Ok fais tout ce qui est indiqué

Voici enfin le rapport:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 17:06:49, on 21/10/2009
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v8.00 (8.00.6001.18828)
Boot mode: Normal

Running processes:
C:\Users\Croûtons\AppData\Local\Clavier+\Clavier.exe
C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe­
C:\Program Files (x86)\DAEMON Tools Lite\daemon.exe
C:\Program Files (x86)\Le Robert\Le Grand Robert\grwinHyper.exe
C:\Program Files (x86)\Common Files\Ahead\Lib\NMBgMonitor.exe
C:\Program Files\Alwil Software\Avast4\ashDisp.exe
C:\Program Files (x86)\Babylon\Babylon-Pro\Babylon.exe
C:\Program Files (x86)\Google\Google Desktop Search\GoogleDesktop.exe
C:\Program Files (x86)\Acer\Empowering Technology\eDataSecurity\x86\eDSMSNLoader32.exe
C:\Program Files (x86)\Common Files\Ahead\Lib\NMIndexStoreSvr.exe
C:\Program Files (x86)\Java\jre6\bin\jusched.exe
C:\Program Files (x86)\Lavasoft\Ad-Aware\AAWTray.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Windows\SysWOW64\conime.exe
C:\Program Files (x86)\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://homepage.acer.com/rdr.aspx?b=ACAW&l=040c&s=1&o=vp64&d=1006&m=aspire_x1700
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://homepage.acer.com/rdr.aspx?b=ACAW&l=040c&s=1&o=vp64&d=1006&m=aspire_x1700
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.europowersearch.com/Search.html?SelectedSearchLang=FR
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O1 - Hosts: ::1 localhost
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: VMN Toolbar - {4E7BD74F-2B8D-469E-8DA9-FD60BB9AAE33} - C:\PROGRA~2\VMNTOO~1\VMNTOO~1.DLL (file missing)
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files (x86)\Google\GoogleToolbarNotifier\5.3.4501.1418\swg.dll
O2 - BHO: Super-Search - search like an expert - {B88F0A3B-663C-4342-A7CE-2D6F81032897} - C:\PROGRA~2\EASYSE~1\BHO\4SUPER~1.DLL
O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files (x86)\Google\Google Toolbar\Component\fastsearch_B7C5AC242193BB3E.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
O3 - Toolbar: Acer eDataSecurity Management - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - C:\Program Files (x86)\Acer\Empowering Technology\eDataSecurity\x86\eDStoolbar.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
O3 - Toolbar: VMN Toolbar - {4E7BD74F-2B8D-469E-8DA9-FD60BB9AAE33} - C:\PROGRA~2\VMNTOO~1\VMNTOO~1.DLL (file missing)
O4 - HKLM\..\Run: [PCMMediaSharing] "C:\Program Files (x86)\Acer Arcade Live\Acer HomeMedia Connect\Kernel\DMS\PCMMediaSharing.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [StartCCC] "c:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [SiteVacuum] "C:\Program Files (x86)\EasySearch\SiteVacuumClient.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [Babylon Client] "C:\Program Files (x86)\Babylon\Babylon-Pro\Babylon.exe" -AutoStart
O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files (x86)\Google\Google Desktop Search\GoogleDesktop.exe" /startup
O4 - HKLM\..\Run: [Malwarebytes Anti-Malware (reboot)] "C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbam.exe" /runcleanupscript
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Java\jre6\bin\jusched.exe"
O4 - HKCU\..\Run: [Clavier+] C:\Users\Croûtons\AppData\Local\Clavier+\Clavier.exe
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [swg] "C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\daemon.exe" -autorun
O4 - HKCU\..\Run: [grwinHyper] C:\Program Files (x86)\Le Robert\Le Grand Robert\grwinHyper.exe
O4 - HKCU\..\Run: [Le Petit Robert V3 Hyperappel] C:\Program Files\Le Robert\Le Petit Robert 2009\RobertHA.exe
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files (x86)\Common Files\Ahead\Lib\NMBgMonitor.exe"
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files (x86)\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: Translate with &Babylon - res://C:\Program Files (x86)\Babylon\Babylon-Pro\Utils\BabylonIEPI.dll/Translate.htm
O13 - Gopher Prefix:
O20 - AppInit_DLLs: C:\PROGRA~2\Google\GOOGLE~4\GOEC62~1.DLL
O23 - Service: Acer HomeMedia Connect Service - CyberLink - C:\Program Files (x86)\Acer Arcade Live\Acer HomeMedia Connect\Kernel\DMS\CLMSServer.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati External Event Utility - Unknown owner - C:\Windows\system32\Ati2evxx.exe (file missing)
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files (x86)\Bonjour\mDNSResponder.exe
O23 - Service: @dfsrres.dll,-101 (DFSR) - Unknown owner - C:\Windows\system32\DFSR.exe (file missing)
O23 - Service: eDataSecurity Service - Egis Incorporated - C:\Program Files (x86)\Acer\Empowering Technology\eDataSecurity\x86\eDSService.exe
O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe
O23 - Service: Empowering Technology Service (ETService) - Unknown owner - C:\Program Files\Acer\Empowering Technology\Service\ETService.exe
O23 - Service: Google Desktop Manager 5.9.909.8267 (GoogleDesktopManager-090809-085438) - Google - C:\Program Files (x86)\Google\Google Desktop Search\GoogleDesktop.exe
O23 - Service: Service Google Update (gupdate1ca31703229744d) (gupdate1ca31703229744d) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files (x86)\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Lavasoft Ad-Aware Service - Lavasoft - C:\Program Files (x86)\Lavasoft\Ad-Aware\AAWService.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: NBService - Nero AG - C:\Program Files (x86)\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: Nero BackItUp Scheduler 4.0 - Nero AG - C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NMIndexingService - Nero AG - C:\Program Files (x86)\Common Files\Ahead\Lib\NMIndexingService.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files (x86)\CyberLink\Shared Files\RichVideo.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: SBSD Security Center Service (SBSDWSCService) - Safer Networking Ltd. - C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe
O23 - Service: Seagate Sync Service - Seagate Technology LLC - C:\Program Files (x86)\Seagate\Sync\SeaSyncServices.exe
O23 - Service: @%SystemRoot%\system32\SLsvc.exe,-101 (slsvc) - Unknown owner - C:\Windows\system32\SLsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: wampapache - Apache Software Foundation - c:\wamp\bin\apache\apache2.2.11\bin\httpd.exe
O23 - Service: wampmysqld - Unknown owner - c:\wamp\bin\mysql\mysql5.1.36\bin\mysqld.exe
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
End of file - 11480 bytes

Tu as fais toolbar sd?

sur un ordi un seul antivirus : vire avast ou nod 32


puis


scan avec malwarebyte , fais un scan rapide et colle le rapport obtenu et vire ce qui est trouvé:


http://www.malekal.com/tutorial_MalwareBytes_AntiMalware.php­­

Entre Avast, NOD32 et Microsoft Security Essentials, lequel est le meilleur ?

Je fais la suite et te l'envoie.

Nod 32 est le mieux


sinon en gratuit pour moi antivir

Firefox semble fonctionner à nouveau normalement. Par contre, une des 3 pages intempestives m'a laissé une barre au-dessus de l'horloge avec un tas de truc dont j'aimerais bien me débarrasser...

J'ai parlé trop vite... Au lancement de Firefox, on retrouve trois pages : celle de démarrage de Mozilla Firefox ; celle de Anyweather - Animated weather ; et celle de QTL - Quick Translation. Les problème n'est donc pas résolu et j'ai droit en plus à une barre (au-dessus de l'horloge) dont je me passerais bien...

Tu as le rapport TOOLBAR SD?

Logfile of random's system information tool 1.06 (written by random/random)
Run by Croûtons at 2009-10-21 18:46:29
Microsoft® Windows Vista™ Édition Familiale Premium Service Pack 2
System drive C: has 361 GB (77%) free of 467 GB
Total RAM: 4094 MB (52% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 18:46:32, on 21/10/2009
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v8.00 (8.00.6001.18828)
Boot mode: Normal

