Virus troyano detectado por McAfee
Resuelto
angelobruce
Mensajes publicados
23
Estado
Miembro
-
ALLEZ12 Mensajes publicados 3 Fecha de registro Estado Miembro Última intervención -
ALLEZ12 Mensajes publicados 3 Fecha de registro Estado Miembro Última intervención -
Bonjour,
Es la primera vez que recurro a los foros para solicitar ayuda y espero que puedan ayudarme.
Tengo dos problemas,
el primero al arrancar y durante el uso, tengo un mensaje que dice que el componente gibidl.dll falta... He revisado los foros, hecho una restauración a una fecha anterior a este problema, pero nada funciona.
El segundo, más embarazoso, es un troyano en cuarentena, detectado por McAfee. Estoy bajo Vista 32 bits, he descargado hijackthis.log. (informe a continuación)
información sobre el virus
nombre de detección: Artemis!B6029E8A1726 (troyano), Artemis!B6029E8A1726 (troyano)
¿2 veces seguidas quiere decir que hay 2???
Archivo: C\WINDOWS\TEMP\3A38A82B-4F39-4DFF-BB16-91CFCC75A142
informe...
Logfile de HijackThis v1.99.1
Escaneo guardado a las 20:32:30, el 26/01/2010
Plataforma: Windows desconocido (WinNT 6.00.1906 SP2)
MSIE: Internet Explorer v8.00 (8.00.6001.18882)
Procesos en ejecución:
c:\PROGRA~1\mcafee.com\agent\mcagent.exe
C:\Windows\system32\Dwm.exe
C:\Windows\system32\taskeng.exe
C:\Windows\Explorer.EXE
C:\Program Files\Acer Arcade Deluxe\Acer Arcade Deluxe\ArcadeDeluxeAgent.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\Program Files\AmIcoSingLun\AmIcoSinglun.exe
C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
...
Por favor, ayúdenme, es muy importante.
Si necesitan más información, háganmelo saber, gracias a todos por su atención y gracias de antemano.
Es la primera vez que recurro a los foros para solicitar ayuda y espero que puedan ayudarme.
Tengo dos problemas,
el primero al arrancar y durante el uso, tengo un mensaje que dice que el componente gibidl.dll falta... He revisado los foros, hecho una restauración a una fecha anterior a este problema, pero nada funciona.
El segundo, más embarazoso, es un troyano en cuarentena, detectado por McAfee. Estoy bajo Vista 32 bits, he descargado hijackthis.log. (informe a continuación)
información sobre el virus
nombre de detección: Artemis!B6029E8A1726 (troyano), Artemis!B6029E8A1726 (troyano)
¿2 veces seguidas quiere decir que hay 2???
Archivo: C\WINDOWS\TEMP\3A38A82B-4F39-4DFF-BB16-91CFCC75A142
informe...
Logfile de HijackThis v1.99.1
Escaneo guardado a las 20:32:30, el 26/01/2010
Plataforma: Windows desconocido (WinNT 6.00.1906 SP2)
MSIE: Internet Explorer v8.00 (8.00.6001.18882)
Procesos en ejecución:
c:\PROGRA~1\mcafee.com\agent\mcagent.exe
C:\Windows\system32\Dwm.exe
C:\Windows\system32\taskeng.exe
C:\Windows\Explorer.EXE
C:\Program Files\Acer Arcade Deluxe\Acer Arcade Deluxe\ArcadeDeluxeAgent.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\Program Files\AmIcoSingLun\AmIcoSinglun.exe
C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
...
Por favor, ayúdenme, es muy importante.
Si necesitan más información, háganmelo saber, gracias a todos por su atención y gracias de antemano.
Configuración: Windows Vista Internet Explorer 7.0
37 respuestas
- 1
- 2
Siguiente
-
buenas noches
• Descarga la herramienta de información del sistema de Random (RSIT) de Random/Random.
(herramienta de diagnóstico)
http://images.malwareremoval.com/random/RSIT.exe
• Guárdalo en tu escritorio.
• Haz doble clic en RSIT.exe para iniciar la herramienta.
• Haz clic en "Continuar" en la pantalla de aviso.
• Si la herramienta HijackThis no está presente o no se detecta en el ordenador, RSIT la descargará (permite el acceso en tu firewall si te lo solicita)
y deberás aceptar la licencia.
• Una vez finalizado el escaneo, aparecerán dos informes: publícalos en dos mensajes separados, por favor
Los informes se encuentran en esta ubicación:
C:\rsit\info.txt
C:\rsit\log.txt
--
Estoy buscando mucho... y ¡ahora encuentro!
(sonrisa)-
lo primero que necesitamos
Registro de información del sistema de random 1.09 (escrito por random/random)
Ejecutado por Nicole el 23-07-2013 a las 02:01:47
Microsoft Windows 7 Edición Familiar Premium Service Pack 1
Unidad del sistema C: tiene 368 GB (80%) libres de 463 GB
RAM total: 3691 MB (53% libres)
Registro de Trend Micro HijackThis v2.0.4
Escaneo guardado a las 02:03:02, el 23/07/2013
Plataforma: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v10.0 (10.00.9200.16611)
Modo de arranque: Normal
Procesos en ejecución:
C:\Program Files (x86)\Sony\Media Gallery\ElbServer.exe
C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe
C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe
C:\Program Files (x86)\Common Files\Apple\Internet Services\BookmarkDAV_client.exe
C:\Users\Nicole\AppData\Roaming\WebCake\WebCakeDesktop.exe
C:\Users\Nicole\AppData\Local\FilesFrog Update Checker\update_checker.exe
C:\Users\Nicole\AppData\Local\Smartbar\Application\QuickShare.exe
C:\Program Files (x86)\McAfee Security Scan\3.0.318\SScheduler.exe
C:\Program Files (x86)\Sony\ISB Utility\ISBMgr.exe
C:\Program Files (x86)\Sony\PMB\PMBVolumeWatcher.exe
C:\Program Files (x86)\Real\RealPlayer\Update\realsched.exe
C:\Program Files (x86)\Boxore\BoxoreClient\boxore.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files (x86)\Ask.com\Updater\Updater.exe
C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe
C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SHTtray.exe
C:\Program Files\Sony\VAIO Personalization Manager\VpmIfPav.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
c:\PROGRA~2\mcafee\SITEAD~1\saui.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Users\Nicole\Desktop\RSIT.exe
C:\Program Files (x86)\trend micro\Nicole.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://en.v9.com/?utm_source=b&utm_medium=update&from=update&uid=TOSHIBAXMK5059GSXP_812ST1RLTXX812ST1RLT&ts=1369829981
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://feed.snapdo.com/?publisher=QuickObrw&dpid=QuickObrw&co=FR&userid=59fe20dd-0631-4562-90fc-415b4bde48c7&searchtype=ds&q={searchTerms}&installDate=14/03/2013
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://feed.snapdo.com/?publisher=QuickObrw&dpid=QuickObrw&co=FR&userid=59fe20dd-0631-4562-90fc-415b4bde48c7&searchtype=ds&q={searchTerms}&installDate=14/03/2013
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://feed.snapdo.com/?publisher=QuickObrw&dpid=QuickObrw&co=FR&userid=59fe20dd-0631-4562-90fc-415b4bde48c7&searchtype=hp&installDate=14/03/2013
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://en.v9.com/?utm_source=b&utm_medium=update&from=update&uid=TOSHIBAXMK5059GSXP_812ST1RLTXX812ST1RLT&ts=1369829981
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://en.v9.com/?utm_source=b&utm_medium=update&from=update&uid=TOSHIBAXMK5059GSXP_812ST1RLTXX812ST1RLT&ts=1369829981
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,Default_Search_URL = http://feed.snapdo.com/?publisher=QuickObrw&dpid=QuickObrw&co=FR&userid=59fe20dd-0631-4562-90fc-415b4bde48c7&searchtype=ds&q={searchTerms}&installDate=14/03/2013
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://feed.snapdo.com/?publisher=QuickObrw&dpid=QuickObrw&co=FR&userid=59fe20dd-0631-4562-90fc-415b4bde48c7&searchtype=ds&q={searchTerms}&installDate=14/03/2013
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: (sin nombre) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - (sin archivo)
O2 - BHO: Identificador MSS+ - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - C:\Program Files (x86)\McAfee Security Scan\3.0.318\McAfeeMSS_IE.dll
O2 - BHO: CrossriderApp0027096 - {11111111-1111-1111-1111-110211701196} - C:\Program Files (x86)\Services x86\Services x86-bho.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: WebCake Layers - {2A5A2A90-3B30-4E6E-A955-2F232C6EF517} - C:\Program Files (x86)\WebCake\WebCakeIEClient.dll
O2 - BHO: Plugin de descarga y grabación de RealNetworks para Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll
O2 - BHO: (sin nombre) - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - (sin archivo)
O2 - BHO: Widget de QuickShare - {31ad400d-1b06-4e33-a59a-90c2c140cba0} - mscoree.dll (archivo faltante)
O2 - BHO: DealPly Shopping - {4B6ACEA2-308A-4876-AD36-57CEC5B4FCC7} - C:\Program Files (x86)\DealPly\DealPlyIE.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
O2 - BHO: IESpeakDoc - {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll
O2 - BHO: Programa de ayuda del asistente de inicio de sesión de Microsoft - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: McAfee SiteAdvisor BHO - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - c:\PROGRA~2\mcafee\SITEAD~1\mcieplg.dll
O2 - BHO: delta Helper Object - {C1AF5FA5-852C-4C90-812E-A7F75E011D87} - C:\Program Files (x86)\Delta\delta\1.8.21.5\bh\delta.dll
O2 - BHO: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - "C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll" (archivo faltante)
O2 - BHO: Ask Toolbar BHO - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll
O2 - BHO: Auto Lyrics - {DAEB9E85-4694-4F9B-85CB-2F28987872D7} - C:\Program Files (x86)\AutoLyrics\autolrcs.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
O2 - BHO: PricePeep - {FD6D90C0-E6EE-4BC6-B9F7-9ED319698007} - C:\Program Files (x86)\PricePeep\pricepeep.dll
O3 - Barra de herramientas: Widget de QuickShare - {ae07101b-46d4-4a98-af68-0333ea26e113} - mscoree.dll (archivo faltante)
O3 - Barra de herramientas: McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\PROGRA~2\mcafee\SITEAD~1\mcieplg.dll
O3 - Barra de herramientas: Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - "C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll" (archivo faltante)
O3 - Barra de herramientas: Delta Toolbar - {82E1477C-B154-48D3-9891-33D83C26BCD3} - C:\Program Files (x86)\Delta\delta\1.8.21.5\deltaTlbr.dll
O3 - Barra de herramientas: Ask Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [ISBMgr.exe] "C:\Program Files (x86)\Sony\ISB Utility\ISBMgr.exe"
O4 - HKLM\..\Run: [PMBVolumeWatcher] C:\Program Files (x86)\Sony\PMB\PMBVolumeWatcher.exe
O4 - HKLM\..\Run: [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files (x86)\Real\RealPlayer\update\realsched.exe" -osboot
O4 - HKLM\..\Run: [mcui_exe] "C:\Program Files\McAfee.com\Agent\mcagent.exe" /runkey
O4 - HKLM\..\Run: [Boxore Client] C:\Program Files (x86)\Boxore\BoxoreClient\boxore.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [ApnUpdater] "C:\Program Files (x86)\Ask.com\Updater\Updater.exe"
O4 - HKCU\..\Run: [Elbserver] C:\Program Files (x86)\Sony\Media Gallery\ElbServer.exe /Stay
O4 - HKCU\..\Run: [Facebook Update] "C:\Users\Nicole\AppData\Local\Facebook\Update\FacebookUpdate.exe" /c /nocrashserver
O4 - HKCU\..\Run: [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
O4 - HKCU\..\Run: [iCloudServices] C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe
O4 - HKCU\..\Run: [ApplePhotoStreams] C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe
O4 - HKCU\..\Run: [com.apple.dav.bookmarks.daemon] C:\Program Files (x86)\Common Files\Apple\Internet Services\BookmarkDAV_client.exe
O4 - HKCU\..\Run: [Windows Media Center] RunDLL32.exe C:\Windows\ehome\ehuihlp.dll,BootMediaCenter
O4 - HKCU\..\Run: [WebCake Desktop] "C:\Users\Nicole\AppData\Roaming\WebCake\WebCakeDesktop.exe"
O4 - HKCU\..\Run: [SDP] C:\Users\Nicole\AppData\Local\FilesFrog Update Checker\update_checker.exe /auto
O4 - HKCU\..\Run: [Browser Infrastructure Helper] C:\Users\Nicole\AppData\Local\Smartbar\Application\QuickShare.exe startup
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (Usuario 'SERVICIO LOCAL')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (Usuario 'SERVICIO LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (Usuario 'SERVICIO RED')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (Usuario 'SERVICIO RED')
O4 - Inicio Global: McAfee Security Scan Plus.lnk = C:\Program Files (x86)\McAfee Security Scan\3.0.318\SScheduler.exe
O8 - Elemento extra del menú contextual: Buscar en la Web - C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\menuext.html
O9 - Botón extra: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Elemento del menú 'Herramientas' extra: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Botón extra: (sin nombre) - {7815BE26-237D-41A8-A98F-F7BD75F71086} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll
O9 - Elemento del menú 'Herramientas' extra: Enviar por Bluetooth a - {7815BE26-237D-41A8-A98F-F7BD75F71086} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll
O10 - Archivo desconocido en Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Archivo desconocido en Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Grupo de opciones: [GRAPHICS_ACELERADAS] Gráficos acelerados
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (Clase MessengerStatsClient) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O18 - Protocolo: base64 - {5ACE96C0-C70A-4A4D-AF14-2E7B869345E1} - C:\Program Files (x86)\BrowserCompanion\tdataprotocol.dll
O18 - Protocolo: chrome - {5ACE96C0-C70A-4A4D-AF14-2E7B869345E1} - C:\Program Files (x86)\BrowserCompanion\tdataprotocol.dll
O18 - Protocolo: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\PROGRA~2\mcafee\SITEAD~1\mcieplg.dll
O18 - Protocolo: prox - {5ACE96C0-C70A-4A4D-AF14-2E7B869345E1} - C:\Program Files (x86)\BrowserCompanion\tdataprotocol.dll
O18 - Protocolo: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\PROGRA~2\mcafee\SITEAD~1\mcieplg.dll
O18 - Protocolo: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Protocolo: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O18 - Filtro: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - c:\PROGRA~2\mcafee\msc\mcsniepl.dll
O20 - AppInit_DLLs: c:\progra~3\browse~1\261339~1.144\{c16c1~1\browse~1.dll
O23 - Servicio: McAfee Application Installer Cleanup (0003141366449229) (0003141366449229mcinstcleanup) - Propietario desconocido - C:\Windows\TEMP\000314~1.EXE
O23 - Servicio: ArcSoft Connect Daemon (ACDaemon) - ArcSoft Inc. - C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
O23 - Servicio: Servicio de Actualización de Adobe Acrobat (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Servicio: Servicio de Actualización de Adobe Flash Player (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Servicio: @%SystemRoot%\system32\aelupsvc.dll,-1 (AeLookupSvc) - Propietario desconocido - C:\Windows\system32\svchost.exe
O23 - Servicio: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Propietario desconocido - C:\Windows\System32\alg.exe (archivo faltante)
O23 - Servicio: Utilidad de Eventos Externos de AMD - Propietario desconocido - C:\Windows\system32\atiesrxx.exe (archivo faltante)
O23 - Servicio: Servicio FUEL de AMD - Propietario desconocido - C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
O23 - Servicio: @%systemroot%\system32\appidsvc.dll,-100 (AppIDSvc) - Propietario desconocido - C:\Windows\system32\svchost.exe
O23 - Servicio: @%systemroot%\system32\appinfo.dll,-100 (Appinfo) - Propietario desconocido - C:\Windows\system32\svchost.exe
O23 - Servicio: Apple Mobile Device - Apple Inc. - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Servicio: Agente de Coex de Atheros Bt&Wlan - Atheros - C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe
O23 - Servicio: AtherosSvc - Atheros Communications - C:\Program Files (x86)\Bluetooth Suite\adminservice.exe
O23 - Servicio: @%SystemRoot%\system32\audiosrv.dll,-204 (AudioEndpointBuilder) - Propietario desconocido - C:\Windows\System32\svchost.exe
O23 - Servicio: @%SystemRoot%\system32\audiosrv.dll,-200 (AudioSrv) - Propietario desconocido - C:\Windows\System32\svchost.exe
O23 - Servicio: @%SystemRoot%\system32\AxInstSV.dll,-103 (AxInstSV) - Propietario desconocido - C:\Windows\system32\svchost.exe
O23 - Servicio: @%SystemRoot%\system32\bdesvc.dll,-100 (BDESVC) - Propietario desconocido - C:\Windows\System32\svchost.exe
O23 - Servicio: Servicio Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Servicio: @%systemroot%\system32\browser.dll,-100 (Browser) - Propietario desconocido - C:\Windows\System32\svchost.exe
O23 - Servicio: @%SystemRoot%\System32\bthserv.dll,-101 (bthserv) - Propietario desconocido - C:\Windows\system32\svchost.exe
O23 - Servicio: @%SystemRoot%\System32\certprop.dll,-11 (CertPropSvc) - Propietario desconocido - C:\Windows\system32\svchost.exe
O23 - Servicio: @%SystemRoot%\system32\cryptsvc.dll,-1001 (CryptSvc) - Propietario desconocido - C:\Windows\system32\svchost.exe
O23 - Servicio: DCDhcpService - Atheros Communication Inc. - C:\Program Files\Sony\VAIO Smart Network\WFDA\DCDhcpService.exe
O23 - Servicio: @oleres.dll,-5012 (DcomLaunch) - Propietario desconocido - C:\Windows\system32\svchost.exe
O23 - Servicio: @%SystemRoot%\system32\defragsvc.dll,-101 (defragsvc) - Propietario desconocido - C:\Windows\system32\svchost.exe
O23 - Servicio: @%SystemRoot%\system32\dhcpcore.dll,-100 (Dhcp) - Propietario desconocido - C:\Windows\system32\svchost.exe
O23 - Servicio: @%SystemRoot%\System32\dnsapi.dll,-101 (Dnscache) - Propietario desconocido - C:\Windows\system32\svchost.exe
O23 - Servicio: @%systemroot%\system32\dot3svc.dll,-1102 (dot3svc) - Propietario desconocido - C:\Windows\system32\svchost.exe
O23 - Servicio: @%systemroot%\system32\dps.dll,-500 (DPS) - Propietario desconocido - C:\Windows\System32\svchost.exe
O23 - Servicio: @%systemroot%\system32\eapsvc.dll,-1 (EapHost) - Propietario desconocido - C:\Windows\System32\svchost.exe
O23 - Servicio: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Propietario desconocido - C:\Windows\System32\lsass.exe (archivo faltante)
O23 - Servicio: @%SystemRoot%\ehome\ehrecvr.exe,-101 (ehRecvr) - Propietario desconocido - C:\Windows\ehome\ehRecvr.exe
O23 - Servicio: @%SystemRoot%\ehome\ehsched.exe,-101 (ehSched) - Propietario desconocido - C:\Windows\ehome\ehsched.exe
O23 - Servicio: eSafe Service (eSafeSvc) - eSafe Security Co., Ltd. - C:\ProgramData\eSafe\eSafeSvc.exe
O23 - Servicio: @%SystemRoot%\system32\wevtsvc.dll,-200 (eventlog) - Propietario desconocido - C:\Windows\System32\svchost.exe
O23 - Servicio: @comres.dll,-2450 (EventSystem) - Propietario desconocido - C:\Windows\system32\svchost.exe
O23 - Servicio: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Propietario desconocido - C:\Windows\system32\fxssvc.exe (archivo faltante)
O23 - Servicio: @%systemroot%\system32\fdPHost.dll,-100 (fdPHost) - Propietario desconocido - C:\Windows\system32\svchost.exe
O23 - Servicio: @%systemroot%\system32\fdrespub.dll,-100 (FDResPub) - Propietario desconocido - C:\Windows\system32\svchost.exe
O23 - Servicio: @%systemroot%\system32\FntCache.dll,-100 (FontCache) - Propietario desconocido - C:\Windows\system32\svchost.exe
O23 - Servicio: @gpapi.dll,-112 (gpsvc) - Propietario desconocido - C:\Windows\system32\svchost.exe
O23 - Servicio: Servicio de Google Update (gupdate) (gupdate) - Propietario desconocido - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Servicio: Servicio de Google Update (gupdatem) (gupdatem) - Propietario desconocido - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Servicio: @%SystemRoot%\System32\hidserv.dll,-101 (hidserv) - Propietario desconocido - C:\Windows\system32\svchost.exe
O23 - Servicio: @%SystemRoot%\system32\kmsvc.dll,-6 (hkmsvc) - Propietario desconocido - C:\Windows\System32\svchost.exe
O23 - Servicio: @%SystemRoot%\System32\ListSvc.dll,-100 (HomeGroupListener) - Propietario desconocido - C:\Windows\System32\svchost.exe
O23 - Servicio: @%SystemRoot%\System32\provsvc.dll,-100 (HomeGroupProvider) - Propietario desconocido - C:\Windows\System32\svchost.exe
O23 - Servicio: IconMan_R - Realsil Microelectronics Inc. - C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe
O23 - Servicio: @%SystemRoot%\system32\ikeext.dll,-501 (IKEEXT) - Propietario desconocido - C:\Windows\system32\svchost.exe
O23 - Servicio: @%systemroot%\system32\IPBusEnum.dll,-102 (IPBusEnum) - Propietario desconocido - C:\Windows\system32\svchost.exe
O23 - Servicio: @keyiso.dll,-100 (KeyIso) - Propietario desconocido - C:\Windows\system32\lsass.exe (archivo faltante)
O23 - Servicio: @comres.dll,-2946 (KtmRm) - Propietario desconocido - C:\Windows\System32\svchost.exe
O23 - Servicio: @%systemroot%\system32\srvsvc.dll,-100 (LanmanServer) - Propietario desconocido - C:\Windows\system32\svchost.exe
O23 - Servicio: @%systemroot%\system32\wkssvc.dll,-100 (LanmanWorkstation) - Propietario desconocido - C:\Windows\System32\svchost.exe
O23 - Servicio: @%SystemRoot%\system32\lltdres.dll,-1 (lltdsvc) - Propietario desconocido - C:\Windows\System32\svchost.exe
O23 - Servicio: @%SystemRoot%\system32\lmhsvc.dll,-101 (lmhosts) - Propietario desconocido - C:\Windows\system32\svchost.exe
O23 - Servicio: Servicio de McAfee SiteAdvisor - McAfee, Inc. - C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe
O23 - Servicio: Servicio de componente de McAfee Security Scan (McComponentHostService) - McAfee, Inc. - C:\Program Files (x86)\McAfee Security Scan\3.0.318\McCHSvc.exe
O23 - Servicio: Servicio de cortafuegos personal de McAfee (McMPFSvc) - McAfee, Inc. - C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe
O23 - Servicio: Servicios de McAfee (mcmscsvc) - McAfee, Inc. - C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe
O23 - Servicio: Anunciador de McAfee VirusScan (McNaiAnn) - McAfee, Inc. - C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe
O23 - Servicio: Agente de red de McAfee (McNASvc) -
-
-
ok
1)
▶ Relanza List&Kill'em con el acceso directo en tu escritorio,
pero esta vez:
▶ elige la opción 2 = Modo Eliminación
deja trabajar la herramienta.
