Problème windows update [resolu]

[ah1000]

Bonjour,
Mon problème est le suivant : lorsque je fais la recherche de mises à jour avec windows update j'obtiens à chaque fois le message " windows n'a pas pu rechercher les mises à jour" avec l'erreur 80072EFE : Windows update a rencontré une erreur inconnue.
J'ai déja cherché un peu partout sur internet, mais aucune des solutions proposées (couper le par-feu, l'antivirus, vérifier le fichier hosts ...) ne donne de résultat.
J'ai vu que chez certains il avait suffit de redémarrer le routeur ou la box mais ça n'a pas marché.
Détail suplémentaire : j'utilise également vista (et 7) dans une machine virtuelle et là, pas de problème

extrait du fichier WindowsUpdate.log:

2009-09-27 09:53:06:883 1068 368 AU Triggering AU detection through DetectNow API
2009-09-27 09:53:06:883 1068 368 AU Triggering Online detection (interactive)
2009-09-27 09:53:06:884 1068 be8 AU #############
2009-09-27 09:53:06:884 1068 be8 AU ## START ## AU: Search for updates
2009-09-27 09:53:06:884 1068 be8 AU #########
2009-09-27 09:53:06:897 1068 be8 AU <<## SUBMITTED ## AU: Search for updates [CallId = {85FC1DEA-55DE-41B3-9A99-B27C20B41A39}]
2009-09-27 09:53:06:897 1068 1418 Agent *************
2009-09-27 09:53:06:897 1068 1418 Agent ** START ** Agent: Finding updates [CallerId = AutomaticUpdates]
2009-09-27 09:53:06:897 1068 1418 Agent *********
2009-09-27 09:53:06:897 1068 1418 Agent * Online = Yes; Ignore download priority = No
2009-09-27 09:53:06:897 1068 1418 Agent * Criteria = "IsInstalled=0 and DeploymentAction='Installation' or IsPresent=1 and DeploymentAction='Uninstallation' or IsInstalled=1 and DeploymentAction='Installation' and RebootRequired=1 or IsInstalled=0 and DeploymentAction='Uninstallation' and RebootRequired=1"
2009-09-27 09:53:06:897 1068 1418 Agent * ServiceID = {7971F918-A847-4430-9279-4A52D1EFE18D}
2009-09-27 09:53:06:897 1068 1418 Agent * Search Scope = {Machine}
2009-09-27 09:53:06:897 1068 1418 Setup Checking for agent SelfUpdate
2009-09-27 09:53:06:898 1068 1418 Setup Client version: Core: 7.2.6001.788 Aux: 7.2.6001.788
2009-09-27 09:53:06:902 1068 1418 Misc Validating signature for C:\Windows\SoftwareDistribution\WuRedir\9482F4B4-E343-43B6-B170-9A65BC822C77\muv3wuredir.cab:
2009-09-27 09:53:06:909 1068 1418 Misc Microsoft signed: Yes
2009-09-27 09:53:07:928 1068 1418 Misc WARNING: SendRequest failed with hr = 80072efe. Proxy List used: <http=127.0.0.1:4128> Bypass List used : <(null)> Auth Schemes used : <>
2009-09-27 09:53:07:928 1068 1418 Misc WARNING: WinHttp: SendRequestUsingProxy failed for <http://download.windowsupdate.com/v8/wi ... uredir.cab>. error 0x80072efe
2009-09-27 09:53:07:928 1068 1418 Misc WARNING: WinHttp: SendRequestToServerForFileInformation MakeRequest failed. error 0x80072efe
2009-09-27 09:53:07:928 1068 1418 Misc WARNING: WinHttp: SendRequestToServerForFileInformation failed with 0x80072efe
2009-09-27 09:53:07:928 1068 1418 Misc WARNING: WinHttp: ShouldFileBeDownloaded failed with 0x80072efe
2009-09-27 09:53:08:928 1068 1418 Misc WARNING: SendRequest failed with hr = 80072efe. Proxy List used: <http=127.0.0.1:4128> Bypass List used : <(null)> Auth Schemes used : <>
2009-09-27 09:53:08:928 1068 1418 Misc WARNING: WinHttp: SendRequestUsingProxy failed for <http://download.windowsupdate.com/v8/wi ... uredir.cab>. error 0x80072efe
2009-09-27 09:53:08:928 1068 1418 Misc WARNING: WinHttp: SendRequestToServerForFileInformation MakeRequest failed. error 0x80072efe
2009-09-27 09:53:08:928 1068 1418 Misc WARNING: WinHttp: SendRequestToServerForFileInformation failed with 0x80072efe
2009-09-27 09:53:08:928 1068 1418 Misc WARNING: WinHttp: ShouldFileBeDownloaded failed with 0x80072efe
2009-09-27 09:53:09:928 1068 1418 Misc WARNING: SendRequest failed with hr = 80072efe. Proxy List used: <http=127.0.0.1:4128> Bypass List used : <(null)> Auth Schemes used : <>
2009-09-27 09:53:09:928 1068 1418 Misc WARNING: WinHttp: SendRequestUsingProxy failed for <http://download.windowsupdate.com/v8/wi ... uredir.cab>. error 0x80072efe
2009-09-27 09:53:09:928 1068 1418 Misc WARNING: WinHttp: SendRequestToServerForFileInformation MakeRequest failed. error 0x80072efe
2009-09-27 09:53:09:928 1068 1418 Misc WARNING: WinHttp: SendRequestToServerForFileInformation failed with 0x80072efe
2009-09-27 09:53:09:928 1068 1418 Misc WARNING: WinHttp: ShouldFileBeDownloaded failed with 0x80072efe
2009-09-27 09:53:10:928 1068 1418 Misc WARNING: SendRequest failed with hr = 80072efe. Proxy List used: <http=127.0.0.1:4128> Bypass List used : <(null)> Auth Schemes used : <>
2009-09-27 09:53:10:928 1068 1418 Misc WARNING: WinHttp: SendRequestUsingProxy failed for <http://download.windowsupdate.com/v8/wi ... uredir.cab>. error 0x80072efe
2009-09-27 09:53:10:928 1068 1418 Misc WARNING: WinHttp: SendRequestToServerForFileInformation MakeRequest failed. error 0x80072efe
2009-09-27 09:53:10:928 1068 1418 Misc WARNING: WinHttp: SendRequestToServerForFileInformation failed with 0x80072efe
2009-09-27 09:53:10:928 1068 1418 Misc WARNING: WinHttp: ShouldFileBeDownloaded failed with 0x80072efe
2009-09-27 09:53:10:928 1068 1418 Misc WARNING: DownloadFileInternal failed for http://download.windowsupdate.com/v8/wi ... uredir.cab: error 0x80072efe
2009-09-27 09:53:10:928 1068 1418 Misc Validating signature for C:\Windows\SoftwareDistribution\WuRedir\9482F4B4-E343-43B6-B170-9A65BC822C77\muv3wuredir.cab:
2009-09-27 09:53:10:934 1068 1418 Misc Microsoft signed: Yes
2009-09-27 09:53:11:938 1068 1418 Misc WARNING: SendRequest failed with hr = 80072efe. Proxy List used: <http=127.0.0.1:4128> Bypass List used : <(null)> Auth Schemes used : <>
2009-09-27 09:53:11:938 1068 1418 Misc WARNING: WinHttp: SendRequestUsingProxy failed for <http://download.microsoft.com/v8/window ... uredir.cab>. error 0x80072efe
2009-09-27 09:53:11:938 1068 1418 Misc WARNING: WinHttp: SendRequestToServerForFileInformation MakeRequest failed. error 0x80072efe
2009-09-27 09:53:11:938 1068 1418 Misc WARNING: WinHttp: SendRequestToServerForFileInformation failed with 0x80072efe
2009-09-27 09:53:11:938 1068 1418 Misc WARNING: WinHttp: ShouldFileBeDownloaded failed with 0x80072efe
2009-09-27 09:53:12:938 1068 1418 Misc WARNING: SendRequest failed with hr = 80072efe. Proxy List used: <http=127.0.0.1:4128> Bypass List used : <(null)> Auth Schemes used : <>
2009-09-27 09:53:12:938 1068 1418 Misc WARNING: WinHttp: SendRequestUsingProxy failed for <http://download.microsoft.com/v8/window ... uredir.cab>. error 0x80072efe
2009-09-27 09:53:12:938 1068 1418 Misc WARNING: WinHttp: SendRequestToServerForFileInformation MakeRequest failed. error 0x80072efe
2009-09-27 09:53:12:938 1068 1418 Misc WARNING: WinHttp: SendRequestToServerForFileInformation failed with 0x80072efe
2009-09-27 09:53:12:938 1068 1418 Misc WARNING: WinHttp: ShouldFileBeDownloaded failed with 0x80072efe
2009-09-27 09:53:13:938 1068 1418 Misc WARNING: SendRequest failed with hr = 80072efe. Proxy List used: <http=127.0.0.1:4128> Bypass List used : <(null)> Auth Schemes used : <>
2009-09-27 09:53:13:938 1068 1418 Misc WARNING: WinHttp: SendRequestUsingProxy failed for <http://download.microsoft.com/v8/window ... uredir.cab>. error 0x80072efe
2009-09-27 09:53:13:938 1068 1418 Misc WARNING: WinHttp: SendRequestToServerForFileInformation MakeRequest failed. error 0x80072efe
2009-09-27 09:53:13:938 1068 1418 Misc WARNING: WinHttp: SendRequestToServerForFileInformation failed with 0x80072efe
2009-09-27 09:53:13:938 1068 1418 Misc WARNING: WinHttp: ShouldFileBeDownloaded failed with 0x80072efe
2009-09-27 09:53:14:939 1068 1418 Misc WARNING: SendRequest failed with hr = 80072efe. Proxy List used: <http=127.0.0.1:4128> Bypass List used : <(null)> Auth Schemes used : <>
2009-09-27 09:53:14:939 1068 1418 Misc WARNING: WinHttp: SendRequestUsingProxy failed for <http://download.microsoft.com/v8/window ... uredir.cab>. error 0x80072efe
2009-09-27 09:53:14:939 1068 1418 Misc WARNING: WinHttp: SendRequestToServerForFileInformation MakeRequest failed. error 0x80072efe
2009-09-27 09:53:14:939 1068 1418 Misc WARNING: WinHttp: SendRequestToServerForFileInformation failed with 0x80072efe
2009-09-27 09:53:14:939 1068 1418 Misc WARNING: WinHttp: ShouldFileBeDownloaded failed with 0x80072efe
2009-09-27 09:53:14:939 1068 1418 Misc WARNING: DownloadFileInternal failed for http://download.microsoft.com/v8/window ... uredir.cab: error 0x80072efe
2009-09-27 09:53:14:939 1068 1418 Misc Validating signature for C:\Windows\SoftwareDistribution\WuRedir\9482F4B4-E343-43B6-B170-9A65BC822C77\muv3wuredir.cab:
2009-09-27 09:53:14:945 1068 1418 Misc Microsoft signed: Yes
2009-09-27 09:53:15:948 1068 1418 Misc WARNING: SendRequest failed with hr = 80072efe. Proxy List used: <http=127.0.0.1:4128> Bypass List used : <(null)> Auth Schemes used : <>
2009-09-27 09:53:15:948 1068 1418 Misc WARNING: WinHttp: SendRequestUsingProxy failed for <http://update.microsoft.com/v8/windowsu ... uredir.cab>. error 0x80072efe
2009-09-27 09:53:15:948 1068 1418 Misc WARNING: WinHttp: SendRequestToServerForFileInformation MakeRequest failed. error 0x80072efe
2009-09-27 09:53:15:948 1068 1418 Misc WARNING: WinHttp: SendRequestToServerForFileInformation failed with 0x80072efe
2009-09-27 09:53:15:948 1068 1418 Misc WARNING: WinHttp: ShouldFileBeDownloaded failed with 0x80072efe
2009-09-27 09:53:16:948 1068 1418 Misc WARNING: SendRequest failed with hr = 80072efe. Proxy List used: <http=127.0.0.1:4128> Bypass List used : <(null)> Auth Schemes used : <>
2009-09-27 09:53:16:948 1068 1418 Misc WARNING: WinHttp: SendRequestUsingProxy failed for <http://update.microsoft.com/v8/windowsu ... uredir.cab>. error 0x80072efe
2009-09-27 09:53:16:948 1068 1418 Misc WARNING: WinHttp: SendRequestToServerForFileInformation MakeRequest failed. error 0x80072efe
2009-09-27 09:53:16:948 1068 1418 Misc WARNING: WinHttp: SendRequestToServerForFileInformation failed with 0x80072efe
2009-09-27 09:53:16:948 1068 1418 Misc WARNING: WinHttp: ShouldFileBeDownloaded failed with 0x80072efe
2009-09-27 09:53:17:948 1068 1418 Misc WARNING: SendRequest failed with hr = 80072efe. Proxy List used: <http=127.0.0.1:4128> Bypass List used : <(null)> Auth Schemes used : <>
2009-09-27 09:53:17:948 1068 1418 Misc WARNING: WinHttp: SendRequestUsingProxy failed for <http://update.microsoft.com/v8/windowsu ... uredir.cab>. error 0x80072efe
2009-09-27 09:53:17:948 1068 1418 Misc WARNING: WinHttp: SendRequestToServerForFileInformation MakeRequest failed. error 0x80072efe
2009-09-27 09:53:17:948 1068 1418 Misc WARNING: WinHttp: SendRequestToServerForFileInformation failed with 0x80072efe
2009-09-27 09:53:17:948 1068 1418 Misc WARNING: WinHttp: ShouldFileBeDownloaded failed with 0x80072efe
2009-09-27 09:53:18:948 1068 1418 Misc WARNING: SendRequest failed with hr = 80072efe. Proxy List used: <http=127.0.0.1:4128> Bypass List used : <(null)> Auth Schemes used : <>
2009-09-27 09:53:18:948 1068 1418 Misc WARNING: WinHttp: SendRequestUsingProxy failed for <http://update.microsoft.com/v8/windowsu ... uredir.cab>. error 0x80072efe
2009-09-27 09:53:18:948 1068 1418 Misc WARNING: WinHttp: SendRequestToServerForFileInformation MakeRequest failed. error 0x80072efe
2009-09-27 09:53:18:948 1068 1418 Misc WARNING: WinHttp: SendRequestToServerForFileInformation failed with 0x80072efe
2009-09-27 09:53:18:948 1068 1418 Misc WARNING: WinHttp: ShouldFileBeDownloaded failed with 0x80072efe
