[Réglé] PC qui plante au démarrage

[jeffoulain]

Bonjour,

Mon PC plante assez régulièrement au démarrage depuis quelques jours...
Il reste boqué sur le logo constructeur Packard Bell et une seule solution : le bouton OFF

Dernièrement j'avais bloqué certains programmes au démarrage et il
me semble que les ennuis ont commencé là... alors j'ai tout rétabli comme avant...
Mais le problème persiste...

J'ai aussi installé un Gestionnaire de Connexion SFR qui semble mettre un peu le
bazar...

J'ai donc fait un examen HiJAckThis... voici son rapport...
Merci à ceux qui savent d'y jeter un oeil...

Code: Tout sélectionner

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 10:36:35, on 02/08/2010
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v8.00 (8.00.6001.18928)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\system32\taskeng.exe
C:\Windows\Explorer.EXE
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Windows\RtHDVCpl.exe
C:\Program Files\Brother\Brmfcmon\BrMfcWnd.exe
C:\Program Files\Alwil Software\Avast5\AvastUI.exe
C:\Program Files\HP\HP Software Update\hpwuSchd2.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Windows\ehome\ehtray.exe
C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe
C:\Program Files\Brother\ControlCenter3\brccMCtl.exe
C:\Program Files\Packard Bell\SetUpMyPC\SmpSys.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\SFR\Gestionnaire de Connexion SFR\ABCd_ZTE.exe
C:\Windows\ehome\ehmsas.exe
C:\Program Files\Brother\Brmfcmon\BrMfcmon.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\Program Files\HP\Digital Imaging\bin\hpqbam08.exe
C:\Program Files\HP\Digital Imaging\bin\hpqgpc01.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\HP\Digital Imaging\smart web printing\hpswp_clipbook.exe
C:\Program Files\Mozilla Firefox\plugin-container.exe
C:\Windows\system32\wuauclt.exe
C:\Users\Jeff\Desktop\Sniffle.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.durable.com/recherche
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.durable.com/recherche
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.durable.com/recherche
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.durable.com/recherche
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.durable.com/recherche
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.durable.com/recherche
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.durable.com/recherche
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://www.durable.com/recherche
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O1 - Hosts: ::1 localhost
O2 - BHO: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.4.4525.1752\swg.dll
O2 - BHO: Browser Address Error Redirector - {CA6319C0-31B7-401E-A518-A07C3DB8F777} - C:\Program Files\Google\Google_BAE\BAE.dll
O2 - BHO: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O3 - Toolbar: WalterShop - {9ec204df-0e48-4c32-816e-2e928a4fd9c2} - mscoree.dll (file missing)
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM\..\Run: [MSConfig] "C:\Windows\System32\msconfig.exe" /auto
O4 - HKLM\..\Run: [BrMfcWnd] C:\Program Files\Brother\Brmfcmon\BrMfcWnd.exe /AUTORUN
O4 - HKLM\..\Run: [ControlCenter3] C:\Program Files\Brother\ControlCenter3\brctrcen.exe /autorun
O4 - HKLM\..\Run: [avast5] C:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe /nogui
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [ISUSPM] "C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe" -scheduler
O4 - HKCU\..\Run: [SmpcSys] C:\Program Files\Packard Bell\SetUpMyPC\SmpSys.exe
O4 - HKCU\..\Run: [AdobeUpdater] "C:\Program Files\Common Files\Adobe\Updater5\AdobeUpdater.exe"
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O8 - Extra context menu item: Google Sidewiki... - res://C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_60D6097707281E79.dll/cmsidewiki.html
O9 - Extra button: Afficher ou masquer l'HP Smart Web Printing - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
O13 - Gopher Prefix:
O15 - Trusted Zone: http://*.mappy.com
O15 - Trusted Zone: http://*.orange.fr
O15 - Trusted Zone: http://orange.weborama.fr
O17 - HKLM\System\CCS\Services\Tcpip\..\{774CA886-5657-48E7-B937-1E26860005B0}: NameServer = 172.20.2.10 172.20.2.39
O23 - Service: AOL Connectivity Service (AOL ACS) - AOL LLC - C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: ASLDR Service (ASLDRService) - Unknown owner - C:\Program Files\ATK Hotkey\ASLDRSrv.exe
O23 - Service: Ati External Event Utility - ATI Technologies Inc. - C:\Windows\system32\Ati2evxx.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Planificateur LiveUpdate automatique - Unknown owner - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe (file missing)
O23 - Service: RoxMediaDB9 - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe
O23 - Service: Roxio Hard Drive Watcher 9 (RoxWatch9) - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatch9.exe
O23 - Service: Service SFR Gestionnaire Connexion (ServiceSFRABCD) - SFR & Celliance - C:\Program Files\SFR\Gestionnaire de Connexion SFR\SFRABCDService.exe
O23 - Service: stllssvr - MicroVision Development, Inc. - C:\Program Files\Common Files\SureThing Shared\stllssvr.exe

--
End of file - 8321 bytes

Edit AtOM: Balises codes mise pour le rapport. Merci d'y être attentif.

[etienne2000]

Il reste boqué sur le logo constructeur Packard Bell

donc avant que la barre de chargement windows?

Essaye de booter sur un CD ou un DVD pour voir si cela passe et dis nous ce qu'il en est. soit au moment de passer du bios au chargement windows sa plante ou soit il reste planté sur le bios pour une raison inconnue. a part cela, tu arrive a rentrer dans le bios (genre avec le F2, F12 "menu de boot") (au cas ou la touche a pressé peut varier en fonction de la marque du pc et de la carte mère)

[Del-crosseur]

Salut relance Hijackthis et coche les cases a gauche si dessous

O3 - Toolbar: WalterShop - {9ec204df-0e48-4c32-816e-2e928a4fd9c2} - mscoree.dll (file missing)
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)

et Clique sur Fix checked


---------------------------------
Maintenant en se qui est du " PC qui Plante au démarrage" je ne vois pas d'où peut venir le problème
des autres personnes qui s'y connaissent mieux te viendra en aides

@ +

[jeffoulain]

Salut,

J'ai fixé comme indiqué... merci!

Par contre, Etienne dit :
"Essaye de booter sur un CD ou un DVD pour voir si cela passe et dis nous ce qu'il en est. soit au moment de passer du bios au chargement windows sa plante ou soit il reste planté sur le bios pour une raison inconnue."

Faudrait me traduire un peu...
Booter = démarrer, non?

Donc il faudrait que je démarre sur un CD, c'est ça??
D'accord, mais comment faire?

Et, what is the BIOS??

Pour finir, quand il bloque, il me propose ESC et F2 : set up menu...
Mais rien ne marche...

Voilà...

A plus

[bernard53]

bonsoir a tous

jeffoulain teste ceci.


Relance HijackThis >puis : Do a system scan only > coche ces lignes: ensuite valides sur Fix checked

O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O3 - Toolbar: WalterShop - {9ec204df-0e48-4c32-816e-2e928a4fd9c2} - mscoree.dll (file missing)
O4 - HKLM\..\Run: [MSConfig] "C:\Windows\System32\msconfig.exe" /auto
O4 - HKLM\..\Run: [BrMfcWnd] C:\Program Files\Brother\Brmfcmon\BrMfcWnd.exe /AUTORUN
O4 - HKLM\..\Run: [ControlCenter3] C:\Program Files\Brother\ControlCenter3\brctrcen.exe /autorun
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [ISUSPM] "C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe" -scheduler
O4 - HKCU\..\Run: [SmpcSys] C:\Program Files\Packard Bell\SetUpMyPC\SmpSys.exe
O4 - HKCU\..\Run: [AdobeUpdater] "C:\Program Files\Common Files\Adobe\Updater5\AdobeUpdater.exe"
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O23 - Service: Planificateur LiveUpdate automatique - Unknown owner - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe (file missing)

ensuite ceci:

Démarrer>exécuter>tapes cmd puis chkdsk* /f

*pour un espace

- Windows affiche : type fichier NTFS : impossible de verrouiller le lecteur en cours
CHKDSK ne peut s'exécuter parce que le volume est utilisé par un autre processus.
Voulez vous que ce volume soit vérifier au prochain démarrage : Oui ou Non
Valider O et Redémarrer le pc.

[jeffoulain]

Salut bernard53,

J'ai fixé comme tu m'as dit...
L'ordi a voulu redémarrer et c'est là en fait qu'il plante... pas quand il démarre mais quand il redémarre!!
Donc il a encore planté...

Je vais faire la suite de la manip' et je te tiens au courant... s'il me lâche pas entretemps...

A plus

[jeffoulain]

Bon, voilà... j'ai essayé la suite mais Windows répond :

[img][IMG]http://img686.imageshack.us/img686/7241/sanstitre1mv.jpg[/img]][/img]

J'ai essayé deux méthodes : cmd chkdsk /f en 1 fois, dans le menu éxécuter
et puis, d'abord cmd et ensuite chkdsk /f

Chaque fois, même résultat...

[bernard53]

Bon, voilà... j'ai essayé la suite mais Windows répond :

[img][IMG]http://img686.imageshack.us/img686/7241/sanstitre1mv.jpg[/img]][/img]

J'ai essayé deux méthodes : cmd chkdsk /f en 1 fois, dans le menu éxécuter
et puis, d'abord cmd et ensuite chkdsk /f

Chaque fois, même résultat...

OK il te manque juste les droits pour exécuter cette commande.

lance la comme ceci.

[jeffoulain]

Voilà, c'est fait...

Apparemment, rien à déclarer...

Par contre, entretemps, il s'est encore bloqué lors du redémarrage... je suspecte vraiment ce Gestionnaire de Connexion SFR... les pbs ont commencé avec son installation...

Et puis il est très long à s'éteindre et à s'allumer...
Je pense à défragmenter le disque, depuis le temps il doit en avoir besoin... qu'en pensez-vous?
Y a-t-il autre chose que je pourrais faire pour donner un coup de neuf? nettoyer les registres?

Merci

Jefff

[Ask to Old Man]

Bonjour,

je suspecte vraiment ce Gestionnaire de Connexion SFR...

Tous les outils "offerts" par les FAI sont inutiles...
Passé par force chez SFR suite au rachat d'Aol, j'ai fait comme d'ahabitude,
connexion par Windows ou Linux sans aucun problèmes.

Tu peux par ex. t'inspirer de ce Sujet

[jeffoulain]

Salut Atom,

J'ai désinstallé le Gestionnaire et je tiens quand même une connexion... miracle!
Mais pour combien de temps???

Par contre, le PC plante toujours au redémarrage, à chaque fois!!
Il reste bloqué sur une page constructeur Packard Bell et... plus rien!
Je dois chaque fois l'éteindre et le relancer...

