Findykill

Résolu
Bonjour,
j'ai fait comme indiqué ici : http://www.commentcamarche.net/faq/sujet 9889 comment supprimer le virus beagle bagle#premiere methode findykill
et sa me donne sa :

############################## | FindyKill V6.003 |

# User : Utilisateur (Administrateurs) # PC-DE-UTILISATE
# Update on 07/07/09 by Chiquitine29 & C_XX
# Start at: 17:01:06 | 07/07/2009
# Website : http://pagesperso-orange.fr/NosTools/index.html

# AMD Turion(tm) 64 X2 Mobile Technology TL-56
# Microsoft® Windows Vista™ Édition Familiale Premium (6.0.6001 32-bit) # Service Pack 1
# Internet Explorer 8.0.6001.18783
# Windows Firewall Status : Enabled
# AV : avast! antivirus 4.8.1229 [VPS 081114-0] 4.8.1229 [ Enabled | Updated ]

# C:\ # Disque fixe local # 141,04 Go (56,5 Go free) # NTFS
# D:\ # Disque fixe local # 8,01 Go (7,13 Go free) [_OEMBP] # NTFS
# E:\ # Disque CD-ROM
# G:\ # Disque amovible # 3,76 Go (3,55 Go free) [STORE'N'GO] # FAT32
# H:\ # Disque amovible # 120,8 Mo (10,97 Mo free) [USB] # FAT

############################## | Processus actifs |

C:\Windows\System32\smss.exe
C:\Windows\system32\csrss.exe
C:\Windows\system32\csrss.exe
C:\Windows\system32\wininit.exe
C:\Windows\system32\winlogon.exe
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe
C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe
C:\Windows\system32\svchost.exe
C:\Windows\System32\svchost.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe
C:\Windows\Explorer.EXE
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\SpeedFan\speedfan.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Windows\system32\wbem\wmiprvse.exe

################## | Registre Startup |

HKCU_Main: "Local Page"="C:\\Windows\\system32\\blank.htm"
HKCU_Main: "Search Page"="https://www.google.com/?gws_rd=ssl"
HKCU_Main: "Start Page"="about:blank"
HKCU_Main: "Start Page Redirect Cache"="https://www.msn.com/fr-fr?ocid=iehp"
HKCU_Main: "Start Page Redirect Cache AcceptLangs"="fr"
HKCU_Main: "Start Page Redirect Cache_TIMESTAMP"=hex:b0,b3,03,3d,5a,b8,c9,01
HKLM_logon: "Userinit"="C:\\Windows\\system32\\userinit.exe,"
HKLM_logon: "LegalNoticeCaption"=""
HKLM_logon: "LegalNoticeText"=""
HKLM_Run: Windows Defender=%ProgramFiles%\Windows Defender\MSASCui.exe -hide
HKLM_Run: avast!=C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
HKLM_Run: snpstd3=C:\Windows\vsnpstd3.exe
HKLM_Run: SunJavaUpdateSched="C:\Program Files\Java\jre6\bin\jusched.exe"
HKLM_Run: pzbahehjxavyxb=C:\Windows\System32\regsvr32.exe /s "C:\Windows\system32\jfesrfqahjoemln.dll"
HKLM_Run: Adobe Reader Speed Launcher="C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
HKLM_Run: NeroFilterCheck=C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe
HKLM_Run: QuickTime Task="C:\Program Files\QuickTime\QTTask.exe" -atboottime
HKLM_Run: HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents=
HKCU_Run: Sidebar=C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
HKCU_Run: MsnMsgr="C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
HKCU_Run: ehTray.exe=C:\Windows\ehome\ehTray.exe
HKCU_Run: Shareaza="C:\Program Files\Shareaza\Shareaza.exe" -tray
HKCU_Run: swg=C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
HKCU_Run: SpybotSD TeaTimer=C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
HKCU_Run: BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}="C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe"
HKCU_Run: WMPNSCFG=C:\Program Files\Windows Media Player\WMPNSCFG.exe
HKCU_Run: BitTorrent DNA="C:\Program Files\DNA\btdna.exe"

################## | Fichiers # Dossiers infectieux |

Présent ! C:\Windows\Temp\sig3F60.tmp

################## | C:\Users\Utilisateur\Temporary Internet Files |

################## | All Drives ... |

################## | Registre # Clés Run infectieuses |

################## | Registre # Mountpoints2 |

################## | Etat / Services / Informations |

# Affichage des fichiers cachés : OK

# Mode sans echec : OK

# Uac : OK

# Ndisuio -> Start = 3 ( Good = 3 | Bad = 4 )
# EapHost -> Start = 3 ( Good = 2 | Bad = 4 )
# Wlansvc -> Start = 2 ( Good = 2 | Bad = 4 )
# (!) SharedAccess -> Start = 4 ( Good = 2 | Bad = 4 )
# windefend -> Start = 2 ( Good = 2 | Bad = 4 )
# wuauserv -> Start = 2 ( Good = 2 | Bad = 4 )
# wscsvc -> Start = 2 ( Good = 2 | Bad = 4 )

################## | Cracks / Keygens / Serials |

a quoi sa corespond ?

45 réponses

Résumé de la discussion

Un utilisateur cherche à supprimer le virus Beagle en suivant une procédure FindyKill et obtient un rapport détaillé listant processus, démarrage et fichiers infectieux présents sur le système. Des réponses préconisent de désinstaller Norton/Symantec via le Norton Removal Tool et de passer d'Avast à AntiVir, puis d'utiliser CCleaner et de redémarrer en mode sans échec. D'autres proposent des procédures avancées comme l'utilisation d'OTM (OldTimer) pour supprimer des fichiers et entrées de registre, ou des instructions détaillées pour récupérer des rapports et nettoyer les éléments suspects. Pour compléter, le consensus fréquent vise le redémarrage en mode sans échec et la vérification des rapports générés par les outils, afin de repérer les éléments systèmes infectieux et les entrées de démarrage.

