processor

chers...je me suis rendu compte que dans les dossiers de l ordi plein de dossier ou d application sont en double bizarre et quand je souhaite supprimer un de ces dossiers il est dit que je n ai pas l autorisation administrateur alors que je le suis vu que ma session est protegé par un mot de passe et en mode administrateur souvent il est stipulé trusted installer alors que ces fichiers viennent d internet et sont recentS....?

il a ete restaurer en parametres d usines et je vs rapelle qu il est neuf donc surement piratage car c est pas le premier portable que j ai c est le 3 eme toujours avec des blems sur ma connection internet je supose que ma ligne est piratée pourtant j ai fait intervenir un technicien et lla ligne est clean donc surement un controle a distance je vs poste un netstat et vs pourrez me conseillé pour fermer des ports car je n y comprends pas grand chose amicalement.. Microsoft Windows [version 6.1.7600] Copyright © 2009 Microsoft Corporation. Tous droits réservés. C:\Windows\system32> netstat -ano Connexions actives Proto Adresse locale Adresse distante État TCP 0.0.0.0:135 0.0.0.0:0 LISTENING 764 TCP 0.0.0.0:445 0.0.0.0:0 LISTENING 4 TCP 0.0.0.0:554 0.0.0.0:0 LISTENING 3480 TCP 0.0.0.0:2869 0.0.0.0:0 LISTENING 4 TCP 0.0.0.0:5151 0.0.0.0:0 LISTENING 1756 TCP 0.0.0.0:5357 0.0.0.0:0 LISTENING 4 TCP 0.0.0.0:8093 0.0.0.0:0 LISTENING 1672 TCP 0.0.0.0:10243 0.0.0.0:0 LISTENING 4 TCP 127.0.0.1:49153 0.0.0.0:0 LISTENING 1872 TCP 192.168.0.10:63357 81.67.230.43:80 ESTABLISHED 336 TCP 192.168.0.10:63371 81.67.230.26:80 ESTABLISHED 3724 TCP 192.168.0.10:63408 217.212.244.201:80 TIME_WAIT 0 TCP 192.168.0.10:63409 217.212.244.201:80 TIME_WAIT 0 TCP 192.168.0.10:63434 81.67.230.27:80 ESTABLISHED 336 TCP 192.168.0.10:63436 81.67.230.8:80 ESTABLISHED 336 TCP 192.168.0.10:63438 81.67.230.50:80 ESTABLISHED 336 TCP 192.168.0.10:63451 81.67.230.27:80 ESTABLISHED 3724 TCP 192.168.0.10:63461 87.98.151.56:80 TIME_WAIT 0 TCP 192.168.0.10:63474 195.60.188.44:80 CLOSE_WAIT 696 TCP 192.168.0.10:63475 213.246.37.168:80 ESTABLISHED 336 TCP [::]:135 [::]:0 LISTENING 764 TCP [::]:445 [::]:0 LISTENING 4 TCP [::]:554 [::]:0 LISTENING 3480 TCP [::]:2869 [::]:0 LISTENING 4 TCP [::]:5357 [::]:0 LISTENING 4 TCP [::]:10243 [::]:0 LISTENING 4 TCP [::1]:49154 [::]:0 LISTENING 1872 UDP 0.0.0.0:500 *:* 408 UDP 0.0.0.0:3702 *:* 1648 UDP 0.0.0.0:3702 *:* 1064 UDP 0.0.0.0:3702 *:* 1648 UDP 0.0.0.0:3702 *:* 1064 UDP 0.0.0.0:4500 *:* 408 UDP 0.0.0.0:5004 *:* 3480 UDP 0.0.0.0:5005 *:* 3480 UDP 0.0.0.0:5355 *:* 1128 UDP 0.0.0.0:53516 *:* 1064 UDP 0.0.0.0:64474 *:* 1648 UDP 127.0.0.1:1900 *:* 1648 UDP 127.0.0.1:50626 *:* 3724 UDP 127.0.0.1:51411 *:* 336 UDP 127.0.0.1:64269 *:* 1648 UDP 127.0.0.1:65120 *:* 696 UDP 192.168.0.10:1900 *:* 1648 UDP 192.168.0.10:64268 *:* 1648 UDP [::]:500 *:* 408 UDP [::]:3702 *:* 1064 UDP [::]:3702 *:* 1064 UDP [::]:3702 *:* 1648 UDP [::]:3702 *:* 1648 UDP [::]:4500 *:* 408 UDP [::]:5004 *:* 3480 UDP [::]:5005 *:* 3480 UDP [::]:53517 *:* 1064 UDP [::]:64475 *:* 1648 UDP [::1]:1900 *:* 1648 UDP [::1]:64267 *:* 1648 C:\Windows\system32> C:\Windows\system32>

tout a fait l oRdi est neuf j ai reinstaller avec falkra et libellulle mais toujours les memes problemes de doublons sur l ordi alors ..........je ne sais quoi faire j ouvre des connections internet elles sont multiples et les ralentissements sont la comme les ecrans qui scintille a l ouverture est ce un spy ? c est cela ma question .....? ET COMMENT LES DETECTER ET LES SUPPRIMER

bon et bien si je cherche des solutions pour avoir un ordi en fonctionnement et que je demande l avis de personnes specialisés pour le solutionner et que la seule reponse ce n est que des refus comment trouver cette reponse surtout que c est toi falkra qui m as conseillé d ouvrir un topic dans software ..ce que j ai fait..alors ticlou regardons si cela ne viens pas du soft..

mais la tu vois je suis sous seven comment je fais alors.. pas sous vista

non du tout je n en ai pas ...de disque Windows mais j ai fait une recuperation systeme il y a peu avec redemarrage parametres d usines....

voila le rapport hijackthis Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 22:30:27, on 23/03/2010 Platform: Unknown Windows (WinNT 6.01.3504) MSIE: Internet Explorer v8.00 (8.00.7600.16385) Boot mode: Normal Running processes: C:\Windows\PLFSetI.exe C:\Program Files (x86)\Norton Internet Security\Engine\16.8.0.41\ccSvcHst.exe C:\Program Files (x86)\Launch Manager\LManager.exe C:\Program Files (x86)\Uniblue\RegistryBooster\registrybooster.exe C:\Program Files (x86)\TUGZip\TUGZip.exe C:\Program Files (x86)\Internet Explorer\iexplore.exe C:\Program Files (x86)\Internet Explorer\iexplore.exe C:\Windows\SysWow64\Macromed\Flash\FlashUtil10b.exe C:\Program Files (x86)\Internet Explorer\iexplore.exe C:\Users\mcslam\Downloads\HiJackThis.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://homepage.emachines.com/rdr.aspx?b=A...64z1h5r47823000 R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://fr.yahoo.com/ R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://homepage.emachines.com/rdr.aspx?b=A...64z1h5r47823000 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://homepage.emachines.com/rdr.aspx?b=A...64z1h5r47823000 R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file) O2 - BHO: Symantec NCO BHO - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton Internet Security\Engine\16.8.0.41\coIEPlg.dll O2 - BHO: Symantec Intrusion Prevention - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Norton Internet Security\Engine\16.8.0.41\IPSBHO.DLL O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O3 - Toolbar: Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine\16.8.0.41\coIEPlg.dll O4 - HKLM\..\Run: [LManager] C:\Program Files (x86)\Launch Manager\LManager.exe O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe" O4 - HKLM\..\Run: [NortonOnlineBackupReminder] "C:\Program Files (x86)\Symantec\Norton Online Backup\Activation\NobuActivation.exe" UNATTENDED O4 - HKLM\..\Run: [startCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun O4 - HKUS\S-1-5-19\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'SERVICE LOCAL') O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'SERVICE LOCAL') O4 - HKUS\S-1-5-20\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'SERVICE RÉSEAU') O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'SERVICE RÉSEAU') O8 - Extra context menu item: Google Sidewiki... - res://C:\Program Files (x86)\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_96D6FF0C6D236BF8.dll/cmsidewiki.html O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra button: Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll O9 - Extra 'Tools' menuitem: &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL O13 - Gopher Prefix: O18 - Protocol: symres - {AA1061FE-6C41-421F-9344-69640C9732AB} - C:\Program Files (x86)\Norton Internet Security\Engine\16.8.0.41\coIEPlg.dll O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing) O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing) O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing) O23 - Service: Acer ePower Service (ePowerSvc) - Acer Incorporated - C:\Program Files\eMachines\eMachines Power Management\ePowerSvc.exe O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing) O23 - Service: GRegService (Greg_Service) - Acer Incorporated - C:\Program Files (x86)\eMachines\Registration\GregHSRW.exe O23 - Service: Service Google Update (gupdate) (gupdate) - Unknown owner - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe (file missing) O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing) O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: Norton Internet Security - Symantec Corporation - C:\Program Files (x86)\Norton Internet Security\Engine\16.8.0.41\ccSvcHst.exe O23 - Service: NTI Backup Now 5 Backup Service (NTIBackupSvc) - NewTech InfoSystems, Inc. - C:\Program Files (x86)\NewTech Infosystems\NTI Backup Now 5\BackupSvc.exe O23 - Service: NTI Backup Now 5 Scheduler Service (NTISchedulerSvc) - NewTech Infosystems, Inc. - C:\Program Files (x86)\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing) O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing) O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing) O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing) O23 - Service: @C:\Program Files (x86)\TuneUp Utilities 2010\TuneUpDefragService.exe,-1 (TuneUp.Defrag) - TuneUp Software - C:\Program Files (x86)\TuneUp Utilities 2010\TuneUpDefragService.exe O23 - Service: TuneUp Utilities Service (TuneUp.UtilitiesSvc) - TuneUp Software - C:\Program Files (x86)\TuneUp Utilities 2010\TuneUpUtilitiesService64.exe O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing) O23 - Service: Updater Service - Acer - C:\Program Files\eMachines\eMachines Updater\UpdaterService.exe O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing) O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing) O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing) O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing) O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing) -- End of file - 8732 bytes voila donc il ne s agit pas d une infection car on a regarder avec mbam et OTS et pas trouvé de disfonctionnement et j ai ete redirigé en software

chers helpers je vs ecris pur vs demander de l aide car surement que mon software est infecté....... j ai fait un test avec registry booster et il detecte pas mal d erreur d erreurs systeme..... j ai au demarrage des scintillements ecran noir bloquage de l exploreur et instabilité de seven et coupage et saccade de ma connection internet avec multi connexions qui s ouvre..... merci de vos reponses....