Qu'est-ce que ça peut bien être??
J'ai réparé les registres avec CCleaner et défragmenté le disque...
Malwarebytes dit que tout est OK...

Une idée??

[jeffoulain]

Désolé...
Erreur de manip...

[bernard53]

jeffoulain fait ceci pour voir un peu plus.


* Télécharge >> OTL <<sur ton bureau.

* Fait un double-clic sur l'icône d'OTL pour le lancer
/!\ pour Vista/Seven fais un clic-droit sur l'icône d'OTL et choisis "Exécuter en tant qu'administrateur"

* Assure-toi d'avoir fermé toutes les applications en court de fonctionnement.

* Quand la fenêtre d'OTL apparaît, assure toi que dans la section "Rapport" (en haut à droite) la case "Rapport minimal " soit cochée.

* Copies et colles le contenue de cette citation dans la partie inférieure d'OTL " Personnalisation"

netsvcs
%SYSTEMDRIVE%\*.exe
/md5start
eventlog.dll
scecli.dll
netlogon.dll
cngaudit.dll
sceclt.dll
ntelogon.dll
logevent.dll
iaStor.sys
nvstor.sys
atapi.sys
IdeChnDr.sys
viasraid.sys
AGP440.sys
vaxscsi.sys
nvatabus.sys
viamraid.sys
nvata.sys
nvgts.sys
iastorv.sys
ViPrt.sys
eNetHook.dll
ahcix86.sys
KR10N.sys
vstor32.sys
ahcix86s.sys
nvrd32.sys
/md5stop
%systemroot%\*. /mp /s
%systemroot%\system32\*.dll /lockedfiles
%systemroot%\Tasks\*.job /lockedfiles

* Cliques sur l'icône "Analyse" (en haut à gauche) .
* Laisse le scan aller à son terme sans te servir du PC
* A la fin du scan un ou deux rapports vont s'ouvrir "OTL.Txt" et ( ou ) "Extras.Txt"( dans certains cas).
* Copie et colle le ou les rapports dans ta réponse stp...
* Au cas où, tu peux les retrouver dans le dossier C:\OTL ou sur ton bureau en fonction des cas rencontrés

[Ask to Old Man]

Retour sur le propos du gestionnaire de connexion. Je répète comme beaucoup d'autres ici:
_ les outils des FAI sont inutiles.

et je tiens quand même une connexion... miracle!
Mais pour combien de temps???

Pour l'heure ma machine actuelle est installée depuis 4 ans & toujours connectée.
D'autant plus que ce n'est pas SFR qui me redonnera leur CD & autres fanfreluches puisque
je fonctionnes toujours avec mon AolBox & mes identifiants datant de 1999 ...

Je suis plus "ennuyé" par ton blocage au redémarrage systématiquement sur le Logo P-B...
...Ça pourrait plus ou moins laisser entendre qu'il y aurait pu avoir une mise à jour
qui ne se serait pas normalement terminée. Sans certitudes aucunes...

& comme les bœufs d'Acer/Packard-Bell ont complètement détruit la base de données qui concernait
chaque modèles exact de machine, base dans laquelle il était parfois signalé des Patchs utiles...

Donc, finis la désinfection avec bernard 53, & nous tenterons de voir sur un nouveau sujet
ce que nous pouvons envisager ... ...Donc, a suivre...

[jeffoulain]

Me re-voilà!!

Pour répondre à AtOM :
Effectivement, la connexion marche impec comme ça!!
Concernant le plantage à répétition :
J'avais tenté de bloquer au démarrage le programme de P&B qui passait son temps à me dire de faire mes recovery DVD... et c'est là que les ennuis ont commencé... donc je crois bien à la piste d'une MAJ qui aurait planté...

Et pour répondre à Bernard :
Voilà les rapports :

Code: Tout sélectionner

OTL logfile created on: 04/08/2010 17:32:33 - Run 1
OTL by OldTimer - Version 3.2.9.1     Folder = C:\tools
Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18928)
Locale: 0000040C | Country: France | Language: FRA | Date Format: dd/MM/yyyy
 
2,00 Gb Total Physical Memory | 1,00 Gb Available Physical Memory | 56,00% Memory free
4,00 Gb Paging File | 3,00 Gb Available in Paging File | 78,00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 141,04 Gb Total Space | 33,66 Gb Free Space | 23,87% Space Free | Partition Type: NTFS
D: Drive not present or media not loaded
Drive E: | 42,76 Mb Total Space | 0,00 Mb Free Space | 0,00% Space Free | Partition Type: CDFS
F: Drive not present or media not loaded
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded
 
Computer Name: LOSSANTOS
Current User Name: Jeff
Logged in as Administrator.
 
Current Boot Mode: Normal
Scan Mode: Current user
Company Name Whitelist: Off
Skip Microsoft Files: Off
File Age = 30 Days
Output = Minimal
 
[color=#E56717]========== Processes (SafeList) ==========[/color]
 
PRC - C:\tools\OTL.exe (OldTimer Tools)
PRC - C:\Program Files\Alwil Software\Avast5\AvastUI.exe (ALWIL Software)
PRC - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe (ALWIL Software)
PRC - C:\Windows\explorer.exe (Microsoft Corporation)
PRC - C:\Windows\System32\conime.exe (Microsoft Corporation)
PRC - C:\Program Files\Windows Defender\MSASCui.exe (Microsoft Corporation)
PRC - C:\Program Files\ATK Hotkey\HControl.exe (ATK0100)
PRC - C:\Program Files\ATK Hotkey\ASLDRSrv.exe ()
PRC - C:\Program Files\ATK Hotkey\ATKOSD.exe ()
PRC - C:\Windows\RtHDVCpl.exe (Realtek Semiconductor)
PRC - C:\Program Files\Common Files\aol\acs\AOLacsd.exe (AOL LLC)
 
 
[color=#E56717]========== Modules (SafeList) ==========[/color]
 
MOD - C:\tools\OTL.exe (OldTimer Tools)
MOD - C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6002.18005_none_5cb72f96088b0de0\comctl32.dll (Microsoft Corporation)
MOD - C:\Windows\System32\msscript.ocx (Microsoft Corporation)
 
 
[color=#E56717]========== Win32 Services (SafeList) ==========[/color]
 
SRV - (Planificateur LiveUpdate automatique) -- C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe File not found
SRV - (avast! Web Scanner) -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe (ALWIL Software)
SRV - (avast! Mail Scanner) -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe (ALWIL Software)
SRV - (avast! Antivirus) -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe (ALWIL Software)
SRV - (WinDefend) -- C:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation)
SRV - (ASLDRService) -- C:\Program Files\ATK Hotkey\ASLDRSrv.exe ()
SRV - (AOL ACS) -- C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe (AOL LLC)
SRV - (IDriverT) -- C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe (Macrovision Corporation)
 
 
[color=#E56717]========== Driver Services (SafeList) ==========[/color]
 
