Alain.job C:\Windows\tasks\GoogleUpdateTaskMachineCore.job C:\Windows\tasks\GoogleUpdateTaskMachineUA.job C:\Windows\tasks\NeroLiveEpgUpdate-PC-de-Alain_Alain.job ======Registry dump====== HP Print Enhancer - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll Aide pour le lien d'Adobe PDF Reader - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll Ask Search Assistant BHO - C:\Program Files\AskTBar\SrchAstt\1.bin\A5SRCHAS.DLL Google Toolbar Helper - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll Google Toolbar Notifier BHO - C:\Program Files\Google\GoogleToolbarNotifier\5.6.5612.1312\swg.dll EOBHO Class - C:\Program Files\EoRezo\EoRezoBHO.dll Google Dictionary Compression sdch - C:\Program Files\Google\Google Toolbar\Component\fastsearch_B7C5AC242193BB3E.dll CBrowserHelperObject Object - C:\Program Files\Google\Google_BAE\BAE.dll Ask Toolbar BHO - C:\Program Files\AskTBar\bar\1.bin\ASKTBAR.DLL HP Smart BHO Class - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll {EF99BD32-C1FB-11D2-892F-0090271D4F88} - Yahoo! Toolbar - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll {2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll {FE063DB9-4EC0-403e-8DD8-394C54984B2C} - Ask Toolbar - C:\Program Files\AskTBar\bar\1.bin\ASKTBAR.DLL "Windows Defender"=C:\Program Files\Windows Defender\MSASCui.exe "RtHDVCpl"=C:\Windows\RtHDVCpl.exe "NvCplDaemon"=C:\Windows\system32\NvCpl.dll "NvMediaCenter"=C:\Windows\system32\NvMcTray.dll "Google Desktop Search"=C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe "toolbar_eula_launcher"=C:\Program Files\Packard Bell\GOOGLE_EULA\EULALauncher.exe "HP Software Update"=C:\Program Files\HP\HP Software Update\HPWuSchd2.exe "LogitechCommunicationsManager"=C:\Program Files\Common Files\LogiShrd\LComMgr\Communications_Helper.exe "LogitechQuickCamRibbon"=C:\Program Files\Logitech\QuickCam\Quickcam.exe "AppleSyncNotifier"=C:\Program Files\Common Files\Apple\Mobile Device Support\AppleSyncNotifier.exe "Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe "EoEngine"= "Skytel"=C:\Windows\Skytel.exe "hpqSRMon"=C:\Program Files\HP\Digital Imaging\bin\hpqSRMon.exe "eorezo"=C:\Program Files\EoRezo\eorezo.exe "avast5"=C:\Program Files\Alwil Software\Avast5\avastUI.exe "TrayServer"=C:\Program Files\MAGIX\Films_sur_DVD_8\TrayServer.exe "NPSStartup"= "QuickTime Task"=C:\Program Files\QuickTime\QTTask.exe "iTunesHelper"=C:\Program Files\iTunes\iTunesHelper.exe "SoftwareHelper"=C:\Users\Alain\AppData\Roaming\eoRezo\SoftwareUpdate\SoftwareUpdateHP.exe "SmpcSys"=C:\Program Files\Packard Bell\SetUpMyPC\SmpSys.exe "swg"=C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe "ehTray.exe"=C:\Windows\ehome\ehTray.exe "msnmsgr"=C:\Program Files\Windows Live\Messenger\msnmsgr.exe /background C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup HP Digital Imaging Monitor.lnk - C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe "AppInit_DLLs"="C:\PROGRA~1\Google\GOOGLE~4\GOEC62~1.DLL" "dontdisplaylastusername"=0 "legalnoticecaption"= "legalnoticetext"= "shutdownwithoutlogon"=1 "undockwithoutlogon"=1 "EnableUIADesktopToggle"=0 "NoDriveAutorun"=0 "BindDirectlyToPropertySetStorage"=0 ======File associations====== .js - edit - C:\Windows\System32\Notepad.exe %1 .js - open - C:\Windows\System32\WScript.exe "%1" %* ======List of files/folders created in the last 1 months====== 2011-01-16 17:47:45 ----D---- C:\rsit 2011-01-16 17:47:45 ----D---- C:\Program Files\trend micro 2011-01-13 18:54:41 ----A---- C:\Windows\system32\sdclt.exe 2011-01-13 18:53:41 ----A---- C:\Windows\system32\odbc32.dll 2011-01-03 19:01:54 ----A---- C:\Windows\system32\win32k.sys 2011-01-03 19:01:53 ----A---- C:\Windows\system32\schedsvc.dll 2011-01-03 19:01:52 ----A---- C:\Windows\system32\wmicmiplugin.dll 2011-01-03 19:01:52 ----A---- C:\Windows\system32\taskschd.dll 2011-01-03 19:01:52 ----A---- C:\Windows\system32\taskeng.exe 2011-01-03 19:01:52 ----A---- C:\Windows\system32\taskcomp.dll 2011-01-03 19:01:50 ----A---- C:\Windows\system32\consent.exe 2011-01-03 19:01:49 ----A---- C:\Windows\system32\fontsub.dll 2011-01-03 19:01:49 ----A---- C:\Windows\system32\atmlib.dll 2011-01-03 19:01:49 ----A---- C:\Windows\system32\atmfd.dll 2011-01-03 19:01:44 ----A---- C:\Windows\system32\iertutil.dll 2011-01-03 19:01:43 ----A---- C:\Windows\system32\mstime.dll 2011-01-03 19:01:43 ----A---- C:\Windows\system32\mshtml.dll 2011-01-03 19:01:43 ----A---- C:\Windows\system32\ieframe.dll 2011-01-03 19:01:40 ----A---- C:\Windows\system32\ie4uinit.exe 2011-01-03 19:01:39 ----A---- C:\Windows\system32\wininet.dll 2011-01-03 19:01:39 ----A---- C:\Windows\system32\urlmon.dll 2011-01-03 19:01:39 ----A---- C:\Windows\system32\occache.dll 2011-01-03 19:01:39 ----A---- C:\Windows\system32\mshtmled.dll 2011-01-03 19:01:39 ----A---- C:\Windows\system32\msfeedssync.exe 2011-01-03 19:01:39 ----A---- C:\Windows\system32\msfeedsbs.dll 2011-01-03 19:01:39 ----A---- C:\Windows\system32\msfeeds.dll 2011-01-03 19:01:39 ----A---- C:\Windows\system32\licmgr10.dll 2011-01-03 19:01:39 ----A---- C:\Windows\system32\jsproxy.dll 2011-01-03 19:01:39 ----A---- C:\Windows\system32\ieUnatt.exe 2011-01-03 19:01:39 ----A---- C:\Windows\system32\ieui.dll 2011-01-03 19:01:39 ----A---- C:\Windows\system32\iesysprep.dll 2011-01-03 19:01:39 ----A---- C:\Windows\system32\iesetup.dll 2011-01-03 19:01:39 ----A---- C:\Windows\system32\iernonce.dll 2011-01-03 19:01:39 ----A---- C:\Windows\system32\iepeers.dll 2011-01-03 19:01:39 ----A---- C:\Windows\system32\iedkcs32.dll 2011-01-03 19:01:31 ----A---- C:\Windows\system32\tzres.dll 2010-12-26 07:10:16 ----D---- C:\Program Files\cspep 2010-12-19 10:31:29 ----D---- C:\Program Files\iPod 2010-12-19 10:27:49 ----D---- C:\Program Files\Bonjour ======List of files/folders modified in the last 1 months====== 2011-01-16 17:47:57 ----D---- C:\Windows\prefetch 2011-01-16 17:47:52 ----D---- C:\Windows\Temp 2011-01-16 17:47:45 ----RD---- C:\Program Files 2011-01-16 09:53:51 ----SHD---- C:\System Volume Information 2011-01-16 08:52:40 ----D---- C:\Windows\inf 2011-01-16 08:52:40 ----AD---- C:\Windows\System32 2011-01-16 08:52:40 ----A---- C:\Windows\system32\PerfStringBackup.INI 2011-01-16 08:50:24 ----D---- C:\Windows\Tasks 2011-01-14 22:24:08 ----D---- C:\Windows\winsxs 2011-01-13 21:26:41 ----SHD---- C:\Windows\Installer 2011-01-13 18:53:41 ----A---- C:\Windows\system32\mrt.exe 2011-01-13 18:53:32 ----D---- C:\ProgramData\Microsoft Help 2011-01-13 18:51:13 ----D---- C:\Windows\system32\catroot 2011-01-13 18:51:12 ----D---- C:\Windows\system32\catroot2 2011-01-13 18:49:56 ----D---- C:\Windows\system32\Tasks 2011-01-11 23:24:48 ----D---- C:\Windows\system32\Msdtc 2011-01-11 23:24:45 ----D---- C:\Windows\system32\wbem 2011-01-11 23:24:45 ----D---- C:\Windows 2011-01-11 23:24:09 ----D---- C:\Windows\system32\config 2011-01-11 23:24:01 ----D---- C:\Windows\system32\spool 2011-01-11 23:24:01 ----D---- C:\Windows\system32\drivers\etc 2011-01-11 23:24:01 ----D---- C:\Windows\system32\CodeIntegrity 2011-01-11 23:24:01 ----D---- C:\Windows\registration 2011-01-04 14:32:23 ----D---- C:\Windows\system32\migration 2011-01-04 14:32:23 ----D---- C:\Program Files\Windows Mail 2011-01-04 14:32:23 ----D---- C:\Program Files\Internet Explorer 2011-01-04 14:26:19 ----D---- C:\Windows\rescache 2011-01-04 14:15:45 ----D---- C:\Windows\system32\fr-FR 2011-01-03 18:43:43 ----D---- C:\Windows\system32\drivers\UMDF 2011-01-03 18:43:43 ----AD---- C:\Windows\system32\drivers 2011-01-03 18:43:41 ----D---- C:\ProgramData\FLEXnet 2010-12-25 13:43:26 ----D---- C:\Windows\Minidump 2010-12-19 10:32:01 ----D---- C:\Program Files\iTunes 2010-12-19 10:31:29 ----D---- C:\Program Files\Common Files\Apple 2010-12-19 10:29:38 ----D---- C:\Program Files\QuickTime 2010-12-19 09:55:23 ----D---- C:\Program Files\iPod(23) 2010-12-19 09:54:08 ----SD---- C:\Windows\Downloaded Program Files 2010-12-19 09:54:08 ----RSD---- C:\Windows\Media 2010-12-19 09:54:08 ----D---- C:\Program Files\Common Files\Services 2010-12-19 09:53:57 ----D---- C:\Program Files\EoRezo ======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)====== R0 Lbd;Lbd; C:\Windows\system32\DRIVERS\Lbd.sys R0 nvstor32;nvstor32; C:\Windows\system32\drivers\nvstor32.sys R0 PxHelp20;PxHelp20; C:\Windows\System32\Drivers\PxHelp20.sys R1 aswRdr;aswRdr; C:\Windows\system32\drivers\aswRdr.sys R1 aswSP;aswSP; C:\Windows\system32\drivers\aswSP.sys R1 aswTdi;avast! Network Shield Support; C:\Windows\system32\drivers\aswTdi.sys R2 aswFsBlk;aswFsBlk; C:\Windows\system32\drivers\aswFsBlk.sys R2 aswMonFlt;aswMonFlt; \??\C:\Windows\system32\drivers\aswMonFlt.sys R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\Windows\system32\DRIVERS\GEARAspiWDM.sys R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHDA.sys R3 LVPr2Mon;Logitech LVPr2Mon Driver; C:\Windows\system32\DRIVERS\LVPr2Mon.sys R3 LVUSBSta;Logitech USB Monitor Filter; C:\Windows\system32\drivers\LVUSBSta.sys R3 NVENETFD;NVIDIA nForce Networking Controller Driver; C:\Windows\system32\DRIVERS\nvmfdx32.sys R3 nvlddmkm;nvlddmkm; C:\Windows\system32\DRIVERS\nvlddmkm.sys R3 pfc;Padus ASPI Shell; C:\Windows\system32\drivers\pfc.sys R3 PID_PEPI;Logitech QuickCam IM(PID_PEPI); C:\Windows\system32\DRIVERS\LV302V32.SYS R3 USBAAPL;Apple Mobile USB Driver; C:\Windows\System32\Drivers\usbaapl.sys R3 usbaudio;Pilote USB audio (WDM); C:\Windows\system32\drivers\usbaudio.sys R3 WpdUsb;WpdUsb; C:\Windows\system32\DRIVERS\wpdusb.sys R3 WUDFRd;WUDFRd; C:\Windows\system32\DRIVERS\WUDFRd.sys S3 BELKIN;Belkin Wireless G USB Network Adapter; C:\Windows\system32\DRIVERS\BLKWGU.sys S3 Dot4;Pilote MS IEEE-1284.4; C:\Windows\system32\DRIVERS\Dot4.sys S3 Dot4Print;Pilote de classe Imprimante pour IEEE-1284.4; C:\Windows\system32\DRIVERS\Dot4Prt.sys S3 dot4usb;MS Dot4USB Filter Dot4USB Filter; C:\Windows\system32\DRIVERS\dot4usb.sys S3 drmkaud;Filtre de décodeur DRM (Noyau Microsoft); C:\Windows\system32\drivers\drmkaud.sys S3 FsUsbExDisk;FsUsbExDisk; \??\C:\Windows\system32\FsUsbExDisk.SYS S3 Lavasoft Kernexplorer;Lavasoft helper driver; \??\C:\Program Files\Lavasoft\Ad-Aware\KernExplorer.sys S3 MSKSSRV;Proxy de service de répartition Microsoft; C:\Windows\system32\drivers\MSKSSRV.sys S3 MSPCLOCK;Proxy d'horloge de répartition Microsoft; C:\Windows\system32\drivers\MSPCLOCK.sys S3 MSPQM;Proxy de gestion de qualité de répartition Microsoft; C:\Windows\system32\drivers\MSPQM.sys S3 MSTEE;Convertisseur en T/site-à-site de répartition Microsoft; C:\Windows\system32\drivers\MSTEE.sys S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\Windows\system32\DRIVERS\pccsmcfd.sys S3 USB28xxBGA;USB 2861 Device; C:\Windows\system32\DRIVERS\emBDA.sys S3 USB28xxOEM;USB 28xx OEM Filter; C:\Windows\system32\DRIVERS\emOEM.sys S3 usbscan;Pilote de scanneur USB; C:\Windows\system32\DRIVERS\usbscan.sys S4 ErrDev;Microsoft Hardware Error Device Driver; C:\Windows\system32\drivers\errdev.sys S4 MegaSR;MegaSR; C:\Windows\system32\drivers\megasr.sys S4 nvrd32;NVIDIA nForce RAID Driver; C:\Windows\system32\drivers\nvrd32.sys S4 nvsmu;nvsmu; C:\Windows\system32\drivers\nvsmu.sys ======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)====== R2 AdobeActiveFileMonitor6.0;Adobe Active File Monitor V6; C:\Program Files\Adobe\Photoshop Elements 6.0\PhotoshopElementsFileAgent.exe R2 Apple Mobile Device;Apple Mobile Device; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe R2 avast! Antivirus;avast! Antivirus; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe R2 Bonjour Service;Service Bonjour; C:\Program Files\Bonjour\mDNSResponder.exe R2 GenericHidService;Generic Service for HID Keyboard Input Collections; C:\Program Files\Packard bell\SAXO27\HIDSERVICE.EXE R2 hpqddsvc;Service HP CUE DeviceDiscovery; C:\Windows\system32\svchost.exe R2 HPSLPSVC;HP Network Devices Support; C:\Windows\system32\svchost.exe R2 Lavasoft Ad-Aware Service;Lavasoft Ad-Aware Service; C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe R2 LVCOMSer;LVCOMSer; C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe R2 LVPrcSrv;Process Monitor; C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe R2 Nero BackItUp Scheduler 4.0;Nero BackItUp Scheduler 4.0; C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe R2 PLFlash DeviceIoControl Service;PLFlash DeviceIoControl Service; C:\Windows\system32\IoctlSvc.exe R3 avast! Mail Scanner;avast! Mail Scanner; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe R3 avast! Web Scanner;avast! Web Scanner; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe R3 hpqcxs08;hpqcxs08; C:\Windows\system32\svchost.exe R3 iPod Service;Service de l’iPod; C:\Program Files\iPod\bin\iPodService.exe S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe S2 gupdate;Google Update Service (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe S2 Net Driver HPZ12;Net Driver HPZ12; C:\Windows\System32\svchost.exe S2 Pml Driver HPZ12;Pml Driver HPZ12; C:\Windows\System32\svchost.exe S3 FirebirdServerMAGIXInstance;Firebird Server - MAGIX Instance; C:\Program Files\MAGIX\Common\Database\bin\fbserver.exe S3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe S3 FontCache;@%systemroot%\system32\FntCache.dll,-100; C:\Windows\system32\svchost.exe S3 GoogleDesktopManager-051210-111108;Google Desktop Manager 5.9.1005.12335; C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe S3 gusvc;Google Software Updater; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe S3 NMIndexingService;NMIndexingService; C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE S3 ServiceLayer;ServiceLayer; C:\Program Files\PC Connectivity Solution\ServiceLayer.exe S3 UPnPService;UPnPService; C:\Program Files\Common Files\MAGIX Shared\UPnPService\UPnPService.exe S3 WPFFontCache_v0400;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe,-100; C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe -----------------EOF-----------------