2009-09-27 09:53:18:948 1068 1418 Misc WARNING: DownloadFileInternal failed for http://update.microsoft.com/v8/windowsu ... uredir.cab: error 0x80072efe
2009-09-27 09:53:18:950 1068 1418 Agent WARNING: Failed to obtain the authorization cab URLs, hr=0x80072efe
2009-09-27 09:53:18:953 1068 1418 Misc Validating signature for C:\Windows\SoftwareDistribution\WuRedir\9482F4B4-E343-43B6-B170-9A65BC822C77\muv3wuredir.cab:
2009-09-27 09:53:18:959 1068 1418 Misc Microsoft signed: Yes
2009-09-27 09:53:19:958 1068 1418 Misc WARNING: SendRequest failed with hr = 80072efe. Proxy List used: <http=127.0.0.1:4128> Bypass List used : <(null)> Auth Schemes used : <>
2009-09-27 09:53:19:958 1068 1418 Misc WARNING: WinHttp: SendRequestUsingProxy failed for <http://download.windowsupdate.com/v8/wi ... uredir.cab>. error 0x80072efe
2009-09-27 09:53:19:958 1068 1418 Misc WARNING: WinHttp: SendRequestToServerForFileInformation MakeRequest failed. error 0x80072efe
2009-09-27 09:53:19:958 1068 1418 Misc WARNING: WinHttp: SendRequestToServerForFileInformation failed with 0x80072efe
2009-09-27 09:53:19:958 1068 1418 Misc WARNING: WinHttp: ShouldFileBeDownloaded failed with 0x80072efe
2009-09-27 09:53:20:958 1068 1418 Misc WARNING: SendRequest failed with hr = 80072efe. Proxy List used: <http=127.0.0.1:4128> Bypass List used : <(null)> Auth Schemes used : <>
2009-09-27 09:53:20:958 1068 1418 Misc WARNING: WinHttp: SendRequestUsingProxy failed for <http://download.windowsupdate.com/v8/wi ... uredir.cab>. error 0x80072efe
2009-09-27 09:53:20:958 1068 1418 Misc WARNING: WinHttp: SendRequestToServerForFileInformation MakeRequest failed. error 0x80072efe
2009-09-27 09:53:20:958 1068 1418 Misc WARNING: WinHttp: SendRequestToServerForFileInformation failed with 0x80072efe
2009-09-27 09:53:20:958 1068 1418 Misc WARNING: WinHttp: ShouldFileBeDownloaded failed with 0x80072efe
2009-09-27 09:53:21:958 1068 1418 Misc WARNING: SendRequest failed with hr = 80072efe. Proxy List used: <http=127.0.0.1:4128> Bypass List used : <(null)> Auth Schemes used : <>
2009-09-27 09:53:21:958 1068 1418 Misc WARNING: WinHttp: SendRequestUsingProxy failed for <http://download.windowsupdate.com/v8/wi ... uredir.cab>. error 0x80072efe
2009-09-27 09:53:21:958 1068 1418 Misc WARNING: WinHttp: SendRequestToServerForFileInformation MakeRequest failed. error 0x80072efe
2009-09-27 09:53:21:958 1068 1418 Misc WARNING: WinHttp: SendRequestToServerForFileInformation failed with 0x80072efe
2009-09-27 09:53:21:958 1068 1418 Misc WARNING: WinHttp: ShouldFileBeDownloaded failed with 0x80072efe
2009-09-27 09:53:22:958 1068 1418 Misc WARNING: SendRequest failed with hr = 80072efe. Proxy List used: <http=127.0.0.1:4128> Bypass List used : <(null)> Auth Schemes used : <>
2009-09-27 09:53:22:958 1068 1418 Misc WARNING: WinHttp: SendRequestUsingProxy failed for <http://download.windowsupdate.com/v8/wi ... uredir.cab>. error 0x80072efe
2009-09-27 09:53:22:958 1068 1418 Misc WARNING: WinHttp: SendRequestToServerForFileInformation MakeRequest failed. error 0x80072efe
2009-09-27 09:53:22:958 1068 1418 Misc WARNING: WinHttp: SendRequestToServerForFileInformation failed with 0x80072efe
2009-09-27 09:53:22:958 1068 1418 Misc WARNING: WinHttp: ShouldFileBeDownloaded failed with 0x80072efe
2009-09-27 09:53:22:958 1068 1418 Misc WARNING: DownloadFileInternal failed for http://download.windowsupdate.com/v8/wi ... uredir.cab: error 0x80072efe
2009-09-27 09:53:22:958 1068 1418 Misc Validating signature for C:\Windows\SoftwareDistribution\WuRedir\9482F4B4-E343-43B6-B170-9A65BC822C77\muv3wuredir.cab:
2009-09-27 09:53:22:964 1068 1418 Misc Microsoft signed: Yes
2009-09-27 09:53:23:969 1068 1418 Misc WARNING: SendRequest failed with hr = 80072efe. Proxy List used: <http=127.0.0.1:4128> Bypass List used : <(null)> Auth Schemes used : <>
2009-09-27 09:53:23:969 1068 1418 Misc WARNING: WinHttp: SendRequestUsingProxy failed for <http://download.microsoft.com/v8/window ... uredir.cab>. error 0x80072efe
2009-09-27 09:53:23:969 1068 1418 Misc WARNING: WinHttp: SendRequestToServerForFileInformation MakeRequest failed. error 0x80072efe
2009-09-27 09:53:23:969 1068 1418 Misc WARNING: WinHttp: SendRequestToServerForFileInformation failed with 0x80072efe
2009-09-27 09:53:23:969 1068 1418 Misc WARNING: WinHttp: ShouldFileBeDownloaded failed with 0x80072efe
2009-09-27 09:53:24:968 1068 1418 Misc WARNING: SendRequest failed with hr = 80072efe. Proxy List used: <http=127.0.0.1:4128> Bypass List used : <(null)> Auth Schemes used : <>
2009-09-27 09:53:24:968 1068 1418 Misc WARNING: WinHttp: SendRequestUsingProxy failed for <http://download.microsoft.com/v8/window ... uredir.cab>. error 0x80072efe
2009-09-27 09:53:24:968 1068 1418 Misc WARNING: WinHttp: SendRequestToServerForFileInformation MakeRequest failed. error 0x80072efe
2009-09-27 09:53:24:968 1068 1418 Misc WARNING: WinHttp: SendRequestToServerForFileInformation failed with 0x80072efe
2009-09-27 09:53:24:968 1068 1418 Misc WARNING: WinHttp: ShouldFileBeDownloaded failed with 0x80072efe
2009-09-27 09:53:25:978 1068 1418 Misc WARNING: SendRequest failed with hr = 80072efe. Proxy List used: <http=127.0.0.1:4128> Bypass List used : <(null)> Auth Schemes used : <>
2009-09-27 09:53:25:978 1068 1418 Misc WARNING: WinHttp: SendRequestUsingProxy failed for <http://download.microsoft.com/v8/window ... uredir.cab>. error 0x80072efe
2009-09-27 09:53:25:978 1068 1418 Misc WARNING: WinHttp: SendRequestToServerForFileInformation MakeRequest failed. error 0x80072efe
2009-09-27 09:53:25:978 1068 1418 Misc WARNING: WinHttp: SendRequestToServerForFileInformation failed with 0x80072efe
2009-09-27 09:53:25:978 1068 1418 Misc WARNING: WinHttp: ShouldFileBeDownloaded failed with 0x80072efe
2009-09-27 09:53:26:978 1068 1418 Misc WARNING: SendRequest failed with hr = 80072efe. Proxy List used: <http=127.0.0.1:4128> Bypass List used : <(null)> Auth Schemes used : <>
2009-09-27 09:53:26:978 1068 1418 Misc WARNING: WinHttp: SendRequestUsingProxy failed for <http://download.microsoft.com/v8/window ... uredir.cab>. error 0x80072efe
2009-09-27 09:53:26:978 1068 1418 Misc WARNING: WinHttp: SendRequestToServerForFileInformation MakeRequest failed. error 0x80072efe
2009-09-27 09:53:26:978 1068 1418 Misc WARNING: WinHttp: SendRequestToServerForFileInformation failed with 0x80072efe
2009-09-27 09:53:26:978 1068 1418 Misc WARNING: WinHttp: ShouldFileBeDownloaded failed with 0x80072efe
2009-09-27 09:53:26:978 1068 1418 Misc WARNING: DownloadFileInternal failed for http://download.microsoft.com/v8/window ... uredir.cab: error 0x80072efe
2009-09-27 09:53:26:978 1068 1418 Misc Validating signature for C:\Windows\SoftwareDistribution\WuRedir\9482F4B4-E343-43B6-B170-9A65BC822C77\muv3wuredir.cab:
2009-09-27 09:53:26:984 1068 1418 Misc Microsoft signed: Yes
2009-09-27 09:53:27:988 1068 1418 Misc WARNING: SendRequest failed with hr = 80072efe. Proxy List used: <http=127.0.0.1:4128> Bypass List used : <(null)> Auth Schemes used : <>
2009-09-27 09:53:27:988 1068 1418 Misc WARNING: WinHttp: SendRequestUsingProxy failed for <http://update.microsoft.com/v8/windowsu ... uredir.cab>. error 0x80072efe
2009-09-27 09:53:27:988 1068 1418 Misc WARNING: WinHttp: SendRequestToServerForFileInformation MakeRequest failed. error 0x80072efe
2009-09-27 09:53:27:988 1068 1418 Misc WARNING: WinHttp: SendRequestToServerForFileInformation failed with 0x80072efe
2009-09-27 09:53:27:988 1068 1418 Misc WARNING: WinHttp: ShouldFileBeDownloaded failed with 0x80072efe
2009-09-27 09:53:28:988 1068 1418 Misc WARNING: SendRequest failed with hr = 80072efe. Proxy List used: <http=127.0.0.1:4128> Bypass List used : <(null)> Auth Schemes used : <>
2009-09-27 09:53:28:988 1068 1418 Misc WARNING: WinHttp: SendRequestUsingProxy failed for <http://update.microsoft.com/v8/windowsu ... uredir.cab>. error 0x80072efe
2009-09-27 09:53:28:988 1068 1418 Misc WARNING: WinHttp: SendRequestToServerForFileInformation MakeRequest failed. error 0x80072efe
2009-09-27 09:53:28:988 1068 1418 Misc WARNING: WinHttp: SendRequestToServerForFileInformation failed with 0x80072efe
2009-09-27 09:53:28:988 1068 1418 Misc WARNING: WinHttp: ShouldFileBeDownloaded failed with 0x80072efe
2009-09-27 09:53:29:988 1068 1418 Misc WARNING: SendRequest failed with hr = 80072efe. Proxy List used: <http=127.0.0.1:4128> Bypass List used : <(null)> Auth Schemes used : <>
2009-09-27 09:53:29:988 1068 1418 Misc WARNING: WinHttp: SendRequestUsingProxy failed for <http://update.microsoft.com/v8/windowsu ... uredir.cab>. error 0x80072efe
2009-09-27 09:53:29:988 1068 1418 Misc WARNING: WinHttp: SendRequestToServerForFileInformation MakeRequest failed. error 0x80072efe
2009-09-27 09:53:29:988 1068 1418 Misc WARNING: WinHttp: SendRequestToServerForFileInformation failed with 0x80072efe
2009-09-27 09:53:29:988 1068 1418 Misc WARNING: WinHttp: ShouldFileBeDownloaded failed with 0x80072efe
2009-09-27 09:53:30:988 1068 1418 Misc WARNING: SendRequest failed with hr = 80072efe. Proxy List used: <http=127.0.0.1:4128> Bypass List used : <(null)> Auth Schemes used : <>
2009-09-27 09:53:30:988 1068 1418 Misc WARNING: WinHttp: SendRequestUsingProxy failed for <http://update.microsoft.com/v8/windowsu ... uredir.cab>. error 0x80072efe
2009-09-27 09:53:30:988 1068 1418 Misc WARNING: WinHttp: SendRequestToServerForFileInformation MakeRequest failed. error 0x80072efe
2009-09-27 09:53:30:988 1068 1418 Misc WARNING: WinHttp: SendRequestToServerForFileInformation failed with 0x80072efe
2009-09-27 09:53:30:988 1068 1418 Misc WARNING: WinHttp: ShouldFileBeDownloaded failed with 0x80072efe
2009-09-27 09:53:30:988 1068 1418 Misc WARNING: DownloadFileInternal failed for http://update.microsoft.com/v8/windowsu ... uredir.cab: error 0x80072efe
2009-09-27 09:53:30:990 1068 1418 Setup WARNING: SelfUpdate check failed to download package information, error = 0x80072EFE
2009-09-27 09:53:30:990 1068 1418 Setup FATAL: SelfUpdate check failed, err = 0x80072EFE
2009-09-27 09:53:30:990 1068 1418 Agent * WARNING: Skipping scan, self-update check returned 0x80072EFE
2009-09-27 09:53:31:181 1068 1418 Agent * WARNING: Exit code = 0x80072EFE
2009-09-27 09:53:31:181 1068 1418 Agent *********
2009-09-27 09:53:31:181 1068 1418 Agent ** END ** Agent: Finding updates [CallerId = AutomaticUpdates]
2009-09-27 09:53:31:181 1068 1418 Agent *************
2009-09-27 09:53:31:181 1068 1418 Agent WARNING: WU client failed Searching for update with error 0x80072efe
2009-09-27 09:53:31:182 1068 6b8 AU >>## RESUMED ## AU: Search for updates [CallId = {85FC1DEA-55DE-41B3-9A99-B27C20B41A39}]
2009-09-27 09:53:31:182 1068 6b8 AU # WARNING: Search callback failed, result = 0x80072EFE
2009-09-27 09:53:31:182 1068 6b8 AU # WARNING: Failed to find updates with error code 80072EFE
2009-09-27 09:53:31:182 1068 6b8 AU #########
2009-09-27 09:53:31:182 1068 6b8 AU ## END ## AU: Search for updates [CallId = {85FC1DEA-55DE-41B3-9A99-B27C20B41A39}]
2009-09-27 09:53:31:182 1068 6b8 AU #############
2009-09-27 09:53:31:182 1068 6b8 AU Need to show Unable to Detect notification
2009-09-27 09:53:31:182 1068 6b8 AU AU setting next detection timeout to 2009-09-27 12:53:31
2009-09-27 09:53:35:990 1068 1418 Report REPORT EVENT: {5B795E9B-701D-4958-80B8-8CC7FB34EA67} 2009-09-27 09:53:30:990+0200 1 148 101 {D67661EB-2423-451D-BF5D-13199E37DF28} 1 80072efe SelfUpdate Failure Software Synchronization Windows Update Client failed to detect with error 0x80072efe.