Bobot (l’IA à votre service)
  1. ah ben oui si tu avais expliqué le problème dans ton énoncé j'aurais pas agit comme ca ! :)

    bon alors explique tout
    1. tu es sur que sa sert ?
      parce que minen tout marche bien, c'est bon, l'anti-virus est reconu maintenent, les mise a jour sont faite, tout est nikel.
      1. mon ordi remarche !!! il démarre normal tout bien, tout comme d'habitude (que je l'ador quand il met 10ans a démarré et quand il met 10min a me connecté sur msn =) ), ya méme la touche "fn" (qui ne marché plus) qui remarche, pas encor avec tout les raccourcis mais c'est déja sa ^^.
        ps : est se que c'est normal que le centre de sécurité me dit qui a pas d'anti-virus ? les mises a jour son faite !

        All processes killed
        ========== PROCESSES ==========
        No active process named explorer.exe was found!
        No active process named iexplore.exe was found!
        No active process named firefox.exe was found!
        No active process named msnmsgr.exe was found!
        No active process named TeaTimer.exe was found!
        ========== SERVICES/DRIVERS ==========

        Service\Driver naecd deleted successfully.

        Service\Driver Boonty Games deleted successfully.
        ========== FILES ==========
        C:\Windows\system32\jfesrfqahjoemln.dll unregistered successfully.
        C:\Windows\system32\jfesrfqahjoemln.dll moved successfully.
        File/Folder C:\SYS_List.txt not found.
        C:\Windows\bkit6768.exe moved successfully.
        C:\Windows\wtofj3410.exe moved successfully.
        C:\Windows\kdiue732.txt moved successfully.
        File/Folder C:\Users\UTILIS~1\AppData\Local\Temp\naecd.sys not found.
        ========== REGISTRY ==========
        Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7E853D72-626A-48EC-A868-BA8D5E23E045}\ deleted successfully.
        Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7E853D72-626A-48EC-A868-BA8D5E23E045}\ not found.
        Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{CE2429AA-9D41-3B38-24BB-4C1217AE3524}\ not found.
        Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CE2429AA-9D41-3B38-24BB-4C1217AE3524}\ not found.
        Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\pzbahehjxavyxb not found.
        Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce\\GrpConv deleted successfully.
        Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce\\ deleted successfully.
        Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\\AppInit_DLLS deleted successfully.
        Registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\ntrconnect\ deleted successfully.
        ========== COMMANDS ==========

        [EMPTYTEMP]

        User: All Users

        User: Default
        ->Temp folder emptied: 0 bytes
        ->Temporary Internet Files folder emptied: 33170 bytes

        User: Default User
        ->Temp folder emptied: 0 bytes
        ->Temporary Internet Files folder emptied: 0 bytes

        User: Public

        User: Utilisateur
        ->Temp folder emptied: 86564863 bytes
        ->Temporary Internet Files folder emptied: 11292689 bytes
        ->Java cache emptied: 592489 bytes

        %systemdrive% .tmp files removed: 0 bytes
        C:\Windows\msdownld.tmp folder deleted successfully.
        %systemroot% .tmp files removed: 0 bytes
        %systemroot%\System32 .tmp files removed: 0 bytes
        Windows Temp folder emptied: 0 bytes
        RecycleBin emptied: 23169663 bytes

        Total Files Cleaned = 116,02 mb

        OTM by OldTimer - Version 3.0.0.4 log created on 07082009_105959

        Files moved on Reboot...

        Registry entries deleted on Reboot...
        1. sa te dérenge pas si on voi sa demain dans l'aprem parce que je vais allé me couché =)
          si je me fait chopé par mon pére sur l'ordi a cette heure je suis morte lol
          a+
          1. pour le par feu, va faloir m'expliqué commetn fair =)
            si non, c'est sensé duré combien de temps le truc ? la je lavé refé et j'ai encor éteint l'ordi (je sais je suis pas patiente, surtou quand j'ai vu que sa faisé déja 6min lol)
            1. pour les màj d'antivir , on me dit que ton parefeu est mal paramétré
              1. ben normal fallait laisser travailler jusqu'au bout lol tu as eu peur pour rien
                1. quand j'ai cliké aprés avoir mi le text, d'un seul coup, plus de bureau, me resté que la souris et le fond décran mode sans échec. donc j'ai éteint l'ordi manuellement.
                  je suis aller dans le dossier _otm, ya bien movedfiles mais ya rien dedant
                  1. ---> Désactive ton antivirus le temps de la manipulation car OTM est détecté comme une infection à tort.

                    ---> Télécharge OTM (OldTimer) sur ton Bureau :

                    ---> Double-clique sur OTM.exe afin de le lancer.

                    ---> Copie (Ctrl+C) le texte suivant ci-dessous :



                    :processes
                    explorer.exe
                    iexplore.exe
                    firefox.exe
                    msnmsgr.exe
                    TeaTimer.exe

                    :services
                    naecd
                    Boonty Games

                    :files
                    C:\Windows\system32\jfesrfqahjoemln.dll
                    C:\SYS_List.txt
                    C:\Windows\bkit6768.exe
                    C:\Windows\wtofj3410.exe
                    C:\Windows\kdiue732.txt
                    C:\Users\UTILIS~1\AppData\Local\Temp\naecd.sys

                    :reg
                    [-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7E853D72-626A-48EC-A868-BA8D5E23E045}]
                    [-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{CE2429AA-9D41-3B38-24BB-4C1217AE3524}]
                    [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
                    "pzbahehjxavyxb"=-
                    [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce]
                    "GrpConv"=-
                    [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce]
                    ""=-
                    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
                    "AppInit_DLLS"=-
                    [-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\ntrconnect]

                    :commands
                    [purity]
                    [emptytemp]
                    [start explorer]
                    [reboot]



                    ---> Colle (Ctrl+V) le texte précédemment copié dans le cadre Paste Instructions for Items to be Moved.

                    ---> Clique maintenant sur le bouton MoveIt! puis ferme OTM

                    Si un fichier ou dossier ne peut pas être supprimé immédiatement, le logiciel te demandera de redémarrer.
                    Accepte en cliquant sur YES.

