ADSPY

C'est fait pour l'UAC... mais cela fait bientôt une heure que j'attends des nouvelles de AD-Remover. Est-ce normal ?

Je viens de faire le rapport RSIT qui "coince" aussi :Line 1: Erroe: Variable used without being declared.

Mais je crois avoir trouvé la solution sur un formum

===============
Salut, moi aussi depuis ce matin Antivir me fait la même détection. Pour ma part j'ai installer PDF CREATOR 0.9.9 hier, j'ai bien fait attention, de décocher la toolbar PDFFORGE, mais apparemment il l'installe quand même, de ce fait, ADSPY/dealio.Instal et search sont lancés par la toolbar.

Va simplement désinstaller pdfforge toolbar avec le désinstallateur de windows et tous sera régler.
===============

Ce que j'ai fait, et depuis plus d'alerte. Je ne sais pas si le programme est réglé pour autant et j'aurais bien aimé faire un nettoyage complet de mes ordinateurs : 1 PC de bureau + 1 notebook, pour voir...

Logfile of random's system information tool 1.06 (written by random/random)
Run by Croûtons at 2010-01-12 18:59:50
Microsoft Windows 7 Édition Familiale Premium Service Pack 2
System drive C: has 348 GB (74%) free of 467 GB
Total RAM: 4095 MB (37% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 19:00:36, on 12/01/2010
Platform: Unknown Windows (WinNT 6.01.3504)
MSIE: Internet Explorer v8.00 (8.00.7600.16385)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Common Files\Ahead\Lib\NMBgMonitor.exe
C:\Program Files (x86)\Le Robert\Le Grand Robert\grwinHyper.exe
C:\Program Files (x86)\IncrediMail\bin\IncMail.exe
C:\Users\Croûtons\AppData\Local\Clavier+\Clavier.exe
C:\Program Files (x86)\Acer\Empowering Technology\eDataSecurity\x86\eDSMSNLoader32.exe
C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorUpdate.exe
C:\Program Files (x86)\Creative\Shared Files\CamTray.exe
C:\Program Files (x86)\Larousse\Petit Larousse 2010\bin\Hyperappel.exe
C:\Program Files (x86)\Babylon\Babylon-Pro\Babylon.exe
C:\Program Files (x86)\OpenOffice.org 3\program\soffice.exe
C:\Program Files (x86)\Google\Google Desktop Search\GoogleDesktop.exe
C:\Program Files (x86)\IncrediMail\bin\IMApp.exe
C:\Program Files (x86)\Unlocker\UnlockerAssistant.exe
C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin
C:\Program Files (x86)\Common Files\Ahead\Lib\NMIndexStoreSvr.exe
C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
C:\Program Files (x86)\Java\jre6\bin\jusched.exe
C:\Program Files (x86)\Lavasoft\Ad-Aware\AAWTray.exe
C:\Program Files (x86)\2BrightSparks\SyncBack\SyncBack.exe
C:\Program Files (x86)\Internet Explorer\iexplore.exe
C:\Program Files (x86)\Internet Explorer\iexplore.exe
C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbarUser_32.exe
C:\Program Files (x86)\Internet Explorer\iexplore.exe
C:\Program Files (x86)\Mozilla Firefox 3.6 Beta 1\firefox.exe
C:\Program Files (x86)\Internet Explorer\iexplore.exe
C:\Program Files (x86)\Internet Explorer\iexplore.exe
C:\Users\Croûtons\Desktop\Programmes outils\RSIT.exe
C:\Users\Croûtons\Desktop\Programmes outils\RSIT.exe
C:\Program Files (x86)\trend micro\Croûtons.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://homepage.acer.com/rdr.aspx?b=ACAW&l=040c&s=1&o=vp64&d=1006&m=aspire_x1700
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,SearchAssistant = http://www.crawler.com/search/ie.aspx?tb_id=60446
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,CustomizeSearch = http://dnl.crawler.com/support/sa_customize.aspx?TbId=60446
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = http://dnl.crawler.com/support/sa_customize.aspx?TbId=60446
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O1 - Hosts: ::1 localhost
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: (no name) - {4E7BD74F-2B8D-469E-8DA9-FD60BB9AAE33} - (no file)
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files (x86)\Google\GoogleToolbarNotifier\5.4.4525.1752\swg.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
O3 - Toolbar: (no name) - {4E7BD74F-2B8D-469E-8DA9-FD60BB9AAE33} - (no file)
O3 - Toolbar: Acer eDataSecurity Management - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - C:\Program Files (x86)\Acer\Empowering Technology\eDataSecurity\x86\eDStoolbar.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
O4 - HKLM\..\Run: [Babylon Client] "C:\Program Files (x86)\Babylon\Babylon-Pro\Babylon.exe" -AutoStart
O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files (x86)\Google\Google Desktop Search\GoogleDesktop.exe" /startup
O4 - HKLM\..\Run: [PCMMediaSharing] "C:\Program Files (x86)\Acer Arcade Live\Acer HomeMedia Connect\Kernel\DMS\PCMMediaSharing.exe"
O4 - HKLM\..\Run: [SiteVacuum] "C:\Program Files (x86)\EasySearch\SiteVacuumClient.exe"
O4 - HKLM\..\Run: [UnlockerAssistant] "C:\Program Files (x86)\Unlocker\UnlockerAssistant.exe"
O4 - HKLM\..\Run: [Creative WebCam Tray] C:\Program Files (x86)\Creative\Shared Files\CAMTRAY.EXE
O4 - HKLM\..\Run: [avgnt] "C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files (x86)\Common Files\Ahead\Lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [grwinHyper] C:\Program Files (x86)\Le Robert\Le Grand Robert\grwinHyper.exe
O4 - HKCU\..\Run: [IncrediMail] C:\Program Files (x86)\IncrediMail\bin\IncMail.exe /c
O4 - HKCU\..\Run: [Clavier+] C:\Users\Croûtons\AppData\Local\Clavier+\Clavier.exe
O4 - HKCU\..\Run: [Le Petit Robert V3 Hyperappel] C:\Program Files\Le Robert\Le Petit Robert 2009\RobertHA.exe
O4 - HKCU\..\Run: [SpywareTerminatorUpdate] "C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorUpdate.exe"
O4 - HKCU\..\Run: [swg] "C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
O4 - HKCU\..\Run: [Creative WebCam Tray] "C:\Program Files (x86)\Creative\Shared Files\CamTray.exe"
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [RESTART_STICKY_NOTES] C:\Windows\System32\StikyNot.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [SpywareTerminatorUpdate] "C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorUpdate.exe" (User 'Système')
O4 - HKUS\.DEFAULT\..\Run: [SpywareTerminatorUpdate] "C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorUpdate.exe" (User 'Default user')
O4 - Startup: OpenOffice.org 3.1.lnk = C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe
O4 - Global Startup: Hyperappel du Petit Larousse 2010.lnk = C:\Program Files (x86)\Larousse\Petit Larousse 2010\bin\Hyperappel.exe
O8 - Extra context menu item: &Envoyer à OneNote - res:///105
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: Google Sidewiki... - res://C:\Program Files (x86)\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_60D6097707281E79.dll/cmsidewiki.html
O8 - Extra context menu item: Translate with &Babylon - res://C:\Program Files (x86)\Babylon\Babylon-Pro\Utils\BabylonIEPI.dll/Translate.htm
O9 - Extra button: Desktop Notes - {035E680E-B668-472F-91F3-E850BCC5051F} - C:\Program Files (x86)\Crawler\Notes\CNotes.exe
O13 - Gopher Prefix:
O20 - AppInit_DLLs: C:\PROGRA~2\Google\GOOGLE~1\GO36F4~1.DLL
O23 - Service: a-squared Free Service (a2free) - Emsi Software GmbH - C:\Program Files (x86)\a-squared Free\a2service.exe
O23 - Service: Acer HomeMedia Connect Service - CyberLink - C:\Program Files (x86)\Acer Arcade Live\Acer HomeMedia Connect\Kernel\DMS\CLMSServer.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: Avira AntiVir Scheduler (AntiVirSchedulerService) - Avira GmbH - C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files (x86)\Bonjour\mDNSResponder.exe
O23 - Service: eDataSecurity Service - Egis Incorporated - C:\Program Files (x86)\Acer\Empowering Technology\eDataSecurity\x86\eDSService.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: Empowering Technology Service (ETService) - Unknown owner - C:\Program Files\Acer\Empowering Technology\Service\ETService.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Google Desktop Manager 5.9.911.3589 (GoogleDesktopManager-110309-193829) - Google - C:\Program Files (x86)\Google\Google Desktop Search\GoogleDesktop.exe
O23 - Service: Service Google Update (gupdate1ca31703229744d) (gupdate1ca31703229744d) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files (x86)\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Lavasoft Ad-Aware Service - Lavasoft - C:\Program Files (x86)\Lavasoft\Ad-Aware\AAWService.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: NBService - Nero AG - C:\Program Files (x86)\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NMIndexingService - Nero AG - C:\Program Files (x86)\Common Files\Ahead\Lib\NMIndexingService.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: PCCRON - Unknown owner - C:\PCStreet\bin\cygrunsrv.exe
O23 - Service: PCROADCPS - Unknown owner - C:\PCStreet\bin\cygrunsrv.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files (x86)\CyberLink\Shared Files\RichVideo.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: SBSD Security Center Service (SBSDWSCService) - Safer Networking Ltd. - C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe
O23 - Service: Seagate Sync Service - Seagate Technology LLC - C:\Program Files (x86)\Seagate\Sync\SeaSyncServices.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Spyware Terminator Realtime Shield Service (sp_rssrv) - Crawler.com - C:\Program Files (x86)\Spyware Terminator\sp_rsser.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: wampapache - Apache Software Foundation - c:\wamp\bin\apache\apache2.2.11\bin\httpd.exe
O23 - Service: wampmysqld - Unknown owner - c:\wamp\bin\mysql\mysql5.1.36\bin\mysqld.exe
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

Voici la suite...