Alain-st-martin13 · Answer 5 · Posté le 16/01/2011 à 18:06:33

et voici le deuxième fichier : info.txt logfile of random's system information tool 1.08 2011-01-16 17:48:07 ======Uninstall list====== -->C:\Program Files\DivX\DivXCodecUninstall.exe /CODEC -->C:\ProgramData\DivX\DivX7\DivX Converter\DivXConverterUninstall.exe /CONVERTER 32 Bit HP CIO Components Installer-->MsiExec.exe /I{2614F54E-A828-49FA-93BA-45A3F756BFAA} Ad-Aware-->"C:\ProgramData\{ECC164E0-3133-4C70-A831-F08DB2940F70}\Ad-AwareInstall.exe" REMOVE=TRUE MODIFY=FALSE Ad-Aware-->C:\ProgramData\{ECC164E0-3133-4C70-A831-F08DB2940F70}\Ad-AwareInstall.exe Adobe AIR-->c:\Program Files\Common Files\Adobe AIR\Versions\1.0\Resources\Adobe AIR Updater.exe -arp:uninstall Adobe AIR-->MsiExec.exe /I{B194272D-1F92-46DF-99EB-8D5CE91CB4EC} Adobe Flash Player 10 ActiveX-->C:\Windows\system32\Macromed\Flash\FlashUtil10l_ActiveX.exe -maintain activex Adobe Flash Player 9 Plugin-->MsiExec.exe /X{61E8B062-51F9-4BBB-B1FC-E2A4A40944F5} Adobe Photoshop Elements 6.0-->msiexec /I {F54AC413-D2C6-4A24-B324-370C223C6250} Adobe Photoshop Elements 6-->"C:\Program Files\Packard Bell\Smart Restore\SmartRestore.exe" /MSADDREM *AdobePE6* Adobe Reader 8.1.3 - Français-->MsiExec.exe /I{AC76BA86-7AD7-1036-7B44-A81300000003} Adobe Reader 8-->"C:\Program Files\Packard Bell\Smart Restore\SmartRestore.exe" /MSADDREM *AdobeReader* Adobe Shockwave Player-->C:\Windows\System32\Macromed\SHOCKW~1\UNWISE.EXE C:\Windows\System32\Macromed\SHOCKW~1\Install.log Apple Application Support-->MsiExec.exe /I{EE6097DD-05F4-4178-9719-D3170BF098E8} Apple Mobile Device Support-->MsiExec.exe /I{308B6AEA-DE50-4666-996D-0FA461719D6B} Apple Software Update-->MsiExec.exe /I{C41300B9-185D-475E-BFEC-39EF732F19B1} Ask Toolbar-->rundll32 C:\PROGRA~1\AskTBar\bar\1.bin\AskTBar.dll,O avast! Free Antivirus-->C:\Program Files\Alwil Software\Avast5\aswRunDll.exe "C:\Program Files\Alwil Software\Avast5\Setup\setiface.dll" RunSetup Belkin Wireless Driver-->C:\Program Files\InstallShield Installation Information\{D593C72C-435B-4171-8106-9CA8AA34D716}\SETUP.EXE -v"ISSCRIPTCMDLINE=\"-d -zREMOVE\"" -l0x040c -removeonly Bonjour-->MsiExec.exe /X{2A981294-F14C-4F0F-9627-D793270922F8} Browser Address Error Redirector-->regsvr32 /u /s "C:\Program Files\Google\Google_BAE\BAE.dll" Configuration DivX-->C:\ProgramData\DivX\Setup\DivXSetup.exe /uninstall /bundleGroupId divx.com DivX Converter-->C:\ProgramData\DivX\DivX7\DivX Converter\DivXConverterUninstall.exe /CONVERTER DivX Plus DirectShow Filters-->C:\ProgramData\DivX\DivX7\DivX Plus DirectShow Filters\DivXDSFiltersUninstall.exe /DSFILTERS eMule-->"C:\Program Files\eMule\Uninstall.exe" EoRezo 10.3-->"C:\Program Files\EoRezo\unins000.exe" Firebird SQL Server - MAGIX Edition-->C:\Program Files\MAGIX\Common\Database\unwise.exe Google BAE-->"C:\Program Files\Packard Bell\Smart Restore\SmartRestore.exe" /MSADDREM *GoogleBAE* Google Desktop-->C:\Program Files\Google\Google Desktop Search\GoogleDesktopSetup.exe -uninstall Google Earth-->"C:\Program Files\Packard Bell\Smart Restore\SmartRestore.exe" /MSADDREM *GOOGLE_EARTH* Google Toolbar for Internet Explorer-->"C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarManager_E582EA556D8DE101.exe" /uninstall Google Toolbar for Internet Explorer-->MsiExec.exe /I{18455581-E099-4BA8-BC6B-F34B2F06600C} Google Update Helper-->MsiExec.exe /I{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2} Google Earth-->MsiExec.exe /X{4286E640-B5FB-11DF-AC4B-005056C00008} GoogleDesktop-->"C:\Program Files\Packard Bell\Smart Restore\SmartRestore.exe" /MSADDREM *GoogleDesktop_XX* GoogleToolbar-->"C:\Program Files\Packard Bell\Smart Restore\SmartRestore.exe" /MSADDREM *GoogleToolbar* HDReg France-->MsiExec.exe /I{0ED40D2A-7131-4FE7-941E-5C329336F712} Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)-->C:\Windows\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall /qb+ REBOOTPROMPT="" Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)-->C:\Windows\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall {A7EEA2F2-BFCD-4A54-A575-7B81A786E658} /qb+ REBOOTPROMPT="" HP Customer Participation Program 11.0-->C:\Program Files\HP\Digital Imaging\ExtCapUninstall\hpzscr01.exe -datfile hpqhsc01.dat HP Imaging Device Functions 11.0-->C:\Program Files\HP\Digital Imaging\DeviceManagement\hpzscr01.exe -datfile hpqbud01.dat HP Photosmart C4500 All-In-One Driver Software 11.0 Rel .4-->C:\Program Files\HP\Digital Imaging\{BED1705F-7558-40f7-9F52-6C6FBD58EA2E}\setup\hpzscr01.exe -datfile hposcr30.dat -onestop HP Photosmart Essential 3.5-->C:\Program Files\HP\Digital Imaging\PhotosmartEssential\hpzscr01.exe -datfile hpqbud13.dat HP Smart Web Printing 4.60-->C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpzscr01.exe -datfile hpqbud15.dat HP Solution Center 13.0-->C:\Program Files\HP\Digital Imaging\eSupport\hpzscr01.exe -datfile hpqbud05.dat -forcereboot HP Update-->MsiExec.exe /X{818ABC3C-635C-4651-8183-D0E9640B7DD1} Infocentre Rev. 2.0-->"C:\Program Files\Packard Bell\Smart Restore\SmartRestore.exe" /MSADDREM *Infocentre* iPhone Video Converter-->C:\Program Files\MP4Converter\iPhone Video Converter 3\Uninstall.exe iTunes-->MsiExec.exe /I{881F5DE8-9367-4B81-A325-E91BBC6472F9} Logitech QuickCam-->MsiExec.exe /X{3AF8FCCD-F51A-4014-9002-F195E1CBC876} Logitech Updater-->MsiExec.exe /I{53735ECE-E461-4FD0-B742-23A352436D3A} MAGIX Films sur DVD 8 8.0.3.0 (F)-->C:\Program Files\MAGIX\Films_sur_DVD_8\unwise.exe MAGIX Photo Manager 2008-->C:\Program Files\MAGIX\Photo_Manager_2008\unwise.exe MAGIX Screenshare-->C:\Program Files\MAGIX\PCVisit\unwise.exe MAGIX Speed burnR-->C:\Program Files\MAGIX\Speed2_burnR_mxcdr\unwise.exe MAGIX USB-Videowandler 2-->"C:\Program Files\InstallShield Installation Information\{91065458-A5CF-474C-9160-B44B974B3C25}\setup.exe" -runfromtemp -l0x040c -removeonly MAGIX USB-Videowandler 2-->MsiExec.exe /I{91065458-A5CF-474C-9160-B44B974B3C25} MAGIXUSB-Videowandler 2 Device Driver-->C:\Windows\emunist.exe Microsoft .NET Framework 3.5 Language Pack SP1 - fra-->MsiExec.exe /I{3E31821C-7917-367E-938E-E65FC413EA31} Microsoft .NET Framework 3.5 SP1-->c:\Windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setup.exe Microsoft .NET Framework 3.5 SP1-->MsiExec.exe /I{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} Microsoft .NET Framework 4 Client Profile FRA Language Pack-->MsiExec.exe /X{0F5B4A82-9DAF-3D13-8CB8-AEB25E4A614E} Microsoft .NET Framework 4 Client Profile-->C:\Windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\Setup.exe /repair /x86 /parameterfolder Client Microsoft .NET Framework 4 Client Profile-->MsiExec.exe /X{3C3901C5-3455-3E0A-A214-0B093A5070A6} Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {0B36C6D6-F5D8-4EAF-BF94-4376A230AD5B} Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-0015-040C-0000-0000000FF1CE} /uninstall {AE187E0D-EBA5-4EE1-A397-BF1A577CB24C} Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-0016-040C-0000-0000000FF1CE} /uninstall {AE187E0D-EBA5-4EE1-A397-BF1A577CB24C} Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-0018-040C-0000-0000000FF1CE} /uninstall {AE187E0D-EBA5-4EE1-A397-BF1A577CB24C} Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-0019-040C-0000-0000000FF1CE} /uninstall {AE187E0D-EBA5-4EE1-A397-BF1A577CB24C} Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001A-040C-0000-0000000FF1CE} /uninstall {AE187E0D-EBA5-4EE1-A397-BF1A577CB24C} Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001B-040C-0000-0000000FF1CE} /uninstall {AE187E0D-EBA5-4EE1-A397-BF1A577CB24C} Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-0044-040C-0000-0000000FF1CE} /uninstall {AE187E0D-EBA5-4EE1-A397-BF1A577CB24C} Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-006E-040C-0000-0000000FF1CE} /uninstall {B165D3C2-40AE-4D39-86F7-E5C87C4264C0} Microsoft Office Access MUI (French) 2007-->MsiExec.exe /X{90120000-0015-040C-0000-0000000FF1CE} Microsoft Office Excel MUI (French) 2007-->MsiExec.exe /X{90120000-0016-040C-0000-0000000FF1CE} Microsoft Office InfoPath MUI (French) 2007-->MsiExec.exe /X{90120000-0044-040C-0000-0000000FF1CE} Microsoft Office Outlook MUI (French) 2007-->MsiExec.exe /X{90120000-001A-040C-0000-0000000FF1CE} Microsoft Office PowerPoint MUI (French) 2007-->MsiExec.exe /X{90120000-0018-040C-0000-0000000FF1CE} Microsoft Office PowerPoint Viewer 2007 (French)-->MsiExec.exe /X{95120000-00AF-040C-0000-0000000FF1CE} Microsoft Office Professional Plus 2007-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE12\Office Setup Controller\setup.exe" /uninstall PROPLUS /dll OSETUP.DLL Microsoft Office Professional Plus 2007-->MsiExec.exe /X{90120000-0011-0000-0000-0000000FF1CE} Microsoft Office Proof (Arabic) 2007-->MsiExec.exe /X{90120000-001F-0401-0000-0000000FF1CE} Microsoft Office Proof (Dutch) 2007-->MsiExec.exe /X{90120000-001F-0413-0000-0000000FF1CE} Microsoft Office Proof (English) 2007-->MsiExec.exe /X{90120000-001F-0409-0000-0000000FF1CE} Microsoft Office Proof (French) 2007-->MsiExec.exe /X{90120000-001F-040C-0000-0000000FF1CE} Microsoft Office Proof (German) 2007-->MsiExec.exe /X{90120000-001F-0407-0000-0000000FF1CE} Microsoft Office Proof (Spanish) 2007-->MsiExec.exe /X{90120000-001F-0C0A-0000-0000000FF1CE} Microsoft Office Proofing (French) 2007-->MsiExec.exe /X{90120000-002C-040C-0000-0000000FF1CE} Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001F-0401-0000-0000000FF1CE} /uninstall {14809F99-C601-4D4A-9391-F1E8FAA964C5} Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001F-0407-0000-0000000FF1CE} /uninstall {A0516415-ED61-419A-981D-93596DA74165} Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001F-0409-0000-0000000FF1CE} /uninstall {ABDDE972-355B-4AF1-89A8-DA50B7B5C045} Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001F-040C-0000-0000000FF1CE} /uninstall {F580DDD5-8D37-4998-968E-EBB76BB86787} Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001F-0413-0000-0000000FF1CE} /uninstall {D66D5A44-E480-4BA4-B4F2-C554F6B30EBB} Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001F-0C0A-0000-0000000FF1CE} /uninstall {187308AB-5FA7-4F14-9AB9-D290383A10D9} Microsoft Office Publisher MUI (French) 2007-->MsiExec.exe /X{90120000-0019-040C-0000-0000000FF1CE} Microsoft Office Shared MUI (French) 2007-->MsiExec.exe /X{90120000-006E-040C-0000-0000000FF1CE} Microsoft Office Word MUI (French) 2007-->MsiExec.exe /X{90120000-001B-040C-0000-0000000FF1CE} Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053-->MsiExec.exe /X{770657D0-A123-3C07-8E44-1C83EC895118} Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{837b34e3-7c30-493c-8f6a-2b0f04e2912c} Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148-->MsiExec.exe /X{1F1C2DFC-2D24-3E06-BCB8-725134ADF989} Mise à jour Microsoft Office Excel 2007 Help (KB963678)-->msiexec /package {90120000-0016-040C-0000-0000000FF1CE} /uninstall {B761869A-B85C-40E2-994C-A1CE78AC8F2C} Mise à jour Microsoft Office Outlook 2007 Help (KB963677)-->msiexec /package {90120000-001A-040C-0000-0000000FF1CE} /uninstall {51EFB347-1F3D-4BAC-8B79-F056B904FE21} Mise à jour Microsoft Office Powerpoint 2007 Help (KB963669)-->msiexec /package {90120000-0018-040C-0000-0000000FF1CE} /uninstall {C3DCA38E-005E-41BA-A52A-7C3429F351C3} Mise à jour Microsoft Office Word 2007 Help (KB963665)-->msiexec /package {90120000-001B-040C-0000-0000000FF1CE} /uninstall {81536A04-DBFB-4DB3-978F-0F284590C223} Module de compatibilité pour Microsoft Office System 2007-->MsiExec.exe /X{90120000-0020-040C-0000-0000000FF1CE} Module linguistique Microsoft .NET Framework 3.5 SP1- fra-->c:\Windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 Language Pack SP1 - fra\setup.exe Module linguistique Microsoft .NET Framework 4 Client Profile FRA-->C:\Windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\ClientLP\Setup.exe /repair /x86 /lcid 1036 /parameterfolder ClientLP Mozilla Firefox (3.6.10)-->C:\Program Files\Mozilla Firefox\uninstall\helper.exe MSXML 4.0 SP2 (KB954430)-->MsiExec.exe /I{86493ADD-824D-4B8E-BD72-8C5DCDC52A71} MSXML 4.0 SP2 (KB973688)-->MsiExec.exe /I{F662A8E6-F4DC-41A2-901E-8C11F044BDEC} Mufin MusicFinder Base 1.5.3.249 (F)-->C:\Program Files\MAGIX\Mufin MusicFinder\unwise.exe Nero 9-->C:\Program Files\Common Files\Nero\Nero ProductInstaller 4\SetupX.exe REMOVESERIALNUMBER="9M03-01A1-PCX7-K31A-8A94-98PT-KT2E-522A" neroxml-->MsiExec.exe /I{56C049BE-79E9-4502-BEA7-9754A3E60F9B} NewBlue VideoFX MSPP-->C:\Program Files\NewBlue\VideoFX MSPP\Uninstal.exe NVIDIA Drivers-->C:\Windows\system32\nvuninst.exe UninstallGUI OCR Software by I.R.I.S. 11.0-->C:\Program Files\HP\Digital Imaging\OCR\hpzscr01.exe -datfile hpqbud11.dat Outil de téléchargement Windows Live-->MsiExec.exe /I{205C6BDD-7B73-42DE-8505-9A093F35A238} Package de pilotes Windows - Nokia pccsmcfd (10/12/2007 6.85.4.0)-->C:\PROGRA~1\DIFX\270581355A767BF1\dpinst.exe /u C:\Windows\system32\DRVSTORE\pccsmcfd_4A1E30386F4D0DEC8F5DF262CFBD8845EEBAB175\pccsmcfd.inf Packard Bell ImageWriter-->"C:\Program Files\Packard Bell\Smart Restore\SmartRestore.exe" /MSADDREM *ImageWriter* Packard Bell LCD Test-->"C:\Program Files\Packard Bell\Smart Restore\SmartRestore.exe" /MSADDREM *LCDTest* Packard Bell Updator-->"C:\Program Files\Packard Bell\Smart Restore\SmartRestore.exe" /MSADDREM *Updator* PC Connectivity Solution-->MsiExec.exe /I{AC599724-5755-48C1-ABE7-ABB857652930} PeaZip 2.4.1-->"C:\Program Files\PeaZip\unins000.exe" Picasa 2-->"C:\Program Files\Picasa2\Uninstall.exe" Picasa2-->"C:\Program Files\Packard Bell\Smart Restore\SmartRestore.exe" /MSADDREM *Picasa_2* QuickTime-->MsiExec.exe /I{57752979-A1C9-4C02-856B-FBB27AC4E02C} Realtek HD Audio V6.0.1.5643-->"C:\Program Files\Packard Bell\Smart Restore\SmartRestore.exe" /MSADDREM *AUDIO_REALTEK* Realtek High Definition Audio Driver-->RtlUpd.exe -r -m -nrg2709 Safari-->MsiExec.exe /I{6B9B0C6F-E5FA-4633-A640-AB98A272ECCA} SeaTools for Windows-->MsiExec.exe /I{98613C99-1399-416C-A07C-1EE1C585D872} Security Update for 2007 Microsoft Office System (KB2288621)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {5C497F0B-2061-4CC9-A61C-6B45B867354D} Security Update for 2007 Microsoft Office System (KB2288931)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {CD769337-C8AC-46DB-A7DC-643E50089263} Security Update for 2007 Microsoft Office System (KB2289158)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {210B16C0-CEBD-4DE9-B474-04A7E8735E16} Security Update for 2007 Microsoft Office System (KB2344875)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {6FC5C4C1-D7AE-44C3-94B7-6424FC3E752F} Security Update for 2007 Microsoft Office System (KB2345043)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {536FB502-775F-4494-BACE-C02CC90B7A5B} Security Update for 2007 Microsoft Office System (KB969559)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {69F52148-9BF6-4CDC-BF76-103DEAF3DD08} Security Update for 2007 Microsoft Office System (KB976321)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {7F207DCA-3399-40CB-A968-6E5991B1421A} Security Update for Microsoft .NET Framework 3.5 SP1 (KB2416473)-->C:\Windows\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall {A8894F19-59C8-38D2-8A75-36C0CCE56A5B} /qb+ REBOOTPROMPT="" Security Update for Microsoft Office Access 2007 (KB979440)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {1142CCEC-ACA9-484B-BA90-C3A5CA1988C5} Security Update for Microsoft Office Access 2007 (KB979440)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {5A4E43D5-858F-49BD-BA72-8F30E1793060} Security Update for Microsoft Office Excel 2007 (KB2345035)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {B23002DD-34EC-4988-B810-A5E2A0BF04F1} Security Update for Microsoft Office InfoPath 2007 (KB979441)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {1109D0B3-EFA3-4553-AAED-4C3E9AD130E8} Security Update for Microsoft Office InfoPath 2007 (KB979441)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {8CCB781A-CF6B-4FCB-B6D8-59C64DF5C6DB} Security Update for Microsoft Office PowerPoint 2007 (KB982158)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {F5B70033-E79C-4569-90BF-BC9B4E4F3F46} Security Update for Microsoft Office PowerPoint Viewer (KB2413381)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {3DED0A62-44C8-4E00-A785-5212F297A9D9} Security Update for Microsoft Office Publisher 2007 (KB2284697)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {3A4CDE54-2403-483D-8D9A-15E3264410DF} Security Update for Microsoft Office system 2007 (972581)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {3D019598-7B59-447A-80AE-815B703B84FF} Security Update for Microsoft Office system 2007 (KB974234)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {FCD742B9-7A55-44BC-A776-F795F21FEDDC} Security Update for Microsoft Office Visio Viewer 2007 (KB973709)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {71127777-8B2C-4F97-AF7A-6CF8CAC8224D} Security Update for Microsoft Office Word 2007 (KB2344993)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {7A5B74FA-7A92-4FC9-821A-2DD5D4E73E48} SetUp My PC-->"C:\Program Files\Packard Bell\Smart Restore\SmartRestore.exe" /MSADDREM *SETUPMYPC_FR* Shop for HP Supplies-->C:\Program Files\HP\Digital Imaging\HPSSupply\hpzscr01.exe -datfile hpqbud16.dat Skype 3.6.2.248-->"C:\Program Files\Packard Bell\Smart Restore\SmartRestore.exe" /MSADDREM *SKYPE* Skype™ 4.0-->MsiExec.exe /X{24D753CA-6AE9-4E30-8F5F-EFC93E08BF3D} SoftwareUpdate 1.0-->"C:\Users\Alain\AppData\Roaming\eoRezo\SoftwareUpdate\unins000.exe" Spelling Dictionaries Support For Adobe Reader 8-->MsiExec.exe /I{AC76BA86-7AD7-5464-3428-800000000003} TVAnts 1.0-->C:\PROGRA~1\TVAnts\UNWISE.EXE C:\PROGRA~1\TVAnts\INSTALL.LOG Update for 2007 Microsoft Office System (KB967642)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {C444285D-5E4F-48A4-91DD-47AAAA68E92D} Update for Microsoft .NET Framework 3.5 SP1 (KB963707)-->C:\Windows\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall {B2AE9C82-DC7B-3641-BFC8-87275C4F3607} /qb+ REBOOTPROMPT="" Update for Microsoft Office Outlook 2007 (KB2412171)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {752A0B7C-BD24-4362-AC86-AB63FEE6F46F} Update for Outlook 2007 Junk Email Filter (KB2483110)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {592B47F5-D305-431A-9781-ED6CBB44FA8B} Utilitaire de configuration iPhone-->MsiExec.exe /I{FA54AFB1-5745-4389-B8C1-9F7509672ED1} VC80CRTRedist - 8.0.50727.4053-->MsiExec.exe /I{5EE7D259-D137-4438-9A5F-42F432EC0421} VCRedistSetup-->MsiExec.exe /I{3921A67A-5AB1-4E48-9444-C71814CF3027} Vegas Movie Studio Platinum 9.0-->MsiExec.exe /X{DA507A38-4B2A-40C0-90AC-E30AAA0B757C} Video NVIDIA v174.74-->"C:\Program Files\Packard Bell\Smart Restore\SmartRestore.exe" /MSADDREM *VIDEO_NVIDIA* Visual C++ 2008 x86 Runtime - (v9.0.30729)-->MsiExec.exe /X{F333A33D-125C-32A2-8DCE-5C5D14231E27} Visual C++ 2008 x86 Runtime - v9.0.30729.01-->C:\Windows\system32\msiexec.exe /x {F333A33D-125C-32A2-8DCE-5C5D14231E27} /qb+ REBOOTPROMPT="" Yahoo! Toolbar-->C:\PROGRA~1\Yahoo!\Common\unyt.exe ======Security center information====== AS: Windows Defender ======System event log====== Computer Name: PC-de-Alain Event Code: 2004 Message: Windows Defender a rencontré une erreur lors de la tentative de chargement des signatures et va essayer de revenir à un jeu de signatures correct. Signatures essayées : Actuelle Code de l’erreur : 0x8050a001 Description de l’erreur : Le programme ne trouve pas les fichiers de définition qui permettent de détecter les logiciels non désirés. Recherchez des mises à jour de fichiers de définition, puis recommencez. Pour plus d’informations sur l’installation des mises à jour, voir Aide et support. Signatures chargées : Sauvegarde Version chargée des signatures : 1.85.532.0 Version chargée du moteur : 1.1.5802.0 Record Number: 200102 Source Name: Microsoft-Windows-Windows Defender Time Written: 20100627075105.000000-000 Event Type: Erreur User: Computer Name: PC-de-Alain Event Code: 3004 Message: L’agent de protection en temps réel Windows Defender a détecté des modifications. Microsoft vous recommande d’analyser les logiciels responsables de ces modifications, à la recherche de risques potentiels. Vous pouvez vous servir des informations relatives au fonctionnement de ces programmes pour autoriser ou non leur exécution, ou pour les supprimer de l’ordinateur. N’autorisez les modifications que si vous faites confiance au programme ou à l’éditeur de logiciel. Windows Defender ne peut pas annuler les modifications que vous autorisez. Pour plus d’informations, consultez les données suivantes : Non applicable ID d’analyse : {F6B98B89-F8E2-49E5-95C9-D3B32A6E074F} Utilisateur : PC-de-Alain\Alain Nom : Unknown ID : ID de gravité : ID de catégorie : Chemin d’accès trouvé : regkey:HKCU@S-1-5-21-3243429030-3411314019-3380577577-1000\Software\Microsoft\Windows\CurrentVersion\Run\\AROReminder;runkey:HKCU@S-1-5-21-3243429030-3411314019-3380577577-1000\Software\Microsoft\Windows\CurrentVersion\Run\\AROReminder;file:C:\Program Files\Advanced Registry Optimizer\ARO.exe Type d’alerte : Logiciel non classifié Type de détection : Record Number: 200057 Source Name: Microsoft-Windows-Windows Defender Time Written: 20100627073436.000000-000 Event Type: Avertissement User: Computer Name: PC-de-Alain Event Code: 7022 Message: Le service Service HP CUE DeviceDiscovery est en attente de démarrage. Record Number: 200033 Source Name: Service Control Manager Time Written: 20100627073341.000000-000 Event Type: Erreur User: Computer Name: PC-de-Alain Event Code: 3004 Message: L’agent de protection en temps réel Windows Defender a détecté des modifications. Microsoft vous recommande d’analyser les logiciels responsables de ces modifications, à la recherche de risques potentiels. Vous pouvez vous servir des informations relatives au fonctionnement de ces programmes pour autoriser ou non leur exécution, ou pour les supprimer de l’ordinateur. N’autorisez les modifications que si vous faites confiance au programme ou à l’éditeur de logiciel. Windows Defender ne peut pas annuler les modifications que vous autorisez. Pour plus d’informations, consultez les données suivantes : Non applicable ID d’analyse : {C4CB369A-9043-4C11-A5BB-D28CB6D46D85} Utilisateur : PC-de-Alain\Alain Nom : Unknown ID : ID de gravité : ID de catégorie : Chemin d’accès trouvé : regkey:HKCU@S-1-5-21-3243429030-3411314019-3380577577-1000\Software\Microsoft\Windows\CurrentVersion\Run\\AROReminder;runkey:HKCU@S-1-5-21-3243429030-3411314019-3380577577-1000\Software\Microsoft\Windows\CurrentVersion\Run\\AROReminder;file:C:\Program Files\Advanced Registry Optimizer\aro.exe Type d’alerte : Logiciel non classifié Type de détection : Record Number: 199927 Source Name: Microsoft-Windows-Windows Defender Time Written: 20100627071815.000000-000 Event Type: Avertissement User: Computer Name: PC-de-Alain Event Code: 7022 Message: Le service Service HP CUE DeviceDiscovery est en attente de démarrage. Record Number: 199886 Source Name: Service Control Manager Time Written: 20100627070219.000000-000 Event Type: Erreur User: =====Application event log===== Computer Name: PC-de-Alain Event Code: 10 Message: Le filtre d’événement avec la requête « SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99 » n’a pas pu être réactivé dans l’espace de noms « //./root/CIMV2 » à cause de l’erreur 0x80041003. Les événements ne peuvent pas être délivrés à travers ce filtre tant que le problème ne sera pas corrigé. Record Number: 9172 Source Name: Microsoft-Windows-WMI Time Written: 20090512151752.000000-000 Event Type: Erreur User: Computer Name: PC-de-Alain Event Code: 1000 Message: Application défaillante HpqSRmon.exe, version 11.0.0.142, horodatage 0x47d78822, module défaillant HpqSRmon.exe, version 11.0.0.142, horodatage 0x47d78822, code d’exception 0xc0000005, décalage d’erreur 0x000033c5, ID du processus 0xa08, heure de début de l’application 0x01c9d3149974fc6b. Record Number: 9163 Source Name: Application Error Time Written: 20090512151625.000000-000 Event Type: Erreur User: Computer Name: PC-de-Alain Event Code: 1000 Message: Application défaillante iexplore.exe, version 7.0.6001.18226, horodatage 0x49ac95d6, module défaillant ntdll.dll, version 6.0.6001.18000, horodatage 0x4791a7a6, code d’exception 0xc0000005, décalage d’erreur 0x00047dd2, ID du processus 0x11c, heure de début de l’application 0x01c9d3115dee0856. Record Number: 9142 Source Name: Application Error Time Written: 20090512145551.000000-000 Event Type: Erreur User: Computer Name: PC-de-Alain Event Code: 10 Message: Le filtre d’événement avec la requête « SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99 » n’a pas pu être réactivé dans l’espace de noms « //./root/CIMV2 » à cause de l’erreur 0x80041003. Les événements ne peuvent pas être délivrés à travers ce filtre tant que le problème ne sera pas corrigé. Record Number: 9141 Source Name: Microsoft-Windows-WMI Time Written: 20090512145433.000000-000 Event Type: Erreur User: Computer Name: PC-de-Alain Event Code: 1000 Message: Application défaillante HpqSRmon.exe, version 11.0.0.142, horodatage 0x47d78822, module défaillant HpqSRmon.exe, version 11.0.0.142, horodatage 0x47d78822, code d’exception 0xc0000005, décalage d’erreur 0x000033c5, ID du processus 0x8e4, heure de début de l’application 0x01c9d31156f54db6. Record Number: 9131 Source Name: Application Error Time Written: 20090512145304.000000-000 Event Type: Erreur User: =====Security event log===== Computer Name: PC-de-Alain Event Code: 4624 Message: L’ouverture de session d’un compte s’est correctement déroulée. Sujet : ID de sécurité : S-1-5-18 Nom du compte : PC-DE-ALAIN$ Domaine du compte : WORKGROUP ID d’ouverture de session : 0x3e7 Type d’ouverture de session : 5 Nouvelle ouverture de session : ID de sécurité : S-1-5-18 Nom du compte : SYSTEM Domaine du compte : AUTORITE NT ID d’ouverture de session : 0x3e7 GUID d’ouverture de session : {00000000-0000-0000-0000-000000000000} Informations sur le processus : ID du processus : 0x25c Nom du processus : C:\Windows\System32\services.exe Informations sur le réseau : Nom de la station de travail : Adresse du réseau source : - Port source : - Informations détaillées sur l’authentification : Processus d’ouverture de session : Advapi Package d’authentification : Negotiate Services en transit : - Nom du package (NTLM uniquement) : - Longueur de la clé : 0 Cet événement est généré lors de la création d’une ouverture de session. Il est généré sur l’ordinateur sur lequel l’ouverture de session a été effectuée. Le champ Objet indique le compte sur le système local qui a demandé l’ouverture de session. Il s’agit le plus souvent d’un service, comme le service Serveur, ou un processus local tel que Winlogon.exe ou Services.exe. Le champ Type d’ouverture de session indique le type d’ouverture de session qui s’est produit. Les types les plus courants sont 2 (interactif) et 3 (réseau). Le champ Nouvelle ouverture de session indique le compte pour lequel la nouvelle ouverture de session a été créée, par exemple, le compte qui s’est connecté. Les champs relatifs au réseau indiquent la provenance d’une demande d’ouverture de session à distance. Le nom de la station de travail n’étant pas toujours disponible, peut être laissé vide dans certains cas. Les champs relatifs aux informations d’authentification fournissent des détails sur cette demande d’ouverture de session spécifique. - Le GUID d’ouverture de session est un identificateur unique pouvant servir à associer cet événement à un événement KDC . - Les services en transit indiquent les services intermédiaires qui ont participé à cette demande d’ouverture de session. - Nom du package indique quel est le sous-protocole qui a été utilisé parmi les protocoles NTLM. - La longueur de la clé indique la longueur de la clé de session générée. Elle a la valeur 0 si aucune clé de session n’a été demandée. Record Number: 37183 Source Name: Microsoft-Windows-Security-Auditing Time Written: 20100503170201.981337-000 Event Type: Succès de l'audit User: Computer Name: PC-de-Alain Event Code: 4648 Message: Tentative d’ouverture de session en utilisant des informations d’identification explicites. Sujet : ID de sécurité : S-1-5-18 Nom du compte : PC-DE-ALAIN$ Domaine du compte : WORKGROUP ID d’ouverture de session : 0x3e7 GUID d’ouverture de session : {00000000-0000-0000-0000-000000000000} Compte dont les informations d’identification ont été utilisées : Nom du compte : SYSTEM Domaine du compte : AUTORITE NT GUID d’ouverture de session : {00000000-0000-0000-0000-000000000000} Serveur cible : Nom du serveur cible : localhost Informations supplémentaires : localhost Informations sur le processus : ID du processus : 0x25c Nom du processus : C:\Windows\System32\services.exe Informations sur le réseau : Adresse du réseau : - Port : - Cet événement est généré lorsqu’un processus tente d’ouvrir une session pour un compte en spécifiant explicitement les informations d’identification de ce compte. Ceci se produit le plus souvent dans les configurations par lot comme les tâches planifiées, ou avec l’utilisation de la commande RUNAS. Record Number: 37182 Source Name: Microsoft-Windows-Security-Auditing Time Written: 20100503170201.981337-000 Event Type: Succès de l'audit User: Computer Name: PC-de-Alain Event Code: 4672 Message: Privilèges spéciaux attribués à la nouvelle ouverture de session. Sujet : ID de sécurité : S-1-5-18 Nom du compte : SYSTEM Domaine du compte : AUTORITE NT ID d’ouverture de session : 0x3e7 Privilèges : SeAssignPrimaryTokenPrivilege SeTcbPrivilege SeSecurityPrivilege SeTakeOwnershipPrivilege SeLoadDriverPrivilege SeBackupPrivilege SeRestorePrivilege SeDebugPrivilege SeAuditPrivilege SeSystemEnvironmentPrivilege SeImpersonatePrivilege Record Number: 37181 Source Name: Microsoft-Windows-Security-Auditing Time Written: 20100503170201.965737-000 Event Type: Succès de l'audit User: Computer Name: PC-de-Alain Event Code: 4624 Message: L’ouverture de session d’un compte s’est correctement déroulée. Sujet : ID de sécurité : S-1-5-18 Nom du compte : PC-DE-ALAIN$ Domaine du compte : WORKGROUP ID d’ouverture de session : 0x3e7 Type d’ouverture de session : 5 Nouvelle ouverture de session : ID de sécurité : S-1-5-18 Nom du compte : SYSTEM Domaine du compte : AUTORITE NT ID d’ouverture de session : 0x3e7 GUID d’ouverture de session : {00000000-0000-0000-0000-000000000000} Informations sur le processus : ID du processus : 0x25c Nom du processus : C:\Windows\System32\services.exe Informations sur le réseau : Nom de la station de travail : Adresse du réseau source : - Port source : - Informations détaillées sur l’authentification : Processus d’ouverture de session : Advapi Package d’authentification : Negotiate Services en transit : - Nom du package (NTLM uniquement) : - Longueur de la clé : 0 Cet événement est généré lors de la création d’une ouverture de session. Il est généré sur l’ordinateur sur lequel l’ouverture de session a été effectuée. Le champ Objet indique le compte sur le système local qui a demandé l’ouverture de session. Il s’agit le plus souvent d’un service, comme le service Serveur, ou un processus local tel que Winlogon.exe ou Services.exe. Le champ Type d’ouverture de session indique le type d’ouverture de session qui s’est produit. Les types les plus courants sont 2 (interactif) et 3 (réseau). Le champ Nouvelle ouverture de session indique le compte pour lequel la nouvelle ouverture de session a été créée, par exemple, le compte qui s’est connecté. Les champs relatifs au réseau indiquent la provenance d’une demande d’ouverture de session à distance. Le nom de la station de travail n’étant pas toujours disponible, peut être laissé vide dans certains cas. Les champs relatifs aux informations d’authentification fournissent des détails sur cette demande d’ouverture de session spécifique. - Le GUID d’ouverture de session est un identificateur unique pouvant servir à associer cet événement à un événement KDC . - Les services en transit indiquent les services intermédiaires qui ont participé à cette demande d’ouverture de session. - Nom du package indique quel est le sous-protocole qui a été utilisé parmi les protocoles NTLM. - La longueur de la clé indique la longueur de la clé de session générée. Elle a la valeur 0 si aucune clé de session n’a été demandée. Record Number: 37180 Source Name: Microsoft-Windows-Security-Auditing Time Written: 20100503170201.965737-000 Event Type: Succès de l'audit User: Computer Name: PC-de-Alain Event Code: 4648 Message: Tentative d’ouverture de session en utilisant des informations d’identification explicites. Sujet : ID de sécurité : S-1-5-18 Nom du compte : PC-DE-ALAIN$ Domaine du compte : WORKGROUP ID d’ouverture de session : 0x3e7 GUID d’ouverture de session : {00000000-0000-0000-0000-000000000000} Compte dont les informations d’identification ont été utilisées : Nom du compte : SYSTEM Domaine du compte : AUTORITE NT GUID d’ouverture de session : {00000000-0000-0000-0000-000000000000} Serveur cible : Nom du serveur cible : localhost Informations supplémentaires : localhost Informations sur le processus : ID du processus : 0x25c Nom du processus : C:\Windows\System32\services.exe Informations sur le réseau : Adresse du réseau : - Port : - Cet événement est généré lorsqu’un processus tente d’ouvrir une session pour un compte en spécifiant explicitement les informations d’identification de ce compte. Ceci se produit le plus souvent dans les configurations par lot comme les tâches planifiées, ou avec l’utilisation de la commande RUNAS. Record Number: 37179 Source Name: Microsoft-Windows-Security-Auditing Time Written: 20100503170201.965737-000 Event Type: Succès de l'audit User: ======Environment variables====== "ComSpec"=%SystemRoot%\system32\cmd.exe "FP_NO_HOST_CHECK"=NO "OS"=Windows_NT "Path"=C:\Program Files\PC Connectivity Solution\;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;C:\Program Files\Common Files\DivX Shared\;C:\Program Files\QuickTime\QTSystem\ "PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC "PROCESSOR_ARCHITECTURE"=x86 "TEMP"=%SystemRoot%\TEMP "TMP"=%SystemRoot%\TEMP "USERNAME"=SYSTEM "windir"=%SystemRoot% "PROCESSOR_LEVEL"=6 "PROCESSOR_IDENTIFIER"=x86 Family 6 Model 23 Stepping 7, GenuineIntel "PROCESSOR_REVISION"=1707 "NUMBER_OF_PROCESSORS"=4 "TRACE_FORMAT_SEARCH_PATH"=\\NTREL202.ntdev.corp.microsoft.com\4F18C3A5-CA09-4DBD-B6FC-219FDD4C6BE0\TraceFormat "DFSTRACINGON"=FALSE "asl.log"=Destination=file;OnFirstLog=command,environment "CLASSPATH"=.;C:\Program Files\QuickTime\QTSystem\QTJava.zip "QTJAVA"=C:\Program Files\QuickTime\QTSystem\QTJava.zip -----------------EOF-----------------