                    ---> Poste le rapport situé dans ce dossier : C:\_OTM\MovedFiles\
                    Le nom du rapport correspond au moment de sa création : date_heure.log
                    1. Logfile of random's system information tool 1.06 (written by random/random)
                      Run by Utilisateur at 2009-07-08 00:36:13
                      Microsoft® Windows Vista™ Édition Familiale Premium Service Pack 1
                      System drive C: has 67 GB (46%) free of 144 GB
                      Total RAM: 1022 MB (29% free)

                      HijackThis download failed

                      ======Scheduled tasks folder======

                      C:\Windows\tasks\User_Feed_Synchronization-{2E5877AB-A76C-4899-89BB-27DEEC6D7421}.job
                      C:\Windows\tasks\User_Feed_Synchronization-{E9CCCE24-51C4-40E1-B9F1-43F4DAFED7E4}.job

                      ======Registry dump======

                      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
                      Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2009-02-27 75128]

                      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{53707962-6F74-2D53-2644-206D7942484F}]
                      Spybot-S&D IE Protection - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll [2009-01-26 1879896]

                      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
                      Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre6\bin\ssv.dll [2009-02-20 320920]

                      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7E853D72-626A-48EC-A868-BA8D5E23E045}]

                      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
                      Google Toolbar Helper - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll [2009-06-14 259696]

                      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]
                      Google Toolbar Notifier BHO - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.15642\swg.dll [2009-06-19 669168]

                      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C84D72FE-E17D-4195-BB24-76C02E2E7C4E}]
                      Google Dictionary Compression sdch - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll [2009-04-17 470512]

                      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{CE2429AA-9D41-3B38-24BB-4C1217AE3524}]
                      snappyads browser enhancer - C:\Windows\system32\jfesrfqahjoemln.dll [2009-04-06 393728]

                      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
                      Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2009-02-20 34816]

                      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
                      {2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll [2009-06-14 259696]

                      [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
                      "Windows Defender"=C:\Program Files\Windows Defender\MSASCui.exe [2008-01-21 1008184]
                      "snpstd3"=C:\Windows\vsnpstd3.exe [2006-09-19 827392]
                      "SunJavaUpdateSched"=C:\Program Files\Java\jre6\bin\jusched.exe [2009-02-20 136600]
                      "pzbahehjxavyxb"=C:\Windows\System32\regsvr32.exe [2006-11-02 14336]
                      "Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2009-02-27 35696]
                      "NeroFilterCheck"=C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe [2007-03-01 153136]
                      "QuickTime Task"=C:\Program Files\QuickTime\QTTask.exe [2009-05-26 413696]
                      "avgnt"=C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe [2008-06-12 266497]

                      [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce]
                      "GrpConv"=grpconv -o []

                      [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
                      "Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2008-01-21 1233920]
                      "MsnMsgr"=C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe [2007-10-18 5724184]
                      "ehTray.exe"=C:\Windows\ehome\ehTray.exe [2008-01-21 125952]
                      "Shareaza"=C:\Program Files\Shareaza\Shareaza.exe [2008-10-01 5723136]
                      "swg"=C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [2009-01-22 39408]
                      "SpybotSD TeaTimer"=C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe [2009-01-26 2144088]
                      "BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"=C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe [2008-01-22 152872]
                      "WMPNSCFG"=C:\Program Files\Windows Media Player\WMPNSCFG.exe [2008-01-21 202240]

                      [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce]
                      "Shockwave Updater"=C:\Windows\System32\Adobe\SHOCKW~1\SWHELP~3.EXE [2008-08-06 447928]
                      ""=C:\Program Files\Internet Explorer\iexplore.exe [2009-03-08 638816]

                      C:\Users\Utilisateur\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
                      SpeedFan.lnk - C:\Program Files\SpeedFan\speedfan.exe
                      Windows Live Messenger .lnk - C:\Program Files\Windows Live\Messenger\msnmsgr.exe

                      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
                      "AppInit_DLLS"="C:\Windows\system32\atlclient.dll"

                      [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\ntrconnect]

                      [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
                      "dontdisplaylastusername"=0
                      "legalnoticecaption"=
                      "legalnoticetext"=
                      "shutdownwithoutlogon"=1
                      "undockwithoutlogon"=1
                      "EnableUIADesktopToggle"=0

                      [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
                      "C:\Program Files\BitTorrent\bittorrent.exe"="C:\Program Files\BitTorrent\bittorrent.exe:*:Enabled:BitTorrent"

                      [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

                      ======File associations======

                      .js - edit - C:\Windows\System32\Notepad.exe %1
                      .js - open - C:\Windows\System32\WScript.exe "%1" %*