al finalizar el escaneo se abre un informe
▶ pega el contenido en tu respuesta
....................
2)
siguiendo
Descarga MalwareByte's Anti-Malware
http://www.malwarebytes.org/mbam/program/mbam-setup.exe
. Regístralo en el escritorio
. Haz doble clic en el archivo descargado para iniciar el proceso de instalación.
. En la pestaña "actualización", haz clic en el botón Buscar actualizaciones
. Si el firewall solicita permiso para conectarse a Malwarebytes, acepta
. Una vez completada la actualización
. Ve a la pestaña, Buscar
. Selecciona Ejecutar un análisis completo (análisis bastante largo)
. Haz clic en Buscar
. El escaneo comienza.
. Al final del análisis, aparece un mensaje: El examen se ha completado normalmente. Haz clic en 'Mostrar resultados' para ver todos los objetos encontrados.
. Haz clic en Aceptar para continuar.
. Si se detectaron malware, haz clic en Mostrar resultados
. Selecciona todo (o deja marcados) y haz clic en Eliminar la selección. Malwarebytes destruirá los archivos y claves de registro y pondrá una copia en cuarentena. Malwarebytes abrirá el bloc de notas y copiará el informe del análisis allí.
. Ve a la pestaña informe/log
. Haz clic en ella para mostrarla, una vez mostrada
. Haz clic en edición en la parte superior del bloc de notas, y luego en seleccionar todo
. Vuelve a hacer clic en edición y luego en copiar y regresa al foro y en tu respuesta
. haz clic derecho en el cuadro de respuesta y pegar
Si necesitas ayuda, mira estos tutoriales:
Ayuda: https://www.malekal.com/tutoriel-malwarebyte-anti-malware/
http://www.infos-du-net.com/forum/278396-11-tuto-malwarebytes-anti-malware-mbam
--
¡Busco mucho... y ahora encuentro!
(sonrisa) -
Hola,
y bien, para ser una primera vez, es súper rápido,
haré las manipulaciones de inmediato
gracias -
Voici el 1er informe
Archivo de registro de la herramienta de información del sistema de random 1.06 (escrito por random/random)
Ejecutado por ange el 2010-01-26 21:00:55
Microsoft® Windows Vista™ Edición Familiar Premium Service Pack 2
La unidad del sistema C: tiene 246 GB (53%) libres de 467 GB
RAM total: 3066 MB (51% libre)
Archivo de registro de Trend Micro HijackThis v2.0.2
Escaneo guardado a las 21:01:01, el 26/01/2010
Plataforma: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v8.00 (8.00.6001.18882)
Modo de arranque: Normal
Procesos en ejecución:
c:\PROGRA~1\mcafee.com\agent\mcagent.exe
C:\Windows\system32\Dwm.exe
C:\Windows\system32\taskeng.exe
C:\Windows\Explorer.EXE
C:\Program Files\Acer Arcade Deluxe\Acer Arcade Deluxe\ArcadeDeluxeAgent.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\Program Files\AmIcoSingLun\AmIcoSinglun.exe
C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Launch Manager\LManager.exe
C:\Program Files\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe
C:\Program Files\Acer\Acer PowerSmart Manager\ePowerTray.exe
C:\Program Files\EgisTec Egis Software Update\EgisUpdate.exe
C:\Program Files\EgisTec\MyWinLocker 3\x86\mwlDaemon.exe
C:\Program Files\Acer Arcade Deluxe\PlayMovie\PMVService.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Windows\PLFSetI.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
C:\Program Files\Acer Arcade Deluxe\Acer Arcade Deluxe\Kernel\CLML\CLMLSvc.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Windows\ehome\ehtray.exe
C:\ProgramData\Macrovision\FLEXnet Connect\6\ISUSPM.exe
C:\Program Files\SFR\9Giga Synchro\9Giga_Synchro.exe
C:\Windows\System32\spool\drivers\w32x86\3\E_FATIFCE.EXE
C:\Program Files\Winsudate\gibusr.exe
C:\Program Files\LimeWire\LimeWire.exe
C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE
C:\Windows\ehome\ehmsas.exe
C:\Users\ange\AppData\Local\Temp\RtkBtMnt.exe
C:\Program Files\Windows Live\Contacts\wlcomm.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Google\Google Toolbar\GoogleToolbarUser_32.exe
C:\Program Files\Windows Live\Toolbar\wltuser.exe
C:\Windows\system32\Macromed\Flash\FlashUtil10c.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Users\ange\Desktop\RSIT.exe
C:\Program Files\trend micro\ange.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://homepage.acer.com/rdr.aspx?b=ACAW&l=040c&s=2&o=vp32&d=0509&m=aspire_7735
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://g.msn.fr/0SEFRFR/SAOS02
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.searcheo.fr/renseignement
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://homepage.acer.com/rdr.aspx?b=ACAW&l=040c&s=2&o=vp32&d=0509&m=aspire_7735
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.duxet.com/
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://fr.search.yahoo.com/search?fr=mcafee&p=%s
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll
F2 - REG:system.ini: UserInit=Userinit.exe
O1 - Hosts: ::1 localhost
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: McAfee Phishing Filter - {27B4851A-3207-45A2-B947-BE8AFE6163AB} - c:\PROGRA~1\mcafee\msk\mskapbho.dll
O2 - BHO: (sin nombre) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (sin archivo)
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
O2 - BHO: scriptproxy - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - C:\Program Files\McAfee\VirusScan\scriptsn.dll
O2 - BHO: Programa de ayuda del Asistente de conexión Windows Live ID - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Easy Photo Print - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - C:\Program Files\Epson Software\Easy Photo Print\EPTBL.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.4.4525.1752\swg.dll
O2 - BHO: McAfee SiteAdvisor BHO - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - c:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O3 - Toolbar: (sin nombre) - {90B8B761-DF2B-48AC-BBE0-BCC03A819B3B} - (sin archivo)
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O3 - Toolbar: McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll
O3 - Toolbar: Easy Photo Print - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - C:\Program Files\Epson Software\Easy Photo Print\EPTBL.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [ArcadeDeluxeAgent] "C:\Program Files\Acer Arcade Deluxe\Acer Arcade Deluxe\ArcadeDeluxeAgent.exe"
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [AmIcoSinglun] C:\Program Files\AmIcoSingLun\AmIcoSinglun.exe
O4 - HKLM\..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
O4 - HKLM\..\Run: [Skytel] C:\Program Files\Realtek\Audio\HDA\Skytel.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [LManager] C:\Program Files\Launch Manager\LManager.exe
O4 - HKLM\..\Run: [BackupManagerTray] "C:\Program Files\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe" -k
O4 - HKLM\..\Run: [Acer ePower Management] C:\Program Files\Acer\Acer PowerSmart Manager\ePowerTrayLauncher.exe
O4 - HKLM\..\Run: [EgisTecLiveUpdate] "C:\Program Files\EgisTec Egis Software Update\EgisUpdate.exe"
O4 - HKLM\..\Run: [mwlDaemon] C:\Program Files\EgisTec\MyWinLocker 3\x86\mwlDaemon.exe
O4 - HKLM\..\Run: [PlayMovie] "C:\Program Files\Acer Arcade Deluxe\PlayMovie\PMVService.exe"
O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
O4 - HKLM\..\Run: [HCWemmon] HCWemmon.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [mcagent_exe] "C:\Program Files\McAfee.com\Agent\mcagent.exe" /runkey
O4 - HKLM\..\Run: [McENUI] C:\PROGRA~1\McAfee\MHN\McENUI.exe /hide
O4 - HKLM\..\Run: [PLFSetI] C:\Windows\PLFSetI.exe
O4 - HKLM\..\Run: [LGPCSuiteLanucher] "C:\Program Files\LG PC Suite 2\LGPCSuiteLanucher_Setup.exe" /tray
O4 - HKLM\..\Run: [CLMLServer] "C:\Program Files\Acer Arcade Deluxe\Acer Arcade Deluxe\Kernel\CLML\CLMLSvc.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [ISUSPM] "C:\ProgramData\Macrovision\FLEXnet Connect\6\ISUSPM.exe" -scheduler
O4 - HKCU\..\Run: [DriverUpdaterPro] C:\Program Files\iXi Tools\Driver Updater Pro\DriverUpdaterPro.exe -t
O4 - HKCU\..\Run: [WeatherDPA] "C:\Program Files\Hotbar\bin\11.0.78.0\Weather.exe" -auto
O4 - HKCU\..\Run: [9Giga Synchro] "C:\Program Files\SFR\9Giga Synchro\9Giga_Synchro.exe" /delayed
O4 - HKCU\..\Run: [EPSON SX410 Series] C:\Windows\system32\spool\DRIVERS\W32X86\3\E_FATIFCE.EXE /FU "C:\Windows\TEMP\E_S231A.tmp" /EF "HKCU"
O4 - HKCU\..\Run: [WinUsr] C:\Program Files\Winsudate\gibusr.exe
O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (Usuario 'SERVICIO LOCAL')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (Usuario 'SERVICIO LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (Usuario 'SERVICIO RED')
O4 - Inicio: LimeWire Al iniciar.lnk = C:\Program Files\LimeWire\LimeWire.exe
O4 - Inicio: OneNote 2007 - Captura de pantalla y lanzamiento.lnk = C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE
O8 - Elemento de menú contextual adicional: E&xportar a Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
O8 - Elemento de menú contextual adicional: Google Sidewiki... - res://C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_60D6097707281E79.dll/cmsidewiki.html
O9 - Botón extra: Agregar Directo - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Elemento de menú 'Herramientas' adicional: &Agregar Directo en Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Botón extra: Enviar a OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Elemento de menú 'Herramientas' adicional: &Enviar a OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Botón extra: Investigación - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
O13 - Prefijo Gopher:
O15 - Zona de confianza: http://*.mcafee.com
O16 - DPF: {8100D56A-5661-482C-BEE8-AFECE305D968} (Control de Cargador de Fotos de Facebook 5) - http://upload.facebook.com/controls/2009.07.28_v5.5.8.1/FacebookPhotoUploader55.cab
O18 - Protocolo: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll
O18 - Protocolo: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll
O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~1\GOEC62~1.DLL
O23 - Servicio: Agere Modem Call Progress Audio (AgereModemAudio) - Agere Systems - C:\Windows\system32\agrsmsvc.exe
O23 - Servicio: Ati External Event Utility - ATI Technologies Inc. - C:\Windows\system32\Ati2evxx.exe
O23 - Servicio: CLHNService - Propietario desconocido - C:\Program Files\Acer Arcade Deluxe\HomeMedia\Kernel\DMP\CLHNService.exe
O23 - Servicio: Acer ePower Service (ePowerSvc) - Acer Incorporated - C:\Program Files\Acer\Acer PowerSmart Manager\ePowerSvc.exe
O23 - Servicio: EPSON V5 Service4(01) (EPSON_EB_RPCV4_01) - SEIKO EPSON CORPORATION - C:\ProgramData\EPSON\EPW!3 SSRP\E_S40ST7.EXE
O23 - Servicio: EPSON V3 Service4(01) (EPSON_PM_RPCV4_01) - SEIKO EPSON CORPORATION - C:\ProgramData\EPSON\EPW!3 SSRP\E_S40RP7.EXE
O23 - Servicio: Google Desktop Manager 5.9.911.3589 (GoogleDesktopManager-110309-193829) - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
O23 - Servicio: Servicio Google Update (gupdate1ca790f1ca5af16) (gupdate1ca790f1ca5af16) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Servicio: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Servicio: McAfee SiteAdvisor Service - McAfee, Inc. - C:\Program Files\McAfee\SiteAdvisor\McSACore.exe
O23 - Servicio: Servicios McAfee (mcmscsvc) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe
O23 - Servicio: Agente de red McAfee (McNASvc) - McAfee, Inc. - c:\PROGRA~1\COMMON~1\mcafee\mna\mcnasvc.exe
O23 - Servicio: Escáner de McAfee (McODS) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcods.exe
O23 - Servicio: Servicio Proxy de McAfee (McProxy) - McAfee, Inc. - c:\PROGRA~1\COMMON~1\mcafee\mcproxy\mcproxy.exe
O23 - Servicio: Escáner en tiempo real de McAfee (McShield) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe
O23 - Servicio: Sistema de Monitoreo de McAfee (McSysmon) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe
O23 - Servicio: Servicio de Firewall Personal de McAfee (MpfService) - McAfee, Inc. - C:\Program Files\McAfee\MPF\MPFSrv.exe
O23 - Servicio: Servicio Anti-Spam de McAfee (MSK80Service) - McAfee, Inc. - C:\Program Files\McAfee\MSK\MskSrver.exe
O23 - Servicio: Servicio MyWinLocker (MWLService) - EgisTec Inc. - C:\Program Files\EgisTec\MyWinLocker 3\x86\\MWLService.exe
O23 - Servicio: NTI IScheduleSvc - NewTech Infosystems, Inc. - C:\Program Files\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe
O23 - Servicio: Servicio de respaldo NTI Backup Now 5 (NTIBackupSvc) - NewTech InfoSystems, Inc. - C:\Program Files\NewTech Infosystems\NTI Backup Now 5\BackupSvc.exe
O23 - Servicio: Servicio de programación de NTI Backup Now 5 (NTISchedulerSvc) - NewTech Infosystems, Inc. - C:\Program Files\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe
O23 - Servicio: Servicio SFR Gestión de Conexión (ServiceSFRABCD) - SFR & Celliance - C:\Program Files\SFR\Gestionnaire de Connexion SFR\SFRABCDService.exe
O23 - Servicio: Gestor de actualizaciones Winsudate (WinSvc) - Winsudate - C:\Program Files\Winsudate\gibsvc.exe
--
Fin del archivo - 13857 bytes
======Carpeta de tareas programadas======
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
C:\Windows\tasks\McDefragTask.job
C:\Windows\tasks\McQcTask.job
C:\Windows\tasks\Registry_Doktor.job
C:\Windows\tasks\User_Feed_Synchronization-{E74167C7-A661-4873-BB03-F3A3BFAACEB8}.job
======Volcado del registro======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2008-06-11 75128]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{27B4851A-3207-45A2-B947-BE8AFE6163AB}]
McAfee Phishing Filter - c:\PROGRA~1\mcafee\msk\mskapbho.dll [2009-10-02 246800]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5C255C8A-E604-49b4-9D64-90988571CECB}]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6EBF7485-159F-4bff-A14F-B9E3AAC4465B}]
Search Helper - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll [2009-05-19 137600]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7DB2D5A0-7241-4E79-B68D-6309F01C5231}]
scriptproxy - C:\Program Files\McAfee\VirusScan\scriptsn.dll [2009-11-04 62784]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Programa de ayuda del Asistente de conexión Windows Live ID - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-03-30 403824]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9421DD08-935F-4701-A9CA-22DF90AC4EA6}]
Easy Photo Print - C:\Program Files\Epson Software\Easy Photo Print\EPTBL.dll [2008-04-02 266240]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2009-11-24 263280]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]
Google Toolbar Notifier BHO - C:\Program Files\Google\GoogleToolbarNotifier\5.4.4525.1752\swg.dll [2009-11-22 764912]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B164E929-A1B6-4A06-B104-2CD0E90A88FF}]
McAfee SiteAdvisor BHO - c:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll [2009-11-23 204048]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2009-10-11 41760]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E15A8DC0-8516-42A1-81EA-DC94EC1ACF10}]
Windows Live Toolbar Helper - C:\Program Files\Windows Live\Toolbar\wltcore.dll [2009-02-06 1068904]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{21FA44EF-376D-4D53-9B0F-8A89D3229068} - &Windows Live Toolbar - C:\Program Files\Windows Live\Toolbar\wltcore.dll [2009-02-06 1068904]
{90B8B761-DF2B-48AC-BBE0-BCC03A819B3B}
{2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2009-11-24 263280]
{0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - McAfee SiteAdvisor Toolbar - c:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll [2009-11-23 204048]
{9421DD08-935F-4701-A9CA-22DF90AC4EA6} - Easy Photo Print - C:\Program Files\Epson Software\Easy Photo Print\EPTBL.dll [2008-04-02 266240]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"Windows Defender"=C:\Program Files\Windows Defender\MSASCui.exe [2008-01-21 1008184]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2008-06-12 34672]
"ArcadeDeluxeAgent"=C:\Program Files\Acer Arcade Deluxe\Acer Arcade Deluxe\ArcadeDeluxeAgent.exe [2009-09-17 156968]
"StartCCC"=C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2009-01-27 61440]
"AmIcoSinglun"=C:\Program Files\AmIcoSingLun\AmIcoSinglun.exe [2008-10-24 237568]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [2009-03-11 6957600]
"Skytel"=C:\Program Files\Realtek\Audio\HDA\Skytel.exe [2009-03-11 1833504]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2008-12-05 1410344]
"LManager"=C:\Program Files\Launch Manager\LManager.exe [2009-02-24 870920]
"BackupManagerTray"=C:\Program Files\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe [2009-03-20 249600]
"Acer ePower Management"=C:\Program Files\Acer\Acer PowerSmart Manager\ePowerTrayLauncher.exe [2009-04-15 440864]
"EgisTecLiveUpdate"=C:\Program Files\EgisTec Egis Software Update\EgisUpdate.exe [2008-10-27 199464]
"mwlDaemon"=C:\Program Files\EgisTec\MyWinLocker 3\x86\mwlDaemon.exe [2008-10-27 346672]
"PlayMovie"=C:\Program Files\Acer Arcade Deluxe\PlayMovie\PMVService.exe [2009-06-16 173288]
"Google Desktop Search"=C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe [2009-11-20 30192]
"HCWemmon"=C:\Windows\HCWemmon.exe [2007-03-29 61440]
"SunJavaUpdateSched"=C:\Program Files\Java\jre6\bin\jusched.exe [2009-10-11 149280]
"mcagent_exe"=C:\Program Files\McAfee.com\Agent\mcagent.exe [2009-10-29 1218008]
"McENUI"=C:\PROGRA~1\McAfee\MHN\McENUI.exe [2009-07-07 1176808]
"PLFSetI"=C:\Windows\PLFSetI.exe [2008-07-29 200704]
"LGPCSuiteLanucher"=C:\Program Files\LG PC Suite 2\LGPCSuiteLanucher_Setup.exe [2007-08-31 2637824]
"CLMLServer"=C:\Program Files\Acer Arcade Deluxe\Acer Arcade Deluxe\Kernel\CLML\CLMLSvc.exe [2009-07-02 206120]
"QuickTime Task"=C:\Program Files\QuickTime\QTTask.exe [2009-11-10 417792]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"msnmsgr"=C:\Program Files\Windows Live\Messenger\msnmsgr.exe [2009-07-26 3883856]
"ehTray.exe"=C:\Windows\ehome\ehTray.exe [2008-01-21 125952]
"ISUSPM"=C:\ProgramData\Macrovision\FLEXnet Connect\6\ISUSPM.exe [2007-03-29 222128]
"DriverUpdaterPro"=C:\Program Files\iXi Tools\Driver Updater Pro\DriverUpdaterPro.exe -t []
"WeatherDPA"=C:\Program Files\Hotbar\bin\11.0.78.0\Weather.exe -auto []
"9Giga Synchro"=C:\Program Files\SFR\9Giga Synchro\9Giga_Synchro.exe [2008-12-19 6931848]
"EPSON SX410 Series"=C:\Windows\system32\spool\DRIVERS\W32X86\3\E_FATIFCE.EXE [2008-10-02 199680]
-
Voici le second
info.txt fichier journal des informations système de random 1.06 2010-01-26 21:01:04
======Liste de désinstallation======
-->C:\Program Files\DivX\DivXConverterUninstall.exe /CONVERTER
-->C:\Windows\system32\Macromed\Flash\uninstall_plugin.exe
