johan1

Bonjour, hier sur mon pc vieux de 10 ans mon hdd a eu un gros bleme au demarage je pense que d ici peu il va me laché g pu hier le rallumé en tapotant dessus lol et g tout sauvegardé j aimerais maintenat pouvoir vaire une image de mon hdd tout les jours sur un disque portable usb si j ai bien compris si je fais une image de mon hdd le jour ou il plante je le change et je restore l image sur le news hdd et tout sera comme avant c bien cela? mon vieux hdd est un 40 go donc facile de faire une image sur mon hdd portabe qui est de 320 go rest encore 120 de libre je suis sur xp sp3 fami si g bien tout compris quel programme utilisé ? et qui pourrait me faire cela automatiquement au demmarage ou a une heure donnée ! si c possible Merci johan

Merci a toi zonc de m avoir fait connaitre mark et comme tu l as surement deja lu c resolu Merci a vs

Merci , wouahhhhhhhh tout est nikel je vs remercie toi mark et Zonc pour vos reponses rapide...; zonc comme tu es est sur le forum vs pouvez fermé les topics mark si tu as vu des autres chose tu peux me le dire

All processes killed ========== OTL ========== Service Lbd stopped successfully! Service Lbd deleted successfully! C:\WINDOWS\system32\drivers\Lbd.sys moved successfully. Registry value HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session manager\\BootExecute:lsdelete deleted successfully. C:\WINDOWS\system32\lsdelete.exe moved successfully. ========== COMMANDS ========== [EMPTYTEMP] User: Administrateur ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 33170 bytes User: All Users User: Default User ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 33170 bytes User: JOANNES ->Temp folder emptied: 14047718 bytes ->Temporary Internet Files folder emptied: 385899538 bytes User: LocalService ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 2400927 bytes User: NetworkService ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 33170 bytes %systemdrive% .tmp files removed: 0 bytes %systemroot% .tmp files removed: 0 bytes %systemroot%\System32 .tmp files removed: 0 bytes %systemroot%\System32\dllcache .tmp files removed: 0 bytes %systemroot%\System32\drivers .tmp files removed: 0 bytes Windows Temp folder emptied: 425984 bytes %systemroot%\system32\config\systemprofile\Local Settings\Temp folder emptied: 0 bytes %systemroot%\system32\config\systemprofile\Local Settings\Temporary Internet Files folder emptied: 55224 bytes RecycleBin emptied: 0 bytes Total Files Cleaned = 384,00 mb OTL by OldTimer - Version 3.1.25.3 log created on 01212010_165737 Files\Folders moved on Reboot... Registry entries deleted on Reboot...

As-tu uploadé le fichier détecté par Kaspersky ? Je n'ai reçu ton message.. ??, tu m as demandé de faire cela ?, je ne vois pas ou?

merci as vs deja d avance

merci de la reponse je suis sur l autre form et mark me demande des infos je vais donc attendre les reponses aavnt d allé plus loin avce toi mais je pense que g deja vu le aawservice.exe