                      ======List of files/folders created in the last 2 months======

                      2009-07-08 00:32:38 ----D---- C:\rsit
                      2009-07-08 00:32:38 ----D---- C:\Program Files\trend micro
                      2009-07-07 22:39:22 ----D---- C:\Program Files\CodeBlocks
                      2009-07-07 18:53:15 ----A---- C:\Windows\ntbtlog.txt
                      2009-07-07 18:48:30 ----D---- C:\ProgramData\Avira
                      2009-07-07 18:48:30 ----D---- C:\Program Files\Avira
                      2009-07-07 18:19:50 ----D---- C:\ProgramData\NortonInstaller
                      2009-07-07 17:51:34 ----A---- C:\SYS_List.txt
                      2009-07-07 17:10:26 ----D---- C:\Windows\Sun
                      2009-07-07 12:38:43 ----D---- C:\Users\Utilisateur\AppData\Roaming\Dev-Cpp
                      2009-07-07 12:32:12 ----D---- C:\Users\Utilisateur\AppData\Roaming\codeblocks
                      2009-07-07 11:52:27 ----D---- C:\Temp
                      2009-07-06 14:56:33 ----A---- C:\ashampoo-acdw-log.txt
                      2009-07-06 14:56:27 ----D---- C:\Users\Utilisateur\AppData\Roaming\Ashampoo
                      2009-07-06 14:55:24 ----D---- C:\ProgramData\page
                      2009-07-06 14:55:23 ----D---- C:\Program Files\Ashampoo
                      2009-07-04 19:41:10 ----D---- C:\Program Files\Lavalys
                      2009-07-04 14:31:44 ----A---- C:\Windows\NeroDigital.ini
                      2009-07-04 14:06:40 ----A---- C:\Windows\system32\atlclient.dll
                      2009-06-27 19:49:08 ----D---- C:\Program Files\Guitar Pro 5
                      2009-06-27 15:21:23 ----D---- C:\Program Files\QuickTime
                      2009-06-27 15:21:20 ----D---- C:\ProgramData\Apple Computer
                      2009-06-27 15:15:08 ----SHD---- C:\Config.Msi
                      2009-06-16 20:36:01 ----D---- C:\Users\Utilisateur\AppData\Roaming\Ahead
                      2009-06-16 20:34:09 ----D---- C:\ProgramData\Ahead
                      2009-06-16 20:22:42 ----D---- C:\ProgramData\Nero
                      2009-06-16 20:22:42 ----D---- C:\Program Files\Nero
                      2009-06-16 20:22:41 ----D---- C:\Program Files\Common Files\Ahead
                      2009-06-14 23:56:53 ----D---- C:\Users\Utilisateur\AppData\Roaming\WinRAR
                      2009-06-14 23:56:20 ----D---- C:\Program Files\WinRAR
                      2009-06-14 23:10:53 ----D---- C:\Program Files\PowerArchiver
                      2009-06-13 23:18:53 ----A---- C:\Windows\system32\EncDec.dll
                      2009-06-13 23:18:50 ----A---- C:\Windows\system32\psisdecd.dll
                      2009-06-13 22:35:34 ----D---- C:\Program Files\SpeedFan
                      2009-06-13 19:27:14 ----D---- C:\Program Files\Adobe
                      2009-06-13 19:00:06 ----D---- C:\Users\Utilisateur\AppData\Roaming\CoSoSys
                      2009-06-11 18:16:59 ----A---- C:\Windows\system32\localspl.dll
                      2009-06-11 18:16:52 ----A---- C:\Windows\system32\mshtml.dll
                      2009-06-11 18:16:47 ----A---- C:\Windows\system32\ieframe.dll
                      2009-06-11 18:16:46 ----A---- C:\Windows\system32\iertutil.dll
                      2009-06-11 18:16:44 ----A---- C:\Windows\system32\wininet.dll
                      2009-06-11 18:16:44 ----A---- C:\Windows\system32\urlmon.dll
                      2009-06-11 18:16:43 ----A---- C:\Windows\system32\iedkcs32.dll
                      2009-06-11 18:16:42 ----A---- C:\Windows\system32\jsproxy.dll
                      2009-06-11 18:16:42 ----A---- C:\Windows\system32\ieui.dll
                      2009-06-11 18:16:41 ----A---- C:\Windows\system32\iesetup.dll
                      2009-06-11 18:16:41 ----A---- C:\Windows\system32\iernonce.dll
                      2009-06-11 18:16:41 ----A---- C:\Windows\system32\ie4uinit.exe
                      2009-06-11 18:16:22 ----A---- C:\Windows\system32\rpcrt4.dll
                      2009-06-07 09:15:19 ----D---- C:\Program Files\runit
                      2009-06-07 09:15:18 ----A---- C:\Windows\wtofj3410.exe
                      2009-06-07 09:15:16 ----D---- C:\Program Files\IEToolbar
                      2009-06-07 09:15:10 ----A---- C:\Windows\bkit6768.exe
                      2009-06-07 09:15:05 ----A---- C:\Windows\kdiue732.txt
                      2009-06-07 09:05:24 ----D---- C:\Windows\system32\EventProviders
                      2009-06-01 17:20:09 ----D---- C:\Program Files\Subagames
                      2009-06-01 16:39:26 ----D---- C:\ProgramData\PMB Files
                      2009-06-01 16:39:05 ----D---- C:\Program Files\Pando Networks

                      ======List of files/folders modified in the last 2 months======

                      2009-07-08 00:32:38 ----RD---- C:\Program Files
                      2009-07-07 18:53:15 ----D---- C:\Windows
                      2009-07-07 18:48:30 ----HD---- C:\ProgramData
                      2009-07-07 18:48:30 ----D---- C:\Windows\system32\drivers
                      2009-07-07 18:47:35 ----D---- C:\ProgramData\Spybot - Search & Destroy
                      2009-07-07 18:47:32 ----D---- C:\Windows\Minidump
                      2009-07-07 18:47:32 ----D---- C:\Windows\Debug
                      2009-07-07 18:47:28 ----D---- C:\Windows\Temp
                      2009-07-07 18:34:26 ----D---- C:\Users\Utilisateur\AppData\Roaming\Mozilla
                      2009-07-07 18:26:12 ----D---- C:\Program Files\Alwil Software
                      2009-07-07 18:26:11 ----D---- C:\Windows\System32
                      2009-07-07 17:00:43 ----D---- C:\Windows\inf
                      2009-07-07 17:00:43 ----A---- C:\Windows\system32\PerfStringBackup.INI
                      2009-07-07 08:57:47 ----D---- C:\Windows\system32\LogFiles
                      2009-07-05 01:05:39 ----D---- C:\Users\Utilisateur\AppData\Roaming\LimeWire
                      2009-07-05 00:57:47 ----D---- C:\Windows\system
                      2009-07-04 20:03:27 ----SHD---- C:\System Volume Information
                      2009-07-04 17:47:23 ----D---- C:\Program Files\PhotoFiltre Studio
                      2009-07-04 15:54:04 ----D---- C:\Program Files\Metin2_France
                      2009-07-04 15:06:53 ----D---- C:\Windows\system32\catroot2
                      2009-06-27 19:49:13 ----RSD---- C:\Windows\Fonts
                      2009-06-27 15:27:27 ----SHD---- C:\Windows\Installer
                      2009-06-27 15:27:12 ----D---- C:\Windows\system32\Tasks
                      2009-06-26 05:59:50 ----D---- C:\Windows\winsxs
                      2009-06-26 05:59:49 ----D---- C:\Program Files\Internet Explorer
                      2009-06-25 18:17:35 ----D---- C:\Windows\system32\catroot
                      2009-06-16 20:29:29 ----D---- C:\Windows\ehome
                      2009-06-16 20:22:41 ----D---- C:\Program Files\Common Files
                      2009-06-16 18:42:57 ----D---- C:\Windows\Prefetch
                      2009-06-15 13:03:59 ----D---- C:\Nostale(FR)
                      2009-06-14 21:48:24 ----D---- C:\Windows\Tasks
                      2009-06-14 01:53:01 ----D---- C:\ProgramData\Microsoft Help
                      2009-06-13 19:29:36 ----D---- C:\ProgramData\Adobe
                      2009-06-13 19:28:12 ----D---- C:\Program Files\Common Files\Adobe
                      2009-06-12 13:06:04 ----D---- C:\Windows\system32\migration
                      2009-06-01 18:51:12 ----A---- C:\Windows\system32\mrt.exe
                      2009-05-27 18:54:46 ----RSD---- C:\Windows\assembly
                      2009-05-27 18:51:08 ----D---- C:\Program Files\Common Files\microsoft shared
                      2009-05-27 18:50:22 ----D---- C:\Program Files\Microsoft Works
                      2009-05-27 18:45:35 ----A---- C:\Windows\win.ini
                      2009-05-27 18:45:34 ----D---- C:\Program Files\Common Files\System
                      2009-05-21 13:34:13 ----HD---- C:\Program Files\InstallShield Installation Information
                      2009-05-16 11:10:18 ----D---- C:\Program Files\Ubisoft
                      2009-05-16 11:09:48 ----SD---- C:\Users\Utilisateur\AppData\Roaming\Microsoft
                      2009-05-13 22:42:06 ----D---- C:\Program Files\Windows Mail