kmisol · Answer 6 · Posté le 17/01/2011 à 00:01:56

... Toolbar indésirable : Ask toolbar + régie de pubs : Eorezo . ---------- Télécharge AD-R (de Cyrildu17 / C_XX) sur ton Bureau. !! Déconnecte-toi du net et ferme toutes applications en cours !! 1. Double-clique sur le programme d'installation ; laisse-le s’ installer par défaut (C:\Program files). 2. Clique droit sur l'icône AD-Remover située sur ton Bureau et choisis "Exécuter en tant qu'administrateur". 3. Au menu principal, choisis l'option « Nettoyer ». L’ outil débute le nettoyage … Laisse-le travailler ! Le scan achevé, une fenêtre va s’ afficher. 4. Poste (copie-colle) le rapport qui apparaît à la fin. (Tu trouveras aussi le rapport sous C:\ Ad-report(date).log ) Note : "Process.exe", une composante de l'outil peut être détecté par certains antivirus comme une infection ; donc, ne pas en tenir compte : il s'agit d'un faux positif.

Alain-st-martin13 · Answer 7 · Posté le 17/01/2011 à 21:30:03

Bonsoir, Voici le rapport : ======= RAPPORT D'AD-REMOVER 2.0.0.2,D | UNIQUEMENT XP/VISTA/7 ======= Mis à jour par TeamXscript le 16/01/11 à 02:00 Contact: AdRemover contact gmail com Site web: http://www.teamxscript.org C:\Program Files\Ad-Remover\main.exe (CLEAN ) -> Lancé à 21:16:32 le 17/01/2011, Mode normal Microsoft® Windows Vista™ Édition Familiale Premium Service Pack 2 (X86) Alain@PC-DE-ALAIN (Packard Bell BV PACKARD BELL IMAX X9200) ============== ACTION(S) ============== Dossier supprimé: C:\Users\Alain\AppData\Roaming\Mozilla\FireFox\Profiles\7zdx56ex.default\extensions\toolbar@ask.com Fichier supprimé: C:\Users\Alain\AppData\Roaming\Mozilla\FireFox\Profiles\7zdx56ex.default\searchplugins\askcom.xml Dossier supprimé: C:\Program Files\Ask.com Dossier supprimé: C:\Program Files\AskTBar Dossier supprimé: C:\Users\Alain\AppData\LocalLow\AskToolbar Dossier supprimé: C:\Users\Alain\AppData\Roaming\EoRezo Dossier supprimé: C:\Users\Alain\AppData\Local\EoRezo Dossier supprimé: C:\Program Files\EoRezo (!) -- Fichiers temporaires supprimés. -- Fichier ouvert: C:\Users\Alain\AppData\Roaming\Mozilla\FireFox\Profiles\7zdx56ex.default\Prefs.js -- Ligne supprimée: user_pref("browser.startup.homepage", "hxxp://y.lo.st"); -- Fichier Fermé -- Clé supprimée: HKLM\Software\Classes\CLSID\{9CB65201-89C4-402c-BA80-02D8C59F9B1D} Clé supprimée: HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9CB65201-89C4-402c-BA80-02D8C59F9B1D} Clé supprimée: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{9CB65201-89C4-402c-BA80-02D8C59F9B1D} Clé supprimée: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{9CB65201-89C4-402c-BA80-02D8C59F9B1D} Clé supprimée: HKLM\Software\Classes\CLSID\{C10DC1F4-CCDF-4224-A24D-B23AFC3573C8} Clé supprimée: HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C10DC1F4-CCDF-4224-A24D-B23AFC3573C8} Clé supprimée: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{C10DC1F4-CCDF-4224-A24D-B23AFC3573C8} Clé supprimée: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{C10DC1F4-CCDF-4224-A24D-B23AFC3573C8} Clé supprimée: HKLM\Software\Classes\CLSID\{FE063DB1-4EC0-403e-8DD8-394C54984B2C} Clé supprimée: HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FE063DB1-4EC0-403e-8DD8-394C54984B2C} Clé supprimée: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{FE063DB1-4EC0-403e-8DD8-394C54984B2C} Clé supprimée: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{FE063DB1-4EC0-403e-8DD8-394C54984B2C} Clé supprimée: HKLM\Software\Classes\CLSID\{FE063DB9-4EC0-403e-8DD8-394C54984B2C} Clé supprimée: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{FE063DB9-4EC0-403e-8DD8-394C54984B2C} Clé supprimée: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{FE063DB9-4EC0-403e-8DD8-394C54984B2C} Clé supprimée: HKLM\Software\Classes\CLSID\{FE063DBB-4EC0-403e-8DD8-394C54984B2C} Clé supprimée: HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{FE063DBB-4EC0-403e-8DD8-394C54984B2C} Clé supprimée: HKLM\Software\Classes\Interface\{DF76E9B7-35EC-46FC-AF56-5B79DED9D64F} Clé supprimée: HKLM\Software\Classes\TypeLib\{18AF7201-4F14-4BCF-93FE-45617CF259FF} Clé supprimée: HKLM\Software\Classes\EoEngineBHO.EOBHO Clé supprimée: HKLM\Software\Classes\EoEngineBHO.EOBHO.1 Clé supprimée: HKLM\Software\Classes\AppID\EoEngineBHO.DLL Clé supprimée: HKLM\Software\Classes\AppID\{AFBB7970-789A-4264-BA70-E8127DECE400} Clé supprimée: HKLM\Software\EoRezo Clé supprimée: HKCU\Software\EoRezo Clé supprimée: HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\EoRezo_is1 Clé supprimée: HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\SoftwareUpdate_is1 Clé supprimée: HKLM\Software\Classes\CLSID\{147a976f-eee1-4377-8ea7-4716e4cdd239} Valeur supprimée: HKLM\Software\Microsoft\Windows\CurrentVersion\Run|Eoengine Valeur supprimée: HKLM\Software\Microsoft\Windows\CurrentVersion\Run|Eorezo Valeur supprimée: HKLM\Software\Microsoft\Internet Explorer\Toolbar|{FE063DB9-4EC0-403E-8DD8-394C54984B2C} Valeur supprimée: HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser|{FE063DB9-4EC0-403E-8DD8-394C54984B2C} ============== SCAN ADDITIONNEL ============== ** Mozilla Firefox Version ** -- C:\Users\Alain\AppData\Roaming\Mozilla\FireFox\Profiles\7zdx56ex.default\Prefs.js -- browser.startup.homepage_override.mstone, rv:1.9.2.10 ======================================== ** Internet Explorer Version ** AutoHide: yes Default_Page_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch Do404Search: 0x01000000 Enable Browser Extensions: yes Local Page: C:\Windows\system32\blank.htm Search bar: hxxp://go.microsoft.com/fwlink/?linkid=54896 Show_ToolBar: yes Start Page: hxxp://fr.msn.com/ Use Search Asst: no AutoHide: yes Default_Page_URL: hxxp://go.microsoft.com/fwlink/?LinkId=54896 Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch Delete_Temp_Files_On_Exit: yes Local Page: C:\Windows\System32\blank.htm Search bar: hxxp://search.msn.com/spbasic.htm Search Page: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch Start Page: hxxp://fr.msn.com/ Tabs: res://ieframe.dll/tabswelcome.htm Blank: res://mshtml.dll/blank.htm ======================================== C:\Program Files\Ad-Remover\Quarantine: 98 Fichier(s) C:\Program Files\Ad-Remover\Backup: 15 Fichier(s) C:\Ad-Report-CLEAN .txt - 17/01/2011 (5814 Octet(s)) Fin à: 21:17:57, 17/01/2011 ============== E.O.F ==============

kmisol · Answer 8 · Posté le 18/01/2011 à 08:22:35

:hello: :super: ... Télécharge, installe et mets à jour Malwarebytes Anti-malware ; puis, fais un scan complet et poste le rapport. Si MalwareByte's a détecté des infections, clique sur Afficher les résultats , puis sur Supprimer la sélection .

