virus se fait passer pour windows defender

adamchoucroun -  
Smart91 Messages postés 30146 Statut Contributeur sécurité -
Bonjour,un virus que j'ai attraper a cause d'un faut lien sur facebook a infecté mon ordinateur
il se fait passer pour- Windows défender,j'ai installé avast 5 mais le virus m'empêche de l'activer pour par la suite pouvoir télécharger les mise a jour, j'ai une connaissance très limité en informatique pouvez vous m'aider merci d'avance. Adam

3 réponses

  1. azerty
     
    Salut, arrive tu à télécharger?

    si oui, télécharge : A-SQUARED FREE

    fais la mise à jour et un scan en détails

    poste le rapport ici
    0
    1. adamchoucroun
       
      merci pour ta réponse rapide j'ai téléchargé A-SQUARED FREE d'un autre ordi mais le problème c que je ne peut pas faire de mise a jour a partir du mien à cause du virus.
      0
    2. adamchoucroun
       
      merci pour ta réponse rapide j'ai téléchargé A-SQUARED FREE d'un autre ordi mais le problème c que je ne peut pas faire de mise a jour a partir du mien à cause du virus.
      0
    3. Azerty
       
      re-salut,

      tu te mets en mode sans echec avec prise de réseaux

      éssaye de faire la mise à jour
      0
    4. adamchoucroun
       
      j'ai fait se que tu ma dit sa a marché je t'envoie le rapport des que je l'ai
      0
  2. Smart91 Messages postés 30146 Statut Contributeur sécurité 2 331
     
    Bonjour,

    On va analyser ton PC
    Sous VISTA : Désactive le contrôle des comptes utilisateurs (tu le réactiveras après ta désinfection)

    Télécharge RSIT et mets l'exécutable sur ton Bureau. ==>http://images.malwareremoval.com/random/RSIT.exe
    Ferme toutes les applications et déconnecte toi dinternet
    Lance RSIT:
    - Une première fenêtre s'ouvre avec en titre : " Disclaimer of warranty " .
    - Devant l'option "List files/folders created ..." , tu choisis : 1 months
    - Clique ensuite sur " Continue " pour lancer l'analyse ...
    - Si l'outil HijackThis n'est pas présent ou non détecté sur l'ordinateur, RSIT le téléchargera (autorise l'accès dans ton pare-feu s'il te le demande) et tu devras accepter la licence.

    Le scan démarre et ne touche pas au PC ...
    Une fois l'analyse terminée, deux fichiers texte s'ouvriront (avec le bloc-note).
    Poste le contenu de " log.txt " (c'est celui qui apparait à l'écran), ainsi que de " info.txt " (que tu verras dans la barre des tâches),
    Tu peux utiliser www.cijoint.fr pour mettre un lien vers les deux rapports

    PS: Pour info les rapports se trouvent dans C:\rsit

    Smart
    0
    1. adamchoucroun
       
      bonjour merci pour ton aide voila le rapport:
      Logfile of random's system information tool 1.06 (written by random/random)
      Run by Adam at 2010-04-08 15:27:47
      Microsoft® Windows Vista(TM) Édition Familiale Premium Service Pack 2
      System drive C: has 28 GB (24%) free of 114 GB
      Total RAM: 1791 MB (53% free)

      HijackThis download failed

      ======Scheduled tasks folder======

      C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
      C:\Windows\tasks\GoogleUpdateTaskMachineUA.job

      ======Registry dump======

      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{07B18EA1-A523-4961-B6BB-170DE4475CCA}]
      mwsBar BHO - C:\Program Files\MyWebSearch\bar\1.bin\MWSBAR.DLL [2007-10-29 405588]

      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3049C3E9-B461-4BC5-8870-4C09146192CA}]
      RealPlayer Download and Record Plugin for Internet Explorer - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll [2010-04-01 341600]

      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{39F7E362-828A-4B5A-BCAF-5B79BFDFEA60}]
      BitComet Helper - d:\Program Files\BitComet\tools\BitCometBHO_1.3.3.2.dll [2009-03-02 636216]

      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5C255C8A-E604-49b4-9D64-90988571CECB}]

      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6EBF7485-159F-4bff-A14F-B9E3AAC4465B}]
      Search Helper - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll [2009-05-19 137600]

      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{83A2F9B1-01A2-4AA5-87D1-45B6B8505E96}]
      ShowBarObj Class - C:\Windows\system32\ActiveToolBand.dll [2007-02-06 299008]

      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
      Programme d'aide de l'Assistant de connexion Windows Live - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-02-17 408440]

      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
      Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2010-03-09 41760]

      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E15A8DC0-8516-42A1-81EA-DC94EC1ACF10}]
      Windows Live Toolbar Helper - C:\Program Files\Windows Live\Toolbar\wltcore.dll [2009-02-06 1068904]

      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
      {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - Acer eDataSecurity Management - C:\Windows\system32\eDStoolbar.dll [2007-02-06 151552]
      {07B18EA9-A523-4961-B6BB-170DE4475CCA} - My Web Search - C:\Program Files\MyWebSearch\bar\1.bin\MWSBAR.DLL [2007-10-29 405588]
      {21FA44EF-376D-4D53-9B0F-8A89D3229068} - &Windows Live Toolbar - C:\Program Files\Windows Live\Toolbar\wltcore.dll [2009-02-06 1068904]

      [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
      "Windows Defender"=C:\Program Files\Windows Defender\MSASCui.exe [2008-01-19 1008184]
      "RtHDVCpl"=C:\Windows\RtHDVCpl.exe [2007-03-23 4423680]
      "Acer Tour"= []
      "Acer Empowering Technology Monitor"=C:\Acer\Empowering Technology\SysMonitor.exe [2007-01-24 319488]
      "eDataSecurity Loader"=C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe [2007-02-07 464168]
      "WarReg_PopUp"=C:\Acer\WR_PopUp\WarReg_PopUp.exe []
      "eRecoveryService"= []
      "Acer Tour Reminder"=C:\Acer\AcerTour\Reminder.exe []
      "Apanel"=C:\ACERSW\config\NewSetApanel.cmd []
      "SystrayORAHSS"=C:\Program Files\OrangeHSS\Systray\SystrayApp.exe [2006-12-12 90112]
      "SMSTray"=C:\Program Files\Samsung\Samsung Media Studio 5\SMSTray.exe [2007-02-23 126976]
      "MAAgent"=C:\Program Files\MarkAny\ContentSafer\MAAgent.exe [2007-01-30 57344]
      "MyWebSearch Email Plugin"=C:\PROGRA~1\MYWEBS~1\bar\1.bin\mwsoemon.exe [2007-10-29 32838]
      "LifeCam"=C:\Program Files\Microsoft LifeCam\LifeExp.exe [2007-05-17 279912]
      "VX1000"=C:\Windows\vVX1000.exe [2007-04-10 709992]
      "Kernel and Hardware Abstraction Layer"=C:\Windows\KHALMNPR.EXE [2008-02-29 76304]
      "My Web Search Bar Search Scope Monitor"=C:\PROGRA~1\MYWEBS~1\bar\1.bin\m3SrchMn.exe /m=0 []
      "QuickTime Task"=D:\Program Files\QuickTime\QTTask.exe [2009-05-26 413696]
      "iTunesHelper"=C:\Program Files\iTunes\iTunesHelper.exe [2009-06-05 292136]
      "SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2010-02-18 248040]
      "sysfbtray"=C:\Windows\bill106.exe [2010-03-29 64512]
      "TkBellExe"=C:\Program Files\Common Files\Real\Update_OB\realsched.exe [2010-04-01 202256]
      "avast5"=C:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe [2010-01-28 2757512]