DRV - (NwlnkFwd) -- C:\Windows\System32\DRIVERS\nwlnkfwd.sys File not found
DRV - (NwlnkFlt) -- C:\Windows\System32\DRIVERS\nwlnkflt.sys File not found
DRV - (IpInIp) -- C:\Windows\System32\DRIVERS\ipinip.sys File not found
DRV - (blbdrive) -- C:\Windows\System32\drivers\blbdrive.sys File not found
DRV - (aswTdi) -- C:\Windows\System32\drivers\aswTdi.sys (ALWIL Software)
DRV - (aswSP) -- C:\Windows\System32\drivers\aswSP.sys (ALWIL Software)
DRV - (aswRdr) -- C:\Windows\System32\drivers\aswRdr.sys (ALWIL Software)
DRV - (aswMonFlt) -- C:\Windows\System32\drivers\aswMonFlt.sys (ALWIL Software)
DRV - (aswFsBlk) -- C:\Windows\System32\drivers\aswFsBlk.sys (ALWIL Software)
DRV - (MBAMSwissArmy) -- C:\Windows\System32\drivers\mbamswissarmy.sys (Malwarebytes Corporation)
DRV - (ZTEusbnmea) -- C:\Windows\System32\drivers\ZTEusbnmea.sys (ZTE Incorporated)
DRV - (massfilter) -- C:\Windows\System32\drivers\massfilter.sys (ZTE Incorporated)
DRV - (ZTEusbvoice) -- C:\Windows\System32\drivers\ZTEusbvoice.sys (ZTE Incorporated)
DRV - (ZTEusbser6k) -- C:\Windows\System32\drivers\ZTEusbser6k.sys (ZTE Incorporated)
DRV - (ZTEusbmdm6k) -- C:\Windows\System32\drivers\ZTEusbmdm6k.sys (ZTE Incorporated)
DRV - (ZTEusbnet) -- C:\Windows\System32\drivers\ZTEusbnet.sys (ZTE Corporation)
DRV - (hwdatacard) -- C:\Windows\System32\drivers\ewusbmdm.sys (Huawei Technologies Co., Ltd.)
DRV - (Btcsrusb) -- C:\Windows\System32\drivers\btcusb.sys (IVT Corporation.)
DRV - (BlueletSCOAudio) -- C:\Windows\System32\drivers\BlueletSCOAudio.sys (IVT Corporation.)
DRV - (BT) -- C:\Windows\System32\drivers\btnetdrv.sys (IVT Corporation.)
DRV - (BTHidMgr) -- C:\Windows\System32\Drivers\BTHidMgr.sys (IVT Corporation.)
DRV - (BTHidEnum) -- C:\Windows\System32\Drivers\vbtenum.sys (IVT Corporation.)
DRV - (VcommMgr) -- C:\Windows\System32\drivers\VCommMgr.sys (IVT Corporation.)
DRV - (VComm) -- C:\Windows\System32\drivers\VComm.sys (IVT Corporation.)
DRV - (BlueletAudio) -- C:\Windows\System32\drivers\blueletaudio.sys (IVT Corporation.)
DRV - (R300) -- C:\Windows\System32\drivers\atikmdag.sys (ATI Technologies Inc.)
DRV - (athr) -- C:\Windows\System32\drivers\athr.sys (Atheros Communications, Inc.)
DRV - (MTsensor) -- C:\Windows\System32\drivers\ATKACPI.sys (ATK0100)
DRV - (IntcAzAudAddService) Service for Realtek HD Audio (WDM) -- C:\Windows\System32\drivers\RTKVHDA.sys (Realtek Semiconductor Corp.)
DRV - (PCAMp50) -- C:\Windows\System32\drivers\PCAMp50.sys (Printing Communications Assoc., Inc. (PCAUSA))
DRV - (PCASp50) -- C:\Windows\System32\drivers\PCASp50.sys (Printing Communications Assoc., Inc. (PCAUSA))
DRV - (Cam5603D) -- C:\Windows\System32\drivers\BisonCam.sys (Bison Electronics. Inc. )
DRV - (SynTP) -- C:\Windows\System32\drivers\SynTP.sys (Synaptics, Inc.)
DRV - (RTL8023xp) -- C:\Windows\System32\drivers\Rtnicxp.sys (Realtek Semiconductor Corporation                           )
DRV - (ql2300) -- C:\Windows\system32\drivers\ql2300.sys (QLogic Corporation)
DRV - (adp94xx) -- C:\Windows\system32\drivers\adp94xx.sys (Adaptec, Inc.)
DRV - (elxstor) -- C:\Windows\system32\drivers\elxstor.sys (Emulex)
DRV - (adpahci) -- C:\Windows\system32\drivers\adpahci.sys (Adaptec, Inc.)
DRV - (uliahci) -- C:\Windows\system32\drivers\uliahci.sys (ULi Electronics Inc.)
DRV - (iaStorV) -- C:\Windows\system32\drivers\iastorv.sys (Intel Corporation)
DRV - (adpu320) -- C:\Windows\system32\drivers\adpu320.sys (Adaptec, Inc.)
DRV - (ulsata2) -- C:\Windows\system32\drivers\ulsata2.sys (Promise Technology, Inc.)
DRV - (vsmraid) -- C:\Windows\system32\drivers\vsmraid.sys (VIA Technologies Inc.,Ltd)
DRV - (ql40xx) -- C:\Windows\system32\drivers\ql40xx.sys (QLogic Corporation)
DRV - (UlSata) -- C:\Windows\system32\drivers\ulsata.sys (Promise Technology, Inc.)
DRV - (adpu160m) -- C:\Windows\system32\drivers\adpu160m.sys (Adaptec, Inc.)
DRV - (nvraid) -- C:\Windows\system32\drivers\nvraid.sys (NVIDIA Corporation)
DRV - (nfrd960) -- C:\Windows\system32\drivers\nfrd960.sys (IBM Corporation)
DRV - (iirsp) -- C:\Windows\system32\drivers\iirsp.sys (Intel Corp./ICP vortex GmbH)
DRV - (SiSRaid4) -- C:\Windows\system32\drivers\sisraid4.sys (Silicon Integrated Systems)
DRV - (nvstor) -- C:\Windows\system32\drivers\nvstor.sys (NVIDIA Corporation)
DRV - (aic78xx) -- C:\Windows\system32\drivers\djsvs.sys (Adaptec, Inc.)
DRV - (arcsas) -- C:\Windows\system32\drivers\arcsas.sys (Adaptec, Inc.)
DRV - (LSI_SCSI) -- C:\Windows\system32\drivers\lsi_scsi.sys (LSI Logic)
DRV - (SiSRaid2) -- C:\Windows\system32\drivers\sisraid2.sys (Silicon Integrated Systems Corp.)
DRV - (HpCISSs) -- C:\Windows\system32\drivers\hpcisss.sys (Hewlett-Packard Company)
DRV - (arc) -- C:\Windows\system32\drivers\arc.sys (Adaptec, Inc.)
DRV - (iteraid) -- C:\Windows\system32\drivers\iteraid.sys (Integrated Technology Express, Inc.)
DRV - (iteatapi) -- C:\Windows\system32\drivers\iteatapi.sys (Integrated Technology Express, Inc.)
DRV - (LSI_SAS) -- C:\Windows\system32\drivers\lsi_sas.sys (LSI Logic)
DRV - (Symc8xx) -- C:\Windows\system32\drivers\symc8xx.sys (LSI Logic)
DRV - (LSI_FC) -- C:\Windows\system32\drivers\lsi_fc.sys (LSI Logic)
DRV - (Sym_u3) -- C:\Windows\system32\drivers\sym_u3.sys (LSI Logic)
DRV - (Mraid35x) -- C:\Windows\system32\drivers\mraid35x.sys (LSI Logic Corporation)
DRV - (Sym_hi) -- C:\Windows\system32\drivers\sym_hi.sys (LSI Logic)
DRV - (megasas) -- C:\Windows\system32\drivers\megasas.sys (LSI Logic Corporation)
DRV - (viaide) -- C:\Windows\system32\drivers\viaide.sys (VIA Technologies, Inc.)
DRV - (cmdide) -- C:\Windows\system32\drivers\cmdide.sys (CMD Technology, Inc.)
DRV - (aliide) -- C:\Windows\system32\drivers\aliide.sys (Acer Laboratories Inc.)
DRV - (Brserid) Brother MFC Serial Port Interface Driver (WDM) -- C:\Windows\system32\drivers\brserid.sys (Brother Industries Ltd.)
DRV - (BrUsbSer) -- C:\Windows\system32\drivers\brusbser.sys (Brother Industries Ltd.)
DRV - (BrFiltUp) -- C:\Windows\system32\drivers\brfiltup.sys (Brother Industries, Ltd.)
DRV - (BrFiltLo) -- C:\Windows\system32\drivers\brfiltlo.sys (Brother Industries, Ltd.)
DRV - (BrSerWdm) -- C:\Windows\system32\drivers\brserwdm.sys (Brother Industries Ltd.)
DRV - (BrUsbMdm) -- C:\Windows\system32\drivers\brusbmdm.sys (Brother Industries Ltd.)
DRV - (ntrigdigi) -- C:\Windows\system32\drivers\ntrigdigi.sys (N-trig Innovative Technologies)
DRV - (E1G60) Intel(R) -- C:\Windows\System32\drivers\E1G60I32.sys (Intel Corporation)
DRV - (wanatw) WAN Miniport (ATW) -- C:\Windows\System32\drivers\wanatw4.sys (America Online, Inc.)
DRV - (AtiPcie) ATI PCI Express (3GIO) -- C:\Windows\system32\DRIVERS\AtiPcie.sys (ATI Technologies Inc.)
 
 
[color=#E56717]========== Standard Registry (SafeList) ==========[/color]
 
 
[color=#E56717]========== Internet Explorer ==========[/color]
 
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.durable.com/recherche
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.durable.com/recherche
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.durable.com/recherche
 
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.durable.com/recherche
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.durable.com/recherche
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,SearchDefaultBranded = 1
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,SearchMigratedDefaultName = Durable.com
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,SearchMigratedDefaultURL = http://www.durable.com/result?cx=partner-pub-7902900401080901%3Azbljezwsgul&cof=FORID%3A10&ie=UTF-8&q={searchTerms}
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.durable.com/recherche
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://fr.msn.com/?ocid=iehp
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = fr
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 51 A7 E9 18 8F B8 C9 01  [binary data]
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache = 1
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.durable.com/recherche
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
[color=#E56717]========== FireFox ==========[/color]
 
FF - prefs.js..browser.search.defaultenginename: "Durable"
FF - prefs.js..browser.search.defaulturl: "http://www.durable.com/result?cx=partner-pub-7902900401080901%3Azbljezwsgul&cof=FORID%3A10&ie=UTF-8&q="
FF - prefs.js..browser.search.selectedEngine: "Google"
FF - prefs.js..browser.startup.homepage: "http://www.google.fr/"
FF - prefs.js..extensions.enabledItems: {635abd67-4fe9-1b23-4f01-e679fa7484c1}:1.5.4.20081105
FF - prefs.js..extensions.enabledItems: smartwebprinting@hp.com:4.5
FF - prefs.js..keyword.URL: "http://www.durable.com/result?cx=partner-pub-7902900401080901%3Azbljezwsgul&cof=FORID%3A10&ie=UTF-8&q="
 
 
FF - HKLM\software\mozilla\Firefox\Extensions\\smartwebprinting@hp.com: C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2010/05/30 19:55:18 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.6\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2010/06/28 17:40:32 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.6\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2010/08/02 11:40:39 | 000,000,000 | ---D | M]
 
[2009/01/02 18:41:55 | 000,000,000 | ---D | M] -- C:\Users\Jeff\AppData\Roaming\mozilla\Extensions
[2010/08/04 15:54:28 | 000,000,000 | ---D | M] -- C:\Users\Jeff\AppData\Roaming\mozilla\Firefox\Profiles\msb83raq.default\extensions
[2009/09/05 15:09:02 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\Users\Jeff\AppData\Roaming\mozilla\Firefox\Profiles\msb83raq.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}
[2009/05/01 16:19:19 | 000,000,000 | ---D | M] (Yahoo! Toolbar) -- C:\Users\Jeff\AppData\Roaming\mozilla\Firefox\Profiles\msb83raq.default\extensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1}
[2010/02/01 10:41:53 | 000,000,000 | ---D | M] -- C:\Users\Jeff\AppData\Roaming\mozilla\Firefox\Profiles\msb83raq.default\extensions\toolbar@waltershop.com
[2010/02/01 10:54:54 | 000,002,314 | ---- | M] () -- C:\Users\Jeff\AppData\Roaming\Mozilla\FireFox\Profiles\msb83raq.default\searchplugins\durable.xml
[2009/09/06 16:01:47 | 000,000,000 | ---D | M] -- C:\Program Files\Mozilla Firefox\extensions
[2007/05/24 22:49:07 | 000,000,000 | ---D | M] (Google Toolbar for Firefox) -- C:\Program Files\Mozilla Firefox\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}
[2007/05/24 22:48:55 | 000,000,000 | ---D | M] -- C:\Program Files\Mozilla Firefox\extensions\packardbell@partners.mozilla.com
[2010/05/26 16:04:27 | 000,001,516 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\amazon-france.xml
[2010/05/26 16:04:27 | 000,001,822 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\cnrtl-tlfi-fr.xml
[2010/05/26 16:04:27 | 000,000,757 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\eBay-france.xml
[2010/05/26 16:04:27 | 000,001,426 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\wikipedia-fr.xml
[2010/05/26 16:04:27 | 000,000,956 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\yahoo-france.xml
 