Alain-st-martin13 · Answer 9 · Posté le 18/01/2011 à 20:35:08

Bonsoir, Voici le rapport. <?xml version="1.0" encoding="UTF-8" ?> - <AROScanLog> <AROVersion>6.0.793.824</AROVersion> <ScanningDate>Tue. January 18, 2011. 08:22 PM</ScanningDate> <TotalErrorsFound>1547</TotalErrorsFound> - <Scanning Section="ActiveX and COM"> <Description>ActiveX and COM objects that are based on libraries no longer on your system.</Description> <ErrorsInThisSection>311 Errors</ErrorsInThisSection> - <EntryDetails> <Entry /> <Details>The key HKEY_CLASSES_ROOT\CLSID\{657C7A59-4FEC-4C06-A354-607B1EB184FB}\TypeLib for this object point to the missing type library {8F41223A-948A-4F63-99E1-284C636BB3FD}. This subkey can be deleted for this object.</Details> </EntryDetails> - <EntryDetails> <Entry /> <Details>The key HKEY_CLASSES_ROOT\CLSID\{4AD5597A-2B0F-4479-97B6-C514DEC41EA1}\TypeLib for this object point to the missing type library {7B29C130-826A-4070-BA18-EC01E703D244}. This subkey can be deleted for this object.</Details> </EntryDetails> - <EntryDetails> <Entry>Abale Zip ActiveX v5.0</Entry> <Details>The key HKEY_CLASSES_ROOT\TypeLib\{99396B3B-57DC-41BB-9957-6917CC1980B0}\5.0\HELPDIR for this type library points to the missing folder d:\Program Files\Abale\Zip\Help. This subkey can be deleted for this type library.</Details> </EntryDetails> - <EntryDetails> <Entry>Acrobat Search</Entry> <Details>The key HKEY_CLASSES_ROOT\CLSID\{2CE4D4CF-B278-4126-AD1E-B622DA2E8339}\TypeLib for this object point to the missing type library {47A7A4B0-2723-41BA-865E-EBBB7081A602}. This subkey can be deleted for this object.</Details> </EntryDetails> - <EntryDetails> <Entry>AcrobatAccess Class</Entry> <Details>The key HKEY_CLASSES_ROOT\CLSID\{C523F39F-9C83-11D3-9094-00104BD0D535} points to the missing ApplicationID {8A523F4F-AB44-4477-BAB0-151E5936D144}.</Details> </EntryDetails> - <EntryDetails> <Entry>ActiveMovieControl Object</Entry> <Details>The ToolboxBitmap32 key HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\ToolboxBitmap32 for this object contains no data. This subkey can be deleted for this object.</Details> </EntryDetails> - <EntryDetails> <Entry>Adobe Photoshop Elements 6.0 Media Client 1.0 Type Library</Entry> <Details>The key HKEY_CLASSES_ROOT\TypeLib\{6D593B71-DC75-4EF7-91E4-79D03A98AE8E}\1.0\HELPDIR for this type library serves to indicate a help directory, but contains no data. This subkey can be deleted for this type library.</Details> </EntryDetails> - <EntryDetails> <Entry>Apollo Class</Entry> <Details>The key HKEY_CLASSES_ROOT\CLSID\{0780DBDF-FB21-4C7B-A4E3-99548EEC5C4A}\TypeLib for this object point to the missing type library {15991B32-B49B-48E5-91CA-4AC84832E4C0}. This subkey can be deleted for this object.</Details> </EntryDetails> - <EntryDetails> <Entry>Bar Button Class</Entry> <Details>The key HKEY_CLASSES_ROOT\CLSID\{BD04DAE2-8C1B-4cc5-9E06-22DE05C2EDA0}\InprocServer32 points to the missing InprocServer32 C:\Program Files\AskTBar\bar\1.bin\A5POPSWT.DLL. The associated CLSID can be deleted.</Details> </EntryDetails> - <EntryDetails> <Entry>Bluetooth FD Provider</Entry> <Details>The key HKEY_CLASSES_ROOT\CLSID\{1C5221CB-C1F6-4999-8936-501C2023E4CD} points to the missing ApplicationID {1C5221CB-C1F6-4999-8936-501C2023E4CD}.</Details> </EntryDetails> - <EntryDetails> <Entry>Bluetooth FD Provider Proxy</Entry> <Details>The key HKEY_CLASSES_ROOT\CLSID\{C5599E1B-FC7B-4883-9FF4-581BBAEF8DBA} points to the missing ApplicationID {1C5221CB-C1F6-4999-8936-501C2023E4CD}.</Details> </EntryDetails> - <EntryDetails> <Entry>BurnProgressWindow Class</Entry> <Details>The key HKEY_CLASSES_ROOT\CLSID\{a861a366-0c7a-484b-9116-f366bf0fa23f}\TypeLib for this object point to the missing type library {b3267063-8ab4-464d-a13c-1517bd6dc6f4}. This subkey can be deleted for this object.</Details> </EntryDetails> - <EntryDetails> <Entry>BurnSettings Class</Entry> <Details>The key HKEY_CLASSES_ROOT\CLSID\{ec39bf14-ca12-46cd-8ea2-b48d5a44350a}\TypeLib for this object point to the missing type library {b3267063-8ab4-464d-a13c-1517bd6dc6f4}. This subkey can be deleted for this object.</Details> </EntryDetails> - <EntryDetails> <Entry>BurnSettingsDlg Class</Entry> <Details>The key HKEY_CLASSES_ROOT\CLSID\{e6028af3-ee0a-4e49-a043-c44437680ad8}\TypeLib for this object point to the missing type library {b3267063-8ab4-464d-a13c-1517bd6dc6f4}. This subkey can be deleted for this object.</Details> </EntryDetails> - <EntryDetails> <Entry>BurnSettingsDlgParam Class</Entry> <Details>The key HKEY_CLASSES_ROOT\CLSID\{0b1511cd-37ee-4f0a-9647-cb2785b68a29}\TypeLib for this object point to the missing type library {b3267063-8ab4-464d-a13c-1517bd6dc6f4}. This subkey can be deleted for this object.</Details> </EntryDetails> - <EntryDetails> <Entry>CFDictionaryPropertyBag</Entry> <Details>The key HKEY_CLASSES_ROOT\CLSID\{dd653964-4d37-4fb2-9cb6-6a9a97719332}\InprocServer32 points to the missing InprocServer32 C:\Program Files\Safari\WebKit.dll. The associated CLSID can be deleted.</Details> </EntryDetails> - <EntryDetails> <Entry>ChooseRecorderDlg Class</Entry> <Details>The key HKEY_CLASSES_ROOT\CLSID\{0edcdb7d-cd9e-44e6-9e9a-adbaa85540e8}\TypeLib for this object point to the missing type library {b3267063-8ab4-464d-a13c-1517bd6dc6f4}. This subkey can be deleted for this object.</Details> </EntryDetails> - <EntryDetails> <Entry>ChooseSessionDlg Class</Entry> <Details>The key HKEY_CLASSES_ROOT\CLSID\{e5b2709a-0e6b-45d3-83c8-ef90c2ed5340}\TypeLib for this object point to the missing type library {b3267063-8ab4-464d-a13c-1517bd6dc6f4}. This subkey can be deleted for this object.</Details> </EntryDetails> - <EntryDetails> <Entry>ClipBook 1.0 Type Library</Entry> <Details>The key HKEY_CLASSES_ROOT\TypeLib\{1FC4BB67-DA0F-4827-9C24-AE7A631EE1AC}\1.0\HELPDIR for this type library serves to indicate a help directory, but contains no data. This subkey can be deleted for this type library.</Details> </EntryDetails> - <EntryDetails> <Entry>ClipBook 1.0 Type Library</Entry> <Details>The key HKEY_CLASSES_ROOT\TypeLib\{1FC4BB67-DA0F-4827-9C24-AE7A631EE1AC}\1.0\0\win32 for this type library points to the missing file ClipBook.dll. This subkey can be deleted for this type library.</Details> </EntryDetails> - <EntryDetails> <Entry>ClipBookAndToolbar Class</Entry> <Details>The key HKEY_CLASSES_ROOT\CLSID\{CB7A7BFD-C16B-4FA1-8583-0A9FA9B8CF88}\TypeLib for this object point to the missing type library {62FFF5B8-A860-4a8e-A8DC-72D9C159C5E1}. This subkey can be deleted for this object.</Details> </EntryDetails> - <EntryDetails> <Entry>ClipBookDBComponent 1.0 Type Library</Entry> <Details>The key HKEY_CLASSES_ROOT\TypeLib\{6F74ECDF-A67B-430D-B2E3-E7CD25FD94DD}\1.0\HELPDIR for this type library serves to indicate a help directory, but contains no data. This subkey can be deleted for this type library.</Details> </EntryDetails> - <EntryDetails> <Entry>ClipBookDbExe 1.0 Type Library</Entry> <Details>The key HKEY_CLASSES_ROOT\TypeLib\{ACFD594D-1F95-4b20-9F66-3337611437C6}\1.0\HELPDIR for this type library serves to indicate a help directory, but contains no data. This subkey can be deleted for this type library.</Details> </EntryDetails> - <EntryDetails> <Entry>CLSID_IHTTPMailTransport</Entry> <Details>The key HKEY_CLASSES_ROOT\CLSID\{9EADBD22-447B-4240-A9DD-73FE7C53A981}\TypeLib for this object point to the missing type library {9EADBD25-447B-4240-A9DD-73FE7C53A981}. This subkey can be deleted for this object.</Details> </EntryDetails> - <EntryDetails> <Entry>CLSID_IIMAPTransport</Entry> <Details>The key HKEY_CLASSES_ROOT\CLSID\{9EADBD21-447B-4240-A9DD-73FE7C53A981}\TypeLib for this object point to the missing type library {9EADBD25-447B-4240-A9DD-73FE7C53A981}. This subkey can be deleted for this object.</Details> </EntryDetails> - <EntryDetails> <Entry>CLSID_IMimeAllocator</Entry> <Details>The key HKEY_CLASSES_ROOT\CLSID\{9EADBD13-447B-4240-A9DD-73FE7C53A981}\TypeLib for this object point to the missing type library {9EADBD25-447B-4240-A9DD-73FE7C53A981}. This subkey can be deleted for this object.</Details> </EntryDetails> - <EntryDetails> <Entry>CLSID_IMimeBody</Entry> <Details>The key HKEY_CLASSES_ROOT\CLSID\{9EADBD11-447B-4240-A9DD-73FE7C53A981}\TypeLib for this object point to the missing type library {9EADBD25-447B-4240-A9DD-73FE7C53A981}. This subkey can be deleted for this object.</Details> </EntryDetails> - <EntryDetails> <Entry>CLSID_IMimeHeaderTable</Entry> <Details>The key HKEY_CLASSES_ROOT\CLSID\{9EADBD16-447B-4240-A9DD-73FE7C53A981}\TypeLib for this object point to the missing type library {9EADBD25-447B-4240-A9DD-73FE7C53A981}. This subkey can be deleted for this object.</Details> </EntryDetails> - <EntryDetails> <Entry>CLSID_IMimeInternational</Entry> <Details>The key HKEY_CLASSES_ROOT\CLSID\{9EADBD10-447B-4240-A9DD-73FE7C53A981}\TypeLib for this object point to the missing type library {9EADBD25-447B-4240-A9DD-73FE7C53A981}. This subkey can be deleted for this object.</Details> </EntryDetails> - <EntryDetails> <Entry>CLSID_IMimeMessage</Entry> <Details>The key HKEY_CLASSES_ROOT\CLSID\{9EADBD1A-447B-4240-A9DD-73FE7C53A981}\TypeLib for this object point to the missing type library {9EADBD25-447B-4240-A9DD-73FE7C53A981}. This subkey can be deleted for this object.</Details> </EntryDetails> - <EntryDetails> <Entry>CLSID_IMimeMessageParts</Entry> <Details>The key HKEY_CLASSES_ROOT\CLSID\{9EADBD12-447B-4240-A9DD-73FE7C53A981}\TypeLib for this object point to the missing type library {9EADBD25-447B-4240-A9DD-73FE7C53A981}. This subkey can be deleted for this object.</Details> </EntryDetails> - <EntryDetails> <Entry>CLSID_IMimeMessageTree</Entry> <Details>The key HKEY_CLASSES_ROOT\CLSID\{9EADBD19-447B-4240-A9DD-73FE7C53A981}\TypeLib for this object point to the missing type library {9EADBD25-447B-4240-A9DD-73FE7C53A981}. This subkey can be deleted for this object.</Details> </EntryDetails> - <EntryDetails> <Entry>CLSID_IMimeObjResolver</Entry> <Details>The key HKEY_CLASSES_ROOT\CLSID\{9EADBD1B-447B-4240-A9DD-73FE7C53A981}\TypeLib for this object point to the missing type library {9EADBD25-447B-4240-A9DD-73FE7C53A981}. This subkey can be deleted for this object.</Details> </EntryDetails> - <EntryDetails> <Entry>CLSID_IMimePropertySchema</Entry> <Details>The key HKEY_CLASSES_ROOT\CLSID\{9EADBD18-447B-4240-A9DD-73FE7C53A981}\TypeLib for this object point to the missing type library {9EADBD25-447B-4240-A9DD-73FE7C53A981}. This subkey can be deleted for this object.</Details> </EntryDetails> - <EntryDetails> <Entry>CLSID_IMimePropertySet</Entry> <Details>The key HKEY_CLASSES_ROOT\CLSID\{9EADBD17-447B-4240-A9DD-73FE7C53A981}\TypeLib for this object point to the missing type library {9EADBD25-447B-4240-A9DD-73FE7C53A981}. This subkey can be deleted for this object.</Details> </EntryDetails> - <EntryDetails> <Entry>CLSID_IMimeSecurity</Entry> <Details>The key HKEY_CLASSES_ROOT\CLSID\{9EADBD14-447B-4240-A9DD-73FE7C53A981}\TypeLib for this object point to the missing type library {9EADBD25-447B-4240-A9DD-73FE7C53A981}. This subkey can be deleted for this object.</Details> </EntryDetails> - <EntryDetails> <Entry>CLSID_INNTPTransport</Entry> <Details>The key HKEY_CLASSES_ROOT\CLSID\{9EADBD1E-447B-4240-A9DD-73FE7C53A981}\TypeLib for this object point to the missing type library {9EADBD25-447B-4240-A9DD-73FE7C53A981}. This subkey can be deleted for this object.</Details> </EntryDetails> - <EntryDetails> <Entry>CLSID_IPOP3Transport</Entry> <Details>The key HKEY_CLASSES_ROOT\CLSID\{9EADBD1D-447B-4240-A9DD-73FE7C53A981}\TypeLib for this object point to the missing type library {9EADBD25-447B-4240-A9DD-73FE7C53A981}. This subkey can be deleted for this object.</Details> </EntryDetails> - <EntryDetails> <Entry>CLSID_IPropFindRequest</Entry> <Details>The key HKEY_CLASSES_ROOT\CLSID\{9EADBD23-447B-4240-A9DD-73FE7C53A981}\TypeLib for this object point to the missing type library {9EADBD25-447B-4240-A9DD-73FE7C53A981}. This subkey can be deleted for this object.</Details> </EntryDetails> - <EntryDetails> <Entry>CLSID_IPropPatchRequest</Entry> <Details>The key HKEY_CLASSES_ROOT\CLSID\{9EADBD24-447B-4240-A9DD-73FE7C53A981}\TypeLib for this object point to the missing type library {9EADBD25-447B-4240-A9DD-73FE7C53A981}. This subkey can be deleted for this object.</Details> </EntryDetails> - <EntryDetails> <Entry>CLSID_IRangeList</Entry> <Details>The key HKEY_CLASSES_ROOT\CLSID\{9EADBD20-447B-4240-A9DD-73FE7C53A981}\TypeLib for this object point to the missing type library {9EADBD25-447B-4240-A9DD-73FE7C53A981}. This subkey can be deleted for this object.</Details> </EntryDetails> - <EntryDetails> <Entry>CLSID_IRASTransport</Entry> <Details>The key HKEY_CLASSES_ROOT\CLSID\{9EADBD1F-447B-4240-A9DD-73FE7C53A981}\TypeLib for this object point to the missing type library {9EADBD25-447B-4240-A9DD-73FE7C53A981}. This subkey can be deleted for this object.</Details> </EntryDetails> - <EntryDetails> <Entry>CLSID_ISMTPTransport</Entry> <Details>The key HKEY_CLASSES_ROOT\CLSID\{9EADBD1C-447B-4240-A9DD-73FE7C53A981}\TypeLib for this object point to the missing type library {9EADBD25-447B-4240-A9DD-73FE7C53A981}. This subkey can be deleted for this object.</Details> </EntryDetails> - <EntryDetails> <Entry>CLSID_IVirtualStream</Entry> <Details>The key HKEY_CLASSES_ROOT\CLSID\{9EADBD15-447B-4240-A9DD-73FE7C53A981}\TypeLib for this object point to the missing type library {9EADBD25-447B-4240-A9DD-73FE7C53A981}. This subkey can be deleted for this object.</Details> </EntryDetails> - <EntryDetails> <Entry>CNeroRunner Object</Entry> <Details>The key HKEY_CLASSES_ROOT\CLSID\{056199FE-0310-443E-923D-6EF61C73C8A9}\TypeLib for this object point to the missing type library {F79461D3-DCE3-42E0-A6BA-9C16866036AC}. This subkey can be deleted for this object.</Details> </EntryDetails> - <EntryDetails> <Entry>ColorSettings Class</Entry> <Details>The key HKEY_CLASSES_ROOT\CLSID\{22C03B0C-3222-4fac-8650-8A4D50EBFE54} points to the missing ApplicationID {22C03B0C-3222-4fac-8650-8A4D50EBFE54}.</Details> </EntryDetails> - <EntryDetails> <Entry>ColorSettings Class</Entry> <Details>The key HKEY_CLASSES_ROOT\CLSID\{22C03B0C-3222-4fac-8650-8A4D50EBFE54}\TypeLib for this object point to the missing type library {4E5FDDC2-3E70-4153-A926-CA45B11F1B57}. This subkey can be deleted for this object.</Details> </EntryDetails> - <EntryDetails> <Entry>COM_SRS_MobileHD 1.0 Type Library</Entry> <Details>The key HKEY_CLASSES_ROOT\TypeLib\{785DCDE4-F5BE-4264-BC16-31EF48229B64}\1.0\HELPDIR for this type library serves to indicate a help directory, but contains no data. This subkey can be deleted for this type library.</Details> </EntryDetails> - <EntryDetails> <Entry>Com_SRS_TruSurroundHD 1.0 Type Library</Entry> <Details>The key HKEY_CLASSES_ROOT\TypeLib\{6F74E663-6237-46E5-A403-1FDED57A3845}\1.0\HELPDIR for this type library serves to indicate a help directory, but contains no data. This subkey can be deleted for this type library.</Details> </EntryDetails> - <EntryDetails> <Entry>DirectAccess Class</Entry> <Details>The key HKEY_CLASSES_ROOT\CLSID\{632AF209-7969-4f28-84A4-8174498C5A6F}\TypeLib for this object point to the missing type library {4E5FDDC2-3E70-4153-A926-CA45B11F1B57}. This subkey can be deleted for this object.</Details> </EntryDetails> - <EntryDetails> <Entry>DiscInfoDlg Class</Entry> <Details>The key HKEY_CLASSES_ROOT\CLSID\{f1f2ece6-0289-4992-a536-f82dfc6f6d6e}\TypeLib for this object point to the missing type library {b3267063-8ab4-464d-a13c-1517bd6dc6f4}. This subkey can be deleted for this object.</Details> </EntryDetails> - <EntryDetails> <Entry>Disk Management Snap-In Object Library</Entry> <Details>The key HKEY_CLASSES_ROOT\TypeLib\{AEB84C80-95DC-11D0-B7FC-B61140119C4A}\1.0\HELPDIR for this type library serves to indicate a help directory, but contains no data. This subkey can be deleted for this type library.</Details> </EntryDetails> - <EntryDetails> <Entry>DisplaySettings Class</Entry> <Details>The key HKEY_CLASSES_ROOT\CLSID\{8008CCE8-6616-4562-A69C-29CA9D42DD98} points to the missing ApplicationID {8008CCE8-6616-4562-A69C-29CA9D42DD98}.</Details> </EntryDetails> - <EntryDetails> <Entry>DisplaySettings Class</Entry> <Details>The key HKEY_CLASSES_ROOT\CLSID\{8008CCE8-6616-4562-A69C-29CA9D42DD98}\TypeLib for this object point to the missing type library {4E5FDDC2-3E70-4153-A926-CA45B11F1B57}. This subkey can be deleted for this object.</Details> </EntryDetails> - <EntryDetails> <Entry>DivX Browser Plugin 1.0 Type Library</Entry> <Details>The key HKEY_CLASSES_ROOT\TypeLib\{B5AA9C9D-FFB8-4296-9CAD-57EAF1357354}\1.0\HELPDIR for this type library serves to indicate a help directory, but contains no data. This subkey can be deleted for this type library.</Details> </EntryDetails> - <EntryDetails> <Entry>DivX Demux</Entry> <Details>The key HKEY_CLASSES_ROOT\CLSID\{85516702-9C45-4A9C-861B-BC4492D355DC}\InprocServer32 points to the missing InprocServer32 C:\Program Files\DivX\DivX Codec\DivXMedia.ax. The associated CLSID can be deleted.</Details> </EntryDetails> - <EntryDetails> <Entry>DivX Settings Manager typeLib</Entry> <Details>The key HKEY_CLASSES_ROOT\TypeLib\{957BF83F-EE5A-42EB-8CE5-6267011F0EF9}\1.0\0\win32 for this type library points to the missing file C:\Program Files\DivX\DivX Codec\divxsm.tlb. This subkey can be deleted for this type library.</Details> </EntryDetails> - <EntryDetails> <Entry>DivX Subtitle Decoder</Entry> <Details>The key HKEY_CLASSES_ROOT\CLSID\{BA11F969-397A-4146-AC96-236C3D76711D}\InprocServer32 points to the missing InprocServer32 C:\Program Files\DivX\DivX Codec\DivXMedia.ax. The associated CLSID can be deleted.</Details> </EntryDetails> - <EntryDetails> <Entry>DivXPlayerCOM 1.0 Type Library</Entry> <Details>The key HKEY_CLASSES_ROOT\TypeLib\{413B064E-B85D-4A72-A004-624663BF5F5F}\1.0\0\win32 for this type library points to the missing file C:\Program Files\DivX\DivX Player\DivX Player.exe. This subkey can be deleted for this type library.</Details> </EntryDetails> - <EntryDetails> <Entry>DivXPlayerCOM 1.0 Type Library</Entry> <Details>The key HKEY_CLASSES_ROOT\TypeLib\{413B064E-B85D-4A72-A004-624663BF5F5F}\1.0\HELPDIR for this type library serves to indicate a help directory, but contains no data. This subkey can be deleted for this type library.</Details> </EntryDetails> - <EntryDetails> <Entry>DmsApi Class</Entry> <Details>The key HKEY_CLASSES_ROOT\CLSID\{B4928187-D2E3-4CFA-A2C2-A9C97B4956EA}\TypeLib for this object point to the missing type library {}. This subkey can be deleted for this object.</Details> </EntryDetails> - <EntryDetails> <Entry>DocProcEngine2 Class</Entry> <Details>The key HKEY_CLASSES_ROOT\CLSID\{3712A712-4105-4312-8371-692B7FD58551}\TypeLib for this object point to the missing type library {3712A711-4105-4312-8371-692B7FD58551}. This subkey can be deleted for this object.</Details> </EntryDetails> - <EntryDetails> <Entry>DownloadAndActivationTriggers Class</Entry> <Details>The key HKEY_CLASSES_ROOT\CLSID\{CA4178C0-7606-4C37-8675-998C0FDC1846}\TypeLib for this object point to the missing type library {6F125F84-8F3E-45eb-B537-5D6052E48910}. This subkey can be deleted for this object.</Details> </EntryDetails> - <EntryDetails> <Entry>EditClips 1.0 Type Library</Entry> <Details>The key HKEY_CLASSES_ROOT\TypeLib\{ED15218C-FDFE-4723-AF0B-2251477F264C}\1.0\HELPDIR for this type library serves to indicate a help directory, but contains no data. This subkey can be deleted for this type library.</Details> </EntryDetails> - <EntryDetails> <Entry>EraseDiscDlg Class</Entry> <Details>The key HKEY_CLASSES_ROOT\CLSID\{7b9717b1-2d9b-4d14-b2da-d4bf5a28c6af}\TypeLib for this object point to the missing type library {b3267063-8ab4-464d-a13c-1517bd6dc6f4}. This subkey can be deleted for this object.</Details> </EntryDetails> - <EntryDetails> <Entry>EraseSettingsDlg Class</Entry> <Details>The key HKEY_CLASSES_ROOT\CLSID\{1c613f47-70c5-4551-a264-f7254139854c}\TypeLib for this object point to the missing type library {b3267063-8ab4-464d-a13c-1517bd6dc6f4}. This subkey can be deleted for this object.</Details> </EntryDetails> - <EntryDetails> <Entry>GEPlugin Type Library</Entry> <Details>The key HKEY_CLASSES_ROOT\TypeLib\{F9152AEC-3462-4632-8087-EEE3C3CDDA35}\1.0\HELPDIR for this type library serves to indicate a help directory, but contains no data. This subkey can be deleted for this type library.</Details> </EntryDetails> - <EntryDetails> <Entry>Google Dictionary Compression sdch Type Library</Entry> <Details>The key HKEY_CLASSES_ROOT\TypeLib\{CCD973EF-4D88-48B2-ABF4-13EAF25BAE3B}\1.0\HELPDIR for this type library serves to indicate a help directory, but contains no data. This subkey can be deleted for this type library.</Details> </EntryDetails> - <EntryDetails> <Entry>Google Update Process Launcher Class</Entry> <Details>The key HKEY_CLASSES_ROOT\CLSID\{ABC01078-F197-4B0B-ADBC-CFE684B39C82}\TypeLib for this object point to the missing type library {7E6CD20B-8688-4960-96D9-B979471577B8}. This subkey can be deleted for this object.