                      ======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

                      R3 athr;Atheros Extensible Wireless LAN device driver; C:\Windows\system32\DRIVERS\athr.sys [2008-05-07 767488]
                      R3 MTsensor;ATK0100 ACPI UTILITY; C:\Windows\system32\DRIVERS\ATKACPI.sys [2007-07-31 7680]
                      R3 rimmptsk;rimmptsk; C:\Windows\system32\DRIVERS\rimmptsk.sys [2005-11-16 28928]
                      R3 rimsptsk;rimsptsk; C:\Windows\system32\DRIVERS\rimsptsk.sys [2005-12-22 51840]
                      R3 RTL8023xp;Pilote Realtek 10/100 NIC Family NDIS x86; C:\Windows\system32\DRIVERS\Rtnicxp.sys [2006-11-02 47104]
                      S1 avgio;avgio; \??\C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgio.sys [2007-02-27 11840]
                      S1 avipbb;avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [2008-10-30 75072]
                      S1 ssmdrv;ssmdrv; C:\Windows\system32\DRIVERS\ssmdrv.sys [2007-11-08 21248]
                      S3 atikmdag;atikmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2007-05-25 2609152]
                      S3 avgntflt;avgntflt; \??\C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgntflt.sys [2008-05-20 52032]
                      S3 CmBatt;Pilote pour Batterie à méthode de contrôle ACPI Microsoft; C:\Windows\system32\DRIVERS\CmBatt.sys [2008-01-21 14208]
                      S3 drmkaud;Filtre de décodeur DRM (Noyau Microsoft); C:\Windows\system32\drivers\drmkaud.sys [2008-01-21 5632]
                      S3 HdAudAddService;Pilote de fonction UAA 1.1 Microsoft pour le service High Definition Audio; C:\Windows\system32\drivers\HdAudio.sys [2006-11-02 235520]
                      S3 mr97320;PC-Camera; C:\Windows\system32\DRIVERS\mr97320.sys [2007-04-20 69248]
                      S3 MSKSSRV;Proxy de service de répartition Microsoft; C:\Windows\system32\drivers\MSKSSRV.sys [2008-01-21 8192]
                      S3 MSPCLOCK;Proxy d'horloge de répartition Microsoft; C:\Windows\system32\drivers\MSPCLOCK.sys [2008-01-21 5888]
                      S3 MSPQM;Proxy de gestion de qualité de répartition Microsoft; C:\Windows\system32\drivers\MSPQM.sys [2008-01-21 5504]
                      S3 MSTEE;Convertisseur en T/site-à-site de répartition Microsoft; C:\Windows\system32\drivers\MSTEE.sys [2008-01-21 6016]
                      S3 naecd;naecd; \??\C:\Users\UTILIS~1\AppData\Local\Temp\naecd.sys []
                      S3 sdbus;sdbus; C:\Windows\system32\DRIVERS\sdbus.sys [2008-01-21 88576]
                      S3 SNPSTD3;USB PC Camera (SNPSTD3); C:\Windows\system32\DRIVERS\snpstd3.sys [2007-03-27 10252544]
                      S3 usbaudio;Pilote USB audio (WDM); C:\Windows\system32\drivers\usbaudio.sys [2008-01-21 73088]
                      S3 usbvideo;Périphérique vidéo USB (WDM); C:\Windows\System32\Drivers\usbvideo.sys [2008-01-21 134016]
                      S3 WpdUsb;WpdUsb; C:\Windows\system32\DRIVERS\wpdusb.sys [2008-01-21 39936]
                      S4 ErrDev;Microsoft Hardware Error Device Driver; C:\Windows\system32\drivers\errdev.sys [2008-01-21 6656]
                      S4 MegaSR;MegaSR; C:\Windows\system32\drivers\megasr.sys [2008-01-21 386616]
                      S4 WmiAcpi;Microsoft Windows Management Interface for ACPI; C:\Windows\system32\drivers\wmiacpi.sys [2008-01-21 11264]