O1 HOSTS File: ([2006/09/18 23:41:30 | 000,000,761 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1       localhost
O1 - Hosts: ::1             localhost
O2 - BHO: (HP Print Enhancer) - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files\HP\Digital Imaging\smart web printing\hpswp_printenhancer.dll (Hewlett-Packard Co.)
O2 - BHO: (Aide pour le lien d'Adobe PDF Reader) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
O2 - BHO: (Google Toolbar Helper) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.4.4525.1752\swg.dll (Google Inc.)
O2 - BHO: (CBrowserHelperObject Object) - {CA6319C0-31B7-401E-A518-A07C3DB8F777} - C:\Program Files\Google\Google_BAE\BAE.dll (Packard Bell)
O2 - BHO: (HP Smart BHO Class) - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files\HP\Digital Imaging\smart web printing\hpswp_BHO.dll (Hewlett-Packard Co.)
O3 - HKLM\..\Toolbar: (Google Toolbar) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
O3 - HKCU\..\Toolbar\WebBrowser: (Google Toolbar) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
O4 - HKLM..\Run: []  File not found
O4 - HKLM..\Run: [Adobe Reader Speed Launcher] C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [avast5] C:\Program Files\Alwil Software\Avast5\AvastUI.exe (ALWIL Software)
O4 - HKLM..\Run: [RtHDVCpl] C:\Windows\RtHDVCpl.exe (Realtek Semiconductor)
O4 - HKLM..\Run: [Windows Defender] C:\Program Files\Windows Defender\MSASCui.exe (Microsoft Corporation)
O4 - HKCU..\Run: []  File not found
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = FF FF FF FF  [binary data]
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 255
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: UacDisableNotify = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = FF FF FF FF  [binary data]
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 255
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O8 - Extra context menu item: Google Sidewiki... - C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_60D6097707281E79.dll (Google Inc.)
O9 - Extra Button: Afficher ou masquer l'HP Smart Web Printing - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - C:\Program Files\HP\Digital Imaging\smart web printing\hpswp_BHO.dll (Hewlett-Packard Co.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000005 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O13 - gopher Prefix: missing
O15 - HKCU\..Trusted Domains: aol.com ([objects] * is out of zone range -  5)
O15 - HKCU\..Trusted Domains: mappy.com ([]http in Trusted sites)
O15 - HKCU\..Trusted Domains: orange.fr ([]http in Trusted sites)
O15 - HKCU\..Trusted Domains: weborama.fr ([orange] http in Trusted sites)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O24 - Desktop WallPaper: C:\Windows\Web\Wallpaper\Packard Bell\Wallpaper\Wallpaper Galactic_1900x1440.jpg
O24 - Desktop BackupWallPaper: C:\Windows\Web\Wallpaper\Packard Bell\Wallpaper\Wallpaper Galactic_1900x1440.jpg
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2006/09/18 23:43:36 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O32 - AutoRun File - [2009/03/20 22:45:37 | 000,000,037 | R--- | M] () - E:\autorun.inf -- [ CDFS ]
O33 - MountPoints2\{2da6f548-06bd-11df-be01-00038a000015}\Shell - "" = AutoRun
O33 - MountPoints2\{2da6f548-06bd-11df-be01-00038a000015}\Shell\AutoRun\command - "" = F:\LaunchU3.exe -- File not found
O33 - MountPoints2\{45e10bc2-e578-11de-abc8-00038a000015}\Shell - "" = AutoRun
O33 - MountPoints2\{45e10bc2-e578-11de-abc8-00038a000015}\Shell\AutoRun\command - "" = E:\setup_vmc_lite.exe -- File not found
O33 - MountPoints2\{45e10c10-e578-11de-abc8-00038a000015}\Shell - "" = AutoRun
O33 - MountPoints2\{45e10c10-e578-11de-abc8-00038a000015}\Shell\AutoRun\command - "" = E:\setup_vmc_lite.exe -- File not found
O33 - MountPoints2\{4637f575-9a6a-11df-8b8c-001060561581}\Shell - "" = AutoRun
O33 - MountPoints2\{4637f575-9a6a-11df-8b8c-001060561581}\Shell\AutoRun\command - "" = E:\SFR.exe -- [2009/03/20 19:52:35 | 001,164,800 | R--- | M] (SFR)
O33 - MountPoints2\{4637f5a0-9a6a-11df-8b8c-00a0c6000000}\Shell - "" = AutoRun
O33 - MountPoints2\{4637f5a0-9a6a-11df-8b8c-00a0c6000000}\Shell\AutoRun\command - "" = E:\SFR.exe -- [2009/03/20 19:52:35 | 001,164,800 | R--- | M] (SFR)
O33 - MountPoints2\{99d3df36-e416-11de-8ca4-00038a000015}\Shell - "" = AutoRun
O33 - MountPoints2\{99d3df36-e416-11de-8ca4-00038a000015}\Shell\AutoRun\command - "" = E:\setup_vmc_lite.exe -- File not found
O33 - MountPoints2\{ceea8398-b20f-11dc-888e-00038a000015}\Shell - "" = AutoRun
O33 - MountPoints2\{ceea8398-b20f-11dc-888e-00038a000015}\Shell\AutoRun\command - "" = E:\LaunchU3.exe -- File not found
O33 - MountPoints2\{e7beca0e-9fc9-11df-b68f-001060561581}\Shell - "" = AutoRun
O33 - MountPoints2\{e7beca0e-9fc9-11df-b68f-001060561581}\Shell\AutoRun\command - "" = E:\SFR.exe -- [2009/03/20 19:52:35 | 001,164,800 | R--- | M] (SFR)
O34 - HKLM BootExecute: (autocheck autochk *) -  File not found
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
 
NetSvcs: FastUserSwitchingCompatibility -  File not found
NetSvcs: Ias -  File not found
NetSvcs: Nla -  File not found
NetSvcs: Ntmssvc -  File not found
NetSvcs: NWCWorkstation -  File not found
NetSvcs: Nwsapagent -  File not found
NetSvcs: SRService -  File not found
NetSvcs: Wmi - C:\Windows\System32\wmi.dll (Microsoft Corporation)
NetSvcs: WmdmPmSp -  File not found
NetSvcs: LogonHours -  File not found
NetSvcs: PCAudit -  File not found
NetSvcs: helpsvc -  File not found
NetSvcs: uploadmgr -  File not found
 
[color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
 
[2010/08/02 13:21:17 | 000,000,000 | ---D | C] -- C:\Users\Jeff\Desktop\backups
[2010/08/02 11:40:19 | 000,000,000 | ---D | C] -- C:\Program Files\Adobe
[2010/07/29 12:27:28 | 000,000,000 | ---D | C] -- C:\Users\Jeff\AppData\Local\SFR
[2010/07/28 19:12:36 | 000,000,000 | ---D | C] -- C:\Users\Jeff\AppData\Roaming\SFR
[2010/07/28 19:08:55 | 000,110,080 | ---- | C] (ZTE Corporation) -- C:\Windows\System32\drivers\ZTEusbnet.sys
[2010/07/28 19:08:55 | 000,105,344 | ---- | C] (ZTE Incorporated) -- C:\Windows\System32\drivers\ZTEusbnmea.sys
[2010/07/28 19:08:55 | 000,104,960 | ---- | C] (ZTE Incorporated) -- C:\Windows\System32\drivers\ZTEusbvoice.sys
[2010/07/28 19:08:55 | 000,104,960 | ---- | C] (ZTE Incorporated) -- C:\Windows\System32\drivers\ZTEusbser6k.sys
[2010/07/28 19:08:55 | 000,104,960 | ---- | C] (ZTE Incorporated) -- C:\Windows\System32\drivers\ZTEusbmdm6k.sys
[2010/07/28 19:08:55 | 000,007,680 | ---- | C] (ZTE Incorporated) -- C:\Windows\System32\drivers\massfilter.sys
[2010/07/28 19:08:28 | 000,000,000 | ---D | C] -- C:\Program Files\SFR
[2010/07/15 09:12:21 | 000,000,000 | ---D | C] -- C:\Users\Jeff\Desktop\Pixies
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
 
[color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
 
[2010/08/04 17:35:46 | 000,000,416 | -H-- | M] () -- C:\Windows\tasks\User_Feed_Synchronization-{97D72ACA-7D15-4CDC-82E8-1740C8E0B1C6}.job
[2010/08/04 17:31:13 | 002,359,296 | -HS- | M] () -- C:\Users\Jeff\ntuser.dat
[2010/08/04 17:30:00 | 000,000,338 | ---- | M] () -- C:\Windows\tasks\Recovery DVD Creator.job
[2010/08/04 17:30:00 | 000,000,338 | ---- | M] () -- C:\Windows\tasks\Extension de garantie.job
[2010/08/04 17:13:36 | 000,003,168 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
[2010/08/04 17:13:36 | 000,003,168 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
[2010/08/04 15:30:18 | 001,497,408 | ---- | M] () -- C:\Windows\System32\PerfStringBackup.INI
[2010/08/04 15:30:18 | 000,678,956 | ---- | M] () -- C:\Windows\System32\perfh00C.dat
[2010/08/04 15:30:18 | 000,595,506 | ---- | M] () -- C:\Windows\System32\perfh009.dat
[2010/08/04 15:30:18 | 000,128,004 | ---- | M] () -- C:\Windows\System32\perfc00C.dat
[2010/08/04 15:30:18 | 000,104,940 | ---- | M] () -- C:\Windows\System32\perfc009.dat
[2010/08/04 15:13:58 | 000,000,006 | -H-- | M] () -- C:\Windows\tasks\SA.DAT
[2010/08/04 15:13:32 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2010/08/04 15:12:45 | 1878,286,336 | -HS- | M] () -- C:\hiberfil.sys
[2010/08/04 15:10:33 | 000,524,288 | -HS- | M] () -- C:\Users\Jeff\NTUSER.DAT{3a539871-6a70-11db-887c-d362bd253390}.TMContainer00000000000000000001.regtrans-ms
[2010/08/04 15:10:33 | 000,065,536 | -HS- | M] () -- C:\Users\Jeff\NTUSER.DAT{3a539871-6a70-11db-887c-d362bd253390}.TM.blf
[2010/08/04 15:10:27 | 003,435,619 | -H-- | M] () -- C:\Users\Jeff\AppData\Local\IconCache.db
[2010/08/04 15:00:56 | 000,072,192 | ---- | M] () -- C:\Users\Jeff\Desktop\Cam.doc
[2010/08/04 09:53:10 | 000,015,746 | ---- | M] () -- C:\Users\Jeff\Documents\cc_20100804_095257.reg
[2010/08/02 11:40:39 | 000,001,850 | ---- | M] () -- C:\Users\Public\Desktop\Adobe Reader 8.lnk
[2010/08/02 09:55:29 | 000,064,512 | ---- | M] () -- C:\Users\Jeff\Desktop\Memento.doc
[2010/07/29 16:29:28 | 000,143,872 | ---- | M] () -- C:\Users\Jeff\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
 
[color=#E56717]========== Files Created - No Company Name ==========[/color]
 