info.txt logfile of random's system information tool 1.06 2010-01-12 18:52:41

======Uninstall list======

-->C:\Program Files (x86)\Nero\Nero 7\\nero\uninstall\UNNERO.exe /UNINSTALL
-->C:\Windows\UNNeroBackItUp.exe /UNINSTALL
-->C:\Windows\UNNeroMediaHome.exe /UNINSTALL
-->C:\Windows\UNNeroShowTime.exe /UNINSTALL
-->C:\Windows\UNNeroVision.exe /UNINSTALL
-->C:\Windows\UNRecode.exe /UNINSTALL
-->RunDll32 C:\PROGRA~2\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files (x86)\InstallShield Installation Information\{D43F13A1-1E39-4BD4-9682-DF889FE75421}\setup.exe" -l0x40c
-->RunDll32 C:\PROGRA~2\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files (x86)\InstallShield Installation Information\{A82F10CB-18B5-4EAC-AEF2-FA49CD565626}\setup.exe" -l0x9
-->RunDll32 C:\PROGRA~2\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files (x86)\InstallShield Installation Information\{E5ABA5FD-EE3D-4F15-895D-B32321E6C96B}\setup.exe" -l0x9
µTorrent-->"C:\Program Files (x86)\uTorrent\uTorrent.exe" /UNINSTALL
7x8 version 0.96.04 configuré pour la maison-->"C:\Program Files (x86)\7x8\unins000.exe"
7-Zip 4.65-->"C:\Program Files (x86)\7-Zip\Uninstall.exe"
Acer Arcade Live Main Page-->RunDll32 C:\PROGRA~2\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files (x86)\InstallShield Installation Information\{EFBDC2B0-FAA8-4B78-8DE1-AEBE7958FA37}\Setup.exe" -uninstall
Acer DV Magician-->RunDll32 C:\PROGRA~2\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files (x86)\InstallShield Installation Information\{F6EFFB76-4A07-11DA-9D78-000129760D75}\Setup.exe" -uninstall
Acer DVDivine-->RunDll32 C:\PROGRA~2\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files (x86)\InstallShield Installation Information\{B145EC69-66F5-11D8-9D75-000129760D75}\Setup.exe" -uninstall
Acer eDataSecurity Management-->C:\Program Files (x86)\Acer\Empowering Technology\eDataSecurity\x86\eDSnstHelper.exe -Operation UNINSTALL
Acer Empowering Technology-->"C:\Program Files (x86)\InstallShield Installation Information\{8F1B6239-FEA0-450A-A950-B05276CE177C}\setup.exe" -runfromtemp -l0x040c -removeonly
Acer eSettings Management-->"C:\Program Files (x86)\InstallShield Installation Information\{13D85C14-2B85-419F-AC41-C7F21E68B25D}\setup.exe" -runfromtemp -l0x040c -removeonly
Acer GameZone Console DTV 2.0.1.1-->"C:\Program Files (x86)\Acer GameZone\GameConsole\unins000.exe"
Acer HomeMedia Connect-->RunDll32 C:\PROGRA~2\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files (x86)\InstallShield Installation Information\{132888AE-EF67-41C5-BCA2-7D5D2488AB63}\Setup.exe" -uninstall
Acer HomeMedia Trial Creator-->RunDll32 C:\PROGRA~2\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files (x86)\InstallShield Installation Information\{B580C409-E16F-44FF-904D-3AE94E113BE0}\Setup.exe" -uninstall
Acer HomeMedia-->RunDll32 C:\PROGRA~2\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files (x86)\InstallShield Installation Information\{AA4BF92B-2AAF-11DA-9D78-000129760D75}\Setup.exe" -uninstall
Acer Product Registration-->"C:\Program Files (x86)\InstallShield Installation Information\{DA20E1A8-07CB-4EE7-9B72-A7E28C953F0E}\setup.exe" -runfromtemp -l0x040c -removeonly
Acer ScreenSaver-->RunDll32 C:\PROGRA~2\COMMON~1\INSTAL~1\PROFES~1\RunTime\11\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files (x86)\InstallShield Installation Information\{79DD56FC-DB8B-47F5-9C80-78B62E05F9BC}\setup.exe" -l0x9 -removeonly
Acer SlideShow DVD-->RunDll32 C:\PROGRA~2\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files (x86)\InstallShield Installation Information\{41581EF5-45A7-11DA-9D78-000129760D75}\Setup.exe" -uninstall
Acer VideoMagician-->RunDll32 C:\PROGRA~2\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files (x86)\InstallShield Installation Information\{F79A208D-D929-11D9-9D77-000129760D75}\Setup.exe" -uninstall
Ad-Aware-->"C:\ProgramData\{CFBD8779-FAAB-4357-84F2-1EC8619FADA6}\Ad-AwareInstallation.exe" REMOVE=TRUE MODIFY=FALSE
Ad-Aware-->C:\ProgramData\{CFBD8779-FAAB-4357-84F2-1EC8619FADA6}\Ad-AwareInstallation.exe
Adobe Flash Player 10 ActiveX-->C:\Windows\SysWOW64\Macromed\Flash\uninstall_activeX.exe
Adobe Reader 9.2 - Français-->MsiExec.exe /I{AC76BA86-7AD7-1036-7B44-A92000000001}
Ad-Remover By C_XX-->"C:\Program Files (x86)\Ad-Remover\Uninstall ADR.exe"
Advertising Center-->MsiExec.exe /X{B2EC4A38-B545-4A00-8214-13FE0E915E6D}
Agatha Christie Death on the Nile-->"C:\Program Files (x86)\Acer GameZone\Agatha Christie Death on the Nile\Uninstall.exe" "C:\Program Files (x86)\Acer GameZone\Agatha Christie Death on the Nile\install.log"
Alice Greenfingers-->"C:\Program Files (x86)\Acer GameZone\Alice Greenfingers\Uninstall.exe" "C:\Program Files (x86)\Acer GameZone\Alice Greenfingers\install.log"
ALTools Update-->"C:\Program Files (x86)\ESTsoft\ALUpdate\unins000.exe"
Analyseur et SDK MSXML 4.0 SP2-->MsiExec.exe /I{716E0306-8318-4364-8B8F-0CC4E9376BAC}
Apple Application Support-->MsiExec.exe /I{3FA365DF-2D68-45ED-8F83-8C8A33E65143}
Apple Software Update-->MsiExec.exe /I{6956856F-B6B3-4BE0-BA0B-8F495BE32033}
Aspell French Dictionary-0.50-3-->"C:\Program Files (x86)\Aspell\unins002.exe"
Aspell Spanish Dictionary-0.50-2-->"C:\Program Files (x86)\Aspell\unins001.exe"
a-squared Free 4.5-->"C:\Program Files (x86)\a-squared Free\unins000.exe"
Assistant de connexion Windows Live-->MsiExec.exe /I{D3116CC7-24DC-4CA3-9CE1-23FED836E9F2}
Avira AntiVir Personal - Free Antivirus-->C:\Program Files (x86)\Avira\AntiVir Desktop\setup.exe /REMOVE
Azada-->"C:\Program Files (x86)\Acer GameZone\Azada\Uninstall.exe" "C:\Program Files (x86)\Acer GameZone\Azada\install.log"
Babylon-->C:\Program Files (x86)\Babylon\Babylon-Pro\Utils\uninstbb.exe
Bibliothèques GTK+ 2.14.7 rev a (supprimer uniquement)-->C:\Program Files (x86)\Common Files\GTK\2.0\uninst.exe
Big Kahuna Reef-->"C:\Program Files (x86)\Acer GameZone\Big Kahuna Reef\Uninstall.exe" "C:\Program Files (x86)\Acer GameZone\Big Kahuna Reef\install.log"
Brain Games-->RunDll32 C:\PROGRA~2\COMMON~1\INSTAL~1\PROFES~1\RunTime\0700\Intel32\Ctor.dll,LaunchSetup "C:\Program Files (x86)\InstallShield Installation Information\{1BAA0A5F-0FBE-4F86-AC82-8EDE9D6D5717}\Setup.exe" -l0xa
Brother HL-5040-->"C:\Program Files (x86)\Brother\BRHL5040\IsUn040c.exe" -f"C:\Program Files (x86)\Brother\BRHL5040\DeIsL3.isu" -cbruninst.dll
Cake Mania-->"C:\Program Files (x86)\Acer GameZone\Cake Mania\Uninstall.exe" "C:\Program Files (x86)\Acer GameZone\Cake Mania\install.log"
Catalyst Control Center - Branding-->MsiExec.exe /I{3594EE90-B157-4519-9E82-8B6F4711A0A1}
CCleaner-->"C:\Program Files (x86)\CCleaner\uninst.exe"
Chicken Invaders 3-->"C:\Program Files (x86)\Acer GameZone\Chicken Invaders 3\Uninstall.exe" "C:\Program Files (x86)\Acer GameZone\Chicken Invaders 3\install.log"
Chuzzle-->"C:\Program Files (x86)\Acer GameZone\Chuzzle\Uninstall.exe" "C:\Program Files (x86)\Acer GameZone\Chuzzle\install.log"
Clavier+ 10.6.1-->"C:\Users\Croûtons\AppData\Local\Clavier+\unins000.exe"
Cobian Backup 9-->C:\Program Files (x86)\Cobian Backup 9\cbUninstall.exe
Crawler Desktop Notes-->"C:\Program Files (x86)\Crawler\Notes\unins000.exe"
Creative PC-CAM Center Lite-->RunDll32 C:\PROGRA~2\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files (x86)\InstallShield Installation Information\{D43F13A1-1E39-4BD4-9682-DF889FE75421}\setup.exe" -l0x40c /remove
Creative WebCam Center-->RunDll32 C:\PROGRA~2\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files (x86)\InstallShield Installation Information\{E5ABA5FD-EE3D-4F15-895D-B32321E6C96B}\setup.exe" -l0x9 /remove
Des volcans dans le feu de l’action 1.0-->"C:\Program Files (x86)\La Science Interactive\Des volcans dans le feu de l’action\unins000.exe"
DICCIONARIO CLAVE-->C:\Windows\DICCIONARIO CLAVE Uninstaller.exe
Diccionario de uso del Español Actual-->"C:\Program Files (x86)\sgel\diccionario\unins000.exe"
Dictionnaire Freelang (liste de mots)-->"C:\Users\Croûtons\AppData\Local\Dictionnaire Freelang\unins001.exe"
Dictionnaire Freelang 3.74 beta-->"C:\Users\Croûtons\AppData\Local\Dictionnaire Freelang\unins000.exe"
Diner Dash Flo on the Go-->"C:\Program Files (x86)\Acer GameZone\Diner Dash Flo on the Go\Uninstall.exe" "C:\Program Files (x86)\Acer GameZone\Diner Dash Flo on the Go\install.log"
DRAE-->"C:\Program Files (x86)\DRAE\UninstallerData\Uninstall DRAE.exe"
Driver Detective-->MsiExec.exe /X{4640FDE1-B83A-4376-84ED-86F86BEE2D41}
Driver Genius Professional Edition-->"C:\Program Files (x86)\Driver-Soft\DriverGenius\unins000.exe"
eMule-->"C:\Program Files (x86)\eMule\Uninstall.exe"
ESET Online Scanner v3-->C:\Program Files (x86)\ESET\ESET Online Scanner\OnlineScannerUninstaller.exe
Files-Destructor 1.0-->"C:\Program Files (x86)\Files-Destructor\unins000.exe"
FileZilla Client 3.3.1-->C:\Program Files (x86)\FileZilla FTP Client\uninstall.exe
Folding@home-x86-->MsiExec.exe /I{6B755EC3-C709-4F5C-BC58-BC0D3967B6B6}
Free PDF to Word Doc Converter v1.1-->"C:\Program Files (x86)\Free PDF to Word Doc Converter\unins000.exe"
Galerie de photos Windows Live-->MsiExec.exe /X{B131E59D-202C-43C6-84C9-68F0C37541F1}
GIMP 2.6.7-->"C:\Program Files (x86)\GIMP-2.0\setup\unins000.exe"
Glary Undelete 1.6.0.262-->"C:\Program Files (x86)\Glary Undelete\unins000.exe"
Glary Utilities 2.18.0.786-->"C:\Program Files (x86)\Glary Utilities\unins000.exe"
GNU Aspell 0.50-3-->"C:\Program Files (x86)\Aspell\unins000.exe"
Google Desktop-->C:\Program Files (x86)\Google\Google Desktop Search\GoogleDesktopSetup.exe -uninstall
Google Toolbar for Internet Explorer-->"C:\Program Files (x86)\Google\Google Toolbar\Component\GoogleToolbarManager_0E996B068B56FCA2.exe" /uninstall
Google Toolbar for Internet Explorer-->MsiExec.exe /I{18455581-E099-4BA8-BC6B-F34B2F06600C}
Google Update Helper-->MsiExec.exe /I{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}
Google Earth-->MsiExec.exe /X{C084BC61-E537-11DE-8616-005056806466}
greenstreet CalendarMaker-->C:\Windows\IsUn040c.exe -f"C:\Program Files (x86)\greenstreet\CalendarMaker\Uninst.isu"
Groobax-->"C:\Program Files (x86)\Groobax\unins000.exe"
Hercules Classic Link Webcam-->C:\Program Files (x86)\InstallShield Installation Information\{FD4FE0F7-91FC-43A2-9C3A-187553991FFF}\setup.exe -runfromtemp -l0x040c -removeonly
HijackThis 2.0.2-->"C:\Program Files (x86)\trend micro\HijackThis.exe" /uninstall
IncrediMail 2.0-->C:\Program Files (x86)\IncrediMail\Bin\ImSetup.exe /uninstallProduct /addon:incredimail
IncrediMail-->MsiExec.exe /X{5E97F3BD-CDDC-4188-9D98-532E14FABB5D}
Installation Windows Live-->C:\Program Files (x86)\Windows Live\Installer\wlarp.exe
Installation Windows Live-->MsiExec.exe /I{46ABBC54-1872-4AA3-95E2-F2C063A63F31}
iTrad Démo v2.5-->C:\Program Files (x86)\iKoneStudio\iTrad\Uninstaldemo.exe
IZArc 4.0 beta 1-->"C:\Program Files (x86)\IZArc\unins000.exe"
Java(TM) 6 Update 16-->MsiExec.exe /X{26A24AE4-039D-4CA4-87B4-2F83216016F0}
Java(TM) 6 Update 17-->MsiExec.exe /X{26A24AE4-039D-4CA4-87B4-2F83216014FF}
Jewel Quest Solitaire-->"C:\Program Files (x86)\Acer GameZone\Jewel Quest Solitaire\Uninstall.exe" "C:\Program Files (x86)\Acer GameZone\Jewel Quest Solitaire\install.log"
Junk Mail filter update-->MsiExec.exe /I{E2DFE069-083E-4631-9B6C-43C48E991DE5}
KC Softwares SUMo-->"C:\Program Files (x86)\KC Softwares\SUMo\unins000.exe"
Kick N Rush-->"C:\Program Files (x86)\Acer GameZone\Kick N Rush\Uninstall.exe" "C:\Program Files (x86)\Acer GameZone\Kick N Rush\install.log"
Linguae 0.10 Beta-->"C:\Program Files (x86)\Linguae\unins000.exe"
Macromedia Dreamweaver 8-->MsiExec.exe /I{5FD788ED-1A37-4496-9BDD-463F493B27FA}
Macromedia Extension Manager-->MsiExec.exe /I{3C8C9FB3-5FDF-40B4-B314-EAD722728C76}
Macromedia Fireworks 8-->MsiExec.exe /I{4C24A8C1-7CFA-4650-AF15-732F5BD7B46D}
Macromedia Flash 8 Video Encoder-->MsiExec.exe /X{8BF2C401-02CE-424D-BC26-6C4F9FB446B6}
Macromedia Flash 8-->MsiExec.exe /I{2BD5C305-1B27-4D41-B690-7A61172D2FEB}
Mahjong Escape Ancient China-->"C:\Program Files (x86)\Acer GameZone\Mahjong Escape Ancient China\Uninstall.exe" "C:\Program Files (x86)\Acer GameZone\Mahjong Escape Ancient China\install.log"
Malwarebytes' Anti-Malware-->"C:\Program Files (x86)\Malwarebytes' Anti-Malware\unins000.exe"
Manuel d'utilisation de Creative WebCam NX (Français)-->C:\Windows\IsUn040c.exe -f"C:\Program Files (x86)\Creative\Creative WebCam NX\Manuel d'utilisation de Creative WebCam NX\French\CTManual.isu"
Microsoft Choice Guard-->MsiExec.exe /X{F0E12BBA-AD66-4022-A453-A1C8A0C4D570}
Microsoft Office XP Professional avec FrontPage-->MsiExec.exe /I{9028040C-6000-11D3-8CFE-0050048383C9}
Microsoft SQL Server 2005 Compact Edition [ENU]-->MsiExec.exe /I{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053-->MsiExec.exe /X{770657D0-A123-3C07-8E44-1C83EC895118}
Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{837b34e3-7c30-493c-8f6a-2b0f04e2912c}
Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148-->MsiExec.exe /X{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17-->MsiExec.exe /X{9A25302D-30C0-39D9-BD6F-21E6EC160475}
Microsoft Works-->MsiExec.exe /I{6B1CB38D-E2E4-4A30-933D-EFDEBA76AD9C}
Module de compatibilité pour Microsoft Office System 2007-->MsiExec.exe /X{90120000-0020-040C-0000-0000000FF1CE}
Mozilla Firefox (3.6)-->C:\Program Files (x86)\Mozilla Firefox 3.6 Beta 1\uninstall\helper.exe
Mozilla Thunderbird (2.0.0.23)-->C:\Program Files (x86)\Mozilla Thunderbird\uninstall\helper.exe
MSVCRT-->MsiExec.exe /I{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}
MSXML 4.0 SP2 (KB954430)-->MsiExec.exe /I{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
MSXML 4.0 SP2 (KB973688)-->MsiExec.exe /I{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}
Mystery Case Files - Huntsville-->"C:\Program Files (x86)\Acer GameZone\Mystery Case Files - Huntsville\Uninstall.exe" "C:\Program Files (x86)\Acer GameZone\Mystery Case Files - Huntsville\install.log"
Mystery Solitaire - Secret Island-->"C:\Program Files (x86)\Acer GameZone\Mystery Solitaire - Secret Island\Uninstall.exe" "C:\Program Files (x86)\Acer GameZone\Mystery Solitaire - Secret Island\install.log"
Nero 7 Ultra Edition-->MsiExec.exe /I{43FFE159-3199-4188-A1CD-629166AD1036}
Nero 9 Essentials-->C:\Program Files (x86)\Common Files\Nero\Nero ProductInstaller 4\SetupX.exe REMOVESERIALNUMBER="XM02-508X-MHAT-19WU-9Z3Z-0CH0-3U6E-85W5-MMHH-6647-1Z5L-7M8C-0U45-758P-0000"
Nero 9 Lite-->C:\Program Files (x86)\Common Files\Nero\Nero ProductInstaller 4\SetupX.exe REMOVESERIALNUMBER="XM2C-50A9-HH4M-0ZM8-4X06-9P25-5A46-618P-AH19-6647"
Nero ControlCenter-->MsiExec.exe /X{BD5CA0DA-71AD-43DA-B19E-6EEE0C9ADC9A}
Nero Installer-->MsiExec.exe /X{E8A80433-302B-4FF1-815D-FCC8EAC482FF}
Nero Online Upgrade-->MsiExec.exe /X{C81A2FE0-3574-00A9-CED4-BDAA334CBE8E}
Nero StartSmart OEM-->MsiExec.exe /X{4D43D635-6FDA-4fa5-AA9B-23CF73D058EA}
Nero StartSmart-->MsiExec.exe /X{7748AC8C-18E3-43BB-959B-088FAEA16FB2}
neroxml-->MsiExec.exe /I{56C049BE-79E9-4502-BEA7-9754A3E60F9B}
NTI Photo Maker Hot Fix-->C:\Program Files (x86)\InstallShield Installation Information\{B9B02A9E-8074-4C3F-AAE5-311528F34FED}\setup.exe -runfromtemp -l0x040c
OpenOffice.org 3.1-->MsiExec.exe /I{0FA44E79-CD7D-4E8D-A2EE-26FE05F509B6}
Opera 10.00-->MsiExec.exe /X{2085F05D-24C5-4E27-B7B4-A51DE890FFC9}
Outil de téléchargement Windows Live-->MsiExec.exe /I{205C6BDD-7B73-42DE-8505-9A093F35A238}
Panda ActiveScan 2.0-->C:\Program Files (x86)\Panda Security\ActiveScan 2.0\as2uninst.exe
PC SECURITY TEST 2009-->"C:\Program Files (x86)\AxBx\PC Security Test 2009\unins000.exe"
PDFCreator-->C:\Program Files (x86)\PDFCreator\unins000.exe
Petit Larousse 2010-->RunDll32 C:\PROGRA~2\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files (x86)\InstallShield Installation Information\{422FADA9-FED2-41D7-B5FA-472BB98B7784}\Setup.exe" -l0x40c
Photo to Sketch Pro 3.6-->"C:\Program Files (x86)\Photo to Sketch Pro\unins000.exe"
PhotoFiltre-->"C:\Program Files (x86)\PhotoFiltre\Uninst.exe"
PhotoMail Maker-->MsiExec.exe /X{15382D89-6EF6-4D21-9484-B500F2B10E46}
PhotoMail Maker-->MsiExec.exe /X{15382D89-6EF6-4D21-9484-B500F2B10E46} ARPVAL="UnInst" /qf /L*V "%temp%\PhotoMailUninstallLog.log"
Picasa 3-->"C:\Program Files (x86)\Google\Picasa3\Uninstall.exe"
Pixia-->"C:\Program Files (x86)\InstallShield Installation Information\{A0BCF90F-B4E4-435C-A48D-8FAAE10554F9}\setup.exe" -runfromtemp -l0x0009 -removeonly
Q-Dir-->C:\Program Files (x86)\Q-Dir\Q-Dir.exe -uninstall
QuickTime-->MsiExec.exe /I{1451DE6B-ABE1-4F62-BE9A-B363A17588A2}
RapidTyping-->"C:\Program Files (x86)\RapidTyping\Uninstall.exe"
RAR Recovery Toolbox 1.1-->"C:\Program Files (x86)\RAR Recovery Toolbox\unins000.exe"
Realtek High Definition Audio Driver-->RtlUpd64.exe -r -m -nrg2709
Revo Uninstaller 1.85-->C:\Program Files (x86)\VS Revo Group\Revo Uninstaller\uninst.exe
Sauvegarde Distante-->"C:\PCStreet\unins000.exe"
Spybot - Search & Destroy-->"C:\Program Files (x86)\Spybot - Search & Destroy\unins000.exe"
Spyware Terminator-->"C:\Program Files (x86)\Spyware Terminator\unins000.exe"
Supercow Deluxe-->C:\Program Files (x86)\Supercow Deluxe\Uninstal.exe
SyncBack-->"C:\Program Files (x86)\2BrightSparks\SyncBack\unins000.exe"
Traductor Global 2.0-->"C:\Program Files (x86)\Traduce Gratis\unins000.exe"
TuneUp Utilities 2007-->MsiExec.exe /I{C8BB4912-12D9-42AE-B571-E580D8CD1B5B}
Turbo Pizza-->"C:\Program Files (x86)\Acer GameZone\Turbo Pizza\Uninstall.exe" "C:\Program Files (x86)\Acer GameZone\Turbo Pizza\install.log"
Unlocker 1.8.8-->C:\Program Files (x86)\Unlocker\uninst.exe
Upgrade Kit-->"C:\Program Files (x86)\InstallShield Installation Information\{1D0FDD6D-3C5E-4588-8ED0-02DC88014BF2}\setup.exe" -runfromtemp -l0x040c -removeonly
VirusTotal Uploader 2.0-->"C:\Program Files (x86)\VirusTotalUploader2\uninstall.exe"
vlnet1.com - SiteVacuum-->C:\Program Files (x86)\EasySearch\uninst.exe
WampServer 2.0-->"c:\wamp\unins000.exe"
Web Acappella-->"C:\Program Files (x86)\Intuisphere\Web Acappella\unins000.exe"
Windows Live Call-->MsiExec.exe /I{82C7B308-0BDD-49D8-8EA5-9CD3A3F9DF41}
Windows Live Communications Platform-->MsiExec.exe /I{ED00D08A-3C5F-488D-93A0-A04F21F23956}
Windows Live FolderShare-->MsiExec.exe /X{2075CB0A-D26F-4DAA-B424-5079296B43BA}
Windows Live Mail-->MsiExec.exe /I{5DD76286-9BE7-4894-A990-E905E91AC818}
Windows Live Messenger-->MsiExec.exe /X{770F1BEC-2871-4E70-B837-FB8525FFA3B1}
XnView 1.96.5-->"C:\Program Files (x86)\XnView\unins000.exe"
xplorer² lite-->"C:\Program Files (x86)\zabkat\xplorer2_lite\Uninstall.exe"
ZikiTranslator 1.3.6a-->C:\Program Files (x86)\ZikiTranslator\uninst.exe
Zuma Deluxe-->"C:\Program Files (x86)\Acer GameZone\Zuma Deluxe\Uninstall.exe" "C:\Program Files (x86)\Acer GameZone\Zuma Deluxe\install.log"