OTL.txt OTL logfile created on: 21/01/2010 15:57:34 - Run 1 OTL by OldTimer - Version 3.1.25.3 Folder = C:\Documents and Settings\JOANNES\Bureau Windows XP Home Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation Internet Explorer (Version = 8.0.6001.18702) Locale: 0000080C | Country: Belgique | Language: FRB | Date Format: d/MM/yyyy 1,00 Gb Total Physical Memory | 1,00 Gb Available Physical Memory | 63,00% Memory free 3,00 Gb Paging File | 2,00 Gb Available in Paging File | 79,00% Paging File free Paging file location(s): C:\pagefile.sys 0 0 [binary data] %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files Drive C: | 135,21 Gb Total Space | 114,95 Gb Free Space | 85,02% Space Free | Partition Type: NTFS D: Drive not present or media not loaded E: Drive not present or media not loaded Drive F: | 48,83 Gb Total Space | 45,18 Gb Free Space | 92,52% Space Free | Partition Type: NTFS Drive G: | 48,83 Gb Total Space | 46,01 Gb Free Space | 94,21% Space Free | Partition Type: NTFS H: Drive not present or media not loaded I: Drive not present or media not loaded Computer Name: J-IDUMKXMZPCFO0 Current User Name: JOANNES Logged in as Administrator. Current Boot Mode: Normal Scan Mode: All users Company Name Whitelist: Off Skip Microsoft Files: Off File Age = 30 Days Output = Standard ========== Processes (SafeList) ========== PRC - [2010/01/21 15:55:27 | 00,547,840 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\JOANNES\Bureau\OTL.exe PRC - [2009/12/16 10:24:07 | 01,085,720 | ---- | M] (BitDefender S.R.L.) -- C:\Program Files\BitDefender\BitDefender 2010\seccenter.exe PRC - [2009/12/16 10:24:03 | 00,309,088 | ---- | M] (BitDefender S.R.L.) -- C:\Program Files\Fichiers communs\BitDefender\BitDefender Update Service\livesrv.exe PRC - [2009/12/16 10:24:02 | 01,118,144 | ---- | M] (BitDefender S.R.L.) -- C:\Program Files\BitDefender\BitDefender 2010\bdagent.exe PRC - [2009/11/17 13:24:00 | 01,622,320 | ---- | M] (BitDefender S.R.L.) -- C:\Program Files\BitDefender\BitDefender 2010\vsserv.exe PRC - [2009/08/27 16:05:04 | 00,092,008 | ---- | M] (TomTom) -- G:\TomTom HOME 2\TomTomHOMEService.exe PRC - [2009/06/24 06:37:04 | 00,028,672 | R--- | M] ( ) -- c:\Program Files\Miele\InstallerService\MieleInstallerService.exe PRC - [2009/05/27 03:27:04 | 29,262,680 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Microsoft SQL Server\MSSQL.2\MSSQL\Binn\sqlservr.exe PRC - [2009/05/27 03:27:04 | 29,262,680 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe PRC - [2009/03/08 13:09:26 | 00,638,816 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Internet Explorer\iexplore.exe PRC - [2009/01/22 10:38:32 | 02,749,952 | ---- | M] (Luis Cobian) -- C:\Program Files\Cobian Backup 9\cbInterface.exe PRC - [2009/01/22 10:38:26 | 00,579,584 | ---- | M] (Luis Cobian) -- C:\Program Files\Cobian Backup 9\Cobian.exe PRC - [2008/11/24 22:31:12 | 00,087,904 | ---- | M] (Microsoft Corporation) -- c:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe PRC - [2008/11/24 22:31:08 | 00,239,968 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Microsoft SQL Server\90\Shared\sqlbrowser.exe PRC - [2008/04/23 10:59:44 | 00,069,632 | ---- | M] (Ralink Technology, Corp.) -- C:\Program Files\RALINK\Common\RalinkRegistryWriter.exe PRC - [2008/04/14 03:34:03 | 01,037,824 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe PRC - [2006/05/03 17:43:46 | 00,413,696 | ---- | M] (ATI Technologies Inc.) -- C:\WINDOWS\system32\ati2evxx.exe PRC - [2005/01/06 10:25:56 | 00,024,576 | ---- | M] (Oki Data Corporation) -- C:\WINDOWS\system32\spool\drivers\w32x86\3\OPHCLDCS.EXE PRC - [2002/09/20 14:50:10 | 00,045,056 | ---- | M] (Analog Devices, Inc.) -- C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe ========== Modules (SafeList) ========== MOD - [2010/01/21 15:55:27 | 00,547,840 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\JOANNES\Bureau\OTL.exe MOD - [2009/12/15 14:10:16 | 00,307,200 | ---- | M] (BitDefender S.R.L. Bucharest, ROMANIA) -- C:\Program Files\BitDefender\BitDefender 2010\Active Virus Control\midas32-v2_58\plugin_fragments.m32 MOD - [2009/12/15 14:10:16 | 00,270,336 | ---- | M] (BitDefender S.R.L. Bucharest, ROMANIA) -- C:\Program Files\BitDefender\BitDefender 2010\Active Virus Control\midas32-v2_58\plugin_nt.m32 MOD - [2009/12/15 14:10:16 | 00,225,280 | ---- | M] (BitDefender S.R.L. Bucharest, ROMANIA) -- C:\Program Files\BitDefender\BitDefender 2010\Active Virus Control\midas32-v2_58\midas32.dll MOD - [2009/12/15 14:10:16 | 00,176,128 | ---- | M] (BitDefender S.R.L. Bucharest, ROMANIA) -- C:\Program Files\BitDefender\BitDefender 2010\Active Virus Control\midas32-v2_58\plugin_extra.m32 MOD - [2009/12/15 14:10:16 | 00,151,552 | ---- | M] (BitDefender S.R.L. Bucharest, ROMANIA) -- C:\Program Files\BitDefender\BitDefender 2010\Active Virus Control\midas32-v2_58\plugin_base.m32 MOD - [2009/12/15 14:10:16 | 00,126,976 | ---- | M] (BitDefender S.R.L. Bucharest, ROMANIA) -- C:\Program Files\BitDefender\BitDefender 2010\Active Virus Control\midas32-v2_58\plugin_registry.m32 MOD - [2009/12/15 14:10:16 | 00,098,304 | ---- | M] (BitDefender S.R.L. Bucharest, ROMANIA) -- C:\Program Files\BitDefender\BitDefender 2010\Active Virus Control\midas32-v2_58\plugin_net.m32 ========== Win32 Services (SafeList) ========== SRV - [2009/12/17 19:00:28 | 00,243,056 | ---- | M] (CybelSoft) [On_Demand | Stopped] -- C:\Program Files\ma-config.com\maconfservice.exe -- (maconfservice) SRV - [2009/12/16 10:24:03 | 00,309,088 | ---- | M] (BitDefender S.R.L.) [Auto | Running] -- C:\Program Files\Fichiers communs\BitDefender\BitDefender Update Service\livesrv.exe -- (LIVESRV) SRV - [2009/11/17 13:24:00 | 01,622,320 | ---- | M] (BitDefender S.R.L.) [Auto | Running] -- C:\Program Files\BitDefender\BitDefender 2010\vsserv.exe -- (VSSERV) SRV - [2009/11/17 13:23:42 | 00,311,296 | ---- | M] (S.C. BitDefender S.R.L) [On_Demand | Stopped] -- C:\Program Files\Fichiers communs\BitDefender\BitDefender Threat Scanner\scan.dll -- (scan) SRV - [2009/11/17 13:23:36 | 00,183,880 | ---- | M] (BitDefender S.R.L. http://www.bitdefender.com) [On_Demand | Stopped] -- C:\Program Files\Fichiers communs\BitDefender\BitDefender Arrakis Server\bin\arrakis3.exe -- (Arrakis3) SRV - [2009/08/27 16:05:04 | 00,092,008 | ---- | M] (TomTom) [Auto | Running] -- G:\TomTom HOME 2\TomTomHOMEService.exe -- (TomTomHOMEService) SRV - [2009/06/24 06:37:04 | 00,028,672 | R--- | M] ( ) [Auto | Running] -- c:\Program Files\Miele\InstallerService\MieleInstallerService.exe -- (MieleInstallerService) SRV - [2009/05/27 03:27:04 | 29,262,680 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Microsoft SQL Server\MSSQL.2\MSSQL\Binn\sqlservr.exe -- (MSSQL$MIELE_WDA) SQL Server (MIELE_WDA) SRV - [2009/05/27 03:27:04 | 29,262,680 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe -- (MSSQL$MIELE_ETD) SQL Server (MIELE_ETD) SRV - [2008/11/24 22:31:12 | 00,087,904 | ---- | M] (Microsoft Corporation) [Auto | Running] -- c:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe -- (SQLWriter) SRV - [2008/11/24 22:31:08 | 00,239,968 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Microsoft SQL Server\90\Shared\sqlbrowser.exe -- (SQLBrowser) SRV - [2008/11/24 22:31:08 | 00,045,408 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Program Files\Microsoft SQL Server\90\Shared\sqladhlp90.exe -- (MSSQLServerADHelper) SRV - [2008/11/04 00:06:28 | 00,441,712 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Fichiers communs\Microsoft Shared\OFFICE12\ODSERV.EXE -- (odserv) SRV - [2008/04/23 10:59:44 | 00,069,632 | ---- | M] (Ralink Technology, Corp.) [Auto | Running] -- C:\Program Files\RALINK\Common\RalinkRegistryWriter.exe -- (RalinkRegistryWriter) SRV - [2008/02/01 09:48:44 | 01,251,720 | ---- | M] () [On_Demand | Stopped] -- C:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcsvc.exe -- (Symantec Core LC) SRV - [2007/10/18 11:31:54 | 00,098,328 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Windows Live\Messenger\usnsvc.exe -- (usnjsvc) SRV - [2006/10/26 13:03:08 | 00,145,184 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Fichiers communs\Microsoft Shared\Source Engine\OSE.EXE -- (ose) SRV - [2006/05/03 17:43:46 | 00,413,696 | ---- | M] (ATI Technologies Inc.) [Auto | Running] -- C:\WINDOWS\system32\ati2evxx.exe -- (Ati HotKey Poller) SRV - [2006/05/03 10:57:00 | 00,520,192 | ---- | M] () [Auto | Stopped] -- C:\WINDOWS\system32\ati2sgag.exe -- (ATI Smart) SRV - [2005/04/03 23:41:10 | 00,069,632 | ---- | M] (Macrovision Corporation) [On_Demand | Stopped] -- C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe -- (IDriverT) SRV - [2005/01/06 10:25:56 | 00,024,576 | ---- | M] (Oki Data Corporation) [Auto | Running] -- C:\WINDOWS\system32\spool\drivers\w32x86\3\OPHCLDCS.EXE -- (OKI OPHC DCS Loader) SRV - [2002/09/20 14:50:10 | 00,045,056 | ---- | M] (Analog Devices, Inc.) [Auto | Running] -- C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe -- (SoundMAX Agent Service (default)) ========== Driver Services (SafeList) ========== DRV - [2009/12/18 10:23:14 | 00,014,336 | ---- | M] (CybelSoft) [Kernel | On_Demand | Stopped] -- C:\Program Files\ma-config.com\Drivers\driverhardwarev2.sys -- (driverhardwarev2) DRV - [2009/12/16 10:24:02 | 00,055,936 | ---- | M] (BitDefender) [Kernel | On_Demand | Running] -- C:\Program Files\BitDefender\BitDefender 2010\bdselfpr.sys -- (BDSelfPr) DRV - [2009/12/16 10:24:01 | 00,152,456 | ---- | M] (BitDefender S.R.L. Bucharest, ROMANIA) [File_System | On_Demand | Running] -- C:\WINDOWS\system32\drivers\bdfm.sys -- (bdfm) DRV - [2009/12/08 09:36:22 | 00,118,536 | ---- | M] (BitDefender LLC) [Kernel | System | Running] -- C:\Program Files\Fichiers communs\BitDefender\BitDefender Firewall\bdftdif.sys -- (bdftdif) DRV - [2009/11/17 13:24:06 | 00,083,208 | ---- | M] (BitDefender) [Kernel | Auto | Running] -- C:\Program Files\BitDefender\BitDefender 2010\bdvedisk.sys -- (BDVEDISK) DRV - [2009/11/17 13:23:50 | 00,110,984 | ---- | M] (BitDefender LLC) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\bdfndisf.sys -- (Bdfndisf) DRV - [2009/10/28 12:11:18 | 00,014,720 | ---- | M] (BitDefender S.R.L.) [Kernel | On_Demand | Stopped] -- C:\Program Files\Fichiers communs\BitDefender\BitDefender Threat Scanner\profos.sys -- (Profos) DRV - [2009/10/10 14:09:13 | 00,021,361 | ---- | M] (Cisco Systems, Inc.) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\AegisP.sys -- (AegisP) AEGIS Protocol (IEEE 802.1x) DRV - [2009/07/24 11:26:08 | 00,285,704 | ---- | M] (BitDefender S.R.L. Bucharest, ROMANIA) [File_System | Boot | Running] -- C:\WINDOWS\system32\drivers\bdfsfltr.sys -- (bdfsfltr) DRV - [2009/05/25 15:00:01 | 00,004,484 | ---- | M] () [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\cpuidlep.sys -- (cpuidlep) DRV - [2009/05/07 04:22:06 | 00,039,808 | ---- | M] (BitDefender S.R.L.) [Kernel | On_Demand | Stopped] -- C:\Program Files\Fichiers communs\BitDefender\BitDefender Threat Scanner\trufos.sys -- (Trufos) DRV - [2009/04/23 13:19:36 | 00,064,160 | ---- | M] (Lavasoft AB) [File_System | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\Lbd.sys -- (Lbd) DRV - [2009/02/09 09:52:00 | 00,238,208 | ---- | M] (Ralink Technology Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\RT2500.sys -- (RT2500) DRV - [2008/12/09 10:06:00 | 00,296,448 | ---- | M] (Marvell) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\yk51x86.sys -- (yukonwxp) DRV - [2008/04/13 19:45:29 | 00,010,624 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\gameenum.sys -- (gameenum) DRV - [2007/12/04 19:38:08 | 00,043,528 | ---- | M] (Sonic Solutions) [Kernel | Boot | Running] -- C:\WINDOWS\System32\Drivers\PxHelp20.sys -- (PxHelp20) DRV - [2007/11/13 11:25:54 | 00,020,480 | ---- | M] (Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\secdrv.sys -- (Secdrv) DRV - [2006/05/03 17:50:42 | 01,540,608 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ati2mtag.sys -- (ati2mtag) DRV - [2004/08/13 03:56:20 | 00,005,810 | R--- | M] () [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ASACPI.sys -- (MTsensor) DRV - [2004/06/07 16:26:56 | 00,266,880 | ---- | M] (Analog Devices, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\smwdm.sys -- (smwdm) DRV - [2004/04/26 02:49:56 | 00,381,056 | ---- | M] (Sensaura) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\senfilt.sys -- (senfilt) DRV - [2004/04/07 00:41:38 | 00,116,176 | ---- | M] (Andrea Electronics Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\aeaudio.sys -- (aeaudio) DRV - [2002/09/20 03:53:34 | 00,235,100 | ---- | M] (Analog Devices Inc) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\MidiSyn.sys -- (MidiSyn) DRV - [2002/09/16 16:14:32 | 00,004,228 | ---- | M] (PowerQuest Corporation) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\PQNTDRV.sys -- (PQNTDrv) DRV - [2001/08/28 13:00:00 | 00,017,792 | ---- | M] (Parallel Technologies, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ptilink.sys -- (Ptilink) DRV - [2001/08/17 22:00:04 | 00,002,944 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\msmpu401.sys -- (ms_mpu401) ========== Standard Registry (SafeList) ========== ========== Internet Explorer ========== IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.duxet.com/ IE - HKU\.DEFAULT\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-18\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-19\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-20\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-21-1614895754-602162358-725345543-1004\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.skynet.be/ IE - HKU\S-1-5-21-1614895754-602162358-725345543-1004\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://be.msn.com/defaultf.aspx?lang=fr-be&ocid=iehp IE - HKU\S-1-5-21-1614895754-602162358-725345543-1004\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = fr-be IE - HKU\S-1-5-21-1614895754-602162358-725345543-1004\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = BA EE 9D 20 AF E6 C9 01 [binary data] IE - HKU\S-1-5-21-1614895754-602162358-725345543-1004\S-1-5-21-1614895754-602162358-725345543-1004\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 FF - HKLM\software\mozilla\Thunderbird\Extensions\\bdThunderbird@bitdefender.com: C:\Program Files\BitDefender\BitDefender 2009\tbextension\ [2008/04/26 09:17:23 | 00,000,000 | ---D | M] -- C:\Documents and Settings\JOANNES\Application Data\Mozilla\Extensions [2008/04/26 09:17:23 | 00,000,000 | ---D | M] -- C:\Documents and Settings\JOANNES\Application Data\Mozilla\Extensions\home2@tomtom.com O1 HOSTS File: ([2010/01/20 17:41:05 | 00,375,185 | R--- | M]) - C:\WINDOWS\system32\drivers\etc\hosts O1 - Hosts: 127.0.0.1 localhost O1 - Hosts: 127.0.0.1 babe.the-killer.bz O1 - Hosts: 127.0.0.1 www.babe.the-killer.bz O1 - Hosts: 127.0.0.1 babe.k-lined.com O1 - Hosts: 127.0.0.1 www.babe.k-lined.com O1 - Hosts: 127.0.0.1 did.i-used.cc O1 - Hosts: 127.0.0.1 www.did.i-used.cc O1 - Hosts: 127.0.0.1 coolwwwsearch.com O1 - Hosts: 127.0.0.1 www.coolwwwsearch.com O1 - Hosts: 127.0.0.1 coolwebsearch.com O1 - Hosts: 127.0.0.1 www.coolwebsearch.com O1 - Hosts: 127.0.0.1 hi.studioaperto.net O1 - Hosts: 127.0.0.1 www.hi.studioaperto.net O1 - Hosts: 127.0.0.1 wazzupnet.com O1 - Hosts: 127.0.0.1 www.wazzupnet.com O1 - Hosts: 127.0.0.1 gueb.com O1 - Hosts: 127.0.0.1 www.gueb.com O1 - Hosts: 127.0.0.1 kabex.com O1 - Hosts: 127.0.0.1 www.kabex.com O1 - Hosts: 127.0.0.1 hityou.com O1 - Hosts: 127.0.0.1 www.hityou.com O1 - Hosts: 127.0.0.1 miosearch.com O1 - Hosts: 127.0.0.1 www.miosearch.com O1 - Hosts: 127.0.0.1 blue-elefant.com O1 - Hosts: 127.0.0.1 www.blue-elefant.com O1 - Hosts: 12930 more lines... O2 - BHO: (Aide pour le lien d'Adobe PDF Reader) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated) O2 - BHO: (Adobe PDF Link Helper) - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated) O2 - BHO: (Spybot-S&D IE Protection) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited) O2 - BHO: (Programme d'aide de l'Assistant de connexion Windows Live) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation) O3 - HKLM\..