[2010/08/04 15:00:55 | 000,072,192 | ---- | C] () -- C:\Users\Jeff\Desktop\Cam.doc
[2010/08/04 09:53:02 | 000,015,746 | ---- | C] () -- C:\Users\Jeff\Documents\cc_20100804_095257.reg
[2010/08/02 11:40:39 | 000,001,850 | ---- | C] () -- C:\Users\Public\Desktop\Adobe Reader 8.lnk
[2010/02/13 16:05:31 | 000,000,038 | ---- | C] () -- C:\Windows\avisplitter.ini
[2010/02/13 16:05:25 | 003,596,288 | ---- | C] () -- C:\Windows\System32\qt-dx331.dll
[2010/02/13 16:05:25 | 000,881,664 | ---- | C] () -- C:\Windows\System32\xvidcore.dll
[2010/02/13 16:05:25 | 000,205,824 | ---- | C] () -- C:\Windows\System32\xvidvfw.dll
[2010/02/13 16:05:22 | 000,085,504 | ---- | C] () -- C:\Windows\System32\ff_vfw.dll
[2010/02/13 16:05:22 | 000,000,547 | ---- | C] () -- C:\Windows\System32\ff_vfw.dll.manifest
[2010/02/01 11:58:55 | 000,178,176 | ---- | C] () -- C:\Windows\System32\unrar.dll
[2009/11/07 10:16:54 | 000,117,248 | ---- | C] () -- C:\Windows\System32\EhStorAuthn.dll
[2009/09/12 14:38:02 | 000,000,434 | ---- | C] () -- C:\Windows\BRWMARK.INI
[2009/09/12 14:38:02 | 000,000,027 | ---- | C] () -- C:\Windows\BRPP2KA.INI
[2009/01/22 19:26:19 | 000,027,648 | ---- | C] () -- C:\Windows\System32\AVSredirect.dll
[2008/05/02 12:13:51 | 000,237,568 | ---- | C] () -- C:\Windows\System32\lame_enc.dll
[2007/05/25 08:04:18 | 001,060,424 | ---- | C] () -- C:\Windows\System32\WdfCoInstaller01000.dll
[2007/05/25 08:04:15 | 000,159,744 | ---- | C] () -- C:\Windows\System32\atitmmxx.dll
[2007/05/25 08:04:08 | 000,015,190 | ---- | C] () -- C:\Windows\M2000Twn.ini
[2007/05/24 23:20:20 | 000,016,384 | ---- | C] () -- C:\Windows\System32\DsrSleep.dll
[2007/05/24 23:19:07 | 000,162,304 | ---- | C] () -- C:\Windows\System32\ztvunrar36.dll
[2007/05/24 23:19:07 | 000,077,312 | ---- | C] () -- C:\Windows\System32\ztvunace26.dll
[2007/02/13 09:48:38 | 000,000,000 | ---- | C] () -- C:\Windows\System32\px.ini
[2006/11/02 14:35:32 | 000,005,632 | ---- | C] () -- C:\Windows\System32\sysprepMCE.dll
[2006/11/02 09:40:29 | 000,013,750 | ---- | C] () -- C:\Windows\System32\pacerprf.ini
 
[color=#E56717]========== Custom Scans ==========[/color]
 
 
[color=#A23BEC]< %SYSTEMDRIVE%\*.exe >[/color]
 
 
[color=#A23BEC]< MD5 for: AGP440.SYS  >[/color]
[2008/01/19 09:42:25 | 000,056,376 | ---- | M] (Microsoft Corporation) MD5=13F9E33747E6B41A3FF305C37DB0D360 -- C:\Windows\System32\DriverStore\FileRepository\machine.inf_51b95d75\AGP440.sys
[2008/01/19 09:42:25 | 000,056,376 | ---- | M] (Microsoft Corporation) MD5=13F9E33747E6B41A3FF305C37DB0D360 -- C:\Windows\System32\DriverStore\FileRepository\machine.inf_f750e484\AGP440.sys
[2008/01/19 09:42:25 | 000,056,376 | ---- | M] (Microsoft Corporation) MD5=13F9E33747E6B41A3FF305C37DB0D360 -- C:\Windows\winsxs\x86_machine.inf_31bf3856ad364e35_6.0.6001.18000_none_ba12ed3bbeb0d97a\AGP440.sys
[2008/01/19 09:42:25 | 000,056,376 | ---- | M] (Microsoft Corporation) MD5=13F9E33747E6B41A3FF305C37DB0D360 -- C:\Windows\winsxs\x86_machine.inf_31bf3856ad364e35_6.0.6002.18005_none_bbfe6647bbd2a4c6\AGP440.sys
[2006/11/02 11:49:52 | 000,053,864 | ---- | M] (Microsoft Corporation) MD5=EF23439CDD587F64C2C1B8825CEAD7D8 -- C:\Windows\System32\drivers\AGP440.sys
[2006/11/02 11:49:52 | 000,053,864 | ---- | M] (Microsoft Corporation) MD5=EF23439CDD587F64C2C1B8825CEAD7D8 -- C:\Windows\System32\DriverStore\FileRepository\machine.inf_920a2c1f\AGP440.sys
 
[color=#A23BEC]< MD5 for: ATAPI.SYS  >[/color]
[2009/04/11 08:32:26 | 000,019,944 | ---- | M] (Microsoft Corporation) MD5=1F05B78AB91C9075565A9D8A4B880BC4 -- C:\Windows\System32\drivers\atapi.sys
[2009/04/11 08:32:26 | 000,019,944 | ---- | M] (Microsoft Corporation) MD5=1F05B78AB91C9075565A9D8A4B880BC4 -- C:\Windows\System32\DriverStore\FileRepository\mshdc.inf_b12d8e84\atapi.sys
[2009/04/11 08:32:26 | 000,019,944 | ---- | M] (Microsoft Corporation) MD5=1F05B78AB91C9075565A9D8A4B880BC4 -- C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.0.6002.18005_none_df23a1261eab99e8\atapi.sys
[2008/01/19 09:41:30 | 000,021,560 | ---- | M] (Microsoft Corporation) MD5=2D9C903DC76A66813D350A562DE40ED9 -- C:\Windows\System32\DriverStore\FileRepository\mshdc.inf_cc18792d\atapi.sys
[2008/01/19 09:41:30 | 000,021,560 | ---- | M] (Microsoft Corporation) MD5=2D9C903DC76A66813D350A562DE40ED9 -- C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.0.6001.18000_none_dd38281a2189ce9c\atapi.sys
[2006/11/02 11:49:36 | 000,019,048 | ---- | M] (Microsoft Corporation) MD5=4F4FCB8B6EA06784FB6D475B7EC7300F -- C:\Windows\System32\DriverStore\FileRepository\mshdc.inf_c6c2e699\atapi.sys
 
[color=#A23BEC]< MD5 for: CNGAUDIT.DLL  >[/color]
[2006/11/02 11:46:03 | 000,011,776 | ---- | M] (Microsoft Corporation) MD5=7F15B4953378C8B5161D65C26D5FED4D -- C:\Windows\System32\cngaudit.dll
[2006/11/02 11:46:03 | 000,011,776 | ---- | M] (Microsoft Corporation) MD5=7F15B4953378C8B5161D65C26D5FED4D -- C:\Windows\winsxs\x86_microsoft-windows-cngaudit-dll_31bf3856ad364e35_6.0.6000.16386_none_e62d292932a96ce6\cngaudit.dll
 
[color=#A23BEC]< MD5 for: IASTORV.SYS  >[/color]
[2008/01/19 09:42:51 | 000,235,064 | ---- | M] (Intel Corporation) MD5=54155EA1B0DF185878E0FC9EC3AC3A14 -- C:\Windows\System32\DriverStore\FileRepository\iastorv.inf_c9df7691\iaStorV.sys
[2008/01/19 09:42:51 | 000,235,064 | ---- | M] (Intel Corporation) MD5=54155EA1B0DF185878E0FC9EC3AC3A14 -- C:\Windows\winsxs\x86_iastorv.inf_31bf3856ad364e35_6.0.6001.18000_none_af11527887c7fa8f\iaStorV.sys
[2006/11/02 11:51:25 | 000,232,040 | ---- | M] (Intel Corporation) MD5=C957BF4B5D80B46C5017BF0101E6C906 -- C:\Windows\System32\drivers\iaStorV.sys
[2006/11/02 11:51:25 | 000,232,040 | ---- | M] (Intel Corporation) MD5=C957BF4B5D80B46C5017BF0101E6C906 -- C:\Windows\System32\DriverStore\FileRepository\iastorv.inf_37cdafa4\iaStorV.sys
 
[color=#A23BEC]< MD5 for: NETLOGON.DLL  >[/color]
[2006/11/02 11:46:11 | 000,559,616 | ---- | M] (Microsoft Corporation) MD5=889A2C9F2AACCD8F64EF50AC0B3D553B -- C:\Windows\winsxs\x86_microsoft-windows-security-netlogon_31bf3856ad364e35_6.0.6000.16386_none_fb80f5473b0ed783\netlogon.dll
[2009/04/11 08:28:23 | 000,592,896 | ---- | M] (Microsoft Corporation) MD5=95DAECF0FB120A7B5DA679CC54E37DDE -- C:\Windows\System32\netlogon.dll
[2009/04/11 08:28:23 | 000,592,896 | ---- | M] (Microsoft Corporation) MD5=95DAECF0FB120A7B5DA679CC54E37DDE -- C:\Windows\winsxs\x86_microsoft-windows-security-netlogon_31bf3856ad364e35_6.0.6002.18005_none_ffa3304f351bb3a3\netlogon.dll
[2008/01/19 09:35:36 | 000,592,384 | ---- | M] (Microsoft Corporation) MD5=A8EFC0B6E75B789F7FD3BA5025D4E37F -- C:\Windows\winsxs\x86_microsoft-windows-security-netlogon_31bf3856ad364e35_6.0.6001.18000_none_fdb7b74337f9e857\netlogon.dll
 
[color=#A23BEC]< MD5 for: NVSTOR.SYS  >[/color]
[2006/11/02 11:50:13 | 000,040,040 | ---- | M] (NVIDIA Corporation) MD5=9E0BA19A28C498A6D323D065DB76DFFC -- C:\Windows\System32\drivers\nvstor.sys
[2006/11/02 11:50:13 | 000,040,040 | ---- | M] (NVIDIA Corporation) MD5=9E0BA19A28C498A6D323D065DB76DFFC -- C:\Windows\System32\DriverStore\FileRepository\nvraid.inf_733654ff\nvstor.sys
[2008/01/19 09:42:09 | 000,045,112 | ---- | M] (NVIDIA Corporation) MD5=ABED0C09758D1D97DB0042DBB2688177 -- C:\Windows\System32\DriverStore\FileRepository\nvraid.inf_31c3d71d\nvstor.sys
[2008/01/19 09:42:09 | 000,045,112 | ---- | M] (NVIDIA Corporation) MD5=ABED0C09758D1D97DB0042DBB2688177 -- C:\Windows\winsxs\x86_nvraid.inf_31bf3856ad364e35_6.0.6001.18000_none_39dac327befea467\nvstor.sys
 