</Details> </EntryDetails> - <EntryDetails> <Entry>Google Updater Service 1.0 Type Library</Entry> <Details>The key HKEY_CLASSES_ROOT\TypeLib\{5924C60B-6D7F-4AD6-8084-24A59431C967}\1.0\HELPDIR for this type library serves to indicate a help directory, but contains no data. This subkey can be deleted for this type library.</Details> </EntryDetails> - <EntryDetails> <Entry>GoogleDesktopSmallStorageManager Class</Entry> <Details>The key HKEY_CLASSES_ROOT\CLSID\{F9EC0695-290D-4420-9522-870AC77A085B}\TypeLib for this object point to the missing type library {E4E2BB6D-424A-4AD6-AECF-A8FB5017BACB}. This subkey can be deleted for this object.</Details> </EntryDetails> - <EntryDetails> <Entry>GoogleUpdate.OnDemandCOMClass</Entry> <Details>The key HKEY_CLASSES_ROOT\CLSID\{6F8BD55B-E83D-4A47-85BE-81FFA8057A69}\TypeLib for this object point to the missing type library {7E6CD20B-8688-4960-96D9-B979471577B8}. This subkey can be deleted for this object.</Details> </EntryDetails> - <EntryDetails> <Entry>GPBaseService 1.0 Type Library</Entry> <Details>The key HKEY_CLASSES_ROOT\TypeLib\{E8667771-87D5-42D8-A7FC-3F3F39219F66}\1.0\HELPDIR for this type library serves to indicate a help directory, but contains no data. This subkey can be deleted for this type library.</Details> </EntryDetails> - <EntryDetails> <Entry>GPBaseService Class</Entry> <Details>The key HKEY_CLASSES_ROOT\CLSID\{09A78C99-CCA3-40F0-9962-755F08CC68E4} points to the missing ApplicationID {92E04433-4D08-4EAC-8B36-A1D9246B9025}.</Details> </EntryDetails> - <EntryDetails> <Entry>GPRBEventsHandler 1.0 Type Library</Entry> <Details>The key HKEY_CLASSES_ROOT\TypeLib\{5048412E-2630-412C-A31D-43F4C56B651B}\1.0\HELPDIR for this type library serves to indicate a help directory, but contains no data. This subkey can be deleted for this type library.</Details> </EntryDetails> - <EntryDetails> <Entry>HDReg 1.0 Type Library</Entry> <Details>The key HKEY_CLASSES_ROOT\TypeLib\{48580E99-5FF7-4086-8223-1DA45BE81F00}\1.0\HELPDIR for this type library serves to indicate a help directory, but contains no data. This subkey can be deleted for this type library.</Details> </EntryDetails> - <EntryDetails> <Entry>Hewlett-Packard CUE Destination Objects 1.0</Entry> <Details>The key HKEY_CLASSES_ROOT\TypeLib\{E9B7B442-5F59-11D5-B6B3-0060B0A22ADE}\1.0\HELPDIR for this type library serves to indicate a help directory, but contains no data. This subkey can be deleted for this type library.</Details> </EntryDetails> - <EntryDetails> <Entry>HP Smart Web Printing</Entry> <Details>The key HKEY_CLASSES_ROOT\CLSID\{555D4D79-4BD2-4094-A395-CFC534424A05}\TypeLib for this object point to the missing type library {62FFF5B8-A860-4a8e-A8DC-72D9C159C5E1}. This subkey can be deleted for this object.</Details> </EntryDetails> - <EntryDetails> <Entry>HPAiODevParms Class (CUE)</Entry> <Details>The key HKEY_CLASSES_ROOT\CLSID\{697F5202-0494-11D6-A2B0-0060B0FBD872}\TypeLib for this object point to the missing type library {84BE2760-E1CF-11D2-BD9D-0060B067A8F5}. This subkey can be deleted for this object.</Details> </EntryDetails> - <EntryDetails> <Entry>hpswp_Operation 1.0 Type Library</Entry> <Details>The key HKEY_CLASSES_ROOT\TypeLib\{CE12EC2B-285D-4925-B97C-F83C21E47AC2}\1.0\HELPDIR for this type library serves to indicate a help directory, but contains no data. This subkey can be deleted for this type library.</Details> </EntryDetails> - <EntryDetails> <Entry>IAdvertisingSession2</Entry> <Details>The key HKEY_CLASSES_ROOT\Interface\{35F1B1AE-E0F4-4FA7-A69C-BB00F570E0BD}\ProxyStubClsid32 for this interface points to the missing CLSID {47015210-F47F-474D-B727-ECB30D65F934}. This subkey can be deleted for this interface.</Details> </EntryDetails> - <EntryDetails> <Entry>IAudibleLogin</Entry> <Details>The key HKEY_CLASSES_ROOT\Interface\{6577A3D2-AC29-4F64-8777-4730D5ADE29E}\ProxyStubClsid32 for this interface points to the missing CLSID {47015210-F47F-474D-B727-ECB30D65F934}. This subkey can be deleted for this interface.</Details> </EntryDetails> - <EntryDetails> <Entry>IAudioDocFilter</Entry> <Details>The key HKEY_CLASSES_ROOT\Interface\{D38275AF-210A-46D5-8FD4-FD44BA4F0DE5}\TypeLib for this interface points to the missing type library {1F25D46F-7715-4542-A3D0-AA3532DB3921}. This subkey can be deleted for this interface.</Details> </EntryDetails> - <EntryDetails> <Entry>ICompanyData</Entry> <Details>The key HKEY_CLASSES_ROOT\Interface\{0202B6E5-EEC0-4C05-AA67-B93ABF916905}\ProxyStubClsid32 for this interface points to the missing CLSID {47015210-F47F-474D-B727-ECB30D65F934}. This subkey can be deleted for this interface.</Details> </EntryDetails> - <EntryDetails> <Entry>ICPRMLicenseKey</Entry> <Details>The key HKEY_CLASSES_ROOT\Interface\{36F2EEE8-D38F-4D2F-917A-EAF1BC6F576D}\ProxyStubClsid32 for this interface points to the missing CLSID {47015210-F47F-474D-B727-ECB30D65F934}. This subkey can be deleted for this interface.</Details> </EntryDetails> - <EntryDetails> <Entry>IEncoderWizard</Entry> <Details>The key HKEY_CLASSES_ROOT\Interface\{34FF0553-F5B6-4D98-8460-2D6809889F00}\TypeLib for this interface points to the missing type library {A0000005-E965-440D-9C3E-E04704629F99}. This subkey can be deleted for this interface.</Details> </EntryDetails> - <EntryDetails> <Entry>IEnumNCPidInfo</Entry> <Details>The key HKEY_CLASSES_ROOT\Interface\{C912F878-780E-4FDF-99BD-95AA8B1C87EF}\ProxyStubClsid32 for this interface points to the missing CLSID {2368AF01-856F-4120-BBA2-D9F16C6EC022}. This subkey can be deleted for this interface.</Details> </EntryDetails> - <EntryDetails> <Entry>IFeatureActivation</Entry> <Details>The key HKEY_CLASSES_ROOT\Interface\{C6CE60F6-C9E8-43DE-8A44-CF34002E1BF1}\ProxyStubClsid32 for this interface points to the missing CLSID {47015210-F47F-474D-B727-ECB30D65F934}. This subkey can be deleted for this interface.</Details> </EntryDetails> - <EntryDetails> <Entry>IGenericDlgTrigger</Entry> <Details>The key HKEY_CLASSES_ROOT\Interface\{B38255BD-1FD8-48D5-B214-FC8D319B2164}\ProxyStubClsid32 for this interface points to the missing CLSID {47015210-F47F-474D-B727-ECB30D65F934}. This subkey can be deleted for this interface.</Details> </EntryDetails> - <EntryDetails> <Entry>ILicenseDependentSection</Entry> <Details>The key HKEY_CLASSES_ROOT\Interface\{9CDA4C43-A979-4129-97F3-901A12F146CF}\ProxyStubClsid32 for this interface points to the missing CLSID {47015210-F47F-474D-B727-ECB30D65F934}. This subkey can be deleted for this interface.</Details> </EntryDetails> - <EntryDetails> <Entry>ImageInfoDlg Class</Entry> <Details>The key HKEY_CLASSES_ROOT\CLSID\{940f79d9-2062-41b7-a22f-9e99ffdd1b85}\TypeLib for this object point to the missing type library {b3267063-8ab4-464d-a13c-1517bd6dc6f4}. This subkey can be deleted for this object.</Details> </EntryDetails> - <EntryDetails> <Entry>ImageInfoDlgParam Class</Entry> <Details>The key HKEY_CLASSES_ROOT\CLSID\{712a2867-02b2-402b-8f8d-74437494dcfb}\TypeLib for this object point to the missing type library {b3267063-8ab4-464d-a13c-1517bd6dc6f4}. This subkey can be deleted for this object.</Details> </EntryDetails> - <EntryDetails> <Entry>IMenuTemplateEnumerator</Entry> <Details>The key HKEY_CLASSES_ROOT\Interface\{0EC213C4-DFE6-4152-823F-46329464C6F9}\TypeLib for this interface points to the missing type library {BF84BFD8-B411-4948-9BDA-3A6C02CE7BD4}. This subkey can be deleted for this interface.</Details> </EntryDetails> - <EntryDetails> <Entry>INBClientListener</Entry> <Details>The key HKEY_CLASSES_ROOT\Interface\{7A9AEE1C-C567-4C20-99CE-5B8FCC57D478}\TypeLib for this interface points to the missing type library {400F4FCF-6B7B-45B1-BAE0-87B13572AAB6}. This subkey can be deleted for this interface.</Details> </EntryDetails> - <EntryDetails> <Entry>INBClientListenerEvents</Entry> <Details>The key HKEY_CLASSES_ROOT\Interface\{20ABB8A6-F9C0-4624-A189-697FED8A3116}\TypeLib for this interface points to the missing type library {400F4FCF-6B7B-45B1-BAE0-87B13572AAB6}. This subkey can be deleted for this interface.</Details> </EntryDetails> - <EntryDetails> <Entry>INCAudioDevice</Entry> <Details>The key HKEY_CLASSES_ROOT\Interface\{9DF67D6E-B4BD-4570-860A-6B92E61A5D8A}\ProxyStubClsid32 for this interface points to the missing CLSID {2368AF01-856F-4120-BBA2-D9F16C6EC022}. This subkey can be deleted for this interface.</Details> </EntryDetails> - <EntryDetails> <Entry>INCAudioPidInfo</Entry> <Details>The key HKEY_CLASSES_ROOT\Interface\{1CC4C75E-1B29-45A0-A696-5D401CFDCA72}\ProxyStubClsid32 for this interface points to the missing CLSID {2368AF01-856F-4120-BBA2-D9F16C6EC022}. This subkey can be deleted for this interface.</Details> </EntryDetails> - <EntryDetails> <Entry>INCCaptureApiSetup</Entry> <Details>The key HKEY_CLASSES_ROOT\Interface\{5C496ABE-F7A0-42B2-81FB-E8D0D7FF69D6}\ProxyStubClsid32 for this interface points to the missing CLSID {2368AF01-856F-4120-BBA2-D9F16C6EC022}. This subkey can be deleted for this interface.</Details> </EntryDetails> - <EntryDetails> <Entry>INCCaptureApiToolkit</Entry> <Details>The key HKEY_CLASSES_ROOT\Interface\{BBB0B3B1-661D-4640-A4C4-F634419AD29C}\ProxyStubClsid32 for this interface points to the missing CLSID {2368AF01-856F-4120-BBA2-D9F16C6EC022}. This subkey can be deleted for this interface.</Details> </EntryDetails> - <EntryDetails> <Entry>INCCaptureDevice</Entry> <Details>The key HKEY_CLASSES_ROOT\Interface\{C8FDA558-3DBA-4D73-9F4F-CE15D89E52BF}\ProxyStubClsid32 for this interface points to the missing CLSID {2368AF01-856F-4120-BBA2-D9F16C6EC022}. This subkey can be deleted for this interface.</Details> </EntryDetails> - <EntryDetails> <Entry>INCChannel</Entry> <Details>The key HKEY_CLASSES_ROOT\Interface\{EB6C52FB-D9FF-4017-8426-4C4CDC0623D6}\ProxyStubClsid32 for this interface points to the missing CLSID {2368AF01-856F-4120-BBA2-D9F16C6EC022}. This subkey can be deleted for this interface.</Details> </EntryDetails> - <EntryDetails> <Entry>INCChannelEx</Entry> <Details>The key HKEY_CLASSES_ROOT\Interface\{383BBE14-42A7-4041-A191-C6858099F972}\ProxyStubClsid32 for this interface points to the missing CLSID {2368AF01-856F-4120-BBA2-D9F16C6EC022}. This subkey can be deleted for this interface.</Details> </EntryDetails> - <EntryDetails> <Entry>INCDeviceChangeCallback</Entry> <Details>The key HKEY_CLASSES_ROOT\Interface\{D52B571E-DFCC-4374-BD35-43673DCA4190}\ProxyStubClsid32 for this interface points to the missing CLSID {2368AF01-856F-4120-BBA2-D9F16C6EC022}. This subkey can be deleted for this interface.</Details> </EntryDetails> - <EntryDetails> <Entry>INCDeviceChangeControl</Entry> <Details>The key HKEY_CLASSES_ROOT\Interface\{5ACACBDA-ADB3-4551-98AE-0F6FF0B576DE}\ProxyStubClsid32 for this interface points to the missing CLSID {2368AF01-856F-4120-BBA2-D9F16C6EC022}. This subkey can be deleted for this interface.</Details> </EntryDetails> - <EntryDetails> <Entry>INCDeviceExtraInfo</Entry> <Details>The key HKEY_CLASSES_ROOT\Interface\{C2D4BE82-27F5-4785-8E91-D3BC1E56D952}\ProxyStubClsid32 for this interface points to the missing CLSID {2368AF01-856F-4120-BBA2-D9F16C6EC022}. This subkey can be deleted for this interface.</Details> </EntryDetails> - <EntryDetails> <Entry>INCDeviceLockChangeCallback</Entry> <Details>The key HKEY_CLASSES_ROOT\Interface\{4FE0EF21-51F2-411B-9023-5BF33ED0F51D}\ProxyStubClsid32 for this interface points to the missing CLSID {2368AF01-856F-4120-BBA2-D9F16C6EC022}. This subkey can be deleted for this interface.</Details> </EntryDetails> - <EntryDetails> <Entry>INCDeviceLockChangeControl</Entry> <Details>The key HKEY_CLASSES_ROOT\Interface\{BB023E7D-B243-4CC6-8F77-CE774B2D7EA8}\ProxyStubClsid32 for this interface points to the missing CLSID {2368AF01-856F-4120-BBA2-D9F16C6EC022}. This subkey can be deleted for this interface.</Details> </EntryDetails> - <EntryDetails> <Entry>INCDvbsSatelliteInfo</Entry> <Details>The key HKEY_CLASSES_ROOT\Interface\{0D4C1A7F-82C3-4C56-AD88-976B9B4443F2}\ProxyStubClsid32 for this interface points to the missing CLSID {2368AF01-856F-4120-BBA2-D9F16C6EC022}. This subkey can be deleted for this interface.</Details> </EntryDetails> - <EntryDetails> <Entry>INCEpgCallback</Entry> <Details>The key HKEY_CLASSES_ROOT\Interface\{9E3D74F2-FD1B-4175-8329-870BFC986713}\ProxyStubClsid32 for this interface points to the missing CLSID {2368AF01-856F-4120-BBA2-D9F16C6EC022}. This subkey can be deleted for this interface.</Details> </EntryDetails> - <EntryDetails> <Entry>INCEpgEvent</Entry> <Details>The key HKEY_CLASSES_ROOT\Interface\{DB17C727-E9E5-46A8-9752-E1AF53AD053B}\ProxyStubClsid32 for this interface points to the missing CLSID {2368AF01-856F-4120-BBA2-D9F16C6EC022}. This subkey can be deleted for this interface.</Details> </EntryDetails> - <EntryDetails> <Entry>INCEpgEvents</Entry> <Details>The key HKEY_CLASSES_ROOT\Interface\{D7C495D0-6811-498A-B099-A618BBD8E695}\ProxyStubClsid32 for this interface points to the missing CLSID {2368AF01-856F-4120-BBA2-D9F16C6EC022}. This subkey can be deleted for this interface.</Details> </EntryDetails> - <EntryDetails> <Entry>INCEpgManager</Entry> <Details>The key HKEY_CLASSES_ROOT\Interface\{08C50C7B-20EF-4F14-A835-0081FB943C4A}\ProxyStubClsid32 for this interface points to the missing CLSID {2368AF01-856F-4120-BBA2-D9F16C6EC022}. This subkey can be deleted for this interface.</Details> </EntryDetails> - <EntryDetails> <Entry>INCGraphManager</Entry> <Details>The key HKEY_CLASSES_ROOT\Interface\{1908484A-2255-4A34-9A0A-71E249F55DA2}\ProxyStubClsid32 for this interface points to the missing CLSID {2368AF01-856F-4120-BBA2-D9F16C6EC022}. This subkey can be deleted for this interface.</Details> </EntryDetails> - <EntryDetails> <Entry>INCGraphManagerAudioInputControl</Entry> <Details>The key HKEY_CLASSES_ROOT\Interface\{B77B2225-5B9A-4700-89FC-B232B30FAC4E}\ProxyStubClsid32 for this interface points to the missing CLSID {2368AF01-856F-4120-BBA2-D9F16C6EC022}. This subkey can be deleted for this interface.</Details> </EntryDetails> - <EntryDetails> <Entry>INCGraphManagerCamcorderControl</Entry> <Details>The key HKEY_CLASSES_ROOT\Interface\{918F1618-1D41-47C1-AB2A-A6EEFEBA5A69}\ProxyStubClsid32 for this interface points to the missing CLSID {2368AF01-856F-4120-BBA2-D9F16C6EC022}. This subkey can be deleted for this interface.</Details> </EntryDetails> - <EntryDetails> <Entry>INCGraphManagerCaptureControl</Entry> <Details>The key HKEY_CLASSES_ROOT\Interface\{AE85DEE1-2883-4D87-B3A0-90B5FB29A0C2}\ProxyStubClsid32 for this interface points to the missing CLSID {2368AF01-856F-4120-BBA2-D9F16C6EC022}. This subkey can be deleted for this interface.</Details> </EntryDetails> - <EntryDetails> <Entry>INCGraphManagerChannelControl</Entry> <Details>The key HKEY_CLASSES_ROOT\Interface\{4000E955-641D-494E-BD8A-0B89FC9C464C}\ProxyStubClsid32 for this interface points to the missing CLSID {2368AF01-856F-4120-BBA2-D9F16C6EC022}. This subkey can be deleted for this interface.</Details> </EntryDetails> - <EntryDetails> <Entry>INCGraphManagerExtraInfo</Entry> <Details>The key HKEY_CLASSES_ROOT\Interface\{9D8BA4C0-D74B-443C-987E-B9F400840783}\ProxyStubClsid32 for this interface points to the missing CLSID {2368AF01-856F-4120-BBA2-D9F16C6EC022}. This subkey can be deleted for this interface.</Details> </EntryDetails> - <EntryDetails> <Entry>INCGraphManagerFormatControl</Entry> <Details>The key HKEY_CLASSES_ROOT\Interface\{617EB43E-0676-4E95-941E-28C31F738682}\ProxyStubClsid32 for this interface points to the missing CLSID {2368AF01-856F-4120-BBA2-D9F16C6EC022}. This subkey can be deleted for this interface.</Details> </EntryDetails> - <EntryDetails> <Entry>INCGraphManagerInputControl</Entry> <Details>The key HKEY_CLASSES_ROOT\Interface\{9A287B04-4DD9-423D-A11B-CC090071116A}\ProxyStubClsid32 for this interface points to the missing CLSID {2368AF01-856F-4120-BBA2-D9F16C6EC022}. This subkey can be deleted for this interface.</Details> </EntryDetails> - <EntryDetails> <Entry>INCGraphManagerMacrovisionControl</Entry> <Details>The key HKEY_CLASSES_ROOT\Interface\{F8BB4659-8552-4455-8418-9EE5F14CDDC9}\ProxyStubClsid32 for this interface points to the missing CLSID {2368AF01-856F-4120-BBA2-D9F16C6EC022}. This subkey can be deleted for this interface.</Details> </EntryDetails> - <EntryDetails> <Entry>INCGraphManagerOutputSetup</Entry> <Details>The key HKEY_CLASSES_ROOT\Interface\{A6CC5B72-5D14-4216-9FAD-7ACD1ECE4462}\ProxyStubClsid32 for this interface points to the missing CLSID {2368AF01-856F-4120-BBA2-D9F16C6EC022}. This subkey can be deleted for this interface.</Details> </EntryDetails> - <EntryDetails> <Entry>INCGraphManagerSetup</Entry> <Details>The key HKEY_CLASSES_ROOT\Interface\{C73B96A4-0FCC-43A0-832A-D1F57DB456AD}\ProxyStubClsid32 for this interface points to the missing CLSID {2368AF01-856F-4120-BBA2-D9F16C6EC022}. This subkey can be deleted for this interface.</Details> </EntryDetails> - <EntryDetails> <Entry>INCGraphManagerSetup2</Entry> <Details>The key HKEY_CLASSES_ROOT\Interface\{DD0F6B27-4751-4E17-9DFD-CF66CEF04B48}\ProxyStubClsid32 for this interface points to the missing CLSID {2368AF01-856F-4120-BBA2-D9F16C6EC022}. This subkey can be deleted for this interface.</Details> </EntryDetails> - <EntryDetails> <Entry>INCGraphManagerSignalControl</Entry> <Details>The key HKEY_CLASSES_ROOT\Interface\{C4E03B09-4592-4E33-802C-49B510E63CDF}\ProxyStubClsid32 for this interface points to the missing CLSID {2368AF01-856F-4120-BBA2-D9F16C6EC022}. This subkey can be deleted for this interface.</Details> </EntryDetails> - <EntryDetails> <Entry>INCLnb</Entry> <Details>The key HKEY_CLASSES_ROOT\Interface\{1507BD14-179B-4FCE-8C7A-B2FBD2C0EB19}\ProxyStubClsid32 for this interface points to the missing CLSID {2368AF01-856F-4120-BBA2-D9F16C6EC022}. This subkey can be deleted for this interface.</Details> </EntryDetails> - <EntryDetails> <Entry>INCLnbControl</Entry> <Details>The key HKEY_CLASSES_ROOT\Interface\{6F86640A-501A-4A5A-A70E-7056654EF0D7}\ProxyStubClsid32 for this interface points to the missing CLSID {2368AF01-856F-4120-BBA2-D9F16C6EC022}. This subkey can be deleted for this interface.</Details> </EntryDetails> - <EntryDetails> <Entry>INCLnbSetup</Entry> <Details>The key HKEY_CLASSES_ROOT\Interface\{36AD7365-D2FE-4367-98A4-7643A1C89DCB}\ProxyStubClsid32 for this interface points to the missing CLSID {2368AF01-856F-4120-BBA2-D9F16C6EC022}. This subkey can be deleted for this interface.</Details> </EntryDetails> - <EntryDetails> <Entry>INCPidInfo</Entry> <Details>The key HKEY_CLASSES_ROOT\Interface\{DE905F49-47A1-4DE6-970D-28B05FFC9755}\ProxyStubClsid32 for this interface points to the missing CLSID {2368AF01-856F-4120-BBA2-D9F16C6EC022}. This subkey can be deleted for this interface.</Details> </EntryDetails> - <EntryDetails> <Entry>INCPmtPidInfo</Entry> <Details>The key HKEY_CLASSES_ROOT\Interface\{B76077CC-5897-44F0-825B-35AAC787DECE}\ProxyStubClsid32 for this interface points to the missing CLSID {2368AF01-856F-4120-BBA2-D9F16C6EC022}. This subkey can be deleted for this interface.</Details> </EntryDetails> - <EntryDetails> <Entry>INCSignalChangeCallback</Entry> <Details>The key HKEY_CLASSES_ROOT\Interface\{E0A5AFA5-0C3A-44ED-A958-F31A98B200B9}\ProxyStubClsid32 for this interface points to the missing CLSID {2368AF01-856F-4120-BBA2-D9F16C6EC022}. This subkey can be deleted for this interface.</Details> </EntryDetails> - <EntryDetails> <Entry>INCStreamInfo</Entry> <Details>The key HKEY_CLASSES_ROOT\Interface\{FDFF617C-8E2C-446C-BBCE-02016F032E08}\ProxyStubClsid32 for this interface points to the missing CLSID {2368AF01-856F-4120-BBA2-D9F16C6EC022}. This subkey can be deleted for this interface.</Details> </EntryDetails> - <EntryDetails> <Entry>INCSystemConfiguration</Entry> <Details>The key HKEY_CLASSES_ROOT\Interface\{E1F7A2F4-F96D-4525-BAEC-B744268BE78D}\ProxyStubClsid32 for this interface points to the missing CLSID {2368AF01-856F-4120-BBA2-D9F16C6EC022}. This subkey can be deleted for this interface.</Details> </EntryDetails> - <EntryDetails> <Entry>INCSystemConfigurationMultituner</Entry> <Details>The key HKEY_CLASSES_ROOT\Interface\{A9A63BF6-0CDD-4BF8-9990-B83C8F7DB304}\ProxyStubClsid32 for this interface points to the missing CLSID {2368AF01-856F-4120-BBA2-D9F16C6EC022}. This subkey can be deleted for this interface.</Details> </EntryDetails> - <EntryDetails> <Entry>INCTeletextPidInfo</Entry> <Details>The key HKEY_CLASSES_ROOT\Interface\{ECAE4265-0C22-4601-A0C2-303F741E4891}\ProxyStubClsid32 for this interface points to the missing CLSID {2368AF01-856F-4120-BBA2-D9F16C6EC022}. This subkey can be deleted for this interface.</Details> </EntryDetails> - <EntryDetails> <Entry>INCTransportStreamCallback</Entry> <Details>The key HKEY_CLASSES_ROOT\Interface\{1A61A65F-A282-4346-8483-A593A0EA1304}\ProxyStubClsid32 for this interface points to the missing CLSID {2368AF01-856F-4120-BBA2-D9F16C6EC022}. This subkey can be deleted for this interface.</Details> </EntryDetails> - <EntryDetails> <Entry>INCTransportStreamCallbackOld</Entry> <Details>The key HKEY_CLASSES_ROOT\Interface\{D259C12C-1547-42FC-9AC3-EBC2B092AACA}\ProxyStubClsid32 for this interface points to the missing CLSID {2368AF01-856F-4120-BBA2-D9F16C6EC022}. This subkey can be deleted for this interface.