-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{A450831D-25F6-4F42-9662-D000B25E0D82}\Setup.exe" -uninstall
-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{AA4BF92B-2AAF-11DA-9D78-000129760D75}\Setup.exe" -uninstall
9Giga Synchro v2.9.2-->"C:\Program Files\SFR\9Giga Synchro\unins000.exe"
ABBYY FineReader 6.0 Sprint-->MsiExec.exe /I{ACF60000-22B9-4CE9-98D6-2CCF359BAC07}
Acer Arcade Deluxe-->"C:\Program Files\InstallShield Installation Information\{2637C347-9DAD-11D6-9EA2-00055D0CA761}\Setup.exe" /z-uninstall
Acer Arcade Deluxe-->"C:\Program Files\InstallShield Installation Information\{2637C347-9DAD-11D6-9EA2-00055D0CA761}\Setup.exe" /z-uninstall
Acer Backup Manager-->C:\Program Files\InstallShield Installation Information\{72B776E5-4530-4C4B-9453-751DF87D9D93}\setup.exe -runfromtemp -l0x040c
Acer Crystal Eye Webcam-->C:\Program Files\InstallShield Installation Information\{A77255C4-AFCB-44A3-BF0F-2091A71FFD9E}\setup.exe -runfromtemp -l0x040c -removeonly
Acer eRecovery Management-->"C:\Program Files\InstallShield Installation Information\{7F811A54-5A09-4579-90E1-C93498E230D9}\setup.exe" -runfromtemp -l0x040c -removeonly
Acer GridVista-->C:\Windows\GVUni.exe GridV.UNI
Acer PowerSmart Manager-->"C:\Program Files\InstallShield Installation Information\{3DB0448D-AD82-4923-B305-D001E521A964}\setup.exe" -runfromtemp -l0x040c -removeonly
Acer Product Registration-->"C:\Program Files\InstallShield Installation Information\{DA20E1A8-07CB-4EE7-9B72-A7E28C953F0E}\setup.exe" -runfromtemp -l0x040c -removeonly
Acer ScreenSaver-->C:\Windows\Screensavers\Acer\Uninstall.exe
Adobe Flash Player 10 ActiveX-->C:\Windows\system32\Macromed\Flash\uninstall_activeX.exe
Adobe Flash Player 10 Plugin-->MsiExec.exe /X{0DFB3DE8-65B9-44FF-AA0A-3BECC5A2BFD1}
Adobe Reader 9 - Français-->MsiExec.exe /I{AC76BA86-7AD7-1036-7B44-A90000000001}
Agere Systems HDA Modem-->agrsmdel
Airport Mania First Flight-->"C:\Program Files\Acer GameZone\Airport Mania First Flight\Uninstall.exe" "C:\Program Files\Acer GameZone\Airport Mania First Flight\install.log"
AmIcoSingLun-->C:\Program Files\InstallShield Installation Information\{BF91B300-EEBC-4223-96F3-0FCBF7241B50}\setup.exe -runfromtemp -l0x0409
Apple Application Support-->MsiExec.exe /I{3FA365DF-2D68-45ED-8F83-8C8A33E65143}
Apple Software Update-->MsiExec.exe /I{6956856F-B6B3-4BE0-BA0B-8F495BE32033}
Assistant de connexion Windows Live ID-->MsiExec.exe /X{10A44844-4465-456E-8C97-80BDD4F68845}
Broadcom Gigabit NetLink Controller-->MsiExec.exe /X{9AF0B106-56F1-461B-A270-95BC1682E282}
C:\Program Files\Acer GameZone\GameConsole-->"C:\Program Files\Acer GameZone\GameConsole\unins000.exe"
Cake Mania 2-->"C:\Program Files\Acer GameZone\Cake Mania 2\Uninstall.exe" "C:\Program Files\Acer GameZone\Cake Mania 2\install.log"
Catalyst Control Center - Branding-->MsiExec.exe /I{E430067C-7254-40B6-A8F8-5EEF57A68F1A}
Cooking Dash-->"C:\Program Files\Acer GameZone\Cooking Dash\Uninstall.exe" "C:\Program Files\Acer GameZone\Cooking Dash\install.log"
Cradle of Rome-->"C:\Program Files\Acer GameZone\Cradle of Rome\Uninstall.exe" "C:\Program Files\Acer GameZone\Cradle of Rome\install.log"
Dairy Dash-->"C:\Program Files\Acer GameZone\Dairy Dash\Uninstall.exe" "C:\Program Files\Acer GameZone\Dairy Dash\install.log"
DivX Codec-->C:\Program Files\DivX\DivXCodecUninstall.exe /CODEC
DivX Converter Mobile-->C:\Program Files\DivX\DivXConverterMeUninstall.exe /CONVERTERME
DivX Converter-->C:\Program Files\DivX\DivXConverterUninstall.exe /CONVERTER
DivX Player-->C:\Program Files\DivX\DivXPlayerUninstall.exe /PLAYER
DivX Plus DirectShow Filters-->C:\Program Files\DivX\DivXDSFiltersUninstall.exe /DSFILTERS
DivX Plus Web Player-->C:\Program Files\DivX\DivXWebPlayerUninstall.exe /PLUGIN
Dream Day Honeymoon-->"C:\Program Files\Acer GameZone\Dream Day Honeymoon\Uninstall.exe" "C:\Program Files\Acer GameZone\Dream Day Honeymoon\install.log"
Dream Day Wedding-->"C:\Program Files\Acer GameZone\Dream Day Wedding\Uninstall.exe" "C:\Program Files\Acer GameZone\Dream Day Wedding\install.log"
eMule-->"C:\Program Files\eMule\Uninstall.exe"
Epson Easy Photo Print 2-->C:\Program Files\InstallShield Installation Information\{87C2248A-C7DD-49ED-9BCD-B312A9D0819E}\SETUP.EXE -runfromtemp -l0x040c UNINST -removeonly
EPSON Scan-->C:\Program Files\epson\escndv\setup\setup.exe /r
Epson Stylus SX210_SX410_TX210_TX410 Manuel-->C:\Program Files\EPSON\TPMANUAL\ESSX210_410_TX210_410\FRA\USE_G\DOCUNINS.EXE
EPSON SX410 Series Printer Uninstall-->C:\Windows\system32\spool\DRIVERS\W32X86\3\E_FINSFCE.EXE /R /APD /P:"EPSON SX410 Series"
eSobi v2-->C:\Program Files\InstallShield Installation Information\{15D967B5-A4BE-42AE-9E84-64CD062B25AA}\setup.exe -runfromtemp -l0x040c
Full Pack Codecs-->C:\Program Files\Full Pack Codecs\uninst.exe
Galapago-->"C:\Program Files\Acer GameZone\Galapago\Uninstall.exe" "C:\Program Files\Acer GameZone\Galapago\install.log"
Galerie de photos Windows Live-->MsiExec.exe /X{B131E59D-202C-43C6-84C9-68F0C37541F1}
Gestionnaire de Connexion SFR 2009.09-->"C:\Program Files\SFR\Gestionnaire de Connexion SFR\unins000.exe"
Google Chrome-->"C:\Program Files\Google\Chrome\Application\3.0.195.38\Installer\setup.exe" --uninstall --system-level
Google Desktop-->C:\Program Files\Google\Google Desktop Search\GoogleDesktopSetup.exe -uninstall
Google Toolbar for Internet Explorer-->"C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarManager_0E996B068B56FCA2.exe" /uninstall
Google Toolbar for Internet Explorer-->MsiExec.exe /I{18455581-E099-4BA8-BC6B-F34B2F06600C}
Google Update Helper-->MsiExec.exe /I{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}
HijackThis 2.0.2-->"C:\Program Files\trend micro\HijackThis.exe" /uninstall
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)-->C:\Windows\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall /qb+ REBOOTPROMPT=""
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)-->C:\Windows\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall {A7EEA2F2-BFCD-4A54-A575-7B81A786E658} /qb+ REBOOTPROMPT=""
Installation Windows Live-->C:\Program Files\Windows Live\Installer\wlarp.exe
Installation Windows Live-->MsiExec.exe /I{46ABBC54-1872-4AA3-95E2-F2C063A63F31}
InterVideo FilterSDK for Hauppauge-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{2227E1FA-01F5-483C-AB0E-2A308E900B3D}\setup.exe" REMOVEALL
Java(TM) 6 Update 17-->MsiExec.exe /X{26A24AE4-039D-4CA4-87B4-2F83216016FF}
Jewel Quest Solitaire-->"C:\Program Files\Acer GameZone\Jewel Quest Solitaire\Uninstall.exe" "C:\Program Files\Acer GameZone\Jewel Quest Solitaire\install.log"
Junk Mail filter update-->MsiExec.exe /I{E2DFE069-083E-4631-9B6C-43C48E991DE5}
K-Lite Codec Pack 5.4.6 (Full) BETA-->"C:\Program Files\K-Lite Codec Pack\unins000.exe"
Launch Manager-->C:\Windows\UNINST32.EXE LManager.UNI
LG PC Suite-->C:\Program Files\InstallShield Installation Information\{993960EE-CA4D-443F-8F88-E24260DD5FD2}\setup.exe -runfromtemp -l0x040c -removeonly
LG USB Modem driver-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\10\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{C3ABE126-2BB2-4246-BFE1-6797679B3579}\setup.exe" -l0x40c LG -removeonly
LimeWire 5.4.6-->"C:\Program Files\LimeWire\uninstall.exe"
Luxor 2-->"C:\Program Files\Acer GameZone\Luxor 2\Uninstall.exe" "C:\Program Files\Acer GameZone\Luxor 2\install.log"
Mahjong Escape Ancient China-->"C:\Program Files\Acer GameZone\Mahjong Escape Ancient China\Uninstall.exe" "C:\Program Files\Acer GameZone\Mahjong Escape Ancient China\install.log"
McAfee SecurityCenter-->C:\Program Files\McAfee\MSC\mcuninst.exe
McAfee Virtual Technician-->MsiExec.exe /I{49FA793C-785E-47E9-93DF-BD442B0B45D1}
Microsoft .NET Framework 3.5 Language Pack SP1 - fra-->MsiExec.exe /I{3E31821C-7917-367E-938E-E65FC413EA31}
Microsoft .NET Framework 3.5 SP1-->c:\Windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setup.exe
Microsoft .NET Framework 3.5 SP1-->MsiExec.exe /I{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}
Microsoft Choice Guard-->MsiExec.exe /X{F0E12BBA-AD66-4022-A453-A1C8A0C4D570}
Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-0016-040C-0000-0000000FF1CE} /uninstall {AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}
Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-0018-040C-0000-0000000FF1CE} /uninstall {AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}
Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001B-040C-0000-0000000FF1CE} /uninstall {AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}
Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-006E-040C-0000-0000000FF1CE} /uninstall {B165D3C2-40AE-4D39-86F7-E5C87C4264C0}
Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-00A1-040C-0000-0000000FF1CE} /uninstall {AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}
Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {0B36C6D6-F5D8-4EAF-BF94-4376A230AD5B}
Microsoft Office Excel MUI (French) 2007-->MsiExec.exe /X{90120000-0016-040C-0000-0000000FF1CE}
Microsoft Office Home and Student 2007-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE12\Office Setup Controller\setup.exe" /uninstall HOMESTUDENTR /dll OSETUP.DLL
Microsoft Office Home and Student 2007-->MsiExec.exe /X{91120000-002F-0000-0000-0000000FF1CE}
Microsoft Office Live Add-in 1.4-->MsiExec.exe /I{AE3CF174-872C-46C6-B9F6-C0593F3BC7B8}
Microsoft Office OneNote MUI (French) 2007-->MsiExec.exe /X{90120000-00A1-040C-0000-0000000FF1CE}
Microsoft Office PowerPoint MUI (French) 2007-->MsiExec.exe /X{90120000-0018-040C-0000-0000000FF1CE}
Microsoft Office PowerPoint Viewer 2007 (French)-->MsiExec.exe /X{95120000-00AF-040C-0000-0000000FF1CE}
Microsoft Office Proof (Arabic) 2007-->MsiExec.exe /X{90120000-001F-0401-0000-0000000FF1CE}
Microsoft Office Proof (Dutch) 2007-->MsiExec.exe /X{90120000-001F-0413-0000-0000000FF1CE}
Microsoft Office Proof (English) 2007-->MsiExec.exe /X{90120000-001F-0409-0000-0000000FF1CE}
Microsoft Office Proof (French) 2007-->MsiExec.exe /X{90120000-001F-040C-0000-0000000FF1CE}
Microsoft Office Proof (German) 2007-->MsiExec.exe /X{90120000-001F-0407-0000-0000000FF1CE}
Microsoft Office Proof (Spanish) 2007-->MsiExec.exe /X{90120000-001F-0C0A-0000-0000000FF1CE}
Microsoft Office Proofing (French) 2007-->MsiExec.exe /X{90120000-002C-040C-0000-0000000FF1CE}
Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001F-0401-0000-0000000FF1CE} /uninstall {14809F99-C601-4D4A-9391-F1E8FAA964C5}
Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001F-0407-0000-0000000FF1CE} /uninstall {A0516415-ED61-419A-981D-93596DA74165}
Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001F-0409-0000-0000000FF1CE} /uninstall {ABDDE972-355B-4AF1-89A8-DA50B7B5C045}
Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001F-040C-0000-0000000FF1CE} /uninstall {F580DDD5-8D37-4998-968E-EBB76BB86787}
Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001F-0413-0000-0000000FF1CE} /uninstall {D66D5A44-E480-4BA4-B4F2-C554F6B30EBB}
Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001F-0C0A-0000-0000000FF1CE} /uninstall {187308AB-5FA7-4F14-9AB9-D290383A10D9}
Microsoft Office Shared MUI (French) 2007-->MsiExec.exe /X{90120000-006E-040C-0000-0000000FF1CE}
Microsoft Office Suite Activation Assistant-->MsiExec.exe /X{E50AE784-FABE-46DA-A1F8-7B6B56DCB22E}
Microsoft Office Word MUI (French) 2007-->MsiExec.exe /X{90120000-001B-040C-0000-0000000FF1CE}
Microsoft Search Enhancement Pack-->MsiExec.exe /X{4CBA3D4C-8F51-4D60-B27E-F6B641C571E7}
Microsoft Silverlight-->MsiExec.exe /X{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}
Microsoft SQL Server 2005 Compact Edition [ENU]-->MsiExec.exe /I{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}
Microsoft Sync Framework Runtime Native v1.0 (x86)-->MsiExec.exe /I{8A74E887-8F0F-4017-AF53-CBA42211AAA5}
Microsoft Sync Framework Services Native v1.0 (x86)-->MsiExec.exe /I{BD64AF4A-8C80-4152-AD77-FCDDF05208AB}
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053-->MsiExec.exe /X{770657D0-A123-3C07-8E44-1C83EC895118}
Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{A49F249F-0C91-497F-86DF-B2585E8E76B7}
Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148-->MsiExec.exe /X{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022-->MsiExec.exe /X{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}
Microsoft Works-->MsiExec.exe /I{0214A441-A4AB-43A8-8DEF-2F73C5364673}
Mise à jour Microsoft Office Excel 2007 Help (KB963678)-->msiexec /package {90120000-0016-040C-0000-0000000FF1CE} /uninstall {B761869A-B85C-40E2-994C-A1CE78AC8F2C}
Mise à jour Microsoft Office Powerpoint 2007 Help (KB963669)-->msiexec /package {90120000-0018-040C-0000-0000000FF1CE} /uninstall {C3DCA38E-005E-41BA-A52A-7C3429F351C3}
Mise à jour Microsoft Office Word 2007 Help (KB963665)-->msiexec /package {90120000-001B-040C-0000-0000000FF1CE} /uninstall {81536A04-DBFB-4DB3-978F-0F284590C223}
Module de compatibilité pour Microsoft Office System 2007-->MsiExec.exe /X{90120000-0020-040C-0000-0000000FF1CE}
Module linguistique Microsoft .NET Framework 3.5 SP1- fra-->c:\Windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 Language Pack SP1 - fra\setup.exe
MSVCRT-->MsiExec.exe /I{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}
MSXML 4.0 SP2 (KB954430)-->MsiExec.exe /I{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
MSXML 4.0 SP2 (KB973688)-->MsiExec.exe /I{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}
MyWinLocker-->MsiExec.exe /X{68301905-2DEA-41CE-A4D4-E8B443B099BA}
NTI Backup Now 5-->C:\Program Files\InstallShield Installation Information\{12EFA1A4-AC3B-443C-8143-237EDE760403}\setup.exe -runfromtemp -l0x040c
NTI Media Maker 8-->C:\Program Files\InstallShield Installation Information\{2413930C-8309-47A6-BC61-5EF27A4222BC}\setup.exe -runfromtemp -l0x040c
Ocean Express-->"C:\Program Files\Acer GameZone\Ocean Express\Uninstall.exe" "C:\Program Files\Acer GameZone\Ocean Express\install.log"
Orion-->MsiExec.exe /X{5B63A470-9334-44D1-AF61-6CE2DB565AE9}
Outil de téléchargement Windows Live-->MsiExec.exe /I{205C6BDD-7B73-42DE-8505-9A093F35A238}
Parking Dash-->"C:\Program Files\Acer GameZone\Parking Dash\Uninstall.exe" "C:\Program Files\Acer GameZone\Parking Dash\install.log"
Puzzle Express-->"C:\Program Files\Acer GameZone\Puzzle Express\Uninstall.exe" "C:\Program Files\Acer GameZone\Puzzle Express\install.log"
QuickTime-->MsiExec.exe /I{1451DE6B-ABE1-4F62-BE9A-B363A17588A2}
Realtek High Definition Audio Driver-->C:\Program Files\Realtek\Audio\HDA\RtlUpd.exe -r -m -nrg2709
Security Update for 2007 Microsoft Office System (KB969559)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {69F52148-9BF6-4CDC-BF76-103DEAF3DD08}
Security Update for 2007 Microsoft Office System (KB973704)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {E626DC89-A787-4553-9BB3-DC2EC7E1593F}
Security Update for Microsoft Office Excel 2007 (KB973593)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {7D6255E3-3423-4D8B-A328-F6F8D28DD5FE}
Security Update for Microsoft Office PowerPoint 2007 (KB957789)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {7559E742-FF9F-4FAE-B279-008ED296CB4D}
Security Update for Microsoft Office system 2007 (972581)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {3D019598-7B59-447A-80AE-815B703B84FF}
Security Update for Microsoft Office system 2007 (KB969613)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {5ECEB317-CBE9-4E08-AB10-756CB6F0FB6C}
Security Update for Microsoft Office system 2007 (KB974234)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {FCD742B9-7A55-44BC-A776-F795F21FEDDC}
Security Update for Microsoft Office Visio Viewer 2007 (KB973709)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {71127777-8B2C-4F97-AF7A-6CF8CAC8224D}
Synaptics Pointing Device Driver-->rundll32.exe "C:\Program Files\Synaptics\SynTP\SynISDLL.dll",standAloneUninstall
Tradewinds 2-->"C:\Program Files\Acer GameZone\Tradewinds 2\Uninstall.exe" "C:\Program Files\Acer GameZone\Tradewinds 2\install.log"
Tri-Peaks Solitaire To Go-->"C:\Program Files\Acer GameZone\Tri-Peaks Solitaire To Go\Uninstall.exe" "C:\Program Files\Acer GameZone\Tri-Peaks Solitaire To Go\install.log"
Turbo Pizza-->"C:\Program Files\Acer GameZone\Turbo Pizza\Uninstall.exe" "C:\Program Files\Acer GameZone\Turbo Pizza\install.log"
Update for 2007 Microsoft Office System (KB967642)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {C444285D-5E4F-48A4-91DD-47AAAA68E92D}
Update for Microsoft .NET Framework 3.5 SP1 (KB963707)-->C:\Windows\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall {B2AE9C82-DC7B-3641-BFC8-87275C4F3607} /qb+ REBOOTPROMPT=""
Update for Microsoft Office InfoPath 2007 (KB976416)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {432C5EE4-8096-4FF1-95E1-65219365DFF7}
Update for Microsoft Office Word 2007 (KB974561)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {0CDDBAA2-2111-4A0E-A1B0-76C40C635331}
VC80CRTRedist - 8.0.50727.4053-->MsiExec.exe /I{5EE7D259-D137-4438-9A5F-42F432EC0421}
VirginMega.Fr Premium-->MsiExec.exe /I{EE467474-04A8-48D5-8DDF-0F8D3A3CCBE5}
Vista Codec Package-->MsiExec.exe /I{F9FD80CE-0448-4D4F-8BCD-77FC514C3F99}
VLC media player 1.0.1-->C:\Program Files\VideoLAN\VLC\uninstall.exe
Wedding Dash-->"C:\Program Files\Acer GameZone\Wedding Dash\Uninstall.exe" "C:\Program Files\Acer GameZone\Wedding Dash\install.log"
Windows Live Call-->MsiExec.exe /I{82C7B308-0BDD-49D8-8EA5-9CD3A3F9DF41}
Windows Live Communications Platform-->MsiExec.exe /I{3B4E636E-9D65-4D67-BA61-189800823F52}
Windows Live Contrôle parental-->MsiExec.exe /X{D5D81435-B8DE-4CAF-867F-7998F2B92CFC}
Windows Live FolderShare-->MsiExec.exe /X{2075CB0A-D26F-4DAA-B424-5079296B43BA}
Windows Live Mail-->MsiExec.exe /I{5DD76286-9BE7-4894-A990-E905E91AC818}
Windows Live Messenger-->MsiExec.exe /X{770F1BEC-2871-4E70-B837-FB8525FFA3B1}
Windows Live Movie Maker-->MsiExec.exe /X{53B20C18-D8D4-4588-8737-9BBFE303C354}
Windows Live Toolbar-->MsiExec.exe /X{F7D27C70-90F5-49B9-B188-0A133C0CE353}
Windows Live Writer-->MsiExec.exe /X{4634B21A-CC07-4396-890C-2B8168661FEA}
Zuma Deluxe-->"C:\Program Files\Acer GameZone\Zuma Deluxe\Uninstall.exe" "C:\Program Files\Acer GameZone\Zuma Deluxe\install.log"
======Informations du centre de sécurité======
AS: Windows Defender
======Journal des événements système======
Nom de l'ordinateur: PC-de-ange
Code d'événement: 7000
Message: Le service Parallel port driver n'a pas pu démarrer en raison de l'erreur :
Le service ne peut pas être démarré parce qu'il est désactivé ou qu'aucun périphérique activé ne lui est associé.