======Hosts File======

127.0.0.1 localhost
::1 localhost

======Security center information======

AS: Spybot - Search and Destroy (disabled)
AS: Spyware Terminator (disabled)

======System event log======

Computer Name: PC-BARREAU
Event Code: 51
Message: Une erreur a été détectée sur le périphérique \Device\Harddisk3\DR3 lors d'une opération de pagination.
Record Number: 166209
Source Name: Disk
Time Written: 20091229164539.640000-000
Event Type: Avertissement
User:

Computer Name: PC-BARREAU
Event Code: 51
Message: Une erreur a été détectée sur le périphérique \Device\Harddisk3\DR3 lors d'une opération de pagination.
Record Number: 166208
Source Name: Disk
Time Written: 20091229164539.640000-000
Event Type: Avertissement
User:

Computer Name: PC-BARREAU
Event Code: 51
Message: Une erreur a été détectée sur le périphérique \Device\Harddisk3\DR3 lors d'une opération de pagination.
Record Number: 166207
Source Name: Disk
Time Written: 20091229164539.640000-000
Event Type: Avertissement
User:

Computer Name: PC-BARREAU
Event Code: 51
Message: Une erreur a été détectée sur le périphérique \Device\Harddisk3\DR3 lors d'une opération de pagination.
Record Number: 166206
Source Name: Disk
Time Written: 20091229164539.640000-000
Event Type: Avertissement
User:

Computer Name: PC-BARREAU
Event Code: 51
Message: Une erreur a été détectée sur le périphérique \Device\Harddisk3\DR3 lors d'une opération de pagination.
Record Number: 166205
Source Name: Disk
Time Written: 20091229164539.640000-000
Event Type: Avertissement
User:

=====Application event log=====

Computer Name: PC-BARREAU
Event Code: 1002
Message: Valeur inattendue ou absente (nom : ‘PackageCode’, valeur : ‘’) dans la clé ‘HKLM\Software\Classes\Installer\Products\5DBE8E079C8785242BA00589CC0A000F’
Record Number: 1204
Source Name: MsiInstaller
Time Written: 20090714093042.000000-000
Event Type: Erreur
User: AUTORITE NT\Système

Computer Name: PC-BARREAU
Event Code: 1002
Message: Valeur inattendue ou absente (nom : ‘PackageCode’, valeur : ‘’) dans la clé ‘HKLM\Software\Classes\Installer\Products\5DBE8E079C8785242BA00589CC0A000F’
Record Number: 1187
Source Name: MsiInstaller
Time Written: 20090714091903.000000-000
Event Type: Erreur
User: AUTORITE NT\Système

Computer Name: PC-BARREAU
Event Code: 1002
Message: Valeur inattendue ou absente (nom : ‘PackageCode’, valeur : ‘’) dans la clé ‘HKLM\Software\Classes\Installer\Products\5DBE8E079C8785242BA00589CC0A000F’
Record Number: 1161
Source Name: MsiInstaller
Time Written: 20090714084548.000000-000
Event Type: Erreur
User: PC-BARREAU\Croûtons

Computer Name: PC-BARREAU
Event Code: 10
Message: Le filtre d’événement avec la requête « SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99 » n’a pas pu être réactivé dans l’espace de noms « //./root/CIMV2 » à cause de l’erreur 0x80041003. Les événements ne peuvent pas être délivrés à travers ce filtre tant que le problème ne sera pas corrigé.
Record Number: 1132
Source Name: Microsoft-Windows-WMI
Time Written: 20090714074417.000000-000
Event Type: Erreur
User:

Computer Name: PC-BARREAU
Event Code: 1008
Message:
Record Number: 1127
Source Name: Microsoft-Windows-Search
Time Written: 20090714074412.000000-000
Event Type: Avertissement
User:

=====Security event log=====

Computer Name: PC-BARREAU
Event Code: 4907
Message: Les paramètres d’audit sur l’objet ont changé.