salut falkra.....j ai lu ton post et je me demande si t es serieux.quand tu dis que mon prog est sain avec tous les bugs que j ai eu a nouveau ce matin ....alors qu hier soir ca avait l air bien ...et la subitement 1 reapparition de doublons sur tous mes rapports.. 2 connections et ouverture multiples de l internet au moins 4 pages se sont ouvertes pour 1 connection. 3 impossibilité de te poster le rapport j ai du essayer sans te mentir 8/9 fois validation et disparition de mon message et post vide.(c est la premiere fois que ca m arrive) 4 fermeture de windows car il a definit que ses definitions etait critique rebootage 2 fois sans explications. 5 tres grandes lenteurs du demarrage et coupage de l exploreur windows ...... sans compter toutes les ingerences dans mon surf... pour un pc sain je me pose des questions.... qu en penses tu......c est toi le pro..... en tout cas merci de tes reponses.

ca veut dire qu ils sont tres forts pour cacher leur fourberie la ca va mieux....l internet et le demarrage mais pour UP il n est pas dans programmes via le panno de configuration ca je te l assures......et dans la fin du prog il y a pas mal d erreur de connect c est pas du au doublon des fois

je crois falkra qu on ne se comprends pas la.......ca fait 3 fois que je t explique VIA le panneau de config y en a pas de google up le seul prog c etait google toolbar et on la degagé...ensuite j ai fait recherche dans ordi et c etait dans progx86 une application c est tout et elle etait en double je les ai degagé les 2.....j ai mal fait....? Le seul que j ai en updater c est un e machine pas un google je t assures......

alors la manoeuvre c etait quoi ..........de degage up .............et c etait le seul chemin je croyais bien faire enfin ils ne sont plus..

j avais 2 dossiers 1 dans x86files et un autre nommé avec des chiffres il y a google crashed et dedans un autre google updater ce google crash j ai aussi envie de le degager il est bizarre les up ils sont degagés j ai modifie les autorisations via proprietes je crois que tu m a pas lu il n y etaiss pas dans ajout et suppression donc je l ai recherché pour le degagé et je les ai les 2 degagé et l ordi est plus cool

non LE POST il etait plein je te l assures pour preuve apres le crash et 2 h de bugs avec otm qui s est crashe 2 fois? eteint car une fenetre m a indique que windows etait critique c est bien pour quelque chose la avec tous ses bugs je t assures qu il y a quelque chose de bizarre ma conection internet s entrecoupée ET DE DEDOUBLE JUSQU A 4 OUVERTURES ET des que je postais le message ca bloquait et apres plus rien comme une nargue......pour google je ne l ai pas dans mes programmes dans ajout il est ailleurs QUAND JE TAPE LA RECHERCHE SUR L ORDI C EST DANS PROGRAMSFILESX86 ET QUAND J Y VAIS IL Y A UN GOOGLE OUI MAIS VIDE ET QUAND JE VEUX LE SUPPRIMER DEPUIS SON APPARITION DE RECHERCHE C EST IMPOSSIBLE CAR IL DIT QU IL EST OUVERT DANS GOOGLE.EXE ALORS QUE C EST LUI QUE JE VEUX SUPPRIMER ET IL ME DEMANDE L AUTORISATION ADMINISTRATEUR..........

All processes killed ========== PROCESSES ========== ========== FILES ========== File/Folder C:\ProgramData\Partner not found. ========== REGISTRY ========== Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{83ff80f4-8c74-4b80-b5ba-c8ddd434e5c4}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{83ff80f4-8c74-4b80-b5ba-c8ddd434e5c4}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{83FF80F4-8C74-4b80-B5BA-C8DDD434E5C4}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{83FF80F4-8C74-4b80-B5BA-C8DDD434E5C4}\ not found. ========== COMMANDS ========== [EMPTYTEMP] User: All Users User: Default ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes User: Default User ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes User: mcslam ->Temp folder emptied: 66580 bytes ->Temporary Internet Files folder emptied: 9229231 bytes ->Flash cache emptied: 405 bytes User: Public %systemdrive% .tmp files removed: 0 bytes %systemroot% .tmp files removed: 0 bytes %systemroot%\System32 .tmp files removed: 0 bytes %systemroot%\System32 (64bit) .tmp files removed: 0 bytes %systemroot%\System32\drivers .tmp files removed: 0 bytes Windows Temp folder emptied: 2486 bytes %systemroot%\sysnative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 32902 bytes RecycleBin emptied: 0 bytes Total Files Cleaned = 9,00 mb OTM by OldTimer - Version 3.1.10.1 log created on 03212010_131919 Files moved on Reboot... File move failed. C:\Users\mcslam\AppData\Local\Temp\FXSAPIDebugLogFile.txt scheduled to be moved on reboot. File C:\Users\mcslam\AppData\Local\Temp\~DF07D7D3EF9EE8D43C.TMP not found! File C:\Users\mcslam\AppData\Local\Temp\~DF947DC328FD1C3D10.TMP not found! File C:\Users\mcslam\AppData\Local\Temp\~DFD2C6B7A6BDF454F6.TMP not found! File C:\Users\mcslam\AppData\Local\Temp\~DFD5A3F104DA4105DB.TMP not found! C:\Users\mcslam\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\YPX6FHG2\ads[2].htm moved successfully. C:\Users\mcslam\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\YPX6FHG2\iframe[1].htm moved successfully. C:\Users\mcslam\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\YPX6FHG2\img[4].htm moved successfully. C:\Users\mcslam\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HAGHMH9Y\ads[2].htm moved successfully. C:\Users\mcslam\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HAGHMH9Y\img[4].htm moved successfully. C:\Users\mcslam\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\A7BZY3MX\ban_728x90[1].htm moved successfully. C:\Users\mcslam\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\A7BZY3MX\povh[1].htm moved successfully. C:\Users\mcslam\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\8ONAKXCV\detection-et-supprimer-prog-de-controle-t174544[2].htm moved successfully. C:\Users\mcslam\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\8ONAKXCV\detection-et-supprimer-prog-de-controle-t174544[3].htm moved successfully. C:\Users\mcslam\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\8ONAKXCV\hp[1].htm moved successfully. C:\Users\mcslam\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\8ONAKXCV\img[4].htm moved successfully. C:\Users\mcslam\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\8ONAKXCV\img[5].htm moved successfully. C:\Users\mcslam\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\8ONAKXCV\rectangle_300x250[1].htm moved successfully. File C:\Users\mcslam\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\fla697.tmp not found! C:\Users\mcslam\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\MSIMGSIZ.DAT moved successfully. File C:\Windows\temp\JETB0B8.tmp not found! Registry entries deleted on Reboot... voila apres un passage de OTM L ORDI A L AIR PLUS STABLE

voila et je te file otm apres car je dois rebooter c est bizarre comment il est sorti le texte je te dis plein de bug j ai essayer de te le poster au moins 10 fois ca c est le tout dernier apres celui que je t ai poster il est different....