J'utilise Vista Home Premium et je ne sais plus quoi tenter (avant le reformatage complet). Toute aide serait la bienvenue.

[SYNTAX-ERROR]

Bonjour.

Regardes ce que dit microsoft au sujet des problèmes Windows Update.
http://support.microsoft.com/kb/836941/fr
J'espère que cela pourra t'aider.

@+

[ah1000]

Merci, mais comme je le disais dans mon message, j'ai déjà essayé toutes les possibilités proposées sur cette page. Rien ne marche.
Petit détail supplémentaire : je rencontre le même problème avec Windows Defender.
De plus, j'ai essayé d'entrer http://download.windowsupdate.com/v8/wi ... uredir.cab comme url dans un navigateur et je peux sans problème télé charger ce fichier cab.

[bernard53]

Bonsoir

Vu cette erreur signalé 80072efe dans ton rapport.

As tu essayer ceci.

http://support.microsoft.com/kb/555348/fr

[ah1000]

J'étais déjà tombé sur cette page, mais elle ne semble concerner que XP et 2003 server. J'ai quand même été voir dans le fichier httperr1.log, mais la dernière entrée dans le fichier date de deux mois.

[bernard53]

fait ceci pour voir.

Télécharge random's system information tool (RSIT) par random/random et sauvegarde-le sur le Bureau:

Double clique sur RSIT.exe qui se trouve sur ton bureau pour le lancer:
Pour VISTA :
Clic-droit et choisis "Exécuter en tant qu'administrateur".


Ensuite :
Si l'outil HijackThis (version à jour) n'est pas présent ou non détecté sur l'ordinateur, RSIT le téléchargera (autorise l'accès dans ton pare-feu, si demandé) et tu devras accepter la licence.

Le rapport va se créer. Pour le mettre sur le forum.

Tout sélectionner : CRTL+ A
Tout copier : CRTL+ C
Tout coller : CRTL+ V

Vous pouvez, une fois posté, le fermer. Ce rapport s’appelle.log.txt

Le rapport est sauvegardé à la racine du disque: C:\rsit\info.txt et C:\rsit\log.txt

[ah1000]