Sujet :
ID de sécurité : S-1-5-18
Nom du compte : PC-BARREAU$
Domaine du compte : WORKGROUP
ID d’ouverture de session : 0x3e7

Objet :
Serveur de l’objet : Security
Type d’objet : File
Nom de l’objet : C:\Users\Croûtons\Favorites\Site en construction\Script PHP et PERL gratuit, e-commerce RAYNETTE.URL
ID du handle : 0x788

Informations sur le processus :
ID du processus : 0x31c
Nom du processus : C:\Windows\System32\oobe\Setup.exe

Paramètres d’audit :
Descripteur de sécurité d’origine : S:AI
Nouveau descripteur de sécurité :
Record Number: 20629
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20091112195632.744400-000
Event Type: Succès de l’audit
User:

Computer Name: PC-BARREAU
Event Code: 4907
Message: Les paramètres d’audit sur l’objet ont changé.

Sujet :
ID de sécurité : S-1-5-18
Nom du compte : PC-BARREAU$
Domaine du compte : WORKGROUP
ID d’ouverture de session : 0x3e7

Objet :
Serveur de l’objet : Security
Type d’objet : File
Nom de l’objet : C:\Users\Croûtons\Favorites\Site en construction\Script PHP et PERL gratuit, e-commerce RAYNETTE.URL
ID du handle : 0x788

Informations sur le processus :
ID du processus : 0x31c
Nom du processus : C:\Windows\System32\oobe\Setup.exe

Paramètres d’audit :
Descripteur de sécurité d’origine : S:AI
Nouveau descripteur de sécurité :
Record Number: 20628
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20091112195632.744400-000
Event Type: Succès de l’audit
User:

Computer Name: PC-BARREAU
Event Code: 4907
Message: Les paramètres d’audit sur l’objet ont changé.

Sujet :
ID de sécurité : S-1-5-18
Nom du compte : PC-BARREAU$
Domaine du compte : WORKGROUP
ID d’ouverture de session : 0x3e7

Objet :
Serveur de l’objet : Security
Type d’objet : File
Nom de l’objet : C:\Users\Croûtons\Favorites\Site en construction\Script Masters Script Javascript, Php, MySQL pour Webmasters.URL
ID du handle : 0x788

Informations sur le processus :
ID du processus : 0x31c
Nom du processus : C:\Windows\System32\oobe\Setup.exe

Paramètres d’audit :
Descripteur de sécurité d’origine : S:AI
Nouveau descripteur de sécurité :
Record Number: 20627
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20091112195632.744400-000
Event Type: Succès de l’audit
User:

Computer Name: PC-BARREAU
Event Code: 4907
Message: Les paramètres d’audit sur l’objet ont changé.

Sujet :
ID de sécurité : S-1-5-18
Nom du compte : PC-BARREAU$
Domaine du compte : WORKGROUP
ID d’ouverture de session : 0x3e7

Objet :
Serveur de l’objet : Security
Type d’objet : File
Nom de l’objet : C:\Users\Croûtons\Favorites\Site en construction\Script Masters Script Javascript, Php, MySQL pour Webmasters.URL
ID du handle : 0x788

Informations sur le processus :
ID du processus : 0x31c
Nom du processus : C:\Windows\System32\oobe\Setup.exe

Paramètres d’audit :
Descripteur de sécurité d’origine : S:AI
Nouveau descripteur de sécurité :
Record Number: 20626
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20091112195632.744400-000
Event Type: Succès de l’audit
User:

Computer Name: PC-BARREAU
Event Code: 4907
Message: Les paramètres d’audit sur l’objet ont changé.

Sujet :
ID de sécurité : S-1-5-18
Nom du compte : PC-BARREAU$
Domaine du compte : WORKGROUP
ID d’ouverture de session : 0x3e7

Objet :
Serveur de l’objet : Security
Type d’objet : File
Nom de l’objet : C:\Users\Croûtons\Favorites\Site en construction\PHPmx Dreamweaver dynamique avec PHP PHPmx, Dreamweaver dynamique avec PHP.URL
ID du handle : 0x788

Informations sur le processus :
ID du processus : 0x31c
Nom du processus : C:\Windows\System32\oobe\Setup.exe

Paramètres d’audit :
Descripteur de sécurité d’origine : S:AI
Nouveau descripteur de sécurité :
Record Number: 20625
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20091112195632.728800-000
Event Type: Succès de l’audit
User:

======Environment variables======

"ComSpec"=%SystemRoot%\system32\cmd.exe
"FP_NO_HOST_CHECK"=NO
"OS"=Windows_NT
"PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC
"PROCESSOR_ARCHITECTURE"=AMD64
"TEMP"=%SystemRoot%\TEMP
"TMP"=%SystemRoot%\TEMP
"USERNAME"=SYSTEM
"windir"=%SystemRoot%
"PSModulePath"=%SystemRoot%\system32\WindowsPowerShell\v1.0\Modules\
"NUMBER_OF_PROCESSORS"=2
"PROCESSOR_LEVEL"=6
"PROCESSOR_IDENTIFIER"=Intel64 Family 6 Model 15 Stepping 13, GenuineIntel
"PROCESSOR_REVISION"=0f0d
"DFSTRACINGON"=FALSE
"NTIPath"=%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;C:\Program Files (x86)\Acer\Empowering Technology\eDataSecurity\;C:\Program Files (x86)\Acer\Empowering Technology\eDataSecurity\x86;C:\Program Files (x86)\Acer\Empowering Technology\eDataSecurity\x64
"Path"=%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\system32\wbem;C:\Program Files (x86)\Acer\Empowering Technology\eDataSecurity;C:\Program Files (x86)\Acer\Empowering Technology\eDataSecurity\x86;C:\Program Files (x86)\Acer\Empowering Technology\eDataSecurity\x64;c:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static;C:\Program Files (x86)\QuickTime\QTSystem;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\QuickTime\QTSystem\
"TRACE_FORMAT_SEARCH_PATH"=\\NTREL202.ntdev.corp.microsoft.com\34FB5F65-FFEB-4B61-BF0E-A6A76C450FAA\TraceFormat
"CLASSPATH"=.;C:\Program Files (x86)\Java\jre6\lib\ext\QTJava.zip
"QTJAVA"=C:\Program Files (x86)\Java\jre6\lib\ext\QTJava.zip

-----------------EOF-----------------

Voici la suite...