j ai repasse otm OTS logfile created on: 21/03/2010 13:23:45 - Run 4 OTS by OldTimer - Version 3.1.27.1 Folder = C:\Users\mcslam\Downloads 64bit- Home Premium Edition (Version = 6.1.7600) - Type = NTWorkstation Internet Explorer (Version = 8.0.7600.16385) Locale: 0000040c | Country: France | Language: FRA | Date Format: dd/MM/yyyy 3,00 Gb Total Physical Memory | 2,00 Gb Available Physical Memory | 58,00% Memory free 5,00 Gb Paging File | 4,00 Gb Available in Paging File | 73,00% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86) Drive C: | 220,78 Gb Total Space | 192,56 Gb Free Space | 87,22% Space Free | Partition Type: NTFS D: Drive not present or media not loaded E: Drive not present or media not loaded F: Drive not present or media not loaded G: Drive not present or media not loaded H: Drive not present or media not loaded I: Drive not present or media not loaded Computer Name: MCSLAM-PC Current User Name: mcslam Logged in as Administrator. Current Boot Mode: Normal Scan Mode: All users Include 64bit Scans Company Name Whitelist: Off Skip Microsoft Files: Off File Age = 30 Days [Registry - Additional Scans - Safe List] < 64bit-File Associations - Select to Repair > -> HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>\ -> .bat [@ = batfile] -> "%1" %* -> .cmd [@ = cmdfile] -> "%1" %* -> .com [@ = comfile] -> "%1" %* -> .exe [@ = exefile] -> "%1" %* -> .pif [@ = piffile] -> "%1" %* -> .scr [@ = scrfile] -> "%1" /S -> < File Associations - Select to Repair > -> HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>\ -> .bat [@ = batfile] -> "%1" %* -> .cmd [@ = cmdfile] -> "%1" %* -> .com [@ = comfile] -> "%1" %* -> .cpl [@ = cplfile] -> C:\Windows\SysWow64\control.exe -> [2009/07/14 02:14:15 | 000,113,152 | ---- | M] (Microsoft Corporation) .exe [@ = exefile] -> "%1" %* -> .pif [@ = piffile] -> "%1" %* -> .scr [@ = scrfile] -> "%1" /S -> < 64bit-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SvcHost > -> -> *netsvcs* -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SvcHost\\netsvcs -> Ias -> C:\Windows\SysNative\ias -> [2009/07/14 04:20:14 | 000,000,000 | ---D | M] Irmon -> C:\Windows\SysNative\irmon.dll -> [2009/07/14 02:41:11 | 000,023,552 | ---- | M] (Microsoft Corporation) UxTuneUp -> C:\Windows\SysNative\uxtuneup.dll -> [2010/02/25 11:34:50 | 000,036,168 | ---- | M] (TuneUp Software) Wmi -> C:\Windows\SysNative\wmi.dll -> [2009/07/14 02:33:56 | 000,005,120 | ---- | M] (Microsoft Corporation) Themes -> C:\Windows\SysNative\themeservice.dll -> [2009/07/14 02:41:55 | 000,044,544 | ---- | M] (Microsoft Corporation) BDESVC -> C:\Windows\SysNative\bdesvc.dll -> [2009/07/14 02:40:10 | 000,100,864 | ---- | M] (Microsoft Corporation) *MultiFile Done* -> -> < HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SvcHost > -> -> *netsvcs* -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SvcHost\\netsvcs -> Ias -> C:\Windows\SysWOW64\ias.dll -> [2009/07/14 02:15:26 | 000,019,456 | ---- | M] (Microsoft Corporation) Wmi -> C:\Windows\SysWOW64\wmi.dll -> [2009/07/14 02:11:09 | 000,005,120 | ---- | M] (Microsoft Corporation) *MultiFile Done* -> -> < 64bit-Protocol Filters [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Filter\ -> text/xml:{807563E5-5146-11D5-A672-00B0D022E945} [HKLM] -> C:\PROGRA~1\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL[Microsoft Office InfoPath XML Mime Filter] -> [2008/10/25 16:34:10 | 000,108,920 | ---- | M] (Microsoft Corporation) < 64bit-Protocol Handlers [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\ -> livecall:{828030A1-22C1-4009-854F-8E305202313F} [HKLM] -> Reg Error: Key error.[Reg Error: Key error.] -> File not found ms-help:{314111c7-a502-11d2-bbca-00c04f8ec294} [HKLM] -> Reg Error: Key error.[Reg Error: Key error.] -> File not found ms-itss:{0A9007C0-4076-11D3-8789-0000F8105754} [HKLM] -> Reg Error: Key error.[Reg Error: Key error.] -> File not found msnim:{828030A1-22C1-4009-854F-8E305202313F} [HKLM] -> Reg Error: Key error.[Reg Error: Key error.] -> File not found symres:{AA1061FE-6C41-421f-9344-69640C9732AB} [HKLM] -> Reg Error: Key error.[Reg Error: Key error.] -> File not found wlmailhtml:{03C514A3-1EFB-4856-9F99-10D7BE1653C0} [HKLM] -> Reg Error: Key error.[Reg Error: Key error.] -> File not found < Protocol Handlers [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\ -> livecall:{828030A1-22C1-4009-854F-8E305202313F} [HKLM] -> C:\Program Files (x86)\Windows Live\Messenger\msgrapp.14.0.8064.0206.dll[Reg Error: Value error.] -> [2009/02/06 18:52:44 | 000,062,304 | ---- | M] (Microsoft Corporation) msnim:{828030A1-22C1-4009-854F-8E305202313F} [HKLM] -> C:\Program Files (x86)\Windows Live\Messenger\msgrapp.14.0.8064.0206.dll[Reg Error: Value error.] -> [2009/02/06 18:52:44 | 000,062,304 | ---- | M] (Microsoft Corporation) symres:{AA1061FE-6C41-421f-9344-69640C9732AB} [HKLM] -> C:\Program Files (x86)\Norton Internet Security\Engine\16.8.0.41\CoIEPlg.dll[Reg Error: Value error.] -> [2010/01/20 22:18:22 | 000,378,736 | R--- | M] (Symantec Corporation) wlmailhtml:{03C514A3-1EFB-4856-9F99-10D7BE1653C0} [HKLM] -> C:\Program Files (x86)\Windows Live\Mail\mailcomm.dll[Windows Live Mail HTML Asynchronous Pluggable Protocol Handler] -> [2009/02/06 18:53:40 | 000,791,392 | ---- | M] (Microsoft Corporation) < 64bit-Security Center Settings > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center -> 64bit-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center \\"cval" -> [1] -> File not found 64bit-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ -> -> 64bit-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\ -> -> 64bit-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc \Svc\\"VistaSp1" -> [28 4D B2 76 41 04 CA 01 [binary data]] -> File not found \Svc\\"AntiVirusOverride" -> [0] -> File not found \Svc\\"AntiSpywareOverride" -> [0] -> File not found \Svc\\"FirewallOverride" -> [0] -> File not found 64bit-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol\ -> -> < Security Center Settings > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\ -> -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile \\"DisableNotifications" -> [0] -> File not found \\"EnableFirewall" -> [1] -> File not found HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\Logging\ -> -> < Session Manager Settings [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager -> *BootExecute* -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\\BootExecute -> autocheck autochk * -> -> File not found *MultiFile Done* -> -> "ExcludeFromKnownDlls" -> [binary data] -> 64bit-*ObjectDirectories* -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\\ObjectDirectories -> \Windows -> \Windows -> [2010/03/21 03:52:36 | 000,000,000 | ---D | M] \RPC Control -> -> File not found *MultiFile Done* -> -> *ObjectDirectories* -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\\ObjectDirectories -> \Windows -> \Windows -> [2010/03/21 03:52:36 | 000,000,000 | ---D | M] \RPC Control -> -> File not found *MultiFile Done* -> -> 64bit-*PendingFileRenameOperations* -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\\PendingFileRenameOperations -> \??\C:\Users\mcslam\AppData\Local\Temp\FXSAPIDebugLogFile.txt [\??\C:\Users\mcslam\AppData\Local\Temp\FXSAPIDebugLogFile.txt] -> C:\Users\mcslam\AppData\Local\Temp\FXSAPIDebugLogFile.txt [C:\Users\mcslam\AppData\Local\Temp\FXSAPIDebugLogFile.txt] -> [2010/03/21 13:07:17 | 000,000,000 | ---- | M] () \??\C:\_OTM\MovedFiles\03212010_130002\C_Users\mcslam\AppData\Local\Temp\FXSAPIDebugLogFile.txt [\??\C:\_OTM\MovedFiles\03212010_130002\C_Users\mcslam\AppData\Local\Temp\FXSAPIDebugLogFile.txt] -> C:\_OTM\MovedFiles\03212010_130002\C_Users\mcslam\AppData\Local\Temp\FXSAPIDebugLogFile.txt [C:\_OTM\MovedFiles\03212010_130002\C_Users\mcslam\AppData\Local\Temp\FXSAPIDebugLogFile.txt] -> File not found \??\C:\Users\mcslam\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\index.dat [\??\C:\Users\mcslam\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\index.dat] -> C:\Users\mcslam\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\index.dat [C:\Users\mcslam\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\index.dat] -> [2010/03/21 13:18:40 | 000,196,608 | -HS- | M] () *MultiFile Done* -> -> *PendingFileRenameOperations* -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\\PendingFileRenameOperations -> \??\C:\Users\mcslam\AppData\Local\Temp\FXSAPIDebugLogFile.txt [\??