Running processes:
C:\Users\Croûtons\AppData\Local\Clavier+\Clavier.exe
C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe­
C:\Program Files (x86)\DAEMON Tools Lite\daemon.exe
C:\Program Files (x86)\Le Robert\Le Grand Robert\grwinHyper.exe
C:\Program Files (x86)\Common Files\Ahead\Lib\NMBgMonitor.exe
C:\Program Files\Alwil Software\Avast4\ashDisp.exe
C:\Program Files (x86)\Babylon\Babylon-Pro\Babylon.exe
C:\Program Files (x86)\Google\Google Desktop Search\GoogleDesktop.exe
C:\Program Files (x86)\Acer\Empowering Technology\eDataSecurity\x86\eDSMSNLoader32.exe
C:\Program Files (x86)\Common Files\Ahead\Lib\NMIndexStoreSvr.exe
C:\Program Files (x86)\Java\jre6\bin\jusched.exe
C:\Program Files (x86)\Lavasoft\Ad-Aware\AAWTray.exe
C:\Windows\SysWOW64\conime.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Users\Croûtons\Desktop\RSIT.exe
C:\Program Files (x86)\Trend Micro\HijackThis\Croûtons.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://homepage.acer.com/rdr.aspx?b=ACAW&l=040c&s=1&o=vp64&d=1006&m=aspire_x1700
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://homepage.acer.com/rdr.aspx?b=ACAW&l=040c&s=1&o=vp64&d=1006&m=aspire_x1700
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.europowersearch.com/Search.html?SelectedSearchLang=FR
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O1 - Hosts: ::1 localhost
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: VMN Toolbar - {4E7BD74F-2B8D-469E-8DA9-FD60BB9AAE33} - C:\PROGRA~2\VMNTOO~1\VMNTOO~1.DLL (file missing)
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files (x86)\Google\GoogleToolbarNotifier\5.3.4501.1418\swg.dll
O2 - BHO: Super-Search - search like an expert - {B88F0A3B-663C-4342-A7CE-2D6F81032897} - C:\PROGRA~2\EASYSE~1\BHO\4SUPER~1.DLL
O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files (x86)\Google\Google Toolbar\Component\fastsearch_B7C5AC242193BB3E.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
O3 - Toolbar: Acer eDataSecurity Management - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - C:\Program Files (x86)\Acer\Empowering Technology\eDataSecurity\x86\eDStoolbar.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
O3 - Toolbar: VMN Toolbar - {4E7BD74F-2B8D-469E-8DA9-FD60BB9AAE33} - C:\PROGRA~2\VMNTOO~1\VMNTOO~1.DLL (file missing)
O4 - HKLM\..\Run: [PCMMediaSharing] "C:\Program Files (x86)\Acer Arcade Live\Acer HomeMedia Connect\Kernel\DMS\PCMMediaSharing.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [StartCCC] "c:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [SiteVacuum] "C:\Program Files (x86)\EasySearch\SiteVacuumClient.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [Babylon Client] "C:\Program Files (x86)\Babylon\Babylon-Pro\Babylon.exe" -AutoStart
O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files (x86)\Google\Google Desktop Search\GoogleDesktop.exe" /startup
O4 - HKLM\..\Run: [Malwarebytes Anti-Malware (reboot)] "C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbam.exe" /runcleanupscript
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Java\jre6\bin\jusched.exe"
O4 - HKCU\..\Run: [Clavier+] C:\Users\Croûtons\AppData\Local\Clavier+\Clavier.exe
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [swg] "C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\daemon.exe" -autorun
O4 - HKCU\..\Run: [grwinHyper] C:\Program Files (x86)\Le Robert\Le Grand Robert\grwinHyper.exe
O4 - HKCU\..\Run: [Le Petit Robert V3 Hyperappel] C:\Program Files\Le Robert\Le Petit Robert 2009\RobertHA.exe
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files (x86)\Common Files\Ahead\Lib\NMBgMonitor.exe"
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files (x86)\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: Translate with &Babylon - res://C:\Program Files (x86)\Babylon\Babylon-Pro\Utils\BabylonIEPI.dll/Translate.htm
O13 - Gopher Prefix:
O20 - AppInit_DLLs: C:\PROGRA~2\Google\GOOGLE~4\GOEC62~1.DLL
O23 - Service: Acer HomeMedia Connect Service - CyberLink - C:\Program Files (x86)\Acer Arcade Live\Acer HomeMedia Connect\Kernel\DMS\CLMSServer.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati External Event Utility - Unknown owner - C:\Windows\system32\Ati2evxx.exe (file missing)
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files (x86)\Bonjour\mDNSResponder.exe
O23 - Service: @dfsrres.dll,-101 (DFSR) - Unknown owner - C:\Windows\system32\DFSR.exe (file missing)
O23 - Service: eDataSecurity Service - Egis Incorporated - C:\Program Files (x86)\Acer\Empowering Technology\eDataSecurity\x86\eDSService.exe
O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe
O23 - Service: Empowering Technology Service (ETService) - Unknown owner - C:\Program Files\Acer\Empowering Technology\Service\ETService.exe
O23 - Service: Google Desktop Manager 5.9.909.8267 (GoogleDesktopManager-090809-085438) - Google - C:\Program Files (x86)\Google\Google Desktop Search\GoogleDesktop.exe
O23 - Service: Service Google Update (gupdate1ca31703229744d) (gupdate1ca31703229744d) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files (x86)\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Lavasoft Ad-Aware Service - Lavasoft - C:\Program Files (x86)\Lavasoft\Ad-Aware\AAWService.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: NBService - Nero AG - C:\Program Files (x86)\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: Nero BackItUp Scheduler 4.0 - Nero AG - C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NMIndexingService - Nero AG - C:\Program Files (x86)\Common Files\Ahead\Lib\NMIndexingService.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files (x86)\CyberLink\Shared Files\RichVideo.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: SBSD Security Center Service (SBSDWSCService) - Safer Networking Ltd. - C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe
O23 - Service: Seagate Sync Service - Seagate Technology LLC - C:\Program Files (x86)\Seagate\Sync\SeaSyncServices.exe
O23 - Service: @%SystemRoot%\system32\SLsvc.exe,-101 (slsvc) - Unknown owner - C:\Windows\system32\SLsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: wampapache - Apache Software Foundation - c:\wamp\bin\apache\apache2.2.11\bin\httpd.exe
O23 - Service: wampmysqld - Unknown owner - c:\wamp\bin\mysql\mysql5.1.36\bin\mysqld.exe
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
End of file - 11514 bytes

======Scheduled tasks folder======

C:\Windows\tasks\Ad-Aware Update (Weekly).job
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
Aide pour le lien d'Adobe PDF Reader - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll [2006-10-23 62080]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{4E7BD74F-2B8D-469E-8DA9-FD60BB9AAE33}]
VMN Toolbar - C:\PROGRA~2\VMNTOO~1\VMNTOO~1.DLL []

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2009-07-14 256112]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]
Google Toolbar Notifier BHO - C:\Program Files (x86)\Google\GoogleToolbarNotifier\5.3.4501.1418\swg.dll [2009-10-09 762864]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B88F0A3B-663C-4342-A7CE-2D6F81032897}]
Super-Search - search like an expert - C:\PROGRA~2\EASYSE~1\BHO\4SUPER~1.DLL [2009-09-27 258048]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C84D72FE-E17D-4195-BB24-76C02E2E7C4E}]
Google Dictionary Compression sdch - C:\Program Files (x86)\Google\Google Toolbar\Component\fastsearch_B7C5AC242193BB3E.dll [2009-07-14 458736]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll [2009-07-31 41760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - Acer eDataSecurity Management - C:\Program Files (x86)\Acer\Empowering Technology\eDataSecurity\x86\eDStoolbar.dll [2008-07-29 142896]
{2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2009-07-14 256112]
{4E7BD74F-2B8D-469E-8DA9-FD60BB9AAE33} - VMN Toolbar - C:\PROGRA~2\VMNTOO~1\VMNTOO~1.DLL []

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"PCMMediaSharing"=C:\Program Files (x86)\Acer Arcade Live\Acer HomeMedia Connect\Kernel\DMS\PCMMediaSharing.exe [2008-07-01 204896]
"Adobe Reader Speed Launcher"=C:\Program Files (x86)\Adobe\Reader 8.0\Reader\Reader_sl.exe [2007-05-11 40048]
"StartCCC"=c:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2008-08-29 61440]
"eRecoveryService"= []
"avast!"=C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe [2009-08-17 81000]
"SiteVacuum"=C:\Program Files (x86)\EasySearch\SiteVacuumClient.exe [2009-09-26 479309]
""= []
"QuickTime Task"=C:\Program Files (x86)\QuickTime\QTTask.exe [2009-09-05 417792]
"Babylon Client"=C:\Program Files (x86)\Babylon\Babylon-Pro\Babylon.exe [2006-12-13 2785256]
"Google Desktop Search"=C:\Program Files (x86)\Google\Google Desktop Search\GoogleDesktop.exe [2009-10-15 30192]
"EoEngine"= []
"Malwarebytes Anti-Malware (reboot)"=C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbam.exe [2009-09-10 1312080]
"SunJavaUpdateSched"=C:\Program Files (x86)\Java\jre6\bin\jusched.exe [2009-07-31 149280]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Clavier+"=C:\Users\Croûtons\AppData\Local\Clavier+\Clavier.exe [2007-10-21 88576]
"ehTray.exe"=C:\Windows\ehome\ehTray.exe [2008-01-21 138240]
"swg"=C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [2009-07-14 68856]
"DAEMON Tools Lite"=C:\Program Files (x86)\DAEMON Tools Lite\daemon.exe [2009-04-23 691656]
"grwinHyper"=C:\Program Files (x86)\Le Robert\Le Grand Robert\grwinHyper.exe [2009-07-18 1118208]
"Le Petit Robert V3 Hyperappel"=C:\Program Files\Le Robert\Le Petit Robert 2009\RobertHA.exe [2008-07-14 251152]
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"=C:\Program Files (x86)\Common Files\Ahead\Lib\NMBgMonitor.exe [2007-03-12 153136]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
Microsoft Office.lnk - C:\Program Files (x86)\Microsoft Office\Office10\OSA.EXE

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLS"="C:\PROGRA~2\Google\GOOGLE~4\GOEC62~1.DLL"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Lavasoft Ad-Aware Service]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PEVSystemStart]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\procexp90.Sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Lavasoft Ad-Aware Service]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MsMpSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\PEVSystemStart]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\procexp90.Sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfPf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfRd]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfUsbccidDriver]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"EnableUIADesktopToggle"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=
"ForceActiveDesktopOn"=
"BindDirectlyToPropertySetStorage"=
"NoActiveDesktopChanges"=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{2c7428bd-7385-11de-8268-002511158d77}]
shell\AutoRun\command - I:\autorun.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{4adcd7d7-7143-11de-aa70-002511158d77}]
shell\Auto\command - auto.exe
shell\AutoRun\command - C:\Windows\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL K:\


======File associations======

.js - edit - "C:\Program Files (x86)\Macromedia\Dreamweaver 8\dreamweaver.exe" "%1"
.js - open - C:\Windows\SysWOW64\WScript.exe "%1" %*