                      ======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

                      S2 AntiVirScheduler;Planificateur Avira AntiVir Personal - Free Antivirus; C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe [2008-10-15 68865]
                      S2 AntiVirService;Avira AntiVir Personal - Free Antivirus Guard; C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe [2008-10-15 151297]
                      S2 Ati External Event Utility;Ati External Event Utility; C:\Windows\system32\Ati2evxx.exe [2007-05-25 602112]
                      S2 SBSDWSCService;SBSD Security Center Service; C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe [2009-01-26 1153368]
                      S3 Boonty Games;Boonty Games; C:\Program Files\Common Files\BOONTY Shared\Service\Boonty.exe [2008-06-08 69120]
                      S3 getPlus(R) Helper;getPlus(R) Helper; C:\Program Files\NOS\bin\getPlus_HelperSvc.exe [2008-08-29 33752]
                      S3 gusvc;Google Software Updater; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2009-04-17 182768]
                      S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632]
                      S3 NBService;NBService; C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe [2007-11-28 800040]
                      S3 NMIndexingService;NMIndexingService; C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe [2008-01-22 275752]
                      S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2008-11-04 441712]
                      S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
                      S3 usnjsvc;Service Messenger Sharing Folders USN Journal Reader; C:\Program Files\Windows Live\Messenger\usnsvc.exe [2007-10-18 98328]
                      S3 WLSetupSvc;Windows Live Setup Service; C:\Program Files\Windows Live\installer\WLSetupSvc.exe [2007-10-25 266240]

                      -----------------EOF-----------------
                      1. info.txt logfile of random's system information tool 1.06 2009-07-08 00:32:41