\C:\Users\mcslam\AppData\Local\Temp\FXSAPIDebugLogFile.txt] -> C:\Users\mcslam\AppData\Local\Temp\FXSAPIDebugLogFile.txt [C:\Users\mcslam\AppData\Local\Temp\FXSAPIDebugLogFile.txt] -> [2010/03/21 13:07:17 | 000,000,000 | ---- | M] () \??\C:\_OTM\MovedFiles\03212010_130002\C_Users\mcslam\AppData\Local\Temp\FXSAPIDebugLogFile.txt [\??\C:\_OTM\MovedFiles\03212010_130002\C_Users\mcslam\AppData\Local\Temp\FXSAPIDebugLogFile.txt] -> C:\_OTM\MovedFiles\03212010_130002\C_Users\mcslam\AppData\Local\Temp\FXSAPIDebugLogFile.txt [C:\_OTM\MovedFiles\03212010_130002\C_Users\mcslam\AppData\Local\Temp\FXSAPIDebugLogFile.txt] -> File not found \??\C:\Users\mcslam\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\index.dat [\??\C:\Users\mcslam\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\index.dat] -> C:\Users\mcslam\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\index.dat [C:\Users\mcslam\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\index.dat] -> [2010/03/21 13:18:40 | 000,196,608 | -HS- | M] () *MultiFile Done* -> -> < Session Manager Environment Settings [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\Environment -> 64bit-"ComSpec" -> C:\Windows\SysNative\cmd.exe -> [2009/07/14 02:39:01 | 000,344,576 | ---- | M] (Microsoft Corporation) "ComSpec" -> C:\Windows\SysWOW64\cmd.exe -> [2009/07/14 02:14:15 | 000,301,568 | ---- | M] (Microsoft Corporation) "TEMP" -> C:\Windows\Temp -> [2010/03/21 13:23:26 | 000,000,000 | ---D | M] "TMP" -> C:\Windows\Temp -> [2010/03/21 13:23:26 | 000,000,000 | ---D | M] "windir" -> C:\Windows -> [2010/03/21 03:52:36 | 000,000,000 | ---D | M] 64bit-*Path* -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\Environment\\Path -> %SystemRoot%\system32 -> C:\Windows\SysNative -> File not found %SystemRoot% -> C:\Windows -> [2010/03/21 03:52:36 | 000,000,000 | ---D | M] %SystemRoot%\System32\Wbem -> C:\Windows\SysNative\wbem -> [2010/03/20 05:39:24 | 000,000,000 | ---D | M] %SYSTEMROOT%\System32\WindowsPowerShell\v1.0\ -> C:\Windows\SysNative\WindowsPowerShell\v1.0\ -> [2010/03/20 05:39:24 | 000,000,000 | ---D | M] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static -> C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static -> [2010/03/19 21:10:20 | 000,000,000 | ---D | M] *MultiFile Done* -> -> *Path* -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\Environment\\Path -> %SystemRoot%\system32 -> C:\Windows\SysWOW64 -> [2010/03/21 04:40:44 | 000,000,000 | ---D | M] %SystemRoot% -> C:\Windows -> [2010/03/21 03:52:36 | 000,000,000 | ---D | M] %SystemRoot%\System32\Wbem -> C:\Windows\SysWOW64\wbem -> [2010/03/20 05:39:25 | 000,000,000 | ---D | M] %SYSTEMROOT%\System32\WindowsPowerShell\v1.0\ -> C:\Windows\SysWow64\WindowsPowerShell\v1.0\ -> [2010/03/20 05:39:25 | 000,000,000 | ---D | M] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static -> C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static -> [2010/03/19 21:10:20 | 000,000,000 | ---D | M] *MultiFile Done* -> -> *PATHEXT* -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\Environment\\PATHEXT -> .COM -> -> File not found .EXE -> -> File not found .BAT -> -> File not found .CMD -> -> File not found .VBS -> -> File not found .VBE -> -> File not found .JS -> -> File not found .JSE -> -> File not found .WSF -> -> File not found .WSH -> -> File not found .MSC -> -> File not found *MultiFile Done* -> -> < Session Manager FileRenameOperations Settings [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\FileRenameOperations -> < Session Manager KnownDlls Settings [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\KnownDlls -> 64bit-"advapi32" -> C:\Windows\SysNative\advapi32.dll -> [2009/07/14 02:40:01 | 000,877,056 | ---- | M] (Microsoft Corporation) 64bit-"clbcatq" -> C:\Windows\SysNative\clbcatq.dll -> [2009/07/14 02:40:15 | 000,607,744 | ---- | M] (Microsoft Corporation) 64bit-"COMDLG32" -> C:\Windows\SysNative\comdlg32.dll -> [2009/07/14 02:40:22 | 000,595,456 | ---- | M] (Microsoft Corporation) 64bit-"DifxApi" -> C:\Windows\SysNative\difxapi.dll -> [2009/07/14 02:40:30 | 000,504,320 | ---- | M] (Microsoft Corporation) 64bit-"DllDirectory" -> C:\Windows\SysNative -> File not found 64bit-"DllDirectory32" -> C:\Windows\SysWOW64 -> [2010/03/21 04:40:44 | 000,000,000 | ---D | M] 64bit-"gdi32" -> C:\Windows\SysNative\gdi32.dll -> [2009/07/14 02:40:56 | 000,404,480 | ---- | M] (Microsoft Corporation) 64bit-"IERTUTIL" -> C:\Windows\SysNative\iertutil.dll -> [2009/07/14 02:41:06 | 002,440,704 | ---- | M] (Microsoft Corporation) 64bit-"IMAGEHLP" -> C:\Windows\SysNative\imagehlp.dll -> [2009/07/14 02:41:08 | 000,076,288 | ---- | M] (Microsoft Corporation) 64bit-"IMM32" -> C:\Windows\SysNative\imm32.dll -> [2009/07/14 02:41:09 | 000,167,424 | ---- | M] (Microsoft Corporation) 64bit-"kernel32" -> C:\Windows\SysNative\kernel32.dll -> [2009/07/14 02:41:13 | 001,162,240 | ---- | M] (Microsoft Corporation) 64bit-"LPK" -> C:\Windows\SysNative\lpk.dll -> [2009/07/14 02:41:19 | 000,041,984 | ---- | M] (Microsoft Corporation) 64bit-"MSCTF" -> C:\Windows\SysNative\msctf.dll -> [2009/07/14 02:41:28 | 001,067,008 | ---- | M] (Microsoft Corporation) 64bit-"MSVCRT" -> C:\Windows\SysNative\msvcrt.dll -> [2009/07/14 02:41:32 | 000,634,880 | ---- | M] (Microsoft Corporation) 64bit-"NORMALIZ" -> C:\Windows\SysNative\normaliz.dll -> [2009/07/14 02:31:40 | 000,002,560 | ---- | M] (Microsoft Corporation) 64bit-"NSI" -> C:\Windows\SysNative\nsi.dll -> [2009/07/14 02:41:53 | 000,013,824 | ---- | M] (Microsoft Corporation) 64bit-"ole32" -> C:\Windows\SysNative\ole32.dll -> [2009/07/14 02:41:53 | 002,084,352 | ---- | M] (Microsoft Corporation) 64bit-"OLEAUT32" -> C:\Windows\SysNative\oleaut32.dll -> [2009/07/14 02:41:53 | 000,861,184 | ---- | M] (Microsoft Corporation) 64bit-"PSAPI" -> C:\Windows\SysNative\psapi.dll -> [2009/07/14 02:41:53 | 000,009,216 | ---- | M] (Microsoft Corporation) 64bit-"rpcrt4" -> C:\Windows\SysNative\rpcrt4.dll -> [2009/07/14 02:41:53 | 001,221,632 | ---- | M] (Microsoft Corporation) 64bit-"sechost" -> C:\Windows\SysNative\sechost.dll -> [2009/07/14 02:41:53 | 000,113,664 | ---- | M] (Microsoft Corporation) 64bit-"Setupapi" -> C:\Windows\SysNative\setupapi.dll -> [2009/07/14 02:41:54 | 001,899,520 | ---- | M] (Microsoft Corporation) 64bit-"SHELL32" -> C:\Windows\SysNative\shell32.dll -> [2009/07/14 02:41:54 | 014,161,920 | ---- | M] (Microsoft Corporation) 64bit-"SHLWAPI" -> C:\Windows\SysNative\shlwapi.dll -> [2009/07/14 02:41:54 | 000,449,536 | ---- | M] (Microsoft Corporation) 64bit-"URLMON" -> C:\Windows\SysNative\urlmon.dll -> [2009/12/19 10:51:05 | 001,492,480 | ---- | M] (Microsoft Corporation) 64bit-"user32" -> C:\Windows\SysNative\user32.dll -> [2009/07/14 02:41:56 | 001,008,640 | ---- | M] (Microsoft Corporation) 64bit-"USP10" -> C:\Windows\SysNative\usp10.dll -> [2009/07/14 02:41:56 | 000,801,280 | ---- | M] (Microsoft Corporation) 64bit-"WININET" -> C:\Windows\SysNative\wininet.dll -> [2009/12/19 10:51:24 | 001,192,960 | ---- | M] (Microsoft Corporation) 64bit-"WLDAP32" -> C:\Windows\SysNative\Wldap32.dll -> [2009/07/14 02:41:56 | 000,311,808 | ---- | M] (Microsoft Corporation) 64bit-"WS2_32" -> C:\Windows\SysNative\ws2_32.dll -> [2009/07/14 02:41:58 | 000,296,448 | ---- | M] (Microsoft Corporation) "advapi32" -> C:\Windows\SysWow64\advapi32.dll -> [2009/07/14 02:14:53 | 000,640,000 | ---- | M] (Microsoft Corporation) "clbcatq" -> C:\Windows\SysWow64\clbcatq.dll -> [2009/07/14 02:15:03 | 000,522,240 | ---- | M] (Microsoft Corporation) "COMDLG32" -> C:\Windows\SysWow64\comdlg32.dll -> [2009/07/14 02:15:07 | 000,486,912 | ---- | M] (Microsoft Corporation) "DifxApi" -> C:\Windows\SysWow64\difxapi.dll -> [2009/07/14 02:15:11 | 000,315,904 | ---- | M] (Microsoft Corporation) "DllDirectory" -> C:\Windows\SysWOW64 -> [2010/03/21 04:40:44 | 000,000,000 | ---D | M] "DllDirectory32" -> C:\Windows\SysWOW64 -> [2010/03/21 04:40:44 | 000,000,000 | ---D | M] "gdi32" -> C:\Windows\SysWow64\gdi32.dll -> [2009/07/14 02:11:21 | 000,310,784 | ---- | M] (Microsoft Corporation) "IERTUTIL" -> C:\Windows\SysWow64\iertutil.dll -> [2009/07/14 02:15:28 | 002,058,240 | ---- | M] (Microsoft Corporation) "IMAGEHLP" -> C:\Windows\SysWow64\imagehlp.dll -> [2009/07/14 02:15:31 | 000,154,624 | ---- | M] (Microsoft Corporation) "IMM32" -> C:\Windows\SysWow64\imm32.dll -> [2009/07/14 02:11:21 | 000,119,808 | ---- | M] (Microsoft Corporation) "kernel32" -> C:\Windows\SysWow64\kernel32.dll -> [2009/07/14 02:11:23 | 000,836,608 | ---- | M] (Microsoft Corporation) "LPK" -> C:\Windows\SysWow64\lpk.dll -> [2009/07/14 02:11:23 | 000,025,600 | ---- | M] (Microsoft