======List of files/folders created in the last 2 months======

2009-10-21 15:23:49 ----D---- C:\Program Files (x86)\Microsoft Antimalware
2009-10-21 13:54:17 ----A---- C:\Bug.txt
2009-10-21 13:53:59 ----D---- C:\32788R22FWJFW
2009-10-21 01:06:13 ----A---- C:\Windows\NIRCMD.exe
2009-10-21 01:06:11 ----A---- C:\Windows\zip.exe
2009-10-21 01:06:11 ----A---- C:\Windows\SWXCACLS.exe
2009-10-21 01:06:11 ----A---- C:\Windows\SWSC.exe
2009-10-21 01:06:11 ----A---- C:\Windows\SWREG.exe
2009-10-21 01:06:11 ----A---- C:\Windows\sed.exe_RenameGenProc12629
2009-10-21 01:06:11 ----A---- C:\Windows\PEV.exe
2009-10-21 01:06:11 ----A---- C:\Windows\grep.exe_RenameGenProc12629
2009-10-21 01:06:03 ----D---- C:\Windows\ERDNT
2009-10-21 01:05:55 ----SD---- C:\ComboFix
2009-10-21 01:05:04 ----D---- C:\Qoobox
2009-10-20 21:50:56 ----A---- C:\Windows\system32\javaws.exe
2009-10-20 21:50:56 ----A---- C:\Windows\system32\javaw.exe
2009-10-20 21:50:56 ----A---- C:\Windows\system32\java.exe
2009-10-20 21:48:00 ----D---- C:\ProgramData\ESET
2009-10-20 02:43:06 ----D---- C:\Program Files (x86)\Panda Security
2009-10-20 00:22:02 ----D---- C:\GenProc
2009-10-19 22:48:55 ----D---- C:\Program Files (x86)\Navilog1
2009-10-19 22:19:50 ----D---- C:\Users\Croûtons\AppData\Roaming\Opera
2009-10-19 22:19:38 ----D---- C:\Program Files (x86)\Opera
2009-10-19 20:46:10 ----A---- C:\TB.txt
2009-10-19 20:44:19 ----D---- C:\ToolBar SD
2009-10-19 18:27:15 ----HDC---- C:\ProgramData\{CFBD8779-FAAB-4357-84F2-1EC8619FADA6}
2009-10-19 18:27:07 ----D---- C:\ProgramData\Lavasoft
2009-10-19 18:27:07 ----D---- C:\Program Files (x86)\Lavasoft
2009-10-19 00:58:08 ----A---- C:\Windows\wininit.ini
2009-10-19 00:56:09 ----D---- C:\Users\Croûtons\AppData\Roaming\Malwarebytes
2009-10-19 00:56:03 ----D---- C:\ProgramData\Malwarebytes
2009-10-19 00:56:03 ----D---- C:\Program Files (x86)\Malwarebytes' Anti-Malware
2009-10-19 00:38:44 ----D---- C:\ProgramData\Spybot - Search & Destroy
2009-10-19 00:38:44 ----D---- C:\Program Files (x86)\Spybot - Search & Destroy
2009-10-18 20:31:01 ----D---- C:\Users\Croûtons\AppData\Roaming\Folding@home-x86
2009-10-18 20:31:01 ----D---- C:\Program Files (x86)\Folding@home
2009-10-18 18:52:31 ----D---- C:\ST_Fix
2009-10-18 18:46:33 ----D---- C:\rsit
2009-10-18 18:46:33 ----D---- C:\Program Files (x86)\trend micro
2009-10-18 17:16:52 ----D---- C:\UAC
2009-10-18 17:09:17 ----D---- C:\Program Files (x86)\Ad-Remover
2009-10-17 20:01:06 ----D---- C:\Program Files (x86)\vmntoolbar
2009-10-17 20:01:04 ----D---- C:\Program Files (x86)\Visicom Media
2009-10-17 19:59:58 ----D---- C:\Users\Croûtons\AppData\Roaming\EoRezo
2009-10-14 11:25:20 ----A---- C:\Windows\system32\msasn1.dll
2009-10-14 11:25:18 ----A---- C:\Windows\system32\WMSPDMOD.DLL
2009-10-14 09:50:57 ----A---- C:\Windows\system32\mshtml.dll
2009-10-14 09:50:53 ----A---- C:\Windows\system32\iertutil.dll
2009-10-14 09:50:53 ----A---- C:\Windows\system32\ieframe.dll
2009-10-14 09:50:52 ----A---- C:\Windows\system32\wininet.dll
2009-10-14 09:50:52 ----A---- C:\Windows\system32\urlmon.dll
2009-10-14 09:50:52 ----A---- C:\Windows\system32\occache.dll
2009-10-14 09:50:51 ----A---- C:\Windows\system32\msfeedsbs.dll
2009-10-14 09:50:51 ----A---- C:\Windows\system32\msfeeds.dll
2009-10-14 09:50:51 ----A---- C:\Windows\system32\ieUnatt.exe
2009-10-14 09:50:51 ----A---- C:\Windows\system32\ieui.dll
2009-10-14 09:50:51 ----A---- C:\Windows\system32\iesysprep.dll
2009-10-14 09:50:51 ----A---- C:\Windows\system32\iepeers.dll
2009-10-14 09:50:51 ----A---- C:\Windows\system32\iedkcs32.dll
2009-10-14 09:50:50 ----A---- C:\Windows\system32\msfeedssync.exe
2009-10-14 09:50:50 ----A---- C:\Windows\system32\jsproxy.dll
2009-10-14 09:50:50 ----A---- C:\Windows\system32\iesetup.dll
2009-10-14 09:50:50 ----A---- C:\Windows\system32\iernonce.dll
2009-10-14 09:50:50 ----A---- C:\Windows\system32\ie4uinit.exe
2009-10-14 09:50:28 ----A---- C:\Windows\system32\msv1_0.dll
2009-10-14 09:50:27 ----A---- C:\Windows\system32\wdigest.dll
2009-10-14 09:50:27 ----A---- C:\Windows\system32\secur32.dll
2009-10-12 13:55:28 ----D---- C:\Users\Croûtons\AppData\Roaming\XnView
2009-10-12 13:54:59 ----D---- C:\Program Files (x86)\XnView
2009-10-11 23:20:20 ----D---- C:\Users\Croûtons\AppData\Roaming\ACD Systems
2009-10-11 23:19:33 ----D---- C:\Program Files (x86)\Common Files\ACD Systems
2009-10-11 21:18:28 ----D---- C:\Users\Croûtons\AppData\Roaming\OpenOffice.org
2009-10-11 21:14:49 ----D---- C:\Program Files (x86)\OpenOffice.org 3
2009-10-11 13:56:50 ----D---- C:\Users\Croûtons\AppData\Roaming\linguae
2009-10-11 13:56:43 ----D---- C:\Program Files (x86)\Linguae
2009-10-11 00:31:39 ----D---- C:\Program Files (x86)\PhotoFiltre
2009-10-10 23:26:25 ----D---- C:\Users\Croûtons\AppData\Roaming\VSO
2009-10-10 23:25:29 ----D---- C:\Program Files (x86)\VSO
2009-10-10 23:02:31 ----D---- C:\Program Files (x86)\Pixia
2009-10-10 21:37:43 ----D---- C:\Users\Croûtons\AppData\Roaming\RealWorld
2009-10-08 14:47:35 ----A---- C:\Windows\NeroDigital.ini
2009-10-08 01:22:06 ----D---- C:\Users\Croûtons\AppData\Roaming\gtk-2.0
2009-10-08 00:50:44 ----D---- C:\Program Files (x86)\GIMP-2.0
2009-10-07 23:00:57 ----D---- C:\Program Files (x86)\Ultralingua
2009-10-07 21:27:51 ----D---- C:\DICT31S
2009-10-06 16:59:21 ----D---- C:\Program Files (x86)\Babylon
2009-10-06 16:54:07 ----D---- C:\ProgramData\Babylon
2009-10-06 16:54:06 ----D---- C:\Users\Croûtons\AppData\Roaming\Babylon
2009-10-06 09:05:47 ----A---- C:\Windows\system32\wups.dll
2009-10-06 09:05:47 ----A---- C:\Windows\system32\wudriver.dll
2009-10-06 09:05:47 ----A---- C:\Windows\system32\wuapi.dll
2009-10-06 09:05:42 ----A---- C:\Windows\system32\wuwebv.dll
2009-10-06 09:05:42 ----A---- C:\Windows\system32\wuapp.exe
2009-10-01 10:01:27 ----D---- C:\Program Files (x86)\CCleaner
2009-09-30 09:34:54 ----D---- C:\Program Files (x86)\Free PDF to Word Doc Converter
2009-09-29 14:11:58 ----D---- C:\Users\Croûtons\AppData\Roaming\Apple Computer
2009-09-29 14:10:37 ----D---- C:\ProgramData\{0DD0EEEE-2A7C-411C-9243-1AE62F445FC3}
2009-09-29 14:10:21 ----D---- C:\Program Files (x86)\Bonjour
2009-09-29 14:00:18 ----D---- C:\Program Files (x86)\Common Files\Apple
2009-09-29 13:59:09 ----D---- C:\Program Files (x86)\QuickTime
2009-09-29 13:59:08 ----D---- C:\ProgramData\Apple Computer
2009-09-28 21:50:24 ----D---- C:\Program Files (x86)\RAR Recovery Toolbox
2009-09-28 13:50:38 ----D---- C:\Users\Croûtons\AppData\Roaming\Acer Arcade Live
2009-09-28 13:50:37 ----D---- C:\Users\Croûtons\AppData\Roaming\PowerCinema
2009-09-28 10:50:03 ----D---- C:\ProgramData\WinZip
2009-09-28 10:42:07 ----D---- C:\Program Files (x86)\Free Download Manager
2009-09-28 10:20:50 ----D---- C:\Users\Croûtons\AppData\Roaming\WinRAR
2009-09-27 18:28:53 ----D---- C:\Program Files (x86)\Capturino V2
2009-09-27 15:18:33 ----D---- C:\Program Files (x86)\Seagate
2009-09-26 21:53:13 ----D---- C:\Program Files (x86)\GooglePlusVideos
2009-09-26 21:52:30 ----D---- C:\Program Files (x86)\EasySearch
2009-09-26 21:14:20 ----D---- C:\ProgramData\eMule
2009-09-26 21:13:56 ----D---- C:\Program Files (x86)\eMule
2009-09-26 19:37:12 ----D---- C:\ProgramData\LightScribe
2009-09-26 19:32:06 ----D---- C:\Users\Croûtons\AppData\Roaming\Ahead
2009-09-26 19:31:23 ----D---- C:\Program Files (x86)\Common Files\Ahead
2009-09-26 19:30:14 ----A---- C:\Windows\system32\d3dx9_30.dll
2009-09-26 19:30:14 ----A---- C:\Windows\system32\d3dx9_28.dll
2009-09-26 19:04:36 ----D---- C:\ProgramData\AVS4YOU
2009-09-26 19:04:35 ----D---- C:\Users\Croûtons\AppData\Roaming\AVSMedia
2009-09-26 19:01:48 ----D---- C:\Program Files (x86)\Common Files\AVSMedia
2009-09-26 19:01:46 ----A---- C:\Windows\system32\mfc70.dll
2009-09-26 19:01:45 ----A---- C:\Windows\system32\xvidvfw.dll
2009-09-26 19:01:45 ----A---- C:\Windows\system32\xvidcore.dll
2009-09-26 19:01:45 ----A---- C:\Windows\system32\msxml3a.dll
2009-09-26 19:01:45 ----A---- C:\Windows\system32\msvcp70.dll
2009-09-26 19:01:45 ----A---- C:\Windows\system32\mcdvd_32.dll
2009-09-26 19:01:45 ----A---- C:\Windows\system32\divx.dll
2009-09-26 18:21:39 ----D---- C:\Program Files (x86)\WinAVI Video Capture
2009-09-26 18:14:13 ----D---- C:\Users\Croûtons\AppData\Roaming\vlc
2009-09-26 18:13:30 ----D---- C:\Program Files (x86)\VideoLAN
2009-09-26 15:04:03 ----D---- C:\Users\Croûtons\AppData\Roaming\Roxio
2009-09-26 14:16:12 ----D---- C:\ProgramData\Sonic
2009-09-26 14:14:52 ----D---- C:\Program Files (x86)\Common Files\Sonic Shared
2009-09-26 14:13:40 ----D---- C:\ProgramData\Roxio
2009-09-26 14:12:45 ----D---- C:\Program Files (x86)\Roxio
2009-09-26 14:12:45 ----D---- C:\Program Files (x86)\Common Files\Roxio Shared
2009-09-25 17:17:47 ----D---- C:\ProgramData\InstallShield
2009-09-23 11:03:14 ----D---- C:\Program Files (x86)\Kellogg's Arctique
2009-09-10 21:04:09 ----D---- C:\Program Files (x86)\La Science Interactive
2009-09-09 11:37:58 ----A---- C:\Windows\system32\WMVCORE.DLL
2009-09-09 11:37:57 ----A---- C:\Windows\system32\mf.dll
2009-09-09 11:37:47 ----A---- C:\Windows\system32\netiohlp.dll
2009-09-09 11:37:46 ----A---- C:\Windows\system32\TCPSVCS.EXE
2009-09-09 11:37:46 ----A---- C:\Windows\system32\ROUTE.EXE
2009-09-09 11:37:46 ----A---- C:\Windows\system32\NETSTAT.EXE
2009-09-09 11:37:46 ----A---- C:\Windows\system32\MRINFO.EXE
2009-09-09 11:37:46 ----A---- C:\Windows\system32\HOSTNAME.EXE
2009-09-09 11:37:46 ----A---- C:\Windows\system32\finger.exe
2009-09-09 11:37:46 ----A---- C:\Windows\system32\ARP.EXE
2009-09-09 11:37:45 ----A---- C:\Windows\system32\netevent.dll
2009-09-09 11:37:28 ----A---- C:\Windows\system32\jscript.dll
2009-09-09 11:37:25 ----A---- C:\Windows\system32\wlansec.dll
2009-09-09 11:37:25 ----A---- C:\Windows\system32\wlanmsm.dll
2009-09-09 11:37:25 ----A---- C:\Windows\system32\wlanapi.dll
2009-09-09 11:37:25 ----A---- C:\Windows\system32\L2SecHC.dll
2009-09-08 19:56:13 ----D---- C:\Users\Croûtons\AppData\Roaming\Super-Cow
2009-09-08 19:55:46 ----D---- C:\Program Files (x86)\Supercow Deluxe
2009-09-08 19:54:04 ----D---- C:\Program Files (x86)\Supercow
2009-09-08 18:06:51 ----D---- C:\Users\Croûtons\AppData\Roaming\UK's Kalender
2009-09-08 18:06:51 ----D---- C:\Program Files (x86)\Kalender
2009-09-03 09:18:30 ----A---- C:\Windows\system32\GameUXLegacyGDFs.dll
2009-09-03 09:18:30 ----A---- C:\Windows\system32\Apphlpdm.dll
2009-09-02 19:30:33 ----D---- C:\Program Files (x86)\Emoticon
2009-08-31 18:38:58 ----D---- C:\Windows\Sun
2009-08-26 18:56:11 ----A---- C:\Windows\system32\tzres.dll