Voila le contenu du rapport

Logfile of random's system information tool 1.06 (written by random/random)
Run by Arnaud at 2009-09-28 13:22:43
Microsoft® Windows Vista™ Édition Familiale Premium Service Pack 2
System drive C: has 4 GB (11%) free of 40 GB
Total RAM: 3582 MB (55% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 13:23:14, on 28/09/2009
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\taskeng.exe
C:\Program Files\GIGABYTE\GEST\gest.exe
C:\Windows\system32\conime.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Windows\RtHDVCpl.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\Program Files\HP\HP Software Update\hpwuSchd2.exe
C:\Windows\System32\rundll32.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Windows\ehome\ehtray.exe
C:\Program Files\IDA\ida.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Windows\ehome\ehmsas.exe
C:\Program Files\Common Files\Nero\Lib\NMBgMonitor.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe
C:\Program Files\DAEMON Tools Lite\daemon.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\Logitech\SetPoint\SetPoint.exe
C:\Program Files\Common Files\Nero\Lib\NMIndexStoreSvr.exe
C:\Program Files\Moniteur neufbox\Moniteur neufbox.exe
C:\Program Files\Common Files\Logishrd\KHAL2\KHALMNPR.EXE
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
K:\LiberKey\Apps\Asuite\LKrun.exe
C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Internet Explorer\IELowutil.exe
C:\Windows\explorer.exe
F:\Fichiers téléchargés\RSIT.exe
C:\Program Files\trend micro\Arnaud.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http=127.0.0.1:4128
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: btorbit.com - {000123B4-9B42-4900-B3F7-F4B073EFC214} - C:\Program Files\Orbitdownloader\orbitcth.dll
O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: IE 4.x-6.x BHO for Internet Download Accelerator - {2A646672-9C3A-4C28-9A7A-1FB0F63F28B6} - C:\PROGRA~1\IDA\idaiehlp.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.3572\swg.dll
O2 - BHO: PDF-XChange Viewer IE-Plugin - {C5D07EB6-BBCE-4DAE-ACBB-D13A8D28CB1F} - C:\Program Files\Tracker Software\PDF-XChange Viewer\pdf-viewer\PDFXCviewIEPlugin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: Cooliris Plug-In for Internet Explorer - {EAEE5C74-6D0D-4aca-9232-0DA4A7B866BA} - C:\Program Files\PicLensIE\cooliris.dll
O3 - Toolbar: IDA Bar - {C70E30C7-140A-4166-A2E8-43557E62B41A} - C:\Program Files\IDA\idabar.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: Grab Pro - {C55BBCD6-41AD-48AD-9953-3609C48EACC7} - C:\Program Files\Orbitdownloader\GrabPro.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM\..\Run: [Skytel] Skytel.exe
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [Kernel and Hardware Abstraction Layer] KHALMNPR.EXE
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [NBKeyScan] "C:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Nero\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET Smart Security\egui.exe" /hide /waitservice
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [WildTangent CDA] "C:\Program Files\WildTangent\Apps\CDA\GameDrvr.exe" /startup "C:\Program Files\WildTangent\Apps\CDA\cdaEngine0500.dll"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\RunOnce: [GEST] "C:\Program Files\GIGABYTE\GEST\run.exe"
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [Internet Download Accelerator] C:\Program Files\IDA\ida.exe -autorun
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Nero\Lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKCU\..\Run: [Google Update] "C:\Users\Arnaud\AppData\Local\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [ISUSPM] "C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe" -scheduler
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\daemon.exe" -autorun
O4 - HKCU\..\Run: [AlcoholAutomount] "C:\Program Files\Alcohol Soft\Alcohol 52\axcmd.exe" /automount
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
O4 - Startup: Moniteur neufbox.lnk = C:\Program Files\Moniteur neufbox\Moniteur neufbox.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Logitech SetPoint.lnk = C:\Program Files\Logitech\SetPoint\SetPoint.exe
O8 - Extra context menu item: &Download by Orbit - res://C:\Program Files\Orbitdownloader\orbitmxt.dll/201
O8 - Extra context menu item: &Grab video by Orbit - res://C:\Program Files\Orbitdownloader\orbitmxt.dll/204
O8 - Extra context menu item: &Tout télécharger en utilisant Mass Downloader - C:\Program Files\Mass Downloader\Add_All.htm
O8 - Extra context menu item: Do&wnload selected by Orbit - res://C:\Program Files\Orbitdownloader\orbitmxt.dll/203
O8 - Extra context menu item: Down&load all by Orbit - res://C:\Program Files\Orbitdownloader\orbitmxt.dll/202
O8 - Extra context menu item: Download ALL with IDA - C:\Program Files\IDA\idaieall.htm
O8 - Extra context menu item: Download with IDA - C:\Program Files\IDA\idaie.htm
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Télécharger en utilisant &Mass Downloader - C:\Program Files\Mass Downloader\Add_Url.htm
O9 - Extra button: Mass Downloader - {0FD01980-CCCB-11D3-80D4-0000E80E2EDE} - C:\Program Files\Mass Downloader\massdown.exe
O9 - Extra 'Tools' menuitem: &Mass Downloader - {0FD01980-CCCB-11D3-80D4-0000E80E2EDE} - C:\Program Files\Mass Downloader\massdown.exe
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: Launch Cooliris - {3437D640-C91A-458f-89F5-B9095EA4C28B} - C:\Program Files\PicLensIE\cooliris.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: Internet Download Accelerator - {9819CC0E-9669-4D01-9CD7-2C66DA43AC6C} - C:\Program Files\IDA\ida.exe
O9 - Extra 'Tools' menuitem: &Internet Download Accelerator - {9819CC0E-9669-4D01-9CD7-2C66DA43AC6C} - C:\Program Files\IDA\ida.exe
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O13 - Gopher Prefix:
O17 - HKLM\System\CCS\Services\Tcpip\..\{D872B93E-9567-4CE2-94B8-EC9589552621}: NameServer = 192.168.1.1
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll
O23 - Service: BvrpKrnl - Unknown owner - C:\Program Files\WinFax eXPert\BVRPKrnl.exe
O23 - Service: Eset HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe
O23 - Service: Eset Service (ekrn) - ESET - C:\Program Files\ESET\ESET Smart Security\ekrn.exe
O23 - Service: GEST Service for program management. (GEST Service) - Unknown owner - C:\Program Files\GIGABYTE\GEST\GSvr.exe
O23 - Service: Google Update Service (gupdate1c8d03a7c66065) (gupdate1c8d03a7c66065) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Logitech Bluetooth Service (LBTServ) - Logitech, Inc. - C:\Program Files\Common Files\Logishrd\Bluetooth\LBTServ.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: Nero BackItUp Scheduler 3 - Nero AG - C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe
O23 - Service: nProtect GameGuard Service (npggsvc) - Unknown owner - C:\Windows\system32\GameMon.des.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: DiRT Drivers Auto Removal (pr2ah4nb) (pr2ah4nb) - CODEMASTERS - C:\Windows\system32\pr2ah4nb.exe
O23 - Service: DiRT Drivers Auto Removal (pr2ah4nc) (pr2ah4nc) - Protection Technology (StarForce) - C:\Windows\system32\pr2ah4nc.exe
O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - CACE Technologies - C:\Program Files\WinPcap\rpcapd.exe
O23 - Service: SBSD Security Center Service (SBSDWSCService) - Safer Networking Ltd. - C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe
O23 - Service: StarWind AE Service (StarWindServiceAE) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 52\StarWind\StarWindServiceAE.exe
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files\Common Files\Steam\SteamService.exe

--
End of file - 12717 bytes

======Scheduled tasks folder======

C:\Windows\tasks\Google Software Updater.job
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-810918014-1524722749-2520742022-1000Core.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-810918014-1524722749-2520742022-1000UA.job
C:\Windows\tasks\User_Feed_Synchronization-{1E220693-1179-4CF2-BB4B-84E932AC0D1C}.job
C:\Windows\tasks\Wise Registry Cleaner 4.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{000123B4-9B42-4900-B3F7-F4B073EFC214}]
Octh Class - C:\Program Files\Orbitdownloader\orbitcth.dll [2008-06-10 187512]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{02478D38-C3F9-4efb-9B51-7695ECA05670}]
&Yahoo! Toolbar Helper - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll [2007-10-19 817936]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2A646672-9C3A-4C28-9A7A-1FB0F63F28B6}]
IE 4.x-6.x BHO for Internet Download Accelerator - C:\PROGRA~1\IDA\idaiehlp.dll [2009-02-13 158720]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{53707962-6F74-2D53-2644-206D7942484F}]
Spybot-S&D IE Protection - C:\PROGRA~1\SPYBOT~1\SDHelper.dll [2008-09-15 1562960]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2007-08-24 2212224]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Programme d'aide de l'Assistant de connexion Windows Live - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-01-22 408448]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]
Google Toolbar Notifier BHO - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.3572\swg.dll [2009-03-25 668656]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C5D07EB6-BBCE-4DAE-ACBB-D13A8D28CB1F}]
PDF-XChange Viewer IE-Plugin - C:\Program Files\Tracker Software\PDF-XChange Viewer\pdf-viewer\PDFXCviewIEPlugin.dll [2008-03-25 1099456]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2009-07-25 41760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EAEE5C74-6D0D-4aca-9232-0DA4A7B866BA}]
C:\Program Files\PicLensIE\cooliris.dll [2008-09-11 3837952]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{C70E30C7-140A-4166-A2E8-43557E62B41A} - IDA Bar - C:\Program Files\IDA\idabar.dll [2007-10-17 180224]
{EF99BD32-C1FB-11D2-892F-0090271D4F88} - Yahoo! Toolbar - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll [2007-10-19 817936]
{C55BBCD6-41AD-48AD-9953-3609C48EACC7} - Grab Pro - C:\Program Files\Orbitdownloader\GrabPro.dll [2008-06-10 457848]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"Windows Defender"=C:\Program Files\Windows Defender\MSASCui.exe [2008-01-21 1008184]
"RtHDVCpl"=C:\Windows\RtHDVCpl.exe [2007-09-19 4702208]
"Skytel"=C:\Windows\Skytel.exe [2007-08-03 1826816]
"GrooveMonitor"=C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [2007-08-24 33648]
"Kernel and Hardware Abstraction Layer"=C:\Windows\KHALMNPR.EXE [2008-02-29 76304]
"HP Software Update"=C:\Program Files\HP\HP Software Update\HPWuSchd2.exe [2006-12-10 49152]
"NBKeyScan"=C:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe [2007-08-08 1828136]
"NeroFilterCheck"=C:\Program Files\Common Files\Nero\Lib\NeroCheck.exe [2007-03-01 153136]
"egui"=C:\Program Files\ESET\ESET Smart Security\egui.exe [2008-07-01 1447168]
"NvCplDaemon"=C:\Windows\system32\NvCpl.dll [2008-10-07 13584928]
"NvMediaCenter"=C:\Windows\system32\NvMcTray.dll [2008-10-07 92704]
"WildTangent CDA"=C:\Program Files\WildTangent\Apps\CDA\GameDrvr.exe [2005-03-29 28616]
"QuickTime Task"=C:\Program Files\QuickTime\QTTask.exe [2009-05-26 413696]
"SunJavaUpdateSched"=C:\Program Files\Java\jre6\bin\jusched.exe [2009-07-25 149280]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"GEST"=C:\Program Files\GIGABYTE\GEST\run.exe [2007-12-14 236040]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2009-04-10 1233920]
"ehTray.exe"=C:\Windows\ehome\ehTray.exe [2008-01-21 125952]
"Internet Download Accelerator"=C:\Program Files\IDA\ida.exe [2009-02-13 2415104]
"SpybotSD TeaTimer"=C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe [2009-03-05 2260480]
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"=C:\Program Files\Common Files\Nero\Lib\NMBgMonitor.exe [2007-08-03 202024]
"WMPNSCFG"=C:\Program Files\Windows Media Player\WMPNSCFG.exe [2008-01-21 202240]
"Google Update"=C:\Users\Arnaud\AppData\Local\Google\Update\GoogleUpdate.exe [2008-08-30 133104]
"ISUSPM"=C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe [2006-09-10 218032]
"DAEMON Tools Lite"=C:\Program Files\DAEMON Tools Lite\daemon.exe [2008-12-29 687560]
"AlcoholAutomount"=C:\Program Files\Alcohol Soft\Alcohol 52\axcmd.exe [2009-04-24 203928]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\EA Core]
C:\Program Files\Electronic Arts\EADM\Core.exe [2008-07-22 2772992]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
HP Digital Imaging Monitor.lnk - C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
Logitech SetPoint.lnk - C:\Program Files\Logitech\SetPoint\SetPoint.exe

C:\Users\Arnaud\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
Moniteur neufbox.lnk - C:\Program Files\Moniteur neufbox\Moniteur neufbox.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2007-08-24 2212224]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfPf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfRd]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfUsbccidDriver]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"EnableUIADesktopToggle"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"BindDirectlyToPropertySetStorage"=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"C:\Program Files\Orbitdownloader\orbitdm.exe"="C:\Program Files\Orbitdownloader\orbitdm.exe:*:Enabled:Orbit"
"C:\Program Files\Orbitdownloader\orbitnet.exe"="C:\Program Files\Orbitdownloader\orbitnet.exe:*:Enabled:Orbit"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{42033b7c-103d-11dd-a60f-806e6f6e6963}]
shell\AutoRun\command - G:\.\autorun.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{433efd4e-0cac-11dd-a9e9-806e6f6e6963}]
shell\AutoRun\command - G:\SETUP.EXE
shell\configure\command - G:\SETUP.EXE
shell\install\command - G:\SETUP.EXE

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{92711e0b-3cf4-11dd-8cae-001d7d01b8ae}]
shell\AutoRun\command - N:\EmDesk.exe
shell\EmDesk\command - N:\EmDesk.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{95334c01-0ca8-11dd-bd20-806e6f6e6963}]
shell\AutoRun\command - H:\autorun.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{ee6c6a3e-11bd-11dd-8148-001d7d01b8ae}]
shell\AutoRun\command - P:\LaunchU3.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{f870a44d-10f2-11dd-b6ac-001d7d01b8ae}]
shell\AutoRun\command - N:\Autorun.exe /run
shell\Shell00\command - N:\Autorun.exe /run
shell\Shell01\command - N:\Autorun.exe /action
shell\Shell02\command - N:\Autorun.exe /uninstall