Record Number: 50137
Source: Service Control Manager
Temps écrit: 20091008194222.000000-000
Type d'événement: Erreur
Utilisateur:
Nom de l'ordinateur: PC-de-ange
Code d'événement: 15016
Message: Impossible d’initialiser le package de sécurité Kerberos pour l’authentification côté serveur. Le champ de données contient le numéro de l’erreur.
Record Number: 50093
Source: Microsoft-Windows-HttpEvent
Temps écrit: 20091008194124.424959-000
Type d'événement: Erreur
Utilisateur:
Nom de l'ordinateur: PC-de-ange
Code d'événement: 4
Message: Broadcom NetLink (TM) Gigabit Ethernet: Le lien réseau est down. Assurez-vous que le câble réseau est correctement connecté.
Record Number: 50090
Source: k57nd60x
Temps écrit: 20091008194111.833304-000
Type d'événement: Avertissement
Utilisateur:
Nom de l'ordinateur: PC-de-ange
Code d'événement: 4001
Message: Le Service d’autoconfiguration WLAN s’est arrêté correctement.
Record Number: 50080
Source: Microsoft-Windows-WLAN-AutoConfig
Temps écrit: 20091007204020.542800-000
Type d'événement: Avertissement
Utilisateur: AUTORITE NT\SYSTEM
Nom de l'ordinateur: PC-de-ange
Code d'événement: 7000
Message: Le service Parallel port driver n'a pas pu démarrer en raison de l'erreur :
Le service ne peut pas être démarré parce qu'il est désactivé ou qu'aucun périphérique activé ne lui est associé.
Record Number: 50017
Source: Service Control Manager
Temps écrit: 20091007193222.000000-000
Type d'événement: Erreur
Utilisateur:
=====Journal des événements d'application=====
Nom de l'ordinateur: PC-de-ange
Code d'événement: 1534
Message: Échec de la notification du profil de l’événement Delete pour le composant {DE3F3560-3032-41B4-B6CF-F703B1B95640}. Le code d’erreur est -2147024875.
Record Number: 1200
Source: Microsoft-Windows-User Profiles Service
Temps écrit: 20090921232729.000000-000
Type d'événement: Avertissement
Utilisateur: AUTORITE NT\SYSTEM
Nom de l'ordinateur: PC-de-ange
Code d'événement: 2
Message: Impossible de supprimer les données indexées par le service Windows Search pour l’utilisateur 'PC-de-ange\Administrateur' suite à la suppression du profil utilisateur. Code d’erreur 0x80070015.
Le périphérique n'est pas prêt.
.
Record Number: 1199
Source: Microsoft-Windows-Search-ProfileNotify
Temps écrit: 20090921232729.000000-000
Type d'événement: Erreur
Utilisateur:
Nom de l'ordinateur: PC-de-ange
Code d'événement: 10 -
Voici le second
info.txt fichier journal de l'outil d'information système de random 1.06 2010-01-26 21:01:04
======Liste de désinstallation======
-->C:\Program Files\DivX\DivXConverterUninstall.exe /CONVERTER
-->C:\Windows\system32\Macromed\Flash\uninstall_plugin.exe
-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{A450831D-25F6-4F42-9662-D000B25E0D82}\Setup.exe" -uninstall
-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{AA4BF92B-2AAF-11DA-9D78-000129760D75}\Setup.exe" -uninstall
9Giga Synchro v2.9.2-->"C:\Program Files\SFR\9Giga Synchro\unins000.exe"
ABBYY FineReader 6.0 Sprint-->MsiExec.exe /I{ACF60000-22B9-4CE9-98D6-2CCF359BAC07}
Acer Arcade Deluxe-->"C:\Program Files\InstallShield Installation Information\{2637C347-9DAD-11D6-9EA2-00055D0CA761}\Setup.exe" /z-uninstall
Acer Arcade Deluxe-->"C:\Program Files\InstallShield Installation Information\{2637C347-9DAD-11D6-9EA2-00055D0CA761}\Setup.exe" /z-uninstall
Acer Backup Manager-->C:\Program Files\InstallShield Installation Information\{72B776E5-4530-4C4B-9453-751DF87D9D93}\setup.exe -runfromtemp -l0x040c
Acer Crystal Eye Webcam-->C:\Program Files\InstallShield Installation Information\{A77255C4-AFCB-44A3-BF0F-2091A71FFD9E}\setup.exe -runfromtemp -l0x040c -removeonly
Acer eRecovery Management-->"C:\Program Files\InstallShield Installation Information\{7F811A54-5A09-4579-90E1-C93498E230D9}\setup.exe" -runfromtemp -l0x040c -removeonly
Acer GridVista-->C:\Windows\GVUni.exe GridV.UNI
Acer PowerSmart Manager-->"C:\Program Files\InstallShield Installation Information\{3DB0448D-AD82-4923-B305-D001E521A964}\setup.exe" -runfromtemp -l0x040c -removeonly
Acer Product Registration-->"C:\Program Files\InstallShield Installation Information\{DA20E1A8-07CB-4EE7-9B72-A7E28C953F0E}\setup.exe" -runfromtemp -l0x040c -removeonly
Acer ScreenSaver-->C:\Windows\Screensavers\Acer\Uninstall.exe
Adobe Flash Player 10 ActiveX-->C:\Windows\system32\Macromed\Flash\uninstall_activeX.exe
Adobe Flash Player 10 Plugin-->MsiExec.exe /X{0DFB3DE8-65B9-44FF-AA0A-3BECC5A2BFD1}
Adobe Reader 9 - Français-->MsiExec.exe /I{AC76BA86-7AD7-1036-7B44-A90000000001}
Agere Systems HDA Modem-->agrsmdel
Airport Mania First Flight-->"C:\Program Files\Acer GameZone\Airport Mania First Flight\Uninstall.exe" "C:\Program Files\Acer GameZone\Airport Mania First Flight\install.log"
AmIcoSingLun-->C:\Program Files\InstallShield Installation Information\{BF91B300-EEBC-4223-96F3-0FCBF7241B50}\setup.exe -runfromtemp -l0x0409
Apple Application Support-->MsiExec.exe /I{3FA365DF-2D68-45ED-8F83-8C8A33E65143}
Apple Software Update-->MsiExec.exe /I{6956856F-B6B3-4BE0-BA0B-8F495BE32033}
Assistant de connexion Windows Live ID-->MsiExec.exe /X{10A44844-4465-456E-8C97-80BDD4F68845}
Broadcom Gigabit NetLink Controller-->MsiExec.exe /X{9AF0B106-56F1-461B-A270-95BC1682E282}
C:\Program Files\Acer GameZone\GameConsole-->"C:\Program Files\Acer GameZone\GameConsole\unins000.exe"
Cake Mania 2-->"C:\Program Files\Acer GameZone\Cake Mania 2\Uninstall.exe" "C:\Program Files\Acer GameZone\Cake Mania 2\install.log"
Catalyst Control Center - Branding-->MsiExec.exe /I{E430067C-7254-40B6-A8F8-5EEF57A68F1A}
Cooking Dash-->"C:\Program Files\Acer GameZone\Cooking Dash\Uninstall.exe" "C:\Program Files\Acer GameZone\Cooking Dash\install.log"
Cradle of Rome-->"C:\Program Files\Acer GameZone\Cradle of Rome\Uninstall.exe" "C:\Program Files\Acer GameZone\Cradle of Rome\install.log"
Dairy Dash-->"C:\Program Files\Acer GameZone\Dairy Dash\Uninstall.exe" "C:\Program Files\Acer GameZone\Dairy Dash\install.log"
DivX Codec-->C:\Program Files\DivX\DivXCodecUninstall.exe /CODEC
DivX Converter Mobile-->C:\Program Files\DivX\DivXConverterMeUninstall.exe /CONVERTERME
DivX Converter-->C:\Program Files\DivX\DivXConverterUninstall.exe /CONVERTER
DivX Player-->C:\Program Files\DivX\DivXPlayerUninstall.exe /PLAYER
DivX Plus DirectShow Filters-->C:\Program Files\DivX\DivXDSFiltersUninstall.exe /DSFILTERS
DivX Plus Web Player-->C:\Program Files\DivX\DivXWebPlayerUninstall.exe /PLUGIN
Dream Day Honeymoon-->"C:\Program Files\Acer GameZone\Dream Day Honeymoon\Uninstall.exe" "C:\Program Files\Acer GameZone\Dream Day Honeymoon\install.log"
Dream Day Wedding-->"C:\Program Files\Acer GameZone\Dream Day Wedding\Uninstall.exe" "C:\Program Files\Acer GameZone\Dream Day Wedding\install.log"
eMule-->"C:\Program Files\eMule\Uninstall.exe"
Epson Easy Photo Print 2-->C:\Program Files\InstallShield Installation Information\{87C2248A-C7DD-49ED-9BCD-B312A9D0819E}\SETUP.EXE -runfromtemp -l0x040c UNINST -removeonly
EPSON Scan-->C:\Program Files\epson\escndv\setup\setup.exe /r
Epson Stylus SX210_SX410_TX210_TX410 Manuel-->C:\Program Files\EPSON\TPMANUAL\ESSX210_410_TX210_410\FRA\USE_G\DOCUNINS.EXE
EPSON SX410 Series Printer Uninstall-->C:\Windows\system32\spool\DRIVERS\W32X86\3\E_FINSFCE.EXE /R /APD /P:"EPSON SX410 Series"
eSobi v2-->C:\Program Files\InstallShield Installation Information\{15D967B5-A4BE-42AE-9E84-64CD062B25AA}\setup.exe -runfromtemp -l0x040c
Full Pack Codecs-->C:\Program Files\Full Pack Codecs\uninst.exe
Galapago-->"C:\Program Files\Acer GameZone\Galapago\Uninstall.exe" "C:\Program Files\Acer GameZone\Galapago\install.log"
Galerie de photos Windows Live-->MsiExec.exe /X{B131E59D-202C-43C6-84C9-68F0C37541F1}
Gestionnaire de Connexion SFR 2009.09-->"C:\Program Files\SFR\Gestionnaire de Connexion SFR\unins000.exe"
Google Chrome-->"C:\Program Files\Google\Chrome\Application\3.0.195.38\Installer\setup.exe" --uninstall --system-level
Google Desktop-->C:\Program Files\Google\Google Desktop Search\GoogleDesktopSetup.exe -uninstall
Google Toolbar for Internet Explorer-->"C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarManager_0E996B068B56FCA2.exe" /uninstall
Google Toolbar for Internet Explorer-->MsiExec.exe /I{18455581-E099-4BA8-BC6B-F34B2F06600C}
Google Update Helper-->MsiExec.exe /I{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}
HijackThis 2.0.2-->"C:\Program Files\trend micro\HijackThis.exe" /uninstall
Hotfix pour Microsoft .NET Framework 3.5 SP1 (KB953595)-->C:\Windows\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall /qb+ REBOOTPROMPT=""
Hotfix pour Microsoft .NET Framework 3.5 SP1 (KB958484)-->C:\Windows\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall {A7EEA2F2-BFCD-4A54-A575-7B81A786E658} /qb+ REBOOTPROMPT=""
Installation Windows Live-->C:\Program Files\Windows Live\Installer\wlarp.exe
Installation Windows Live-->MsiExec.exe /I{46ABBC54-1872-4AA3-95E2-F2C063A63F31}
InterVideo FilterSDK for Hauppauge-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{2227E1FA-01F5-483C-AB0E-2A308E900B3D}\setup.exe" REMOVEALL
Java(TM) 6 Update 17-->MsiExec.exe /X{26A24AE4-039D-4CA4-87B4-2F83216016FF}
Jewel Quest Solitaire-->"C:\Program Files\Acer GameZone\Jewel Quest Solitaire\Uninstall.exe" "C:\Program Files\Acer GameZone\Jewel Quest Solitaire\install.log"
Junk Mail filter update-->MsiExec.exe /I{E2DFE069-083E-4631-9B6C-43C48E991DE5}
K-Lite Codec Pack 5.4.6 (Full) BETA-->"C:\Program Files\K-Lite Codec Pack\unins000.exe"
Launch Manager-->C:\Windows\UNINST32.EXE LManager.UNI
LG PC Suite-->C:\Program Files\InstallShield Installation Information\{993960EE-CA4D-443F-8F88-E24260DD5FD2}\setup.exe -runfromtemp -l0x040c -removeonly
LG USB Modem driver-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\10\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{C3ABE126-2BB2-4246-BFE1-6797679B3579}\setup.exe" -l0x40c LG -removeonly
LimeWire 5.4.6-->"C:\Program Files\LimeWire\uninstall.exe"
Luxor 2-->"C:\Program Files\Acer GameZone\Luxor 2\Uninstall.exe" "C:\Program Files\Acer GameZone\Luxor 2\install.log"
Mahjong Escape Ancient China-->"C:\Program Files\Acer GameZone\Mahjong Escape Ancient China\Uninstall.exe" "C:\Program Files\Acer GameZone\Mahjong Escape Ancient China\install.log"
McAfee SecurityCenter-->C:\Program Files\McAfee\MSC\mcuninst.exe
McAfee Virtual Technician-->MsiExec.exe /I{49FA793C-785E-47E9-93DF-BD442B0B45D1}
Microsoft .NET Framework 3.5 Language Pack SP1 - fra-->MsiExec.exe /I{3E31821C-7917-367E-938E-E65FC413EA31}
Microsoft .NET Framework 3.5 SP1-->c:\Windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setup.exe
Microsoft .NET Framework 3.5 SP1-->MsiExec.exe /I{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}
Microsoft Choice Guard-->MsiExec.exe /X{F0E12BBA-AD66-4022-A453-A1C8A0C4D570}
Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-0016-040C-0000-0000000FF1CE} /uninstall {AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}
Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-0018-040C-0000-0000000FF1CE} /uninstall {AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}
Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001B-040C-0000-0000000FF1CE} /uninstall {AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}
Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-006E-040C-0000-0000000FF1CE} /uninstall {B165D3C2-40AE-4D39-86F7-E5C87C4264C0}
Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-00A1-040C-0000-0000000FF1CE} /uninstall {AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}
Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {0B36C6D6-F5D8-4EAF-BF94-4376A230AD5B}
Microsoft Office Excel MUI (French) 2007-->MsiExec.exe /X{90120000-0016-040C-0000-0000000FF1CE}
Microsoft Office Home and Student 2007-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE12\Office Setup Controller\setup.exe" /uninstall HOMESTUDENTR /dll OSETUP.DLL