Corporation) "MSCTF" -> C:\Windows\SysWow64\msctf.dll -> [2009/07/14 02:15:43 | 000,828,928 | ---- | M] (Microsoft Corporation) "MSVCRT" -> C:\Windows\SysWow64\msvcrt.dll -> [2009/07/14 02:15:50 | 000,690,688 | ---- | M] (Microsoft Corporation) "NORMALIZ" -> C:\Windows\SysWow64\normaliz.dll -> [2009/07/14 02:09:00 | 000,002,048 | ---- | M] (Microsoft Corporation) "NSI" -> C:\Windows\SysWow64\nsi.dll -> [2009/07/14 02:16:11 | 000,008,704 | ---- | M] (Microsoft Corporation) "ole32" -> C:\Windows\SysWow64\ole32.dll -> [2009/07/14 02:16:12 | 001,412,608 | ---- | M] (Microsoft Corporation) "OLEAUT32" -> C:\Windows\SysWow64\oleaut32.dll -> [2009/07/14 02:16:12 | 000,571,904 | ---- | M] (Microsoft Corporation) "PSAPI" -> C:\Windows\SysWow64\psapi.dll -> [2009/07/14 02:16:12 | 000,006,144 | ---- | M] (Microsoft Corporation) "rpcrt4" -> C:\Windows\SysWow64\rpcrt4.dll -> [2009/07/14 02:11:23 | 000,662,528 | ---- | M] (Microsoft Corporation) "sechost" -> C:\Windows\SysWow64\sechost.dll -> [2009/07/14 02:16:13 | 000,092,160 | ---- | M] (Microsoft Corporation) "Setupapi" -> C:\Windows\SysWow64\setupapi.dll -> [2009/07/14 02:16:14 | 001,668,608 | ---- | M] (Microsoft Corporation) "SHELL32" -> C:\Windows\SysWow64\shell32.dll -> [2009/07/14 02:16:14 | 012,866,560 | ---- | M] (Microsoft Corporation) "SHLWAPI" -> C:\Windows\SysWow64\shlwapi.dll -> [2009/07/14 02:16:14 | 000,350,208 | ---- | M] (Microsoft Corporation) "URLMON" -> C:\Windows\SysWow64\urlmon.dll -> [2009/12/19 10:02:53 | 001,224,704 | ---- | M] (Microsoft Corporation) "user32" -> C:\Windows\SysWow64\user32.dll -> [2009/07/14 02:11:24 | 000,833,024 | ---- | M] (Microsoft Corporation) "USP10" -> C:\Windows\SysWow64\usp10.dll -> [2009/07/14 02:16:17 | 000,627,200 | ---- | M] (Microsoft Corporation) "WININET" -> C:\Windows\SysWow64\wininet.dll -> [2009/12/19 10:02:55 | 000,977,920 | ---- | M] (Microsoft Corporation) "WLDAP32" -> C:\Windows\SysWow64\Wldap32.dll -> [2009/07/14 02:16:19 | 000,268,800 | ---- | M] (Microsoft Corporation) "WS2_32" -> C:\Windows\SysWow64\ws2_32.dll -> [2009/07/14 02:16:20 | 000,206,336 | ---- | M] (Microsoft Corporation) < Registry Shell Spawning - Select to Repair > -> HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command -> 64bit-batfile [open] -> "%1" %* -> File not found 64bit-cmdfile [open] -> "%1" %* -> File not found 64bit-comfile [open] -> "%1" %* -> File not found 64bit-exefile [open] -> "%1" %* -> File not found 64bit-htmlfile [edit] -> "C:\Program Files (x86)\Microsoft Office\Office12\msohtmed.exe" %1 -> [2008/11/10 18:50:30 | 000,068,472 | ---- | M] (Microsoft Corporation) 64bit-htmlfile [print] -> "C:\Program Files (x86)\Microsoft Office\Office12\msohtmed.exe" /p %1 -> [2008/11/10 18:50:30 | 000,068,472 | ---- | M] (Microsoft Corporation) 64bit-inffile [install] -> %SystemRoot%\System32\InfDefaultInstall.exe "%1" -> [2009/07/14 02:39:13 | 000,010,240 | ---- | M] (Microsoft Corporation) 64bit-InternetShortcut [print] -> "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" -> [2009/12/19 10:02:42 | 005,961,728 | ---- | M] (Microsoft Corporation) 64bit-piffile [open] -> "%1" %* -> File not found 64bit-scrfile [config] -> "%1" -> File not found 64bit-scrfile [install] -> rundll32.exe desk.cpl,InstallScreenSaver %l -> [2009/07/14 02:38:51 | 000,130,048 | ---- | M] (Microsoft Corporation) 64bit-scrfile [open] -> "%1" /S -> File not found 64bit-Unknown [openas] -> %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1 -> File not found 64bit-Directory [cmd] -> cmd.exe /s /k pushd "%V" -> [2009/07/14 02:39:01 | 000,344,576 | ---- | M] (Microsoft Corporation) 64bit-Directory [find] -> %SystemRoot%\Explorer.exe -> [2009/10/31 07:34:59 | 002,870,272 | ---- | M] (Microsoft Corporation) 64bit-Directory [OneNote.Open] -> C:\PROGRA~2\MICROS~1\Office12\ONENOTE.EXE "%L" -> [2008/11/25 06:16:44 | 001,020,776 | ---- | M] (Microsoft Corporation) 64bit-Folder [open] -> %SystemRoot%\Explorer.exe -> [2009/10/31 07:34:59 | 002,870,272 | ---- | M] (Microsoft Corporation) 64bit-Drive [find] -> %SystemRoot%\Explorer.exe -> [2009/10/31 07:34:59 | 002,870,272 | ---- | M] (Microsoft Corporation) batfile [open] -> "%1" %* -> cmdfile [open] -> "%1" %* -> comfile [open] -> "%1" %* -> cplfile [cplopen] -> %SystemRoot%\System32\control.exe "%1",%* -> [2009/07/14 02:14:15 | 000,113,152 | ---- | M] (Microsoft Corporation) exefile [open] -> "%1" %* -> htmlfile [edit] -> "C:\Program Files (x86)\Microsoft Office\Office12\msohtmed.exe" %1 -> [2008/11/10 18:50:30 | 000,068,472 | ---- | M] (Microsoft Corporation) htmlfile [print] -> "C:\Program Files (x86)\Microsoft Office\Office12\msohtmed.exe" /p %1 -> [2008/11/10 18:50:30 | 000,068,472 | ---- | M] (Microsoft Corporation) inffile [install] -> %SystemRoot%\System32\InfDefaultInstall.exe "%1" -> [2009/07/14 02:14:21 | 000,009,216 | ---- | M] (Microsoft Corporation) InternetShortcut [print] -> "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" -> [2009/12/19 10:02:42 | 005,961,728 | ---- | M] (Microsoft Corporation) piffile [open] -> "%1" %* -> scrfile [config] -> "%1" -> scrfile [install] -> rundll32.exe desk.cpl,InstallScreenSaver %l -> [2009/07/14 02:14:08 | 000,128,000 | ---- | M] (Microsoft Corporation) scrfile [open] -> "%1" /S -> Unknown [openas] -> %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1 -> Directory [cmd] -> cmd.exe /s /k pushd "%V" -> [2009/07/14 02:14:15 | 000,301,568 | ---- | M] (Microsoft Corporation) Directory [find] -> %SystemRoot%\Explorer.exe -> [2009/10/31 07:34:59 | 002,870,272 | ---- | M] (Microsoft Corporation) Directory [OneNote.Open] -> C:\PROGRA~2\MICROS~1\Office12\ONENOTE.EXE "%L" -> [2008/11/25 06:16:44 | 001,020,776 | ---- | M] (Microsoft Corporation) Folder [open] -> %SystemRoot%\Explorer.exe -> [2009/10/31 07:34:59 | 002,870,272 | ---- | M] (Microsoft Corporation) Drive [find] -> %SystemRoot%\Explorer.exe -> [2009/10/31 07:34:59 | 002,870,272 | ---- | M] (Microsoft Corporation) < Default Protocols [HKEY_LOCAL_MACHINE\] - Select to Repair > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\ProtocolDefaults -> ldap -> 4 = Restricted sites (Not a Default Protocol) -> news -> 4 = Restricted sites (Not a Default Protocol) -> nntp -> 4 = Restricted sites (Not a Default Protocol) -> oecmd -> 4 = Restricted sites (Not a Default Protocol) -> snews -> 4 = Restricted sites (Not a Default Protocol) -> < Default Protocols [HKEY_USERS\S-1-5-19\] - Select to Repair > -> HKEY_USERS\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\ProtocolDefaults -> @ivt -> @ivt protocol not assigned -> file -> file protocol not assigned -> ftp -> ftp protocol not assigned -> http -> http protocol not assigned -> https -> https protocol not assigned -> shell -> shell protocol not assigned -> < Default Protocols [HKEY_USERS\S-1-5-20\] - Select to Repair > -> HKEY_USERS\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\ProtocolDefaults -> @ivt -> @ivt protocol not assigned -> file -> file protocol not assigned -> ftp -> ftp protocol not assigned -> http -> http protocol not assigned -> https -> https protocol not assigned -> shell -> shell protocol not assigned -> < 64bit-Uninstall List [HKEY_LOCAL_MACHINE\] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ -> {071c9b48-7c32-4621-a0ac-3f809523288f} -> Microsoft Visual C++ 2005 Redistributable (x64) {90120000-002A-0000-1000-0000000FF1CE} -> Microsoft Office Office 64-bit Components 2007 {90120000-002A-0409-1000-0000000FF1CE} -> Microsoft Office Shared 64-bit MUI (English) 2007 {90120000-002A-040C-1000-0000000FF1CE} -> Microsoft Office Shared 64-bit MUI (French) 2007 {90120000-0116-0409-1000-0000000FF1CE} -> Microsoft Office Shared 64-bit Setup Metadata MUI (English) 2007 {95120000-00B9-0409-1000-0000000FF1CE} -> Microsoft Application Error Reporting {95C9C76F-ECF3-40FA-94F8-5DDFB6BAF40D} -> Microsoft Security Essentials {A4526B5A-89C0-4F4B-9E6E-4F883374D5F9} -> Microsoft Antimalware Service FR-FR Language Pack {ACCA82EB-7088-919E-5E1C-100A24F11CCF} -> ATI Catalyst Install Manager {B6E3757B-5E77-3915-866A-CCFC4B8D194C} -> Microsoft Visual C++ 2005 ATL Update kb973923 - x64 8.0.50727.4053 {DBD88705-2570-4ABA-8EC8-432ACE0481A6} -> Registry Reviver {E2FCA441-6D7B-CD78-3ADF-42EA9FA06065} -> ccc-utility64 {E590FD1C-E8C6-4D2E-8CA9-77B403F7EE01} -> Microsoft Antimalware Microsoft Security Essentials -> Microsoft Security Essentials RegistryReviver -> Registry Reviver SynTPDeinstKey -> Synaptics Pointing Device Driver < Uninstall List [HKEY_LOCAL_MACHINE\] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ -> {0214A441-A4AB-43A8-8DEF-2F73C5364673} -> Microsoft