                        ======Uninstall list======

                        -->C:\Program Files\Nero\Nero 7\\nero\uninstall\UNNERO.exe /UNINSTALL
                        -->C:\Windows\system32\Macromed\Flash\uninstall_plugin.exe
                        -->C:\Windows\UNNeroBackItUp.exe /UNINSTALL
                        -->C:\Windows\UNNeroMediaHome.exe /UNINSTALL
                        -->C:\Windows\UNNeroShowTime.exe /UNINSTALL
                        -->C:\Windows\UNNeroVision.exe /UNINSTALL
                        -->C:\Windows\UNRecode.exe /UNINSTALL
                        Adobe Flash Player 10 ActiveX-->C:\Windows\system32\Macromed\Flash\uninstall_activeX.exe
                        Adobe Flash Player 10 Plugin-->MsiExec.exe /X{ECA1A3B6-898F-4DCE-9F04-714CF3BA126B}
                        Adobe Reader 9.1.2 - Français-->MsiExec.exe /I{AC76BA86-7AD7-1036-7B44-A91000000001}
                        Adobe Shockwave Player 11-->C:\Windows\system32\adobe\SHOCKW~1\UNWISE.EXE C:\Windows\system32\Adobe\SHOCKW~1\Install.log
                        AF Cam-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{6213FD4F-C3A3-4A2F-9CC1-8DAEAF469633}\Setup.exe"
                        Ashampoo Burning Studio 9.04-->"C:\Program Files\Ashampoo\Ashampoo Burning Studio 9\unins000.exe"
                        Avira AntiVir Personal - Free Antivirus-->C:\Program Files\Avira\AntiVir PersonalEdition Classic\setup.exe /REMOVE
                        Composants Internet Partagés de Westwood-->C:\Westwood\Internet\UNINSTAP.EXE
                        Contextual Tool Snappyads-->C:\Windows\system32\b2c0a4d0-1d92-45c9-0595-4ba5349c8ff7.exe
                        EVEREST Ultimate Edition v5.02-->"C:\Program Files\Lavalys\EVEREST Ultimate Edition\unins000.exe"
                        getPlus(R) for Adobe-->"C:\Program Files\NOS\bin\getPlus_HelperSvc.exe" /UninstallGet1
                        Google Toolbar for Internet Explorer-->"C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarManager_9DE96A29E721D90A.exe" /uninstall
                        Google Toolbar for Internet Explorer-->MsiExec.exe /I{18455581-E099-4BA8-BC6B-F34B2F06600C}
                        GTK+ Runtime 2.12.1 rev b (remove only)-->C:\Program Files\Common Files\GTK\2.0\uninst.exe
                        Guitar Pro 5.0-->"C:\Program Files\Guitar Pro 5\unins000.exe"
                        Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)-->C:\Windows\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall /qb+ REBOOTPROMPT=""
                        Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)-->C:\Windows\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall {A7EEA2F2-BFCD-4A54-A575-7B81A786E658} /qb+ REBOOTPROMPT=""
                        Java(TM) 6 Update 11-->MsiExec.exe /X{26A24AE4-039D-4CA4-87B4-2F83216011FF}
                        Metin2.us-->"C:\Program Files\Subagames\Metin2\unins000.exe"
                        Microsoft .NET Framework 3.5 Language Pack SP1 - fra-->MsiExec.exe /I{3E31821C-7917-367E-938E-E65FC413EA31}
                        Microsoft .NET Framework 3.5 SP1-->c:\Windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setup.exe
                        Microsoft .NET Framework 3.5 SP1-->MsiExec.exe /I{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}
                        Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-0016-040C-0000-0000000FF1CE} /uninstall {AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}
                        Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-0018-040C-0000-0000000FF1CE} /uninstall {AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}
                        Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001A-040C-0000-0000000FF1CE} /uninstall {AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}
                        Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001B-040C-0000-0000000FF1CE} /uninstall {AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}
                        Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-006E-040C-0000-0000000FF1CE} /uninstall {B165D3C2-40AE-4D39-86F7-E5C87C4264C0}
                        Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {91120000-0012-0000-0000-0000000FF1CE} /uninstall {0B36C6D6-F5D8-4EAF-BF94-4376A230AD5B}
                        Microsoft Office Excel MUI (French) 2007-->MsiExec.exe /X{90120000-0016-040C-0000-0000000FF1CE}
                        Microsoft Office Outlook MUI (French) 2007-->MsiExec.exe /X{90120000-001A-040C-0000-0000000FF1CE}
                        Microsoft Office PowerPoint MUI (French) 2007-->MsiExec.exe /X{90120000-0018-040C-0000-0000000FF1CE}
                        Microsoft Office Proof (Arabic) 2007-->MsiExec.exe /X{90120000-001F-0401-0000-0000000FF1CE}
                        Microsoft Office Proof (Dutch) 2007-->MsiExec.exe /X{90120000-001F-0413-0000-0000000FF1CE}
                        Microsoft Office Proof (English) 2007-->MsiExec.exe /X{90120000-001F-0409-0000-0000000FF1CE}
                        Microsoft Office Proof (French) 2007-->MsiExec.exe /X{90120000-001F-040C-0000-0000000FF1CE}
                        Microsoft Office Proof (German) 2007-->MsiExec.exe /X{90120000-001F-0407-0000-0000000FF1CE}
                        Microsoft Office Proof (Spanish) 2007-->MsiExec.exe /X{90120000-001F-0C0A-0000-0000000FF1CE}
                        Microsoft Office Proofing (French) 2007-->MsiExec.exe /X{90120000-002C-040C-0000-0000000FF1CE}
                        Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001F-0401-0000-0000000FF1CE} /uninstall {14809F99-C601-4D4A-9391-F1E8FAA964C5}
                        Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001F-0407-0000-0000000FF1CE} /uninstall {A0516415-ED61-419A-981D-93596DA74165}
                        Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001F-0409-0000-0000000FF1CE} /uninstall {ABDDE972-355B-4AF1-89A8-DA50B7B5C045}
                        Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001F-040C-0000-0000000FF1CE} /uninstall {F580DDD5-8D37-4998-968E-EBB76BB86787}
                        Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001F-0413-0000-0000000FF1CE} /uninstall {D66D5A44-E480-4BA4-B4F2-C554F6B30EBB}
                        Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001F-0C0A-0000-0000000FF1CE} /uninstall {187308AB-5FA7-4F14-9AB9-D290383A10D9}
                        Microsoft Office Shared MUI (French) 2007-->MsiExec.exe /X{90120000-006E-040C-0000-0000000FF1CE}
                        Microsoft Office Standard 2007-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE12\Office Setup Controller\setup.exe" /uninstall STANDARDR /dll OSETUP.DLL
                        Microsoft Office Standard 2007-->MsiExec.exe /X{91120000-0012-0000-0000-0000000FF1CE}
                        Microsoft Office Word MUI (French) 2007-->MsiExec.exe /X{90120000-001B-040C-0000-0000000FF1CE}
                        Microsoft Silverlight-->MsiExec.exe /I{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}
                        Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{7299052b-02a4-4627-81f2-1818da5d550d}
                        Mise à jour Microsoft Office Excel 2007 Help (KB963678)-->msiexec /package {90120000-0016-040C-0000-0000000FF1CE} /uninstall {B761869A-B85C-40E2-994C-A1CE78AC8F2C}
                        Mise à jour Microsoft Office Outlook 2007 Help (KB963677)-->msiexec /package {90120000-001A-040C-0000-0000000FF1CE} /uninstall {51EFB347-1F3D-4BAC-8B79-F056B904FE21}
                        Mise à jour Microsoft Office Powerpoint 2007 Help (KB963669)-->msiexec /package {90120000-0018-040C-0000-0000000FF1CE} /uninstall {C3DCA38E-005E-41BA-A52A-7C3429F351C3}
                        Mise à jour Microsoft Office Word 2007 Help (KB963665)-->msiexec /package {90120000-001B-040C-0000-0000000FF1CE} /uninstall {81536A04-DBFB-4DB3-978F-0F284590C223}
                        Module linguistique Microsoft .NET Framework 3.5 SP1- fra-->c:\Windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 Language Pack SP1 - fra\setup.exe
                        MSXML 4.0 SP2 (KB936181)-->MsiExec.exe /I{C04E32E0-0416-434D-AFB9-6969D703A9EF}
                        MSXML 4.0 SP2 (KB941833)-->MsiExec.exe /I{C523D256-313D-4866-B36A-F3DE528246EF}
                        MSXML 4.0 SP2 (KB954430)-->MsiExec.exe /I{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
                        Nero 7 Essentials-->MsiExec.exe /X{22FB6750-ADDF-4726-B67F-6901E1991036}
                        neroxml-->MsiExec.exe /I{56C049BE-79E9-4502-BEA7-9754A3E60F9B}
                        Nostale Online FR (Remove)-->"C:\Nostale(FR)\unins000.exe"
                        OOBOX SynchroBox data 2.0-->C:\Program Files\OOBOX\Music\iTuner\uninst.exe
                        Pando Media Booster-->C:\Program Files\Pando Networks\Media Booster\uninst.exe
                        PhotoFiltre Studio-->"C:\Program Files\PhotoFiltre Studio\Uninst.exe"
                        QuickTime-->MsiExec.exe /I{C78EAC6F-7A73-452E-8134-DBB2165C5A68}
                        Security Update for 2007 Microsoft Office System (KB969559)-->msiexec /package {91120000-0012-0000-0000-0000000FF1CE} /uninstall {69F52148-9BF6-4CDC-BF76-103DEAF3DD08}
                        Security Update for 2007 Microsoft Office System (KB969679)-->msiexec /package {91120000-0012-0000-0000-0000000FF1CE} /uninstall {C66E4A6C-6E07-4C63-8CCD-2493B5087C73}
                        Security Update for Microsoft Office Excel 2007 (KB969682)-->msiexec /package {91120000-0012-0000-0000-0000000FF1CE} /uninstall {C03803BD-745A-46F8-8557-817DED578780}
                        Security Update for Microsoft Office PowerPoint 2007 (KB957789)-->msiexec /package {91120000-0012-0000-0000-0000000FF1CE} /uninstall {7559E742-FF9F-4FAE-B279-008ED296CB4D}
                        Security Update for Microsoft Office system 2007 (KB969613)-->msiexec /package {91120000-0012-0000-0000-0000000FF1CE} /uninstall {5ECEB317-CBE9-4E08-AB10-756CB6F0FB6C}
                        Security Update for Microsoft Office Word 2007 (KB969604)-->msiexec /package {91120000-0012-0000-0000-0000000FF1CE} /uninstall {CF3D6499-709C-43D0-8908-BC5652656050}
                        Shareaza 2.4.0.0-->"C:\Program Files\Shareaza\Uninstall\unins000.exe"
                        Sony Ericsson Media Manager 1.1-->MsiExec.exe /X{82419DFA-102C-403D-B9D0-C0F0652AB8F8}
                        SpeedFan (remove only)-->"C:\Program Files\SpeedFan\uninstall.exe"
                        Spybot - Search & Destroy-->"C:\Program Files\Spybot - Search & Destroy\unins000.exe"
                        Tremulous 1.1.0-->"C:\Program Files\Tremulous\uninstall.exe"
                        Update for 2007 Microsoft Office System (KB967642)-->msiexec /package {91120000-0012-0000-0000-0000000FF1CE} /uninstall {C444285D-5E4F-48A4-91DD-47AAAA68E92D}
                        Update for Microsoft Office Outlook 2007 (KB969907)-->msiexec /package {91120000-0012-0000-0000-0000000FF1CE} /uninstall {74F98B24-AFBD-4800-9BD6-87D349B5C462}
                        Update for Outlook 2007 Junk Email Filter (kb970012)-->msiexec /package {91120000-0012-0000-0000-0000000FF1CE} /uninstall {DC4A962B-9EC2-469C-BC9C-87312ADAEE81}
                        VideoLAN VLC media player 0.8.6i-->C:\Program Files\VideoLAN\VLC\uninstall.exe
                        Windows Live installer-->MsiExec.exe /X{FD44E544-E7D0-4DBA-9FA0-8AE1A1300390}
                        Windows Live Messenger-->MsiExec.exe /X{BADF6744-3787-48F6-B8C9-4C4995401D65}