======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 months======

2009-09-28 13:22:43 ----D---- C:\rsit
2009-09-28 13:22:43 ----D---- C:\Program Files\trend micro
2009-09-27 18:02:16 ----A---- C:\Windows\proxycfg.exe
2009-09-27 18:02:00 ----A---- C:\Descriptors.txt
2009-09-27 18:01:57 ----D---- C:\AULOGS
2009-09-27 09:43:13 ----D---- C:\Program Files\Sun
2009-09-26 15:09:11 ----D---- C:\Windows\system32\catroot2
2009-09-25 09:43:27 ----D---- C:\Users\Arnaud\AppData\Roaming\Talkback
2009-09-25 09:43:15 ----D---- C:\Program Files\Mozilla Sunbird
2009-09-23 17:32:40 ----D---- C:\Users\Arnaud\AppData\Roaming\IGN2K5
2009-09-16 10:42:07 ----A---- C:\Windows\system32\XAudio2_4.dll
2009-09-16 10:42:07 ----A---- C:\Windows\system32\XAPOFX1_3.dll
2009-09-16 10:42:07 ----A---- C:\Windows\system32\xactengine3_4.dll
2009-09-16 10:42:07 ----A---- C:\Windows\system32\X3DAudio1_6.dll
2009-09-16 10:42:07 ----A---- C:\Windows\system32\D3DX9_41.dll
2009-09-16 10:42:07 ----A---- C:\Windows\system32\d3dx10_41.dll
2009-09-16 10:42:07 ----A---- C:\Windows\system32\D3DCompiler_41.dll
2009-09-16 10:42:06 ----A---- C:\Windows\system32\D3DX9_40.dll
2009-09-16 10:42:06 ----A---- C:\Windows\system32\d3dx10_40.dll
2009-09-16 10:42:06 ----A---- C:\Windows\system32\D3DCompiler_40.dll
2009-09-12 11:05:53 ----D---- C:\Program Files\Video Thumbnails Maker
2009-09-09 20:15:16 ----A---- C:\Windows\system32\VBoxNetFltNotify.dll
2009-09-08 11:36:45 ----A---- C:\Windows\ntbtlog.txt
2009-08-29 08:48:20 ----D---- C:\Users\Arnaud\AppData\Roaming\Help
2009-08-29 08:47:42 ----A---- C:\Windows\winhlp32.exe
2009-08-29 08:47:42 ----A---- C:\Windows\system32\ftsrch.dll
2009-08-29 08:47:42 ----A---- C:\Windows\system32\ftlx041e.dll
2009-08-29 08:47:42 ----A---- C:\Windows\system32\ftlx0411.dll

======List of files/folders modified in the last 1 months======

2009-09-28 13:23:13 ----D---- C:\Windows\Temp
2009-09-28 13:23:09 ----D---- C:\Windows\Prefetch
2009-09-28 13:22:43 ----D---- C:\Program Files
2009-09-28 13:02:11 ----D---- C:\Windows\System32
2009-09-28 13:02:11 ----A---- C:\Windows\system32\PerfStringBackup.INI
2009-09-28 13:02:10 ----D---- C:\Windows\inf
2009-09-28 12:58:10 ----D---- C:\Windows\Tasks
2009-09-28 12:51:12 ----D---- C:\Windows\system32\catroot
2009-09-28 12:51:01 ----D---- C:\Users\Arnaud\AppData\Roaming\Orbit
2009-09-28 10:58:58 ----D---- C:\Downloads
2009-09-28 10:37:07 ----SHD---- C:\System Volume Information
2009-09-28 10:19:55 ----D---- C:\Program Files\FLV Player
2009-09-28 08:44:00 ----D---- C:\Windows\winsxs
2009-09-27 18:04:56 ----D---- C:\Windows
2009-09-27 18:02:37 ----D---- C:\Windows\SoftwareDistribution
2009-09-27 13:31:13 ----D---- C:\ProgramData\Google Updater
2009-09-27 09:44:00 ----SHD---- C:\Windows\Installer
2009-09-27 09:43:45 ----D---- C:\Windows\system32\drivers
2009-09-27 09:43:30 ----DC---- C:\Windows\system32\DRVSTORE
2009-09-26 15:07:34 ----D---- C:\Users\Arnaud\AppData\Roaming\Moniteur neufbox
2009-09-25 09:43:24 ----D---- C:\Users\Arnaud\AppData\Roaming\Mozilla
2009-09-25 09:10:56 ----SD---- C:\Users\Arnaud\AppData\Roaming\Microsoft
2009-09-23 16:14:04 ----HD---- C:\Program Files\InstallShield Installation Information
2009-09-22 15:02:22 ----D---- C:\Users\Arnaud\AppData\Roaming\dvdcss
2009-09-20 10:05:53 ----D---- C:\Program Files\Google
2009-09-16 10:41:57 ----RSD---- C:\Windows\assembly
2009-09-16 10:39:31 ----D---- C:\Program Files\Common Files
2009-09-16 10:39:08 ----D---- C:\Program Files\AGEIA Technologies
2009-09-12 10:55:21 ----A---- C:\Windows\NeroDigital.ini
2009-09-11 08:06:40 ----D---- C:\Program Files\Mozilla Firefox
2009-09-08 10:59:12 ----D---- C:\ProgramData\Spybot - Search & Destroy
2009-09-08 10:58:54 ----D---- C:\Windows\Minidump
2009-09-08 10:58:54 ----D---- C:\Windows\Debug
2009-09-08 10:51:54 ----D---- C:\Windows\system32\Tasks
2009-09-08 09:28:54 ----D---- C:\Program Files\Opera
2009-09-04 15:40:25 ----A---- C:\Windows\system32\PnkBstrB.exe
2009-09-01 08:08:02 ----D---- C:\Windows\rescache
2009-08-29 08:48:03 ----D---- C:\Windows\system32\fr-FR
2009-08-29 08:48:03 ----D---- C:\Windows\fr-FR

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 easdrv;easdrv; C:\Windows\system32\DRIVERS\easdrv.sys [2008-07-01 53256]
R1 epfwtdi;epfwtdi; C:\Windows\system32\DRIVERS\epfwtdi.sys [2008-07-01 54280]
R1 VBoxDrv;VirtualBox Service; C:\Windows\system32\DRIVERS\VBoxDrv.sys [2009-09-09 115856]
R1 VBoxUSBMon;VirtualBox USB Monitor Driver; C:\Windows\system32\DRIVERS\VBoxUSBMon.sys [2009-09-09 41424]
R1 vmm;Virtual Machine Monitor; \??\C:\Windows\system32\Drivers\vmm.sys [2008-02-12 232472]
R2 acedrv11;acedrv11; \??\C:\Windows\system32\drivers\acedrv11.sys [2008-07-30 277736]
R2 athsgt;athsgt; C:\Windows\system32\DRIVERS\athsgt.sys [2008-12-01 164992]
R2 atksgt;atksgt; C:\Windows\system32\DRIVERS\atksgt.sys [2009-04-15 281504]
R2 eamon;EAMON; C:\Windows\system32\DRIVERS\eamon.sys [2008-07-01 39944]
R2 epfw;epfw; C:\Windows\system32\DRIVERS\epfw.sys [2008-07-01 71688]
R2 limsgt;limsgt; C:\Windows\system32\DRIVERS\limsgt.sys [2008-12-01 12544]
R2 lirsgt;lirsgt; C:\Windows\system32\DRIVERS\lirsgt.sys [2009-04-15 25888]
R3 Epfwndis;Eset Personal Firewall; C:\Windows\system32\DRIVERS\Epfwndis.sys [2008-07-01 30728]
R3 ET5Drv;ET5Drv; \??\C:\Windows\system32\Drivers\ET5Drv.sys [2007-10-11 30008]
R3 gdrv;gdrv; \??\C:\Windows\gdrv.sys [2009-09-28 16608]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHDA.sys [2007-09-19 1959832]
R3 LHidFilt;Logitech SetPoint KMDF HID Filter Driver; C:\Windows\system32\DRIVERS\LHidFilt.Sys [2008-02-29 35344]
R3 LMouFilt;Logitech SetPoint KMDF Mouse Filter Driver; C:\Windows\system32\DRIVERS\LMouFilt.Sys [2008-02-29 36880]
R3 nvlddmkm;nvlddmkm; C:\Windows\system32\DRIVERS\nvlddmkm.sys [2008-10-07 7380896]
R3 RTL8169;Realtek 8169 NT Driver; C:\Windows\system32\DRIVERS\Rtlh86.sys [2007-09-17 98816]
R3 VBoxMouse;VirtualBox Guest Mouse Service; C:\Windows\system32\DRIVERS\VBoxMouse.sys [2008-04-30 37632]
R3 VBoxNetAdp;VirtualBox Host-Only Ethernet Adapter; C:\Windows\system32\DRIVERS\VBoxNetAdp.sys [2009-09-09 91856]
R3 VBoxNetFlt;VBoxNetFlt Service; C:\Windows\system32\DRIVERS\VBoxNetFlt.sys [2009-09-09 100368]
R3 VPCNetS2;Virtual Machine Network Services Driver; C:\Windows\system32\DRIVERS\VMNetSrv.sys [2008-02-05 59960]
S1 VBoxSF;VirtualBox Shared Folders; C:\Windows\system32\drivers\VBoxSF.sys [2008-04-30 193760]
S3 aqncvp2s;aqncvp2s; C:\Windows\system32\drivers\aqncvp2s.sys []
S3 atyeqb04;atyeqb04; C:\Windows\system32\drivers\atyeqb04.sys []
S3 Dot4;Pilote MS IEEE-1284.4; C:\Windows\system32\DRIVERS\Dot4.sys [2008-01-21 131584]
S3 Dot4Print;Pilote de classe Imprimante pour IEEE-1284.4; C:\Windows\system32\DRIVERS\Dot4Prt.sys [2008-01-21 16384]
S3 dot4usb;MS Dot4USB Filter Dot4USB Filter; C:\Windows\system32\DRIVERS\dot4usb.sys [2008-01-21 36864]
S3 drmkaud;Filtre de décodeur DRM (Noyau Microsoft); C:\Windows\system32\drivers\drmkaud.sys [2008-01-21 5632]
S3 HdAudAddService;Pilote de fonction UAA 1.1 Microsoft pour le service High Definition Audio; C:\Windows\system32\drivers\HdAudio.sys [2006-11-02 235520]
S3 MSKSSRV;Proxy de service de répartition Microsoft; C:\Windows\system32\drivers\MSKSSRV.sys [2008-01-21 8192]
S3 MSPCLOCK;Proxy d'horloge de répartition Microsoft; C:\Windows\system32\drivers\MSPCLOCK.sys [2008-01-21 5888]
S3 MSPQM;Proxy de gestion de qualité de répartition Microsoft; C:\Windows\system32\drivers\MSPQM.sys [2008-01-21 5504]
S3 MSTEE;Convertisseur en T/site-à-site de répartition Microsoft; C:\Windows\system32\drivers\MSTEE.sys [2008-01-21 6016]
S3 NPF;NetGroup Packet Filter Driver; C:\Windows\system32\drivers\npf.sys [2007-11-06 34064]
S3 PSI;PSI; C:\Windows\system32\DRIVERS\psi_mf.sys [2009-06-17 12648]
S3 RTCore32;RTCore32; \??\K:\LiberKey\Apps\RightMarkCPUClockUtility\App\RightMarkCPUClockUtility\RTCore32.sys [2005-05-25 4608]
S3 usbscan;Pilote de scanneur USB; C:\Windows\system32\DRIVERS\usbscan.sys [2008-01-21 35328]
S3 WUDFRd;WUDFRd; C:\Windows\system32\DRIVERS\WUDFRd.sys [2008-01-21 83328]
S3 XDva276;XDva276; \??\C:\Windows\system32\XDva276.sys []
S4 ErrDev;Microsoft Hardware Error Device Driver; C:\Windows\system32\drivers\errdev.sys [2008-01-21 6656]
S4 MegaSR;MegaSR; C:\Windows\system32\drivers\megasr.sys [2008-01-21 386616]
S4 WmiAcpi;Microsoft Windows Management Interface for ACPI; C:\Windows\system32\drivers\wmiacpi.sys [2008-01-21 11264]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 ekrn;Eset Service; C:\Program Files\ESET\ESET Smart Security\ekrn.exe [2008-07-01 468224]
R2 hpqddsvc;Service HP CUE DeviceDiscovery; C:\Windows\system32\svchost.exe [2008-01-21 21504]
R2 LightScribeService;LightScribeService Direct Disc Labeling Service; C:\Program Files\Common Files\LightScribe\LSSrvc.exe [2008-12-07 73728]
R2 Nero BackItUp Scheduler 3;Nero BackItUp Scheduler 3; C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe [2007-08-08 836904]
R2 Net Driver HPZ12;Net Driver HPZ12; C:\Windows\System32\svchost.exe [2008-01-21 21504]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2008-10-07 203296]
R2 Pml Driver HPZ12;Pml Driver HPZ12; C:\Windows\System32\svchost.exe [2008-01-21 21504]
R2 PnkBstrA;PnkBstrA; C:\Windows\system32\PnkBstrA.exe [2009-01-23 66872]
R2 SBSDWSCService;SBSD Security Center Service; C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe [2009-01-26 1153368]
R2 StarWindServiceAE;StarWind AE Service; C:\Program Files\Alcohol Soft\Alcohol 52\StarWind\StarWindServiceAE.exe [2007-05-28 275968]
R3 GEST Service;GEST Service for program management.; C:\Program Files\GIGABYTE\GEST\GSvr.exe [2007-12-14 47624]
R3 hpqcxs08;hpqcxs08; C:\Windows\system32\svchost.exe [2008-01-21 21504]
R3 NMIndexingService;NMIndexingService; C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe [2007-08-03 382248]
S2 gupdate1c8d03a7c66065;Google Update Service (gupdate1c8d03a7c66065); C:\Program Files\Google\Update\GoogleUpdate.exe [2008-08-30 133104]
S2 gusvc;Google Software Updater; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2009-03-25 183280]
S2 pr2ah4nb;DiRT Drivers Auto Removal (pr2ah4nb); C:\Windows\system32\pr2ah4nb.exe [2007-07-19 410984]
S2 pr2ah4nc;DiRT Drivers Auto Removal (pr2ah4nc); C:\Windows\system32\pr2ah4nc.exe [2007-05-16 480888]
S3 aspnet_state;Service d'état ASP.NET; C:\Windows\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2009-03-29 31048]
S3 BvrpKrnl;BvrpKrnl; C:\Program Files\WinFax eXPert\BVRPKrnl.exe [2007-01-05 573440]
S3 EhttpSrv;Eset HTTP Server; C:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe [2008-07-01 19200]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632]
S3 LBTServ;Logitech Bluetooth Service; C:\Program Files\Common Files\Logishrd\Bluetooth\LBTServ.exe [2008-05-02 121360]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe [2007-08-24 68464]
S3 npggsvc;nProtect GameGuard Service; C:\Windows\system32\GameMon.des [2009-02-15 2794234]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2007-08-24 443776]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 rpcapd;Remote Packet Capture Protocol v.0 (experimental); C:\Program Files\WinPcap\rpcapd.exe [2007-11-06 92792]
S3 Steam Client Service;Steam Client Service; C:\Program Files\Common Files\Steam\SteamService.exe [2009-08-29 316664]