</Details> </EntryDetails> - <EntryDetails> <Entry>INCTuner</Entry> <Details>The key HKEY_CLASSES_ROOT\Interface\{6C04FA69-98B0-4494-B1F3-4C47244AEF8F}\ProxyStubClsid32 for this interface points to the missing CLSID {2368AF01-856F-4120-BBA2-D9F16C6EC022}. This subkey can be deleted for this interface.</Details> </EntryDetails> - <EntryDetails> <Entry>INCTunerCallback</Entry> <Details>The key HKEY_CLASSES_ROOT\Interface\{C3B2F5C4-DBB9-4302-8F0B-581217D93ED1}\ProxyStubClsid32 for this interface points to the missing CLSID {2368AF01-856F-4120-BBA2-D9F16C6EC022}. This subkey can be deleted for this interface.</Details> </EntryDetails> - <EntryDetails> <Entry>INCTunerSetupAtsc</Entry> <Details>The key HKEY_CLASSES_ROOT\Interface\{E2C07486-A7B9-4A3B-9B61-92FFACC7B92F}\ProxyStubClsid32 for this interface points to the missing CLSID {2368AF01-856F-4120-BBA2-D9F16C6EC022}. This subkey can be deleted for this interface.</Details> </EntryDetails> - <EntryDetails> <Entry>INCTunerSetupDvbc</Entry> <Details>The key HKEY_CLASSES_ROOT\Interface\{367C1BC6-A803-4B49-B0A5-FF26CDC81AB0}\ProxyStubClsid32 for this interface points to the missing CLSID {2368AF01-856F-4120-BBA2-D9F16C6EC022}. This subkey can be deleted for this interface.</Details> </EntryDetails> - <EntryDetails> <Entry>INCTunerSetupDvbs</Entry> <Details>The key HKEY_CLASSES_ROOT\Interface\{20B9FF0E-FDB8-4506-8D86-717936E1C34B}\ProxyStubClsid32 for this interface points to the missing CLSID {2368AF01-856F-4120-BBA2-D9F16C6EC022}. This subkey can be deleted for this interface.</Details> </EntryDetails> - <EntryDetails> <Entry>INCTunerSetupDvbt</Entry> <Details>The key HKEY_CLASSES_ROOT\Interface\{EA23282A-CFAC-4CEF-BC90-078C8DD17FEB}\ProxyStubClsid32 for this interface points to the missing CLSID {2368AF01-856F-4120-BBA2-D9F16C6EC022}. This subkey can be deleted for this interface.</Details> </EntryDetails> - <EntryDetails> <Entry>INCVideoFormat</Entry> <Details>The key HKEY_CLASSES_ROOT\Interface\{FB5870C7-9B95-4395-892C-2CB0B7AC30E6}\ProxyStubClsid32 for this interface points to the missing CLSID {2368AF01-856F-4120-BBA2-D9F16C6EC022}. This subkey can be deleted for this interface.</Details> </EntryDetails> - <EntryDetails> <Entry>INeroApplication</Entry> <Details>The key HKEY_CLASSES_ROOT\Interface\{4BF31B81-8A46-40C9-B959-DFE163F5E2EC}\ProxyStubClsid32 for this interface points to the missing CLSID {47015210-F47F-474D-B727-ECB30D65F934}. This subkey can be deleted for this interface.</Details> </EntryDetails> - <EntryDetails> <Entry>INeroInFDiscCopyEvents</Entry> <Details>The key HKEY_CLASSES_ROOT\Interface\{DCCDBE80-BB27-4F3E-AB5B-B5D7DCDC0DF8}\TypeLib for this interface points to the missing type library {46D86969-BA9A-4527-99D7-33463A0B38CF}. This subkey can be deleted for this interface.</Details> </EntryDetails> - <EntryDetails> <Entry>InitSettings Class</Entry> <Details>The key HKEY_CLASSES_ROOT\CLSID\{9871f8af-152a-4651-834c-cdc5fe61c14c}\TypeLib for this object point to the missing type library {b3267063-8ab4-464d-a13c-1517bd6dc6f4}. This subkey can be deleted for this object.</Details> </EntryDetails> - <EntryDetails> <Entry>INMiTunesIntegrationService</Entry> <Details>The key HKEY_CLASSES_ROOT\Interface\{2BA16880-8EFC-4C72-A5BD-485C2EC1027B}\ProxyStubClsid32 for this interface points to the missing CLSID {5518046E-713A-4FD4-B819-87DACC84E4AB}. This subkey can be deleted for this interface.</Details> </EntryDetails> - <EntryDetails> <Entry>INMTVConstPidList</Entry> <Details>The key HKEY_CLASSES_ROOT\Interface\{CFDAE656-D5C4-424D-A29A-611D6102AAB5}\ProxyStubClsid32 for this interface points to the missing CLSID {A42D5816-2C1B-4C00-BB0A-B4A0E9E322B6}. This subkey can be deleted for this interface.</Details> </EntryDetails> - <EntryDetails> <Entry>INMTVOptionCreateRecordingHandle</Entry> <Details>The key HKEY_CLASSES_ROOT\Interface\{5B8772DA-E1E6-4AAB-BF81-847334B3FE1C}\ProxyStubClsid32 for this interface points to the missing CLSID {A42D5816-2C1B-4C00-BB0A-B4A0E9E322B6}. This subkey can be deleted for this interface.</Details> </EntryDetails> - <EntryDetails> <Entry>INMTVOptionCreateRecordingHandleOnFile</Entry> <Details>The key HKEY_CLASSES_ROOT\Interface\{E998545B-5F49-4434-AE60-3A4DAC415C5B}\ProxyStubClsid32 for this interface points to the missing CLSID {A42D5816-2C1B-4C00-BB0A-B4A0E9E322B6}. This subkey can be deleted for this interface.</Details> </EntryDetails> - <EntryDetails> <Entry>INMTVOptionCreateStreamForChannel</Entry> <Details>The key HKEY_CLASSES_ROOT\Interface\{BD76C86D-9C03-4301-BB83-BC845823A934}\ProxyStubClsid32 for this interface points to the missing CLSID {A42D5816-2C1B-4C00-BB0A-B4A0E9E322B6}. This subkey can be deleted for this interface.</Details> </EntryDetails> - <EntryDetails> <Entry>INMTVOptionCreateStreamOnObject</Entry> <Details>The key HKEY_CLASSES_ROOT\Interface\{C296C952-EA88-42FC-A909-042D0A3585AC}\ProxyStubClsid32 for this interface points to the missing CLSID {A42D5816-2C1B-4C00-BB0A-B4A0E9E322B6}. This subkey can be deleted for this interface.</Details> </EntryDetails> - <EntryDetails> <Entry>INMTVOptionGetChannel</Entry> <Details>The key HKEY_CLASSES_ROOT\Interface\{7FDE2128-0B47-42DE-B015-8715C968148D}\ProxyStubClsid32 for this interface points to the missing CLSID {A42D5816-2C1B-4C00-BB0A-B4A0E9E322B6}. This subkey can be deleted for this interface.</Details> </EntryDetails> - <EntryDetails> <Entry>INMTVOptionGetCurrentPids</Entry> <Details>The key HKEY_CLASSES_ROOT\Interface\{B9B6DB6A-18AA-44FE-A852-076EEAA3370D}\ProxyStubClsid32 for this interface points to the missing CLSID {A42D5816-2C1B-4C00-BB0A-B4A0E9E322B6}. This subkey can be deleted for this interface.</Details> </EntryDetails> - <EntryDetails> <Entry>INMTVOptionGetCurrentRecordingHandles</Entry> <Details>The key HKEY_CLASSES_ROOT\Interface\{FF2D8026-A1E6-4B0A-8C26-07E167422F13}\ProxyStubClsid32 for this interface points to the missing CLSID {A42D5816-2C1B-4C00-BB0A-B4A0E9E322B6}. This subkey can be deleted for this interface.</Details> </EntryDetails> - <EntryDetails> <Entry>INMTVOptionGetSignalStrength</Entry> <Details>The key HKEY_CLASSES_ROOT\Interface\{635F4757-367A-4B15-866B-90A58F8EA666}\ProxyStubClsid32 for this interface points to the missing CLSID {A42D5816-2C1B-4C00-BB0A-B4A0E9E322B6}. This subkey can be deleted for this interface.</Details> </EntryDetails> - <EntryDetails> <Entry>INMTVOptionRecordingSpeedLimit</Entry> <Details>The key HKEY_CLASSES_ROOT\Interface\{E0474148-95B6-4FF3-84BA-55F1F7B2C764}\ProxyStubClsid32 for this interface points to the missing CLSID {A42D5816-2C1B-4C00-BB0A-B4A0E9E322B6}. This subkey can be deleted for this interface.</Details> </EntryDetails> - <EntryDetails> <Entry>INMTVOptionRecordingTimeLimit</Entry> <Details>The key HKEY_CLASSES_ROOT\Interface\{2D1EA554-5648-4978-82A2-6F0ED6794147}\ProxyStubClsid32 for this interface points to the missing CLSID {A42D5816-2C1B-4C00-BB0A-B4A0E9E322B6}. This subkey can be deleted for this interface.</Details> </EntryDetails> - <EntryDetails> <Entry>INMTVOptions</Entry> <Details>The key HKEY_CLASSES_ROOT\Interface\{A8F7C935-2DBD-484B-9CE2-D584B544916E}\ProxyStubClsid32 for this interface points to the missing CLSID {A42D5816-2C1B-4C00-BB0A-B4A0E9E322B6}. This subkey can be deleted for this interface.</Details> </EntryDetails> - <EntryDetails> <Entry>INMTVOptionSetChannel</Entry> <Details>The key HKEY_CLASSES_ROOT\Interface\{685904EC-7E46-46B8-B4B8-E8C67492CF73}\ProxyStubClsid32 for this interface points to the missing CLSID {A42D5816-2C1B-4C00-BB0A-B4A0E9E322B6}. This subkey can be deleted for this interface.</Details> </EntryDetails> - <EntryDetails> <Entry>INMTVOptionTimeShift</Entry> <Details>The key HKEY_CLASSES_ROOT\Interface\{12E41153-E975-422F-A4BE-D33BE5AA026E}\ProxyStubClsid32 for this interface points to the missing CLSID {A42D5816-2C1B-4C00-BB0A-B4A0E9E322B6}. This subkey can be deleted for this interface.</Details> </EntryDetails> - <EntryDetails> <Entry>INMTVOptionTrickPlay</Entry> <Details>The key HKEY_CLASSES_ROOT\Interface\{0EE08C94-0B68-4561-B1A4-ABF72774FC17}\ProxyStubClsid32 for this interface points to the missing CLSID {A42D5816-2C1B-4C00-BB0A-B4A0E9E322B6}. This subkey can be deleted for this interface.</Details> </EntryDetails> - <EntryDetails> <Entry>INMTVOptionTVServicesCreateStreamForLogicalChannel</Entry> <Details>The key HKEY_CLASSES_ROOT\Interface\{D3096859-F34E-44F5-83C8-1C1A5623BF11}\ProxyStubClsid32 for this interface points to the missing CLSID {A42D5816-2C1B-4C00-BB0A-B4A0E9E322B6}. This subkey can be deleted for this interface.</Details> </EntryDetails> - <EntryDetails> <Entry>INMTVOptionTVServicesCreateStreamForPhysicalChannel</Entry> <Details>The key HKEY_CLASSES_ROOT\Interface\{3B6D39B7-0934-4B78-9CFD-747D82A4B9CC}\ProxyStubClsid32 for this interface points to the missing CLSID {A42D5816-2C1B-4C00-BB0A-B4A0E9E322B6}. This subkey can be deleted for this interface.</Details> </EntryDetails> - <EntryDetails> <Entry>INMTVOptionTVServicesGetLogicalChannel</Entry> <Details>The key HKEY_CLASSES_ROOT\Interface\{D95F6355-DCAD-4BB0-8F0A-E335CF6DA712}\ProxyStubClsid32 for this interface points to the missing CLSID {A42D5816-2C1B-4C00-BB0A-B4A0E9E322B6}. This subkey can be deleted for this interface.</Details> </EntryDetails> - <EntryDetails> <Entry>INMTVOptionTVServicesGetPhysicalChannel</Entry> <Details>The key HKEY_CLASSES_ROOT\Interface\{EFA7A3C8-8260-47E4-AB01-704D6B220F5A}\ProxyStubClsid32 for this interface points to the missing CLSID {A42D5816-2C1B-4C00-BB0A-B4A0E9E322B6}. This subkey can be deleted for this interface.</Details> </EntryDetails> - <EntryDetails> <Entry>INMTVOptionTVServicesSetLogicalChannel</Entry> <Details>The key HKEY_CLASSES_ROOT\Interface\{30573137-B36E-4CB2-B83F-A991E9261468}\ProxyStubClsid32 for this interface points to the missing CLSID {A42D5816-2C1B-4C00-BB0A-B4A0E9E322B6}. This subkey can be deleted for this interface.</Details> </EntryDetails> - <EntryDetails> <Entry>INMTVOptionTVServicesSetPhysicalChannel</Entry> <Details>The key HKEY_CLASSES_ROOT\Interface\{6F6331B1-89CF-4A03-A645-2909D41807BD}\ProxyStubClsid32 for this interface points to the missing CLSID {A42D5816-2C1B-4C00-BB0A-B4A0E9E322B6}. This subkey can be deleted for this interface.</Details> </EntryDetails> - <EntryDetails> <Entry>INMTVRecordingHandle</Entry> <Details>The key HKEY_CLASSES_ROOT\Interface\{1278E162-1E89-4F95-8028-D1ECBDF9468A}\ProxyStubClsid32 for this interface points to the missing CLSID {A42D5816-2C1B-4C00-BB0A-B4A0E9E322B6}. This subkey can be deleted for this interface.</Details> </EntryDetails> - <EntryDetails> <Entry>INMTVRecordingHandleList</Entry> <Details>The key HKEY_CLASSES_ROOT\Interface\{32E1D336-0F60-4467-93F4-EA896BCACFC7}\ProxyStubClsid32 for this interface points to the missing CLSID {A42D5816-2C1B-4C00-BB0A-B4A0E9E322B6}. This subkey can be deleted for this interface.</Details> </EntryDetails> - <EntryDetails> <Entry>INMTVServer</Entry> <Details>The key HKEY_CLASSES_ROOT\Interface\{771D463C-44D7-434A-9EA4-ACFCFFB788CD}\ProxyStubClsid32 for this interface points to the missing CLSID {A42D5816-2C1B-4C00-BB0A-B4A0E9E322B6}. This subkey can be deleted for this interface.</Details> </EntryDetails> - <EntryDetails> <Entry>INMTVTimeShiftBufferHandle</Entry> <Details>The key HKEY_CLASSES_ROOT\Interface\{7B66381E-1A66-4477-BBC6-FF65A9C9CCCD}\ProxyStubClsid32 for this interface points to the missing CLSID {A42D5816-2C1B-4C00-BB0A-B4A0E9E322B6}. This subkey can be deleted for this interface.</Details> </EntryDetails> - <EntryDetails> <Entry>INPSOneWaySyncEngine</Entry> <Details>The key HKEY_CLASSES_ROOT\Interface\{1DC7E5FA-0106-4211-AE14-46957C5CF6CC}\TypeLib for this interface points to the missing type library {F16A8E42-53D4-4E90-9FAD-4F789208BC2B}. This subkey can be deleted for this interface.</Details> </EntryDetails> - <EntryDetails> <Entry>IPatentActivation</Entry> <Details>The key HKEY_CLASSES_ROOT\Interface\{07321840-B19C-4B80-BEF3-754AC9A16527}\ProxyStubClsid32 for this interface points to the missing CLSID {47015210-F47F-474D-B727-ECB30D65F934}. This subkey can be deleted for this interface.</Details> </EntryDetails> - <EntryDetails> <Entry>IProfilePage</Entry> <Details>The key HKEY_CLASSES_ROOT\Interface\{07241EF7-83F3-4EB2-8F8D-A819C10A6C55}\TypeLib for this interface points to the missing type library {A0000005-E965-440D-9C3E-E04704629F99}. This subkey can be deleted for this interface.</Details> </EntryDetails> - <EntryDetails> <Entry>IProfilePageSony</Entry> <Details>The key HKEY_CLASSES_ROOT\Interface\{1109866A-DA4D-482E-A315-AA9FF0265655}\TypeLib for this interface points to the missing type library {A0000005-E965-440D-9C3E-E04704629F99}. This subkey can be deleted for this interface.</Details> </EntryDetails> - <EntryDetails> <Entry>IPXWizardLUAPageEvent</Entry> <Details>The key HKEY_CLASSES_ROOT\Interface\{777BA812-2498-4875-933A-3067DE883070}\ProxyStubClsid32 for this interface points to the missing CLSID {777BA81B-2498-4875-933A-3067DE883070}. This subkey can be deleted for this interface.</Details> </EntryDetails> - <EntryDetails> <Entry>ISearch</Entry> <Details>The key HKEY_CLASSES_ROOT\Interface\{2CE4D4CF-B278-4126-AD1E-B622DA2E8339}\TypeLib for this interface points to the missing type library {47A7A4B0-2723-41BA-865E-EBBB7081A602}. This subkey can be deleted for this interface.</Details> </EntryDetails> - <EntryDetails> <Entry>ISerial</Entry> <Details>The key HKEY_CLASSES_ROOT\Interface\{37EEBD1D-5B49-4FB0-97B3-129FE7FC0FB4}\ProxyStubClsid32 for this interface points to the missing CLSID {47015210-F47F-474D-B727-ECB30D65F934}. This subkey can be deleted for this interface.</Details> </EntryDetails> - <EntryDetails> <Entry>ISerial2</Entry> <Details>The key HKEY_CLASSES_ROOT\Interface\{1940388D-D658-4BBB-94DF-494CA0DB2C4F}\ProxyStubClsid32 for this interface points to the missing CLSID {47015210-F47F-474D-B727-ECB30D65F934}. This subkey can be deleted for this interface.</Details> </EntryDetails> - <EntryDetails> <Entry>ISerialNumber</Entry> <Details>The key HKEY_CLASSES_ROOT\Interface\{0ABC1BEB-1E9B-46B0-BB34-60FD276591AC}\ProxyStubClsid32 for this interface points to the missing CLSID {47015210-F47F-474D-B727-ECB30D65F934}. This subkey can be deleted for this interface.</Details> </EntryDetails> - <EntryDetails> <Entry>ISpecialOffer</Entry> <Details>The key HKEY_CLASSES_ROOT\Interface\{C17A606A-B611-47AA-A026-D5B0B68DB552}\ProxyStubClsid32 for this interface points to the missing CLSID {47015210-F47F-474D-B727-ECB30D65F934}. This subkey can be deleted for this interface.</Details> </EntryDetails> - <EntryDetails> <Entry>ISpecialOffer2</Entry> <Details>The key HKEY_CLASSES_ROOT\Interface\{87BA83C5-5108-4E66-A279-333822733D30}\ProxyStubClsid32 for this interface points to the missing CLSID {47015210-F47F-474D-B727-ECB30D65F934}. This subkey can be deleted for this interface.</Details> </EntryDetails> - <EntryDetails> <Entry>IStatusEvents</Entry> <Details>The key HKEY_CLASSES_ROOT\Interface\{46B89F5A-769D-4792-AD9A-E3755915CBC3}\TypeLib for this interface points to the missing type library {47A7A4B0-2723-41BA-865E-EBBB7081A602}. This subkey can be deleted for this interface.</Details> </EntryDetails> - <EntryDetails> <Entry>IWebLink</Entry> <Details>The key HKEY_CLASSES_ROOT\Interface\{5B3F31BE-4319-47E1-A402-09F5A44C7420}\ProxyStubClsid32 for this interface points to the missing CLSID {47015210-F47F-474D-B727-ECB30D65F934}. This subkey can be deleted for this interface.</Details> </EntryDetails> - <EntryDetails> <Entry>IWebLink2</Entry> <Details>The key HKEY_CLASSES_ROOT\Interface\{3396995E-8407-4EF2-94D3-B9E2CF3232B3}\ProxyStubClsid32 for this interface points to the missing CLSID {47015210-F47F-474D-B727-ECB30D65F934}. This subkey can be deleted for this interface.</Details> </EntryDetails> - <EntryDetails> <Entry>LexRefBilingualService Class</Entry> <Details>The key HKEY_CLASSES_ROOT\CLSID\{75C11604-5C51-48B2-B786-DF5E51D10EC6}\TypeLib for this object point to the missing type library {893CD020-4354-4B33-A78D-909EE58BAFAF}. This subkey can be deleted for this object.</Details> </EntryDetails> - <EntryDetails> <Entry>LexRefBilingualServiceAttribute Class</Entry> <Details>The key HKEY_CLASSES_ROOT\CLSID\{ABF651A1-0F07-48DF-9FF6-8B1B557669CA}\TypeLib for this object point to the missing type library {893CD020-4354-4B33-A78D-909EE58BAFAF}. This subkey can be deleted for this object.</Details> </EntryDetails> - <EntryDetails> <Entry>LexRefBilingualTextContext Class</Entry> <Details>The key HKEY_CLASSES_ROOT\CLSID\{75C11604-5C51-48B2-B786-DF5E51D10EC9}\TypeLib for this object point to the missing type library {893CD020-4354-4B33-A78D-909EE58BAFAF}. This subkey can be deleted for this object.</Details> </EntryDetails> - <EntryDetails> <Entry>LexRefEnglishStemmer Class</Entry> <Details>The key HKEY_CLASSES_ROOT\CLSID\{75C11604-5C51-48B2-B786-DF5E51D10EC8}\TypeLib for this object point to the missing type library {893CD020-4354-4B33-A78D-909EE58BAFAF}. This subkey can be deleted for this object.</Details> </EntryDetails> - <EntryDetails> <Entry>LexRefServiceContainer Class</Entry> <Details>The key HKEY_CLASSES_ROOT\CLSID\{75C11604-5C51-48B2-B786-DF5E51D10EC7}\TypeLib for this object point to the missing type library {893CD020-4354-4B33-A78D-909EE58BAFAF}. This subkey can be deleted for this object.</Details> </EntryDetails> - <EntryDetails> <Entry>LexRefServiceManager Class</Entry> <Details>The key HKEY_CLASSES_ROOT\CLSID\{688B0D3D-AF8F-483C-A712-8F4E9868B8DA}\TypeLib for this object point to the missing type library {893CD020-4354-4B33-A78D-909EE58BAFAF}. This subkey can be deleted for this object.</Details> </EntryDetails> - <EntryDetails> <Entry>LexRefTfFunctionProvider Class</Entry> <Details>The key HKEY_CLASSES_ROOT\CLSID\{5591379C-B467-4BCA-B647-A438712504B0}\TypeLib for this object point to the missing type library {893CD020-4354-4B33-A78D-909EE58BAFAF}. This subkey can be deleted for this object.</Details> </EntryDetails> - <EntryDetails> <Entry>LexRefXml2RTFObject Class</Entry> <Details>The key HKEY_CLASSES_ROOT\CLSID\{F28D5171-0577-11D4-8F60-00C04F9CF4AC}\TypeLib for this object point to the missing type library {11A3B755-0562-11D4-8F60-00C04F9CF4AC}. This subkey can be deleted for this object.</Details> </EntryDetails> - <EntryDetails> <Entry>Main 1.0 Type Library</Entry> <Details>The key HKEY_CLASSES_ROOT\TypeLib\{48C1451C-3D2E-46DD-B09E-99FDDEFDEF86}\1.0\HELPDIR for this type library serves to indicate a help directory, but contains no data. This subkey can be deleted for this type library.</Details> </EntryDetails> - <EntryDetails> <Entry>MetAction Class</Entry> <Details>The key HKEY_CLASSES_ROOT\CLSID\{3CC385AC-95CC-4A75-BF35-AB36AE645BCF}\TypeLib for this object point to the missing type library {D7339B18-0926-46E0-A690-4A538FC1C8F8}. This subkey can be deleted for this object.</Details> </EntryDetails> - <EntryDetails> <Entry>MetRecog Class</Entry> <Details>The key HKEY_CLASSES_ROOT\CLSID\{32D85DA2-070B-49A0-9261-E7854457A6D6}\TypeLib for this object point to the missing type library {D7339B18-0926-46E0-A690-4A538FC1C8F8}. This subkey can be deleted for this object.</Details> </EntryDetails> - <EntryDetails> <Entry>mmctrl Class</Entry> <Details>The key HKEY_CLASSES_ROOT\CLSID\{71A7C632-FD25-4235-8812-F5690BFF6F42}\TypeLib for this object point to the missing type library {B4373EA7-9FB7-4AF1-BDF2-7653033FAF1C}. This subkey can be deleted for this object.</Details> </EntryDetails> - <EntryDetails> <Entry>MobileMeServices 1.0 Type Library</Entry> <Details>The key HKEY_CLASSES_ROOT\TypeLib\{B880BF6E-1646-47D0-96EB-E963AADA3740}\1.0\HELPDIR for this type library serves to indicate a help directory, but contains no data. This subkey can be deleted for this type library.</Details> </EntryDetails> - <EntryDetails> <Entry>MSDMineErrorLookup</Entry> <Details>The key HKEY_CLASSES_ROOT\CLSID\{72B082C6-97D5-11D3-8BEC-00C04F68DDC2}\TypeLib for this object point to the missing type library {72B082B9-97D5-11D3-8BEC-00C04F68DDC2}. This subkey can be deleted for this object.</Details> </EntryDetails> - <EntryDetails> <Entry>MSOLAP90ErrorLookup</Entry> <Details>The key HKEY_CLASSES_ROOT\CLSID\{07AD8473-5D37-4076-AF40-44FE70B07CD9}\TypeLib for this object point to the missing type library {07AD8473-5D37-4076-AF40-44FE70B07CD9}. This subkey can be deleted for this object.</Details> </EntryDetails> - <EntryDetails> <Entry>NBService 4.0 Type Library</Entry> <Details>The key HKEY_CLASSES_ROOT\TypeLib\{F514CE29-986D-46E2-AACD-CFCA4D351362}\4.0\HELPDIR for this type library serves to indicate a help directory, but contains no data. This subkey can be deleted for this type library.</Details> </EntryDetails> - <EntryDetails> <Entry>Nero Class</Entry> <Details>The key HKEY_CLASSES_ROOT\CLSID\{F3FBC8E5-93A3-11D4-8217-A85459000000}\TypeLib for this object point to the missing type library {C6E033E3-925F-11D4-8214-420BF9000000}. This subkey can be deleted for this object.</Details> </EntryDetails> - <EntryDetails> <Entry>NeroApplication Class</Entry> <Details>The key