======List of files/folders modified in the last 2 months======

2009-10-21 18:46:31 ----D---- C:\Windows\Temp
2009-10-21 18:23:00 ----D---- C:\Windows\Prefetch
2009-10-21 17:12:24 ----SHD---- C:\System Volume Information
2009-10-21 16:50:14 ----D---- C:\Windows\System32
2009-10-21 16:50:13 ----D---- C:\Windows\inf
2009-10-21 16:46:32 ----D---- C:\Windows
2009-10-21 16:45:42 ----D---- C:\Windows\Tasks
2009-10-21 16:40:34 ----D---- C:\Program Files (x86)\Mozilla Firefox
2009-10-21 15:24:06 ----SHD---- C:\Windows\Installer
2009-10-21 15:23:49 ----SD---- C:\ProgramData\Microsoft
2009-10-21 15:23:49 ----RD---- C:\Program Files (x86)
2009-10-21 15:23:40 ----RD---- C:\Program Files
2009-10-21 00:09:20 ----SD---- C:\Users\Croûtons\AppData\Roaming\Microsoft
2009-10-20 21:50:56 ----D---- C:\Windows\SysWOW64
2009-10-20 21:50:54 ----D---- C:\Program Files (x86)\Java
2009-10-20 21:48:00 ----HD---- C:\ProgramData
2009-10-20 16:41:20 ----D---- C:\Users\Croûtons\AppData\Roaming\FileZilla
2009-10-20 12:06:15 ----D---- C:\Windows\system32\drivers
2009-10-20 01:40:29 ----D---- C:\Windows\winsxs
2009-10-19 20:35:57 ----D---- C:\Windows\Debug
2009-10-19 01:50:33 ----RSD---- C:\Windows\Fonts
2009-10-17 20:01:07 ----SD---- C:\Windows\Downloaded Program Files
2009-10-17 20:01:05 ----RD---- C:\Users
2009-10-15 22:02:48 ----D---- C:\Program Files (x86)\FileZilla FTP Client
2009-10-15 17:07:45 ----D---- C:\Program Files (x86)\Mozilla Thunderbird
2009-10-15 17:07:36 ----D---- C:\Program Files (x86)\Google
2009-10-15 10:41:45 ----D---- C:\ACER
2009-10-14 13:43:46 ----RSD---- C:\Windows\assembly
2009-10-14 13:43:46 ----D---- C:\Windows\Microsoft.NET
2009-10-14 12:10:03 ----D---- C:\Windows\ehome
2009-10-14 12:10:03 ----D---- C:\Program Files (x86)\Windows Mail
2009-10-14 12:10:00 ----D---- C:\Windows\system32\migration
2009-10-14 12:10:00 ----D---- C:\Program Files (x86)\Internet Explorer
2009-10-11 23:39:28 ----D---- C:\Users\Croûtons\AppData\Roaming\ESTsoft
2009-10-11 23:39:28 ----D---- C:\Program Files (x86)\ESTsoft
2009-10-11 23:19:33 ----D---- C:\Program Files (x86)\Common Files
2009-10-11 21:16:23 ----D---- C:\Windows\ShellNew
2009-10-10 23:02:31 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2009-10-06 16:35:55 ----D---- C:\Windows\rescache
2009-10-06 16:19:06 ----D---- C:\Windows\system32\fr-FR
2009-09-28 11:38:49 ----D---- C:\Users\Croûtons\AppData\Roaming\CyberLink
2009-09-27 03:57:24 ----D---- C:\Windows\registration
2009-09-26 19:31:23 ----D---- C:\ProgramData\Nero
2009-09-26 19:31:23 ----D---- C:\Program Files (x86)\Nero
2009-09-26 14:14:45 ----D---- C:\Program Files (x86)\Common Files\InstallShield
2009-09-25 17:17:22 ----D---- C:\Program Files (x86)\NewTech Infosystems
2009-09-03 11:20:19 ----D---- C:\Windows\AppPatch
2009-08-31 19:25:57 ----A---- C:\Windows\grwin.ini