      [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
      "Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2009-04-11 1233920]
      "WindowsWelcomeCenter"=oobefldr.dll,ShowWelcomeCenter []
      "Acer Tour Reminder"=C:\Acer\AcerTour\Reminder.exe []
      "ehTray.exe"=C:\Windows\ehome\ehTray.exe [2008-01-19 125952]
      "MsnMsgr"=C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe [2009-07-26 3883856]
      "MyWebSearch Email Plugin"=C:\PROGRA~1\MYWEBS~1\bar\1.bin\mwsoemon.exe [2007-10-29 32838]
      "CTZDetec.exe"=C:\Program Files\Creative\Creative Media Lite\CTZDetec.exe [2007-05-15 98304]
      "BitTorrent DNA"=C:\Users\Adam\Program Files\DNA\btdna.exe [2009-12-07 323392]
      "BitComet"=D:\Program Files\BitComet\BitComet.exe [2009-03-09 2564408]
      "WMPNSCFG"=C:\Program Files\Windows Media Player\WMPNSCFG.exe [2008-01-19 202240]

      C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
      Empowering Technology Launcher.lnk - C:\Acer\Empowering Technology\eAPLauncher.exe
      Logitech Desktop Messenger.lnk - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
      Logitech SetPoint.lnk - C:\Program Files\Logitech\SetPoint\SetPoint.exe
      PCM Media Sharing.lnk - C:\Program Files\Acer Arcade Live\Acer HomeMedia Connect\Kernel\DMS\PCMMediaSharing.exe

      C:\Users\Adam\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
      Adobe Gamma.lnk - C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe

      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
      "AppInit_DLLS"="aEKOerqfU.dll"

      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
      "{88485281-8b4b-4f8d-9ede-82e29a064277}"=C:\PROGRA~1\MarkAny\CONTEN~1\MACSMA~1.DLL [2004-11-23 192512]

      [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfPf]

      [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfRd]

      [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfSvc]

      [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfUsbccidDriver]

      [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]
      "DisableTaskMgr"=1
      "DisableRegistryTools"=1

      [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
      "dontdisplaylastusername"=0
      "legalnoticecaption"=
      "legalnoticetext"=
      "shutdownwithoutlogon"=1
      "undockwithoutlogon"=1
      "EnableUIADesktopToggle"=0

      [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
      "BindDirectlyToPropertySetStorage"=

      [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
      "C:\Program Files\BitTorrent\bittorrent.exe"="C:\Program Files\BitTorrent\bittorrent.exe:*:Enabled:BitTorrent"

      [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

      [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{58131242-0fda-11df-bd14-c907cd1c052d}]
      shell\AutoRun\command - 2a.exe
      shell\open\command - 2a.exe

      [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{840e4354-9f6b-11dc-89ac-00016c0cd229}]
      shell\AutoRun\command - y0gcubk.exe
      shell\explore\command - y0gcubk.exe
      shell\open\command - y0gcubk.exe


      ======List of files/folders created in the last 1 months======

      2010-04-08 14:56:06 ----D---- C:\Program Files\trend micro
      2010-04-08 14:56:05 ----DC---- C:\rsit
      2010-04-08 14:29:35 ----D---- C:\Program Files\a-squared Free
      2010-04-06 16:11:34 ----D---- C:\ProgramData\Sun
      2010-04-06 16:11:02 ----A---- C:\Windows\system32\javaws.exe
      2010-04-06 16:11:02 ----A---- C:\Windows\system32\javaw.exe
      2010-04-06 16:11:02 ----A---- C:\Windows\system32\java.exe
      2010-04-06 11:47:21 ----A---- C:\Windows\system32\aswBoot.exe
      2010-04-06 11:47:10 ----D---- C:\ProgramData\Alwil Software
      2010-04-02 15:14:37 ----DC---- C:\MyHosts
      2010-04-02 15:14:37 ----AC---- C:\MyHosts.txt
      2010-04-02 14:45:47 ----D---- C:\Users\Adam\AppData\Roaming\Uniblue
      2010-04-02 14:45:43 ----D---- C:\Program Files\Uniblue
      2010-04-01 17:48:49 ----D---- C:\Program Files\Common Files\xing shared
      2010-04-01 15:54:39 ----D---- C:\Windows\system32\Service
      2010-04-01 11:19:42 ----D---- C:\Windows\system32\eu-ES
      2010-04-01 11:19:42 ----D---- C:\Windows\system32\ca-ES
      2010-04-01 11:19:39 ----D---- C:\Windows\system32\vi-VN
      2010-04-01 11:04:17 ----D---- C:\Windows\system32\EventProviders
      2010-03-29 18:58:20 ----A---- C:\Windows\yYFTgsJ.exe
      2010-03-29 18:58:20 ----A---- C:\Windows\UYWXvNGs.exe
      2010-03-29 18:58:20 ----A---- C:\Windows\system32\XwvMhKoxV.exe
      2010-03-29 18:58:20 ----A---- C:\Windows\system32\UshppBG.exe
      2010-03-29 18:58:20 ----A---- C:\Windows\system32\SWGtLq.exe
      2010-03-29 18:58:20 ----A---- C:\Windows\system32\SKeCYxqi.dll
      2010-03-29 18:58:20 ----A---- C:\Windows\system32\rBJohKjt.exe
      2010-03-29 18:58:20 ----A---- C:\Windows\system32\psGTMnP.exe
      2010-03-29 18:58:20 ----A---- C:\Windows\system32\MfqTyUs.exe
      2010-03-29 18:58:20 ----A---- C:\Windows\system32\jfmKhjh.dll
      2010-03-29 18:58:20 ----A---- C:\Windows\system32\IdVfcMF.dll
      2010-03-29 18:58:20 ----A---- C:\Windows\system32\EbIDGqiK.exe
      2010-03-29 18:58:20 ----A---- C:\Windows\system32\DmcAy.dll
      2010-03-29 18:58:20 ----A---- C:\Windows\system32\CRAFEWn.dll
      2010-03-29 18:58:20 ----A---- C:\Windows\system32\AQpLJVjH.exe
      2010-03-29 18:58:20 ----A---- C:\Windows\system32\aEKOerqfU.dll
      2010-03-29 18:58:20 ----A---- C:\Windows\RKWCJqbh.exe
      2010-03-29 18:58:20 ----A---- C:\Windows\ORyjwFdbI.dll
      2010-03-29 18:58:20 ----A---- C:\Windows\kolwqQ.exe
      2010-03-29 18:58:20 ----A---- C:\Windows\iNrCO.exe
      2010-03-29 18:58:20 ----A---- C:\Windows\gBviGbBqL.dll
      2010-03-29 18:57:12 ----D---- C:\Program Files\webserver
      2010-03-29 18:56:34 ----A---- C:\Windows\system32\captcha.dll
      2010-03-29 18:40:39 ----H---- C:\Windows\bill106.exe
      2010-03-16 13:45:41 ----D---- C:\ProgramData\Adobe Systems
      2010-03-16 13:40:09 ----D---- C:\Program Files\Common Files\Adobe Systems Shared
      2010-03-16 13:38:01 ----D---- C:\ProgramData\Adobe
      2010-03-11 10:08:31 ----A---- C:\Windows\system32\nshhttp.dll
      2010-03-11 10:08:25 ----A---- C:\Windows\system32\httpapi.dll