-----------------EOF-----------------

[ah1000]

et celui du fichier info :

info.txt logfile of random's system information tool 1.06 2009-09-28 13:23:17

======Uninstall list======

-->C:\PROGRA~1\Yahoo!\Common\unyt.exe
-->C:\Program Files\DivX\DivXConverterUninstall.exe /CONVERTER
-->C:\Program Files\Nero\Nero8\\nero\uninstall\UNNERO.exe /UNINSTALL
-->C:\Windows\UNNeroBackItUp.exe /UNINSTALL
-->C:\Windows\UNNeroVision.exe /UNINSTALL
-->C:\Windows\UNRecode.exe /UNINSTALL
-->MsiExec /X{5DB65884-C963-4454-AABA-4CA3089281FA}
2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-0015-0409-0000-0000000FF1CE} /uninstall {4CA4ECC1-DBD4-4591-8F4C-AA12AD2D3E59}
2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-0016-0409-0000-0000000FF1CE} /uninstall {4CA4ECC1-DBD4-4591-8F4C-AA12AD2D3E59}
2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-0018-0409-0000-0000000FF1CE} /uninstall {4CA4ECC1-DBD4-4591-8F4C-AA12AD2D3E59}
2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-0019-0409-0000-0000000FF1CE} /uninstall {4CA4ECC1-DBD4-4591-8F4C-AA12AD2D3E59}
2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-001A-0409-0000-0000000FF1CE} /uninstall {4CA4ECC1-DBD4-4591-8F4C-AA12AD2D3E59}
2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-001B-0409-0000-0000000FF1CE} /uninstall {4CA4ECC1-DBD4-4591-8F4C-AA12AD2D3E59}
2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-001F-0409-0000-0000000FF1CE} /uninstall {3EC77D26-799B-4CD8-914F-C1565E796173}
2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-001F-040C-0000-0000000FF1CE} /uninstall {430971B1-C31E-45DA-81E0-72C095BAB72C}
2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-001F-0C0A-0000-0000000FF1CE} /uninstall {F7A31780-33C4-4E39-951A-5EC9B91D7BF1}
2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {BEE75E01-DD3F-4D5F-B96C-609E6538D419}
2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-0044-0409-0000-0000000FF1CE} /uninstall {4CA4ECC1-DBD4-4591-8F4C-AA12AD2D3E59}
2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-006E-0409-0000-0000000FF1CE} /uninstall {FAD8A83E-9BAC-4179-9268-A35948034D85}
2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-00A1-0409-0000-0000000FF1CE} /uninstall {4CA4ECC1-DBD4-4591-8F4C-AA12AD2D3E59}
2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-00BA-0409-0000-0000000FF1CE} /uninstall {4CA4ECC1-DBD4-4591-8F4C-AA12AD2D3E59}
2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-0114-0409-0000-0000000FF1CE} /uninstall {4CA4ECC1-DBD4-4591-8F4C-AA12AD2D3E59}
2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-0115-0409-0000-0000000FF1CE} /uninstall {FAD8A83E-9BAC-4179-9268-A35948034D85}
2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-0117-0409-0000-0000000FF1CE} /uninstall {4CA4ECC1-DBD4-4591-8F4C-AA12AD2D3E59}
32 Bit HP CIO Components Installer-->MsiExec.exe /I{F1E63043-54FC-429B-AB2C-31AF9FBA4BC7}
ACTC (remove only)-->"J:\ACTC\Uninstall.exe"
Adobe Flash Player 10 ActiveX-->C:\Windows\system32\Macromed\Flash\uninstall_activeX.exe
Adobe Flash Player 10 Plugin-->C:\Windows\system32\Macromed\Flash\uninstall_plugin.exe
Analyseur et SDK MSXML 4.0 SP2-->MsiExec.exe /I{716E0306-8318-4364-8B8F-0CC4E9376BAC}
Any Video Converter Professional 2.6.7-->"C:\Program Files\Any Video Converter Professional\unins000.exe"
Apple Software Update-->MsiExec.exe /I{6956856F-B6B3-4BE0-BA0B-8F495BE32033}
Aqua Real-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{1E66C7FF-F827-4AEF-A998-932EA824998B}\setup.exe" -l0x9
ARCA Remax (remove only)-->"e:\ARCA Remax\Uninstall.exe"
Assistant de connexion Windows Live-->MsiExec.exe /I{DCE8CD14-FBF5-4464-B9A4-E18E473546C7}
Avanquest update-->C:\Program Files\InstallShield Installation Information\{76E41F43-59D2-4F30-BA42-9A762EE1E8DE}\setup.exe -runfromtemp -l0x040c -removeonly
AviSynth 2.5-->"C:\Program Files\AviSynth 2.5\Uninstall.exe"
CDDRV_Installer-->MsiExec.exe /I{0C826C5B-B131-423A-A229-C71B3CACCD6A}
Contrôles ActiveX Géoplan et Géospace 1.4-->C:\Windows\system32\uninst.exe
ConvertHelper 2.2-->"C:\Program Files\ConvertHelper\unins000.exe"
Cooliris for Internet Explorer-->MsiExec.exe /I{11ED353C-1040-3043-AF0A-0B482C3B25AC}
DivX Codec-->C:\Program Files\DivX\DivXCodecUninstall.exe /CODEC
DivX Converter-->C:\Program Files\DivX\DivXConverterUninstall.exe /CONVERTER
DivX Player-->C:\Program Files\DivX\DivXPlayerUninstall.exe /PLAYER
DivX Plus DirectShow Filters-->C:\Program Files\DivX\DivXDSFiltersUninstall.exe /DSFILTERS
DivX Web Player-->C:\Program Files\DivX\DivXWebPlayerUninstall.exe /PLUGIN
Dream Aquarium-->"C:\Program Files\Dream Aquarium\UnInstall.exe"
Driver: Parallel Lines-->C:\Program Files\InstallShield Installation Information\{31CB0D80-1866-462A-9455-88614410971F}\setup.exe -runfromtemp -l0x040c -removeonly
Dynamic Energy Saver B7.1214.3-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\11\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{5869CE1E-BC0B-4648-B1AE-6EF4A985590C}\setup.exe" -l0x9 -removeonly
eMule-->"I:\eMule\Uninstall.exe"
erLT-->MsiExec.exe /I{3EE9BCAE-E9A9-45E5-9B1C-83A4D357E05C}
ESET Smart Security-->MsiExec.exe /I{1930504B-5236-4B43-B8FA-DB4CCFD73C0E}
Eurosport Player-->MsiExec.exe /X{6BD2CB68-3038-49CC-B7D4-E54E1ADDA275}
ffdshow [rev 1972] [2008-05-24]-->"C:\Program Files\VistaCodecPack\filters\unins000.exe"
FLAC 1.2.1b (remove only)-->C:\Program Files\FLAC\uninstall.exe
Flock 1.1-->C:\Program Files\Flock\uninst.exe
FLV Player 2.0 (build 25)-->C:\Program Files\FLV Player\uninst.exe
FSX France Décors Ultra Détaillés-->J:\Microsoft Flight Simulator X\uninstal_fsxdecors.exe
Galerie de photos Windows Live-->MsiExec.exe /X{B131E59D-202C-43C6-84C9-68F0C37541F1}
Geoplan-Geospace-->C:\Program Files\Geoplan-Geospace\Uninstal.exe
Géorando - Alsace / Moselle-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\11\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{7C3D989A-4930-4485-853B-90D1D1F2F0F2}\setup.exe" -l0x40c -removeonly
Google Update Helper-->MsiExec.exe /I{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}
Google Earth-->MsiExec.exe /X{12803180-9CAD-11DE-B804-005056806466}
GrabPro - Toolbar-->regsvr32 /u /s "C:\Program Files\Orbitdownloader\GrabPro.dll"
HijackThis 2.0.2-->"C:\Program Files\trend micro\HijackThis.exe" /uninstall
HP Customer Participation Program 8.0-->C:\Program Files\HP\Digital Imaging\ExtCapUninstall\hpzscr01.exe -datfile hpqhsc01.dat
HP Imaging Device Functions 8.0-->C:\Program Files\HP\Digital Imaging\DeviceManagement\hpzscr01.exe -datfile hpqbud01.dat
HP OCR Software 8.0-->C:\Program Files\HP\Digital Imaging\OCR\hpzscr01.exe -datfile hpqbud11.dat
HP Photosmart Essential-->MsiExec.exe /X{EB21A812-671B-4D08-B974-2A347F0D8F70}
HP Photosmart, Officejet, PSC and Deskjet All-In-One Driver Software 8.0.B-->C:\Program Files\HP\Digital Imaging\{C916D86C-AB76-49c7-B0E4-A946E0FD9BC2}\setup\hpzscr01.exe -datfile hposcr19.dat -onestop -showdisconnect -forcereboot
HP Solution Center 8.0-->C:\Program Files\HP\Digital Imaging\eSupport\hpzscr01.exe -datfile hpqbud05.dat
HP Update-->MsiExec.exe /X{8C6027FD-53DC-446D-BB75-CACD7028A134}
HPSSupply-->MsiExec.exe /X{EB75DE50-5754-4F6F-875D-126EDF8E4CB3}
Installation Windows Live-->C:\Program Files\Windows Live\Installer\wlarp.exe
Installation Windows Live-->MsiExec.exe /I{46ABBC54-1872-4AA3-95E2-F2C063A63F31}
Internet Download Accelerator version 5.7-->"C:\Program Files\IDA\unins000.exe"
Java(TM) 6 Update 15-->MsiExec.exe /X{26A24AE4-039D-4CA4-87B4-2F83216011FF}
KhalInstallWrapper-->MsiExec.exe /I{3101CB58-3482-4D21-AF1A-7057FC935355}
LightScribe System Software 1.17.90.1-->MsiExec.exe /X{CB16F6D9-EBC9-4BC6-B917-7AF53E99C067}
Logitech SetPoint-->C:\Program Files\InstallShield Installation Information\{F29B21BD-CAA6-445F-8EF7-A7E2B9D8B14E}\setup.exe -runfromtemp -l0x040c -removeonly
MetaProducts Mass Downloader-->C:\Program Files\Mass Downloader\massdown.exe /UnInstall
Microsoft .NET Framework 1.1 Hotfix (KB929729)-->"C:\Windows\Microsoft.NET\Framework\v1.1.4322\Updates\hotfix.exe" "C:\Windows\Microsoft.NET\Framework\v1.1.4322\Updates\M929729\M929729Uninstall.msp"
Microsoft .NET Framework 1.1-->msiexec.exe /X {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Microsoft .NET Framework 1.1-->MsiExec.exe /X{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Microsoft Choice Guard-->MsiExec.exe /X{F0E12BBA-AD66-4022-A453-A1C8A0C4D570}
Microsoft Flight Simulator X: Acceleration-->C:\Windows\system32\msiexec.exe /qb /l*vx "%TEMP%\FlightSimUninstall.log" /uninstall {3A1EE107-F79B-49FA-83CF-94169E63F25A}
Microsoft Flight Simulator X: Acceleration-->MsiExec.exe /I{3A1EE107-F79B-49FA-83CF-94169E63F25A}
Microsoft Flight Simulator X-->C:\PROGRA~1\COMMON~1\INSTAL~1\Driver\11\INTEL3~1\IDriver.exe /M{F535B2CF-C9BB-4162-B03A-02D6971F32CC}
Microsoft Games for Windows - LIVE -->MsiExec.exe /X{4D243BA7-9AC4-46D1-90E5-EEB88974F501}
Microsoft Games for Windows - LIVE Redistributable-->MsiExec.exe /X{05B49229-22A2-4F88-842A-BBC2EBE1CCF6}
Microsoft Office Access MUI (English) 2007-->MsiExec.exe /X{90120000-0015-0409-0000-0000000FF1CE}
Microsoft Office Access Setup Metadata MUI (English) 2007-->MsiExec.exe /X{90120000-0117-0409-0000-0000000FF1CE}
Microsoft Office Enterprise 2007-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE12\Office Setup Controller\setup.exe" /uninstall ENTERPRISE /dll OSETUP.DLL