info.txt logfile of random's system information tool 1.06 2010-01-12 18:52:41

======Uninstall list======

-->C:\Program Files (x86)\Nero\Nero 7\\nero\uninstall\UNNERO.exe /UNINSTALL
-->C:\Windows\UNNeroBackItUp.exe /UNINSTALL
-->C:\Windows\UNNeroMediaHome.exe /UNINSTALL
-->C:\Windows\UNNeroShowTime.exe /UNINSTALL
-->C:\Windows\UNNeroVision.exe /UNINSTALL
-->C:\Windows\UNRecode.exe /UNINSTALL
-->RunDll32 C:\PROGRA~2\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files (x86)\InstallShield Installation Information\{D43F13A1-1E39-4BD4-9682-DF889FE75421}\setup.exe" -l0x40c
-->RunDll32 C:\PROGRA~2\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files (x86)\InstallShield Installation Information\{A82F10CB-18B5-4EAC-AEF2-FA49CD565626}\setup.exe" -l0x9
-->RunDll32 C:\PROGRA~2\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files (x86)\InstallShield Installation Information\{E5ABA5FD-EE3D-4F15-895D-B32321E6C96B}\setup.exe" -l0x9
µTorrent-->"C:\Program Files (x86)\uTorrent\uTorrent.exe" /UNINSTALL
7x8 version 0.96.04 configuré pour la maison-->"C:\Program Files (x86)\7x8\unins000.exe"
7-Zip 4.65-->"C:\Program Files (x86)\7-Zip\Uninstall.exe"
Acer Arcade Live Main Page-->RunDll32 C:\PROGRA~2\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files (x86)\InstallShield Installation Information\{EFBDC2B0-FAA8-4B78-8DE1-AEBE7958FA37}\Setup.exe" -uninstall
Acer DV Magician-->RunDll32 C:\PROGRA~2\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files (x86)\InstallShield Installation Information\{F6EFFB76-4A07-11DA-9D78-000129760D75}\Setup.exe" -uninstall
Acer DVDivine-->RunDll32 C:\PROGRA~2\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files (x86)\InstallShield Installation Information\{B145EC69-66F5-11D8-9D75-000129760D75}\Setup.exe" -uninstall
Acer eDataSecurity Management-->C:\Program Files (x86)\Acer\Empowering Technology\eDataSecurity\x86\eDSnstHelper.exe -Operation UNINSTALL
Acer Empowering Technology-->"C:\Program Files (x86)\InstallShield Installation Information\{8F1B6239-FEA0-450A-A950-B05276CE177C}\setup.exe" -runfromtemp -l0x040c -removeonly
Acer eSettings Management-->"C:\Program Files (x86)\InstallShield Installation Information\{13D85C14-2B85-419F-AC41-C7F21E68B25D}\setup.exe" -runfromtemp -l0x040c -removeonly
Acer GameZone Console DTV 2.0.1.1-->"C:\Program Files (x86)\Acer GameZone\GameConsole\unins000.exe"
Acer HomeMedia Connect-->RunDll32 C:\PROGRA~2\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files (x86)\InstallShield Installation Information\{132888AE-EF67-41C5-BCA2-7D5D2488AB63}\Setup.exe" -uninstall
Acer HomeMedia Trial Creator-->RunDll32 C:\PROGRA~2\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files (x86)\InstallShield Installation Information\{B580C409-E16F-44FF-904D-3AE94E113BE0}\Setup.exe" -uninstall
Acer HomeMedia-->RunDll32 C:\PROGRA~2\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files (x86)\InstallShield Installation Information\{AA4BF92B-2AAF-11DA-9D78-000129760D75}\Setup.exe" -uninstall
Acer Product Registration-->"C:\Program Files (x86)\InstallShield Installation Information\{DA20E1A8-07CB-4EE7-9B72-A7E28C953F0E}\setup.exe" -runfromtemp -l0x040c -removeonly
Acer ScreenSaver-->RunDll32 C:\PROGRA~2\COMMON~1\INSTAL~1\PROFES~1\RunTime\11\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files (x86)\InstallShield Installation Information\{79DD56FC-DB8B-47F5-9C80-78B62E05F9BC}\setup.exe" -l0x9 -removeonly
Acer SlideShow DVD-->RunDll32 C:\PROGRA~2\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files (x86)\InstallShield Installation Information\{41581EF5-45A7-11DA-9D78-000129760D75}\Setup.exe" -uninstall
Acer VideoMagician-->RunDll32 C:\PROGRA~2\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files (x86)\InstallShield Installation Information\{F79A208D-D929-11D9-9D77-000129760D75}\Setup.exe" -uninstall
Ad-Aware-->"C:\ProgramData\{CFBD8779-FAAB-4357-84F2-1EC8619FADA6}\Ad-AwareInstallation.exe" REMOVE=TRUE MODIFY=FALSE
Ad-Aware-->C:\ProgramData\{CFBD8779-FAAB-4357-84F2-1EC8619FADA6}\Ad-AwareInstallation.exe
Adobe Flash Player 10 ActiveX-->C:\Windows\SysWOW64\Macromed\Flash\uninstall_activeX.exe
Adobe Reader 9.2 - Français-->MsiExec.exe /I{AC76BA86-7AD7-1036-7B44-A92000000001}
Ad-Remover By C_XX-->"C:\Program Files (x86)\Ad-Remover\Uninstall ADR.exe"
Advertising Center-->MsiExec.exe /X{B2EC4A38-B545-4A00-8214-13FE0E915E6D}
Agatha Christie Death on the Nile-->"C:\Program Files (x86)\Acer GameZone\Agatha Christie Death on the Nile\Uninstall.exe" "C:\Program Files (x86)\Acer GameZone\Agatha Christie Death on the Nile\install.log"
Alice Greenfingers-->"C:\Program Files (x86)\Acer GameZone\Alice Greenfingers\Uninstall.exe" "C:\Program Files (x86)\Acer GameZone\Alice Greenfingers\install.log"
ALTools Update-->"C:\Program Files (x86)\ESTsoft\ALUpdate\unins000.exe"
Analyseur et SDK MSXML 4.0 SP2-->MsiExec.exe /I{716E0306-8318-4364-8B8F-0CC4E9376BAC}
Apple Application Support-->MsiExec.exe /I{3FA365DF-2D68-45ED-8F83-8C8A33E65143}
Apple Software Update-->MsiExec.exe /I{6956856F-B6B3-4BE0-BA0B-8F495BE32033}
Aspell French Dictionary-0.50-3-->"C:\Program Files (x86)\Aspell\unins002.exe"
Aspell Spanish Dictionary-0.50-2-->"C:\Program Files (x86)\Aspell\unins001.exe"
a-squared Free 4.5-->"C:\Program Files (x86)\a-squared Free\unins000.exe"
Assistant de connexion Windows Live-->MsiExec.exe /I{D3116CC7-24DC-4CA3-9CE1-23FED836E9F2}
Avira AntiVir Personal - Free Antivirus-->C:\Program Files (x86)\Avira\AntiVir Desktop\setup.exe /REMOVE
Azada-->"C:\Program Files (x86)\Acer GameZone\Azada\Uninstall.exe" "C:\Program Files (x86)\Acer GameZone\Azada\install.log"
Babylon-->C:\Program Files (x86)\Babylon\Babylon-Pro\Utils\uninstbb.exe
Bibliothèques GTK+ 2.14.7 rev a (supprimer uniquement)-->C:\Program Files (x86)\Common Files\GTK\2.0\uninst.exe
Big Kahuna Reef-->"C:\Program Files (x86)\Acer GameZone\Big Kahuna Reef\Uninstall.exe" "C:\Program Files (x86)\Acer GameZone\Big Kahuna Reef\install.log"
Brain Games-->RunDll32 C:\PROGRA~2\COMMON~1\INSTAL~1\PROFES~1\RunTime\0700\Intel32\Ctor.dll,LaunchSetup "C:\Program Files (x86)\InstallShield Installation Information\{1BAA0A5F-0FBE-4F86-AC82-8EDE9D6D5717}\Setup.exe" -l0xa
Brother HL-5040-->"C:\Program Files (x86)\Brother\BRHL5040\IsUn040c.exe" -f"C:\Program Files (x86)\Brother\BRHL5040\DeIsL3.isu" -cbruninst.dll
Cake Mania-->"C:\Program Files (x86)\Acer GameZone\Cake Mania\Uninstall.exe" "C:\Program Files (x86)\Acer GameZone\Cake Mania\install.log"
Catalyst Control Center - Branding-->MsiExec.exe /I{3594EE90-B157-4519-9E82-8B6F4711A0A1}
CCleaner-->"C:\Program Files (x86)\CCleaner\uninst.exe"
Chicken Invaders 3-->"C:\Program Files (x86)\Acer GameZone\Chicken Invaders 3\Uninstall.exe" "C:\Program Files (x86)\Acer GameZone\Chicken Invaders 3\install.log"
Chuzzle-->"C:\Program Files (x86)\Acer GameZone\Chuzzle\Uninstall.exe" "C:\Program Files (x86)\Acer GameZone\Chuzzle\install.log"
Clavier+ 10.6.1-->"C:\Users\Croûtons\AppData\Local\Clavier+\unins000.exe"
Cobian Backup 9-->C:\Program Files (x86)\Cobian Backup 9\cbUninstall.exe
Crawler Desktop Notes-->"C:\Program Files (x86)\Crawler\Notes\unins000.exe"
Creative PC-CAM Center Lite-->RunDll32 C:\PROGRA~2\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files (x86)\InstallShield Installation Information\{D43F13A1-1E39-4BD4-9682-DF889FE75421}\setup.exe" -l0x40c /remove
Creative WebCam Center-->RunDll32 C:\PROGRA~2\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files (x86)\InstallShield Installation Information\{E5ABA5FD-EE3D-4F15-895D-B32321E6C96B}\setup.exe" -l0x9 /remove
Des volcans dans le feu de l’action 1.0-->"C:\Program Files (x86)\La Science Interactive\Des volcans dans le feu de l’action\unins000.exe"
DICCIONARIO CLAVE-->C:\Windows\DICCIONARIO CLAVE Uninstaller.exe
Diccionario de uso del Español Actual-->"C:\Program Files (x86)\sgel\diccionario\unins000.exe"
Dictionnaire Freelang (liste de mots)-->"C:\Users\Croûtons\AppData\Local\Dictionnaire Freelang\unins001.exe"
Dictionnaire Freelang 3.74 beta-->"C:\Users\Croûtons\AppData\Local\Dictionnaire Freelang\unins000.exe"
Diner Dash Flo on the Go-->"C:\Program Files (x86)\Acer GameZone\Diner Dash Flo on the Go\Uninstall.exe" "C:\Program Files (x86)\Acer GameZone\Diner Dash Flo on the Go\install.log"
DRAE-->"C:\Program Files (x86)\DRAE\UninstallerData\Uninstall DRAE.exe"
Driver Detective-->MsiExec.exe /X{4640FDE1-B83A-4376-84ED-86F86BEE2D41}
Driver Genius Professional Edition-->"C:\Program Files (x86)\Driver-Soft\DriverGenius\unins000.exe"
eMule-->"C:\Program Files (x86)\eMule\Uninstall.exe"
ESET Online Scanner v3-->C:\Program Files (x86)\ESET\ESET Online Scanner\OnlineScannerUninstaller.exe
Files-Destructor 1.0-->"C:\Program Files (x86)\Files-Destructor\unins000.exe"
FileZilla Client 3.3.1-->C:\Program Files (x86)\FileZilla FTP Client\uninstall.exe
Folding@home-x86-->MsiExec.exe /I{6B755EC3-C709-4F5C-BC58-BC0D3967B6B6}
Free PDF to Word Doc Converter v1.1-->"C:\Program Files (x86)\Free PDF to Word Doc Converter\unins000.exe"
Galerie de photos Windows Live-->MsiExec.exe /X{B131E59D-202C-43C6-84C9-68F0C37541F1}
GIMP 2.6.7-->"C:\Program Files (x86)\GIMP-2.0\setup\unins000.exe"
Glary Undelete 1.6.0.262-->"C:\Program Files (x86)\Glary Undelete\unins000.exe"
Glary Utilities 2.18.0.786-->"C:\Program Files (x86)\Glary Utilities\unins000.exe"
GNU Aspell 0.50-3-->"C:\Program Files (x86)\Aspell\unins000.exe"
Google Desktop-->C:\Program Files (x86)\Google\Google Desktop Search\GoogleDesktopSetup.exe -uninstall
Google Toolbar for Internet Explorer-->"C:\Program Files (x86)\Google\Google Toolbar\Component\GoogleToolbarManager_0E996B068B56FCA2.exe" /uninstall
Google Toolbar for Internet Explorer-->MsiExec.exe /I{18455581-E099-4BA8-BC6B-F34B2F06600C}
Google Update Helper-->MsiExec.exe /I{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}
Google Earth-->MsiExec.exe /X{C084BC61-E537-11DE-8616-005056806466}
greenstreet CalendarMaker-->C:\Windows\IsUn040c.exe -f"C:\Program Files (x86)\greenstreet\CalendarMaker\Uninst.isu"
Groobax-->"C:\Program Files (x86)\Groobax\unins000.exe"
Hercules Classic Link Webcam-->C:\Program Files (x86)\InstallShield Installation Information\{FD4FE0F7-91FC-43A2-9C3A-187553991FFF}\setup.exe -runfromtemp -l0x040c -removeonly
HijackThis 2.0.2-->"C:\Program Files (x86)\trend micro\HijackThis.exe" /uninstall
IncrediMail 2.0-->C:\Program Files (x86)\IncrediMail\Bin\ImSetup.exe /uninstallProduct /addon:incredimail
IncrediMail-->MsiExec.exe /X{5E97F3BD-CDDC-4188-9D98-532E14FABB5D}
Installation Windows Live-->C:\Program Files (x86)\Windows Live\Installer\wlarp.exe
Installation Windows Live-->MsiExec.exe /I{46ABBC54-1872-4AA3-95E2-F2C063A63F31}
iTrad Démo v2.5-->C:\Program Files (x86)\iKoneStudio\iTrad\Uninstaldemo.exe
IZArc 4.0 beta 1-->"C:\Program Files (x86)\IZArc\unins000.exe"
Java(TM) 6 Update 16-->MsiExec.exe /X{26A24AE4-039D-4CA4-87B4-2F83216016F0}
Java(TM) 6 Update 17-->MsiExec.exe /X{26A24AE4-039D-4CA4-87B4-2F83216014FF}
Jewel Quest Solitaire-->"C:\Program Files (x86)\Acer GameZone\Jewel Quest Solitaire\Uninstall.exe" "C:\Program Files (x86)\Acer GameZone\Jewel Quest Solitaire\install.log"
Junk Mail filter update-->MsiExec.exe /I{E2DFE069-083E-4631-9B6C-43C48E991DE5}
KC Softwares SUMo-->"C:\Program Files (x86)\KC Softwares\SUMo\unins000.exe"
Kick N Rush-->"C:\Program Files (x86)\Acer GameZone\Kick N Rush\Uninstall.exe" "C:\Program Files (x86)\Acer GameZone\Kick N Rush\install.log"
Linguae 0.10 Beta-->"C:\Program Files (x86)\Linguae\unins000.exe"
Macromedia Dreamweaver 8-->MsiExec.exe /I{5FD788ED-1A37-4496-9BDD-463F493B27FA}
Macromedia Extension Manager-->MsiExec.exe /I{3C8C9FB3-5FDF-40B4-B314-EAD722728C76}
Macromedia Fireworks 8-->MsiExec.exe /I{4C24A8C1-7CFA-4650-AF15-732F5BD7B46D}
Macromedia Flash 8 Video Encoder-->MsiExec.exe /X{8BF2C401-02CE-424D-BC26-6C4F9FB446B6}
Macromedia Flash 8-->MsiExec.exe /I{2BD5C305-1B27-4D41-B690-7A61172D2FEB}
Mahjong Escape Ancient China-->"C:\Program Files (x86)\Acer GameZone\Mahjong Escape Ancient China\Uninstall.exe" "C:\Program Files (x86)\Acer GameZone\Mahjong Escape Ancient China\install.log"
Malwarebytes' Anti-Malware-->"C:\Program Files (x86)\Malwarebytes' Anti-Malware\unins000.exe"
Manuel d'utilisation de Creative WebCam NX (Français)-->C:\Windows\IsUn040c.exe -f"C:\Program Files (x86)\Creative\Creative WebCam NX\Manuel d'utilisation de Creative WebCam NX\French\CTManual.isu"
Microsoft Choice Guard-->MsiExec.exe /X{F0E12BBA-AD66-4022-A453-A1C8A0C4D570}
Microsoft Office XP Professional avec FrontPage-->MsiExec.exe /I{9028040C-6000-11D3-8CFE-0050048383C9}
Microsoft SQL Server 2005 Compact Edition [ENU]-->MsiExec.exe /I{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053-->MsiExec.exe /X{770657D0-A123-3C07-8E44-1C83EC895118}
Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{837b34e3-7c30-493c-8f6a-2b0f04e2912c}
Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148-->MsiExec.exe /X{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17-->MsiExec.exe /X{9A25302D-30C0-39D9-BD6F-21E6EC160475}
Microsoft Works-->MsiExec.exe /I{6B1CB38D-E2E4-4A30-933D-EFDEBA76AD9C}
Module de compatibilité pour Microsoft Office System 2007-->MsiExec.exe /X{90120000-0020-040C-0000-0000000FF1CE}
Mozilla Firefox (3.6)-->C:\Program Files (x86)\Mozilla Firefox 3.6 Beta 1\uninstall\helper.exe
Mozilla Thunderbird (2.0.0.23)-->C:\Program Files (x86)\Mozilla Thunderbird\uninstall\helper.exe
MSVCRT-->MsiExec.exe /I{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}
MSXML 4.0 SP2 (KB954430)-->MsiExec.exe /I{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
MSXML 4.0 SP2 (KB973688)-->MsiExec.exe /I{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}
Mystery Case Files - Huntsville-->"C:\Program Files (x86)\Acer GameZone\Mystery Case Files - Huntsville\Uninstall.exe" "C:\Program Files (x86)\Acer GameZone\Mystery Case Files - Huntsville\install.log"
Mystery Solitaire - Secret Island-->"C:\Program Files (x86)\Acer GameZone\Mystery Solitaire - Secret Island\Uninstall.exe" "C:\Program Files (x86)\Acer GameZone\Mystery Solitaire - Secret Island\install.log"
Nero 7 Ultra Edition-->MsiExec.exe /I{43FFE159-3199-4188-A1CD-629166AD1036}
Nero 9 Essentials-->C:\Program Files (x86)\Common Files\Nero\Nero ProductInstaller 4\SetupX.exe REMOVESERIALNUMBER="XM02-508X-MHAT-19WU-9Z3Z-0CH0-3U6E-85W5-MMHH-6647-1Z5L-7M8C-0U45-758P-0000"
Nero 9 Lite-->C:\Program Files (x86)\Common Files\Nero\Nero ProductInstaller 4\SetupX.exe REMOVESERIALNUMBER="XM2C-50A9-HH4M-0ZM8-4X06-9P25-5A46-618P-AH19-6647"
Nero ControlCenter-->MsiExec.exe /X{BD5CA0DA-71AD-43DA-B19E-6EEE0C9ADC9A}
Nero Installer-->MsiExec.exe /X{E8A80433-302B-4FF1-815D-FCC8EAC482FF}
Nero Online Upgrade-->MsiExec.exe /X{C81A2FE0-3574-00A9-CED4-BDAA334CBE8E}
Nero StartSmart OEM-->MsiExec.exe /X{4D43D635-6FDA-4fa5-AA9B-23CF73D058EA}
Nero StartSmart-->MsiExec.exe /X{7748AC8C-18E3-43BB-959B-088FAEA16FB2}
neroxml-->MsiExec.exe /I{56C049BE-79E9-4502-BEA7-9754A3E60F9B}
NTI Photo Maker Hot Fix-->C:\Program Files (x86)\InstallShield Installation Information\{B9B02A9E-8074-4C3F-AAE5-311528F34FED}\setup.exe -runfromtemp -l0x040c
OpenOffice.org 3.1-->MsiExec.exe /I{0FA44E79-CD7D-4E8D-A2EE-26FE05F509B6}
Opera 10.00-->MsiExec.exe /X{2085F05D-24C5-4E27-B7B4-A51DE890FFC9}
Outil de téléchargement Windows Live-->MsiExec.exe /I{205C6BDD-7B73-42DE-8505-9A093F35A238}
Panda ActiveScan 2.0-->C:\Program Files (x86)\Panda Security\ActiveScan 2.0\as2uninst.exe
PC SECURITY TEST 2009-->"C:\Program Files (x86)\AxBx\PC Security Test 2009\unins000.exe"
PDFCreator-->C:\Program Files (x86)\PDFCreator\unins000.exe
Petit Larousse 2010-->RunDll32 C:\PROGRA~2\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files (x86)\InstallShield Installation Information\{422FADA9-FED2-41D7-B5FA-472BB98B7784}\Setup.exe" -l0x40c
Photo to Sketch Pro 3.6-->"C:\Program Files (x86)\Photo to Sketch Pro\unins000.exe"
PhotoFiltre-->"C:\Program Files (x86)\PhotoFiltre\Uninst.exe"
PhotoMail Maker-->MsiExec.exe /X{15382D89-6EF6-4D21-9484-B500F2B10E46}
PhotoMail Maker-->MsiExec.exe /X{15382D89-6EF6-4D21-9484-B500F2B10E46} ARPVAL="UnInst" /qf /L*V "%temp%\PhotoMailUninstallLog.log"
Picasa 3-->"C:\Program Files (x86)\Google\Picasa3\Uninstall.exe"
Pixia-->"C:\Program Files (x86)\InstallShield Installation Information\{A0BCF90F-B4E4-435C-A48D-8FAAE10554F9}\setup.exe" -runfromtemp -l0x0009 -removeonly
Q-Dir-->C:\Program Files (x86)\Q-Dir\Q-Dir.exe -uninstall
QuickTime-->MsiExec.exe /I{1451DE6B-ABE1-4F62-BE9A-B363A17588A2}
RapidTyping-->"C:\Program Files (x86)\RapidTyping\Uninstall.exe"
RAR Recovery Toolbox 1.1-->"C:\Program Files (x86)\RAR Recovery Toolbox\unins000.exe"
Realtek High Definition Audio Driver-->RtlUpd64.exe -r -m -nrg2709
Revo Uninstaller 1.85-->C:\Program Files (x86)\VS Revo Group\Revo Uninstaller\uninst.exe
Sauvegarde Distante-->"C:\PCStreet\unins000.exe"
Spybot - Search & Destroy-->"C:\Program Files (x86)\Spybot - Search & Destroy\unins000.exe"
Spyware Terminator-->"C:\Program Files (x86)\Spyware Terminator\unins000.exe"
Supercow Deluxe-->C:\Program Files (x86)\Supercow Deluxe\Uninstal.exe
SyncBack-->"C:\Program Files (x86)\2BrightSparks\SyncBack\unins000.exe"
Traductor Global 2.0-->"C:\Program Files (x86)\Traduce Gratis\unins000.exe"
TuneUp Utilities 2007-->MsiExec.exe /I{C8BB4912-12D9-42AE-B571-E580D8CD1B5B}
Turbo Pizza-->"C:\Program Files (x86)\Acer GameZone\Turbo Pizza\Uninstall.exe" "C:\Program Files (x86)\Acer GameZone\Turbo Pizza\install.log"
Unlocker 1.8.8-->C:\Program Files (x86)\Unlocker\uninst.exe
Upgrade Kit-->"C:\Program Files (x86)\InstallShield Installation Information\{1D0FDD6D-3C5E-4588-8ED0-02DC88014BF2}\setup.exe" -runfromtemp -l0x040c -removeonly
VirusTotal Uploader 2.0-->"C:\Program Files (x86)\VirusTotalUploader2\uninstall.exe"
vlnet1.com - SiteVacuum-->C:\Program Files (x86)\EasySearch\uninst.exe
WampServer 2.0-->"c:\wamp\unins000.exe"
Web Acappella-->"C:\Program Files (x86)\Intuisphere\Web Acappella\unins000.exe"
Windows Live Call-->MsiExec.exe /I{82C7B308-0BDD-49D8-8EA5-9CD3A3F9DF41}
Windows Live Communications Platform-->MsiExec.exe /I{ED00D08A-3C5F-488D-93A0-A04F21F23956}
Windows Live FolderShare-->MsiExec.exe /X{2075CB0A-D26F-4DAA-B424-5079296B43BA}
Windows Live Mail-->MsiExec.exe /I{5DD76286-9BE7-4894-A990-E905E91AC818}
Windows Live Messenger-->MsiExec.exe /X{770F1BEC-2871-4E70-B837-FB8525FFA3B1}
XnView 1.96.5-->"C:\Program Files (x86)\XnView\unins000.exe"
xplorer² lite-->"C:\Program Files (x86)\zabkat\xplorer2_lite\Uninstall.exe"
ZikiTranslator 1.3.6a-->C:\Program Files (x86)\ZikiTranslator\uninst.exe
Zuma Deluxe-->"C:\Program Files (x86)\Acer GameZone\Zuma Deluxe\Uninstall.exe" "C:\Program Files (x86)\Acer GameZone\Zuma Deluxe\install.log"