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 aswRdr;aswRdr; C:\Windows\system32\drivers\aswRdr.sys []
R1 aswSP;avast! Self Protection; C:\Windows\system32\drivers\aswSP.sys []
R1 aswTdi;avast! Network Shield Support; C:\Windows\system32\drivers\aswTdi.sys []
R1 ehdrv;ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys []
R1 MpFilter;Microsoft Malware Protection Driver; C:\Windows\system32\DRIVERS\MpFilter.sys []
R2 aswFsBlk;aswFsBlk; C:\Windows\system32\DRIVERS\aswFsBlk.sys []
R2 aswMonFlt;aswMonFlt; C:\Windows\system32\DRIVERS\aswMonFlt.sys []
R2 eamon;eamon; C:\Windows\system32\DRIVERS\eamon.sys []
R2 epfwwfpr;epfwwfpr; C:\Windows\system32\DRIVERS\epfwwfpr.sys []
R2 int15;int15; \??\C:\Windows\SysWOW64\drivers\int15_64.sys [2008-08-19 17952]
R2 PSDNServ;PSDNServ; C:\Windows\system32\DRIVERS\PSDNServ.sys []
R2 psdvdisk;PSDVdisk; C:\Windows\system32\DRIVERS\PSDVdisk.sys []
R3 atikmdag;atikmdag; C:\Windows\system32\DRIVERS\atikmdag.sys []
R3 HdAudAddService;Pilote de fonction UAA 1.1 Microsoft pour le service High Definition Audio; C:\Windows\system32\drivers\HdAudio.sys []
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys []
R3 ksthunk;Kernel Streaming Thunks; C:\Windows\system32\drivers\ksthunk.sys []
R3 MpNWMon;Microsoft Malware Protection Network Driver; C:\Windows\system32\DRIVERS\MpNWMon.sys []
R3 NVENETFD;NVIDIA nForce 10/100/1000 Mbps Ethernet ; C:\Windows\system32\DRIVERS\nvmfdx64.sys []
R3 WmiAcpi;Microsoft Windows Management Interface for ACPI; C:\Windows\system32\DRIVERS\wmiacpi.sys []
R3 WUDFRd;WUDFRd; C:\Windows\system32\DRIVERS\WUDFRd.sys []
S2 BrPar;BrPar; C:\Windows\System32\drivers\BrPar.sys [2000-07-24 19537]
S3 61883;Pilote d'unité 61883; C:\Windows\system32\DRIVERS\61883.sys []
S3 Avc;Périphérique AVC; C:\Windows\system32\DRIVERS\avc.sys []
S3 axd9lfrg;axd9lfrg; C:\Windows\system32\drivers\axd9lfrg.sys []
S3 drmkaud;Filtre de décodeur DRM (Noyau Microsoft); C:\Windows\system32\drivers\drmkaud.sys []
S3 mbr;mbr; \??\C:\Users\CROTON~1\AppData\Local\Temp\mbr.sys []
S3 MSDV;Microsoft DV Camera and VCR; C:\Windows\system32\DRIVERS\msdv.sys []
S3 MSKSSRV;Proxy de service de répartition Microsoft; C:\Windows\system32\drivers\MSKSSRV.sys []
S3 MSPCLOCK;Proxy d'horloge de répartition Microsoft; C:\Windows\system32\drivers\MSPCLOCK.sys []
S3 MSPQM;Proxy de gestion de qualité de répartition Microsoft; C:\Windows\system32\drivers\MSPQM.sys []
S3 MSTEE;Convertisseur en T/site-à-site de répartition Microsoft; C:\Windows\system32\drivers\MSTEE.sys []
S3 NVHDA;Service for NVIDIA High Definition Audio Driver; C:\Windows\system32\drivers\nvhda64v.sys []
S3 nvlddmkm;nvlddmkm; C:\Windows\system32\DRIVERS\nvlddmkm.sys []
S4 ErrDev;Microsoft Hardware Error Device Driver; C:\Windows\system32\drivers\errdev.sys []
S4 MegaSR;MegaSR; C:\Windows\system32\drivers\megasr.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 Acer HomeMedia Connect Service;Acer HomeMedia Connect Service; C:\Program Files (x86)\Acer Arcade Live\Acer HomeMedia Connect\Kernel\DMS\CLMSServer.exe [2008-07-01 270422]
R2 Apple Mobile Device;Apple Mobile Device; C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe [2009-08-28 144672]
R2 aswUpdSv;avast! iAVS4 Control Service; C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe [2009-08-17 18752]
R2 Ati External Event Utility;Ati External Event Utility; C:\Windows\system32\Ati2evxx.exe []
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\Alwil Software\Avast4\ashServ.exe [2009-08-17 138680]
R2 Bonjour Service;Service Bonjour; C:\Program Files (x86)\Bonjour\mDNSResponder.exe [2008-12-12 238888]
R2 eDataSecurity Service;eDataSecurity Service; C:\Program Files (x86)\Acer\Empowering Technology\eDataSecurity\x86\eDSService.exe [2008-07-29 500784]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe [2009-09-29 735960]
R2 ETService;Empowering Technology Service; C:\Program Files\Acer\Empowering Technology\Service\ETService.exe [2008-08-19 24576]
R2 Lavasoft Ad-Aware Service;Lavasoft Ad-Aware Service; C:\Program Files (x86)\Lavasoft\Ad-Aware\AAWService.exe [2009-10-19 1170768]
R2 LightScribeService;LightScribeService Direct Disc Labeling Service; C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe [2007-01-17 61440]
R2 MDM;Machine Debug Manager; C:\Program Files (x86)\Common Files\Microsoft Shared\VS7Debug\mdm.exe [2001-02-23 270336]
R2 MsMpSvc;@C:\Program Files\Microsoft Security Essentials\MpAsDesc.dll,-241; C:\Program Files\Microsoft Security Essentials\MsMpEng.exe [2009-07-02 17400]
R2 Nero BackItUp Scheduler 4.0;Nero BackItUp Scheduler 4.0; C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe [2009-07-20 935208]
R2 RichVideo;Cyberlink RichVideo Service(CRVS); C:\Program Files (x86)\CyberLink\Shared Files\RichVideo.exe [2008-06-13 241734]
R2 SBSDWSCService;SBSD Security Center Service; C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe [2009-01-26 1153368]
R2 Seagate Sync Service;Seagate Sync Service; C:\Program Files (x86)\Seagate\Sync\SeaSyncServices.exe [2007-01-18 24120]
R3 avast! Mail Scanner;avast! Mail Scanner; C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe [2009-08-17 254040]
R3 avast! Web Scanner;avast! Web Scanner; C:\Program Files\Alwil Software\Avast4\ashWebSv.exe [2009-08-17 352920]
R3 NMIndexingService;NMIndexingService; C:\Program Files (x86)\Common Files\Ahead\Lib\NMIndexingService.exe [2007-03-12 271920]
S2 gupdate1ca31703229744d;Service Google Update (gupdate1ca31703229744d); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2009-09-09 133104]
S2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe []
S3 clr_optimization_v2.0.50727_64;Microsoft .NET Framework NGEN v2.0.50727_X64; C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe [2009-03-30 89920]
S3 EhttpSrv;ESET HTTP Server; C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe [2009-09-29 23296]
S3 GoogleDesktopManager-090809-085438;Google Desktop Manager 5.9.909.8267; C:\Program Files (x86)\Google\Google Desktop Search\GoogleDesktop.exe [2009-10-15 30192]
S3 gusvc;Google Software Updater; C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe [2009-07-14 182768]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files (x86)\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe [2004-10-22 73728]
S3 NBService;NBService; C:\Program Files (x86)\Nero\Nero 7\Nero BackItUp\NBService.exe [2007-03-14 779824]
S3 PerfHost;@%systemroot%\sysWow64\perfhost.exe,-2; C:\Windows\SysWow64\perfhost.exe [2008-01-21 19968]
S3 wampapache;wampapache; c:\wamp\bin\apache\apache2.2.11\bin\httpd.exe [2008-12-10 24636]
S3 wampmysqld;wampmysqld; c:\wamp\bin\mysql\mysql5.1.36\bin\mysqld.exe [2009-06-17 6582912]