Microsoft Office Enterprise 2007-->MsiExec.exe /X{90120000-0030-0000-0000-0000000FF1CE}
Microsoft Office Excel MUI (English) 2007-->MsiExec.exe /X{90120000-0016-0409-0000-0000000FF1CE}
Microsoft Office Groove MUI (English) 2007-->MsiExec.exe /X{90120000-00BA-0409-0000-0000000FF1CE}
Microsoft Office Groove Setup Metadata MUI (English) 2007-->MsiExec.exe /X{90120000-0114-0409-0000-0000000FF1CE}
Microsoft Office InfoPath MUI (English) 2007-->MsiExec.exe /X{90120000-0044-0409-0000-0000000FF1CE}
Microsoft Office OneNote MUI (English) 2007-->MsiExec.exe /X{90120000-00A1-0409-0000-0000000FF1CE}
Microsoft Office Outlook MUI (English) 2007-->MsiExec.exe /X{90120000-001A-0409-0000-0000000FF1CE}
Microsoft Office PowerPoint MUI (English) 2007-->MsiExec.exe /X{90120000-0018-0409-0000-0000000FF1CE}
Microsoft Office Proof (English) 2007-->MsiExec.exe /X{90120000-001F-0409-0000-0000000FF1CE}
Microsoft Office Proof (French) 2007-->MsiExec.exe /X{90120000-001F-040C-0000-0000000FF1CE}
Microsoft Office Proof (Spanish) 2007-->MsiExec.exe /X{90120000-001F-0C0A-0000-0000000FF1CE}
Microsoft Office Proofing (English) 2007-->MsiExec.exe /X{90120000-002C-0409-0000-0000000FF1CE}
Microsoft Office Publisher MUI (English) 2007-->MsiExec.exe /X{90120000-0019-0409-0000-0000000FF1CE}
Microsoft Office Shared MUI (English) 2007-->MsiExec.exe /X{90120000-006E-0409-0000-0000000FF1CE}
Microsoft Office Shared Setup Metadata MUI (English) 2007-->MsiExec.exe /X{90120000-0115-0409-0000-0000000FF1CE}
Microsoft Office Word MUI (English) 2007-->MsiExec.exe /X{90120000-001B-0409-0000-0000000FF1CE}
Microsoft Silverlight-->MsiExec.exe /X{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}
Microsoft SQL Server 2005 Compact Edition [ENU]-->MsiExec.exe /I{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}
Microsoft Virtual PC 2007 SP1-->MsiExec.exe /X{AD483998-2E9A-4405-83FF-6E503AF49CBB}
Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{7299052b-02a4-4627-81f2-1818da5d550d}
Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{A49F249F-0C91-497F-86DF-B2585E8E76B7}
Microsoft Windows Media Video 9 VCM-->RunDll32 advpack.dll,LaunchINFSection C:\Windows\INF\wmv9vcm.inf, Uninstall
Monkey's Audio-->"C:\Program Files\Monkey's Audio\unins000.exe"
Mozilla Firefox (3.5.3)-->C:\Program Files\Mozilla Firefox\uninstall\helper.exe
Mozilla Sunbird (0.9)-->C:\Program Files\Mozilla Sunbird\uninstall\uninst.exe
MSVCRT-->MsiExec.exe /I{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}
MSXML 4.0 SP2 (KB936181)-->MsiExec.exe /I{C04E32E0-0416-434D-AFB9-6969D703A9EF}
MSXML 4.0 SP2 (KB954430)-->MsiExec.exe /I{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
MX vs ATV Unleashed-->MsiExec.exe /X{BBE18EBD-CD44-4C51-8BC5-577ECCCEC68F}
Need4 Archos Converter 5.6-->C:\Program Files\Need4 Archos Converter 5.6\uninst.exe
Need4 Software Launcher 5.6-->C:\Program Files\Need4 Software Launcher 5.6\uninst.exe
Nero 8-->MsiExec.exe /X{8AEA4BE2-2B52-41C0-BB7D-9F2D17AF1036}
neroxml-->MsiExec.exe /I{56C049BE-79E9-4502-BEA7-9754A3E60F9B}
Netscape Navigator (9.0.0.6)-->C:\Program Files\Netscape\Navigator 9\uninstall\helper.exe
NVIDIA Drivers-->C:\Windows\system32\NVUNINST.EXE UninstallGUI
NVIDIA PhysX-->MsiExec.exe /X{5DB65884-C963-4454-AABA-4CA3089281FA}
OpenAL-->"C:\Program Files\OpenAL\oalinst.exe" /U
Opera 10.00-->MsiExec.exe /X{2085F05D-24C5-4E27-B7B4-A51DE890FFC9}
Orbit Downloader-->"C:\Program Files\Orbitdownloader\unins000.exe"
Outil de mise à jour Google-->"C:\Program Files\Google\Google Updater\GoogleUpdater.exe" -uninstall
Outil de téléchargement Windows Live-->MsiExec.exe /I{205C6BDD-7B73-42DE-8505-9A093F35A238}
Outspark Sharp Launcher-->MsiExec.exe /X{B5560986-7A6A-4CCA-A808-853D2CED3796}
PDF-XChange PDF Viewer version 2.0.0.36-->"C:\Program Files\Tracker Software\PDF-XChange Viewer\unins000.exe"
PicLens for Internet Explorer-->MsiExec.exe /X{82AA5D60-D11A-3EAB-A777-9007DF4721CE}
PlayFLV-->"C:\Program Files\FLVCodec\uninstall.exe"
ProtectDisc Driver, Version 11-->C:\Program Files\ProtectDisc Driver Installer\uninstall_v11.exe
PunkBuster Services-->C:\Windows\system32\pbsvc.exe -u
QuickTime-->MsiExec.exe /I{C78EAC6F-7A73-452E-8134-DBB2165C5A68}
Realtek 8169 PCI, 8168 and 8101E PCIe Ethernet Network Card Driver for Windows Vista-->C:\Program Files\InstallShield Installation Information\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}\SETUP.EXE -runfromtemp -l0x040c -removeonly
Realtek High Definition Audio Driver-->RtlUpd.exe -r -m
Replay Media Catcher 3.01-->"C:\Windows\Replay Media Catcher\uninstall.exe" "/U:C:\Program Files\Replay Media Catcher\Uninstall\uninstall.xml"
Secunia PSI-->"C:\Program Files\Secunia\PSI\uninstall.exe"
Security Update for 2007 Microsoft Office System (KB951550)-->msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {B243E9A5-ED77-4F1B-B338-2486FD82DC85}
Security Update for 2007 Microsoft Office System (KB951944)-->msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {797AE457-BA17-4BBC-B501-25FB3A0103C7}
Security Update for 2007 Microsoft Office System (KB958439)-->msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {6491B8AA-D11C-4648-A461-6234B31EB7E2}
Security Update for Microsoft Office Excel 2007 (KB958437)-->msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {648FC016-2D6B-4A16-8D87-404533642F4B}
Security Update for Microsoft Office OneNote 2007 (KB950130)-->msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {F1B2401C-B610-4BF2-AA1C-52C55827A8F4}
Security Update for Microsoft Office PowerPoint 2007 (KB951338)-->msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {558B709B-821B-4FC5-90FC-9A8890641E77}
Security Update for Microsoft Office Publisher 2007 (KB950114)-->msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {F9C3CDBA-1F00-4D4D-959D-75C9D3ACDD85}
Security Update for Microsoft Office system 2007 (KB954326)-->msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {5F7F6FFF-395D-480E-8450-64F385D82C5F}
Security Update for Microsoft Office system 2007 (KB956828)-->msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {885E081B-72BD-4E76-8E98-30B4BE468FAC}
Security Update for Microsoft Office Word 2007 (KB956358)-->msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {4551666D-0FD6-4C69-8A81-1C6F2E64517C}
Security Update for Visio 2007 (KB947590)-->msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {6BAD036C-261F-4BEF-96CF-C20678D07A41}
SFR - Kit de connexion-->C:\Program Files\SFR\Kit\uninstall.exe
SFR - Media Center-->C:\Program Files\SFR\Media Center\uninstall.exe
Spybot - Search & Destroy-->"C:\Program Files\Spybot - Search & Destroy\unins000.exe"
Stereoscopic Player-->MsiExec.exe /I{252D1438-BD16-4D9B-9BFB-F619DE67B814}
Sun VirtualBox-->MsiExec.exe /I{CBE35521-6D78-4F6A-97A1-018C14335287}
Sun xVM VirtualBox Guest Additions 1.6.0-->L:\xVM VirtualBox\uninst.exe
Terragen 2 Technology Preview-->MsiExec.exe /I{9BF36062-6E39-46CF-9823-9FB8C700D682}
Terragen-->MsiExec.exe /I{CCEB53A5-A252-4CF3-8602-429AB06BF0AE}
Tube Mania-->"C:\Program Files\InstallShield Installation Information\{FBD00247-B21F-4068-A409-3B990005317E}\setup.exe" -runfromtemp -l0x040c -removeonly
Update for Microsoft Office Outlook 2007 (KB952142)-->msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {4AD3A076-427C-491F-A5B7-7D1DE788A756}
Update for Office 2007 (KB946691)-->msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {A420F522-7395-4872-9882-C591B4B92278}
Update for Outlook 2007 Junk Email Filter (kb958619)-->msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {79B301C1-DBC0-467C-AFDA-2A6CDAFA4302}
VC80CRTRedist - 8.0.50727.762-->MsiExec.exe /I{767CC44C-9BBC-438D-BAD3-FD4595DD148B}
VCRedistSetup-->MsiExec.exe /I{3921A67A-5AB1-4E48-9444-C71814CF3027}
Video Edit Magic 4.4-->"C:\Program Files\Deskshare\Video Edit Magic 4.4\unins000.exe"
Video Fixer 3.21-->"C:\Program Files\videofixer\unins000.exe"
Video Thumbnails Maker by Scorp (remove only)-->"C:\Program Files\Video Thumbnails Maker\Uninstall.exe"
VideoLAN VLC media player 0.8.6h-->C:\Program Files\VideoLAN\VLC\uninstall.exe
Vista Codec Package-->MsiExec.exe /I{F9FD80CE-0448-4D4F-8BCD-77FC514C3F99}
Vistapro 4.0-->C:\Windows\uninst.exe -fJ:\Vistapro\DeIsL1.isu -cJ:\Vistapro\_ISREG32.DLL
WildTangent Web Driver-->C:\Program Files\WildTangent\Apps\CDA\CDAUninstall.exe
Windows Live Communications Platform-->MsiExec.exe /I{3B4E636E-9D65-4D67-BA61-189800823F52}
Windows Live FolderShare-->MsiExec.exe /X{2075CB0A-D26F-4DAA-B424-5079296B43BA}
Windows Live Movie Maker-->MsiExec.exe /X{53B20C18-D8D4-4588-8737-9BBFE303C354}
Windows Media Encoder 9 Series-->msiexec.exe /I {E38C00D0-A68B-4318-A8A6-F7D4B5B1DF0E}
Windows Media Encoder 9 Series-->MsiExec.exe /I{E38C00D0-A68B-4318-A8A6-F7D4B5B1DF0E}
Windows Media Player Firefox Plugin-->MsiExec.exe /I{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}
WinFax eXPert-->C:\Program Files\InstallShield Installation Information\{60E5167C-F720-47F2-A0FD-9B34F94A8DC8}\setup.exe -runfromtemp -l0x040c -removeonly
WinPcap 4.0.2-->C:\Program Files\WinPcap\uninstall.exe
WinRAR archiver-->C:\Program Files\WinRar\uninstall.exe
Wolfram Mathematica 6-->C:\Program Files\Common Files\InstallShield\Driver\8\Intel 32\IDriver.exe /M{38D69F3E-823F-4203-989D-4D47227AF920}
Wolfram Notebook Indexer 2.0-->MsiExec.exe /I{F9B2E82F-B10A-454E-B19B-735CFF6A5DD2}
Yahoo! Toolbar-->C:\PROGRA~1\Yahoo!\Common\unyt.exe