Microsoft Office Home and Student 2007-->MsiExec.exe /X{91120000-002F-0000-0000-0000000FF1CE}
Microsoft Office Live Add-in 1.4-->MsiExec.exe /I{AE3CF174-872C-46C6-B9F6-C0593F3BC7B8}
Microsoft Office OneNote MUI (French) 2007-->MsiExec.exe /X{90120000-00A1-040C-0000-0000000FF1CE}
Microsoft Office PowerPoint MUI (French) 2007-->MsiExec.exe /X{90120000-0018-040C-0000-0000000FF1CE}
Microsoft Office PowerPoint Viewer 2007 (French)-->MsiExec.exe /X{95120000-00AF-040C-0000-0000000FF1CE}
Microsoft Office Proof (Arabic) 2007-->MsiExec.exe /X{90120000-001F-0401-0000-0000000FF1CE}
Microsoft Office Proof (Dutch) 2007-->MsiExec.exe /X{90120000-001F-0413-0000-0000000FF1CE}
Microsoft Office Proof (English) 2007-->MsiExec.exe /X{90120000-001F-0409-0000-0000000FF1CE}
Microsoft Office Proof (French) 2007-->MsiExec.exe /X{90120000-001F-040C-0000-0000000FF1CE}
Microsoft Office Proof (German) 2007-->MsiExec.exe /X{90120000-001F-0407-0000-0000000FF1CE}
Microsoft Office Proof (Spanish) 2007-->MsiExec.exe /X{90120000-001F-0C0A-0000-0000000FF1CE}
Microsoft Office Proofing (French) 2007-->MsiExec.exe /X{90120000-002C-040C-0000-0000000FF1CE}
Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001F-0401-0000-0000000FF1CE} /uninstall {14809F99-C601-4D4A-9391-F1E8FAA964C5}
Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001F-0407-0000-0000000FF1CE} /uninstall {A0516415-ED61-419A-981D-93596DA74165}
Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001F-0409-0000-0000000FF1CE} /uninstall {ABDDE972-355B-4AF1-89A8-DA50B7B5C045}
Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001F-040C-0000-0000000FF1CE} /uninstall {F580DDD5-8D37-4998-968E-EBB76BB86787}
Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001F-0413-0000-0000000FF1CE} /uninstall {D66D5A44-E480-4BA4-B4F2-C554F6B30EBB}
Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001F-0C0A-0000-0000000FF1CE} /uninstall {187308AB-5FA7-4F14-9AB9-D290383A10D9}
Microsoft Office Shared MUI (French) 2007-->MsiExec.exe /X{90120000-006E-040C-0000-0000000FF1CE}
Microsoft Office Suite Activation Assistant-->MsiExec.exe /X{E50AE784-FABE-46DA-A1F8-7B6B56DCB22E}
Microsoft Office Word MUI (French) 2007-->MsiExec.exe /X{90120000-001B-040C-0000-0000000FF1CE}
Microsoft Search Enhancement Pack-->MsiExec.exe /X{4CBA3D4C-8F51-4D60-B27E-F6B641C571E7}
Microsoft Silverlight-->MsiExec.exe /X{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}
Microsoft SQL Server 2005 Compact Edition [ENU]-->MsiExec.exe /I{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}
Microsoft Sync Framework Runtime Native v1.0 (x86)-->MsiExec.exe /I{8A74E887-8F0F-4017-AF53-CBA42211AAA5}
Microsoft Sync Framework Services Native v1.0 (x86)-->MsiExec.exe /I{BD64AF4A-8C80-4152-AD77-FCDDF05208AB}
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053-->MsiExec.exe /X{770657D0-A123-3C07-8E44-1C83EC895118}
Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{A49F249F-0C91-497F-86DF-B2585E8E76B7}
Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148-->MsiExec.exe /X{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022-->MsiExec.exe /X{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}
Microsoft Works-->MsiExec.exe /I{0214A441-A4AB-43A8-8DEF-2F73C5364673}
Mise à jour Microsoft Office Excel 2007 Help (KB963678)-->msiexec /package {90120000-0016-040C-0000-0000000FF1CE} /uninstall {B761869A-B85C-40E2-994C-A1CE78AC8F2C}
Mise à jour Microsoft Office Powerpoint 2007 Help (KB963669)-->msiexec /package {90120000-0018-040C-0000-0000000FF1CE} /uninstall {C3DCA38E-005E-41BA-A52A-7C3429F351C3}
Mise à jour Microsoft Office Word 2007 Help (KB963665)-->msiexec /package {90120000-001B-040C-0000-0000000FF1CE} /uninstall {81536A04-DBFB-4DB3-978F-0F284590C223}
Module de compatibilité pour Microsoft Office System 2007-->MsiExec.exe /X{90120000-0020-040C-0000-0000000FF1CE}
Module linguistique Microsoft .NET Framework 3.5 SP1- fra-->c:\Windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 Language Pack SP1 - fra\setup.exe
MSVCRT-->MsiExec.exe /I{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}
MSXML 4.0 SP2 (KB954430)-->MsiExec.exe /I{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
MSXML 4.0 SP2 (KB973688)-->MsiExec.exe /I{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}
MyWinLocker-->MsiExec.exe /X{68301905-2DEA-41CE-A4D4-E8B443B099BA}
NTI Backup Now 5-->C:\Program Files\InstallShield Installation Information\{12EFA1A4-AC3B-443C-8143-237EDE760403}\setup.exe -runfromtemp -l0x040c
NTI Media Maker 8-->C:\Program Files\InstallShield Installation Information\{2413930C-8309-47A6-BC61-5EF27A4222BC}\setup.exe -runfromtemp -l0x040c
Ocean Express-->"C:\Program Files\Acer GameZone\Ocean Express\Uninstall.exe" "C:\Program Files\Acer GameZone\Ocean Express\install.log"
Orion-->MsiExec.exe /X{5B63A470-9334-44D1-AF61-6CE2DB565AE9}
Outil de téléchargement Windows Live-->MsiExec.exe /I{205C6BDD-7B73-42DE-8505-9A093F35A238}
Parking Dash-->"C:\Program Files\Acer GameZone\Parking Dash\Uninstall.exe" "C:\Program Files\Acer GameZone\Parking Dash\install.log"
Puzzle Express-->"C:\Program Files\Acer GameZone\Puzzle Express\Uninstall.exe" "C:\Program Files\Acer GameZone\Puzzle Express\install.log"
QuickTime-->MsiExec.exe /I{1451DE6B-ABE1-4F62-BE9A-B363A17588A2}
Realtek High Definition Audio Driver-->C:\Program Files\Realtek\Audio\HDA\RtlUpd.exe -r -m -nrg2709
Mise à jour de sécurité pour le système Microsoft Office 2007 (KB969559)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {69F52148-9BF6-4CDC-BF76-103DEAF3DD08}
Mise à jour de sécurité pour le système Microsoft Office 2007 (KB973704)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {E626DC89-A787-4553-9BB3-DC2EC7E1593F}
Mise à jour de sécurité pour Microsoft Office Excel 2007 (KB973593)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {7D6255E3-3423-4D8B-A328-F6F8D28DD5FE}
Mise à jour de sécurité pour Microsoft Office PowerPoint 2007 (KB957789)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {7559E742-FF9F-4FAE-B279-008ED296CB4D}
Mise à jour de sécurité pour le système Microsoft Office 2007 (972581)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {3D019598-7B59-447A-80AE-815B703B84FF}
Mise à jour de sécurité pour le système Microsoft Office 2007 (KB969613)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {5ECEB317-CBE9-4E08-AB10-756CB6F0FB6C}
Mise à jour de sécurité pour le système Microsoft Office 2007 (KB974234)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {FCD742B9-7A55-44BC-A776-F795F21FEDDC}
Mise à jour de sécurité pour le Visualiseur Microsoft Office Visio 2007 (KB973709)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {71127777-8B2C-4F97-AF7A-6CF8CAC8224D}
Pilote de périphérique de pointage Synaptics-->rundll32.exe "C:\Program Files\Synaptics\SynTP\SynISDLL.dll",standAloneUninstall
Tradewinds 2-->"C:\Program Files\Acer GameZone\Tradewinds 2\Uninstall.exe" "C:\Program Files\Acer GameZone\Tradewinds 2\install.log"
Tri-Peaks Solitaire To Go-->"C:\Program Files\Acer GameZone\Tri-Peaks Solitaire To Go\Uninstall.exe" "C:\Program Files\Acer GameZone\Tri-Peaks Solitaire To Go\install.log"
Turbo Pizza-->"C:\Program Files\Acer GameZone\Turbo Pizza\Uninstall.exe" "C:\Program Files\Acer GameZone\Turbo Pizza\install.log"
Mise à jour pour le système Microsoft Office 2007 (KB967642)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {C444285D-5E4F-48A4-91DD-47AAAA68E92D}
Mise à jour pour le Microsoft .NET Framework 3.5 SP1 (KB963707)-->C:\Windows\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall {B2AE9C82-DC7B-3641-BFC8-87275C4F3607} /qb+ REBOOTPROMPT=""
Mise à jour pour Microsoft Office InfoPath 2007 (KB976416)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {432C5EE4-8096-4FF1-95E1-65219365DFF7}
Mise à jour pour Microsoft Office Word 2007 (KB974561)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {0CDDBAA2-2111-4A0E-A1B0-76C40C635331}
VC80CRTRedist - 8.0.50727.4053-->MsiExec.exe /I{5EE7D259-D137-4438-9A5F-42F432EC0421}
VirginMega.Fr Premium-->MsiExec.exe /I{EE467474-04A8-48D5-8DDF-0F8D3A3CCBE5}
Vista Codec Package-->MsiExec.exe /I{F9FD80CE-0448-4D4F-8BCD-77FC514C3F99}
VLC media player 1.0.1-->C:\Program Files\VideoLAN\VLC\uninstall.exe
Wedding Dash-->"C:\Program Files\Acer GameZone\Wedding Dash\Uninstall.exe" "C:\Program Files\Acer GameZone\Wedding Dash\install.log"
Windows Live Call-->MsiExec.exe /I{82C7B308-0BDD-49D8-8EA5-9CD3A3F9DF41}
Windows Live Communications Platform-->MsiExec.exe /I{3B4E636E-9D65-4D67-BA61-189800823F52}
Windows Live Contrôle parental-->MsiExec.exe /X{D5D81435-B8DE-4CAF-867F-7998F2B92CFC}
Windows Live FolderShare-->MsiExec.exe /X{2075CB0A-D26F-4DAA-B424-5079296B43BA}
Windows Live Mail-->MsiExec.exe /I{5DD76286-9BE7-4894-A990-E905E91AC818}
Windows Live Messenger-->MsiExec.exe /X{770F1BEC-2871-4E70-B837-FB8525FFA3B1}
Windows Live Movie Maker-->MsiExec.exe /X{53B20C18-D8D4-4588-8737-9BBFE303C354}
Windows Live Toolbar-->MsiExec.exe /X{F7D27C70-90F5-49B9-B188-0A133C0CE353}
Windows Live Writer-->MsiExec.exe /X{4634B21A-CC07-4396-890C-2B8168661FEA}
Zuma Deluxe-->"C:\Program Files\Acer GameZone\Zuma Deluxe\Uninstall.exe" "C:\Program Files\Acer GameZone\Zuma Deluxe\install.log"
======Informations sur le centre de sécurité======
AS: Windows Defender
======Journal des événements système======
Nom de l'ordinateur: PC-de-ange
Code d'événement: 7000
Message: Le service du pilote de port parallèle n'a pas pu démarrer en raison de l'erreur :
Le service ne peut pas être démarré parce qu'il est désactivé ou qu'aucun périphérique activé ne lui est associé.
Numéro d'enregistrement: 50137
Nom de la source: Gestionnaire de contrôle des services
Temps écrit: 20091008194222.000000-000
Type d'événement: Erreur
Utilisateur:
Nom de l'ordinateur: PC-de-ange
Code d'événement: 15016
Message: Impossible d’initialiser le package de sécurité Kerberos pour l’authentification côté serveur. Le champ de données contient le numéro de l’erreur.
Numéro d'enregistrement: 50093
Nom de la source: Microsoft-Windows-HttpEvent
Temps écrit: 20091008194124.424959-000
Type d'événement: Erreur
Utilisateur:
Nom de l'ordinateur: PC-de-ange
Code d'événement: 4
Message: Broadcom NetLink (TM) Gigabit Ethernet: La connexion réseau est tombée. Vérifiez que le câble réseau est correctement connecté.
Numéro d'enregistrement: 50090
Nom de la source: k57nd60x
Temps écrit: 20091008194111.833304-000
Type d'événement: Avertissement
Utilisateur:
Nom de l'ordinateur: PC-de-ange
Code d'événement: 4001
Message: Le Service d’autoconfiguration WLAN s’est arrêté correctement.
Numéro d'enregistrement: 50080
Nom de la source: Microsoft-Windows-WLAN-AutoConfig
Temps écrit: 20091007204020.542800-000
Type d'événement: Avertissement
Utilisateur: AUTORITE NT\SYSTEM
Nom de l'ordinateur: PC-de-ange
Code d'événement: 7000
Message: Le service du pilote de port parallèle n'a pas pu démarrer en raison de l'erreur :
Le service ne peut pas être démarré parce qu'il est désactivé ou qu'aucun périphérique activé ne lui est associé.
Numéro d'enregistrement: 50017
Nom de la source: Gestionnaire de contrôle des services
Temps écrit: 20091007193222.000000-000
Type d'événement: Erreur
Utilisateur:
=====Journal des événements d'application=====
Nom de l'ordinateur: PC-de-ange
Code d'événement: 1534
Message: Échec de la notification du profil de l’événement Delete pour le composant {DE3F3560-3032-41B4-B6CF-F703B1B95640}. Le code d’erreur est -2147024875.
Numéro d'enregistrement: 1200
Nom de la source: Microsoft-Windows-User Profiles Service
Temps écrit: 20090921232729.000000-000
Type d'événement: Avertissement
Utilisateur: AUTORITE NT\SYSTEM
Nom de l'ordinateur: PC-de-ange
Code d'événement: 2
Message: Impossible de supprimer les données indexées par le service Windows Search pour l’utilisateur 'PC-de-ange\Administrateur' suite à la suppression du profil utilisateur. Code d’erreur 0x80070015.
Le périphérique n'est pas prêt.
.