-----------------EOF-----------------

Info.txt logfile of random's system information tool 1.06 2009-10-18 18:46:43

======Uninstall list======

-->C:\Program Files (x86)\Nero\Nero 7\\nero\uninstall\UNNERO.exe /UNINSTALL
-->C:\Windows\UNNeroBackItUp.exe /UNINSTALL
-->C:\Windows\UNNeroMediaHome.exe /UNINSTALL
-->C:\Windows\UNNeroShowTime.exe /UNINSTALL
-->C:\Windows\UNNeroVision.exe /UNINSTALL
-->C:\Windows\UNRecode.exe /UNINSTALL
7-Zip 4.65-->"C:\Program Files (x86)\7-Zip\Uninstall.exe"
Acer Arcade Live Main Page-->RunDll32 C:\PROGRA~2\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files (x86)\InstallShield Installation Information\{EFBDC2B0-FAA8-4B78-8DE1-AEBE7958FA37}\Setup.exe" -uninstall
Acer DV Magician-->RunDll32 C:\PROGRA~2\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files (x86)\InstallShield Installation Information\{F6EFFB76-4A07-11DA-9D78-000129760D75}\Setup.exe" -uninstall
Acer DVDivine-->RunDll32 C:\PROGRA~2\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files (x86)\InstallShield Installation Information\{B145EC69-66F5-11D8-9D75-000129760D75}\Setup.exe" -uninstall
Acer eDataSecurity Management-->C:\Program Files (x86)\Acer\Empowering Technology\eDataSecurity\x86\eDSnstHelper.exe -Operation UNINSTALL
Acer Empowering Technology-->"C:\Program Files (x86)\InstallShield Installation Information\{8F1B6239-FEA0-450A-A950-B05276CE177C}\setup.exe" -runfromtemp -l0x040c -removeonly
Acer eRecovery Management-->"C:\Program Files (x86)\InstallShield Installation Information\{7F811A54-5A09-4579-90E1-C93498E230D9}\setup.exe" -runfromtemp -l0x040c -removeonly
Acer eSettings Management-->"C:\Program Files (x86)\InstallShield Installation Information\{13D85C14-2B85-419F-AC41-C7F21E68B25D}\setup.exe" -runfromtemp -l0x040c -removeonly
Acer GameZone Console DTV 2.0.1.1-->"C:\Program Files (x86)\Acer GameZone\GameConsole\unins000.exe"
Acer HomeMedia Connect-->RunDll32 C:\PROGRA~2\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files (x86)\InstallShield Installation Information\{132888AE-EF67-41C5-BCA2-7D5D2488AB63}\Setup.exe" -uninstall
Acer HomeMedia Trial Creator-->RunDll32 C:\PROGRA~2\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files (x86)\InstallShield Installation Information\{B580C409-E16F-44FF-904D-3AE94E113BE0}\Setup.exe" -uninstall
Acer HomeMedia-->RunDll32 C:\PROGRA~2\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files (x86)\InstallShield Installation Information\{AA4BF92B-2AAF-11DA-9D78-000129760D75}\Setup.exe" -uninstall
Acer Product Registration-->"C:\Program Files (x86)\InstallShield Installation Information\{DA20E1A8-07CB-4EE7-9B72-A7E28C953F0E}\setup.exe" -runfromtemp -l0x040c -removeonly
Acer ScreenSaver-->RunDll32 C:\PROGRA~2\COMMON~1\INSTAL~1\PROFES~1\RunTime\11\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files (x86)\InstallShield Installation Information\{79DD56FC-DB8B-47F5-9C80-78B62E05F9BC}\setup.exe" -l0x9 -removeonly
Acer SlideShow DVD-->RunDll32 C:\PROGRA~2\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files (x86)\InstallShield Installation Information\{41581EF5-45A7-11DA-9D78-000129760D75}\Setup.exe" -uninstall
Acer VideoMagician-->RunDll32 C:\PROGRA~2\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files (x86)\InstallShield Installation Information\{F79A208D-D929-11D9-9D77-000129760D75}\Setup.exe" -uninstall
Adobe Flash Player 10 Plugin-->C:\Windows\SysWOW64\Macromed\Flash\uninstall_plugin.exe
Adobe Flash Player ActiveX-->C:\Windows\SysWOW64\Macromed\Flash\uninstall_activeX.exe
Adobe Reader 8.1.0 - Français-->MsiExec.exe /I{AC76BA86-7AD7-1036-7B44-A81000000003}
Ad-Remover By C_XX-->"C:\Program Files (x86)\Ad-Remover\Uninstall ADR.exe"
Advertising Center-->MsiExec.exe /X{b2ec4a38-b545-4a00-8214-13fe0e915e6d}
Agatha Christie Death on the Nile-->"C:\Program Files (x86)\Acer GameZone\Agatha Christie Death on the Nile\Uninstall.exe" "C:\Program Files (x86)\Acer GameZone\Agatha Christie Death on the Nile\install.log"
Alice Greenfingers-->"C:\Program Files (x86)\Acer GameZone\Alice Greenfingers\Uninstall.exe" "C:\Program Files (x86)\Acer GameZone\Alice Greenfingers\install.log"
ALTools Update-->"C:\Program Files (x86)\ESTsoft\ALUpdate\unins000.exe"
Apple Application Support-->MsiExec.exe /I{0C34B801-6AEC-4667-B053-03A67E2D0415}
Apple Software Update-->MsiExec.exe /I{6956856F-B6B3-4BE0-BA0B-8F495BE32033}
avast! Antivirus-->C:\Program Files\Alwil Software\Avast4\aswRunDll.exe "C:\Program Files\Alwil Software\Avast4\Setup\setiface.dll",RunSetup
Azada-->"C:\Program Files (x86)\Acer GameZone\Azada\Uninstall.exe" "C:\Program Files (x86)\Acer GameZone\Azada\install.log"
Babylon-->C:\Program Files (x86)\Babylon\Babylon-Pro\Utils\uninstbb.exe
Big Kahuna Reef-->"C:\Program Files (x86)\Acer GameZone\Big Kahuna Reef\Uninstall.exe" "C:\Program Files (x86)\Acer GameZone\Big Kahuna Reef\install.log"
Brain Games-->RunDll32 C:\PROGRA~2\COMMON~1\INSTAL~1\PROFES~1\RunTime\0700\Intel32\Ctor.dll,LaunchSetup "C:\Program Files (x86)\InstallShield Installation Information\{1BAA0A5F-0FBE-4F86-AC82-8EDE9D6D5717}\Setup.exe" -l0xa
Brother HL-5040-->"C:\Program Files (x86)\Brother\BRHL5040\IsUn040c.exe" -f"C:\Program Files (x86)\Brother\BRHL5040\DeIsL1.isu" -cbruninst.dll
Cake Mania-->"C:\Program Files (x86)\Acer GameZone\Cake Mania\Uninstall.exe" "C:\Program Files (x86)\Acer GameZone\Cake Mania\install.log"
Catalyst Control Center - Branding-->MsiExec.exe /I{3594EE90-B157-4519-9E82-8B6F4711A0A1}
CCleaner (remove only)-->"C:\Program Files (x86)\CCleaner\uninst.exe"
Chicken Invaders 3-->"C:\Program Files (x86)\Acer GameZone\Chicken Invaders 3\Uninstall.exe" "C:\Program Files (x86)\Acer GameZone\Chicken Invaders 3\install.log"
Chuzzle-->"C:\Program Files (x86)\Acer GameZone\Chuzzle\Uninstall.exe" "C:\Program Files (x86)\Acer GameZone\Chuzzle\install.log"
Clavier+ 10.6.1-->"C:\Users\Croûtons\AppData\Local\Clavier+\unins000.exe"
Cobian Backup 9-->C:\Program Files (x86)\Cobian Backup 9\cbUninstall.exe
DAEMON Tools Toolbar-->C:\Program Files (x86)\DAEMON Tools Toolbar\uninst.exe
Des volcans dans le feu de l’action 1.0-->"C:\Program Files (x86)\La Science Interactive\Des volcans dans le feu de l’action\unins000.exe"
Dictionnaire Freelang (liste de mots)-->"C:\Users\Croûtons\AppData\Local\Dictionnaire Freelang\unins001.exe"
Dictionnaire Freelang 3.74 beta-->"C:\Users\Croûtons\AppData\Local\Dictionnaire Freelang\unins000.exe"
Diner Dash Flo on the Go-->"C:\Program Files (x86)\Acer GameZone\Diner Dash Flo on the Go\Uninstall.exe" "C:\Program Files (x86)\Acer GameZone\Diner Dash Flo on the Go\install.log"
eMule-->"C:\Program Files (x86)\eMule\Uninstall.exe"
eSobi v2-->C:\Program Files (x86)\InstallShield Installation Information\{15D967B5-A4BE-42AE-9E84-64CD062B25AA}\setup.exe -runfromtemp -l0x040c
Favorit-->c:\users\croûtons\appdata\local\jhdydzws.bat
FileZilla Client 3.2.8.1-->C:\Program Files (x86)\FileZilla FTP Client\uninstall.exe
Free PDF to Word Doc Converter v1.1-->"C:\Program Files (x86)\Free PDF to Word Doc Converter\unins000.exe"
GIMP 2.6.7-->"C:\Program Files (x86)\GIMP-2.0\setup\unins000.exe"
Google Desktop-->C:\Program Files (x86)\Google\Google Desktop Search\GoogleDesktopSetup.exe -uninstall
Google Toolbar for Internet Explorer-->"C:\Program Files (x86)\Google\Google Toolbar\Component\GoogleToolbarManager_E582EA556D8DE101.exe" /uninstall
Google Toolbar for Internet Explorer-->MsiExec.exe /I{18455581-E099-4BA8-BC6B-F34B2F06600C}
Google Update Helper-->MsiExec.exe /I{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}
Google Earth-->MsiExec.exe /X{CC016F21-3970-11DE-B878-005056806466}
Groobax-->"C:\Program Files (x86)\Groobax\unins000.exe"
HijackThis 2.0.2-->"C:\Program Files (x86)\trend micro\HijackThis.exe" /uninstall
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)-->C:\Windows\SysWOW64\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall /qb+ REBOOTPROMPT=""
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)-->C:\Windows\SysWOW64\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall {08155812-0202-4D5F-A7FF-12A2782DC548} /qb+ REBOOTPROMPT=""
IncrediMail-->C:\Program Files (x86)\IncrediMail\bin\ImSetup.exe /remove /addon:IncrediMail /log:IncMail.log
Java(TM) 6 Update 15-->MsiExec.exe /X{26A24AE4-039D-4CA4-87B4-2F83216014FF}
Jewel Quest Solitaire-->"C:\Program Files (x86)\Acer GameZone\Jewel Quest Solitaire\Uninstall.exe" "C:\Program Files (x86)\Acer GameZone\Jewel Quest Solitaire\install.log"
Kick N Rush-->"C:\Program Files (x86)\Acer GameZone\Kick N Rush\Uninstall.exe" "C:\Program Files (x86)\Acer GameZone\Kick N Rush\install.log"
Linguae 0.7 Beta-->"C:\Program Files (x86)\Linguae\unins000.exe"
Live-Player-->C:\Program Files (x86)\Live-Player\uninst.exe
Macromedia Dreamweaver 8-->MsiExec.exe /I{5FD788ED-1A37-4496-9BDD-463F493B27FA}
Macromedia Extension Manager-->MsiExec.exe /I{3C8C9FB3-5FDF-40B4-B314-EAD722728C76}
Mahjong Escape Ancient China-->"C:\Program Files (x86)\Acer GameZone\Mahjong Escape Ancient China\Uninstall.exe" "C:\Program Files (x86)\Acer GameZone\Mahjong Escape Ancient China\install.log"
Microsoft Office Suite Activation Assistant-->MsiExec.exe /X{E50AE784-FABE-46DA-A1F8-7B6B56DCB22E}
Microsoft Office XP Professional avec FrontPage-->MsiExec.exe /I{9028040C-6000-11D3-8CFE-0050048383C9}
Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{7299052b-02a4-4627-81f2-1818da5d550d}
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17-->MsiExec.exe /X{9A25302D-30C0-39D9-BD6F-21E6EC160475}
Microsoft Works-->MsiExec.exe /I{6B1CB38D-E2E4-4a30-933D-EFDEBA76AD9C}
Mozilla Firefox (3.5.3)-->C:\Program Files (x86)\Mozilla Firefox\uninstall\helper.exe
Mozilla Thunderbird (2.0.0.23)-->C:\Program Files (x86)\Mozilla Thunderbird\uninstall\helper.exe
MSXML 4.0 SP2 (KB954430)-->MsiExec.exe /I{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
Mystery Case Files - Huntsville-->"C:\Program Files (x86)\Acer GameZone\Mystery Case Files - Huntsville\Uninstall.exe" "C:\Program Files (x86)\Acer GameZone\Mystery Case Files - Huntsville\install.log"
Mystery Solitaire - Secret Island-->"C:\Program Files (x86)\Acer GameZone\Mystery Solitaire - Secret Island\Uninstall.exe" "C:\Program Files (x86)\Acer GameZone\Mystery Solitaire - Secret Island\install.log"
Nero 7 Ultra Edition-->MsiExec.exe /I{43FFE159-3199-4188-A1CD-629166AD1036}
Nero 9 Essentials-->C:\Program Files (x86)\Common Files\Nero\Nero ProductInstaller 4\SetupX.exe REMOVESERIALNUMBER="XM02-508X-MHAT-19WU-9Z3Z-0CH0-3U6E-85W5-MMHH-6647-1Z5L-7M8C-0U45-758P-0000"
Nero ControlCenter-->MsiExec.exe /X{bd5ca0da-71ad-43da-b19e-6eee0c9adc9a}
Nero Installer-->MsiExec.exe /X{e8a80433-302b-4ff1-815d-fcc8eac482ff}
Nero Online Upgrade-->MsiExec.exe /X{dba84796-8503-4ff0-af57-1747dd9a166d}
Nero StartSmart OEM-->MsiExec.exe /X{4D43D635-6FDA-4fa5-AA9B-23CF73D058EA}
Nero StartSmart-->MsiExec.exe /X{7748ac8c-18e3-43bb-959b-088faea16fb2}
neroxml-->MsiExec.exe /I{56C049BE-79E9-4502-BEA7-9754A3E60F9B}
NTI Photo Maker Hot Fix-->C:\Program Files (x86)\InstallShield Installation Information\{B9B02A9E-8074-4C3F-AAE5-311528F34FED}\setup.exe -runfromtemp -l0x040c
OpenOffice.org 3.1-->MsiExec.exe /I{62D917DF-16DE-4383-9239-8C8BA06EB829}
PDFCreator-->C:\Program Files (x86)\PDFCreator\unins000.exe
pdfforge Toolbar v1.1-->MsiExec.exe /X{4EF8BE6A-899C-4196-94E7-297C5F7A203E}
PhotoFiltre-->"C:\Program Files (x86)\PhotoFiltre\Uninst.exe"
Picasa 3-->"C:\Program Files (x86)\Google\Picasa3\Uninstall.exe"
Pixia-->"C:\Program Files (x86)\InstallShield Installation Information\{A0BCF90F-B4E4-435C-A48D-8FAAE10554F9}\setup.exe" -runfromtemp -l0x0009 -removeonly
QuickTime-->MsiExec.exe /I{A429C2AE-EBF1-4F81-A221-1C115CAADDAD}
RapidTyping-->"C:\Program Files (x86)\RapidTyping\Uninstall.exe"
RAR Recovery Toolbox 1.1-->"C:\Program Files (x86)\RAR Recovery Toolbox\unins000.exe"
Realtek High Definition Audio Driver-->RtlUpd64.exe -r -m -nrg2709
RecFree toolbar powered by Ask.com-->"C:\Program Files (x86)\RecFree.com\RecFreeToolbar\1.3.4.0\uninstall.exe"
SoftwareUpdate 1.0-->"C:\Users\Croûtons\AppData\Roaming\eoRezo\SoftwareUpdate\unins000.exe"
Supercow Deluxe-->C:\Program Files (x86)\Supercow Deluxe\Uninstal.exe
SyncBack-->"C:\Program Files (x86)\2BrightSparks\SyncBack\unins000.exe"
Turbo Pizza-->"C:\Program Files (x86)\Acer GameZone\Turbo Pizza\Uninstall.exe" "C:\Program Files (x86)\Acer GameZone\Turbo Pizza\install.log"
Update for Microsoft .NET Framework 3.5 SP1 (KB963707)-->C:\Windows\SysWOW64\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall {B2AE9C82-DC7B-3641-BFC8-87275C4F3607} /qb+ REBOOTPROMPT=""
vlnet1.com - SiteVacuum-->C:\Program Files (x86)\EasySearch\uninst.exe
VMN Toolbar-->C:\Program Files (x86)\vmntoolbar\uninstall.exe
WampServer 2.0-->"c:\wamp\unins000.exe"
XnView 1.96.5-->"C:\Program Files (x86)\XnView\unins000.exe"
xplorer² lite-->"C:\Program Files (x86)\zabkat\xplorer2_lite\Uninstall.exe"
Zuma Deluxe-->"C:\Program Files (x86)\Acer GameZone\Zuma Deluxe\Uninstall.exe" "C:\Program Files (x86)\Acer GameZone\Zuma Deluxe\install.log"