Works {059C042E-796A-4ACC-A81A-ECC2010BB78C} -> Windows Live Messenger {12EFA1A4-AC3B-443C-8143-237EDE760403} -> NTI Backup Now Standard {183F0908-AD5E-8B3B-5F06-28B1A8C65C62} -> CCC Help Japanese {205C6BDD-7B73-42DE-8505-9A093F35A238} -> Outil de téléchargement Windows Live {2231CE39-B963-4B9D-823A-F412ECA637B1} -> Windows Live Writer {22B775E7-6C42-4FC5-8E10-9A5E3257BD94} -> MSVCRT {23E9588B-05ED-BC2F-EB69-101A96511EF1} -> ccc-core-static {2413930C-8309-47A6-BC61-5EF27A4222BC} -> NTI Media Maker 8 {2484D1EA-CBA4-60BB-82B9-F8477D25C47A} -> CCC Help Dutch {287ECFA4-719A-2143-A09B-D6A12DE54E40} -> Acrobat.com {29802D65-9514-DB20-36CD-E47A94C8AEB9} -> Catalyst Control Center Graphics Full Existing {2F61E9D7-CD05-643E-A04E-CC1A8B6610BA} -> CCC Help Finnish {2FA3CDD8-1436-497D-6339-789936561E99} -> CCC Help German {3108C217-BE83-42E4-AE9E-A56A2A92E549} -> Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver {31D611A1-03B5-4018-BC6F-DDB5B5616478}_is1 -> eMachines GameZone Console {34123E80-BE96-6282-1167-6696730AF6D2} -> CCC Help Korean {3B4E636E-9D65-4D67-BA61-189800823F52} -> Windows Live Communications Platform {3D20EF26-2E9A-D388-851D-E7675BBACFF5} -> Catalyst Control Center Core Implementation {3DB0448D-AD82-4923-B305-D001E521A964} -> eMachines Power Management {4024F49B-65D4-D6B2-2A1D-6DBF6F09F181} -> CCC Help Greek {44E54A81-9D91-4AA1-9417-80AFF134F5FF} -> Galerie de photos Windows Live {49A63237-FD38-AE77-6DF6-FFB41499A4E6} -> CCC Help Hungarian {4DE3E3D9-AE81-45DE-9195-3015F7B1DBF3} -> Junk Mail filter update {4F0FC827-B693-F166-612E-EA89D798540C} -> CCC Help Chinese Traditional {52FBF90E-D2EF-A2A3-1CCA-6984596B1B02} -> CCC Help English {628CBFE4-3823-67FB-26D2-566899C3BB5C} -> CCC Help Italian {63DC2DA0-2A6C-4C38-9249-B75395458657} -> Windows Live Mail {63F26DAE-CB0D-98B6-3019-D4FC3D0DD203} -> Catalyst Control Center InstallProxy {652EB559-6865-DEF4-2409-D506963C15FD} -> CCC Help Polish {68987945-A387-4C25-0C59-21F2AF657E65} -> CCC Help Thai {6B45E33B-6BB4-234B-2F5F-65B1A103801D} -> CCC Help Russian {6B99737C-9FDC-50F9-C9A4-AB7DA5C9A336} -> Catalyst Control Center Graphics Full New {7299052b-02a4-4627-81f2-1818da5d550d} -> Microsoft Visual C++ 2005 Redistributable {7370DF47-B4F9-4279-BFC3-3F09919F720D} -> Installation Windows Live {770657D0-A123-3C07-8E44-1C83EC895118} -> Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 {7B0A8F0E-3672-4DA5-9540-A8D0171C38D8} -> TuneUp Utilities Language Pack (fr-FR) {7BE74C0E-F300-D0A6-780B-C93BB78DE58C} -> CCC Help Norwegian {7E75ACC5-B0EC-7006-183A-374974019911} -> Catalyst Control Center Graphics Light {7F811A54-5A09-4579-90E1-C93498E230D9} -> eMachines Recovery Management {82809116-D1EE-443C-AE31-F19E709DDF7A} -> AMD USB Filter Driver {82C36957-D2B8-4EF2-B88C-5FA03AA848C7-110209593} -> Chicken Invaders 2 {82C36957-D2B8-4EF2-B88C-5FA03AA848C7-110551697} -> Granny In Paradise {82C36957-D2B8-4EF2-B88C-5FA03AA848C7-112662477} -> Merriam Websters Spell Jam {82C36957-D2B8-4EF2-B88C-5FA03AA848C7-11273477} -> Amazonia {82C36957-D2B8-4EF2-B88C-5FA03AA848C7-112920767} -> Alice Greenfingers {82C36957-D2B8-4EF2-B88C-5FA03AA848C7-113786380} -> Heroes of Hellas {82C36957-D2B8-4EF2-B88C-5FA03AA848C7-113832110} -> Dream Day First Home {82C36957-D2B8-4EF2-B88C-5FA03AA848C7-114803710} -> Star Defender 4 {82C36957-D2B8-4EF2-B88C-5FA03AA848C7-115053100} -> Dairy Dash {82C36957-D2B8-4EF2-B88C-5FA03AA848C7-11531173} -> Farm Frenzy 2 {82C7B308-0BDD-49D8-8EA5-9CD3A3F9DF41} -> Windows Live Call {89F4137D-6C26-4A84-BDB8-2E5A4BB71E00} -> Microsoft Silverlight {8FFC5648-FAF8-43A3-BC8F-42BA1E275C4E} -> Choice Guard {90120000-0015-040C-0000-0000000FF1CE} -> Microsoft Office Access MUI (French) 2007 {90120000-0015-040C-0000-0000000FF1CE}_OMUI.fr-fr_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C} -> Microsoft Office 2007 Service Pack 2 (SP2) {90120000-0016-0409-0000-0000000FF1CE} -> Microsoft Office Excel MUI (English) 2007 {90120000-0016-0409-0000-0000000FF1CE}_HOMESTUDENTR_{2FC4457D-409E-466F-861F-FB0CB796B53E} -> 2007 Microsoft Office Suite Service Pack 2 (SP2) {90120000-0016-040C-0000-0000000FF1CE} -> Microsoft Office Excel MUI (French) 2007 {90120000-0016-040C-0000-0000000FF1CE}_OMUI.fr-fr_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C} -> Microsoft Office 2007 Service Pack 2 (SP2) {90120000-0017-040C-0000-0000000FF1CE} -> Microsoft Office SharePoint Designer MUI (French) 2007 {90120000-0017-040C-0000-0000000FF1CE}_OMUI.fr-fr_{CCDA3DD6-E33D-4D75-B7C9-FF585580CE83} -> Microsoft Office SharePoint Designer 2007 Service Pack 2 (SP2) {90120000-0018-0409-0000-0000000FF1CE} -> Microsoft Office PowerPoint MUI (English) 2007 {90120000-0018-0409-0000-0000000FF1CE}_HOMESTUDENTR_{2FC4457D-409E-466F-861F-FB0CB796B53E} -> 2007 Microsoft Office Suite Service Pack 2 (SP2) {90120000-0018-040C-0000-0000000FF1CE} -> Microsoft Office PowerPoint MUI (French) 2007 {90120000-0018-040C-0000-0000000FF1CE}_OMUI.fr-fr_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C} -> Microsoft Office 2007 Service Pack 2 (SP2) {90120000-0019-040C-0000-0000000FF1CE} -> Microsoft Office Publisher MUI (French) 2007 {90120000-0019-040C-0000-0000000FF1CE}_OMUI.fr-fr_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C} -> Microsoft Office 2007 Service Pack 2 (SP2) {90120000-001A-040C-0000-0000000FF1CE} -> Microsoft Office Outlook MUI (French) 2007 {90120000-001A-040C-0000-0000000FF1CE}_OMUI.fr-fr_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C} -> Microsoft Office 2007 Service Pack 2 (SP2) {90120000-001B-0409-0000-0000000FF1CE} -> Microsoft Office Word MUI (English) 2007 {90120000-001B-0409-0000-0000000FF1CE}_HOMESTUDENTR_{2FC4457D-409E-466F-861F-FB0CB796B53E} -> 2007 Microsoft Office Suite Service Pack 2 (SP2) {90120000-001B-040C-0000-0000000FF1CE} -> Microsoft Office Word MUI (French) 2007 {90120000-001B-040C-0000-0000000FF1CE}_OMUI.fr-fr_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C} -> Microsoft Office 2007 Service Pack 2 (SP2) {90120000-001F-0401-0000-0000000FF1CE} -> Microsoft Office Proof (Arabic) 2007 {90120000-001F-0401-0000-0000000FF1CE}_OMUI.fr-fr_{14809F99-C601-4D4A-9391-F1E8FAA964C5} -> Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) {90120000-001F-0407-0000-0000000FF1CE} -> Microsoft Office Proof (German) 2007 {90120000-001F-0407-0000-0000000FF1CE}_OMUI.fr-fr_{A0516415-ED61-419A-981D-93596DA74165} -> Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) {90120000-001F-0409-0000-0000000FF1CE} -> Microsoft Office Proof (English) 2007 {90120000-001F-0409-0000-0000000FF1CE}_HOMESTUDENTR_{ABDDE972-355B-4AF1-89A8-DA50B7B5C045} -> 2007 Microsoft Office Suite Service Pack 2 (SP2) {90120000-001F-040C-0000-0000000FF1CE} -> Microsoft Office Proof (French) 2007 {90120000-001F-040C-0000-0000000FF1CE}_HOMESTUDENTR_{F580DDD5-8D37-4998-968E-EBB76BB86787} -> 2007 Microsoft Office Suite Service Pack 2 (SP2) {90120000-001F-0413-0000-0000000FF1CE} -> Microsoft Office Proof (Dutch) 2007 {90120000-001F-0413-0000-0000000FF1CE}_OMUI.fr-fr_{D66D5A44-E480-4BA4-B4F2-C554F6B30EBB} -> Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) {90120000-001F-0C0A-0000-0000000FF1CE} -> Microsoft Office Proof (Spanish) 2007 {90120000-001F-0C0A-0000-0000000FF1CE}_HOMESTUDENTR_{187308AB-5FA7-4F14-9AB9-D290383A10D9} -> 2007 Microsoft Office Suite Service Pack 2 (SP2) {90120000-0020-040C-0000-0000000FF1CE} -> Module de compatibilité pour Microsoft Office System 2007 {90120000-002A-0000-1000-0000000FF1CE}_HOMESTUDENTR_{E64BA721-2310-4B55-BE5A-2925F9706192} -> 2007 Microsoft Office Suite Service Pack 2 (SP2) {90120000-002A-0409-1000-0000000FF1CE}_HOMESTUDENTR_{DE5A002D-8122-4278-A7EE-3121E7EA254E} -> 2007 Microsoft Office Suite Service Pack 2 (SP2) {90120000-002A-040C-1000-0000000FF1CE}_OMUI.fr-fr_{B165D3C2-40AE-4D39-86F7-E5C87C4264C0} -> Microsoft Office 2007 Service Pack 2 (SP2) {90120000-002C-0409-0000-0000000FF1CE} -> Microsoft Office Proofing (English) 2007 {90120000-002C-040C-0000-0000000FF1CE} -> Microsoft Office Proofing (French) 2007 {90120000-0044-040C-0000-0000000FF1CE} -> Microsoft Office InfoPath MUI (French) 2007 {90120000-0044-040C-0000-0000000FF1CE}_OMUI.fr-fr_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C} -> Microsoft Office 2007 Service Pack 2 (SP2) {90120000-006E-0409-0000-0000000FF1CE} -> Microsoft Office Shared MUI (English) 2007 {90120000-006E-0409-0000-0000000FF1CE}_HOMESTUDENTR_{DE5A002D-8122-4278-A7EE-3121E7EA254E} -> 2007 Microsoft Office Suite Service Pack 2 (SP2) {90120000-006E-040C-0000-0000000FF1CE} -> Microsoft Office