Numéro d'enregistrement: 1199
Nom de la source: Microsoft-Windows-Search-ProfileNotify
Temps écrit: 20090921232729.000000-000
Type d'événement: Erreur
Utilisateur:
Nom de l'ordinateur: PC-de-ange
Code d'événement: 10 -
Aquí está el segundo
info.txt registro de información del sistema de random 1.06 2010-01-26 21:01:04
======Lista de desinstalación======
-->>C:\Program Files\DivX\DivXConverterUninstall.exe /CONVERTER
-->>C:\Windows\system32\Macromed\Flash\uninstall_plugin.exe
-->>RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{A450831D-25F6-4F42-9662-D000B25E0D82}\Setup.exe" -uninstall
-->>RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{AA4BF92B-2AAF-11DA-9D78-000129760D75}\Setup.exe" -uninstall
9Giga Synchro v2.9.2-->"C:\Program Files\SFR\9Giga Synchro\unins000.exe"
ABBYY FineReader 6.0 Sprint-->>MsiExec.exe /I{ACF60000-22B9-4CE9-98D6-2CCF359BAC07}
Acer Arcade Deluxe-->"C:\Program Files\InstallShield Installation Information\{2637C347-9DAD-11D6-9EA2-00055D0CA761}\Setup.exe" /z-uninstall
Acer Arcade Deluxe-->"C:\Program Files\InstallShield Installation Information\{2637C347-9DAD-11D6-9EA2-00055D0CA761}\Setup.exe" /z-uninstall
Acer Backup Manager-->>C:\Program Files\InstallShield Installation Information\{72B776E5-4530-4C4B-9453-751DF87D9D93}\setup.exe -runfromtemp -l0x040c
Acer Crystal Eye Webcam-->>C:\Program Files\InstallShield Installation Information\{A77255C4-AFCB-44A3-BF0F-2091A71FFD9E}\setup.exe -runfromtemp -l0x040c -removeonly
Acer eRecovery Management-->"C:\Program Files\InstallShield Installation Information\{7F811A54-5A09-4579-90E1-C93498E230D9}\setup.exe" -runfromtemp -l0x040c -removeonly
Acer GridVista-->>C:\Windows\GVUni.exe GridV.UNI
Acer PowerSmart Manager-->"C:\Program Files\InstallShield Installation Information\{3DB0448D-AD82-4923-B305-D001E521A964}\setup.exe" -runfromtemp -l0x040c -removeonly
Acer Product Registration-->"C:\Program Files\InstallShield Installation Information\{DA20E1A8-07CB-4EE7-9B72-A7E28C953F0E}\setup.exe" -runfromtemp -l0x040c -removeonly
Acer ScreenSaver-->>C:\Windows\Screensavers\Acer\Uninstall.exe
Adobe Flash Player 10 ActiveX-->>C:\Windows\system32\Macromed\Flash\uninstall_activeX.exe
Adobe Flash Player 10 Plugin-->>MsiExec.exe /X{0DFB3DE8-65B9-44FF-AA0A-3BECC5A2BFD1}
Adobe Reader 9 - Francés-->>MsiExec.exe /I{AC76BA86-7AD7-1036-7B44-A90000000001}
Agere Systems HDA Modem-->>agrsmdel
Airport Mania First Flight-->"C:\Program Files\Acer GameZone\Airport Mania First Flight\Uninstall.exe" "C:\Program Files\Acer GameZone\Airport Mania First Flight\install.log"
AmIcoSingLun-->>C:\Program Files\InstallShield Installation Information\{BF91B300-EEBC-4223-96F3-0FCBF7241B50}\setup.exe -runfromtemp -l0x0409
Apple Application Support-->>MsiExec.exe /I{3FA365DF-2D68-45ED-8F83-8C8A33E65143}
Apple Software Update-->>MsiExec.exe /I{6956856F-B6B3-4BE0-BA0B-8F495BE32033}
Asistente de conexión Windows Live ID-->>MsiExec.exe /X{10A44844-4465-456E-8C97-80BDD4F68845}
Broadcom Gigabit NetLink Controller-->>MsiExec.exe /X{9AF0B106-56F1-461B-A270-95BC1682E282}
C:\Program Files\Acer GameZone\GameConsole-->>"C:\Program Files\Acer GameZone\GameConsole\unins000.exe"
Cake Mania 2-->>"C:\Program Files\Acer GameZone\Cake Mania 2\Uninstall.exe" "C:\Program Files\Acer GameZone\Cake Mania 2\install.log"
Catalyst Control Center - Branding-->>MsiExec.exe /I{E430067C-7254-40B6-A8F8-5EEF57A68F1A}
Cooking Dash-->>"C:\Program Files\Acer GameZone\Cooking Dash\Uninstall.exe" "C:\Program Files\Acer GameZone\Cooking Dash\install.log"
Cradle of Rome-->>"C:\Program Files\Acer GameZone\Cradle of Rome\Uninstall.exe" "C:\Program Files\Acer GameZone\Cradle of Rome\install.log"
Dairy Dash-->>"C:\Program Files\Acer GameZone\Dairy Dash\Uninstall.exe" "C:\Program Files\Acer GameZone\Dairy Dash\install.log"
DivX Codec-->>C:\Program Files\DivX\DivXCodecUninstall.exe /CODEC
DivX Converter Mobile-->>C:\Program Files\DivX\DivXConverterMeUninstall.exe /CONVERTERME
DivX Converter-->>C:\Program Files\DivX\DivXConverterUninstall.exe /CONVERTER
DivX Player-->>C:\Program Files\DivX\DivXPlayerUninstall.exe /PLAYER
DivX Plus DirectShow Filters-->>C:\Program Files\DivX\DivXDSFiltersUninstall.exe /DSFILTERS
DivX Plus Web Player-->>C:\Program Files\DivX\DivXWebPlayerUninstall.exe /PLUGIN
Dream Day Honeymoon-->>"C:\Program Files\Acer GameZone\Dream Day Honeymoon\Uninstall.exe" "C:\Program Files\Acer GameZone\Dream Day Honeymoon\install.log"
Dream Day Wedding-->>"C:\Program Files\Acer GameZone\Dream Day Wedding\Uninstall.exe" "C:\Program Files\Acer GameZone\Dream Day Wedding\install.log"
eMule-->>"C:\Program Files\eMule\Uninstall.exe"
Epson Easy Photo Print 2-->>C:\Program Files\InstallShield Installation Information\{87C2248A-C7DD-49ED-9BCD-B312A9D0819E}\SETUP.EXE -runfromtemp -l0x040c UNINST -removeonly
EPSON Scan-->>C:\Program Files\epson\escndv\setup\setup.exe /r
Epson Stylus SX210_SX410_TX210_TX410 Manual-->>C:\Program Files\EPSON\TPMANUAL\ESSX210_410_TX210_410\FRA\USE_G\DOCUNINS.EXE
EPSON SX410 Series Printer Uninstall-->>C:\Windows\system32\spool\DRIVERS\W32X86\3\E_FINSFCE.EXE /R /APD /P:"EPSON SX410 Series"
eSobi v2-->>C:\Program Files\InstallShield Installation Information\{15D967B5-A4BE-42AE-9E84-64CD062B25AA}\setup.exe -runfromtemp -l0x040c
Full Pack Codecs-->>C:\Program Files\Full Pack Codecs\uninst.exe
Galapago-->>"C:\Program Files\Acer GameZone\Galapago\Uninstall.exe" "C:\Program Files\Acer GameZone\Galapago\install.log"
Galería de fotos Windows Live-->>MsiExec.exe /X{B131E59D-202C-43C6-84C9-68F0C37541F1}
Gestor de Conexiones SFR 2009.09-->>"C:\Program Files\SFR\Gestionnaire de Connexion SFR\unins000.exe"
Google Chrome-->>"C:\Program Files\Google\Chrome\Application\3.0.195.38\Installer\setup.exe" --uninstall --system-level
Google Desktop-->>C:\Program Files\Google\Google Desktop Search\GoogleDesktopSetup.exe -uninstall
Google Toolbar for Internet Explorer-->>"C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarManager_0E996B068B56FCA2.exe" /uninstall
Google Toolbar for Internet Explorer-->>MsiExec.exe /I{18455581-E099-4BA8-BC6B-F34B2F06600C}
Google Update Helper-->>MsiExec.exe /I{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}
HijackThis 2.0.2-->>"C:\Program Files\trend micro\HijackThis.exe" /uninstall
Hotfix para Microsoft .NET Framework 3.5 SP1 (KB953595)-->>C:\Windows\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall /qb+ REBOOTPROMPT=""
Hotfix para Microsoft .NET Framework 3.5 SP1 (KB958484)-->>C:\Windows\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall {A7EEA2F2-BFCD-4A54-A575-7B81A786E658} /qb+ REBOOTPROMPT=""
Instalación de Windows Live-->>C:\Program Files\Windows Live\Installer\wlarp.exe
Instalación de Windows Live-->>MsiExec.exe /I{46ABBC54-1872-4AA3-95E2-F2C063A63F31}
InterVideo FilterSDK para Hauppauge-->>RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{2227E1FA-01F5-483C-AB0E-2A308E900B3D}\setup.exe" REMOVEALL
Java(TM) 6 Update 17-->>MsiExec.exe /X{26A24AE4-039D-4CA4-87B4-2F83216016FF}
Jewel Quest Solitaire-->>"C:\Program Files\Acer GameZone\Jewel Quest Solitaire\Uninstall.exe" "C:\Program Files\Acer GameZone\Jewel Quest Solitaire\install.log"
Actualización del filtro de correo no deseado-->>MsiExec.exe /I{E2DFE069-083E-4631-9B6C-43C48E991DE5}
K-Lite Codec Pack 5.4.6 (Full) BETA-->>"C:\Program Files\K-Lite Codec Pack\unins000.exe"
Launch Manager-->>C:\Windows\UNINST32.EXE LManager.UNI
LG PC Suite-->>C:\Program Files\InstallShield Installation Information\{993960EE-CA4D-443F-8F88-E24260DD5FD2}\setup.exe -runfromtemp -l0x040c -removeonly
LG USB Modem driver-->>RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\10\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{C3ABE126-2BB2-4246-BFE1-6797679B3579}\setup.exe" -l0x40c LG -removeonly
LimeWire 5.4.6-->>"C:\Program Files\LimeWire\uninstall.exe"
Luxor 2-->>"C:\Program Files\Acer GameZone\Luxor 2\Uninstall.exe" "C:\Program Files\Acer GameZone\Luxor 2\install.log"
Mahjong Escape Ancient China-->>"C:\Program Files\Acer GameZone\Mahjong Escape Ancient China\Uninstall.exe" "C:\Program Files\Acer GameZone\Mahjong Escape Ancient China\install.log"
McAfee SecurityCenter-->>C:\Program Files\McAfee\MSC\mcuninst.exe
McAfee Virtual Technician-->>MsiExec.exe /I{49FA793C-785E-47E9-93DF-BD442B0B45D1}
Microsoft .NET Framework 3.5 Paquete de idioma SP1 - fra-->>MsiExec.exe /I{3E31821C-7917-367E-938E-E65FC413EA31}
Microsoft .NET Framework 3.5 SP1-->>c:\Windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setup.exe
Microsoft .NET Framework 3.5 SP1-->>MsiExec.exe /I{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}
Microsoft Choice Guard-->>MsiExec.exe /X{F0E12BBA-AD66-4022-A453-A1C8A0C4D570}
Microsoft Office 2007 Service Pack 2 (SP2)-->>msiexec /package {90120000-0016-040C-0000-0000000FF1CE} /uninstall {AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}
Microsoft Office 2007 Service Pack 2 (SP2)-->>msiexec /package {90120000-0018-040C-0000-0000000FF1CE} /uninstall {AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}
Microsoft Office 2007 Service Pack 2 (SP2)-->>msiexec /package {90120000-001B-040C-0000-0000000FF1CE} /uninstall {AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}
Microsoft Office 2007 Service Pack 2 (SP2)-->>msiexec /package {90120000-006E-040C-0000-0000000FF1CE} /uninstall {B165D3C2-40AE-4D39-86F7-E5C87C4264C0}
Microsoft Office 2007 Service Pack 2 (SP2)-->>msiexec /package {90120000-00A1-040C-0000-0000000FF1CE} /uninstall {AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}
Microsoft Office 2007 Service Pack 2 (SP2)-->>msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {0B36C6D6-F5D8-4EAF-BF94-4376A230AD5B}
Microsoft Office Excel MUI (Francés) 2007-->>MsiExec.exe /X{90120000-0016-040C-0000-0000000FF1CE}
Microsoft Office Home and Student 2007-->>"C:\Program Files\Common Files\Microsoft Shared\OFFICE12\Office Setup Controller\setup.exe" /uninstall HOMESTUDENTR /dll OSETUP.DLL
Microsoft Office Home and Student 2007-->>MsiExec.exe /X{91120000-002F-0000-0000-0000000FF1CE}
Microsoft Office Live Add-in 1.4-->>MsiExec.exe /I{AE3CF174-872C-46C6-B9F6-C0593F3BC7B8}
Microsoft Office OneNote MUI (Francés) 2007-->>MsiExec.exe /X{90120000-00A1-040C-0000-0000000FF1CE}
Microsoft Office PowerPoint MUI (Francés) 2007-->>MsiExec.exe /X{90120000-0018-040C-0000-0000000FF1CE}
Microsoft Office PowerPoint Viewer 2007 (Francés)-->>MsiExec.exe /X{95120000-00AF-040C-0000-0000000FF1CE}
Microsoft Office Prueba (Árabe) 2007-->>MsiExec.exe /X{90120000-001F-0401-0000-0000000FF1CE}
Microsoft Office Prueba (Neerlandés) 2007-->>MsiExec.exe /X{90120000-001F-0413-0000-0000000FF1CE}
Microsoft Office Prueba (Inglés) 2007-->>MsiExec.exe /X{90120000-001F-0409-0000-0000000FF1CE}
Microsoft Office Prueba (Francés) 2007-->>MsiExec.exe /X{90120000-001F-040C-0000-0000000FF1CE}
Microsoft Office Prueba (Alemán) 2007-->>MsiExec.exe /X{90120000-001F-0407-0000-0000000FF1CE}
Microsoft Office Prueba (Español) 2007-->>MsiExec.exe /X{90120000-001F-0C0A-0000-0000000FF1CE}
Microsoft Office Herramientas de prueba (Francés) 2007-->>MsiExec.exe /X{90120000-002C-040C-0000-0000000FF1CE}
Microsoft Office Herramientas de prueba 2007 Service Pack 2 (SP2)-->>msiexec /package {90120000-001F-0401-0000-0000000FF1CE} /uninstall {14809F99-C601-4D4A-9391-F1E8FAA964C5}
Microsoft Office Herramientas de prueba 2007 Service Pack 2 (SP2)-->>msiexec /package {90120000-001F-0407-0000-0000000FF1CE} /uninstall {A0516415-ED61-419A-981D-93596DA74165}
Microsoft Office Herramientas de prueba 2007 Service Pack 2 (SP2)-->>msiexec /package {90120000-001F-0409-0000-0000000FF1CE} /uninstall {ABDDE972-355B-4AF1-89A8-DA50B7B5C045}
Microsoft Office Herramientas de prueba 2007 Service Pack 2 (SP2)-->>msiexec /package {90120000-001F-040C-0000-0000000FF1CE} /uninstall {F580DDD5-8D37-4998-968E-EBB76BB86787}
Microsoft Office Herramientas de prueba 2007 Service Pack 2 (SP2)-->>msiexec /package {90120000-001F-0413-0000-0000000FF1CE} /uninstall {D66D5A44-E480-4BA4-B4F2-C554F6B30EBB}
Microsoft Office Herramientas de prueba 2007 Service Pack 2 (SP2)-->>msiexec /package {90120000-001F-0C0A-0000-0000000FF1CE} /uninstall {187308AB-5FA7-4F14-9AB9-D290383A10D9}
Microsoft Office Compartido MUI (Francés) 2007-->>MsiExec.exe /X{90120000-006E-040C-0000-0000000FF1CE}
Microsoft Office Suite Activación Assistant-->>MsiExec.exe /X{E50AE784-FABE-46DA-A1F8-7B6B56DCB22E}
Microsoft Office Word MUI (Francés) 2007-->>MsiExec.exe /X{90120000-001B-040C-0000-0000000FF1CE}
Paquete de Mejora de Búsqueda de Microsoft-->>MsiExec.exe /X{4CBA3D4C-8F51-4D60-B27E-F6B641C571E7}
Microsoft Silverlight-->>MsiExec.exe /X{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}
Microsoft SQL Server 2005 Compact Edition [ENU]-->>MsiExec.exe /I{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}
Microsoft Sync Framework Runtime Native v1.0 (x86)-->>MsiExec.exe /I{8A74E887-8F0F-4017-AF53-CBA42211AAA5}
Microsoft Sync Framework Services Native v1.0 (x86)-->>MsiExec.exe /I{BD64AF4A-8C80-4152-AD77-FCDDF05208AB}
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053-->>MsiExec.exe /X{770657D0-A123-3C07-8E44-1C83EC895118}
Microsoft Visual C++ 2005 Redistributable-->>MsiExec.exe /X{A49F249F-0C91-497F-86DF-B2585E8E76B7}
Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148-->>MsiExec.exe /X{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022-->>MsiExec.exe /X{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}
Microsoft Works-->>MsiExec.exe /I{0214A441-A4AB-43A8-8DEF-2F73C5364673}
Actualización de Microsoft Office Excel 2007 Ayuda (KB963678)-->>msiexec /package {90120000-0016-040C-0000-0000000FF1CE} /uninstall {B761869A-B85C-40E2-994C-A1CE78AC8F2C}
Actualización de Microsoft Office Powerpoint 2007 Ayuda (KB963669)-->>msiexec /package {90120000-0018-040C-0000-0000000FF1CE} /uninstall {C3DCA38E-005E-41BA-A52A-7C3429F351C3}
Actualización de Microsoft Office Word 2007 Ayuda (KB963665)-->>msiexec /package {90120000-001B-040C-0000-0000000FF1CE} /uninstall {81536A04-DBFB-4DB3-978F-0F284590C223}
Módulo de compatibilidad para Microsoft Office System 2007-->>MsiExec.exe /X{90120000-0020-040C-0000-0000000FF1CE}
Módulo de idioma Microsoft .NET Framework 3.5 SP1- fra-->>c:\Windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 Language Pack SP1 - fra\setup.exe
MSVCRT-->>MsiExec.exe /I{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}
MSXML 4.0 SP2 (KB954430)-->>MsiExec.exe /I{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
MSXML 4.0 SP2 (KB973688)-->>MsiExec.exe /I{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}
MyWinLocker-->>MsiExec.exe /X{68301905-2DEA-41CE-A4D4-E8B443B099BA}
NTI Backup Now 5-->>C:\Program Files\InstallShield Installation Information\{12EFA1A4-AC3B-443C-8143-237EDE760403}\setup.exe -runfromtemp -l0x040c
NTI Media Maker 8-->>C:\Program Files\InstallShield Installation Information\{2413930C-8309-47A6-BC61-5EF27A4222BC}\setup.exe -runfromtemp -l0x040c
Ocean Express-->"C:\Program Files\Acer GameZone\Ocean Express\Uninstall.exe" "C:\Program Files\Acer GameZone\Ocean Express\install.log"
Orion-->>MsiExec.exe /X{5B63A470-9334-44D1-AF61-6CE2DB565AE9}
Herramienta de descarga de Windows Live-->>MsiExec.exe /I{205C6BDD-7B73-42DE-8505-9A093F35A238}
Parking Dash-->"C:\Program Files\Acer GameZone\Parking Dash\Uninstall.exe" "C:\Program Files\Acer GameZone\Parking Dash\install.log"
Puzzle Express-->"C:\Program Files\Acer GameZone\Puzzle Express\Uninstall.exe" "C:\Program Files\Acer GameZone\Puzzle Express\install.log"
QuickTime-->>MsiExec.exe /I{1451DE6B-ABE1-4F62-BE9A-B363A17588A2}
Controlador de audio de alta definición Realtek-->>C:\Program Files\Realtek\Audio\HDA\RtlUpd.exe -r -m -nrg2709
Actualización de seguridad para Microsoft Office 2007 System (KB969559)-->>msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {69F52148-9BF6-4CDC-BF76-103DEAF3DD08}
Actualización de seguridad para Microsoft Office 2007 System (KB973704)-->>msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {E626DC89-A787-4553-9BB3-DC2EC7E1593F}
Actualización de seguridad para Microsoft Office Excel 2007 (KB973593)-->>msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {7D6255E3-3423-4D8B-A328-F6F8D28DD5FE}
Actualización de seguridad para Microsoft Office PowerPoint 2007 (KB957789)-->>msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {7559E742-FF9F-4FAE-B279-008ED296CB4D}
Actualización de seguridad para Microsoft Office system 2007 (972581)-->>msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {3D019598-7B59-447A-80AE-815B703B84FF}
Actualización de seguridad para Microsoft Office system 2007 (KB969613)-->>msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {5ECEB317-CBE9-4E08-AB10-756CB6F0FB6C}
Actualización de seguridad para Microsoft Office system 2007 (KB974234)-->>msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {FCD742B9-7A55-44BC-A776-F795F21FEDDC}
Actualización de seguridad para Microsoft Office Visio Viewer 2007 (KB973709)-->>msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {71127777-8B2C-4F97-AF7A-6CF8CAC8224D}
Controlador de dispositivo de puntero Synaptics-->>rundll32.exe "C:\Program Files\Synaptics\SynTP\SynISDLL.dll",standAloneUninstall
Tradewinds 2-->>"C:\Program Files\Acer GameZone\Tradewinds 2\Uninstall.exe" "C:\Program Files\Acer GameZone\Tradewinds 2\install.log"
Tri-Peaks Solitaire To Go-->>"C:\Program Files\Acer GameZone\Tri-Peaks Solitaire To Go\Uninstall.exe" "C:\Program Files\Acer GameZone\Tri-Peaks Solitaire To Go\install.log"
Turbo Pizza-->>"C:\Program Files\Acer GameZone\Turbo Pizza\Uninstall.exe" "C:\Program Files\Acer GameZone\Turbo Pizza\install.log"
Actualización para Microsoft Office 2007 System (KB967642)-->>msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {C444285D-5E4F-48A4-91DD-47AAAA68E92D}
Actualización para Microsoft .NET Framework 3.5 SP1 (KB963707)-->>C:\Windows\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall {B2AE9C82-DC7B-3641-BFC8-87275C4F3607} /qb+ REBOOTPROMPT=""
Actualización para Microsoft Office InfoPath 2007 (KB976416)-->>msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {432C5EE4-8096-4FF1-95E1-65219365DFF7}
Actualización para Microsoft Office Word 2007 (KB974561)-->>msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {0CDDBAA2-2111-4A0E-A1B0-76C40C635331}
VC80CRTRedist - 8.0.50727.4053-->>MsiExec.exe /I{5EE7D259-D137-4438-9A5F-42F432EC0421}
VirginMega.Fr Premium-->>MsiExec.exe /I{EE467474-04A8-48D5-8DDF-0F8D3A3CCBE5}
Vista Codec Package-->>MsiExec.exe /I{F9FD80CE-0448-4D4F-8BCD-77FC514C3F99}
VLC media player 1.0.1-->>C:\Program Files\VideoLAN\VLC\uninstall.exe
Wedding Dash-->>"C:\Program Files\Acer GameZone\Wedding Dash\Uninstall.exe" "C:\Program Files\Acer GameZone\Wedding Dash\install.log"
Windows Live Call-->>MsiExec.exe /I{82C7B308-0BDD-49D8-8EA5-9CD3A3F9DF41}
Windows Live Communications Platform-->>MsiExec.exe /I{3B4E636E-9D65-4D67-BA61-189800823F52}
Windows Live Control parental-->>MsiExec.exe /X{D5D81435-B8DE-4CAF-867F-7998F2B92CFC}
Windows Live FolderShare-->>MsiExec.exe /X{2075CB0A-D26F-4DAA-B424-5079296B43BA}
Windows Live Mail-->>MsiExec.exe /I{5DD76286-9BE7-4894-A990-E905E91AC818}
Windows Live Messenger-->>MsiExec.exe /X{770F1BEC-2871-4E70-B837-FB8525FFA3B1}
Windows Live Movie Maker-->>MsiExec.exe /X{53B20C18-D8D4-4588-8737-9BBFE303C354}
Windows Live Toolbar-->>MsiExec.exe /X{F7D27C70-90F5-49B9-B188-0A133C0CE353}
Windows Live Writer-->>MsiExec.exe /X{4634B21A-CC07-4396-890C-2B8168661FEA}
Zuma Deluxe-->>"C:\Program Files\Acer GameZone\Zuma Deluxe\Uninstall.exe" "C:\Program Files\Acer GameZone\Zuma Deluxe\install.log"
======Información del centro de seguridad======
AS: Windows Defender
======Registro de eventos del sistema======
Nombre de la computadora: PC-de-ange
Código de evento: 7000
Mensaje: El controlador de puerto paralelo no pudo iniciarse debido al error:
El servicio no se puede iniciar porque está deshabilitado o no se le ha asociado ningún dispositivo habilitado.
Número de registro: 50137
Nombre de origen: Administrador de control de servicios
Hora escrita: 20091008194222.000000-000
Tipo de evento: Error
Usuario:
Nombre de la computadora: PC-de-ange
Código de evento: 15016
Mensaje: No se pudo inicializar el paquete de seguridad Kerberos para la autenticación del lado del servidor. El campo de datos contiene el número del error.