      ======List of files/folders modified in the last 1 months======

      2010-04-08 15:27:39 ----D---- C:\Windows\Temp
      2010-04-08 15:26:39 ----D---- C:\Users\Adam\AppData\Roaming\DNA
      2010-04-08 15:23:26 ----D---- C:\Windows\Prefetch
      2010-04-08 15:18:55 ----D---- C:\Windows\System32
      2010-04-08 15:18:55 ----D---- C:\Windows\inf
      2010-04-08 15:18:55 ----A---- C:\Windows\system32\PerfStringBackup.INI
      2010-04-08 14:56:06 ----RD---- C:\Program Files
      2010-04-08 11:12:20 ----SHD---- C:\System Volume Information
      2010-04-08 10:36:06 ----D---- C:\Windows\tracing
      2010-04-06 18:53:21 ----D---- C:\Windows\system32\Tasks
      2010-04-06 18:43:38 ----D---- C:\Program Files\Mozilla Firefox
      2010-04-06 16:11:34 ----HD---- C:\ProgramData
      2010-04-06 16:11:33 ----SHD---- C:\Windows\Installer
      2010-04-06 16:11:31 ----D---- C:\Program Files\Common Files\Java
      2010-04-06 16:11:01 ----D---- C:\Program Files\Java
      2010-04-06 14:19:29 ----D---- C:\Windows\system32\drivers
      2010-04-06 14:19:24 ----D---- C:\Windows\system32\catroot
      2010-04-06 11:59:44 ----D---- C:\Windows
      2010-04-06 11:47:58 ----D---- C:\Windows\winsxs
      2010-04-06 11:47:10 ----D---- C:\Program Files\Alwil Software
      2010-04-02 13:33:20 ----D---- C:\Program Files\MSN Messenger
      2010-04-01 19:10:56 ----D---- C:\Users\Adam\AppData\Roaming\Adobe
      2010-04-01 17:56:39 ----D---- C:\Program Files\WinRAR
      2010-04-01 17:51:49 ----D---- C:\Program Files\Common Files\Real
      2010-04-01 17:51:42 ----A---- C:\Windows\system32\rmoc3260.dll
      2010-04-01 17:50:16 ----A---- C:\Windows\system32\pndx5032.dll
      2010-04-01 17:50:16 ----A---- C:\Windows\system32\pndx5016.dll
      2010-04-01 17:49:08 ----D---- C:\Program Files\Real
      2010-04-01 17:48:49 ----D---- C:\Program Files\Common Files
      2010-04-01 17:45:59 ----A---- C:\Windows\system32\pncrt.dll
      2010-04-01 11:44:18 ----HD---- C:\Windows\system32\GroupPolicy
      2010-04-01 11:39:18 ----D---- C:\Windows\rescache
      2010-04-01 11:34:38 ----RSD---- C:\Windows\assembly
      2010-04-01 11:34:38 ----D---- C:\Windows\Microsoft.NET
      2010-04-01 11:26:41 ----D---- C:\Program Files\DNA
      2010-04-01 11:25:43 ----D---- C:\Windows\system32\catroot2
      2010-04-01 11:25:36 ----SHD---- C:\Boot
      2010-04-01 11:20:11 ----D---- C:\Program Files\Windows Sidebar
      2010-04-01 11:20:11 ----D---- C:\Program Files\Windows Mail
      2010-04-01 11:20:11 ----D---- C:\Program Files\Windows Calendar
      2010-04-01 11:20:11 ----D---- C:\Program Files\Movie Maker
      2010-04-01 11:20:11 ----D---- C:\Program Files\Internet Explorer
      2010-04-01 11:20:07 ----D---- C:\Program Files\Windows Photo Gallery
      2010-04-01 11:20:07 ----D---- C:\Program Files\Windows Media Player
      2010-04-01 11:20:07 ----D---- C:\Program Files\Windows Journal
      2010-04-01 11:20:07 ----D---- C:\Program Files\Windows Collaboration
      2010-04-01 11:20:07 ----D---- C:\Program Files\Common Files\System
      2010-04-01 11:20:06 ----D---- C:\Windows\servicing
      2010-04-01 11:20:06 ----D---- C:\Windows\ehome
      2010-04-01 11:20:06 ----D---- C:\Program Files\Windows Defender
      2010-04-01 11:20:04 ----D---- C:\Windows\system32\XPSViewer
      2010-04-01 11:20:04 ----D---- C:\Windows\system32\sk-SK
      2010-04-01 11:20:04 ----D---- C:\Windows\system32\oobe
      2010-04-01 11:20:04 ----D---- C:\Windows\system32\migration
      2010-04-01 11:20:04 ----D---- C:\Windows\system32\lv-LV
      2010-04-01 11:20:04 ----D---- C:\Windows\system32\ko-KR
      2010-04-01 11:20:04 ----D---- C:\Windows\system32\it-IT
      2010-04-01 11:20:04 ----D---- C:\Windows\system32\hr-HR
      2010-04-01 11:20:04 ----D---- C:\Windows\system32\fr
      2010-04-01 11:20:04 ----D---- C:\Windows\system32\et-EE
      2010-04-01 11:20:04 ----D---- C:\Windows\system32\en-US
      2010-04-01 11:20:04 ----D---- C:\Windows\system32\el-GR
      2010-04-01 11:20:04 ----D---- C:\Windows\system32\de-DE
      2010-04-01 11:20:04 ----D---- C:\Windows\system32\da-DK
      2010-04-01 11:20:04 ----D---- C:\Windows\IME
      2010-04-01 11:20:03 ----D---- C:\Windows\system32\ru-RU
      2010-04-01 11:20:03 ----D---- C:\Windows\system32\AdvancedInstallers
      2010-04-01 11:20:02 ----D---- C:\Windows\system32\fr-FR
      2010-04-01 11:20:01 ----D---- C:\Windows\system32\zh-TW
      2010-04-01 11:20:01 ----D---- C:\Windows\system32\zh-CN
      2010-04-01 11:20:01 ----D---- C:\Windows\system32\uk-UA
      2010-04-01 11:20:01 ----D---- C:\Windows\system32\tr-TR
      2010-04-01 11:20:01 ----D---- C:\Windows\system32\th-TH
      2010-04-01 11:20:01 ----D---- C:\Windows\system32\sv-SE
      2010-04-01 11:20:01 ----D---- C:\Windows\system32\sr-Latn-CS
      2010-04-01 11:20:01 ----D---- C:\Windows\system32\SLUI
      2010-04-01 11:20:01 ----D---- C:\Windows\system32\sl-SI
      2010-04-01 11:20:01 ----D---- C:\Windows\system32\setup
      2010-04-01 11:20:01 ----D---- C:\Windows\system32\ro-RO
      2010-04-01 11:20:01 ----D---- C:\Windows\system32\pt-PT
      2010-04-01 11:20:01 ----D---- C:\Windows\system32\pl-PL
      2010-04-01 11:20:01 ----D---- C:\Windows\system32\manifeststore
      2010-04-01 11:20:01 ----D---- C:\Windows\system32\ja-JP
      2010-04-01 11:20:01 ----D---- C:\Windows\system32\hu-HU
      2010-04-01 11:20:01 ----D---- C:\Windows\system32\he-IL
      2010-04-01 11:20:01 ----D---- C:\Windows\system32\fi-FI
      2010-04-01 11:20:01 ----D---- C:\Windows\system32\es-ES
      2010-04-01 11:20:01 ----D---- C:\Windows\system32\cs-CZ
      2010-04-01 11:20:01 ----D---- C:\Windows\system32\bg-BG
      2010-04-01 11:19:57 ----D---- C:\Windows\system32\wbem
      2010-04-01 11:19:55 ----D---- C:\Windows\system32\pt-BR
      2010-04-01 11:19:55 ----D---- C:\Windows\system32\nl-NL
      2010-04-01 11:19:55 ----D---- C:\Windows\system32\nb-NO
      2010-04-01 11:19:55 ----D---- C:\Windows\system32\migwiz
      2010-04-01 11:19:55 ----D---- C:\Windows\system32\lt-LT
      2010-04-01 11:19:55 ----D---- C:\Windows\system32\ar-SA
      2010-04-01 11:19:47 ----RSD---- C:\Windows\Fonts
      2010-04-01 11:19:47 ----D---- C:\Windows\AppPatch
      2010-04-01 11:19:39 ----D---- C:\Windows\system32\Boot
      2010-04-01 11:18:09 ----D---- C:\Windows\system32\RTCOM
      2010-03-31 16:49:03 ----A---- C:\Windows\ntbtlog.txt
      2010-03-28 17:53:57 ----D---- C:\ProgramData\Real
      2010-03-24 17:42:32 ----DC---- C:\Downloads
      2010-03-16 14:06:18 ----D---- C:\Program Files\Adobe
      2010-03-16 13:40:45 ----D---- C:\Program Files\Common Files\Adobe
      2010-03-11 10:14:48 ----D---- C:\ProgramData\Microsoft Help
      2010-03-11 10:14:01 ----A---- C:\Windows\win.ini
      2010-03-09 04:28:20 ----A---- C:\Windows\system32\deploytk.dll