[color=#A23BEC]< MD5 for: SCECLI.DLL  >[/color]
[2008/01/19 09:36:19 | 000,177,152 | ---- | M] (Microsoft Corporation) MD5=28B84EB538F7E8A0FE8B9299D591E0B9 -- C:\Windows\winsxs\x86_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.0.6001.18000_none_380de25bd91b6f12\scecli.dll
[2006/11/02 11:46:12 | 000,176,640 | ---- | M] (Microsoft Corporation) MD5=80E2839D05CA5970A86D7BE2A08BFF61 -- C:\Windows\winsxs\x86_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.0.6000.16386_none_35d7205fdc305e3e\scecli.dll
[2009/04/11 08:28:24 | 000,177,152 | ---- | M] (Microsoft Corporation) MD5=8FC182167381E9915651267044105EE1 -- C:\Windows\System32\scecli.dll
[2009/04/11 08:28:24 | 000,177,152 | ---- | M] (Microsoft Corporation) MD5=8FC182167381E9915651267044105EE1 -- C:\Windows\winsxs\x86_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.0.6002.18005_none_39f95b67d63d3a5e\scecli.dll
 
[color=#A23BEC]< %systemroot%\*. /mp /s >[/color]
 
[color=#A23BEC]< %systemroot%\system32\*.dll /lockedfiles >[/color]
[2009/04/11 08:27:47 | 000,241,128 | ---- | M] (Microsoft Corporation)[b] Unable to obtain MD5[/b] -- C:\Windows\System32\rsaenh.dll
[2009/04/11 08:28:23 | 000,228,352 | ---- | M] (Microsoft Corporation)[b] Unable to obtain MD5[/b] -- C:\Windows\System32\SLC.dll
 
[color=#A23BEC]< %systemroot%\Tasks\*.job /lockedfiles >[/color]
 
[color=#E56717]========== Alternate Data Streams ==========[/color]
 
@Alternate Data Stream - 76 bytes -> C:\Users\Jeff\Documents\Updater5:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Users\Jeff\Documents\Mes fichiers reçus:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Users\Jeff\Documents\gegl-0.0:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Users\Jeff\Documents\Bluetooth:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Users\Jeff\Documents\backups:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Users\Jeff\Documents\Administratif:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Users\Jeff\Desktop\Videos:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Users\Jeff\Desktop\TEXTES DIVERS:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Users\Jeff\Desktop\SKETCHS:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Users\Jeff\Desktop\Projet Sonore    La Plage:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Users\Jeff\Desktop\Privé:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Users\Jeff\Desktop\PORT:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Users\Jeff\Desktop\Pixies:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Users\Jeff\Desktop\PARTOCHES:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Users\Jeff\Desktop\Nouveau spectacle:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Users\Jeff\Desktop\Musiques Lune:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Users\Jeff\Desktop\Maud:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Users\Jeff\Desktop\LES FIGURES LIBRES DE JEFF:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Users\Jeff\Desktop\Jeune Public Jeff:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Users\Jeff\Desktop\Jacques Dutronc - L'hotesse de l'air.mp3:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Users\Jeff\Desktop\HOUSE S 06:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Users\Jeff\Desktop\Feu d'artifice lucioles.wav:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Users\Jeff\Desktop\Faith (sans intro).wav:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Users\Jeff\Desktop\Effets WAV:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Users\Jeff\Desktop\Effets MP3:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Users\Jeff\Desktop\Ecole des femmes:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Users\Jeff\Desktop\CD Qui a croqué 2010:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Users\Jeff\Desktop\Cd Figures LIbres:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Users\Jeff\Desktop\Bande son provisoire:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Users\Jeff\Desktop\backups:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Users\Jeff\Desktop\Audio bateau.wav:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Users\Jeff\Desktop\Audio bateau.mp3:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Users\Jeff\Desktop\AFFICHES:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Users\Jeff\Desktop\- 01 - George Michael - Faith.mp3:Roxio EMC Stream
@Alternate Data Stream - 64 bytes -> C:\Users\Jeff\Desktop\Audio bateau(1).mp3:TOC.WMV
< End of report >


et

Code: Tout sélectionner

OTL Extras logfile created on: 04/08/2010 17:32:33 - Run 1
OTL by OldTimer - Version 3.2.9.1     Folder = C:\tools
Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18928)
Locale: 0000040C | Country: France | Language: FRA | Date Format: dd/MM/yyyy
 
2,00 Gb Total Physical Memory | 1,00 Gb Available Physical Memory | 56,00% Memory free
4,00 Gb Paging File | 3,00 Gb Available in Paging File | 78,00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 141,04 Gb Total Space | 33,66 Gb Free Space | 23,87% Space Free | Partition Type: NTFS
D: Drive not present or media not loaded
Drive E: | 42,76 Mb Total Space | 0,00 Mb Free Space | 0,00% Space Free | Partition Type: CDFS
F: Drive not present or media not loaded
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded
 
Computer Name: LOSSANTOS
Current User Name: Jeff
Logged in as Administrator.
 
Current Boot Mode: Normal
Scan Mode: Current user
Company Name Whitelist: Off
Skip Microsoft Files: Off
File Age = 30 Days
Output = Minimal
 
[color=#E56717]========== Extra Registry (SafeList) ==========[/color]
 
 
[color=#E56717]========== File Associations ==========[/color]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\System32\control.exe (Microsoft Corporation)
.hlp [@ = hlpfile] -- C:\Windows\winhlp32.exe (Microsoft Corporation)
.html [@ = FirefoxHTML] -- C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)
 
[color=#E56717]========== Shell Spawning ==========[/color]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
hlpfile [open] -- %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation)
htmlfile [edit] -- Reg Error: Key error.
htmlfile [print] -- rundll32.exe %windir%\system32\mshtml.dll,PrintHTML "%1"
http [open] -- "C:\Program Files\Mozilla Firefox\firefox.exe" -requestPending -osint -url "%1" (Mozilla Corporation)
https [open] -- "C:\Program Files\Mozilla Firefox\firefox.exe" -requestPending -osint -url "%1" (Mozilla Corporation)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l (Microsoft Corporation)
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe /separate,/idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /separate,/e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
 
[color=#E56717]========== Security Center Settings ==========[/color]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1
"UacDisableNotify" = 1
"InternetSettingsDisableNotify" = 1
"AutoUpdateDisableNotify" = 1
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
"DisableMonitoring" = 1
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]
"DisableMonitoring" = 1
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]
"DisableMonitoring" = 1
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
"VistaSp1" = Reg Error: Unknown registry data type -- File not found
"VistaSp2" = Reg Error: Unknown registry data type -- File not found
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
"DoNotAllowExceptions" = 0
 
[color=#E56717]========== Authorized Applications List ==========[/color]
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
 
 
[color=#E56717]========== Vista Active Open Ports Exception List ==========[/color]
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{81834EFA-C65D-4165-BE0D-5B320323029C}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=svchost.exe |
"{C4C6A2E1-8491-48DB-ADA2-F0C73DBB8999}" = lport=2869 | protocol=6 | dir=in | app=system |
 