Número de registro: 50093
Nombre de origen: Microsoft-Windows-HttpEvent
Hora escrita: 20091008194124.424959-000
Tipo de evento: Error
Usuario:
Nombre de la computadora: PC-de-ange
Código de evento: 4
Mensaje: Broadcom NetLink (TM) Gigabit Ethernet: El enlace de red está caído. Verifique que el cable de red esté correctamente conectado.
Número de registro: 50090
Nombre de origen: k57nd60x
Hora escrita: 20091008194111.833304-000
Tipo de evento: Advertencia
Usuario:
Nombre de la computadora: PC-de-ange
Código de evento: 4001
Mensaje: El Servicio de configuración automática WLAN se detuvo correctamente.
Número de registro: 50080
Nombre de origen: Microsoft-Windows-WLAN-AutoConfig
Hora escrita: 20091007204020.542800-000
Tipo de evento: Advertencia
Usuario: AUTORIDAD NT\SISTEMA
Nombre de la computadora: PC-de-ange
Código de evento: 7000
Mensaje: El controlador de puerto paralelo no pudo iniciarse debido al error:
El servicio no se puede iniciar porque está deshabilitado o no se le ha asociado ningún dispositivo habilitado.
Número de registro: 50017
Nombre de origen: Administrador de control de servicios
Hora escrita: 20091007193222.000000-000
Tipo de evento: Error
Usuario:
=====Registro de eventos de aplicaciones=====
Nombre de la computadora: PC-de-ange
Código de evento: 1534
Mensaje: Falló la notificación del perfil del evento Eliminar para el componente {DE3F3560-3032-41B4-B6CF-F703B1B95640}. El código de error es -2147024875.
Número de registro: 1200
Nombre de origen: Microsoft-Windows-User Profiles Service
Hora escrita: 20090921232729.000000-000
Tipo de evento: Advertencia
Usuario: AUTORIDAD NT\SISTEMA
Nombre de la computadora: PC-de-ange
Código de evento: 2
Mensaje: No se pudieron eliminar los datos indexados por el servicio Windows Search para el usuario 'PC-de-ange\Administrateur' tras la eliminación del perfil de usuario. Código de error 0x80070015.
El dispositivo no está listo.
.
Número de registro: 1199
Nombre de origen: Microsoft-Windows-Search-ProfileNotify
Hora escrita: 20090921232729.000000-000
Tipo de evento: Error
Usuario:
Nombre de la computadora: PC-de-ange
Código de evento: 10 -
ok
varias infecciones
1)
Descarga USBFIX de El Desaparecido, C_xx
http://pagesperso-orange.fr/NosTools/Chiquitine29/UsbFix.exe
o
https://www.ionos.fr/?affiliate_id=77097
/!\ Usuario de Vista y Windows 7:
no olvides desactivar el control de cuentas de usuario
https://www.commentcamarche.net/faq/8343-vista-desactiver-l-uac
/!\ Conéctate a tus fuentes de datos externas a tu PC, (pendrive, disco duro externo, etc...) susceptibles de haber sido infectadas sin abrirlas
• Doble clic en el acceso directo de UsbFix presente en el escritorio.
• Elige la opción 2 eliminación
(otras opciones disponibles, consulta el tutorial).
• Deja trabajar la herramienta.
El menú de inicio y los iconos desaparecerán... es normal.
Si un mensaje te pide reiniciar el ordenador, hazlo...
● Al reiniciar, el fix se relanza... deja que la operación se realice.
● El bloc de notas se abre con un informe, envíalo en la próxima respuesta
• Nota: El informe UsbFix.txt se guarda en la raíz del disco. (C:\UsbFix.txt)
(CTRL+A para seleccionar todo, CTRL+C para copiar y CTRL+V para pegar)
• Nota: "Process.exe", un componente de la herramienta, es detectado por algunos antivirus (AntiVir, Dr.Web, Kaspersky Anti-Virus) como un RiskTool.
No es un virus, sino una utilidad destinada a finalizar procesos.
Mal utilizada, esta utilidad podría detener software de seguridad (Antivirus, Firewall...) de ahí la alerta emitida por estos antivirus.
• Tuto: http://pagesperso-orange.fr/NosTools/usbfix.html
UsbFix puede pedirte que subas una carpeta comprimida a esta dirección: https://www.ionos.fr/?affiliate_id=77097
Se guarda en tu escritorio.
Gracias por enviarlo a la dirección indicada para ayudar al autor de UsbFix en sus investigaciones.
Gracias
......................
2)
Desactiva tu antivirus durante la manipulación así como tu firewall si está presente (porque se detecta erróneamente como infección)
▶ Descarga e instala List&Kill'em y guárdalo en tu escritorio
http://sd-1.archive-host.com/membres/up/829108531491024/List_Killem_Install.exe
doble clic (clic derecho "ejecutar como administrador" para Vista/7) en el acceso directo en tu escritorio para iniciar la instalación
marca la casilla "crear un icono en el escritorio"
una vez terminado, haz clic en "terminar" y el programa se iniciará solo
elige el idioma y luego selecciona la opción 1 = Modo Búsqueda
▶ deja trabajar la herramienta
al aparecer la ventana blanca, es un poco largo, es normal, el programa no está bloqueado.
un informe llamado catchme aparece en tu escritorio, ignóralo, no lo publiques, pero no lo elimines por ahora, el escaneo no ha terminado.
▶ Publica el contenido del informe que se abre al 100 % del escaneo en la pantalla "COMPLETADO"
puedes eliminar el informe catchme.log de tu escritorio ahora.
--
Busco mucho... ¡y ahora encuentro!
(sonrisa) -
Por cierto,
hice un análisis completo con McAfee, todo está bien
y en cuanto a la protección del ordenador,
me dice: ordenador no está totalmente protegido, hago corregir y se nota, uno o varios problemas requieren una respuesta,
después no sé qué hacer, hice una verificación de la suscripción todo está bien
????
entonces, eso es todo. -
prefiero hacer lo que pido
al final nos daremos placer con tu antivirus para un escaneo de control
--
Busco mucho... y ¡ahora encuentro!
(sonrisa) -
todas las manipulaciones mencionadas anteriormente se realizaron antes de mi intervención en este foro.
Pequeño problema,
estoy tratando de desactivar la cuenta de usuario pero hay un pequeño escudo con 4 colores dentro, no puedo acceder a él. -
¿Ya has usado USBFix y Killem?
deshabilitar la cuenta de usuario
¿estás seguro de que estás en una sesión de administrador?
--
Estoy buscando mucho... ¡y ahora encuentro!
(sonrisa) -
Sí, administrador,
he hecho clic en tu primer enlace USBFIX de El Desaparecido
mcafee me lo bloquea como indeseable. -
desactiva tu antivirus durante el escaneo (cortes de internet)
--
Estoy buscando mucho... ¡y ahora encuentro!
(sonrisa) -
Lo siento, es un poco largo
No puedo copiar el informe en la página "completado", si es eso lo que hay que hacer. -
Bueno, es tarde y aparentemente te has ido, lo veré mañana muy temprano, o después de las 17h
que tengas una buena noche.
Todavía no puedo pegar en la pantalla "completado" -
si no puedes copiar el informe, lo cual es sorprendente
Ve a Cjoint: http://www.cijoint.fr/
Haz clic en "Examinar" en la parte "Adjuntar un archivo[...] "
Selecciona el informe C:\UsbFix.txt
Luego haz clic en "Crear el enlace cjoint" y copia/pega en tu próximo mensaje
--
Busco mucho... ¡y ahora encuentro!
(sonrisa) -
Hola momento de gracia,,
última manipulación realizada y aquí está el informe usbfix.txt
############################## | UsbFix V6.079 |
Usuario : ange (Administradores) # PC-DE-ANGE
Actualización el 25/01/2010 por El Desaparecido , C_XX & Chimay8
Inicio a las: 22:29:52 | 26/01/2010
Sitio web : http://pagesperso-orange.fr/NosTools/index.html
Contacto : FindyKill.Contact@gmail.com
Pentium(R) Dual-Core CPU T4200 @ 2.00GHz
Microsoft® Windows Vista™ Edición Familiar Premium (6.0.6002 32-bit) # Service Pack 2
Internet Explorer 8.0.6001.18882
Estado del Firewall de Windows : Activado
C:\ -> Disco duro local # 455,99 Go (240,1 Go libre) [ACER] # NTFS
############################## | Procesos activos |
C:\Windows\System32\smss.exe 500
C:\Windows\system32\csrss.exe 572
C:\Windows\system32\wininit.exe 636
C:\Windows\system32\csrss.exe 644
C:\Windows\system32\services.exe 688
C:\Windows\system32\lsass.exe 708
C:\Windows\system32\lsm.exe 716
C:\Windows\system32\winlogon.exe 772
C:\Windows\system32\svchost.exe 904
C:\Windows\system32\svchost.exe 968
C:\Windows\system32\LogonUI.exe 1060
C:\Windows\system32\Ati2evxx.exe 1112
C:\Windows\System32\svchost.exe 1172
C:\Windows\System32\svchost.exe 1212
C:\Windows\system32\svchost.exe 1232
C:\Windows\system32\svchost.exe 1336
C:\Windows\system32\SLsvc.exe 1360
C:\Windows\system32\svchost.exe 1396
C:\Windows\system32\svchost.exe 1588
C:\Windows\system32\Ati2evxx.exe 1840
C:\Windows\System32\spoolsv.exe 1916
C:\Windows\system32\taskeng.exe 1952
C:\Windows\system32\Dwm.exe 1976
C:\Windows\Explorer.EXE 2028
C:\Windows\system32\taskeng.exe 124
C:\Windows\system32\svchost.exe 332
C:\Windows\system32\taskeng.exe 724
C:\Windows\system32\agrsmsvc.exe 1560
C:\Program Files\Acer Arcade Deluxe\HomeMedia\Kernel\DMP\CLHNService.exe 2056
C:\Program Files\Acer\Acer PowerSmart Manager\ePowerSvc.exe 2088
C:\ProgramData\EPSON\EPW!3 SSRP\E_S40ST7.EXE 2148
C:\ProgramData\EPSON\EPW!3 SSRP\E_S40RP7.EXE 2188
C:\Program Files\Google\Update\GoogleUpdate.exe 2228
C:\Program Files\McAfee\SiteAdvisor\McSACore.exe 2260
c:\PROGRA~1\COMMON~1\mcafee\mcproxy\mcproxy.exe 2292
C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe 2336
C:\Program Files\McAfee\MPF\MPFSrv.exe 2396
C:\Windows\system32\rundll32.exe 2436
C:\Program Files\McAfee\MSK\MskSrver.exe 2640
C:\Program Files\EgisTec\MyWinLocker 3\x86\MWLService.exe 2684
C:\Program Files\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe 2728
C:\Program Files\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe 2860
C:\Windows\system32\svchost.exe 2900
C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe 2912
C:\Program Files\SFR\Gestionnaire de Connexion SFR\SFRABCDService.exe 2976
C:\Windows\system32\svchost.exe 3000
C:\Windows\System32\svchost.exe 3036
C:\Program Files\Winsudate\gibsvc.exe 3088
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE 3104
C:\Windows\system32\SearchIndexer.exe 3136
C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe 3372
c:\PROGRA~1\mcafee.com\agent\mcagent.exe 3676
C:\Windows\system32\runonce.exe 3724
C:\Windows\system32\conime.exe 3900
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe 3980
C:\Windows\system32\wbem\wmiprvse.exe 2464
################## | Elementos infecciosos |
¡Eliminado! C:\Windows\Temp\hijackthis_199.zip
¡Eliminado! C:\Users\ange\AppData\Local\Temp\0014291259995037mcinst.exe
¡Eliminado! C:\Users\ange\AppData\Local\Temp\3A25.exe
¡Eliminado! C:\$Recycle.Bin\S-1-5-18
¡Eliminado! C:\$Recycle.Bin\S-1-5-21-189419718-2963334922-3257433272-1000
¡Eliminado! C:\$Recycle.Bin\S-1-5-21-189419718-2963334922-3257433272-500
################## | Registro |
################## | Mountpoints2 |
¡Eliminado! HKCU\...\Explorer\MountPoints2\{0f0256a3-b107-11de-af06-001f169cc75a}\Shell\AutoRun\Command
¡Eliminado! HKCU\...\Explorer\MountPoints2\{0f0256ab-b107-11de-af06-001f169cc75a}\Shell\AutoRun\Command
¡Eliminado! HKCU\...\Explorer\MountPoints2\{402303af-ff78-11de-988c-001f169cc75a}\Shell\AutoRun\Command
¡Eliminado! HKCU\...\Explorer\MountPoints2\{6bbfcd1a-f453-11de-8cf2-001f169cc75a}\Shell\AutoRun\Command
¡Eliminado! HKCU\...\Explorer\MountPoints2\{8477efec-f454-11de-9822-001f169cc75a}\Shell\AutoRun\Command
¡Eliminado! HKCU\...\Explorer\MountPoints2\{b9dcc213-c153-11de-b12e-001f169cc75a}\Shell\AutoRun\Command
¡Eliminado! HKCU\...\Explorer\MountPoints2\{b9dcc226-c153-11de-b12e-001f169cc75a}\Shell\AutoRun\Command
¡Eliminado! HKCU\...\Explorer\MountPoints2\{c76d78a4-ff72-11de-8a2e-001f169cc75a}\Shell\AutoRun\Command
¡Eliminado! HKCU\...\Explorer\MountPoints2\{c76d78a6-ff72-11de-8a2e-001f169cc75a}\Shell\AutoRun\Command
################## | Listado de los archivos presentes |
[18/09/2006 22:43|--a------|24] C:\autoexec.bat
[11/04/2009 07:36|-rahs----|333257] C:\bootmgr
[06/02/2008 00:25|-ra-s----|8192] C:\BOOTSECT.BAK
[18/09/2006 22:43|--a------|10] C:\config.sys
[?|?|?] C:\hiberfil.sys
[29/02/2004 16:44|--a------|52576] C:\orange.bmp
[?|?|?] C:\pagefile.sys
[22/04/2009 04:43|--ahs----|1557] C:\Patch.rev
[15/05/2009 10:03|-rahs----|171] C:\Preload.rev
[15/05/2009 01:17|--a------|2851] C:\RHDSetup.log
[14/12/2009 19:04|--a------|17630] C:\SoftUpdateLog.txt
[15/12/2009 17:35|--a------|0] C:\Tech_Vista.log
[26/01/2010 22:32|--a------|5237] C:\UsbFix.txt
################## | Vacunación |
# C:\autorun.inf -> Carpeta creada por UsbFix.
################## | Carga |
Por favor, envíe el archivo : C:\Users\ange\Desktop\UsbFix_Upload_Me_PC-de-ange.zip : https://www.ionos.fr/?affiliate_id=77097
Gracias por su contribución. -
visto
==> Lista&Mátares
--
Estoy buscando mucho... ¡y ahora encuentro!
(sonrisa) -
ola momento de gracia,
aquí está el informe list'em, ¿es esto lo que necesitas?