Alain-st-martin13 · Answer 10 · Posté le 18/01/2011 à 22:26:17

Re-bonsoir, désolé mais je me suis trompé dans l'analyse et l'envoi du dernier rapport suite à un téléchargement autre que celui que " Malwarebytes Anti-malware ", voici donc le bon rapport : Malwarebytes' Anti-Malware 1.50.1.1100 www.malwarebytes.org Version de la base de données: 5549 Windows 6.0.6002 Service Pack 2 Internet Explorer 8.0.6001.18999 18/01/2011 22:15:54 mbam-log-2011-01-18 (22-15-18).txt Type d'examen: Examen complet (C:\|E:\|F:\|G:\|H:\|I:\|) Elément(s) analysé(s): 322364 Temps écoulé: 51 minute(s), 12 seconde(s) Processus mémoire infecté(s): 0 Module(s) mémoire infecté(s): 0 Clé(s) du Registre infectée(s): 0 Valeur(s) du Registre infectée(s): 0 Elément(s) de données du Registre infecté(s): 0 Dossier(s) infecté(s): 0 Fichier(s) infecté(s): 6 Processus mémoire infecté(s): (Aucun élément nuisible détecté) Module(s) mémoire infecté(s): (Aucun élément nuisible détecté) Clé(s) du Registre infectée(s): (Aucun élément nuisible détecté) Valeur(s) du Registre infectée(s): (Aucun élément nuisible détecté) Elément(s) de données du Registre infecté(s): (Aucun élément nuisible détecté) Dossier(s) infecté(s): (Aucun élément nuisible détecté) Fichier(s) infecté(s): c:\program files\ad-remover\quarantine\C\program files\EoRezo\eorezo.exe.vir (Rogue.Eorezo) -> No action taken. c:\program files\ad-remover\quarantine\C\program files\EoRezo\eorezobho.dll.vir (Rogue.Eorezo) -> No action taken. c:\program files\ad-remover\quarantine\C\Users\Alain\AppData\Roaming\EoRezo\softwareupdate\softwareupdate.exe.vir (Rogue.Eorezo) -> No action taken. c:\program files\ad-remover\quarantine\C\Users\Alain\AppData\Roaming\EoRezo\softwareupdate\softwareupdatehp.exe.vir (Rogue.Eorezo) -> No action taken. c:\Users\Alain\logiciels\néro 8.1.1.4\nero_8 .x_ultra_edition_keygen.exe (RiskWare.Tool.CK) -> No action taken. c:\Users\Alain\local settings\temporary internet files\pse_350_fra.exe (Trojan.Agent) -> No action taken.

kmisol · Answer 11 · Posté le 18/01/2011 à 23:54:00

... J'espère que tu as supprimé la sélection ! PS : pour supprimer le rapport Malwarebytes posté le 18 janvier 2011 à 20h35, replaces-toi sur le message en question et clique sur le bouton "éditer". Une fois dans le message, va au bas et coche Supprimer ce message ; puis, clique sur > Envoyer . ------------- Ensuite, relance un scan RSIT et poste uniquement le rapport log.txt .

Alain-st-martin13 · Answer 12 · Posté le 20/01/2011 à 19:03:36

Bonsoir, Oui j'avais bien supprimer la sélection et je viens de supprimerle message envoyé par erreur. Voici le rapport demandé : Logfile of random's system information tool 1.08 (written by random/random) Run by Alain at 2011-01-20 18:56:24 Microsoft® Windows Vista™ Édition Familiale Premium Service Pack 2 System drive C: has 28 GB (9%) free of 293 GB Total RAM: 3070 MB (53% free) Logfile of Trend Micro HijackThis v2.0.4 Scan saved at 18:56:28, on 20/01/2011 Platform: Windows Vista SP2 (WinNT 6.00.1906) MSIE: Internet Explorer v8.00 (8.00.6001.18999) Boot mode: Normal Running processes: C:\Windows\system32\Dwm.exe C:\Windows\Explorer.EXE C:\Windows\system32\taskeng.exe C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe C:\Program Files\Windows Defender\MSASCui.exe C:\Windows\RtHDVCpl.exe C:\Windows\System32\rundll32.exe C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe C:\Program Files\HP\HP Software Update\hpwuSchd2.exe C:\Program Files\Common Files\logishrd\LComMgr\Communications_Helper.exe C:\Program Files\Logitech\QuickCam\Quickcam.exe C:\Program Files\Alwil Software\Avast5\AvastUI.exe C:\Program Files\DivX\DivX Update\DivXUpdate.exe C:\Program Files\iTunes\iTunesHelper.exe C:\Program Files\Packard Bell\SetUpMyPC\SmpSys.exe C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe C:\Windows\ehome\ehtray.exe C:\Program Files\Windows Media Player\wmpnscfg.exe C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe C:\Windows\ehome\ehmsas.exe C:\Program Files\Common Files\Logishrd\LQCVFX\COCIManager.exe C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe C:\Program Files\HP\Digital Imaging\bin\hpqbam08.exe C:\Program Files\HP\Digital Imaging\bin\hpqgpc01.exe C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe C:\Windows\system32\SearchProtocolHost.exe C:\Windows\system32\SearchFilterHost.exe C:\Users\Alain\Desktop\RSIT.exe C:\Program Files\trend micro\Alain.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://go.microsoft.com/fwlink/?linkid=54896 R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://fr.msn.com/ R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://fr.msn.com/ R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = O1 - Hosts: ::1 localhost O2 - BHO: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.6.5612.1312\swg.dll O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_B7C5AC242193BB3E.dll O2 - BHO: CBrowserHelperObject Object - {CA6319C0-31B7-401E-A518-A07C3DB8F777} - C:\Program Files\Google\Google_BAE\BAE.dll O2 - BHO: Ask Toolbar BHO - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll O2 - BHO: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll O3 - Toolbar: Sammsoft Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll O4 - HKLM\..\Run: %ProgramFiles%\Windows Defender\MSASCui.exe -hide O4 - HKLM\..\Run: RtHDVCpl.exe O4 - HKLM\..\Run: RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit O4 - HKLM\..\Run: "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup O4 - HKLM\..\Run: C:\Program Files\Packard Bell\GOOGLE_EULA\EULALauncher.exe O4 - HKLM\..\Run: C:\Program Files\HP\HP Software Update\HPWuSchd2.exe O4 - HKLM\..\Run: "C:\Program Files\Common Files\LogiShrd\LComMgr\Communications_Helper.exe" O4 - HKLM\..\Run: "C:\Program Files\Logitech\QuickCam\Quickcam.exe" /hide O4 - HKLM\..\Run: C:\Program Files\Common Files\Apple\Mobile Device Support\AppleSyncNotifier.exe O4 - HKLM\..\Run: "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" O4 - HKLM\..\Run: C:\Windows\system32\NeroCheck.exe O4 - HKLM\..\Run: Skytel.exe O4 - HKLM\..\Run: C:\Program Files\HP\Digital Imaging\bin\hpqSRMon.exe O4 - HKLM\..\Run: "C:\Program Files\Alwil Software\Avast5\avastUI.exe" /nogui O4 - HKLM\..\Run: C:\Program Files\MAGIX\Films_sur_DVD_8\TrayServer.exe O4 - HKLM\..\Run: "C:\Program Files\DivX\DivX Update\DivXUpdate.exe" /CHECKNOW O4 - HKLM\..\Run: "C:\Program Files\QuickTime\QTTask.exe" -atboottime O4 - HKLM\..\Run: "C:\Program Files\iTunes\iTunesHelper.exe" O4 - HKLM\..\Run: "C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe" /runcleanupscript O4 - HKCU\..\Run: C:\Program Files\Packard Bell\SetUpMyPC\SmpSys.exe O4 - HKCU\..\Run: "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" O4 - HKCU\..\Run: C:\Windows\ehome\ehTray.exe O4 - HKCU\..\Run: "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background O4 - HKCU\..\Run: C:\Program Files\Windows Media Player\WMPNSCFG.exe O4 - HKUS\S-1-5-19\..\Run: %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL') O4 - HKUS\S-1-5-19\..\Run: rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL') O4 - HKUS\S-1-5-20\..\Run: %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU') O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL O9 - Extra button: Afficher ou masquer l'HP Smart Web Printing - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll O17 - HKLM\System\CCS\Services\Tcpip\..\{05341615-9D20-4255-94B7-7BB9F3BC8A28}: NameServer = 212.27.53.252,212.27.54.252 O17 - HKLM\System\CS1\Services\Tcpip\..\{05341615-9D20-4255-94B7-7BB9F3BC8A28}: NameServer = 212.27.53.252,212.27.54.252 O17 - HKLM\System\CS2\Services\Tcpip\..\{05341615-9D20-4255-94B7-7BB9F3BC8A28}: NameServer = 212.27.53.252,212.27.54.252 O17 - HKLM\System\CS3\Services\Tcpip\..\{05341615-9D20-4255-94B7-7BB9F3BC8A28}: NameServer = 212.27.53.252,212.27.54.252 O17 - HKLM\System\CS4\Services\Tcpip\..\{05341615-9D20-4255-94B7-7BB9F3BC8A28}: NameServer = 212.27.53.252,212.27.54.252 O17 - HKLM\System\CS5\Services\Tcpip\..\{05341615-9D20-4255-94B7-7BB9F3BC8A28}: NameServer = 212.27.53.252,212.27.54.252 O17 - HKLM\System\CS6\Services\Tcpip\..\{05341615-9D20-4255-94B7-7BB9F3BC8A28}: NameServer = 212.27.53.252,212.27.54.252 O17 - HKLM\System\CS7\Services\Tcpip\..\{05341615-9D20-4255-94B7-7BB9F3BC8A28}: NameServer = 212.27.53.252,212.27.54.252 O17 - HKLM\System\CS8\Services\Tcpip\..\{05341615-9D20-4255-94B7-7BB9F3BC8A28}: NameServer = 212.27.53.252,212.27.54.252 O17 - HKLM\System\CS9\Services\Tcpip\..\{05341615-9D20-4255-94B7-7BB9F3BC8A28}: NameServer = 212.27.53.252,212.27.54.252 O17 - HKLM\System\CS10\Services\Tcpip\..\{05341615-9D20-4255-94B7-7BB9F3BC8A28}: NameServer = 212.27.53.252,212.27.54.252 O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\Windows\system32\browseui.dll O23 - Service: Adobe Active File Monitor V6 (AdobeActiveFileMonitor6.0) - Unknown owner - C:\Program Files\Adobe\Photoshop Elements 6.0\PhotoshopElementsFileAgent.exe O23 - Service: @%SystemRoot%\system32\aelupsvc.dll,-1 (AeLookupSvc) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe O23 - Service: @%systemroot%\system32\appinfo.dll,-100 (Appinfo) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe O23 - Service: @%SystemRoot%\system32\audiosrv.dll,-204 (AudioEndpointBuilder) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\audiosrv.dll,-200 (Audiosrv) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe O23 - Service: @%SystemRoot%\system32\bfe.dll,-1001 (BFE) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\qmgr.dll,-1000 (BITS) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe O23 - Service: @%systemroot%\system32\browser.dll,-100 (Browser) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\System32\certprop.dll,-11 (CertPropSvc) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\cryptsvc.dll,-1001 (CryptSvc) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @oleres.dll,-5012 (DcomLaunch) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @dfsrres.dll,-101 (DFSR) - Unknown owner - C:\Windows\system32\DFSR.exe O23 - Service: @%SystemRoot%\system32\dhcpcsvc.dll,-100 (Dhcp) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\System32\dnsapi.dll,-101 (Dnscache) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%systemroot%\system32\dot3svc.dll,-1102 (dot3svc) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%systemroot%\system32\dps.dll,-500 (DPS) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%systemroot%\system32\eapsvc.dll,-1 (EapHost) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\ehome\ehrecvr.exe,-101 (ehRecvr) - Unknown owner - C:\Windows\ehome\ehRecvr.exe O23 - Service: @%SystemRoot%\ehome\ehsched.exe,-101 (ehSched) - Unknown owner - C:\Windows\ehome\ehsched.exe O23 - Service: @%SystemRoot%\ehome\ehstart.dll,-101 (ehstart) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\emdmgmt.dll,-1000 (EMDMgmt) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\wevtsvc.dll,-200 (Eventlog) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @comres.dll,-2450 (EventSystem) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%systemroot%\system32\fdPHost.dll,-100 (fdPHost) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%systemroot%\system32\fdrespub.dll,-100 (FDResPub) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: Firebird Server - MAGIX Instance (FirebirdServerMAGIXInstance) - MAGIX® - C:\Program Files\MAGIX\Common\Database\bin\fbserver.exe O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe O23 - Service: @%systemroot%\system32\FntCache.dll,-100 (FontCache) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: Generic Service for HID Keyboard Input Collections (GenericHidService) - Unknown owner - C:\Program Files\Packard bell\SAXO27\HIDSERVICE.EXE O23 - Service: Google Desktop Manager 5.9.1005.12335 (GoogleDesktopManager-051210-111108) - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe O23 - Service: @gpapi.dll,-112 (gpsvc) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: Google Update Service (gupdate) (gupdate) - Unknown owner - C:\Program Files\Google\Update\GoogleUpdate.exe O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe O23 - Service: @%SystemRoot%\System32\hidserv.dll,-101 (hidserv) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\kmsvc.dll,-6 (hkmsvc) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: hpqcxs08 - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: Service HP CUE DeviceDiscovery (hpqddsvc) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: HP Network Devices Support (HPSLPSVC) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\ikeext.dll,-501 (IKEEXT) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%systemroot%\system32\IPBusEnum.dll,-102 (IPBusEnum) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\iphlpsvc.dll,-200 (iphlpsvc) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe O23 - Service: @comres.dll,-2946 (KtmRm) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%systemroot%\system32\srvsvc.dll,-100 (LanmanServer) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%systemroot%\system32\wkssvc.dll,-100 (LanmanWorkstation) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: Lavasoft Ad-Aware Service - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe O23 - Service: @%SystemRoot%\system32\lltdres.dll,-1 (lltdsvc) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\lmhsvc.dll,-101 (lmhosts) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: LVCOMSer - Logitech Inc. - C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe O23 - Service: Process Monitor (LVPrcSrv) - Logitech Inc. - C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe O23 - Service: @%systemroot%\system32\mmcss.dll,-100 (MMCSS) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\FirewallAPI.dll,-23090 (MpsSvc) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe O23 - Service: @%SystemRoot%\system32\iscsidsc.dll,-5000 (MSiSCSI) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\msimsg.dll,-27 (msiserver) - Unknown owner - C:\Windows\system32\msiexec.exe O23 - Service: @%SystemRoot%\system32\qagentrt.dll,-6 (napagent) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: Nero BackItUp Scheduler 4.0 - Nero AG - C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe O23 - Service: Net Driver HPZ12 - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe O23 - Service: @%SystemRoot%\system32\netman.dll,-109 (Netman) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\netprof.dll,-246 (netprofm) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\System32\nlasvc.dll,-1 (NlaSvc) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: NMIndexingService - Unknown owner - C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe (file missing) O23 - Service: @%SystemRoot%\system32\nsisvc.dll,-200 (nsi) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe O23 - Service: @%SystemRoot%\system32\p2psvc.dll,-8004 (p2pimsvc) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\p2psvc.dll,-8006 (p2psvc) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\pcasvc.dll,-1 (PcaSvc) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%systemroot%\system32\pla.dll,-500 (pla) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: PLFlash DeviceIoControl Service - Prolific Technology Inc. - C:\Windows\system32\IoctlSvc.exe O23 - Service: @%SystemRoot%\system32\umpnpmgr.dll,-100 (PlugPlay) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: Pml Driver HPZ12 - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\p2psvc.dll,-8002 (PNRPAutoReg) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\p2psvc.dll,-8000 (PNRPsvc) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\System32\polstore.dll,-5010 (PolicyAgent) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%systemroot%\system32\profsvc.dll,-300 (ProfSvc) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe O23 - Service: @%SystemRoot%\system32\qwave.dll,-1 (QWAVE) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%Systemroot%\system32\rasauto.dll,-200 (RasAuto) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%Systemroot%\system32\rasmans.dll,-200 (RasMan) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @regsvc.dll,-1 (RemoteRegistry) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe O23 - Service: @oleres.dll,-5010 (RpcSs) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe O23 - Service: @%SystemRoot%\System32\SCardSvr.dll,-1 (SCardSvr) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\schedsvc.dll,-100 (Schedule) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\System32\certprop.dll,-13 (SCPolicySvc) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\sdrsvc.dll,-107 (SDRSVC) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\seclogon.dll,-7001 (seclogon) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\Sens.dll,-200 (SENS) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe O23 - Service: @%SystemRoot%\System32\SessEnv.dll,-1026 (SessionEnv) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\ipnathlp.dll,-106 (SharedAccess) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\System32\shsvcs.dll,-12288 (ShellHWDetection) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\SLsvc.exe,-101 (slsvc) - Unknown owner - C:\Windows\system32\SLsvc.exe O23 - Service: @%SystemRoot%\system32\SLUINotify.dll,-103 (SLUINotify) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe O23 - Service: @%systemroot%\system32\ssdpsrv.dll,-100 (SSDPSRV) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\sstpsvc.dll,-200 (SstpSvc) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\wiaservc.dll,-9 (stisvc) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\System32\swprv.dll,-103 (swprv) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\sysmain.dll,-1000 (SysMain) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\TabSvc.dll,-100 (TabletInputService) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\tapisrv.dll,-10100 (TapiSrv) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\tbssvc.dll,-100 (TBS) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\System32\termsrv.dll,-268 (TermService) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\System32\shsvcs.dll,-8192 (Themes) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%systemroot%\system32\mmcss.dll,-102 (THREADORDER) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\trkwks.dll,-1 (TrkWks) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\servicing\TrustedInstaller.exe,-100 (TrustedInstaller) - Unknown owner - C:\Windows\servicing\TrustedInstaller.exe O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe O23 - Service: @%systemroot%\system32\upnphost.dll,-213 (upnphost) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: UPnPService - Magix AG - C:\Program Files\Common Files\MAGIX Shared\UPnPService\UPnPService.exe O23 - Service: @%SystemRoot%\system32\dwm.exe,-2000 (UxSms) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe O23 - Service: @%SystemRoot%\system32\w32time.dll,-200 (W32Time) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\wcncsvc.dll,-3 (wcncsvc) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\WcsPlugInService.dll,-200 (WcsPlugInService) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%systemroot%\system32\wdi.dll,-502 (WdiServiceHost) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%systemroot%\system32\wdi.dll,-500 (WdiSystemHost) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%systemroot%\system32\webclnt.dll,-100 (WebClient) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\wecsvc.dll,-200 (Wecsvc) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\System32\wercplsupport.dll,-101 (wercplsupport) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\System32\wersvc.dll,-100 (WerSvc) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%ProgramFiles%\Windows Defender\MsMpRes.dll,-103 (WinDefend) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\winhttp.dll,-100 (WinHttpAutoProxySvc) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%Systemroot%\system32\wbem\wmisvc.dll,-205 (Winmgmt) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%Systemroot%\system32\wsmsvc.dll,-101 (WinRM) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\System32\wlansvc.dll,-257 (Wlansvc) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe O23 - Service: @%ProgramFiles%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files\Windows Media Player\wmpnetwk.exe O23 - Service: @%SystemRoot%\system32\wpcsvc.dll,-100 (WPCSvc) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\wpdbusenum.dll,-100 (WPDBusEnum) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe,-100 (WPFFontCache_v0400) - Unknown owner - C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe O23 - Service: @%SystemRoot%\System32\wscsvc.dll,-200 (wscsvc) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%systemroot%\system32\SearchIndexer.exe,-103 (WSearch) - Unknown owner - C:\Windows\system32\SearchIndexer.exe O23 - Service: @%systemroot%\system32\wuaueng.dll,-105 (wuauserv) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\wudfsvc.dll,-1000 (wudfsvc) - Unknown owner - C:\Windows\system32\svchost.exe -- End of file - 25381 bytes ======Scheduled tasks folder====== C:\Windows\tasks\Extension de garantie-Alain.job C:\Windows\tasks\GoogleUpdateTaskMachineCore.job C:\Windows\tasks\GoogleUpdateTaskMachineUA.job C:\Windows\tasks\NeroLiveEpgUpdate-PC-de-Alain_Alain.job ======Registry dump====== HP Print Enhancer - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll Aide pour le lien d'Adobe PDF Reader - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll Google Toolbar Helper - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll Google Toolbar Notifier BHO - C:\Program Files\Google\GoogleToolbarNotifier\5.6.5612.1312\swg.dll Google Dictionary Compression sdch - C:\Program Files\Google\Google Toolbar\Component\fastsearch_B7C5AC242193BB3E.dll CBrowserHelperObject Object - C:\Program Files\Google\Google_BAE\BAE.dll Sammsoft Toolbar - C:\Program Files\Ask.com\GenericAskToolbar.dll HP Smart BHO Class - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll {EF99BD32-C1FB-11D2-892F-0090271D4F88} - Yahoo! Toolbar - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll {2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll {D4027C7F-154A-4066-A1AD-4243D8127440} - Sammsoft Toolbar - C:\Program Files\Ask.com\GenericAskToolbar.dll "Windows Defender"=C:\Program Files\Windows Defender\MSASCui.exe "RtHDVCpl"=C:\Windows\RtHDVCpl.exe "NvCplDaemon"=C:\Windows\system32\NvCpl.dll "NvMediaCenter"=C:\Windows\system32\NvMcTray.dll "Google Desktop Search"=C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe "toolbar_eula_launcher"=C:\Program Files\Packard Bell\GOOGLE_EULA\EULALauncher.exe "HP Software Update"=C:\Program Files\HP\HP Software Update\HPWuSchd2.exe "LogitechCommunicationsManager"=C:\Program Files\Common Files\LogiShrd\LComMgr\Communications_Helper.exe "LogitechQuickCamRibbon"=C:\Program Files\Logitech\QuickCam\Quickcam.exe "AppleSyncNotifier"=C:\Program Files\Common Files\Apple\Mobile Device Support\AppleSyncNotifier.exe "Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe "NeroFilterCheck"=C:\Windows\system32\NeroCheck.exe "Skytel"=C:\Windows\Skytel.exe "hpqSRMon"=C:\Program Files\HP\Digital Imaging\bin\hpqSRMon.exe "avast5"=C:\Program Files\Alwil Software\Avast5\avastUI.exe "TrayServer"=C:\Program Files\MAGIX\Films_sur_DVD_8\TrayServer.exe "NPSStartup"= "QuickTime Task"=C:\Program Files\QuickTime\QTTask.exe "iTunesHelper"=C:\Program Files\iTunes\iTunesHelper.exe "Malwarebytes' Anti-Malware (reboot)"=C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe "SmpcSys"=C:\Program Files\Packard Bell\SetUpMyPC\SmpSys.exe "swg"=C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe "ehTray.exe"=C:\Windows\ehome\ehTray.exe "msnmsgr"=C:\Program Files\Windows Live\Messenger\msnmsgr.exe /background C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup HP Digital Imaging Monitor.lnk - C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe "dontdisplaylastusername"=0 "legalnoticecaption"= "legalnoticetext"= "shutdownwithoutlogon"=1 "undockwithoutlogon"=1 "EnableUIADesktopToggle"=0 "NoDriveAutorun"=0 "BindDirectlyToPropertySetStorage"=0 ======File associations====== .js - edit - C:\Windows\System32\Notepad.exe %1 .js - open - C:\Windows\System32\WScript.exe "%1" %* ======List of files/folders created in the last 1 months====== 2011-01-18 21:01:34 ----D---- C:\Users\Alain\AppData\Roaming\Malwarebytes 2011-01-18 21:01:30 ----A---- C:\Windows\system32\drivers\mbamswissarmy.sys 2011-01-18 21:01:29 ----D---- C:\ProgramData\Malwarebytes 2011-01-18 21:01:26 ----D---- C:\Program Files\Malwarebytes' Anti-Malware 2011-01-18 21:01:26 ----A---- C:\Windows\system32\drivers\mbam.sys 2011-01-18 20:20:37 ----D---- C:\Program Files\Ask.com 2011-01-17 21:16:47 ----A---- C:\Ad-Report-CLEAN .txt 2011-01-17 21:15:35 ----D---- C:\Program Files\Ad-Remover 2011-01-16 17:47:45 ----D---- C:\rsit 2011-01-16 17:47:45 ----D---- C:\Program Files\trend micro 2011-01-13 18:54:41 ----A---- C:\Windows\system32\sdclt.exe 2011-01-13 18:53:41 ----A---- C:\Windows\system32\odbc32.dll 2011-01-03 19:01:54 ----A---- C:\Windows\system32\win32k.sys 2011-01-03 19:01:53 ----A---- C:\Windows\system32\schedsvc.dll 2011-01-03 19:01:52 ----A---- C:\Windows\system32\wmicmiplugin.dll 2011-01-03 19:01:52 ----A---- C:\Windows\system32\taskschd.dll 2011-01-03 19:01:52 ----A---- C:\Windows\system32\taskeng.exe 2011-01-03 19:01:52 ----A---- C:\Windows\system32\taskcomp.dll 2011-01-03 19:01:50 ----A---- C:\Windows\system32\consent.exe 2011-01-03 19:01:49 ----A---- C:\Windows\system32\fontsub.dll 2011-01-03 19:01:49 ----A---- C:\Windows\system32\atmlib.dll 2011-01-03 19:01:49 ----A---- C:\Windows\system32\atmfd.dll 2011-01-03 19:01:44 ----A---- C:\Windows\system32\iertutil.dll 2011-01-03 19:01:43 ----A---- C:\Windows\system32\mstime.dll 2011-01-03 19:01:43 ----A---- C:\Windows\system32\mshtml.dll 2011-01-03 19:01:43 ----A---- C:\Windows\system32\ieframe.dll 2011-01-03 19:01:40 ----A---- C:\Windows\system32\ie4uinit.exe 2011-01-03 19:01:39 ----A---- C:\Windows\system32\wininet.dll 2011-01-03 19:01:39 ----A---- C:\Windows\system32\urlmon.dll 2011-01-03 19:01:39 ----A---- C:\Windows\system32\occache.dll 2011-01-03 19:01:39 ----A---- C:\Windows\system32\mshtmled.dll 2011-01-03 19:01:39 ----A---- C:\Windows\system32\msfeedssync.exe 2011-01-03 19:01:39 ----A---- C:\Windows\system32\msfeedsbs.dll 2011-01-03 19:01:39 ----A---- C:\Windows\system32\msfeeds.dll 2011-01-03 19:01:39 ----A---- C:\Windows\system32\licmgr10.dll 2011-01-03 19:01:39 ----A---- C:\Windows\system32\jsproxy.dll 2011-01-03 19:01:39 ----A---- C:\Windows\system32\ieUnatt.exe 2011-01-03 19:01:39 ----A---- C:\Windows\system32\ieui.dll 2011-01-03 19:01:39 ----A---- C:\Windows\system32\iesysprep.dll 2011-01-03 19:01:39 ----A---- C:\Windows\system32\iesetup.dll 2011-01-03 19:01:39 ----A---- C:\Windows\system32\iernonce.dll 2011-01-03 19:01:39 ----A---- C:\Windows\system32\iepeers.dll 2011-01-03 19:01:39 ----A---- C:\Windows\system32\iedkcs32.dll 2011-01-03 19:01:31 ----A---- C:\Windows\system32\tzres.dll 2010-12-26 07:10:16 ----D---- C:\Program Files\cspep ======List of files/folders modified in the last 1 months====== 2011-01-20 18:56:28 ----D---- C:\Windows\prefetch 2011-01-20 18:56:27 ----D---- C:\Windows\Temp 2011-01-20 18:03:32 ----SHD---- C:\System Volume Information 2011-01-20 16:32:05 ----AD---- C:\Windows\System32 2011-01-20 16:32:05 ----A---- C:\Windows\system32\PerfStringBackup.INI 2011-01-20 16:32:04 ----D---- C:\Windows\inf 2011-01-20 16:30:15 ----D---- C:\Windows\system32\Tasks 2011-01-19 13:17:39 ----D---- C:\Windows\Tasks 2011-01-18 22:32:51 ----D---- C:\Windows 2011-01-18 22:29:07 ----D---- C:\Windows\Minidump 2011-01-18 22:29:06 ----AD---- C:\Windows\system32\drivers 2011-01-18 21:11:57 ----RD---- C:\Program Files 2011-01-18 21:01:29 ----HD---- C:\ProgramData 2011-01-18 20:20:45 ----SHD---- C:\Windows\Installer 2011-01-14 22:24:08 ----D---- C:\Windows\winsxs 2011-01-13 18:53:41 ----A---- C:\Windows\system32\mrt.exe 2011-01-13 18:53:32 ----D---- C:\ProgramData\Microsoft Help 2011-01-13 18:51:13 ----D---- C:\Windows\system32\catroot 2011-01-13 18:51:12 ----D---- C:\Windows\system32\catroot2 2011-01-13 09:47:32 ----A---- C:\Windows\system32\aswBoot.exe 2011-01-11 23:24:48 ----D---- C:\Windows\system32\Msdtc 2011-01-11 23:24:45 ----D---- C:\Windows\system32\wbem 2011-01-11 23:24:09 ----D---- C:\Windows\system32\config 2011-01-11 23:24:01 ----D---- C:\Windows\system32\spool 2011-01-11 23:24:01 ----D---- C:\Windows\system32\drivers\etc 2011-01-11 23:24:01 ----D---- C:\Windows\system32\CodeIntegrity 2011-01-11 23:24:01 ----D---- C:\Windows\registration 2011-01-04 14:32:23 ----D---- C:\Windows\system32\migration 2011-01-04 14:32:23 ----D---- C:\Program Files\Windows Mail 2011-01-04 14:32:23 ----D---- C:\Program Files\Internet Explorer 2011-01-04 14:26:19 ----D---- C:\Windows\rescache 2011-01-04 14:15:45 ----D---- C:\Windows\system32\fr-FR 2011-01-03 18:43:43 ----D---- C:\Windows\system32\drivers\UMDF 2011-01-03 18:43:41 ----D---- C:\ProgramData\FLEXnet ======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)====== R0 Lbd;Lbd; C:\Windows\system32\DRIVERS\Lbd.sys R0 nvstor32;nvstor32; C:\Windows\system32\drivers\nvstor32.sys R0 PxHelp20;PxHelp20; C:\Windows\System32\Drivers\PxHelp20.sys R1 aswRdr;aswRdr; C:\Windows\system32\drivers\aswRdr.sys R1 aswSP;aswSP; C:\Windows\system32\drivers\aswSP.sys R1 aswTdi;avast! Network Shield Support; C:\Windows\system32\drivers\aswTdi.sys R2 aswFsBlk;aswFsBlk; C:\Windows\system32\drivers\aswFsBlk.sys R2 aswMonFlt;aswMonFlt; \??\C:\Windows\system32\drivers\aswMonFlt.sys R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\Windows\system32\DRIVERS\GEARAspiWDM.sys R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHDA.sys R3 LVPr2Mon;Logitech LVPr2Mon Driver; C:\Windows\system32\DRIVERS\LVPr2Mon.sys R3 LVUSBSta;Logitech USB Monitor Filter; C:\Windows\system32\drivers\LVUSBSta.sys R3 NVENETFD;NVIDIA nForce Networking Controller Driver; C:\Windows\system32\DRIVERS\nvmfdx32.sys R3 nvlddmkm;nvlddmkm; C:\Windows\system32\DRIVERS\nvlddmkm.sys R3 pfc;Padus ASPI Shell; C:\Windows\system32\drivers\pfc.sys R3 PID_PEPI;Logitech QuickCam IM(PID_PEPI); C:\Windows\system32\DRIVERS\LV302V32.SYS R3 usbaudio;Pilote USB audio (WDM); C:\Windows\system32\drivers\usbaudio.sys R3 WUDFRd;WUDFRd; C:\Windows\system32\DRIVERS\WUDFRd.sys S3 BELKIN;Belkin Wireless G USB Network Adapter; C:\Windows\system32\DRIVERS\BLKWGU.sys S3 Dot4;Pilote MS IEEE-1284.4; C:\Windows\system32\DRIVERS\Dot4.sys S3 Dot4Print;Pilote de classe Imprimante pour IEEE-1284.4; C:\Windows\system32\DRIVERS\Dot4Prt.sys S3 dot4usb;MS Dot4USB Filter Dot4USB Filter; C:\Windows\system32\DRIVERS\dot4usb.sys S3 drmkaud;Filtre de décodeur DRM (Noyau Microsoft); C:\Windows\system32\drivers\drmkaud.sys S3 FsUsbExDisk;FsUsbExDisk; \??\C:\Windows\system32\FsUsbExDisk.SYS S3 Lavasoft Kernexplorer;Lavasoft helper driver; \??\C:\Program Files\Lavasoft\Ad-Aware\KernExplorer.sys S3 MSKSSRV;Proxy de service de répartition Microsoft; C:\Windows\system32\drivers\MSKSSRV.sys S3 MSPCLOCK;Proxy d'horloge de répartition Microsoft; C:\Windows\system32\drivers\MSPCLOCK.sys S3 MSPQM;Proxy de gestion de qualité de répartition Microsoft; C:\Windows\system32\drivers\MSPQM.sys S3 MSTEE;Convertisseur en T/site-à-site de répartition Microsoft; C:\Windows\system32\drivers\MSTEE.sys S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\Windows\system32\DRIVERS\pccsmcfd.sys S3 USB28xxBGA;USB 2861 Device; C:\Windows\system32\DRIVERS\emBDA.sys S3 USB28xxOEM;USB 28xx OEM Filter; C:\Windows\system32\DRIVERS\emOEM.sys S3 USBAAPL;Apple Mobile USB Driver; C:\Windows\System32\Drivers\usbaapl.sys S3 usbscan;Pilote de scanneur USB; C:\Windows\system32\DRIVERS\usbscan.sys S3 WpdUsb;WpdUsb; C:\Windows\system32\DRIVERS\wpdusb.sys S4 ErrDev;Microsoft Hardware Error Device Driver; C:\Windows\system32\drivers\errdev.sys S4 MegaSR;MegaSR; C:\Windows\system32\drivers\megasr.sys S4 nvrd32;NVIDIA nForce RAID Driver; C:\Windows\system32\drivers\nvrd32.sys S4 nvsmu;nvsmu; C:\Windows\system32\drivers\nvsmu.sys ======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)====== R2 AdobeActiveFileMonitor6.0;Adobe Active File Monitor V6; C:\Program Files\Adobe\Photoshop Elements 6.0\PhotoshopElementsFileAgent.exe R2 Apple Mobile Device;Apple Mobile Device; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe R2 avast! Antivirus;avast! Antivirus; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe R2 Bonjour Service;Service Bonjour; C:\Program Files\Bonjour\mDNSResponder.exe R2 GenericHidService;Generic Service for HID Keyboard Input Collections; C:\Program Files\Packard bell\SAXO27\HIDSERVICE.EXE R2 hpqddsvc;Service HP CUE DeviceDiscovery; C:\Windows\system32\svchost.exe R2 HPSLPSVC;HP Network Devices Support; C:\Windows\system32\svchost.exe R2 Lavasoft Ad-Aware Service;Lavasoft Ad-Aware Service; C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe R2 LVCOMSer;LVCOMSer; C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe R2 LVPrcSrv;Process Monitor; C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe R2 Nero BackItUp Scheduler 4.0;Nero BackItUp Scheduler 4.0; C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe R2 Net Driver HPZ12;Net Driver HPZ12; C:\Windows\System32\svchost.exe R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe R2 PLFlash DeviceIoControl Service;PLFlash DeviceIoControl Service; C:\Windows\system32\IoctlSvc.exe R2 Pml Driver HPZ12;Pml Driver HPZ12; C:\Windows\System32\svchost.exe R3 hpqcxs08;hpqcxs08; C:\Windows\system32\svchost.exe R3 iPod Service;Service de l’iPod; C:\Program Files\iPod\bin\iPodService.exe S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe S2 gupdate;Google Update Service (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe S3 FirebirdServerMAGIXInstance;Firebird Server - MAGIX Instance; C:\Program Files\MAGIX\Common\Database\bin\fbserver.exe S3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe S3 FontCache;@%systemroot%\system32\FntCache.dll,-100; C:\Windows\system32\svchost.exe S3 GoogleDesktopManager-051210-111108;Google Desktop Manager 5.9.1005.12335; C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe S3 gusvc;Google Software Updater; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe S3 NMIndexingService;NMIndexingService; C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE S3 ServiceLayer;ServiceLayer; C:\Program Files\PC Connectivity Solution\ServiceLayer.exe S3 UPnPService;UPnPService; C:\Program Files\Common Files\MAGIX Shared\UPnPService\UPnPService.exe S3 WPFFontCache_v0400;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe,-100; C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe -----------------EOF-----------------