======Hosts File======

127.0.0.1 localhost
::1 localhost

======Security center information======

AS: Spybot - Search and Destroy (disabled)
AS: Spyware Terminator (disabled)

======System event log======

Computer Name: PC-BARREAU
Event Code: 51
Message: Une erreur a été détectée sur le périphérique \Device\Harddisk3\DR3 lors d'une opération de pagination.
Record Number: 166209
Source Name: Disk
Time Written: 20091229164539.640000-000
Event Type: Avertissement
User:

Computer Name: PC-BARREAU
Event Code: 51
Message: Une erreur a été détectée sur le périphérique \Device\Harddisk3\DR3 lors d'une opération de pagination.
Record Number: 166208
Source Name: Disk
Time Written: 20091229164539.640000-000
Event Type: Avertissement
User:

Computer Name: PC-BARREAU
Event Code: 51
Message: Une erreur a été détectée sur le périphérique \Device\Harddisk3\DR3 lors d'une opération de pagination.
Record Number: 166207
Source Name: Disk
Time Written: 20091229164539.640000-000
Event Type: Avertissement
User:

Computer Name: PC-BARREAU
Event Code: 51
Message: Une erreur a été détectée sur le périphérique \Device\Harddisk3\DR3 lors d'une opération de pagination.
Record Number: 166206
Source Name: Disk
Time Written: 20091229164539.640000-000
Event Type: Avertissement
User:

Computer Name: PC-BARREAU
Event Code: 51
Message: Une erreur a été détectée sur le périphérique \Device\Harddisk3\DR3 lors d'une opération de pagination.
Record Number: 166205
Source Name: Disk
Time Written: 20091229164539.640000-000
Event Type: Avertissement
User:

=====Application event log=====

Computer Name: PC-BARREAU
Event Code: 1002
Message: Valeur inattendue ou absente (nom : ‘PackageCode’, valeur : ‘’) dans la clé ‘HKLM\Software\Classes\Installer\Products\5DBE8E079C8785242BA00589CC0A000F’
Record Number: 1204
Source Name: MsiInstaller
Time Written: 20090714093042.000000-000
Event Type: Erreur
User: AUTORITE NT\Système

Computer Name: PC-BARREAU
Event Code: 1002
Message: Valeur inattendue ou absente (nom : ‘PackageCode’, valeur : ‘’) dans la clé ‘HKLM\Software\Classes\Installer\Products\5DBE8E079C8785242BA00589CC0A000F’
Record Number: 1187
Source Name: MsiInstaller
Time Written: 20090714091903.000000-000
Event Type: Erreur
User: AUTORITE NT\Système

Computer Name: PC-BARREAU
Event Code: 1002
Message: Valeur inattendue ou absente (nom : ‘PackageCode’, valeur : ‘’) dans la clé ‘HKLM\Software\Classes\Installer\Products\5DBE8E079C8785242BA00589CC0A000F’
Record Number: 1161
Source Name: MsiInstaller
Time Written: 20090714084548.000000-000
Event Type: Erreur
User: PC-BARREAU\Croûtons

Computer Name: PC-BARREAU
Event Code: 10
Message: Le filtre d’événement avec la requête « SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99 » n’a pas pu être réactivé dans l’espace de noms « //./root/CIMV2 » à cause de l’erreur 0x80041003. Les événements ne peuvent pas être délivrés à travers ce filtre tant que le problème ne sera pas corrigé.
Record Number: 1132
Source Name: Microsoft-Windows-WMI
Time Written: 20090714074417.000000-000
Event Type: Erreur
User:

Computer Name: PC-BARREAU
Event Code: 1008
Message:
Record Number: 1127
Source Name: Microsoft-Windows-Search
Time Written: 20090714074412.000000-000
Event Type: Avertissement
User:

=====Security event log=====

Computer Name: PC-BARREAU
Event Code: 4907
Message: Les paramètres d’audit sur l’objet ont changé.

Sujet :
ID de sécurité : S-1-5-18
Nom du compte : PC-BARREAU$
Domaine du compte : WORKGROUP
ID d’ouverture de session : 0x3e7

Objet :
Serveur de l’objet : Security
Type d’objet : File
Nom de l’objet : C:\Users\Croûtons\Favorites\Site en construction\Script PHP et PERL gratuit, e-commerce RAYNETTE.URL
ID du handle : 0x788

Informations sur le processus :
ID du processus : 0x31c
Nom du processus : C:\Windows\System32\oobe\Setup.exe

Paramètres d’audit :
Descripteur de sécurité d’origine : S:AI
Nouveau descripteur de sécurité :
Record Number: 20629
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20091112195632.744400-000
Event Type: Succès de l’audit
User:

Computer Name: PC-BARREAU
Event Code: 4907
Message: Les paramètres d’audit sur l’objet ont changé.

Sujet :
ID de sécurité : S-1-5-18
Nom du compte : PC-BARREAU$
Domaine du compte : WORKGROUP
ID d’ouverture de session : 0x3e7

Objet :
Serveur de l’objet : Security
Type d’objet : File
Nom de l’objet : C:\Users\Croûtons\Favorites\Site en construction\Script PHP et PERL gratuit, e-commerce RAYNETTE.URL
ID du handle : 0x788

Informations sur le processus :
ID du processus : 0x31c
Nom du processus : C:\Windows\System32\oobe\Setup.exe

Paramètres d’audit :
Descripteur de sécurité d’origine : S:AI
Nouveau descripteur de sécurité :
Record Number: 20628
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20091112195632.744400-000
Event Type: Succès de l’audit
User:

Computer Name: PC-BARREAU
Event Code: 4907
Message: Les paramètres d’audit sur l’objet ont changé.

Sujet :
ID de sécurité : S-1-5-18
Nom du compte : PC-BARREAU$
Domaine du compte : WORKGROUP
ID d’ouverture de session : 0x3e7

Objet :
Serveur de l’objet : Security
Type d’objet : File
Nom de l’objet : C:\Users\Croûtons\Favorites\Site en construction\Script Masters Script Javascript, Php, MySQL pour Webmasters.URL
ID du handle : 0x788

Informations sur le processus :
ID du processus : 0x31c
Nom du processus : C:\Windows\System32\oobe\Setup.exe

Paramètres d’audit :
Descripteur de sécurité d’origine : S:AI
Nouveau descripteur de sécurité :
Record Number: 20627
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20091112195632.744400-000
Event Type: Succès de l’audit
User:

Computer Name: PC-BARREAU
Event Code: 4907
Message: Les paramètres d’audit sur l’objet ont changé.