======Security center information======

AS: Windows Defender

======System event log======

Computer Name: PC-BARREAU
Event Code: 4374
Message: Windows Servicing a déterminé que ce package KB958483(Update) n’est pas applicable à ce système.
Record Number: 11864
Source Name: Microsoft-Windows-Servicing
Time Written: 20090714085145.000000-000
Event Type: Avertissement
User: AUTORITE NT\SYSTEM

Computer Name: PC-BARREAU
Event Code: 4374
Message: Windows Servicing a déterminé que ce package KB958483(Update) n’est pas applicable à ce système.
Record Number: 11863
Source Name: Microsoft-Windows-Servicing
Time Written: 20090714085145.000000-000
Event Type: Avertissement
User: AUTORITE NT\SYSTEM

Computer Name: PC-BARREAU
Event Code: 4374
Message: Windows Servicing a déterminé que ce package KB958483(Update) n’est pas applicable à ce système.
Record Number: 11862
Source Name: Microsoft-Windows-Servicing
Time Written: 20090714085145.000000-000
Event Type: Avertissement
User: AUTORITE NT\SYSTEM

Computer Name: PC-BARREAU
Event Code: 4374
Message: Windows Servicing a déterminé que ce package KB958483(Update) n’est pas applicable à ce système.
Record Number: 11861
Source Name: Microsoft-Windows-Servicing
Time Written: 20090714085145.000000-000
Event Type: Avertissement
User: AUTORITE NT\SYSTEM

Computer Name: PC-BARREAU
Event Code: 4374
Message: Windows Servicing a déterminé que ce package KB958483(Update) n’est pas applicable à ce système.
Record Number: 11860
Source Name: Microsoft-Windows-Servicing
Time Written: 20090714085145.000000-000
Event Type: Avertissement
User: AUTORITE NT\SYSTEM

=====Application event log=====

Computer Name: PC-BARREAU
Event Code: 1002
Message: Valeur inattendue ou absente (nom : ‘PackageCode’, valeur : ‘’) dans la clé ‘HKLM\Software\Classes\Installer\Products\5DBE8E079C8785242BA00589CC0A000F’
Record Number: 1204
Source Name: MsiInstaller
Time Written: 20090714093042.000000-000
Event Type: Erreur
User: AUTORITE NT\SYSTEM

Computer Name: PC-BARREAU
Event Code: 1002
Message: Valeur inattendue ou absente (nom : ‘PackageCode’, valeur : ‘’) dans la clé ‘HKLM\Software\Classes\Installer\Products\5DBE8E079C8785242BA00589CC0A000F’
Record Number: 1187
Source Name: MsiInstaller
Time Written: 20090714091903.000000-000
Event Type: Erreur
User: AUTORITE NT\SYSTEM

Computer Name: PC-BARREAU
Event Code: 1002
Message: Valeur inattendue ou absente (nom : ‘PackageCode’, valeur : ‘’) dans la clé ‘HKLM\Software\Classes\Installer\Products\5DBE8E079C8785242BA00589CC0A000F’
Record Number: 1161
Source Name: MsiInstaller
Time Written: 20090714084548.000000-000
Event Type: Erreur
User: PC-BARREAU\Croûtons

Computer Name: PC-BARREAU
Event Code: 10
Message: Le filtre d’événement avec la requête « SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99 » n’a pas pu être réactivé dans l’espace de noms « //./root/CIMV2 » à cause de l’erreur 0x80041003. Les événements ne peuvent pas être délivrés à travers ce filtre tant que le problème ne sera pas corrigé.
Record Number: 1132
Source Name: Microsoft-Windows-WMI
Time Written: 20090714074417.000000-000
Event Type: Erreur
User:

Computer Name: PC-BARREAU
Event Code: 1008
Message: Le service Windows Search tente de supprimer l’ancien catalogue.

Record Number: 1127
Source Name: Microsoft-Windows-Search
Time Written: 20090714074412.000000-000
Event Type: Avertissement
User:

=====Security event log=====

Computer Name: WIN-LQKF0CSN3P4
Event Code: 4648
Message: Tentative d’ouverture de session en utilisant des informations d’identification explicites.

Sujet :
ID de sécurité : S-1-5-18
Nom du compte : WIN-LQKF0CSN3P4$
Domaine du compte : WORKGROUP
ID d’ouverture de session : 0x3e7
GUID d’ouverture de session : {00000000-0000-0000-0000-000000000000}

Compte dont les informations d’identification ont été utilisées :
Nom du compte : SYSTEM
Domaine du compte : AUTORITE NT
GUID d’ouverture de session : {00000000-0000-0000-0000-000000000000}

Serveur cible :
Nom du serveur cible : localhost
Informations supplémentaires : localhost

Informations sur le processus :
ID du processus : 0x2a8
Nom du processus : C:\Windows\System32\services.exe

Informations sur le réseau :
Adresse du réseau : -
Port : -

Cet événement est généré lorsqu’un processus tente d’ouvrir une session pour un compte en spécifiant explicitement les informations d’identification de ce compte. Ceci se produit le plus souvent dans les configurations par lot comme les tâches planifiées, ou avec l’utilisation de la commande RUNAS.
Record Number: 1472
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20061010182430.066054-000
Event Type: Succès de l'audit
User:

Computer Name: WIN-LQKF0CSN3P4
Event Code: 4672
Message: Privilèges spéciaux attribués à la nouvelle ouverture de session.

Sujet :
ID de sécurité : S-1-5-18
Nom du compte : SYSTEM
Domaine du compte : AUTORITE NT
ID d’ouverture de session : 0x3e7

Privilèges : SeAssignPrimaryTokenPrivilege
SeTcbPrivilege
SeSecurityPrivilege
SeTakeOwnershipPrivilege
SeLoadDriverPrivilege
SeBackupPrivilege
SeRestorePrivilege
SeDebugPrivilege
SeAuditPrivilege
SeSystemEnvironmentPrivilege
SeImpersonatePrivilege
Record Number: 1471
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20061010182429.878854-000
Event Type: Succès de l'audit
User:

Computer Name: WIN-LQKF0CSN3P4
Event Code: 4624
Message: L’ouverture de session d’un compte s’est correctement déroulée.

Sujet :
ID de sécurité : S-1-5-18
Nom du compte : WIN-LQKF0CSN3P4$
Domaine du compte : WORKGROUP
ID d’ouverture de session : 0x3e7

Type d’ouverture de session : 5

Nouvelle ouverture de session :
ID de sécurité : S-1-5-18
Nom du compte : SYSTEM
Domaine du compte : AUTORITE NT
ID d’ouverture de session : 0x3e7
GUID d’ouverture de session : {00000000-0000-0000-0000-000000000000}

Informations sur le processus :
ID du processus : 0x2a8
Nom du processus : C:\Windows\System32\services.exe

Informations sur le réseau :
Nom de la station de travail :
Adresse du réseau source : -
Port source : -

Informations détaillées sur l’authentification :
Processus d’ouverture de session : Advapi
Package d’authentification : Negotiate
Services en transit : -
Nom du package (NTLM uniquement) : -
Longueur de la clé : 0

Cet événement est généré lors de la création d’une ouverture de session. Il est généré sur l’ordinateur sur lequel l’ouverture de session a été effectuée.

Le champ Objet indique le compte sur le système local qui a demandé l’ouverture de session. Il s’agit le plus souvent d’un service, comme le service Serveur, ou un processus local tel que Winlogon.exe ou Services.exe.

Le champ Type d’ouverture de session indique le type d’ouverture de session qui s’est produit. Les types les plus courants sont 2 (interactif) et 3 (réseau).

Le champ Nouvelle ouverture de session indique le compte pour lequel la nouvelle ouverture de session a été créée, par exemple, le compte qui s’est connecté.

Les champs relatifs au réseau indiquent la provenance d’une demande d’ouverture de session à distance. Le nom de la station de travail n’étant pas toujours disponible, peut être laissé vide dans certains cas.