[color=#E56717]========== Vista Active Application Exception List ==========[/color]
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{025E0E2E-AA1D-4749-B1CF-050A007B33E6}" = dir=in | app=c:\program files\windows live\messenger\wlcsdk.exe |
"{11C627BE-F1F2-41A3-954C-3FF79F0CFC24}" = protocol=6 | dir=in | app=c:\program files\pinnacle\videospin\programs\umi.exe |
"{1EF8A818-FE71-421F-8507-9DDFD1FBC501}" = protocol=17 | dir=in | app=c:\program files\pinnacle\videospin\programs\umi.exe |
"{2401A064-8D44-40AD-8EDE-AC816F55BBD9}" = dir=in | app=c:\program files\hp\digital imaging\bin\hpqgplgtupl.exe |
"{4482B0D8-125A-4FD0-99C9-FD6518517D11}" = protocol=17 | dir=in | app=c:\program files\common files\aol\acs\aoldial.exe |
"{45D9B8C8-54DE-4C99-87F2-A584BF33DE15}" = protocol=17 | dir=in | app=c:\program files\msn messenger\msnmsgr.exe |
"{46C5DF63-C805-4F03-A537-D75FD63F2B90}" = protocol=6 | dir=in | app=c:\program files\pinnacle\videospin\programs\videospin.exe |
"{47B69421-B04F-441A-90A4-E0D2941DD6B9}" = dir=in | app=c:\program files\hp\hp software update\hpwucli.exe |
"{49BD846E-FCB2-45A8-B5BB-E055B5A54AB0}" = dir=in | app=c:\program files\hp\digital imaging\bin\hpoews01.exe |
"{511CD7E9-E37E-4525-BEC5-9AB101598B90}" = dir=in | app=c:\program files\windows live\messenger\msnmsgr.exe |
"{5372646A-8646-4B77-A572-EA9BBE5AB9A4}" = protocol=17 | dir=in | app=c:\program files\msn messenger\msnmsgr.exe |
"{542CF918-E509-493F-9206-1B76EA06E648}" = dir=in | app=c:\program files\hp\digital imaging\smart web printing\smartwebprintexe.exe |
"{58AF8569-962C-44B3-917D-7A95623A75F5}" = protocol=6 | dir=in | app=c:\program files\msn messenger\msnmsgr.exe |
"{5CF28A18-4973-438A-BCD4-209C11C21F0B}" = protocol=6 | dir=in | app=c:\program files\common files\aol\topspeed\3.0\aoltpsd3.exe |
"{5E73B93B-BCE4-4936-B5D4-1347CFC75FAB}" = protocol=17 | dir=in | app=c:\program files\common files\aol\loader\aolload.exe |
"{63861214-B769-4F56-8928-10D4BB300A31}" = protocol=6 | dir=in | app=c:\program files\itunes\itunes.exe |
"{67AEB356-84A0-422C-A3E8-B6CA55444C24}" = protocol=17 | dir=in | app=c:\program files\msn messenger\msnmsgr.exe |
"{693EF5F2-B85A-45EF-A4DF-5E938222EADB}" = dir=in | app=c:\program files\hp\digital imaging\bin\hpqste08.exe |
"{6F38E402-D24E-4A9B-9D02-4AEC168C4D67}" = protocol=6 | dir=in | app=c:\program files\pinnacle\videospin\programs\rm.exe |
"{75023CA3-71EB-47B5-84D4-B6F3B3D4770B}" = protocol=6 | dir=in | app=c:\program files\aol 9.0 vr\waol.exe |
"{78077C35-695F-4C98-B107-27723EFB898D}" = protocol=17 | dir=in | app=c:\program files\pinnacle\videospin\programs\videospin.exe |
"{7B41F0EA-E537-4A0A-A294-497F6CEC98C1}" = dir=in | app=c:\program files\hp\digital imaging\bin\hpqtra08.exe |
"{7BE0C765-901E-4BD5-91F0-FD0547D98A11}" = protocol=17 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe |
"{7F8EB742-0F25-4C2F-ABA3-F17BD94AF68E}" = protocol=17 | dir=in | app=c:\program files\common files\aol\acs\aolacsd.exe |
"{8061C73B-26E3-49AA-BC08-B96E86C00258}" = protocol=17 | dir=in | app=c:\program files\aol 9.0 vr\waol.exe |
"{82189605-0F08-4CA1-BFA5-0A93F5FFD8EB}" = protocol=6 | dir=in | app=c:\program files\common files\aol\loader\aolload.exe |
"{87189187-7597-4D78-BB12-9ED3C25D2A42}" = protocol=17 | dir=in | app=c:\program files\pinnacle\videospin\programs\rm.exe |
"{A2E78BBC-2072-41CC-91A2-AFFE02798F17}" = protocol=17 | dir=in | app=c:\program files\common files\aol\system information\sinf.exe |
"{A561C6EB-5C42-4756-AB2C-3095FE2381B9}" = dir=in | app=c:\program files\hp\digital imaging\bin\hpqusgh.exe |
"{A5813B68-95BE-4CC7-81F3-B9A180A0C34C}" = protocol=6 | dir=in | app=c:\program files\msn messenger\msnmsgr.exe |
"{A7FA285D-3F94-4DFE-AFD1-BF4E2425279B}" = dir=in | app=c:\program files\hp\digital imaging\bin\hpqkygrp.exe |
"{A903337C-571B-49C4-8123-895FE7425EBA}" = dir=in | app=c:\program files\hp\digital imaging\bin\hpfccopy.exe |
"{A9959F99-12EF-4564-A5CD-A54DD5EFCBD7}" = protocol=6 | dir=in | app=c:\program files\skype\phone\skype.exe |
"{ADB197A4-7A31-471B-9317-A42453AB71F1}" = protocol=6 | dir=in | app=c:\program files\ivt corporation\bluesoleil\bluesoleil.exe |
"{AE369D16-DEAB-4613-B401-7C6DD1E5896A}" = protocol=17 | dir=in | app=c:\program files\itunes\itunes.exe |
"{B1601CBD-5E7E-42BA-8BE4-AF114AD1CF60}" = dir=in | app=c:\program files\hp\digital imaging\bin\hpiscnapp.exe |
"{B76B6D9C-4451-44A6-9201-EF67C9864786}" = dir=in | app=c:\program files\hp\digital imaging\bin\hposid01.exe |
"{B78101C1-1EE8-471F-BFE2-02088922FED6}" = protocol=17 | dir=in | app=c:\program files\ivt corporation\bluesoleil\bluesoleil.exe |
"{BD16DBA7-3938-4651-A078-89434B2691D5}" = protocol=6 | dir=in | app=c:\program files\common files\aol\acs\aolacsd.exe |
"{C1A39379-25EC-46EB-A211-5A3DBF74D3CD}" = dir=in | app=c:\program files\common files\hp\digital imaging\bin\hpqphotocrm.exe |
"{C4485286-1E7F-4475-98AD-E68DC0607FA2}" = protocol=6 | dir=in | app=c:\program files\common files\aol\acs\aoldial.exe |
"{C59B52AB-4D71-4430-B4C7-8B3EAF0B9D61}" = dir=in | app=c:\program files\hp\digital imaging\bin\hpqusgm.exe |
"{C5AF90CA-608B-40D7-9882-13BC960D051B}" = protocol=6 | dir=in | app=c:\program files\msn messenger\msnmsgr.exe |
"{CB3B7562-CCCF-49B8-8A20-00310F3B765F}" = dir=in | app=c:\program files\hp\digital imaging\bin\hpqgpc01.exe |
"{D758B1C1-DFD3-44E6-A06C-0BDC21AEA54E}" = protocol=6 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe |
"{E3F726DF-5228-4E1F-B0D5-6B03E1958F05}" = dir=in | app=c:\program files\hp\digital imaging\bin\hpqcopy2.exe |
"{E48A9989-A01F-470B-910D-044B0A648E43}" = protocol=17 | dir=in | app=c:\program files\skype\phone\skype.exe |
"{F761FB81-43F1-49D2-B376-428C1641D980}" = protocol=6 | dir=in | app=c:\program files\common files\aol\system information\sinf.exe |
"{FA472820-C542-44B7-A9DF-C041AE4AF471}" = protocol=17 | dir=in | app=c:\program files\common files\aol\topspeed\3.0\aoltpsd3.exe |
"TCP Query User{194F9BF7-82E4-43BF-89F5-107F6927C93E}C:\program files\internet explorer\iexplore.exe" = protocol=6 | dir=in | app=c:\program files\internet explorer\iexplore.exe |
"TCP Query User{67559FB4-3DA3-442B-9B18-B65B7761BB6A}C:\program files\real\realplayer\realplay.exe" = protocol=6 | dir=in | app=c:\program files\real\realplayer\realplay.exe |
"TCP Query User{E1101309-3DDF-485E-B6AF-55027EE81B22}C:\program files\emule\emule.exe" = protocol=6 | dir=in | app=c:\program files\emule\emule.exe |
"UDP Query User{451BE23F-A43A-4898-B834-97F790B71AC4}C:\program files\internet explorer\iexplore.exe" = protocol=17 | dir=in | app=c:\program files\internet explorer\iexplore.exe |
"UDP Query User{5660E82E-A3C2-477B-A437-FD269B17F4BF}C:\program files\emule\emule.exe" = protocol=17 | dir=in | app=c:\program files\emule\emule.exe |
"UDP Query User{B52F19DE-F4FC-4A56-80A3-8583FEB8E903}C:\program files\real\realplayer\realplay.exe" = protocol=17 | dir=in | app=c:\program files\real\realplayer\realplay.exe |
 