Sujet :
ID de sécurité : S-1-5-18
Nom du compte : PC-BARREAU$
Domaine du compte : WORKGROUP
ID d’ouverture de session : 0x3e7

Objet :
Serveur de l’objet : Security
Type d’objet : File
Nom de l’objet : C:\Users\Croûtons\Favorites\Site en construction\Script Masters Script Javascript, Php, MySQL pour Webmasters.URL
ID du handle : 0x788

Informations sur le processus :
ID du processus : 0x31c
Nom du processus : C:\Windows\System32\oobe\Setup.exe

Paramètres d’audit :
Descripteur de sécurité d’origine : S:AI
Nouveau descripteur de sécurité :
Record Number: 20626
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20091112195632.744400-000
Event Type: Succès de l’audit
User:

Computer Name: PC-BARREAU
Event Code: 4907
Message: Les paramètres d’audit sur l’objet ont changé.

Sujet :
ID de sécurité : S-1-5-18
Nom du compte : PC-BARREAU$
Domaine du compte : WORKGROUP
ID d’ouverture de session : 0x3e7

Objet :
Serveur de l’objet : Security
Type d’objet : File
Nom de l’objet : C:\Users\Croûtons\Favorites\Site en construction\PHPmx Dreamweaver dynamique avec PHP PHPmx, Dreamweaver dynamique avec PHP.URL
ID du handle : 0x788

Informations sur le processus :
ID du processus : 0x31c
Nom du processus : C:\Windows\System32\oobe\Setup.exe

Paramètres d’audit :
Descripteur de sécurité d’origine : S:AI
Nouveau descripteur de sécurité :
Record Number: 20625
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20091112195632.728800-000
Event Type: Succès de l’audit
User:

======Environment variables======

"ComSpec"=%SystemRoot%\system32\cmd.exe
"FP_NO_HOST_CHECK"=NO
"OS"=Windows_NT
"PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC
"PROCESSOR_ARCHITECTURE"=AMD64
"TEMP"=%SystemRoot%\TEMP
"TMP"=%SystemRoot%\TEMP
"USERNAME"=SYSTEM
"windir"=%SystemRoot%
"PSModulePath"=%SystemRoot%\system32\WindowsPowerShell\v1.0\Modules\
"NUMBER_OF_PROCESSORS"=2
"PROCESSOR_LEVEL"=6
"PROCESSOR_IDENTIFIER"=Intel64 Family 6 Model 15 Stepping 13, GenuineIntel
"PROCESSOR_REVISION"=0f0d
"DFSTRACINGON"=FALSE
"NTIPath"=%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;C:\Program Files (x86)\Acer\Empowering Technology\eDataSecurity\;C:\Program Files (x86)\Acer\Empowering Technology\eDataSecurity\x86;C:\Program Files (x86)\Acer\Empowering Technology\eDataSecurity\x64
"Path"=%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\system32\wbem;C:\Program Files (x86)\Acer\Empowering Technology\eDataSecurity;C:\Program Files (x86)\Acer\Empowering Technology\eDataSecurity\x86;C:\Program Files (x86)\Acer\Empowering Technology\eDataSecurity\x64;c:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static;C:\Program Files (x86)\QuickTime\QTSystem;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\QuickTime\QTSystem\
"TRACE_FORMAT_SEARCH_PATH"=\\NTREL202.ntdev.corp.microsoft.com\34FB5F65-FFEB-4B61-BF0E-A6A76C450FAA\TraceFormat
"CLASSPATH"=.;C:\Program Files (x86)\Java\jre6\lib\ext\QTJava.zip
"QTJAVA"=C:\Program Files (x86)\Java\jre6\lib\ext\QTJava.zip

-----------------EOF-----------------

Excuse-moi, tu es encore là ce soir ? c'est pour savoir si je dois veiller ou pas...

Malwarebytes' Anti-Malware 1.44
Version de la base de données: 3553
Windows 6.1.7600
Internet Explorer 8.0.7600.16385

13/01/2010 18:07:14
mbam-log-2010-01-13 (18-07-14).txt

Type de recherche: Examen complet (C:\|D:\|)
Eléments examinés: 349035
Temps écoulé: 51 minute(s), 21 second(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 0
Valeur(s) du Registre infectée(s): 0
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 1

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Valeur(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)

Dossier(s) infecté(s):
(Aucun élément nuisible détecté)

Fichier(s) infecté(s):
C:\32788R22FWJFW\Combo-Fix.sys (Malware.Trace) -> Quarantined and deleted successfully.

Avira AntiVir Personal
Report file date: mercredi 13 janvier 2010 18:30

Scanning for 1525533 virus strains and unwanted programs.

Licensee : Avira AntiVir Personal - FREE Antivirus
Serial number : 0000149996-ADJIE-0000001
Platform : Windows Vista 64 Bit
Windows version : (plain) [6.1.7600]
Boot mode : Normally booted
Username : Système
Computer name : PC-BARREAU

Version information:
BUILD.DAT : 9.0.0.418 21723 Bytes 02/12/2009 16:28:00
AVSCAN.EXE : 9.0.3.10 466689 Bytes 13/10/2009 10:26:33
AVSCAN.DLL : 9.0.3.0 40705 Bytes 27/02/2009 09:58:24
LUKE.DLL : 9.0.3.2 209665 Bytes 20/02/2009 10:35:49
LUKERES.DLL : 9.0.2.0 12033 Bytes 27/02/2009 09:58:52
VBASE000.VDF : 7.10.0.0 19875328 Bytes 06/11/2009 06:35:52
VBASE001.VDF : 7.10.1.0 1372672 Bytes 19/11/2009 01:29:01
VBASE002.VDF : 7.10.1.1 2048 Bytes 19/11/2009 01:29:01
VBASE003.VDF : 7.10.1.2 2048 Bytes 19/11/2009 01:29:01
VBASE004.VDF : 7.10.1.3 2048 Bytes 19/11/2009 01:29:01
VBASE005.VDF : 7.10.1.4 2048 Bytes 19/11/2009 01:29:01
VBASE006.VDF : 7.10.1.5 2048 Bytes 19/11/2009 01:29:01
VBASE007.VDF : 7.10.1.6 2048 Bytes 19/11/2009 01:29:01
VBASE008.VDF : 7.10.1.7 2048 Bytes 19/11/2009 01:29:01
VBASE009.VDF : 7.10.1.8 2048 Bytes 19/11/2009 01:29:02
VBASE010.VDF : 7.10.1.9 2048 Bytes 19/11/2009 01:29:02
VBASE011.VDF : 7.10.1.10 2048 Bytes 19/11/2009 01:29:02
VBASE012.VDF : 7.10.1.11 2048 Bytes 19/11/2009 01:29:02
VBASE013.VDF : 7.10.1.79 209920 Bytes 25/11/2009 01:29:03
VBASE014.VDF : 7.10.1.128 197632 Bytes 30/11/2009 01:29:04
VBASE015.VDF : 7.10.1.178 195584 Bytes 07/12/2009 01:29:06
VBASE016.VDF : 7.10.1.224 183296 Bytes 14/12/2009 01:29:07
VBASE017.VDF : 7.10.1.247 182272 Bytes 15/12/2009 01:29:08
VBASE018.VDF : 7.10.2.30 198144 Bytes 21/12/2009 01:29:09
VBASE019.VDF : 7.10.2.63 187392 Bytes 24/12/2009 01:29:09
VBASE020.VDF : 7.10.2.93 195072 Bytes 29/12/2009 01:29:10
VBASE021.VDF : 7.10.2.131 201216 Bytes 07/01/2010 01:29:13
VBASE022.VDF : 7.10.2.158 192000 Bytes 11/01/2010 09:56:03
VBASE023.VDF : 7.10.2.159 2048 Bytes 11/01/2010 09:56:03
VBASE024.VDF : 7.10.2.160 2048 Bytes 11/01/2010 09:56:04
VBASE025.VDF : 7.10.2.161 2048 Bytes 11/01/2010 09:56:04
VBASE026.VDF : 7.10.2.162 2048 Bytes 11/01/2010 09:56:05
VBASE027.VDF : 7.10.2.163 2048 Bytes 11/01/2010 09:56:05
VBASE028.VDF : 7.10.2.164 2048 Bytes 11/01/2010 09:56:05
VBASE029.VDF : 7.10.2.165 2048 Bytes 11/01/2010 09:56:06
VBASE030.VDF : 7.10.2.166 2048 Bytes 11/01/2010 09:56:06
VBASE031.VDF : 7.10.2.176 145408 Bytes 13/01/2010 09:55:59
Engineversion : 8.2.1.134
AEVDF.DLL : 8.1.1.2 106867 Bytes 08/11/2009 06:38:52
AESCRIPT.DLL : 8.1.3.7 594296 Bytes 08/01/2010 01:29:23
AESCN.DLL : 8.1.3.0 127348 Bytes 08/01/2010 01:29:22
AESBX.DLL : 8.1.1.1 246132 Bytes 08/11/2009 06:38:44
AERDL.DLL : 8.1.3.4 479605 Bytes 08/01/2010 01:29:22
AEPACK.DLL : 8.2.0.4 422263 Bytes 08/01/2010 01:29:21
AEOFFICE.DLL : 8.1.0.38 196987 Bytes 08/11/2009 06:38:38
AEHEUR.DLL : 8.1.0.194 2228599 Bytes 09/01/2010 01:26:20
AEHELP.DLL : 8.1.9.0 237943 Bytes 08/01/2010 01:29:16
AEGEN.DLL : 8.1.1.83 369014 Bytes 08/01/2010 01:29:16
AEEMU.DLL : 8.1.1.0 393587 Bytes 08/11/2009 06:38:26
AECORE.DLL : 8.1.9.1 180598 Bytes 08/01/2010 01:29:15
AEBB.DLL : 8.1.0.3 53618 Bytes 08/11/2009 06:38:20
AVWINLL.DLL : 9.0.0.3 18177 Bytes 12/12/2008 07:47:59
AVPREF.DLL : 9.0.3.0 44289 Bytes 26/08/2009 14:14:02
AVREP.DLL : 8.0.0.3 155905 Bytes 20/01/2009 13:34:28
AVREG.DLL : 9.0.0.0 36609 Bytes 05/12/2008 09:32:09
AVARKT.DLL : 9.0.0.3 292609 Bytes 24/03/2009 14:05:41
AVEVTLOG.DLL : 9.0.0.7 167169 Bytes 30/01/2009 09:37:08
SQLITE3.DLL : 3.6.1.0 326401 Bytes 28/01/2009 14:03:49
SMTPLIB.DLL : 9.2.0.25 28417 Bytes 02/02/2009 07:21:33
NETNT.DLL : 9.0.0.0 11521 Bytes 05/12/2008 09:32:10
RCIMAGE.DLL : 9.0.0.25 2438913 Bytes 15/05/2009 14:39:58
RCTEXT.DLL : 9.0.73.0 86785 Bytes 13/10/2009 11:25:47

Configuration settings for the scan:
Jobname.............................: Complete system scan
Configuration file..................: c:\program files (x86)\avira\antivir desktop\sysscan.avp
Logging.............................: low
Primary action......................: interactive
Secondary action....................: ignore
Scan master boot sector.............: on
Scan boot sector....................: on
Boot sectors........................: C:, D:,
Process scan........................: on
Scan registry.......................: on
Search for rootkits.................: on
Integrity checking of system files..: off
Scan all files......................: All files
Scan archives.......................: on
Recursion depth.....................: 20
Smart extensions....................: on
Macro heuristic.....................: on
File heuristic......................: medium
Skipped files.......................: C:\Program Files\Le Robert\Le Petit Robert 2009\Robert.exe,
Deviating risk categories...........: +APPL,+GAME,+JOKE,+PCK,+PFS,+SPR,

Start of the scan: mercredi 13 janvier 2010 18:30

Starting search for hidden objects.
The driver could not be initialized.