      ======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

      R1 aswFW;avast! TDI Firewall driver; C:\Windows\system32\drivers\aswFW.sys [2010-01-28 103120]
      R1 aswRdr;aswRdr; C:\Windows\system32\drivers\aswRdr.sys [2010-01-28 23376]
      R1 aswSnx;aswSnx; C:\Windows\system32\drivers\aswSnx.sys [2010-01-28 270928]
      R1 aswSP;aswSP; C:\Windows\system32\drivers\aswSP.sys [2010-01-28 163280]
      R1 aswTdi;avast! Network Shield Support; C:\Windows\system32\drivers\aswTdi.sys [2010-01-28 46672]
      R1 ql600oko;getPlus(R DocObject Network Driver IE Protocol Load CoventorWare; \??\C:\Windows\system32\drivers\mrxoko.sys [2008-01-19 32768]
      R1 StarOpen;StarOpen; C:\Windows\system32\drivers\StarOpen.sys [2006-07-24 5632]
      R2 aswFsBlk;aswFsBlk; C:\Windows\system32\drivers\aswFsBlk.sys [2010-01-28 19024]
      R2 aswMonFlt;aswMonFlt; \??\C:\Windows\system32\drivers\aswMonFlt.sys [2010-01-28 51792]
      R3 atikmdag;atikmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2007-03-14 2427392]
      R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\Windows\system32\DRIVERS\GEARAspiWDM.sys [2009-03-19 23400]
      R3 HdAudAddService;Pilote de fonction UAA 1.1 Microsoft pour le service High Definition Audio; C:\Windows\system32\drivers\HdAudio.sys [2009-04-11 236544]
      R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHDA.sys [2007-03-26 1761696]
      R3 LHidFilt;Logitech SetPoint KMDF HID Filter Driver; C:\Windows\system32\DRIVERS\LHidFilt.Sys [2008-02-29 35344]
      R3 LMouFilt;Logitech SetPoint KMDF Mouse Filter Driver; C:\Windows\system32\DRIVERS\LMouFilt.Sys [2008-02-29 36880]
      R3 LUsbFilt;Logitech SetPoint KMDF USB Filter; C:\Windows\System32\Drivers\LUsbFilt.Sys [2008-02-29 28944]
      R3 NTIDrvr;Upper Class Filter Driver; C:\Windows\system32\DRIVERS\NTIDrvr.sys [2007-05-06 6144]
      R3 WUDFRd;WUDFRd; C:\Windows\system32\DRIVERS\WUDFRd.sys [2008-01-19 83328]
      R3 yukonwlh;NDIS6.0 Miniport Driver for Marvell Yukon Ethernet Controller; C:\Windows\system32\DRIVERS\yk60x86.sys [2007-03-23 240128]
      S2 int15;int15; \??\C:\Acer\Empowering Technology\eRecovery\int15.sys []
      S3 drmkaud;Filtre de décodeur DRM (Noyau Microsoft); C:\Windows\system32\drivers\drmkaud.sys [2008-01-19 5632]
      S3 L8042Kbd;Logitech SetPoint Keyboard Driver; C:\Windows\system32\DRIVERS\L8042Kbd.sys [2008-02-29 20240]
      S3 L8042mou;SetPoint PS/2 Mouse Filter Driver; C:\Windows\system32\DRIVERS\L8042mou.Sys [2008-02-29 63120]
      S3 LMouKE;SetPoint Mouse Filter Driver; C:\Windows\system32\DRIVERS\LMouKE.Sys [2008-02-29 79120]
      S3 MSKSSRV;Proxy de service de répartition Microsoft; C:\Windows\system32\drivers\MSKSSRV.sys [2008-01-19 8192]
      S3 MSPCLOCK;Proxy d'horloge de répartition Microsoft; C:\Windows\system32\drivers\MSPCLOCK.sys [2008-01-19 5888]
      S3 MSPQM;Proxy de gestion de qualité de répartition Microsoft; C:\Windows\system32\drivers\MSPQM.sys [2008-01-19 5504]
      S3 MSTEE;Convertisseur en T/site-à-site de répartition Microsoft; C:\Windows\system32\drivers\MSTEE.sys [2008-01-19 6016]
      S3 PCAMp50;PCAMp50 NDIS Protocol Driver; C:\Windows\System32\Drivers\PCAMp50.sys [2006-11-28 28224]
      S3 PCASp50;PCASp50 NDIS Protocol Driver; C:\Windows\System32\Drivers\PCASp50.sys [2006-11-28 27072]
      S3 RT73;D-Link USB Wireless LAN Card Driver; C:\Windows\system32\DRIVERS\Dr71WU.sys [2009-12-07 256000]
      S3 sscdbus;SAMSUNG USB Composite Device driver (WDM); C:\Windows\system32\DRIVERS\sscdbus.sys [2007-07-03 80552]
      S3 sscdmdfl;SAMSUNG Mobile Modem Filter; C:\Windows\system32\DRIVERS\sscdmdfl.sys [2007-07-03 11944]
      S3 sscdmdm;SAMSUNG Mobile Modem Drivers; C:\Windows\system32\DRIVERS\sscdmdm.sys [2007-07-03 106792]
      S3 ssm_bus;SAMSUNG Mobile USB Device II 1.0 driver (WDM); C:\Windows\system32\DRIVERS\ssm_bus.sys [2007-05-02 83592]
      S3 ssm_mdfl;SAMSUNG Mobile USB Modem II 1.0 Filter; C:\Windows\system32\DRIVERS\ssm_mdfl.sys [2007-05-02 15112]
      S3 ssm_mdm;SAMSUNG Mobile USB Modem II 1.0 Drivers; C:\Windows\system32\DRIVERS\ssm_mdm.sys [2007-05-02 109704]
      S3 TVICHW32;TVICHW32; \??\C:\Windows\system32\DRIVERS\TVICHW32.SYS [2008-09-16 23600]
      S3 USBAAPL;Apple Mobile USB Driver; C:\Windows\System32\Drivers\usbaapl.sys [2009-06-05 39424]
      S3 usbaudio;Pilote USB audio (WDM); C:\Windows\system32\drivers\usbaudio.sys [2009-04-11 73216]
      S3 VX1000;VX-1000; C:\Windows\system32\DRIVERS\VX1000.sys [2007-04-10 1966312]
      S3 WpdUsb;WpdUsb; C:\Windows\system32\DRIVERS\wpdusb.sys [2008-01-19 39936]
      S4 WmiAcpi;Microsoft Windows Management Interface for ACPI; C:\Windows\system32\drivers\wmiacpi.sys [2006-11-02 11264]