\Toolbar: (BitDefender Toolbar) - {381FFDE8-2394-4f90-B10D-FC6124A40F8C} - C:\Program Files\BitDefender\BitDefender 2010\ietoolbar.dll (BitDefender S.R.L.) O3 - HKU\S-1-5-21-1614895754-602162358-725345543-1004\..\Toolbar\WebBrowser: (no name) - {C4069E3A-68F1-403E-B40E-20066696354B} - No CLSID value found. O4 - HKLM..\Run: [bDAgent] C:\Program Files\BitDefender\BitDefender 2010\bdagent.exe (BitDefender S.R.L.) O4 - HKLM..\Run: [bitDefender Antiphishing Helper] C:\Program Files\BitDefender\BitDefender 2010\IEShow.exe (BitDefender S.R.L.) O4 - HKLM..\Run: [Cobian Backup 9] C:\Program Files\Cobian Backup 9\Cobian.exe (Luis Cobian) O4 - HKLM..\Run: [QuickTime Task] C:\Program Files\QuickTime\qttask.exe (Apple Inc.) O4 - Startup: C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage\Ralink Wireless Utility.lnk.disabled () O4 - Startup: C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage\Service Manager.lnk.disabled () O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1 O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-19_Classes\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-20_Classes\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-21-1614895754-602162358-725345543-1004\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-21-1614895754-602162358-725345543-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-21-1614895754-602162358-725345543-1004_Classes\Software\Policies\Microsoft\Internet Explorer\Control Panel present O8 - Extra context menu item: E&xporter vers Microsoft Excel - C:\Program Files\Microsoft Office\Office12\EXCEL.EXE (Microsoft Corporation) O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\Program Files\Microsoft Office\Office12\REFIEBAR.DLL (Microsoft Corporation) O9 - Extra 'Tools' menuitem : Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited) O15 - HKLM\..Trusted Domains: 57 domain(s) and sub-domain(s) not assigned to a zone. O15 - HKU\.DEFAULT\..Trusted Domains: 57 domain(s) and sub-domain(s) not assigned to a zone. O15 - HKU\S-1-5-18\..Trusted Domains: 57 domain(s) and sub-domain(s) not assigned to a zone. O15 - HKU\S-1-5-19\..Trusted Domains: 33 domain(s) and sub-domain(s) not assigned to a zone. O15 - HKU\S-1-5-20\..Trusted Domains: 33 domain(s) and sub-domain(s) not assigned to a zone. O15 - HKU\S-1-5-21-1614895754-602162358-725345543-1004\..Trusted Domains: 57 domain(s) and sub-domain(s) not assigned to a zone. O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} http://appldnld.apple.com.edgesuite.net/co...ex/qtplugin.cab (QuickTime Plugin Control) O16 - DPF: {05CA9FB0-3E3E-4B36-BF41-0E3A5CAA8CD8} http://go.microsoft.com/fwlink/?linkid=58813 (Office Genuine Advantage Validation Tool) O16 - DPF: {106E49CF-797A-11D2-81A2-00E02C015623} http://www.alternatiff.com/install-ie/alttiff.cab (AlternaTIFF ActiveX) O16 - DPF: {1851174C-97BD-4217-A0CC-E908F60D5B7A} https://h50203.www5.hp.com/HPISWeb/Customer...DataManager.CAB (Hewlett-Packard Online Support Services) O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} http://gfx2.hotmail.com/mail/w3/pr01/resources/MSNPUpld.cab (MSN Photo Upload Tool) O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} http://www.update.microsoft.com/windowsupd...b?1189071753686 (WUWebControl Class) O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} http://download.divx.com/player/DivXBrowserPlugin.cab (DivXBrowserPlugin Object) O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} http://www.update.microsoft.com/microsoftu...b?1189611378500 (MUWebControl Class) O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} http://config.zebulon.fr/plugins/MaConfig_4_0_1_3.cab (Ma-Config control) O16 - DPF: {C7DB51B4-BCF7-4923-8874-7F1A0DC92277} http://office.microsoft.com/officeupdate/content/opuc4.cab (Office Update Installation Engine) O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shoc...ash/swflash.cab (Shockwave Flash Object) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 10.0.0.138 O18 - Protocol\Handler\http\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Fichiers communs\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\http\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Fichiers communs\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\https\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Fichiers communs\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\https\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Fichiers communs\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Fichiers communs\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Fichiers communs\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Fichiers communs\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Program Files\Fichiers communs\Microsoft Shared\Help\hxds.dll (Microsoft Corporation) O18 - Protocol\Handler\mso-offdap11 {32505114-5902-49B2-880A-1F7738E5A384} - C:\Program Files\Fichiers communs\Microsoft Shared\Web Components\11\OWC11.DLL (Microsoft Corporation) O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Fichiers communs\Microsoft Shared\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation) O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation) O20 - Winlogon\Notify\AtiExtEvent: DllName - Ati2evxx.dll - C:\WINDOWS\System32\ati2evxx.dll (ATI Technologies Inc.) O24 - Desktop Components:0 (Ma page d'accueil) - About:Home O24 - Desktop WallPaper: C:\Documents and Settings\JOANNES\Local Settings\Application Data\Microsoft\Wallpaper1.bmp O24 - Desktop BackupWallPaper: C:\Documents and Settings\JOANNES\Local Settings\Application Data\Microsoft\Wallpaper1.bmp O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2007/09/06 10:26:20 | 00,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ] O33 - MountPoints2\{01efb338-1365-11dd-907b-0010a72c43b5}\Shell\AutoRun\command - "" = I:\InstallTomTomHOME.exe -- File not found O33 - MountPoints2\{21b885f8-ac2f-11de-99e5-0010a72c43b5}\Shell\AutoRun\command - "" = WDSetup.exe O34 - HKLM BootExecute: (autocheck autochk *) - File not found O34 - HKLM BootExecute: (lsdelete) - C:\WINDOWS\System32\lsdelete.exe () O35 - comfile [open] -- "%1" %* O35 - exefile [open] -- "%1" %* ========== Files/Folders - Created Within 30 Days ========== [2010/01/21 15:55:27 | 00,547,840 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\JOANNES\Bureau\OTL.exe [2010/01/21 11:42:04 | 00,000,000 | ---D | C] -- C:\Program Files\jv16 PowerTools [2010/01/15 10:05:18 | 00,000,000 | ---D | C] -- C:\Documents and Settings\JOANNES\Application Data\Malwarebytes [2010/01/15 10:05:14 | 00,038,224 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbamswissarmy.sys [2010/01/15 10:05:12 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Malwarebytes [2010/01/15 10:05:09 | 00,019,160 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbam.sys [2010/01/14 17:28:28 | 00,000,000 | RH-D | C] -- C:\Documents and Settings\JOANNES\Recent [2009/11/20 17:00:04 | 00,000,000 | ---D | M] -- C:\Documents and Settings\NetworkService\Application Data\TuneUp Software [2009/11/20 16:00:06 | 00,000,000 | ---D | M] -- C:\Documents and Settings\LocalService\Application Data\TuneUp Software [2009/10/29 13:16:39 | 00,000,000 | --SD | M] -- C:\Documents and Settings\LocalService\Application Data\Microsoft [2009/10/29 11:43:25 | 00,000,000 | --SD | M] -- C:\Documents and Settings\NetworkService\Application Data\Microsoft [2009/01/23 15:47:14 | 00,073,728 | R--- | C] ( ) -- C:\WINDOWS\System32\MieleInstallerDll.dll_old [2009/01/22 14:28:01 | 00,000,000 | ---D | M] -- C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft [2008/08/28 12:48:20 | 00,950,272 | R--- | C] ( ) -- C:\WINDOWS\System32\Interop.SQLDMO.dll [2008/07/23 11:25:07 | 00,000,000 | ---D | M] -- C:\Documents and Settings\LocalService\Local Settings\Application Data\Adobe [2007/09/06 10:29:14 | 00,000,000 | ---D | M] -- C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft [2006/02/19 02:28:56 | 00,012,288 | ---- | C] (Hewlett-Packard Development Company, L.P.) -- C:\WINDOWS\Fonts\RandFont.dll ========== Files - Modified Within 30 Days ========== [2010/01/21 15:55:27 | 00,547,840 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\JOANNES\Bureau\OTL.exe [2010/01/21 15:36:42 | 00,002,623 | ---- | M] () -- C:\Documents and Settings\JOANNES\Bureau\Microsoft Office Outlook 2007.lnk [2010/01/21 14:32:08 | 09,699,328 | ---- | M] () -- C:\Documents and Settings\JOANNES\ntuser.dat [2010/01/21 14:01:53 | 00,000,006 | -H-- | M] () -- C:\WINDOWS\tasks\SA.DAT [2010/01/21 14:01:50 | 00,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat [2010/01/21 14:01:00 | 00,000,284 | -HS- | M] () -- C:\Documents and Settings\JOANNES\ntuser.ini [2010/01/21 14:00:49 | 00,000,121 | ---- | M] () -- C:\WINDOWS\bdagent.INI [2010/01/21 12:08:04 | 00,000,132 | ---- | M] () -- C:\WINDOWS\System32\rezumatenoi.dat [2010/01/21 10:54:46 | 00,013,002 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl [2010/01/20 17:41:05 | 00,375,185 | R--- | M] () -- C:\WINDOWS\System32\drivers\etc\hosts [2010/01/18 11:03:19 | 00,000,624 | ---- | M] () -- C:\WINDOWS\ODBC.INI [2010/01/15 17:45:35 | 00,000,010 | ---- | M] () -- C:\WINDOWS\tarot.cfg [2010/01/13 16:30:15 | 00,375,049 | R--- | M] () -- C:\WINDOWS\System32\drivers\etc\hosts.20100120-174100.backup [2010/01/11 16:48:36 | 00,373,415 | R--- | M] () -- C:\WINDOWS\System32\drivers\etc\hosts.20100113-163015.backup [2010/01/07 16:07:14 | 00,038,224 | ---- | M] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbamswissarmy.sys [2010/01/07 16:07:04 | 00,019,160 | ---- | M] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbam.sys [2010/01/05 12:59:22 | 00,000,710 | ---- | M] () -- C:\Documents and Settings\JOANNES\Bureau\LIVRE 2010.lnk [2009/12/31 13:55:32 | 00,372,831 | R--- | M] () -- C:\WINDOWS\System32\drivers\etc\hosts.20100111-164834.backup [2009/12/29 10:33:19 | 00,001,069 | ---- | M] () -- C:\WINDOWS\win.ini [2009/12/24 10:25:46 | 00,000,036 | ---- | M] () -- C:\WINDOWS\iltwain.ini [2009/12/23 16:49:01 | 00,000,376 | ---- | M] () -- C:\Documents and Settings\JOANNES\Application Dataprivacy.xml ========== Files Created - No Company Name ========== [2010/01/05 12:59:22 | 00,000,710 | ---- | C] () -- C:\Documents and Settings\JOANNES\Bureau\LIVRE 2010.lnk [2009/09/28 14:04:52 | 00,014,848 | ---- | C] () -- C:\Documents and Settings\JOANNES\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2009/06/12 13:35:42 | 00,002,312 | ---- | C] () -- C:\Documents and Settings\JOANNES\Application Data\PatchUpdate_InstantShareJPG.log [2009/06/12 13:35:42 | 00,000,214 | ---- | C] () -- C:\WINDOWS\HP_InstantSHareJPG.ini [2009/05/30 10:33:02 | 00,000,036 | ---- | C] () -- C:\WINDOWS\iltwain.ini [2009/05/30 10:32:50 | 00,009,391 | ---- | C] () -- C:\WINDOWS\System32\dymourl.ini [2009/05/30 10:31:19 | 00,061,440 | ---- | C] () -- C:\WINDOWS\System32\DYMOCFG.DLL [2009/05/30 10:31:19 | 00,004,096 | ---- | C] () -- C:\WINDOWS\System32\lmmonres.dll [2009/05/25 15:00:01 | 00,004,484 | ---- | C] () -- C:\WINDOWS\System32\drivers\cpuidlep.sys [2009/01/15 13:45:34 | 00,181,248 | ---- | C] () -- C:\WINDOWS\System32\txmlutil.dll [2008/12/31 17:04:42 | 00,691,560 | ---- | C] () -- C:\WINDOWS\System32\OGACheckControl.dll [2008/08/28 12:48:20 | 00,090,112 | R--- | C] () -- C:\WINDOWS\System32\MieleInstallerDll.dll [2008/06/20 10:04:34 | 00,151,552 | R--- | C] () -- C:\WINDOWS\System32\SXPdotNET.dll [2008/04/24 14:47:52 | 00,000,121 | ---- | C] () -- C:\WINDOWS\bdagent.INI [2008/01/14 16:47:06 | 00,099,712 | ---- | C] () -- C:\WINDOWS\HPBroker.dll [2007/12/03 16:16:37 | 00,000,610 | ---- | C] () -- C:\WINDOWS\CARTES.INI [2007/10/03 09:45:01 | 00,000,043 | ---- | C] () -- C:\WINDOWS\hpfccopy.INI [2007/09/12 14:28:21 | 00,000,010 | ---- | C] () -- C:\WINDOWS\WININIT.INI [2007/09/11 15:11:57 | 00,000,000 | ---- | C] () -- C:\WINDOWS\hpqEmlSz.INI [2007/09/10 12:47:09 | 00,000,179 | ---- | C] () -- C:\WINDOWS\OPHC.INI [2007/09/10 12:08:11 | 00,000,130 | ---- | C] () -- C:\Documents and Settings\JOANNES\Local Settings\Application Data\fusioncache.dat [2007/09/10 11:56:01 | 00,018,933 | ---- | C] () -- C:\Documents and Settings\All Users\Application Data\hpzinstall.log [2007/09/06 15:17:44 | 00,000,624 | ---- | C] () -- C:\WINDOWS\ODBC.INI [2007/09/06 10:36:49 | 00,005,810 | R--- | C] () -- C:\WINDOWS\System32\drivers\ASACPI.sys [2007/09/06 10:36:41 | 00,003,621 | ---- | C] () -- C:\WINDOWS\Ascd_tmp.ini [2007/09/06 10:36:38 | 00,005,824 | ---- | C] () -- C:\WINDOWS\System32\drivers\ASUSHWIO.SYS [2007/08/16 15:17:50 | 00,143,360 | ---- | C] () -- C:\WINDOWS\System32\nsldap32v50.dll [2007/01/31 14:50:32 | 00,913,408 | ---- | C] () -- C:\WINDOWS\System32\xreglib.dll [2005/12/21 16:57:04 | 00,024,576 | ---- | C] () -- C:\WINDOWS\System32\nsldappr32v50.dll [2005/12/21 16:54:34 | 00,040,960 | ---- | C] () -- C:\WINDOWS\System32\nsldapssl32v50.dll [2001/10/28 15:42:30 | 00,116,224 | ---- | C] () -- C:\WINDOWS\System32\pdfcmnnt.dll [1996/04/03 20:33:26 | 00,005,248 | ---- | C] () -- C:\WINDOWS\System32\giveio.sys < End of report > Extras.txt OTL Extras logfile created on: 21/01/2010 15:57:34 - Run 1 OTL by OldTimer - Version 3.1.25.3 Folder = C:\Documents and Settings\JOANNES\Bureau Windows XP Home Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation Internet Explorer (Version = 8.0.6001.18702) Locale: 0000080C | Country: Belgique | Language: FRB | Date Format: d/MM/yyyy 1,00 Gb Total Physical Memory | 1,00 Gb Available Physical Memory | 63,00% Memory free 3,00 Gb Paging File | 2,00 Gb Available in Paging File | 79,00% Paging File free Paging file location(s): C:\pagefile.sys 0 0 [binary data] %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files Drive C: | 135,21 Gb Total Space | 114,95 Gb Free Space | 85,02% Space Free | Partition Type: NTFS D: Drive not present or media not loaded E: Drive not present or media not loaded Drive F: | 48,83 Gb Total Space | 45,18 Gb Free Space | 92,52% Space Free | Partition Type: NTFS Drive G: | 48,83 Gb Total Space | 46,01 Gb Free Space | 94,21% Space Free | Partition Type: NTFS H: Drive not present or media not loaded I: Drive not present or media not loaded Computer Name: J-IDUMKXMZPCFO0 Current User Name: JOANNES Logged in as Administrator. Current Boot Mode: Normal Scan Mode: All users Company Name Whitelist: Off Skip Microsoft Files: Off File Age = 30 Days Output = Standard ========== Extra Registry (SafeList) ========== ========== File Associations ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>] .html [@ = htmlfile] -- C:\Program Files\Internet Explorer\IEXPLORE.EXE (Microsoft Corporation) ========== Shell Spawning ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command] batfile [open] -- "%1" %* cmdfile [open] -- "%1" %* comfile [open] -- "%1" %* exefile [open] -- "%1" %* htmlfile [edit] -- "C:\Program Files\Microsoft Office\Office12\msohtmed.exe" %1 (Microsoft Corporation) htmlfile [open] -- "C:\Program Files\Internet Explorer\IEXPLORE.EXE" -nohome (Microsoft Corporation) htmlfile [opennew] -- "C:\Program Files\Internet Explorer\IEXPLORE.EXE" %1 (Microsoft Corporation) htmlfile [print] -- "C:\Program Files\Microsoft Office\Office12\msohtmed.exe" /p %1 (Microsoft Corporation) http [open] -- "C:\Program Files\Internet Explorer\IEXPLORE.EXE" -nohome (Microsoft Corporation) https [open] -- "C:\Program Files\Internet Explorer\IEXPLORE.EXE" -nohome (Microsoft Corporation) piffile [open] -- "%1" %* regfile [merge] -- Reg Error: Key error. scrfile [config] -- "%1" /S scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l (Microsoft Corporation) scrfile [open] -- "%1" /S txtfile [edit] -- Reg Error: Key error. Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1 Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Folder [open] -- %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation) Folder [explore] -- %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation) Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Applications\iexplore.exe [open] -- "C:\Program Files\Internet Explorer\IEXPLORE.EXE" %1 (Microsoft Corporation) CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] -- "C:\Program Files\Internet Explorer\iexplore.exe" (Microsoft Corporation) ========== Security Center Settings ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center] "AntiVirusDisableNotify" = 0 "FirewallDisableNotify" = 0 "UpdatesDisableNotify" = 0 "AntiVirusOverride" = 0 "FirewallOverride" = 0 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring] "DisableMonitoring" = 1 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus] "DisableMonitoring" = 1 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall] "DisableMonitoring" = 1 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List] "139:TCP" = 139:TCP:*:Enabled:@xpsp2res.dll,-22004 "445:TCP" = 445:TCP:*:Enabled:@xpsp2res.dll,-22005 "137:UDP" = 137:UDP:*:Enabled:@xpsp2res.dll,-22001 "138:UDP" = 138:UDP:*:Enabled:@xpsp2res.dll,-22002 "1900:UDP" = 1900:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22007 "2869:TCP" = 2869:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22008 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile] "EnableFirewall" = 0 "DoNotAllowExceptions" = 0 "DisableNotifications" = 0 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List] "1900:UDP" = 1900:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22007 "2869:TCP" = 2869:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22008 "139:TCP" = 139:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22004 "445:TCP" = 445:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22005 "137:UDP" = 137:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22001 "138:UDP" = 138:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22002 "48113:TCP" = 48113:TCP:LocalSubNet:Enabled:maconfig_tcp "48113:UDP" = 48113:UDP:LocalSubNet:Enabled:maconfig_udp ========== Authorized Applications List ========== [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List] "C:\Program Files\Windows Live\Messenger\wlcsdk.exe" = C:\Program Files\Windows Live\Messenger\wlcsdk.exe:*:Enabled:Windows Live Call -- (Microsoft Corporation) [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List] "C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE" = C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook -- (Microsoft Corporation) "C:\Program Files\Windows Live\Messenger\wlcsdk.exe" = C:\Program Files\Windows Live\Messenger\wlcsdk.exe:*:Enabled:Windows Live Call -- (Microsoft Corporation) "C:\Program Files\ma-config.com\maconfservice.exe" = C:\Program Files\ma-config.com\maconfservice.exe:LocalSubNet:Enabled:maconfservice -- (CybelSoft) ========== HKEY_LOCAL_MACHINE Uninstall List ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}" = PDFCreator "{0A65A3BD-54B5-4d0d-B084-7688507813F5}" = SlideShow "{0BD83598-C2EF-3343-847B-7D2E84599128}" = Microsoft .NET Framework 3.0 Service Pack 2 Language Pack - FRA "{1381C2A2-B9B7-4A18-B112-7F1F8C7B05BB}" = Popsy 3.0 "{15C0AF59-4877-49B6-B8C6-A61CE54515F5}" = cp_OnlineProjectsConfig "{18754BA4-4F0C-4E6E-888B-9496AFA05F43}" = Ma-Config.com "{205C6BDD-7B73-42DE-8505-9A093F35A238}" = Outil de téléchargement Windows Live "{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}" = MSVCRT "{243DBE07-4A26-415E-8070-82AA06A6B700}" = hpg3800 "{25E98ECB-5727-408E-B30A-2CAF86F5B310}" = OGA Notifier 1.7.0105.35.0 "{2AFFFDD7-ED85-4A90-8C52-5DA9EBDC9B8F}" = Microsoft SQL Server 2005 Express Edition (MIELE_ETD) "{2F58D60D-2BFD-4467-9B4D-64E7355C329D}" = Sonic_PrimoSDK "{3380F354-C5F7-4E71-8F51-EEE6C3F06C62}" = Fichiers de prise en charge de l'installation de Microsoft SQL Server (Français) "{33BF0960-DBA3-4187-B6CC-C969FCFA2D25}" = SkinsHP1 "{350C97B8-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP "{363790D2-DA98-41DD-9C9F-69FA36B169DE}" = PanoStandAlone "{36FDBE6E-6684-462B-AE98-9A39A1B200CC}" = HP Product Assistant "{3B4E636E-9D65-4D67-BA61-189800823F52}" = Windows Live Communications Platform "{3E31821C-7917-367E-938E-E65FC413EA31}" = Microsoft .NET Framework 3.5 Language Pack SP1 - fra "{41E776A5-9B12-416D-9A12-B4F7B044EBED}" = CP_Package_Basic1 "{45B8A76B-57EC-4242-B019-066400CD8428}" = BufferChm "{46ABBC54-1872-4AA3-95E2-F2C063A63F31}" = Installation Windows Live "{492BBE30-E09E-4663-825D-A20DFC45CA1E}" = hpg3800QFolder "{4EA684E9-5C81-4033-A696-3019EC57AC3A}" = HPProductAssistant "{50120000-1105-0000-0000-0000000FF1CE}" = Microsoft Office 2007 Primary Interop Assemblies "{53EE9E42-CECB-4C92-BF76-9CA65DAF8F1C}" = FullDPAppQFolder "{53F5C3EE-05ED-4830-994B-50B2F0D50FCE}" = Microsoft SQL Server Setup Support Files (English) "{56B4002F-671C-49F4-984C-C760FE3806B5}" = Microsoft SQL Server VSS Writer "{5EE7D259-D137-4438-9A5F-42F432EC0421}" = VC80CRTRedist - 8.0.50727.4053 "{66910000-8B30-4973-A159-6371345AFFA5}" = WebReg "{6696D9A4-28A8-4F5A-8E9A-2E8974C8C39C}" = RandMap "{66E6CE0C-5A1E-430C-B40A-0C90FF1804A8}" = eSupportQFolder "{6BE2A4A4-99FB-48ED-AE1E-4E850389F804}" = PartitionMagic "{6DEF11C0-35FF-4160-A543-FDD336C4DAE5}" = Microsoft SQL Server 2005 Express Edition (MIELE_WDA) "{72AD53CC-CCC0-3757-8480-9EE176866A7C}" = Microsoft .NET Framework 2.0 Service Pack 2 Language Pack - FRA "{74DC0593-6BC6-4001-AD5F-D810AFB68D86}" = HP Update "{770F1BEC-2871-4E70-B837-FB8525FFA3B1}" = Windows Live Messenger "{7B63B2922B174135AFC0E1377DD81EC2}" = DivX Codec "{8227074F-0438-4DCE-886F-3E55FB86B79D}" = BitDefender Internet Security 2010 "{82C7B308-0BDD-49D8-8EA5-9CD3A3F9DF41}" = Windows Live Call "{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight "{8ADFC4160D694100B5B8A22DE9DCABD9}" = DivX Player "{8F3C31C5-9C3A-4AA8-8EFA-71290A7AD533}" = TomTom HOME Visual Studio Merge Modules "{90120000-0010-040C-0000-0000000FF1CE}" = Microsoft Software Update for Web Folders (French) 12 "{90120000-0015-040C-0000-0000000FF1CE}" = Microsoft Office Access MUI (French) 2007 "{90120000-0016-040C-0000-0000000FF1CE}" = Microsoft Office Excel MUI (French) 2007 "{90120000-0018-040C-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (French) 2007 "{90120000-0019-040C-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (French) 2007 "{90120000-001A-040C-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (French) 2007 "{90120000-001B-040C-0000-0000000FF1CE}" = Microsoft Office Word MUI (French) 2007 "{90120000-001F-0401-0000-0000000FF1CE}" = Microsoft Office Proof (Arabic) 2007 "{90120000-001F-0407-0000-0000000FF1CE}" = Microsoft Office Proof (German) 2007 "{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007 "{90120000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2007 "{90120000-001F-0413-0000-0000000FF1CE}" = Microsoft Office Proof (Dutch) 2007 "{90120000-001F-0C0A-0000-0000000FF1CE}" = Microsoft Office Proof (Spanish) 2007 "{90120000-0020-040C-0000-0000000FF1CE}" = Module de compatibilité pour Microsoft Office System 2007 "{90120000-002C-040C-0000-0000000FF1CE}" = Microsoft Office Proofing (French) 2007 "{90120000-006E-040C-0000-0000000FF1CE}" = Microsoft Office Shared MUI (French) 2007 "{90120000-00B2-040C-0000-0000000FF1CE}" = Complément Microsoft Enregistrer en tant que PDF ou XPS pour programmes Microsoft Office 2007 "{90A4040C-6000-11D3-8CFE-0150048383C9}" = Microsoft Office 2003 Web Components "{91120000-0014-0000-0000-0000000FF1CE}" = Microsoft Office Professional 2007 "{95120000-00B9-0409-0000-0000000FF1CE}" = Microsoft Application Error Reporting "{996512CF-F35B-48DE-9291-557FA5316967}" = ScannerCopy "{9A394342-4A68-4EBA-85A6-55B559F4E700}" = Microsoft .NET Framework 1.1 French Language Pack "{9C8732C3-32DE-4569-9E90-30040D76DABC}" = Navman NavDesk 2008 "{A1F66FC9-11EE-4F2F-98C9-16F8D1E69FB7}" = Segoe UI "{A29800BA-0BF1-4E63-9F31-DF05A87F4104}" = InstantShareDevices "{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}" = Microsoft .NET Framework 3.0 Service Pack 2 "{A6E22793-168D-4680-81E5-E66DD3CFF583}" = HP Scanjet 3800 series 7.0 "{A939D341-5A04-4E0A-BB55-3E65B386432D}" = Microsoft Office Small Business Connectivity Components "{AB5D51AE-EBC3-438D-872C-705C7C2084B0}" = DeviceManagementQFolder "{AC76BA86-7AD7-1036-7B44-A93000000001}" = Adobe Reader 9.3 - Français "{AC76BA86-7AD7-5464-3428-900000000004}" = Spelling Dictionaries Support For Adobe Reader 9 "{B13A7C41581B411290FBC0395694E2A9}" = DivX Converter "{B2157760-AA3C-4E2E-BFE6-D20BC52495D9}" = cp_PosterPrintConfig "{B4092C6D-E886-4CB2-BA68-FE5A88D31DE6}_is1" = Spybot - Search & Destroy "{B69CFE29-FD03-4E0A-87A7-6ED97F98E5B3}" = CP_Panorama1Config "{B7050CBDB2504B34BC2A9CA0A692CC29}" = DivX Plus Web Player "{B88C0D02-4A3C-4ABD-B13E-4E79B725D623}" = Miele eBTD "{BAF78226-3200-4DB4-BE33-4D922A799840}" = Windows Presentation Foundation "{BB53E02E-8AB2-4AA5-8F2D-C0A56D1A8B94}" = RedistCRXI "{BD68F46D-8A82-4664-8E68-F87C55BDEFD4}" = Microsoft SQL Server Native Client "{BE3450E8-29E3-444D-9078-396057BD137A}" = Miele Offline-WDA "{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}" = Microsoft .NET Framework 2.0 Service Pack 2 "{C1C6767D-B395-43CB-BF99-051B58B86DA6}" = PhotoGallery "{C311EE72-6C15-48F4-A76D-BB90F71E2B2C}" = Miele Offline-ETD "{C63E7C60-25EB-11D3-8EDA-00A0C911E8E5}" = Sauvegarde des Dossiers personnels Microsoft Outlook "{C7F54CF8-D6FB-4E0A-93A3-E68AE0D6C476}" = SolutionCenter "{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}" = Microsoft .NET Framework 1.1 "{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1 "{ED2C557E-9C18-41FF-B58E-A05EEF0B3B5F}" = CP_CalendarTemplates1 "{F0A37341-D692-11D4-A984-009027EC0A9C}" = SoundMAX "{F333A33D-125C-32A2-8DCE-5C5D14231E27}" = Visual C++ 2008 x86 Runtime - (v9.0.30729) "{F333A33D-125C-32A2-8DCE-5C5D14231E27}.vc_x86runtime_30729_01" = Visual C++ 2008 x86 Runtime - v9.0.30729.01 "{F3760724-B29D-465B-BC53-E5D72095BCC4}" = Scan "{FAB1F336-1B7C-4057-A7BC-2922CD82A781}" = Ralink Wireless LAN "{FB15E224-67C3-491F-9F5C-F257BC418412}" = Destinations "All ATI Software" = ATI - Software Uninstall Utility "ATI Display Driver" = ATI Display Driver "CCleaner" = CCleaner "CobBackup9" = Cobian Backup 9 "DivX Plus DirectShow Filters" = DivX Plus DirectShow Filters "DYMO Label Software" = DYMO Label Software "HP Imaging Device Functions" = HP Imaging Device Functions 7.0 "HP Photo & Imaging" = HP Photosmart Premier Software 6.5 "HP Solution Center & Imaging Support Tools" = HP Solution Center 7.0 "IDNMitigationAPIs" = Microsoft Internationalized Domain Names Mitigation APIs "ie8" = Windows Internet Explorer 8 "InstallShield_{6BE2A4A4-99FB-48ED-AE1E-4E850389F804}" = PowerQuest PartitionMagic 8.0 "jv16 PowerTools_is1" = jv16 PowerTools 1.3 "Malwarebytes' Anti-Malware_is1" = Malwarebytes' Anti-Malware "Marvell Miniport Driver" = Marvell Miniport Driver "Microsoft .NET Framework 1.1 (1033)" = Microsoft .NET Framework 1.1 "Microsoft .NET Framework 3.5 Language Pack SP1 - fra" = Module linguistique Microsoft .NET Framework 3.5 SP1- fra "Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1 "Microsoft SQL Server 2005" = Microsoft SQL Server 2005 "MSCompPackV1" = Microsoft Compression Client Pack 1.0 for Windows XP "NLSDownlevelMapping" = Microsoft National Language Support Downlevel APIs "PROR" = Microsoft Office Professional 2007 "Revo Uninstaller" = Revo Uninstaller 1.85 "ST6UNST #1" = CPH_Offline "TomTom HOME" = TomTom HOME 2.7.2.1825 "WebTarot_is1" = WebTarot 1.29 "WIC" = Windows Imaging Component "Windows Media Format Runtime" = Windows Media Format 11 runtime "Windows Media Player" = Lecteur Windows Media 11 "Windows XP Service" = Windows XP Service Pack 3 "WinLiveSuite_Wave3" = Installation Windows Live "WMFDist11" = Windows Media Format 11 runtime "wmp11" = Windows Media Player 11 "Wudf01000" = Microsoft User-Mode Driver Framework Feature Pack 1.0 "XpsEPSC" = XML Paper Specification Shared Components Pack 1.0 "XPSEPSCLP" = XML Paper Specification Shared Components Language Pack 1.0 ========== Last 10 Event Log Errors ========== [ OSession Events ] Error - 31/07/2009 3:39:06 | Computer Name = J-IDUMKXMZPCFO0 | Source = Microsoft Office 12 Sessions | ID = 7001 Description = ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6504.5000, Microsoft Office Version: 12.0.6425.1000. This session lasted 173 seconds with 0 seconds of active time. This session ended with a crash. [ System Events ] Error - 21/01/2010 5:48:06 | Computer Name = J-IDUMKXMZPCFO0 | Source = DCOM | ID = 10005 Description = DCOM a reçu l'erreur "%1084" lors de la mise en route du service StiSvc avec les arguments "" pour démarrer le serveur : {A1F4E726-8CF1-11D1-BF92-0060081ED811} Error - 21/01/2010 5:48:28 | Computer Name = J-IDUMKXMZPCFO0 | Source = Service Control Manager | ID = 7001 Description = Le service Client DHCP dépend du service NetBIOS sur TCP/IP qui n'a pas pu démarrer en raison de l'erreur : %%31 Error - 21/01/2010 5:48:28 | Computer Name = J-IDUMKXMZPCFO0 | Source = Service Control Manager | ID = 7001 Description = Le service Client DNS dépend du service Pilote du protocole TCP/IP qui n'a pas pu démarrer en raison de l'erreur : %%31 Error - 21/01/2010 5:48:28 | Computer Name = J-IDUMKXMZPCFO0 | Source = Service Control Manager | ID = 7001 Description = Le service Assistance TCP/IP NetBIOS dépend du service Environnement de prise en charge de réseau AFD qui n'a pas pu démarrer en raison de l'erreur : %%31 Error - 21/01/2010 5:48:28 | Computer Name = J-IDUMKXMZPCFO0 | Source = Service Control Manager | ID = 7000 Description = Le service Lavasoft Ad-Aware Service n'a pas pu démarrer en raison de l'erreur : %%3 Error - 21/01/2010 5:48:28 | Computer Name = J-IDUMKXMZPCFO0 | Source = Service Control Manager | ID = 7001 Description = Le service Services IPSEC dépend du service Pilote IPSEC qui n'a pas pu démarrer en raison de l'erreur : %%31 Error - 21/01/2010 5:48:28 | Computer Name = J-IDUMKXMZPCFO0 | Source = Service Control Manager | ID = 7026 Description = Le pilote de démarrage système ou d'amorçage suivant n'a pas pu se charger : AFD bdfsfltr bdftdif cpuidlep Fips intelppm IPSec MRxSmb NetBIOS NetBT RasAcd Rdbss Tcpip Error - 21/01/2010 5:48:58 | Computer Name = J-IDUMKXMZPCFO0 | Source = DCOM | ID = 10005 Description = DCOM a reçu l'erreur "%1084" lors de la mise en route du service StiSvc avec les arguments "" pour démarrer le serveur : {A1F4E726-8CF1-11D1-BF92-0060081ED811} Error - 21/01/2010 5:50:02 | Computer Name = J-IDUMKXMZPCFO0 | Source = DCOM | ID = 10005 Description = DCOM a reçu l'erreur "%1084" lors de la mise en route du service EventSystem avec les arguments "" pour démarrer le serveur : {1BE1F766-5536-11D1-B726-00C04FB926AF} Error - 21/01/2010 5:51:10 | Computer Name = J-IDUMKXMZPCFO0 | Source = Service Control Manager | ID = 7000 Description = Le service Lavasoft Ad-Aware Service n'a pas pu démarrer en raison de l'erreur : %%3 < End of report >