The scan of running processes will be started
Scan process 'avscan.exe' - '1' Module(s) have been scanned
Scan process 'avscan.exe' - '1' Module(s) have been scanned
Scan process 'update.exe' - '1' Module(s) have been scanned
Scan process 'SearchFilterHost.exe' - '0' Module(s) have been scanned
Scan process 'avcenter.exe' - '1' Module(s) have been scanned
Scan process 'firefox.exe' - '1' Module(s) have been scanned
Scan process 'wlcomm.exe' - '1' Module(s) have been scanned
Scan process 'msnmsgr.exe' - '1' Module(s) have been scanned
Scan process 'FlashUtil10d.exe' - '1' Module(s) have been scanned
Scan process 'GoogleToolbarUser_32.exe' - '1' Module(s) have been scanned
Scan process 'iexplore.exe' - '1' Module(s) have been scanned
Scan process 'iexplore.exe' - '1' Module(s) have been scanned
Scan process 'wuauclt.exe' - '0' Module(s) have been scanned
Scan process 'emule.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '0' Module(s) have been scanned
Scan process 'AAWTray.exe' - '1' Module(s) have been scanned
Scan process 'soffice.bin' - '1' Module(s) have been scanned
Scan process 'jusched.exe' - '1' Module(s) have been scanned
Scan process 'avgnt.exe' - '1' Module(s) have been scanned
Scan process 'UnlockerAssistant.exe' - '1' Module(s) have been scanned
Scan process 'NMIndexStoreSvr.exe' - '1' Module(s) have been scanned
Scan process 'GoogleDesktop.exe' - '1' Module(s) have been scanned
Scan process 'wmpnetwk.exe' - '0' Module(s) have been scanned
Scan process 'Babylon.exe' - '1' Module(s) have been scanned
Scan process 'soffice.exe' - '1' Module(s) have been scanned
Scan process 'NMIndexingService.exe' - '1' Module(s) have been scanned
Scan process 'ImApp.exe' - '1' Module(s) have been scanned
Scan process 'LimeWire.exe' - '1' Module(s) have been scanned
Scan process 'Hyperappel.exe' - '1' Module(s) have been scanned
Scan process 'StikyNot.exe' - '0' Module(s) have been scanned
Scan process 'sidebar.exe' - '0' Module(s) have been scanned
Scan process 'CamTray.exe' - '1' Module(s) have been scanned
Scan process 'SpywareTerminatorUpdate.exe' - '1' Module(s) have been scanned
Scan process 'RobertHA.exe' - '0' Module(s) have been scanned
Scan process 'svchost.exe' - '0' Module(s) have been scanned
Scan process 'eDSMSNLoader32.exe' - '1' Module(s) have been scanned
Scan process 'Clavier.exe' - '1' Module(s) have been scanned
Scan process 'SearchProtocolHost.exe' - '0' Module(s) have been scanned
Scan process 'IncMail.exe' - '1' Module(s) have been scanned
Scan process 'grwinHyper.exe' - '1' Module(s) have been scanned
Scan process 'NMBgMonitor.exe' - '1' Module(s) have been scanned
Scan process 'Framework.Launcher.exe' - '0' Module(s) have been scanned
Scan process 'WUDFHost.exe' - '0' Module(s) have been scanned
Scan process 'SearchIndexer.exe' - '0' Module(s) have been scanned
Scan process 'eDSLoader.exe' - '0' Module(s) have been scanned
Scan process 'SysMonitor.exe' - '0' Module(s) have been scanned
Scan process 'WmiPrvSE.exe' - '0' Module(s) have been scanned
Scan process 'unsecapp.exe' - '0' Module(s) have been scanned
Scan process 'SDWinSec.exe' - '1' Module(s) have been scanned
Scan process 'sp_rsser.exe' - '1' Module(s) have been scanned
Scan process 'RAVCpl64.exe' - '0' Module(s) have been scanned
Scan process 'SeaSyncServices.exe' - '1' Module(s) have been scanned
Scan process 'RichVideo.exe' - '1' Module(s) have been scanned
Scan process 'conhost.exe' - '0' Module(s) have been scanned
Scan process 'conhost.exe' - '0' Module(s) have been scanned
Scan process 'pccron.exe' - '1' Module(s) have been scanned
Scan process 'pcroadcps.exe' - '1' Module(s) have been scanned
Scan process 'cygrunsrv.exe' - '1' Module(s) have been scanned
Scan process 'cygrunsrv.exe' - '1' Module(s) have been scanned
Scan process 'mdm.exe' - '1' Module(s) have been scanned
Scan process 'LSSrvc.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '0' Module(s) have been scanned
Scan process 'ETService.exe' - '0' Module(s) have been scanned
Scan process 'eDSService.exe' - '1' Module(s) have been scanned
Scan process 'mDNSResponder.exe' - '1' Module(s) have been scanned
Scan process 'AppleMobileDeviceService.exe' - '1' Module(s) have been scanned
Scan process 'avguard.exe' - '1' Module(s) have been scanned
Scan process 'CLMSServer.exe' - '1' Module(s) have been scanned
Scan process 'a2service.exe' - '1' Module(s) have been scanned
Scan process 'taskhost.exe' - '0' Module(s) have been scanned
Scan process 'svchost.exe' - '0' Module(s) have been scanned
Scan process 'sched.exe' - '1' Module(s) have been scanned
Scan process 'spoolsv.exe' - '0' Module(s) have been scanned
Scan process 'explorer.exe' - '0' Module(s) have been scanned
Scan process 'dwm.exe' - '0' Module(s) have been scanned
Scan process 'atieclxx.exe' - '0' Module(s) have been scanned
Scan process 'AAWService.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '0' Module(s) have been scanned
Scan process 'svchost.exe' - '0' Module(s) have been scanned
Scan process 'audiodg.exe' - '0' Module(s) have been scanned
Scan process 'svchost.exe' - '0' Module(s) have been scanned
Scan process 'svchost.exe' - '0' Module(s) have been scanned
Scan process 'svchost.exe' - '0' Module(s) have been scanned
Scan process 'atiesrxx.exe' - '0' Module(s) have been scanned
Scan process 'svchost.exe' - '0' Module(s) have been scanned
Scan process 'svchost.exe' - '0' Module(s) have been scanned
Scan process 'lsm.exe' - '0' Module(s) have been scanned
Scan process 'lsass.exe' - '0' Module(s) have been scanned
Scan process 'services.exe' - '0' Module(s) have been scanned
Scan process 'winlogon.exe' - '0' Module(s) have been scanned
Scan process 'wininit.exe' - '0' Module(s) have been scanned
Scan process 'csrss.exe' - '0' Module(s) have been scanned
Scan process 'csrss.exe' - '0' Module(s) have been scanned
Scan process 'smss.exe' - '0' Module(s) have been scanned
50 processes with 50 modules were scanned

Starting master boot sector scan:
Master boot sector HD0
[INFO] No virus was found!
Master boot sector HD1
[INFO] No virus was found!
[INFO] Please restart the search with Administrator rights
Master boot sector HD2
[INFO] No virus was found!
[INFO] Please restart the search with Administrator rights

Start scanning boot sectors:
Boot sector 'C:\'
[INFO] No virus was found!
Boot sector 'D:\'
[INFO] No virus was found!

Starting to scan executable files (registry).
The registry was scanned ( '23' files ).


Starting the file scan:

Begin scan in 'C:\' <ACER>
C:\hiberfil.sys
[WARNING] The file could not be opened!
[NOTE] This file is a Windows system file.
[NOTE] This file cannot be opened for scanning.
C:\pagefile.sys
[WARNING] The file could not be opened!
[NOTE] This file is a Windows system file.
[NOTE] This file cannot be opened for scanning.
C:\Program Files (x86)\Ad-Remover\1\List.dat
[DETECTION] Contains recognition pattern of the HTML/Malicious.ActiveX.Gen HTML script virus
C:\Program Files (x86)\Ad-Remover\BACKUP\AD-R.exe
[0] Archive type: NSIS
--> ProgramFilesDir/List.dat
[DETECTION] Contains recognition pattern of the HTML/Malicious.ActiveX.Gen HTML script virus
C:\Users\Croûtons\Desktop\Programmes outils\AD-R.exe
[0] Archive type: NSIS
--> ProgramFilesDir/List.dat
[DETECTION] Contains recognition pattern of the HTML/Malicious.ActiveX.Gen HTML script virus
C:\Users\Croûtons\Downloads\eMule\Incoming\microsoft office 2010 No serial(crack).rar
[0] Archive type: RAR
--> Setup32.exe
[1] Archive type: RSRC
--> Object
[2] Archive type: CAB (Microsoft)
--> Install.exe
[DETECTION] Is the TR/Genome.bjgv Trojan
[DETECTION] Is the TR/Dropper.Gen Trojan
--> crack\crack.exe
[DETECTION] Is the TR/Genome.bjgv Trojan
Begin scan in 'D:\' <DATA>

Beginning disinfection:
C:\Program Files (x86)\Ad-Remover\1\List.dat
[DETECTION] Contains recognition pattern of the HTML/Malicious.ActiveX.Gen HTML script virus
[NOTE] The file was moved to '4bc1111b.qua'!
C:\Program Files (x86)\Ad-Remover\BACKUP\AD-R.exe
[NOTE] The file was moved to '4b7b10f6.qua'!
C:\Users\Croûtons\Desktop\Programmes outils\AD-R.exe
[NOTE] The file was moved to '42b71887.qua'!
C:\Users\Croûtons\Downloads\eMule\Incoming\microsoft office 2010 No serial(crack).rar
[NOTE] The file was moved to '4bb1111b.qua'!


End of the scan: mercredi 13 janvier 2010 19:28
Used time: 56:56 Minute(s)

The scan has been done completely.

32783 Scanned directories
1044450 Files were scanned
6 Viruses and/or unwanted programs were found
0 Files were classified as suspicious
0 files were deleted
0 Viruses and unwanted programs were repaired
4 Files were moved to quarantine
0 Files were renamed
2 Files cannot be scanned
1044442 Files not concerned
12391 Archives were scanned
2 Warnings
6 Notes

Je n'ai pas eu le rapport C:\TB.txt. Que dois-je faire alors ?

[ Rapport ToolsCleaner version 2.3.11 (par A.Rothstein & dj QUIOU) ]

--> Recherche:

C:\GenProc: trouvé !
C:\Toolbar SD: trouvé !
C:\Rsit: trouvé !
C:\GenProc\Outil\ZHPDiag: trouvé !
C:\GenProc\Page\GenProc[*].html: trouvé !
C:\Program Files (x86)\Navilog1: trouvé !
C:\Program Files (x86)\Ad-remover: trouvé !
C:\Program Files (x86)\ZHPDiag: trouvé !
C:\Program Files (x86)\Navilog1\Navilog1.bat: trouvé !
C:\Program Files (x86)\trend micro\HijackThis.exe: trouvé !
C:\Program Files (x86)\trend micro\hijackthis.log: trouvé !
C:\Program Files (x86)\trend micro\HijackThis: trouvé !
C:\Program Files (x86)\trend micro\HijackThis\HijackThis.exe: trouvé !
C:\Program Files (x86)\trend micro\HijackThis\hijackthis.log: trouvé !
C:\Users\Croûtons\AppData\Local\VirtualStore\Program Files (x86)\ZHPDiag: trouvé !
C:\Users\Croûtons\Desktop\ToolBarSD.exe: trouvé !
C:\Users\Croûtons\Desktop\Programmes outils\HijackThis.lnk: trouvé !
C:\Users\Croûtons\Desktop\Programmes outils\Rsit.exe: trouvé !

---------------------------------
--> Suppression:

C:\Program Files (x86)\Navilog1\Navilog1.bat: supprimé !
C:\Program Files (x86)\trend micro\HijackThis.exe: supprimé !
C:\Program Files (x86)\trend micro\HijackThis\HijackThis.exe: supprimé !
C:\Users\Croûtons\Desktop\ToolBarSD.exe: supprimé !
C:\Users\Croûtons\Desktop\Programmes outils\HijackThis.lnk: supprimé !
C:\GenProc\Page\GenProc[*].html: ERREUR DE SUPPRESSION !!
C:\Program Files (x86)\trend micro\hijackthis.log: supprimé !
C:\Program Files (x86)\trend micro\HijackThis\hijackthis.log: supprimé !
C:\Users\Croûtons\Desktop\Programmes outils\Rsit.exe: supprimé !
C:\GenProc: supprimé !
C:\Toolbar SD: supprimé !
C:\Rsit: supprimé !
C:\Program Files (x86)\Navilog1: supprimé !
C:\Program Files (x86)\Ad-remover: supprimé !
C:\Program Files (x86)\ZHPDiag: supprimé !
C:\Program Files (x86)\trend micro\HijackThis: supprimé !
C:\Users\Croûtons\AppData\Local\VirtualStore\Program Files (x86)\ZHPDiag: supprimé !

Je ne vois pas comment on "décoche tous les disques durs". Je vois juste que la protection est activée pour C: et désactivée pour D:

Tu es toujours là ?

Salut,

Je suis en plein téléchargement utile sur E-mule. Je crois qu'il vaut mieux ne pas toucher à la restauration système maintenant... Qu'en penses-tu ?

Je n'arrive pas à remettre en marche la restauration système.

Je suis perdu avec ces hitoires de protection système, point de retauration (tous déactivés)... Pourrais-tu me dire en détail ce que je dois faire maintenant pour retrouver une protection normale ? Merci encore.

"La majorité de se que l'on pourrait trouver de légal sur emule sur trouve sur des sites sûrs et légaux." Pourrasi-tu m'en indiquer quelques-uns ? La plupart du temps, il 'agit d'offre d'essai et donc de logiciels bridés.

Je sui en train de terminer un scan ligne avec EST et pourl'instant il ne m'a trouvé d'un seul fichier. Y- a-il un rapport à t'envoyer ?

Je n'ai rouvé q'une seule infection mais pas de rapport...

Je recheche Microsoft Office 2010.iso. C'est pour mes cours et résoudre certains problème d'incompatibilité...

Oui, c'est fait. Merci.

Peut-on effeceur 2 scans antivirus à la foi pour ganger du temps ?

Cest dans toute toût bête mais is pas commencer
AdbeRdr930_fr_FR.exe.

À très bentôi

JLB

Bonsoir.

C'est bon. J'ai fait un scan en ligne avec ESET : RAS. Idem pour Antivir.

Merci beaucoup de ton aide.