      ======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

      R2 a2free;a-squared Free Service; C:\Program Files\a-squared Free\a2service.exe [2009-10-01 1858144]
      R2 AcerMemUsageCheckService;ePerformance Service; C:\Acer\Empowering Technology\ePerformance\MemCheck.exe [2006-12-29 28672]
      R2 Apple Mobile Device;Apple Mobile Device; C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe [2009-06-05 144712]
      R2 Ati External Event Utility;Ati External Event Utility; C:\Windows\system32\Ati2evxx.exe [2007-03-14 569344]
      R2 avast! Antivirus;avast! Antivirus; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2010-01-28 40384]
      R2 avast! Firewall;avast! Firewall; C:\Program Files\Alwil Software\Avast5\afwServ.exe [2010-01-28 119200]
      R2 Bonjour Service;Service Bonjour; C:\Program Files\Bonjour\mDNSResponder.exe [2008-12-12 238888]
      R2 captcha;captcha; C:\Windows\system32\svchost.exe [2008-01-19 21504]
      R2 CTDevice_Srv;CT Device Query service; C:\Program Files\Creative\Shared Files\CTDevSrv.exe [2007-04-02 61440]
      R2 eDataSecurity Service;eDSService.exe; C:\Acer\Empowering Technology\eDataSecurity\eDSService.exe [2007-02-07 457512]
      R2 eRecoveryService;eRecovery Service; C:\Acer\Empowering Technology\eRecovery\eRecoveryService.exe [2007-01-31 53248]
      R2 LightScribeService;LightScribeService Direct Disc Labeling Service; C:\Program Files\Common Files\LightScribe\LSSrvc.exe [2007-01-17 61440]
      R2 MSCamSvc;MSCamSvc; C:\Program Files\Microsoft LifeCam\MSCamS32.exe [2007-05-17 271720]
      R2 SeaPort;SeaPort; C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe [2009-05-19 240512]
      R2 swoko;Protocol CoventorWare TV: Folders History; C:\Windows\system32\svchost.exe [2008-01-19 21504]
      R2 webserver;webserver; C:\Program Files\webserver\webserver.exe [2010-03-29 15360]
      R3 avast! Mail Scanner;avast! Mail Scanner; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2010-01-28 40384]
      R3 avast! Web Scanner;avast! Web Scanner; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2010-01-28 40384]
      R3 iPod Service;Service de l'iPod; C:\Program Files\iPod\bin\iPodService.exe [2009-06-05 541992]
      S2 CLTNetCnService;Symantec Lic NetConnect service; c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe /h ccCommon []
      S2 gupdate1c9fa2b4f8a82e5;Service Google Update (gupdate1c9fa2b4f8a82e5); C:\Program Files\Google\Update\GoogleUpdate.exe [2009-07-01 133104]
      S3 Adobe LM Service;Adobe LM Service; C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe [2010-03-16 72704]
      S3 LBTServ;Logitech Bluetooth Service; C:\Program Files\Common Files\Logishrd\Bluetooth\LBTServ.exe [2008-05-02 121360]
      S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2008-11-04 441712]
      S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]

      -----------------EOF-----------------
      0
    2. adamchoucroun
       
      et le fichier info:
      info.txt logfile of random's system information tool 1.06 2010-04-08 14:56:34