                        ======Security center information======

                        AS: Spybot - Search and Destroy (disabled) (outdated)
                        AS: Windows Defender

                        ======System event log======

                        Computer Name: PC-de-Utilisate
                        Event Code: 4226
                        Message: TCP/IP a atteint la limite de sécurité imposée sur le nombre de tentatives de connexion TCP simultanées.
                        Record Number: 178142
                        Source Name: Tcpip
                        Time Written: 20090707200734.342975-000
                        Event Type: Avertissement
                        User:

                        Computer Name: PC-de-Utilisate
                        Event Code: 4226
                        Message: TCP/IP a atteint la limite de sécurité imposée sur le nombre de tentatives de connexion TCP simultanées.
                        Record Number: 178143
                        Source Name: Tcpip
                        Time Written: 20090707202241.888575-000
                        Event Type: Avertissement
                        User:

                        Computer Name: PC-de-Utilisate
                        Event Code: 10005
                        Message: DCOM a reçu l'erreur "1084" lors de la mise en route du service WSearch avec les arguments "" pour démarrer le serveur :
                        {9E175B6D-F52A-11D8-B9A5-505054503030}
                        Record Number: 178145
                        Source Name: Microsoft-Windows-DistributedCOM
                        Time Written: 20090707203534.000000-000
                        Event Type: Erreur
                        User:

                        Computer Name: PC-de-Utilisate
                        Event Code: 10005
                        Message: DCOM a reçu l'erreur "1084" lors de la mise en route du service WSearch avec les arguments "" pour démarrer le serveur :
                        {9E175B68-F52A-11D8-B9A5-505054503030}
                        Record Number: 178146
                        Source Name: Microsoft-Windows-DistributedCOM
                        Time Written: 20090707211353.000000-000
                        Event Type: Erreur
                        User:

                        Computer Name: PC-de-Utilisate
                        Event Code: 4226
                        Message: TCP/IP a atteint la limite de sécurité imposée sur le nombre de tentatives de connexion TCP simultanées.
                        Record Number: 178147
                        Source Name: Tcpip
                        Time Written: 20090707214930.681175-000
                        Event Type: Avertissement
                        User:

                        =====Application event log=====

                        Computer Name: PC-de-Utilisate
                        Event Code: 6000
                        Message: L’abonné aux notifications Winlogon <GPClient> n’était pas disponible pour traiter un événement de notification.
                        Record Number: 40550
                        Source Name: Microsoft-Windows-Winlogon
                        Time Written: 20090707165106.000000-000
                        Event Type: Avertissement
                        User:

                        Computer Name: PC-de-Utilisate
                        Event Code: 6000
                        Message: L’abonné aux notifications Winlogon <GPClient> n’était pas disponible pour traiter un événement de notification.
                        Record Number: 40555
                        1. ok je crois que j ai trouvé l'erruer qui fait :

                          j'ai besoin de ceci :

                          Télécharge Random's System Information Tool (RSIT) de random/random et enregistre l'exécutable sur ton Bureau.

                          ! Déconnecte toi et ferme toutes tes applications en cours !

                          Double-clique sur " RSIT.exe " pour le lancer .

                          -> Une première fenêtre s'ouvre avec en titre : " Disclaimer of warranty " .

                          * Devant l'option "List files/folders created ..." , tu choisis : 2 months

                          * clique ensuite sur " Continue " pour lancer l'analyse ...

                          -> laisse faire le scan et ne touche pas au PC ...

                          Lorsque l'analyse sera terminée, deux fichiers texte s'ouvriront (probablement avec le bloc-note).

                          Poste le contenu de " log.txt " (c'est celui qui apparait à l'écran), ainsi que de " info.txt " (que tu verras dans la barre des tâches), pour analyse et attends la suite ...

                          Important : poste un rapport, puis l'autre dans la réponse suivante
                          Si tu essaies de poster les deux en même temps, cela risque d'être trop long pour le forum

                          ( Note : les rapports seront en outre sauvegardés dans ce dossier -> C:\rsit )
                          1. quand je clic pour la faire sa mé "scheduler not loaded"

                            edit : je fait quoi alor ?
                            1. tu as un message d'erreur ? ca fait quoi quand tu fias les mises a jour ?
                              • 1
                              • 2
                              • 3