Shared MUI (French) 2007 {90120000-006E-040C-0000-0000000FF1CE}_OMUI.fr-fr_{B165D3C2-40AE-4D39-86F7-E5C87C4264C0} -> Microsoft Office 2007 Service Pack 2 (SP2) {90120000-00A1-0409-0000-0000000FF1CE} -> Microsoft Office OneNote MUI (English) 2007 {90120000-00A1-0409-0000-0000000FF1CE}_HOMESTUDENTR_{2FC4457D-409E-466F-861F-FB0CB796B53E} -> 2007 Microsoft Office Suite Service Pack 2 (SP2) {90120000-00A1-040C-0000-0000000FF1CE} -> Microsoft Office OneNote MUI (French) 2007 {90120000-00A1-040C-0000-0000000FF1CE}_OMUI.fr-fr_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C} -> Microsoft Office 2007 Service Pack 2 (SP2) {90120000-00BA-040C-0000-0000000FF1CE} -> Microsoft Office Groove MUI (French) 2007 {90120000-00BA-040C-0000-0000000FF1CE}_OMUI.fr-fr_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C} -> Microsoft Office 2007 Service Pack 2 (SP2) {90120000-0100-040C-0000-0000000FF1CE} -> Microsoft Office O MUI (French) 2007 {90120000-0100-040C-0000-0000000FF1CE}_OMUI.fr-fr_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C} -> Microsoft Office 2007 Service Pack 2 (SP2) {90120000-0101-040C-0000-0000000FF1CE} -> Microsoft Office X MUI (French) 2007 {90120000-0101-040C-0000-0000000FF1CE}_OMUI.fr-fr_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C} -> Microsoft Office 2007 Service Pack 2 (SP2) {90120000-0115-0409-0000-0000000FF1CE} -> Microsoft Office Shared Setup Metadata MUI (English) 2007 {90120000-0115-0409-0000-0000000FF1CE}_HOMESTUDENTR_{DE5A002D-8122-4278-A7EE-3121E7EA254E} -> 2007 Microsoft Office Suite Service Pack 2 (SP2) {90120000-0116-0409-1000-0000000FF1CE}_HOMESTUDENTR_{DE5A002D-8122-4278-A7EE-3121E7EA254E} -> 2007 Microsoft Office Suite Service Pack 2 (SP2) {91120000-002F-0000-0000-0000000FF1CE} -> Microsoft Office Home and Student 2007 {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{0B36C6D6-F5D8-4EAF-BF94-4376A230AD5B} -> 2007 Microsoft Office Suite Service Pack 2 (SP2) {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{3D019598-7B59-447A-80AE-815B703B84FF} -> Security Update for Microsoft Office system 2007 (972581) {95120000-00AF-040C-0000-0000000FF1CE} -> Microsoft Office PowerPoint Viewer 2007 (French) {96AE7E41-E34E-47D0-AC07-1091A8127911} -> Realtek USB 2.0 Card Reader {97124B44-C17B-C352-44B1-403D0D706173} -> CCC Help Czech {9ACA8261-11D1-F8A1-C154-7F8B23515C79} -> CCC Help Swedish {9C5EB781-0D37-44B8-9A58-77B3E4BF5F5E} -> Windows Live Sync {A2BCA9F1-566C-4805-97D1-7FDC93386723} -> Adobe AIR {A77255C4-AFCB-44A3-BF0F-2091A71FFD9E} -> Video Web Camera {A92DAB39-4E2C-4304-9AB6-BC44E68B55E2} -> Google Update Helper {A9574A7E-C024-EED1-7A81-CC4786A1915A} -> CCC Help Portuguese {AA32D2A6-1299-0F05-BF8D-04075A9F69EB} -> CCC Help Turkish {AAF89271-2594-468D-B578-96B2E30C41C4} -> eBay Worldwide {AC76BA86-7AD7-FFFF-7B44-A91000000001} -> Adobe Reader 9.1 MUI {BCC05B1F-7397-799A-9EDB-AC10123BB17A} -> CCC Help Chinese Standard {BEF4FD8A-29FF-C250-468A-5FC55F0E3451} -> Catalyst Control Center Localization All {C57BCDE1-7CB9-467D-B3BA-7E119916CDC1} -> Norton Online Backup {CF7A62B6-F712-412E-9914-D80033A7F8B8} -> Catalyst Control Center - Branding {D3742F82-1C1A-4DCC-ABBD-0E7C3C0185CC} -> TuneUp Utilities {D41301F8-90FD-9CE8-CD2C-ED2B9D5F07E3} -> CCC Help Spanish {D43AD08C-BE76-8C5B-FD90-4B665EF60E2E} -> CCC Help Danish {DA4CA661-5ABF-9218-6E42-84BF89F43655} -> CCC Help French {DCE8CD14-FBF5-4464-B9A4-E18E473546C7} -> Assistant de connexion Windows Live {E50AE784-FABE-46DA-A1F8-7B6B56DCB22E} -> Microsoft Office Suite Activation Assistant {EE171732-BEB4-4576-887D-CB62727F01CA} -> eMachines Updater {F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8} -> Microsoft SQL Server 2005 Compact Edition [ENU] {F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC} -> Realtek High Definition Audio Driver Adobe AIR -> Adobe AIR Adobe Flash Player ActiveX -> Adobe Flash Player 10 ActiveX CCleaner -> CCleaner eMachines Registration -> eMachines Registration eMachines Screensaver -> eMachines ScreenSaver eMachines Welcome Center -> Welcome Center HijackThis -> HijackThis 2.0.2 HOMESTUDENTR -> Microsoft Office Home and Student 2007 Identity Card -> Identity Card InstallShield_{12EFA1A4-AC3B-443C-8143-237EDE760403} -> NTI Backup Now 5 InstallShield_{2413930C-8309-47A6-BC61-5EF27A4222BC} -> NTI Media Maker 8 LManager -> Launch Manager Malwarebytes' Anti-Malware_is1 -> Malwarebytes' Anti-Malware NIS -> Norton Internet Security OMUI.fr-fr -> Microsoft Office Language Pack 2007 - French/Français Sophos-AntiRootkit -> Sophos Anti-Rootkit 1.5.0 TUGZip_is1 -> TUGZip 3.5 TuneUp Utilities -> TuneUp Utilities WinLiveSuite_Wave3 -> Installation Windows Live WinRAR archiver -> Logiciel d'archivage WinRAR < EventViewer Logs - Last 10 Errors > -> Event Information -> Description Application [ Error ] 20/03/2010 22:12:37 Computer Name = mcslam-PC | Source = Schedule | ID = 0 -> Description = Application [ Error ] 20/03/2010 22:12:57 Computer Name = mcslam-PC | Source = Schedule | ID = 0 -> Description = Application [ Error ] 20/03/2010 22:13:17 Computer Name = mcslam-PC | Source = Schedule | ID = 0 -> Description = Application [ Error ] 20/03/2010 22:14:35 Computer Name = mcslam-PC | Source = Schedule | ID = 0 -> Description = Application [ Error ] 20/03/2010 22:16:45 Computer Name = mcslam-PC | Source = Schedule | ID = 0 -> Description = Application [ Error ] 20/03/2010 22:17:06 Computer Name = mcslam-PC | Source = Schedule | ID = 0 -> Description = Application [ Error ] 20/03/2010 22:20:08 Computer Name = mcslam-PC | Source = Schedule | ID = 0 -> Description = Application [ Error ] 20/03/2010 22:23:49 Computer Name = mcslam-PC | Source = Application Error | ID = 1000 -> Description = Nom de l’application défaillante ghmzgk.exe, version : 0.0.0.0, horodatage : 0x4a3a2b36 Nom du module défaillant : ntdll.dll, version : 6.1.7600.16385, horodatage : 0x4a5bdb3b Code d’exception : 0xc0000005 Décalage d’erreur : 0x00033e1b ID du processus défaillant : 0x858 Heure de début de l’application défaillante : 0x01cac89d883ec4bd Chemin d’accès de l’application défaillante : C:\Users\mcslam\AppData\Local\Temp\ghmzgk.exe Chemin d’accès du module défaillant: C:\Windows\SysWOW64\ntdll.dll ID de rapport : c81a5565-3490-11df-aefd-00262255f73e Application [ Error ] 20/03/2010 22:53:46 Computer Name = mcslam-PC | Source = Schedule | ID = 0 -> Description = Application [ Error ] 20/03/2010 22:58:39 Computer Name = mcslam-PC | Source = Schedule | ID = 0 -> Description = System [ Error ] 21/03/2010 02:24:13 Computer Name = mcslam-PC | Source = Service Control Manager | ID = 7001 -> Description = Le service Assistance NetBIOS sur TCP/IP dépend du service NetBT qui n’a pas pu démarrer en raison de l’erreur : %%1058 System [ Error ] 21/03/2010 05:17:58 Computer Name = mcslam-PC | Source = atikmdag | ID = 52236 -> Description = CPLIB :: General - Invalid Parameter System [ Error ] 21/03/2010 05:17:58 Computer Name = mcslam-PC | Source = atikmdag | ID = 43029 -> Description = Display is not active System [ Error ] 21/03/2010 05:18:16 Computer Name = mcslam-PC | Source = Service Control Manager | ID = 7001 -> Description = Le service Assistance NetBIOS sur TCP/IP dépend du service NetBT qui n’a pas pu démarrer en raison de l’erreur : %%1058 System [ Error ] 21/03/2010 05:18:40 Computer Name = mcslam-PC | Source = Service Control Manager | ID = 7001 -> Description = Le service Assistance NetBIOS sur TCP/IP dépend du service NetBT qui n’a pas pu démarrer en raison de l’erreur : %%1058 System [ Error ] 21/03/2010 05:18:41 Computer Name = mcslam-PC | Source = Service Control Manager | ID = 7001 -> Description = Le service Assistance NetBIOS sur TCP/IP dépend du service NetBT qui n’a pas pu démarrer en raison de l’erreur : %%1058 System [ Error ] 21/03/2010 05:20:49 Computer Name = mcslam-PC | Source = Service Control Manager | ID = 7001 -> Description = Le service Assistance NetBIOS sur TCP/IP dépend du service NetBT qui n’a pas pu démarrer en raison de l’erreur : %%1058 System [ Error ] 21/03/2010 05:20:53 Computer Name = mcslam-PC | Source = Service Control Manager | ID = 7001 -> Description = Le service Assistance NetBIOS sur TCP/IP dépend du service NetBT qui n’a pas pu démarrer en raison de l’erreur : %%1058 System [ Error ] 21/03/2010 05:37:41 Computer Name = mcslam-PC | Source = atikmdag | ID = 52236 -> Description = CPLIB :: General - Invalid Parameter System [ Error ] 21/03/2010 05:37:41 Computer Name = mcslam-PC | Source = atikmdag | ID = 43029 -> Description = Display is not active < End of report >