      ======Uninstall list======

      -->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{1A99CB37-AEB0-492F-A85A-8A2536D22393}\setup.exe" -l0x40c
      Acer eDataSecurity Management-->C:\Acer\Empowering Technology\eDataSecurity\eDSnstHelper.exe -Operation UNINSTALL
      Acer Empowering Technology-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\11\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{AB6097D9-D722-4987-BD9E-A076E2848EE2}\setup.exe" -l0x40c -removeonly
      Acer ePerformance Management-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\11\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{D462BF9E-0C35-4705-BF9B-3DF9F3816643}\setup.exe" -l0x40c -removeonly
      Acer ScreenSaver-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\11\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{79DD56FC-DB8B-47F5-9C80-78B62E05F9BC}\setup.exe" -l0x9 -removeonly
      Acer Tour-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\11\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{94389919-B0AA-4882-9BE8-9F0B004ECA35}\setup.exe" -l0x40c -removeonly
      Activation Assistant for the 2007 Microsoft Office suites-->"C:\ProgramData\{174892B1-CBE7-44F5-86FF-AB555EFD73A3}\Microsoft Office Activation Assistant.exe" REMOVE=TRUE MODIFY=FALSE
      Adobe Bridge 1.0-->MsiExec.exe /I{B74D4E10-6884-0000-0000-000000000103}
      Adobe Common File Installer-->MsiExec.exe /I{8EDBA74D-0686-4C99-BFDD-F894678E5B39}
      Adobe Flash Player 10 Plugin-->C:\Windows\system32\Macromed\Flash\uninstall_plugin.exe
      Adobe Flash Player 9 ActiveX-->C:\Windows\system32\Macromed\Flash\FlashUtil9b.exe -uninstallDelete
      Adobe Flash Player ActiveX-->C:\Windows\system32\Macromed\Flash\uninstall_activeX.exe
      Adobe Help Center 1.0-->MsiExec.exe /I{E9787678-1033-0000-8E67-000000000001}
      Adobe Photoshop CS2-->msiexec /I {236BB7C4-4419-42FD-0409-1E257A25E34D}
      Adobe Shockwave Player-->C:\Windows\System32\Macromed\SHOCKW~1\UNWISE.EXE C:\Windows\System32\Macromed\SHOCKW~1\Install.log
      Adobe Stock Photos 1.0-->MsiExec.exe /I{786C5747-1033-0000-B58E-000000000001}
      Apple Mobile Device Support-->MsiExec.exe /I{8355F970-601D-442D-A79B-1D7DB4F24CAD}
      Apple Software Update-->MsiExec.exe /I{6956856F-B6B3-4BE0-BA0B-8F495BE32033}
      Archiveur WinRAR-->C:\Program Files\WinRAR\uninstall.exe
      a-squared Free 4.5-->"C:\Program Files\a-squared Free\unins000.exe"
      Assistant de connexion Windows Live-->MsiExec.exe /I{D3116CC7-24DC-4CA3-9CE1-23FED836E9F2}
      ATI Uninstaller-->C:\Program Files\ATI\CIM\Bin\Atisetup.exe -uninstall all
      avast! Internet Security-->C:\Program Files\Alwil Software\Avast5\aswRunDll.exe "C:\Program Files\Alwil Software\Avast5\Setup\setiface.dll" RunSetup
      AviSynth 2.5-->"C:\Program Files\AviSynth 2.5\Uninstall.exe"
      BitComet 1.10-->d:\Program Files\BitComet\uninst.exe
      Bonjour-->MsiExec.exe /I{07287123-B8AC-41CE-8346-3D777245C35B}
      CDDRV_Installer-->MsiExec.exe /I{0C826C5B-B131-423A-A229-C71B3CACCD6A}
      CoreAAC Audio Decoder (remove only)-->"C:\Windows\system32\CoreAAC-uninstall.exe"
      Creative Media Lite-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{1A99CB37-AEB0-492F-A85A-8A2536D22393}\setup.exe" -l0x40c /remove
      DHTML Editing Component-->MsiExec.exe /I{2EA870FA-585F-4187-903D-CB9FFD21E2E0}
      Direct Show Ogg Vorbis Filter (remove only)-->"C:\Windows\system32\OggDSuninst.exe"
      DivX Web Player-->C:\Program Files\DivX\DivXWebPlayerUninstall.exe /PLUGIN
      DriverAgent by TouchStone Software-->RunDll32.exe advpack.dll,LaunchINFSection driveragent_exe.inf,TVICHW32Remove
      eMule-->"d:\Program Files\eMule\Uninstall.exe"
      erLT-->MsiExec.exe /I{3EE9BCAE-E9A9-45E5-9B1C-83A4D357E05C}
      Free Ipod Video Converter V 2.6-->"C:\Program Files\Ipod Video Converter\unins000.exe"
      Free Mp3 Wma Converter V 1.7.3-->"C:\Program Files\Free Audio Pack\unins000.exe"
      Galerie de photos Windows Live-->MsiExec.exe /X{B131E59D-202C-43C6-84C9-68F0C37541F1}
      Google Chrome-->"C:\Program Files\Google\Chrome\Application\4.1.249.1045\Installer\setup.exe" --uninstall --system-level
      Google Update Helper-->MsiExec.exe /I{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}
      Guide de l'utilisateur Creative ZEN Stone-->"C:\Program Files\Creative\Creative ZEN Stone\UGRemove.exe" /Product_Name:ZENStoneUG
      Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)-->C:\Windows\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall /qb+ REBOOTPROMPT=""
      Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)-->C:\Windows\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall {A7EEA2F2-BFCD-4A54-A575-7B81A786E658} /qb+ REBOOTPROMPT=""
      Installation Windows Live-->C:\Program Files\Windows Live\Installer\wlarp.exe
      Installation Windows Live-->MsiExec.exe /I{46ABBC54-1872-4AA3-95E2-F2C063A63F31}
      iTunes-->MsiExec.exe /I{5D601655-6D54-4384-B52C-17EC5385FBBD}
      Java(TM) 6 Update 19-->MsiExec.exe /X{26A24AE4-039D-4CA4-87B4-2F83216011FF}
      Java(TM) 6 Update 5-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160050}
      Java(TM) 6 Update 7-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160070}
      Junk Mail filter update-->MsiExec.exe /I{E2DFE069-083E-4631-9B6C-43C48E991DE5}
      KhalInstallWrapper-->MsiExec.exe /I{3101CB58-3482-4D21-AF1A-7057FC935355}
      K-Lite Codec Pack 4.1.4 (Standard)-->"C:\Program Files\K-Lite Codec Pack\unins000.exe"
      Lame ACM MP3 Codec-->"C:\Windows\IFinst26.exe" -Ud:\Program Files\Lame MP3 Codec\IFU3BFC.inf
      Logitech Desktop Messenger-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{900B1197-53F5-4F46-A882-2CFFFE2EEDCB}\SETUP.EXE" -l0x40c UNINSTALL
      Logitech SetPoint-->C:\Program Files\InstallShield Installation Information\{F29B21BD-CAA6-445F-8EF7-A7E2B9D8B14E}\setup.exe -runfromtemp -l0x040c -removeonly
      Microsoft .NET Framework 3.5 Language Pack SP1 - fra-->MsiExec.exe /I{3E31821C-7917-367E-938E-E65FC413EA31}
      Microsoft .NET Framework 3.5 SP1-->C:\Windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setup.exe
      Microsoft .NET Framework 3.5 SP1-->MsiExec.exe /I{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}
      Microsoft Choice Guard-->MsiExec.exe /X{F0E12BBA-AD66-4022-A453-A1C8A0C4D570}
      Microsoft LifeCam-->MsiExec.exe /X{968D41C3-25BB-4632-A6DF-2E1C8F0143A4}
      Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-0016-040C-0000-0000000FF1CE} /uninstall {AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}
      Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-0018-040C-0000-0000000FF1CE} /uninstall {AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}
      Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001B-040C-0000-0000000FF1CE} /uninstall {AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}
      Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-006E-040C-0000-0000000FF1CE} /uninstall {B165D3C2-40AE-4D39-86F7-E5C87C4264C0}
      Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-00A1-040C-0000-0000000FF1CE} /uninstall {AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}
      Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {0B36C6D6-F5D8-4EAF-BF94-4376A230AD5B}
      Microsoft Office Excel MUI (French) 2007-->MsiExec.exe /X{90120000-0016-040C-0000-0000000FF1CE}
      Microsoft Office Home and Student 2007-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE12\Office Setup Controller\setup.exe" /uninstall HOMESTUDENTR /dll OSETUP.DLL
      Microsoft Office Home and Student 2007-->MsiExec.exe /X{91120000-002F-0000-0000-0000000FF1CE}
      Microsoft Office OneNote MUI (French) 2007-->MsiExec.exe /X{90120000-00A1-040C-0000-0000000FF1CE}
      Microsoft Office PowerPoint MUI (French) 2007-->MsiExec.exe /X{90120000-0018-040C-0000-0000000FF1CE}
      Microsoft Office Professional Edition 2003-->MsiExec.exe /I{9011040C-6000-11D3-8CFE-0150048383C9}
      Microsoft Office Proof (Arabic) 2007-->MsiExec.exe /X{90120000-001F-0401-0000-0000000FF1CE}
      Microsoft Office Proof (Dutch) 2007-->MsiExec.exe /X{90120000-001F-0413-0000-0000000FF1CE}
      Microsoft Office Proof (English) 2007-->MsiExec.exe /X{90120000-001F-0409-0000-0000000FF1CE}
      Microsoft Office Proof (French) 2007-->MsiExec.exe /X{90120000-001F-040C-0000-0000000FF1CE}
      Microsoft Office Proof (German) 2007-->MsiExec.exe /X{90120000-001F-0407-0000-0000000FF1CE}
      Microsoft Office Proof (Spanish) 2007-->MsiExec.exe /X{90120000-001F-0C0A-0000-0000000FF1CE}
      Microsoft Office Proofing (French) 2007-->MsiExec.exe /X{90120000-002C-040C-0000-0000000FF1CE}
      Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001F-0401-0000-0000000FF1CE} /uninstall {14809F99-C601-4D4A-9391-F1E8FAA964C5}
      Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001F-0407-0000-0000000FF1CE} /uninstall {A0516415-ED61-419A-981D-93596DA74165}
      Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001F-0409-0000-0000000FF1CE} /uninstall {ABDDE972-355B-4AF1-89A8-DA50B7B5C045}
      Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001F-040C-0000-0000000FF1CE} /uninstall {F580DDD5-8D37-4998-968E-EBB76BB86787}
      Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001F-0413-0000-0000000FF1CE} /uninstall {D66D5A44-E480-4BA4-B4F2-C554F6B30EBB}
      Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001F-0C0A-0000-0000000FF1CE} /uninstall {187308AB-5FA7-4F14-9AB9-D290383A10D9}
      Microsoft Office Shared MUI (French) 2007-->MsiExec.exe /X{90120000-006E-040C-0000-0000000FF1CE}
      Microsoft Office Word MUI (French) 2007-->MsiExec.exe /X{90120000-001B-040C-0000-0000000FF1CE}
      Microsoft Search Enhancement Pack-->MsiExec.exe /X{4CBA3D4C-8F51-4D60-B27E-F6B641C571E7}
      Microsoft Silverlight-->MsiExec.exe /X{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}
      Microsoft SQL Server 2005 Compact Edition [ENU]-->MsiExec.exe /I{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}
      Microsoft Sync Framework Runtime Native v1.0 (x86)-->MsiExec.exe /I{8A74E887-8F0F-4017-AF53-CBA42211AAA5}
      Microsoft Sync Framework Services Native v1.0 (x86)-->MsiExec.exe /I{BD64AF4A-8C80-4152-AD77-FCDDF05208AB}
      Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053-->MsiExec.exe /X{770657D0-A123-3C07-8E44-1C83EC895118}
      Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{A49F249F-0C91-497F-86DF-B2585E8E76B7}
      Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148-->MsiExec.exe /X{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}
      Microsoft Works-->MsiExec.exe /I{6B1CB38D-E2E4-4A30-933D-EFDEBA76AD9C}
      Mise à jour Microsoft Office Excel 2007 Help (KB963678)-->msiexec /package {90120000-0016-040C-0000-0000000FF1CE} /uninstall {B761869A-B85C-40E2-994C-A1CE78AC8F2C}
      Mise à jour Microsoft Office Powerpoint 2007 Help (KB963669)-->msiexec /package {90120000-0018-040C-0000-0000000FF1CE} /uninstall {C3DCA38E-005E-41BA-A52A-7C3429F351C3}
      Mise à jour Microsoft Office Word 2007 Help (KB963665)-->msiexec /package {90120000-001B-040C-0000-0000000FF1CE} /uninstall {81536A04-DBFB-4DB3-978F-0F284590C223}
      Module linguistique Microsoft .NET Framework 3.5 SP1- fra-->C:\Windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 Language Pack SP1 - fra\setup.exe
      Mozilla Firefox (3.6.3)-->C:\Program Files\Mozilla Firefox\uninstall\helper.exe
      MSVCRT-->MsiExec.exe /I{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}
      MSXML 4.0 SP2 (KB936181)-->MsiExec.exe /I{C04E32E0-0416-434D-AFB9-6969D703A9EF}
      MSXML 4.0 SP2 (KB941833)-->MsiExec.exe /I{C523D256-313D-4866-B36A-F3DE528246EF}
      MSXML 4.0 SP2 (KB954430)-->MsiExec.exe /I{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
      MSXML 4.0 SP2 (KB973688)-->MsiExec.exe /I{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}
      MusicBrainz Tagger 0.10.5-->C:\PROGRA~1\MUSICB~1\UNWISE.EXE C:\PROGRA~1\MUSICB~1\INSTALL.LOG
      My Web Search (Zwinky)-->rundll32 C:\PROGRA~1\MYWEBS~1\bar\1.bin\mwsbar.dll,O
      NTI Backup NOW! 4.7-->"C:\Program Files\InstallShield Installation Information\{67ADE9AF-5CD9-4089-8825-55DE4B366799}\setup.exe" -removeonly
      NTI CD & DVD-Maker-->C:\PROGRA~1\COMMON~1\INSTAL~1\Driver\7\INTEL3~1\IDriver.exe /M{1577A05B-EE62-4BBC-9DB7-FE748FA44EC2} /l1036 CDM7
      Outil de téléchargement Windows Live-->MsiExec.exe /I{205C6BDD-7B73-42DE-8505-9A093F35A238}
      PKR-->"C:\Program Files\PKR\uninstall-pkr.exe"
      PokerStars-->"C:\Program Files\PokerStars\PokerStarsUninstall.exe" /u:PokerStars
      QuickTime-->MsiExec.exe /I{C78EAC6F-7A73-452E-8134-DBB2165C5A68}
      Real Alternative 1.22-->"C:\Program Files\Real Alternative\unins000.exe"
      RealPlayer-->C:\Program Files\Common Files\Real\Update_OB\r1puninst.exe RealNetworks|RealPlayer|12.0
      Realtek High Definition Audio Driver-->RtlUpd.exe -r -m
      RealUpgrade 1.0-->MsiExec.exe /I{F4F4F84E-804F-4E9A-84D7-C34283F0088F}
      Safari-->MsiExec.exe /I{C9D96682-5A4D-45FA-BA3E-DDCB2B0CB868}
      SAMSUNG CDMA Modem Driver Set-->C:\Windows\system32\Samsung_USB_Drivers\3\SSCDUninstall.exe
      Samsung Media Studio-->C:\Program Files\InstallShield Installation Information\{C20CE592-B0F8-4D20-BF31-0151CA6331A6}\setup.exe -runfromtemp -l0x040c -removeonly
      SAMSUNG Mobile Modem Driver Set-->C:\Windows\system32\Samsung_USB_Drivers\3\SSCDUninstall.exe
      Samsung Mobile phone USB driver Software-->C:\Windows\system32\Samsung_USB_Drivers\5\SSSDUninstall.exe
      SAMSUNG Mobile USB Modem 1.0 Software-->C:\Windows\system32\Samsung_USB_Drivers\1\SS_Uninstall.exe
      SAMSUNG Mobile USB Modem Software-->C:\Windows\system32\Samsung_USB_Drivers\2\SSM_Uninstall.exe
      Samsung PC Studio 3 USB Driver Installer-->"C:\Program Files\InstallShield Installation Information\{EBA29752-DDD2-4B62-B2E3-9841F92A3E3A}\setup.exe" -runfromtemp -l0x040c -removeonly
      Samsung PC Studio 3-->"C:\Program Files\InstallShield Installation Information\{C4A4722E-79F9-417C-BD72-8D359A090C97}\setup.exe" -runfromtemp -l0x040c -removeonly
      Security Update for 2007 Microsoft Office System (KB969559)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {69F52148-9BF6-4CDC-BF76-103DEAF3DD08}
      Security Update for 2007 Microsoft Office System (KB978380)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {667A88D1-0369-4070-A62A-70672D68A9BF}
      Security Update for CAPICOM (KB931906)-->MsiExec.exe /I{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}
      Security Update for CAPICOM (KB931906)-->MsiExec.exe /X{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}
      Security Update for Microsoft Office Excel 2007 (KB978382)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {6DE3DABF-0203-426B-B330-7287D1003E86}
      Security Update for Microsoft Office PowerPoint 2007 (KB957789)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {7559E742-FF9F-4FAE-B279-008ED296CB4D}
      Security Update for Microsoft Office system 2007 (972581)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {3D019598-7B59-447A-80AE-815B703B84FF}
      Security Update for Microsoft Office system 2007 (KB969613)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {5ECEB317-CBE9-4E08-AB10-756CB6F0FB6C}
      Security Update for Microsoft Office system 2007 (KB974234)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {FCD742B9-7A55-44BC-A776-F795F21FEDDC}
      Security Update for Microsoft Office Visio Viewer 2007 (KB973709)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {71127777-8B2C-4F97-AF7A-6CF8CAC8224D}
      Turbo Lister 2-->MsiExec.exe /X{8927E07C-97F7-4A54-88FB-D976F50DD46E}
      Uniblue RegistryBooster-->"C:\Program Files\Uniblue\RegistryBooster\unins000.exe"
      Update for 2007 Microsoft Office System (KB967642)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {C444285D-5E4F-48A4-91DD-47AAAA68E92D}
      Update for 2007 Microsoft Office System (KB977724)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {CC0E469C-5006-48B9-BBDC-D11B562499B4}
      Update for Microsoft .NET Framework 3.5 SP1 (KB963707)-->C:\Windows\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall {B2AE9C82-DC7B-3641-BFC8-87275C4F3607} /qb+ REBOOTPROMPT=""
      Update for Microsoft Office InfoPath 2007 (KB976416)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {432C5EE4-8096-4FF1-95E1-65219365DFF7}
      Update for Microsoft Office Word 2007 (KB974561)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {0CDDBAA2-2111-4A0E-A1B0-76C40C635331}
      UV DirectShow Pack-->"C:\Windows\Uninstall_UV_DirectShow_Pack.exe"
      VC80CRTRedist - 8.0.50727.762-->MsiExec.exe /I{767CC44C-9BBC-438D-BAD3-FD4595DD148B}
      VideoLAN VLC media player 0.8.6c-->d:\Program Files\VideoLAN\VLC\uninstall.exe
      ViVi iPod Converter 2.1-->"C:\Program Files\ViVi iPod Converter 2.1\unins000.exe"
      Windows Live Call-->MsiExec.exe /I{82C7B308-0BDD-49D8-8EA5-9CD3A3F9DF41}
      Windows Live Communications Platform-->MsiExec.exe /I{3B4E636E-9D65-4D67-BA61-189800823F52}
      Windows Live FolderShare-->MsiExec.exe /X{2075CB0A-D26F-4DAA-B424-5079296B43BA}
      Windows Live Mail-->MsiExec.exe /I{5DD76286-9BE7-4894-A990-E905E91AC818}
      Windows Live Messenger-->MsiExec.exe /X{770F1BEC-2871-4E70-B837-FB8525FFA3B1}
      Windows Live Movie Maker-->MsiExec.exe /X{53B20C18-D8D4-4588-8737-9BBFE303C354}
      Windows Live OneCare safety scanner-->"C:\Program Files\Windows Live Safety Center\UnInstall.exe"
      Windows Live OneCare safety scanner-->MsiExec.exe /X{FE0646A7-19D0-41B4-A2BB-2C35D644270D}
      Windows Live Toolbar-->MsiExec.exe /X{F7D27C70-90F5-49B9-B188-0A133C0CE353}
      Windows Media Player Firefox Plugin-->MsiExec.exe /I{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}
      XviD MPEG-4 Video Codec-->"d:\Program Files\XviD\unins000.exe"