bonjour, je viens de verifier sur Program Files plus de ad-adware je viens de verifier sur ajout/supression plus de lavasoft ou de ad-adware quand g fais la verification avce jv16 tools chercher " lavasoft " +/- 15 entree suprimée idem " ad-adware" 2 entrée suprimée merci a vs

G effectué les diversent manipulations mais il est toujours present Merci de votre aide

ben voila toujours le fichier qui revient ...

bonjour a vs, Merci de votre aide , Comme j avais posté ce messages sur un autres forum zonk m a repondu et je fais pour le moment ce qui dit aucune tache planifiée g verifier je pense vu que je suis pas un top en info mais d ici quelques minutes j aurais la reponse si cela a marché ou pas

ok merci mais il y a un probleme alors g viré ad-adware du pc je n ai plus le programe ad adware sur le pc depuis 15 jours ... mais je ne m inquiete plus sauf si il faut l enlevé mais comment lol?

le fichier aaw7Boot voila c un fichier .txt qui ce charge chaque jour sur mon pc meme si je le retire est il legitime ou pas est il lié a un programme particulier ce que le fichier indique quand je l ouvre ================================================================================ Boot Cleaner ================================================================================ [~] Cleaning started at 2010-01-15 08:36 ================================================================================ Boot Cleaner ================================================================================ [~] Cleaning started at 2010-01-15 10:29 ================================================================================ Boot Cleaner ================================================================================ [~] Cleaning started at 2010-01-15 14:44 ================================================================================ Boot Cleaner ================================================================================ [~] Cleaning started at 2010-01-15 14:46 ================================================================================ Boot Cleaner ================================================================================ [~] Cleaning started at 2010-01-16 09:06 ================================================================================ Boot Cleaner ================================================================================ [~] Cleaning started at 2010-01-18 08:40 ================================================================================ Boot Cleaner ================================================================================ [~] Cleaning started at 2010-01-18 11:13 en esperant une reponse a chaque demarage pc

j utilissait ad adware mais la il est enlevé du pc

le fichier aaw7Boot voila c un fichier .txt qui ce charge chaque jour sur mon pc meme si je le retire est il legitime ou pas est il lié a un programme particulier ce que le fichier indique quand je l ouvre ================================================================================ Boot Cleaner ================================================================================ [~] Cleaning started at 2010-01-15 08:36 ================================================================================ Boot Cleaner ================================================================================ [~] Cleaning started at 2010-01-15 10:29 ================================================================================ Boot Cleaner ================================================================================ [~] Cleaning started at 2010-01-15 14:44 ================================================================================ Boot Cleaner ================================================================================ [~] Cleaning started at 2010-01-15 14:46 ================================================================================ Boot Cleaner ================================================================================ [~] Cleaning started at 2010-01-16 09:06 ================================================================================ Boot Cleaner ================================================================================ [~] Cleaning started at 2010-01-18 08:40 ================================================================================ Boot Cleaner ================================================================================ [~] Cleaning started at 2010-01-18 11:13 en esperant une reponse a chaque demarage pc

voila vient de tel pas possible d avoir une autre licence car ils me disent que ma configuration a changée.... ben oui g change de pc il y a +/- 2 ans mais rien n y a fait c quand meme grave merde

merci de vos reponses rapide j arrive bien a l ecran du tel G bien la cle original avec le cd original car j indique cette cle sur le cd lui meme. je n ai plus l etiquette que l on colle sur la tour preuve de sa validite et plus la fact d achat vu que cela fait quelques années et que le magasin la ou g acheté mon anciens pc n existe plus johan pensez vous reelement qu il vont me donné une cle sans que je puisse leur donné une preuve concrete?

bonjour, G eu un plantage de hdd grave plus rien n as voulu demaré G donc acheté un nouveau hdd je remets mon xp pro original avec sa cle original tout va bien sauf quand je dois l activé par internet la microsoft me dit selon nos services vs avez atteint le nombre d activation permis pour cette cle. entrée una autre cle...... mon probleme est celui ci plus de fact d achat du cd original +/- achat en fin 2001 debut 2002 le mag d ou vient l ancien pc n existe plus le code du cd c plus l etiquette original mais g l habitude d inscrire la cle sur le cd lui meme je suppose donc que je ne sais rien faire d autre que d acheté une nouvelle licence??? jo

ce fichier a ete crée ssur un autre pc et envoié par mail donc le fichier de depar je ne l ai plus pour le moment pc en france et la je suis en belgique merci

bonjour, je viens de faire un diaporama avec powerpoint lol cool maintenant j aimerais recupéré les diapos une a une pour recree un fichier sous windons xp mais chaque fois que je fais un copier colle c plus des diapos c un fichier Bride pouvez vous m aider merci

PROBLEME RESOLU C A CAUSE DE INTENET EXPLORER 7 ETANT REVENU SUR LE 6 C REDE3VENU NORMAL OUI JE SUIS TOUJOURS SUR INTENET EXPLORER NE ME CRITIQU2 PAS

petite precison le rezo wifi fonctione parfaitement c vraiement l ouverture d un fichier acces que le pc ne ne veut pas donc je precise une question y a t il un niveau de securité sur access a enlevé ou a desendre pour que cela marche? merci

bonjour, j ai sur mon poste fixe un programe access et depuis 2 jours, quand je veux de mon portable allé sur ce programme il me dit que je ne suis pas dans la zone intranet ou il y a un risque de securité et donc microssof acces n ouvira pas le fichier ma conexion marche avec tout le reste exel powert pont word ...; g enlevé mon partage et remis et c identique cela doit etre dans les parametre de securité d acces mais rien trouvé merci