[color=#E56717]========== HKEY_LOCAL_MACHINE Uninstall List ==========[/color]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{07FB17D8-7DB6-4F06-80C4-8BE1719CB6A1}" = hpWLPGInstaller
"{09E9F3B1-2965-3D8B-F624-2F44D99B53B0}" = Catalyst Control Center Graphics Light
"{0ED40D2A-7131-4FE7-941E-5C329336F712}" = HDReg France
"{0F367CA3-3B2F-43F9-A44A-25A8EE69E45D}" = Scan
"{175F0111-2968-4935-8F70-33108C6A4DE3}" = MarketResearch
"{18455581-E099-4BA8-BC6B-F34B2F06600C}" = Google Toolbar for Internet Explorer
"{1EF377AC-035A-48BE-8EF7-D18D36308CE9}" = OFFICE One 7.0
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{205C6BDD-7B73-42DE-8505-9A093F35A238}" = Outil de téléchargement Windows Live
"{21A2F5EE-1DC5-488A-BE7E-E526F8C61488}" = DeviceDiscovery
"{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}" = MSVCRT
"{2318C2B1-4965-11d4-9B18-009027A5CD4F}" = Google Toolbar for Internet Explorer
"{28006915-2739-4EBE-B5E8-49B25D32EB33}" = Atheros Driver Installation Program
"{2EBC713F-3022-A21B-6266-376ED7C43C07}" = CCC Help French
"{2EEA7AA4-C203-4b90-A34F-19FB7EF1C81C}" = BufferChm
"{3912D529-02BC-4CA8-B5ED-0D0C20EB6003}" = ATK Hotkey
"{3CE73C5D-D8F0-D6D0-E5AB-39A798BF4571}" = Skins
"{3EE33958-7381-4E7B-A4F3-6E43098E9E9C}" = Browser Address Error Redirector
"{4160DC5B-4C56-D0C3-C5FD-F5BDAD3C882B}" = ATI Catalyst Install Manager
"{42E2EEB2-D48E-4A47-B181-32ECA031D93B}" = DJ_AIO_06_F2400_SW_Min
"{43CDF946-F5D9-4292-B006-BA0D92013021}" = WebReg
"{44CDBD1B-89FB-4E02-8319-2A4C550F664A}" = RTC Client API v1.2
"{46ABBC54-1872-4AA3-95E2-F2C063A63F31}" = Installation Windows Live
"{4A57592C-FF92-4083-97A9-92783BD5AFB4}" = USB2.0 350K WebCam
"{4A70EF07-7F88-4434-BB61-D1DE8AE93DD4}" = SolutionCenter
"{585776BC-4BD6-4BD2-A19A-1D6CB44A403B}" = iTunes
"{5D2683BE-2C44-4DB5-BECD-87B324077A7F}" = OFFICE One Notes v7
"{6153EBDC-A52B-6B24-4A3C-5CC8F85BE0DF}" = Catalyst Control Center Graphics Full New
"{6173A4FC-D42D-69A6-52CA-A30496389760}" = ccc-core-static
"{63FF21C9-A810-464F-B60A-3111747B1A6D}" = GPBaseService2
"{68A10D12-0D0F-4212-BDE6-D87FAD32A8FA}" = SmartWebPrinting
"{6956856F-B6B3-4BE0-BA0B-8F495BE32033}" = Apple Software Update
"{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}" = Windows Media Player Firefox Plugin
"{6B1CB38D-E2E4-4a30-933D-EFDEBA76AD9C}" = Microsoft Works
"{6B2FFB21-AC88-45C3-9A7D-4BB3E744EC91}" = HPSSupply
"{6BAA71B6-8F43-4C72-931A-3354ABB0258A}" = F2400
"{6BBA26E9-AB03-4FE7-831A-3535584CA002}" = Toolbox
"{7059BDA7-E1DB-442C-B7A1-6144596720A4}" = HP Update
"{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
"{770F1BEC-2871-4E70-B837-FB8525FFA3B1}" = Windows Live Messenger
"{7DFBD5A5-F88B-ED78-E5FD-FB994138BB25}" = ccc-utility
"{82C7B308-0BDD-49D8-8EA5-9CD3A3F9DF41}" = Windows Live Call
"{85C5827E-106F-4497-8066-B7CFEBBEA91D}" = OFFICE One Menu v7
"{87DEF84E-51A5-4A0E-91C2-E012E92DE69B}" = OFFICE One QuickZip v7
"{8A25392D-C5D2-4E79-A2BD-C15DDC5B0959}" = Bonjour
"{92127AF5-FDD8-4ADF-BC40-C356C9EE0B7D}" = 32 Bit HP CIO Components Installer
"{95120000-00B9-0409-0000-0000000FF1CE}" = Microsoft Application Error Reporting
"{97C82B44-D408-4F14-9252-47FC1636D23E}_is1" = IZArc 4.1
"{9E520B22-546E-4AD3-8958-7D1EB8587AB1}" = Music Transfer Utility Ver.1
"{9EE7095B-F74E-4DC9-FAF7-75C940A1C3E9}" = Catalyst Control Center Localization French
"{A3FEC306-FBFF-4B0D-95B9-F9C67C65079E}" = Brother MFL-Pro Suite
"{A49F249F-0C91-497F-86DF-B2585E8E76B7}" = Microsoft Visual C++ 2005 Redistributable
"{A7DB362E-16DC-4E29-8A34-E74381E00B5B}" = Adobe Shockwave Player
"{AC76BA86-7AD7-1036-7B44-A81300000003}" = Adobe Reader 8.1.3 - Français
"{AC76BA86-7AD7-5464-3428-800000000003}" = Spelling Dictionaries Support For Adobe Reader 8
"{AE46ABD3-D625-467F-B5A7-8D3FFF077F0D}" = Realtek 8139 and 8139C+ Ethernet Network Card Driver for Windows Vista
"{AE6ECFF9-FD33-48A3-B4AC-89263CC393A8}" = ImageMixer 3 SE Ver.4 Video Tools
"{AE8705FB-E13C-40A9-8A2D-68D6733FBFC2}" = Status
"{AF98AF15-161E-42EC-9008-1CCF9BB83961}" = Bluesoleil3.2.1.2 Release 070314
"{AFA20D47-69C3-4030-8DF8-D37466E70F13}" = Apple Mobile Device Support
"{B243ABE9-57C2-4B97-BA6B-37DF6C0208ED}" = OFFICE One Safety-Box v7
"{B5DCE5D7-6FDD-D5C2-C6B7-14E264E695C9}" = Catalyst Control Center Core Implementation
"{B7FB0C86-41A4-4402-9A33-912C462042A0}" = Roxio Creator 9 LE
"{B8F3555E-B918-445E-97D1-BC4861C4EF59}" = OFFICE One ClipArt v7
"{BA147801-8946-4BBE-BE17-A2199CE52C81}" = OFFICE One 150 Templates v7
"{BD7204BA-DD64-499E-9B55-6A282CDF4FA4}" = Destinations
"{C43326F5-F135-4551-8270-7F7ABA0462E1}" = HPProductAssistant
"{C75CDBA2-3C86-481e-BD10-BDDA758F9DFF}" = hpPrintProjects
"{CAE4213F-F797-439D-BD9E-79B71D115BE3}" = HPPhotoGadget
"{CAE4E520-4695-4A96-8661-B62FA5FB669E}" = ImageMixer 3 SE Ver.4 Transfer Utility
"{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}" = Microsoft .NET Framework 1.1
"{CC0C788C-7C68-47A9-BFBF-0DF7B205B4CC}" = OFFICE One Fonts v7
"{CDBF8C2D-04B0-4F9B-9AE1-7422F7F0EC94}" = HP Deskjet F2400 All-In-One Driver Software 13.0 Rel .6
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{DC0A5F99-FD66-433F-9D3A-05DCBA64BE42}" = TrayApp
"{DCE8CD14-FBF5-4464-B9A4-E18E473546C7}" = Assistant de connexion Windows Live
"{DCE907E3-4D72-4CD3-A08A-BEFC8C7A5869}" = Branding
"{E1A7B28B-AA31-442C-A4FA-598B65A7F5DA}" = OFFICE One License v7
"{ED00D08A-3C5F-488D-93A0-A04F21F23956}" = Windows Live Communications Platform
"{ED8C5498-6C39-92E6-B17F-414BF1722E42}" = Catalyst Control Center Graphics Previews Vista
"{F0E12BBA-AD66-4022-A453-A1C8A0C4D570}" = Microsoft Choice Guard
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{F173C327-FAA5-D463-2CBD-A4818C7EDC8C}" = Catalyst Control Center Graphics Full Existing
"{F958CA02-BB40-4007-894B-258729456EE4}" = QuickTime
"{FAF26102-09D7-4C58-AB01-0D59A2E517CA}" = Copy
"{FEC30F06-A382-47D1-B828-859AC641EB1D}" = OFFICE One Startup v7
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"AdobeReader" = Adobe Reader 8
"Audacity_is1" = Audacity 1.2.6
"avast5" = avast! Free Antivirus
"CCleaner" = CCleaner (remove only)
"CMOS" = Bison 11/28/2006,6.32.03.002
"CREATOR9" = Creator 9
"Easyphot" = Easyphot
"eMule" = eMule
"FirefoxFR" = Firefox
"Flashplayer" = Flash Player 9 Internet Explorer
"Free Mp3 Wma Converter_is1" = Free Mp3 Wma Converter V 1.7.2
"GoogleBAE" = Google BAE
"GoogleToolbar" = GoogleToolbar
"HP Imaging Device Functions" = HP Imaging Device Functions 13.0
"HP Print Projects" = HP Print Projects 1.0
"HP Smart Web Printing" = HP Smart Web Printing 4.5
"HP Solution Center & Imaging Support Tools" = HP Solution Center 13.0
"HPExtendedCapabilities" = HP Customer Participation Program 13.0
"ImageWriter" = Packard Bell ImageWriter
"Infocentre" = Infocentre Rev. 2.0
"KLiteCodecPack_is1" = K-Lite Mega Codec Pack 5.4.4
"LCDTest" = Packard Bell LCD Test
"Malwarebytes' Anti-Malware_is1" = Malwarebytes' Anti-Malware
"METABOLI" = Metaboli
"Microsoft .NET Framework 1.1  (1033)" = Microsoft .NET Framework 1.1
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"Mozilla Firefox (3.6.6)" = Mozilla Firefox (3.6.6)
"MSWorks85" = Microsoft Works 8.5
"NEUF_FR" = ADSL Neuf
"NIS2007_FR" = NIS2007
"OFFICE" = Office One
"PB_DEMO" = Packard Bell Demo
"Picasa2" = Picasa2
"Programme de désinstallation AOL" = AOL - Assistant de désinstallation
"SETUPMYPC_FR" = SetUp My PC
"Shockwave" = Shockwave player 10
"ShockwaveFlash" = Adobe Flash Player 9 ActiveX
"Shop for HP Supplies" = Shop for HP Supplies
"SUPER ©" = SUPER © Version 2009.bld.35 (Jan 5, 2009)
"SynTPDeinstKey" = Synaptics Pointing Device Driver
"Updator" = Packard Bell Updator
"VIDEO_RIO" = Video ATI v8.332
"ViewpointMediaPlayer" = Viewpoint Media Player
"WalterShop" = WalterShop
"WinGimp-2.0_is1" = GIMP 2.6.8
"WinLiveSuite_Wave3" = Installation Windows Live
 
[color=#E56717]========== HKEY_CURRENT_USER Uninstall List ==========[/color]
 
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"TimeAdjuster" = Time Adjuster STANDARD 3.1
 
[color=#E56717]========== Last 10 Event Log Errors ==========[/color]
 
[ Antivirus Events ]
Error - 22/01/2009 13:26:52 | Computer Name = LosSantos | Source = avast! | ID = 33554522
Description =
 
[ Application Events ]
Error - 10/04/2010 10:22:23 | Computer Name = LosSantos | Source = VMCService | ID = 0
Description = conflictManagerTypeValue
 
Error - 10/04/2010 14:51:51 | Computer Name = LosSantos | Source = VMCService | ID = 0
Description = conflictManagerTypeValue
 
Error - 10/04/2010 15:18:07 | Computer Name = LosSantos | Source = Microsoft-Windows-CAPI2 | ID = 131083
Description =
 
Error - 11/04/2010 04:30:51 | Computer Name = LosSantos | Source = VMCService | ID = 0
Description = conflictManagerTypeValue
 
Error - 11/04/2010 06:52:19 | Computer Name = LosSantos | Source = VMCService | ID = 0
Description = conflictManagerTypeValue
 
Error - 11/04/2010 11:10:21 | Computer Name = LosSantos | Source = VMCService | ID = 0
Description = conflictManagerTypeValue
 
Error - 11/04/2010 12:03:40 | Computer Name = LosSantos | Source = VMCService | ID = 0
Description = conflictManagerTypeValue
 
Error - 11/04/2010 14:46:31 | Computer Name = LosSantos | Source = VMCService | ID = 0
Description = conflictManagerTypeValue
 
Error - 13/04/2010 12:43:50 | Computer Name = LosSantos | Source = VMCService | ID = 0
Description = conflictManagerTypeValue
 
Error - 15/04/2010 03:25:59 | Computer Name = LosSantos | Source = VMCService | ID = 0
Description = conflictManagerTypeValue
 
[ System Events ]
Error - 02/08/2010 05:39:40 | Computer Name = LosSantos | Source = DCOM | ID = 10005
Description =
 
Error - 02/08/2010 05:39:40 | Computer Name = LosSantos | Source = Service Control Manager | ID = 7009
Description =
 
Error - 02/08/2010 05:39:40 | Computer Name = LosSantos | Source = Service Control Manager | ID = 7000
Description =
 
Error - 02/08/2010 07:15:48 | Computer Name = LosSantos | Source = Service Control Manager | ID = 7000
Description =
 
Error - 02/08/2010 12:47:21 | Computer Name = LosSantos | Source = Service Control Manager | ID = 7000
Description =
 
Error - 03/08/2010 06:13:20 | Computer Name = LosSantos | Source = Service Control Manager | ID = 7000
Description =
 
Error - 04/08/2010 03:39:58 | Computer Name = LosSantos | Source = Server | ID = 2505
Description = Le serveur n'a pas pu se lier au transport \Device\NetBT_Tcpip_{774CA886-5657-48E7-B937-1E26860005B0}
 car un autre ordinateur du réseau porte le même nom. Le serveur n'a pas pu démarrer.
 
Error - 04/08/2010 09:39:20 | Computer Name = LosSantos | Source = Dhcp | ID = 1002
Description = Le bail de l'adresse IP 78.250.220.81 pour la carte réseau dont l'adresse
 réseau est 0015AF2A14D4 a été refusé par le serveur DHCP 192.168.2.1 (celui-ci
a envoyé un message DHCPNACK).
 
Error - 04/08/2010 09:44:20 | Computer Name = LosSantos | Source = Server | ID = 2505
Description = Le serveur n'a pas pu se lier au transport \Device\NetBT_Tcpip_{774CA886-5657-48E7-B937-1E26860005B0}
 car un autre ordinateur du réseau porte le même nom. Le serveur n'a pas pu démarrer.
 
Error - 04/08/2010 11:24:22 | Computer Name = LosSantos | Source = Server | ID = 2505
Description = Le serveur n'a pas pu se lier au transport \Device\NetBT_Tcpip_{774CA886-5657-48E7-B937-1E26860005B0}
 car un autre ordinateur du réseau porte le même nom. Le serveur n'a pas pu démarrer.
 
 
< End of report >


Merci de votre aide!!

A plus

J-F

P.S : après défragmentation via Windows, j'ai perdu 8 Go sur le disque...
J'aurais pas du en gagner, plutôt??