      ======Security center information======

      AS: Windows Defender

      ======System event log======

      Computer Name: PC-de-Adam
      Event Code: 36
      Message: Le service de temps n'a pas été synchronisé avec l'heure du système pendant 86400 secondes, car aucun des fournisseurs de service de temps n'a fourni de marque horaire utilisable. Le service de temps ne mettra pas à jour l'heure du système local avant de pouvoir effectuer une synchronisation avec une source de temps. Si l'heure du système local est configurée de manière à agir en tant que serveur de temps pour les clients, il arrêtera de publier des informations en tant que source de temps aux clients. Le service de temps continuera d'essayer et de synchroniser l'heure avec ses sources de temps. Vérifiez la présence d'autres événements W32time dans le journal des événements du système pour plus de détails. Exécutez « w32tm /resync » pour forcer une synchronisation d'heure instantanée.
      Record Number: 178077
      Source Name: Microsoft-Windows-Time-Service
      Time Written: 20090824100220.000000-000
      Event Type: Avertissement
      User:

      Computer Name: PC-de-Adam
      Event Code: 4226
      Message: TCP/IP a atteint la limite de sécurité imposée sur le nombre de tentatives de connexion TCP simultanées.
      Record Number: 178047
      Source Name: Tcpip
      Time Written: 20090823211027.028676-000
      Event Type: Avertissement
      User:

      Computer Name: PC-de-Adam
      Event Code: 4226
      Message: TCP/IP a atteint la limite de sécurité imposée sur le nombre de tentatives de connexion TCP simultanées.
      Record Number: 178040
      Source Name: Tcpip
      Time Written: 20090823163945.122676-000
      Event Type: Avertissement
      User:

      Computer Name: PC-de-Adam
      Event Code: 4226
      Message: TCP/IP a atteint la limite de sécurité imposée sur le nombre de tentatives de connexion TCP simultanées.
      Record Number: 178035
      Source Name: Tcpip
      Time Written: 20090823142505.933676-000
      Event Type: Avertissement
      User:

      Computer Name: PC-de-Adam
      Event Code: 36
      Message: Les clichés instantanés du volume C: ont été annulés car le stockage du cliché instantané n'a pas pu s'agrandir en raison d'une limite utilisateur.
      Record Number: 178034
      Source Name: volsnap
      Time Written: 20090823140414.292676-000
      Event Type: Erreur
      User:

      =====Application event log=====

      Computer Name: PC-de-Adam
      Event Code: 1530
      Message: Windows a détecté que votre fichier de Registre est toujours utilisé par d'autres applications ou services. Le fichier va être déchargé. Les applications ou services qui ont accès à votre Registre risquent de ne pas fonctionner correctement après cela.

      DÉTAIL -
      1 user registry handles leaked from \Registry\User\S-1-5-21-2298208528-2588182715-3145928627-1001:
      Process 948 (\Device\HarddiskVolume2\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-2298208528-2588182715-3145928627-1001

      Record Number: 11185
      Source Name: Microsoft-Windows-User Profiles Service
      Time Written: 20080225062825.000000-000
      Event Type: Avertissement
      User: AUTORITE NT\SYSTEM

      Computer Name: PC-de-Adam
      Event Code: 1530
      Message: Windows a détecté que votre fichier de Registre est toujours utilisé par d'autres applications ou services. Le fichier va être déchargé. Les applications ou services qui ont accès à votre Registre risquent de ne pas fonctionner correctement après cela.

      DÉTAIL -
      1 user registry handles leaked from \Registry\User\S-1-5-21-2298208528-2588182715-3145928627-1000_Classes:
      Process 952 (\Device\HarddiskVolume2\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-2298208528-2588182715-3145928627-1000_CLASSES

      Record Number: 11156
      Source Name: Microsoft-Windows-User Profiles Service
      Time Written: 20080224191342.000000-000
      Event Type: Avertissement
      User: AUTORITE NT\SYSTEM

      Computer Name: PC-de-Adam
      Event Code: 1530
      Message: Windows a détecté que votre fichier de Registre est toujours utilisé par d'autres applications ou services. Le fichier va être déchargé. Les applications ou services qui ont accès à votre Registre risquent de ne pas fonctionner correctement après cela.

      DÉTAIL -
      1 user registry handles leaked from \Registry\User\S-1-5-21-2298208528-2588182715-3145928627-1000:
      Process 952 (\Device\HarddiskVolume2\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-2298208528-2588182715-3145928627-1000

      Record Number: 11155
      Source Name: Microsoft-Windows-User Profiles Service
      Time Written: 20080224191342.000000-000
      Event Type: Avertissement
      User: AUTORITE NT\SYSTEM

      Computer Name: PC-de-Adam
      Event Code: 1530
      Message: Windows a détecté que votre fichier de Registre est toujours utilisé par d'autres applications ou services. Le fichier va être déchargé. Les applications ou services qui ont accès à votre Registre risquent de ne pas fonctionner correctement après cela.

      DÉTAIL -
      1 user registry handles leaked from \Registry\User\S-1-5-21-2298208528-2588182715-3145928627-1001_Classes:
      Process 952 (\Device\HarddiskVolume2\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-2298208528-2588182715-3145928627-1001_CLASSES

      Record Number: 11150
      Source Name: Microsoft-Windows-User Profiles Service
      Time Written: 20080224191328.000000-000
      Event Type: Avertissement
      User: AUTORITE NT\SYSTEM

      Computer Name: PC-de-Adam
      Event Code: 1530
      Message: Windows a détecté que votre fichier de Registre est toujours utilisé par d'autres applications ou services. Le fichier va être déchargé. Les applications ou services qui ont accès à votre Registre risquent de ne pas fonctionner correctement après cela.

      DÉTAIL -
      16 user registry handles leaked from \Registry\User\S-1-5-21-2298208528-2588182715-3145928627-1001:
      Process 644 (\Device\Ha
      0