kmisol · Answer 13 · Posté le 20/01/2011 à 19:20:03

:hello: Télécharge CCleaner … ("Download Latest Version", sur la droite) et laisse-toi guider. A un moment, il te sera, peut-être, demandé de cocher : " Ajouter la barre d' outils Yahoo ". Refuse et … Laisse-le s’ installer tel que … Ferme toutes les fenêtres et applications. Relance HijackThis et clique sur > Do a system scan only puis, coche les cases devant les lignes qui suivent (et uniquement ces lignes), si tjrs présentes : O2 - BHO: Ask Toolbar BHO - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll O3 - Toolbar: Sammsoft Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll O4 - HKLM\..\Run: "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup O4 - HKLM\..\Run: C:\Program Files\HP\HP Software Update\HPWuSchd2.exe O4 - HKLM\..\Run: "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" O4 - HKLM\..\Run: C:\Program Files\MAGIX\Films_sur_DVD_8\TrayServer.exe O4 - HKLM\..\Run: "C:\Program Files\QuickTime\QTTask.exe" -atboottime O4 - HKLM\..\Run: "C:\Program Files\iTunes\iTunesHelper.exe" Ensuite, clique sur > Fix checked et valide par "Yes". Referme HijackThis. Lance CCleaner ... Clique sur > Analyser > Nettoyer , puis sur OK dans la fenêtre qui s' affiche. Relance le nettoyage et (re)confirme par OK . Enfin, ... Lance un scan Nod32 (il faut utiliser Internet Explorer) Coche toutes les cases à chaque fois ; une fois le scan achevé, colle le rapport : -> C:\Program Files\EsetOnlineScanner\ log.txt <-- le rapport PS : désactive la protection résidente d' Avast le temps du scan ... Clique droit sur l'icône à côté de l'horloge -> Choisis : Arrêter la protection résidente

Alain-st-martin13 · Answer 14 · Posté le 20/01/2011 à 20:23:55

Alain-st-martin13

je suis désolé mais je ne sais pas où se trouve HijackThis. j'ai télécharger ccleaner.

kmisol · Answer 15 · Posté le 20/01/2011 à 21:11:52

... Autant pour moi, j'aurais dû préciser : Ferme toutes les fenêtres et applications. Double-clique sur l'îcone "HijackThis" qui doit, normalement, se trouver sur le bureau (sinon, va jusqu'au fichier en gras, ci-dessous : C:\Program Files\trend micro\ Alain.exe <- ) et clique sur > Do a system scan only puis, coche les cases devant les lignes qui suivent (et uniquement ces lignes), si tjrs présentes :

Alain-st-martin13 · Answer 16 · Posté le 20/01/2011 à 23:27:34

Alain-st-martin13

voici le rapport

ESETSmartInstaller@High as CAB hook log:
OnlineScanner.ocx - registred OK

kmisol · Answer 17 · Posté le 21/01/2011 à 00:03:53

... OK. Relance un scan RSIT et poste uniquement le rapport log.txt . Comme le rapport est long, tu vas le poster via ce site : http://cjoint.com/ Le rapport sera enregistré dans le dossier RSIT qui est à la base du disque dur (C:\) ; soit : C:\rsit\ log.txt <- Donc, rends-toi sur ce site : http://cjoint.com/ puis, clique sur "Parcourir" et sélectionne ce fichier ; un lien va être créé. Copie/colle ce lien dans ta prochaine réponse. -> Aide en images

Alain-st-martin13 · Answer 18 · Posté le 21/01/2011 à 17:58:29

Alain-st-martin13

Bonsoir,
voici le lien.

http://cjoint.com/?0bvr7OHotK

kmisol · Answer 19 · Posté le 21/01/2011 à 19:08:03

:hello: Redémarre le PC en mode sans échec … -> méthode F8 (ou F5/F11 sur certains PC) de préférence -------------------------------------------- Tu n' auras pas accès à Internet pendant le "mode sans échec". Aussi, copie/colle la procédure dans un fichier texte (word) et mets-la sur le "bureau" pour l' avoir à ta disposition. -------------------------------------------- Lance HijackThis et clique sur > Do a system scan only puis, coche les cases devant les lignes qui suivent (et uniquement ces lignes), si tjrs présentes : O2 - BHO: Ask Toolbar BHO - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll Neutral Nasty (2.65 / 5.00) O3 - Toolbar: Sammsoft Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll Ensuite, clique sur > Fix checked et valide par "Yes". Referme HijackThis. Lance CCleaner pour un nettoyage ... Redémarre le PC en mode normal ... Ensuite, ... Relance un scan RSIT et poste uniquement le log.txt (via -> cijoint).

Alain-st-martin13 · Answer 20 · Posté le 21/01/2011 à 20:13:28

Alain-st-martin13

voilà le lien aprés avoir exécuté toutes les instructions.

http://cjoint.com/?0bvumaIFjpq

kmisol · Answer 21 · Posté le 22/01/2011 à 00:33:39

... :super: Télécharge ToolsCleaner (par A.Rothstein et dj QUIOU) sur ton bureau. 1. Clique sur Recherche et laisse le scan agir ... 2. Clique sur Suppression pour finaliser. -> Tu peux, si tu le souhaites, te servir des Options facultatives . 3. Clique sur Quitter pour obtenir le rapport. 4. Poste le rapport ( TCleaner.txt ) qui se trouve à la racine de ton disque dur (C:\). ****** Quelques conseils ... http://www.malekal.com/securiser_ordinateur.html et aussi ... http://www.malekal.com/securiser_internet_explorer.html Idées reçues en matière de sécurité … http://www.libellules.ch/idees_recues_securite.php Maintenir les programmes/logiciels à jour ( important ) : http://forum.malekal.com/logiciels-pour-maintenir-ses-programmes-jour-t15960.html

Alain-st-martin13 · Answer 22 · Posté le 22/01/2011 à 09:53:57

Bonjour, j'ai passé toolscleaner comme demandé mais le rapport reste vierge, il y a eu quelques fichiers supprimés malgré tout, je les ai copié avant de fermer, les voici : --> Recherche: C:\Rsit: trouvé ! C:\Program Files\Ad-remover: trouvé ! C:\Program Files\Ad-Remover\Backup\Ad-R.exe: trouvé ! C:\Program Files\trend micro\HijackThis.exe: trouvé ! C:\Program Files\trend micro\hijackthis.log: trouvé ! C:\Users\Alain\AppData\Local\VirtualStore\Program Files\trend micro\hijackthis.log: trouvé ! C:\Users\Alain\Desktop\Rsit.exe: trouvé ! --------------------------------- --> Suppression: C:\Program Files\Ad-Remover\Backup\Ad-R.exe: supprimé ! C:\Program Files\trend micro\HijackThis.exe: ERREUR DE SUPPRESSION !! C:\Program Files\trend micro\hijackthis.log: supprimé ! C:\Users\Alain\Desktop\Rsit.exe: supprimé ! C:\Rsit: supprimé ! C:\Program Files\Ad-remover: ERREUR DE SUPPRESSION !!

kmisol · Answer 23 · Posté le 22/01/2011 à 12:52:18

:hello: Supprime "manuellement" si tjrs présents : C:\Program Files\ trend micro <-- C:\Program Files\ Ad-remover <--

Alain-st-martin13 · Answer 24 · Posté le 22/01/2011 à 21:42:48

Alain-st-martin13

voilà c'est fait !

kmisol · Answer 25 · Posté le 22/01/2011 à 22:02:02

kmisol

Imagine ...
Profil : Equipe sécurité

...

Alors, problème résolu

Alain-st-martin13 · Answer 26 · Posté le 23/01/2011 à 10:17:28

et bien je te remercie beaucoup pour ton aide particulièrement efficace, effectivement plus aucune fenètre intempestives. Si ce témoignage peut être utile à d'autre, n'hésitez surtout pas à vous en servir. Vraiment merci encore et à bientôt peut être sans nouveau problème j'espère. Alain.

kmisol · Answer 27 · Posté le 23/01/2011 à 19:26:14

kmisol

Imagine ...
Profil : Equipe sécurité

...

Bon surf