la faklkra c est bug sur bug comme si que je surfais et q un prog essayer de s interposer bug sur biug et terrible a la suite de cela j ai fait deux fois otm et a chaque fois erreur critique et l ordi c est eteint.... 2 heures de bugs non stop les fichirers sont revenus en doublons et impossible de les ouvrir car ils sont ouvert dans le system

BON JE T ENVOIES DES MESSAGES JE NE SAIS PAS OU IL VONT C EST PIRATER MAINTENANT SUR REGARDE TA BOITE JE VIENS JUSTE AVANT DE L ENVOYER ET IL A ETE VALIDER PAR VOS SERVICS ET IL N EST PAS LA AUCUNE TRACE REGARDE

tIENS J AI ESSAYE AU MOINS 10 FOIS DE TE L ENVOYER LA JE TE L AI ENVOYE DANS TA BOITE ET PAR MIRACLE JE NE SAIS COMMENT IL EST LA....PEUT ETRE MODIFIE REGARDE PLUTOT CELUI DE TA BOITE CAR JE NE L AI PAS VALIDE

BON IMPOSSIBLE LES PIRTES S AMUSENT QUAND CA LEUR PASSERA 5/6 FOIS QUE J ESSAIE DE TE LE POSTER

et sans tcpip non plus j en ai 1 mais il n est pas en administrateur j en refait 1 en ce moment meme...