Les champs relatifs aux informations d’authentification fournissent des détails sur cette demande d’ouverture de session spécifique.
- Le GUID d’ouverture de session est un identificateur unique pouvant servir à associer cet événement à un événement KDC .
- Les services en transit indiquent les services intermédiaires qui ont participé à cette demande d’ouverture de session.
- Nom du package indique quel est le sous-protocole qui a été utilisé parmi les protocoles NTLM.
- La longueur de la clé indique la longueur de la clé de session générée. Elle a la valeur 0 si aucune clé de session n’a été demandée.
Record Number: 1470
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20061010182429.878854-000
Event Type: Succès de l'audit
User:

Computer Name: WIN-LQKF0CSN3P4
Event Code: 4648
Message: Tentative d’ouverture de session en utilisant des informations d’identification explicites.

Sujet :
ID de sécurité : S-1-5-18
Nom du compte : WIN-LQKF0CSN3P4$
Domaine du compte : WORKGROUP
ID d’ouverture de session : 0x3e7
GUID d’ouverture de session : {00000000-0000-0000-0000-000000000000}

Compte dont les informations d’identification ont été utilisées :
Nom du compte : SYSTEM
Domaine du compte : AUTORITE NT
GUID d’ouverture de session : {00000000-0000-0000-0000-000000000000}

Serveur cible :
Nom du serveur cible : localhost
Informations supplémentaires : localhost

Informations sur le processus :
ID du processus : 0x2a8
Nom du processus : C:\Windows\System32\services.exe

Informations sur le réseau :
Adresse du réseau : -
Port : -

Cet événement est généré lorsqu’un processus tente d’ouvrir une session pour un compte en spécifiant explicitement les informations d’identification de ce compte. Ceci se produit le plus souvent dans les configurations par lot comme les tâches planifiées, ou avec l’utilisation de la commande RUNAS.
Record Number: 1469
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20061010182429.878854-000
Event Type: Succès de l'audit
User:

Computer Name: WIN-LQKF0CSN3P4
Event Code: 1102
Message: Le journal d’audit a été effacé.
Objet :
ID de sécurité : S-1-5-21-3363994563-3272364198-3709456494-500
Nom de compte : Administrator
Nom de domaine : WIN-LQKF0CSN3P4
ID de connexion : 0x49b52
Record Number: 1468
Source Name: Microsoft-Windows-Eventlog
Time Written: 20061010182423.935254-000
Event Type: Succès de l'audit
User:

======Environment variables======

"ComSpec"=%SystemRoot%\system32\cmd.exe
"FP_NO_HOST_CHECK"=NO
"OS"=Windows_NT
"Path"=%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;C:\Program Files (x86)\Acer\Empowering Technology\eDataSecurity;C:\Program Files (x86)\Acer\Empowering Technology\eDataSecurity\x86;C:\Program Files (x86)\Acer\Empowering Technology\eDataSecurity\x64;c:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static;C:\Program Files (x86)\QuickTime\QTSystem;C:\Program Files (x86)\QuickTime\QTSystem\
"PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC
"PROCESSOR_ARCHITECTURE"=AMD64
"TEMP"=%SystemRoot%\TEMP
"TMP"=%SystemRoot%\TEMP
"USERNAME"=SYSTEM
"windir"=%SystemRoot%
"PROCESSOR_LEVEL"=6
"PROCESSOR_IDENTIFIER"=Intel64 Family 6 Model 15 Stepping 13, GenuineIntel
"PROCESSOR_REVISION"=0f0d
"NUMBER_OF_PROCESSORS"=2
"TRACE_FORMAT_SEARCH_PATH"=\\NTREL202.ntdev.corp.microsoft.com\34FB5F65-FFEB-4B61-BF0E-A6A76C450FAA\TraceFormat
"DFSTRACINGON"=FALSE
"NTIPath"=%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;C:\Program Files (x86)\Acer\Empowering Technology\eDataSecurity\;C:\Program Files (x86)\Acer\Empowering Technology\eDataSecurity\x86;C:\Program Files (x86)\Acer\Empowering Technology\eDataSecurity\x64
"CLASSPATH"=.;C:\Program Files (x86)\Java\jre6\lib\ext\QTJava.zip
"QTJAVA"=C:\Program Files (x86)\Java\jre6\lib\ext\QTJava.zip

-----------------EOF-----------------

J'ai toujours le même problème à l'ouverture de Firefox. De plus, une barre s'est logée au-dessus de l'horloge et je n'arrive pas à l'enlever...

Colle un rapport toolbar sd option 2
http://eric.71.mespages.googlepages.com/ToolBarSD.exe

-----------\\ ToolBar S&D 1.2.9 XP/Vista

Microsoft® Windows Vista™ Édition Familiale Premium ( v6.0.6002 ) Service Pack 2
x64-based PC ( Multiprocessor Free : Intel(R) Pentium(R) Dual CPU E2220 @ 2.40GHz )
BIOS : Default System BIOS
USER : Croûtons ( Administrator )
BOOT : Normal boot
C:\ (Local Disk) - NTFS - Total:455 Go (Free:352 Go)
D:\ (Local Disk) - NTFS - Total:457 Go (Free:450 Go)
F:\ (CD or DVD)
G:\ (USB)
H:\ (USB)
I:\ (CD or DVD)

"C:\ToolBar SD" ( MAJ : 22-08-2009|18:42 )
Option : [2] ( 21/10/2009|19:21 )

[ UAC => 1 ]

Que se passe-t-il maintenant ?

Télécharge OTM
http://oldtimer.geekstogo.com/OTM.exe
(de Old_Timer) sur ton Bureau.

double-clique sur OTM.exe pour le lancer.
copie la liste qui se trouve en citation ci-dessous,
et colle-la dans le cadre de gauche de OTM :Paste instruction for items to be moved.


:processes
explorer.exe
:services
Findbasic Service
:files
C:\PROGRA~2\VMNTOO~1\VMNTOO~1.DLL
C:\PROGRA~2\EASYSE~1\BHO\4SUPER~1.DLL
:reg
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersi­on\Explorer\Browser Helper Objects\{4E7BD74F-2B8D-469E-8DA9-FD60BB9AAE33}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersi­on\Explorer\Browser Helper Objects\{B88F0A3B-663C-4342-A7CE-2D6F81032897}]
:commands
[purity]
[emptytemp]
[start explorer]

clique sur MoveIt! pour lancer la suppression.
le résultat apparaitra dans le cadre "Results".
clique sur Exit pour fermer.
poste le rapport situé dans C:\_OTM\MovedFiles.

il te sera peut-être demander de redémarrer le pc pour achever la suppression.si c'est le cas accepte par Yes.

All processes killed
========== PROCESSES ==========
No active process named explorer.exe was found!
========== SERVICES/DRIVERS ==========
Service\Driver Findbasic Service not found.

========== FILES ==========
File/Folder C:\PROGRA~2\VMNTOO~1\VMNTOO~1.DLL not found.
LoadLibrary failed for C:\PROGRA~2\EASYSE~1\BHO\4.SuperSearch.dll
C:\PROGRA~2\EASYSE~1\BHO\4.SuperSearch.dll NOT unregistered.
C:\PROGRA~2\EASYSE~1\BHO\4.SuperSearch.dll moved successfully.
========== REGISTRY ==========
Registry delete failed. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion­\Explorer\Browser Helper Objects\{4E7BD74F-2B8D-469E-8DA9-FD60BB9AAE33}\ scheduled to be deleted on reboot.
Unable to delete registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4E7BD74F-2B8D-469­E-8DA9-FD60BB9AAE33}\ .
Registry delete failed. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion­\Explorer\Browser Helper Objects\{B88F0A3B-663C-4342-A7CE-2D6F81032897}\ scheduled to be deleted on reboot.
Unable to delete registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B88F0A3B-663C-434­2-A7CE-2D6F81032897}\ .
========== COMMANDS ==========

[EMPTYTEMP]

User: All Users

User: AppData

User: Croûtons
File delete failed. C:\Users\Croûtons\AppData\Local\Temp\ppcrlui_5556_2 scheduled to be deleted on reboot.
->Temp folder emptied: 668946 bytes
File delete failed. C:\Users\Croûtons\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat scheduled to be deleted on reboot.
->Temporary Internet Files folder emptied: 1349738 bytes
->Java cache emptied: 14852727 bytes
->FireFox cache emptied: 60907207 bytes

User: Default
->Temp folder emptied: 0 bytes
File delete failed. C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\X4OB3IBJ\desktop.ini scheduled to be deleted on reboot.
File delete failed. C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\X0282SNL\desktop.ini scheduled to be deleted on reboot.
File delete failed. C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\SBH04F74\desktop.ini scheduled to be deleted on reboot.
File delete failed. C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RINMHI69\desktop.ini scheduled to be deleted on reboot.
File delete failed. C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\desktop.ini scheduled to be deleted on reboot.
File delete failed. C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat scheduled to be deleted on reboot.
File delete failed. C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files\desktop.ini scheduled to be deleted on reboot.
->Temporary Internet Files folder emptied: 33170 bytes

User: Default User
->Temp folder emptied: 0 bytes
File delete failed. C:\Users\Default User\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\X4OB3IBJ\desktop.ini scheduled to be deleted on reboot.
File delete failed. C:\Users\Default User\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\X0282SNL\desktop.ini scheduled to be deleted on reboot.
File delete failed. C:\Users\Default User\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\SBH04F74\desktop.ini scheduled to be deleted on reboot.
File delete failed. C:\Users\Default User\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RINMHI69\desktop.ini scheduled to be deleted on reboot.
File delete failed. C:\Users\Default User\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\desktop.ini scheduled to be deleted on reboot.
File delete failed. C:\Users\Default User\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat scheduled to be deleted on reboot.
File delete failed. C:\Users\Default User\AppData\Local\Microsoft\Windows\Temporary Internet Files\desktop.ini scheduled to be deleted on reboot.
->Temporary Internet Files folder emptied: 33170 bytes

User: Public

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32 (64bit) .tmp files removed: 0 bytes
Windows Temp folder emptied: 0 bytes
RecycleBin emptied: 2969799 bytes

Total Files Cleaned = 77,07 mb


OTM by OldTimer - Version 3.0.0.6 log created on 10212009_211722

Bonsoir,

J'aimerais changer la page d'accueil "Firefox Start" en simple "Google" ? Peux-tu m'aider ?