List'em por g3n-h@ckm@n 1.2.1.1
Usuario : ángel (Administradores)
Actualización el 23/01/2010 por g3n-h@ckm@n ::::: 13:50
Inicio en: 23:01:23 | 26/01/2010
Contacto : g3n-h@ckm@n en CCM
Pentium(R) Dual-Core CPU T4200 @ 2.00GHz
Microsoft® Windows Vista™ Edición Familiar Premium (6.0.6002 32-bit) # Service Pack 2
Internet Explorer 8.0.6001.18882
Estado del Firewall de Windows : Habilitado
C:\ -> Disco fijo local | 455,99 Go (239,35 Go libres) [ACER] | NTFS
¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤ Procesos en ejecución
C:\Windows\System32\smss.exe
C:\Windows\system32\csrss.exe
C:\Windows\system32\wininit.exe
C:\Windows\system32\csrss.exe
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\winlogon.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\Ati2evxx.exe
C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\SLsvc.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\Ati2evxx.exe
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\svchost.exe
C:\Windows\system32\taskeng.exe
C:\Windows\system32\agrsmsvc.exe
C:\Program Files\Acer Arcade Deluxe\HomeMedia\Kernel\DMP\CLHNService.exe
C:\Program Files\Acer\Acer PowerSmart Manager\ePowerSvc.exe
C:\ProgramData\EPSON\EPW!3 SSRP\E_S40ST7.EXE
C:\ProgramData\EPSON\EPW!3 SSRP\E_S40RP7.EXE
C:\Program Files\McAfee\SiteAdvisor\McSACore.exe
c:\PROGRA~1\COMMON~1\mcafee\mcproxy\mcproxy.exe
C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe
C:\Program Files\McAfee\MPF\MPFSrv.exe
C:\Windows\system32\rundll32.exe
C:\Program Files\McAfee\MSK\MskSrver.exe
C:\Program Files\EgisTec\MyWinLocker 3\x86\MWLService.exe
C:\Program Files\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe
C:\Program Files\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe
C:\Windows\system32\svchost.exe
C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
C:\Program Files\SFR\Gestionnaire de Connexion SFR\SFRABCDService.exe
C:\Windows\system32\svchost.exe
C:\Windows\System32\svchost.exe
C:\Program Files\Winsudate\gibsvc.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
C:\Windows\system32\SearchIndexer.exe
C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe
c:\PROGRA~1\mcafee.com\agent\mcagent.exe
C:\Windows\system32\runonce.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\conime.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe
c:\PROGRA~1\COMMON~1\mcafee\mna\mcnasvc.exe
C:\Windows\explorer.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Windows Live\Toolbar\wltuser.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
c:\PROGRA~1\mcafee.com\agent\mcupdate.exe
C:\Windows\system32\SearchProtocolHost.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Program Files\List_Kill'em\List_Kill'em.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Users\ange\AppData\Local\Temp\2CAB.tmp\pv.exe
======================
Claves "Ejecutar"
======================
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
msnmsgr REG_SZ "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
ehTray.exe REG_SZ C:\Windows\ehome\ehTray.exe
ISUSPM REG_SZ "C:\ProgramData\Macrovision\FLEXnet Connect\6\ISUSPM.exe" -scheduler
DriverUpdaterPro REG_SZ C:\Program Files\iXi Tools\Driver Updater Pro\DriverUpdaterPro.exe -t
WeatherDPA REG_SZ "C:\Program Files\Hotbar\bin\11.0.78.0\Weather.exe" -auto
9Giga Synchro REG_SZ "C:\Program Files\SFR\9Giga Synchro\9Giga_Synchro.exe" /delayed
EPSON SX410 Series REG_SZ C:\Windows\system32\spool\DRIVERS\W32X86\3\E_FATIFCE.EXE /FU "C:\Windows\TEMP\E_S231A.tmp" /EF "HKCU"
WinUsr REG_SZ C:\Program Files\Winsudate\gibusr.exe
swg REG_SZ "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
Windows Defender REG_EXPAND_SZ %ProgramFiles%\Windows Defender\MSASCui.exe -hide
Adobe Reader Speed Launcher REG_SZ "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
ArcadeDeluxeAgent REG_SZ "C:\Program Files\Acer Arcade Deluxe\Acer Arcade Deluxe\ArcadeDeluxeAgent.exe"
StartCCC REG_SZ "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
AmIcoSinglun REG_SZ C:\Program Files\AmIcoSingLun\AmIcoSinglun.exe
RtHDVCpl REG_SZ C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
Skytel REG_SZ C:\Program Files\Realtek\Audio\HDA\Skytel.exe
SynTPEnh REG_SZ C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
LManager REG_SZ C:\Program Files\Launch Manager\LManager.exe
BackupManagerTray REG_SZ "C:\Program Files\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe" -k
Acer ePower Management REG_SZ C:\Program Files\Acer\Acer PowerSmart Manager\ePowerTrayLauncher.exe
EgisTecLiveUpdate REG_SZ "C:\Program Files\EgisTec Egis Software Update\EgisUpdate.exe"
mwlDaemon REG_SZ C:\Program Files\EgisTec\MyWinLocker 3\x86\mwlDaemon.exe
PlayMovie REG_SZ C:\Program Files\Acer Arcade Deluxe\PlayMovie\PMVService.exe
Google Desktop Search REG_SZ "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
HCWemmon REG_SZ HCWemmon.exe
SunJavaUpdateSched REG_SZ "C:\Program Files\Java\jre6\bin\jusched.exe"
mcagent_exe REG_SZ "C:\Program Files\McAfee.com\Agent\mcagent.exe" /runkey
McENUI REG_SZ C:\PROGRA~1\McAfee\MHN\McENUI.exe /hide
PLFSetI REG_SZ C:\Windows\PLFSetI.exe
LGPCSuiteLanucher REG_SZ "C:\Program Files\LG PC Suite 2\LGPCSuiteLanucher_Setup.exe" /tray
CLMLServer REG_SZ "C:\Program Files\Acer Arcade Deluxe\Acer Arcade Deluxe\Kernel\CLML\CLMLSvc.exe"
QuickTime Task REG_SZ "C:\Program Files\QuickTime\QTTask.exe" -atboottime
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunServices]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce]
=====================
Otras Claves
=====================
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
ConsentPromptBehaviorAdmin REG_DWORD 2 (0x2)
ConsentPromptBehaviorUser REG_DWORD 1 (0x1)
EnableInstallerDetection REG_DWORD 1 (0x1)
EnableLUA REG_DWORD 1 (0x1)
EnableSecureUIAPaths REG_DWORD 1 (0x1)
EnableVirtualization REG_DWORD 1 (0x1)
PromptOnSecureDesktop REG_DWORD 1 (0x1)
ValidateAdminCodeSignatures REG_DWORD 0 (0x0)
dontdisplaylastusername REG_DWORD 0 (0x0)
legalnoticecaption REG_SZ
legalnoticetext REG_SZ
scforceoption REG_DWORD 0 (0x0)
shutdownwithoutlogon REG_DWORD 1 (0x1)
undockwithoutlogon REG_DWORD 1 (0x1)
FilterAdministratorToken REG_DWORD 0 (0x0)
EnableUIADesktopToggle REG_DWORD 0 (0x0)
===============
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
NoDriveAutoRun REG_DWORD 128 (0x80)
NoDriveTypeAutoRun REG_DWORD 128 (0x80)
HonorAutoRunSetting REG_DWORD 0 (0x0)
===============
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
BindDirectlyToPropertySetStorage REG_DWORD 0 (0x0)
NoDriveAutoRun REG_DWORD 128 (0x80)
NoDriveTypeAutoRun REG_DWORD 128 (0x80)
HonorAutoRunSetting REG_DWORD 0 (0x0)
===============
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
AppInit_DLLS REG_SZ C:\PROGRA~1\Google\GOOGLE~1\GOEC62~1.DLL
===============
===============
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
===============
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
===============
Controles ActivX
===============
HKEY_LOCAL_MACHINE\software\microsoft\code store database\distribution units\{8AD9C840-044E-11D1-B3E9-00805F499D93}
HKEY_LOCAL_MACHINE\software\microsoft\code store database\distribution units\{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA}
HKEY_LOCAL_MACHINE\software\microsoft\code store database\distribution units\{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}
===============
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\>{22d6f312-b0f6-11d0-94ab-0080c74c7e95}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\>{26923b43-4d38-484f-9b9e-de460746276c}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\>{60B49E34-C7CC-11D0-8953-00A0C90347FF}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{08B0E5C0-4FCB-11CF-AAA5-00401C608500}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{2179C5D3-EBFF-11CF-B6FD-00AA00B4E220}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{22d6f312-b0f6-11d0-94ab-0080c74c7e95}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{2C7339CF-2B09-4501-B3F3-F3508C9228ED}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{3af36230-a269-11d1-b5bf-0000f8051515}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{44BBA840-CC51-11CF-AAFA-00AA00B6015C}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{44BBA848-CC51-11CF-AAFA-00AA00B6015C}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{44BBA855-CC51-11CF-AAFA-00AA00B6015F}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{45ea75a0-a269-11d1-b5bf-0000f8051515}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{4f645220-306d-11d2-995d-00c04f98bbc9}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{5fd399c0-a70a-11d1-9948-00c04f98bbc9}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{630b1da0-b465-11d1-9948-00c04f98bbc9}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{6BF52A52-394A-11d3-B153-00C04F79FAA6}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{6fab99d0-bab8-11d1-994a-00c04f98bbc9}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{7790769C-0471-11d2-AF11-00C04FA35D02}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{7C028AF8-F614-47B3-82DA-BA94E41B1089}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{89820200-ECBD-11cf-8B85-00AA005B4340}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{89820200-ECBD-11cf-8B85-00AA005B4383}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{89B4C1CD-B018-4511-B0A1-5476DBF70820}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{9381D8F2-0288-11D0-9501-00AA00B911A5}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{C6BAF60B-6E91-453F-BFF9-D3789CFEFCDD}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{C9E9A340-D1F1-11D0-821E-444553540600}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{CDD7975E-60F8-41d5-8149-19E51D6F71D0}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{D27CDB6E-AE6D-11CF-96B8-444553540000}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{de5aed00-a4bf-11d1-9948-00c04f98bbc9}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{E92B03AB-B707-11d2-9CBD-0000F87A369E}
==============
BHO :
======
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{27B4851A-3207-45A2-B947-BE8AFE6163AB}]
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{5C255C8A-E604-49b4-9D64-90988571CECB}]
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{6EBF7485-159F-4bff-A14F-B9E3AAC4465B}]
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{7DB2D5A0-7241-4E79-B68D-6309F01C5231}]
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{9421DD08-935F-4701-A9CA-22DF90AC4EA6}]
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{B164E929-A1B6-4A06-B104-2CD0E90A88FF}]
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{E15A8DC0-8516-42A1-81EA-DC94EC1ACF10}]
================
Internet Explorer :
================
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
Página de inicio REG_SZ https://www.msn.com/fr-fr
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
Página de inicio REG_SZ http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
========
Servicios
========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services]
Ndisuio : 0x3
EapHost : 0x3
Wlansvc : 0x2
SharedAccess : 0x4
windefend : 0x2
wuauserv : 0x2
wscsvc : 0x2
=========
Atapi.sys
=========
%%%% HASHDEEP-1.0
%%%% tamaño,md5,sha256,nombre de archivo
## Invocado desde: C:\Users\ange\AppData\Local\Temp\2CAB.tmp
## C:\> hashdeep C:\Windows\System32\Drivers\atapi.sys
##
19944,1f05b78ab91c9075565a9d8a4b880bc4,737be9f9376dab0ccdfed93ea6d67f0c432367ea63cd772a453485be769af3bd,C:\Windows\System32\Drivers\atapi.sys
Fuentes
=======
C:\Windows\System32\drivers\atapi.sys
C:\Windows\System32\DriverStore\FileRepository\mshdc.inf_b12d8e84\atapi.sys
C:\Windows\System32\DriverStore\FileRepository\mshdc.inf_c6c2e699\atapi.sys
C:\Windows\System32\DriverStore\FileRepository\mshdc.inf_cc18792d\atapi.sys
C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.0.6001.18000_none_dd38281a2189ce9c\atapi.sys
C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.0.6002.18005_none_df23a1261eab99e8\atapi.sys
Referencia :
==========
Win XP_SP2_32b : CDFE4411A69C224BD1D11B2DA92DAC51
Win XP_SP3_32b : 9F3A2F5AA6875C72BF062C712CFA2674
Vista_SP1_32b : 2d9c903dc76a66813d350a562de40ed9
Vista_SP2_32b : 1F05B78AB91C9075565A9D8A4B880BC4
Vista_SP2_64b : 1898FAE8E07D97F2F6C2D5326C633FAC
Windows 7_32b : 80C40F7FDFC376E4C5FEEC28B41C119E
Windows 7_64b : 02062C0B390B7729EDC9E69C680A6F3C
=======
Unidad :
=======
Desfragmentador de disco Windows
Copyright (c) 2006 Microsoft Corp.
Informe de análisis para el volumen C: ACER
Tamaño del volumen = 456 Go
Espacio libre = 239 Go
Extensión de espacio libre más grande = 204 Go
Porcentaje de fragmentación de archivos = 0 %
Nota: en los volúmenes NTFS, los fragmentos de archivos de más de 64 Mo no se incluyen en las estadísticas de fragmentación.
No es necesario desfragmentar este volumen.
¤¤¤¤¤¤¤¤¤¤ Archivos/carpetas :
¡Presente!! : C:\ProgramData\AVP 2009
¡Presente!! : C:\programdata\AVP 2009
¡Presente!! : C:\Program Files\Winsudate
¡Presente!! : C:\Windows\tasks\Registry_Doktor.job
¡Presente!! : C:\Users\ange\LOCAL Settings\Temp\AB2D.exe
¡Presente!! : C:\Users\ange\LOCAL Settings\Temp\directx_aug2009_redist.exe
¡Presente!! : C:\Users\ange\LOCAL Settings\Temp\DivXInstaller.exe
¡Presente!! : C:\Users\ange\LOCAL Settings\Temp\FP_PL_MSI_INSTALLER.exe
¡Presente!! : C:\Users\ange\LOCAL Settings\Temp\jre-6u17-windows-i586-iftw-rv.exe
¡Presente!! : C:\Users\ange\LOCAL Settings\Temp\K-Lite_Codec_Pack_546_Full_beta.exe
¡Presente!! : C:\Users\ange\LOCAL Settings\Temp\MvtApp.exe
¡Presente!! : C:\Users\ange\LOCAL Settings\Temp\realalt201.exe
¡Presente!! : C:\Users\ange\LOCAL Settings\Temp\RtkBtMnt.exe
¡Presente!! : C:\Users\ange\LOCAL Settings\Temp\SearchWithGoogleUpdate.exe
¡Presente!! : C:\Users\ange\LOCAL Settings\Temp\VistaCodecs_v5495.exe
¡Presente!! : C:\Users\ange\LOCAL Settings\Temp\wlsetup-cvr.exe
¡Presente!! : C:\Users\ange\LOCAL Settings\Temp\Xvid-1.2.2-07062009.exe
¡Presente!! : C:\Users\ange\LOCAL Settings\Temp\_is23B6.exe
¡Presente!! : C:\Users\ange\LOCAL Settings\Temp\_is7CD.exe
¡Presente!! : C:\Users\ange\LOCAL Settings\Temp\_is9D19.exe
¡Presente!! : C:\Users\ange\LOCAL Settings\Temp\_isFE89.exe
¤¤¤¤¤¤¤¤¤¤ Claves :
¡Presente!! : HKCU\Software\Microsoft\Windows\CurrentVersion\Run\winusr
¡Presente!! : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar\{90B8B761-DF2B-48AC-BBE0-BCC03A819B3B}
¡Presente!! : HKCR\CLSID\{248dd896-bb45-11cf-9abc-0080c7e7b78d}
¡Presente!! : HKCR\CLSID\{248dd897-bb45-11cf-9abc-0080c7e7b78d}
¡Presente!! : HKCR\Interface\{248dd892-bb45-11cf-9abc-0080c7e7b78d}
¡Presente!! : HKCR\Interface\{248dd893-bb45-11cf-9abc-0080c7e7b78d}
¡Presente!! : HKCR\srv.coreservices
¡Presente!! : HKCR\srv.coreservices.1
¡Presente!! : HKCR\TypeLib\{248dd890-bb45-11cf-9abc-0080c7e7b78d}
¡Presente!! : HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{100eb1fd-d03e-47fd-81f3-ee91287f9465}
¡Presente!! : HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{83ff80f4-8c74-4b80-b5ba-c8ddd434e5c4}
¡Presente!! : HKCU\SOFTWARE\RegistryDoktorFrNE
¡Presente!! : HKLM\Software\Classes\CLSID\{70880CE6-308C-4204-A89E-B266C3F7B7FA}
¡Presente!! : HKLM\Software\Classes\Interface\{15FD8424-D12A-4C51-8C6C-D5D57B80F781}
¡Presente!! : HKLM\Software\Classes\Interface\{2447E305-5E90-42A8-BD1E-0BC333B807E1}
¡Presente!! : HKLM\Software\Classes\Interface\{2557DD3F-23A0-477C-BCD8-90FD0AECC4B8}
¡Presente!! : HKLM\Software\Classes\Interface\{2893116C-A176-42B1-8794-DA8C9FC45564}
¡Presente!! : HKLM\Software\Classes\Interface\{3CEB04AB-08AF-45F4-81B4-70D13C1F7B85}
¡Presente!! : HKLM\Software\Classes\Interface\{40CA90F3-4098-4877-AE87-23EB612B18C7}
¡Presente!! : HKLM\Software\Classes\Interface\{50D2FDCC-2707-49CB-8223-7FE0424909AA}
¡Presente!! : HKLM\Software\Classes\Interface\{5A635A91-C303-45C9-8DB9-F759D98A3B9D}
¡Presente!! : HKLM\Software\Classes\Interface\{67B3BECF-7B6F-42B2-99F0-F7656F89CFFA}
¡Presente!! : HKLM\Software\Classes\Interface\{715FFD42-4E05-4EAB-9513-C8DAA5395AE2}
¡Presente!! : HKLM\Software\Classes\Interface\{759D6F7C-8D30-45B6-ABEA-FA51C190EED5}
¡Presente!! : HKLM\Software\Classes\Interface\{7E335D04-2E6E-4D0E-A921-C3D9192E7121}
¡Presente!! : HKLM\Software\Classes\Interface\{878CE013-7BA9-4650-A78C-B2234C0C1648}
¡Presente!! : HKLM\Software\Classes\Interface\{8EE46F55-1CE1-4DB9-811A-68938EC7F3DD}
¡Presente!! : HKLM\Software\Classes\Interface\{99CCFB8C-6380-4A14-8FDD-EF3E7E95335D}
¡Presente!! : HKLM\Software\Classes\Interface\{99FDCA0C-7380-4E9C-8D99-5DC4750334EF}
¡Presente!! : HKLM\Software\Classes\Interface\{9A4A64A4-A2FB-48FA-9BBA-1AC50267695D}
¡Presente!! : HKLM\Software\Classes\Interface\{A7213D71-47E1-4832-92D7-D61DFE9F231F}
¡Presente!! : HKLM\Software\Classes\Interface\{A87DFD99-CF81-4241-85CE-881E0026B686}
¡Presente!! : HKLM\Software\Classes\Interface\{B1D9F4B1-B9FF-463F-BF15-AB9CB26160F7}
¡Presente!! : HKLM\Software\Classes\Interface\{B20D7ADD-989C-4BC0-A797-F6FE7998EFD7}
¡Presente!! : HKLM\Software\Classes\Interface\{BFC20A15-B0AC-44CC-A25A-A7039014BA9F}
¡Presente!! : HKLM\Software\Classes\Interface\{C96B9FAE-A032-4100-BB47-32EF05E28BE4}
¡Presente!! : HKLM\Software\Classes\Interface\{CF82F350-E1C4-4916-AC12-BA73DB60AFB7}
¡Presente!! : HKLM\Software\Classes\Interface\{F019AEC4-4C95-46DE-A107-E302473E3B9A}
¡Presente!! : HKLM\software\classes\Srv.CoreServices
¡Presente!! : HKLM\software\classes\Srv.CoreServices.1
¡Presente!! : HKLM\Software\Classes\TypeLib\{03D7FF6E-9781-40B5-BB7F-94291A361604}
¡Presente!! : HKLM\SYSTEM\ControlSet001\Services\winsvc
¡Presente!! : HKLM\SYSTEM\CurrentControlSet\Services\winsvc
============
catchme 0.3.1398.3 W2K/XP/Vista - detector de rootkit/malware en sigilo por Gmer, http://www.gmer.net
Escaneo de rootkit 2010-01-26 23:10:49
Windows 6.0.6002 Service Pack 2 NTFS
escanear procesos ocultos ...
escanear servicios ocultos & hive del sistema ...
escanear entradas de registro ocultas ...
escanear archivos ocultos ...
escaneo completado con éxito
procesos ocultos: 0
servicios ocultos: 0
archivos ocultos: 0
Detector de rootkit MBR/Sinowal por Gmer, http://www.gmer.net
dispositivo: abierto con éxito
usuario: MBR leído con éxito
kernel: MBR leído con éxito
usuario y kernel MBR OK
==========
Programas
==========
ABBYY FineReader 6.0 Sprint
Acer
Acer Arcade Deluxe
Acer GameZone
Acer Inc
Adobe
AmIcoSingLun
Actualización de Software de Apple
Abr2005_d3dx9_25_x64.cab
Abr2005_d3dx9_25_x86.cab
Abr2006_d3dx9_30_x64.cab
Abr2006_d3dx9_30_x86.cab
Abr2006_MDX1_x86.cab
Abr2006_MDX1_x86_Archive.cab
Abr2006_XACT_x64.cab
Abr2006_XACT_x86.cab
Abr2006_xinput_x64.cab
Abr2006_xinput_x86.cab
ABR2007_d3dx10_33_x64.cab
ABR2007_d3dx10_33_x86.cab
ABR2007_d3dx9_33_x64.cab
ABR2007_d3dx9_33_x86.cab
ABR2007_XACT_x64.cab
ABR2007_XACT_x86.cab
ABR2007_xinput_x64.cab
ABR2007_xinput_x86.cab
ATI
Tecnologías ATI
Ago2005_d3dx9_27_x64.cab
Ago2005_d3dx9_27_x86.cab
AGO2006_XACT_x64.cab
AGO2006_XACT_x86.cab
AGO2006_xinput_x64.cab
AGO2006_xinput_x86.cab
AGO2007_d3dx10_35_x64.cab
AGO2007_d3dx10_35_x86.cab
AGO2007_d3dx9_35_x64.cab
AGO2007_d3dx9_35_x86.cab
AGO2007_XACT_x64.cab
AGO2007_XACT_x86.cab
Ago2008_d3dx10_39_x64.cab
Ago2008_d3dx10_39_x86.cab
Ago2008_d3dx9_39_x64.cab
Ago2008_d3dx9_39_x86.cab
Ago2008_XACT_x64.cab
Ago2008_XACT_x86.cab
Ago2008_XAudio_x64.cab
Ago2008_XAudio_x86.cab
Ago2009_D3DCompiler_42_x64.cab
Ago2009_D3DCompiler_42_x86.cab
Ago2009_d3dcsx_42_x64.cab
Ago2009_d3dcsx_42_x86.cab
Ago2009_d3dx10_42_x64.cab
Ago2009_d3dx10_42_x86.cab
Ago2009_d3dx11_42_x64.cab
Ago2009_d3dx11_42_x86.cab
Ago2009_d3dx9_42_x64.cab
Ago2009_d3dx9_42_x86.cab
Ago2009_XACT_x64.cab
Ago2009_XACT_x86.cab
Ago2009_XAudio_x64.cab
Ago2009_XAudio_x86.cab
BDANT.cab
BDAXP.cab
Broadcom
Archivos Comunes
Convesoft
Cyberlink
Dic2005_d3dx9_28_x64.cab
Dic2005_d3dx9_28_x86.cab
DIC2006_d3dx10_00_x64.cab
DIC2006_d3dx10_00_x86.cab
DIC2006_d3dx9_32_x64.cab
DIC2006_d3dx9_32_x86.cab
DIC2006_XACT_x64.cab
DIC2006_XACT_x86.cab
desktop.ini
DivX
DSETUP.dll
dsetup32.dll
dxdllreg_x86.cab
dxnt.cab
DXSETUP.exe
dxupdate.cab
EgisTec
Actualización de Software EgisTec
eMule
epson
Software de Epson
eSobi
Feb2005_d3dx9_24_x64.cab
Feb2005_d3dx9_24_x86.cab
Feb2006_d3dx9_29_x64.cab
Feb2006_d3dx9_29_x86.cab
Feb2006_XACT_x64.cab
- 1
- 2
Siguiente