======Hosts File======

127.0.0.1 www.007guard.com
127.0.0.1 007guard.com
127.0.0.1 008i.com
127.0.0.1 www.008k.com
127.0.0.1 008k.com
127.0.0.1 www.00hq.com
127.0.0.1 00hq.com
127.0.0.1 010402.com
127.0.0.1 www.032439.com
127.0.0.1 032439.com

======Security center information======

AV: ESET Smart Security 3.0
FW: Pare-feu personnel d'ESET
AS: ESET Smart Security 3.0
AS: Spybot - Search and Destroy (outdated)
AS: Windows Defender

======System event log======

Computer Name: SATURN
Event Code: 7026
Message: Le pilote de démarrage système ou d'amorçage suivant n'a pas pu se charger :
VBoxSF
Record Number: 14611
Source Name: Service Control Manager
Time Written: 20080613045431.000000-000
Event Type: Erreur
User:

Computer Name: SATURN
Event Code: 15016
Message: Impossible d’initialiser le package de sécurité Kerberos pour l’authentification côté serveur. Le champ de données contient le numéro de l’erreur.
Record Number: 14535
Source Name: Microsoft-Windows-HttpEvent
Time Written: 20080613045413.219305-000
Event Type: Erreur
User:

Computer Name: SATURN
Event Code: 6008
Message: L'arrêt système précédant à 20:43:56 le 12/06/2008 n'était pas prévu.
Record Number: 14520
Source Name: EventLog
Time Written: 20080613045411.000000-000
Event Type: Erreur
User:

Computer Name: SATURN
Event Code: 4226
Message: TCP/IP a atteint la limite de sécurité imposée sur le nombre de tentatives de connexion TCP simultanées.
Record Number: 14509
Source Name: Tcpip
Time Written: 20080612060421.699087-000
Event Type: Avertissement
User:

Computer Name: SATURN
Event Code: 7026
Message: Le pilote de démarrage système ou d'amorçage suivant n'a pas pu se charger :
VBoxSF
Record Number: 14481
Source Name: Service Control Manager
Time Written: 20080612050520.000000-000
Event Type: Erreur
User:

=====Application event log=====

Computer Name: SATURN
Event Code: 8194
Message: Erreur du service de cliché instantané des volumes : erreur lors de l’interrogation de l’interface IVssWriterCallback. hr = 0x80070005. Cette erreur est souvent due à des paramètres de sécurité incorrects dans le processus du rédacteur ou du demandeur.

Opération :
Données du rédacteur en cours de collecte

Contexte :
ID de classe du rédacteur: {e8132975-6f93-4464-a53e-1050253ae220}
Nom du rédacteur: System Writer
ID d’instance du rédacteur: {8fc578c1-af27-4936-8793-d88590905f2b}
Record Number: 57
Source Name: VSS
Time Written: 20080417181856.000000-000
Event Type: Erreur
User:

Computer Name: SATURN
Event Code: 63
Message: Le fournisseur WmiPerfClass a été inscrit dans l’espace de noms Windows Management Instrumentation root\cimv2, afin d’utiliser le compte LocalSystem. Ce compte bénéficie de privilèges et le fournisseur peut provoquer une violation de sécurité s’il ne représente pas correctement les demandes utilisateur.
Record Number: 52
Source Name: Microsoft-Windows-WMI
Time Written: 20080417181643.000000-000
Event Type: Avertissement
User: AUTORITE NT\SYSTEM

Computer Name: SATURN
Event Code: 63
Message: Le fournisseur WmiPerfClass a été inscrit dans l’espace de noms Windows Management Instrumentation root\cimv2, afin d’utiliser le compte LocalSystem. Ce compte bénéficie de privilèges et le fournisseur peut provoquer une violation de sécurité s’il ne représente pas correctement les demandes utilisateur.
Record Number: 51
Source Name: Microsoft-Windows-WMI
Time Written: 20080417181643.000000-000
Event Type: Avertissement
User: AUTORITE NT\SYSTEM

Computer Name: SATURN
Event Code: 10
Message: Le filtre d’événement avec la requête « SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99 » n’a pas pu être réactivé dans l’espace de noms « //./root/CIMV2 » à cause de l’erreur 0x80041003. Les événements ne peuvent pas être délivrés à travers ce filtre tant que le problème ne sera pas corrigé.
Record Number: 28
Source Name: Microsoft-Windows-WMI
Time Written: 20080417181300.000000-000
Event Type: Erreur
User:

Computer Name: SATURN
Event Code: 1008
Message: Le service Windows Search tente de supprimer l’ancien catalogue.

Record Number: 22
Source Name: Microsoft-Windows-Search
Time Written: 20080417181243.000000-000
Event Type: Avertissement
User:

=====Security event log=====

Computer Name: SATURN
Event Code: 4672
Message: Privilèges spéciaux attribués à la nouvelle ouverture de session.

Sujet :
ID de sécurité : S-1-5-18
Nom du compte : SYSTEM
Domaine du compte : AUTORITE NT
ID d’ouverture de session : 0x3e7

Privilèges : SeAssignPrimaryTokenPrivilege
SeTcbPrivilege
SeSecurityPrivilege
SeTakeOwnershipPrivilege
SeLoadDriverPrivilege
SeBackupPrivilege
SeRestorePrivilege
SeDebugPrivilege
SeAuditPrivilege
SeSystemEnvironmentPrivilege
SeImpersonatePrivilege
Record Number: 11530
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20080607183600.530084-000
Event Type: Succès de l'audit
User:

Computer Name: SATURN
Event Code: 4624
Message: L’ouverture de session d’un compte s’est correctement déroulée.

Sujet :
ID de sécurité : S-1-5-18
Nom du compte : SATURN$
Domaine du compte : WORKGROUP
ID d’ouverture de session : 0x3e7

Type d’ouverture de session : 5

Nouvelle ouverture de session :
ID de sécurité : S-1-5-18
Nom du compte : SYSTEM
Domaine du compte : AUTORITE NT
ID d’ouverture de session : 0x3e7
GUID d’ouverture de session : {00000000-0000-0000-0000-000000000000}

Informations sur le processus :
ID du processus : 0x26c
Nom du processus : C:\Windows\System32\services.exe

Informations sur le réseau :
Nom de la station de travail :
Adresse du réseau source : -
Port source : -

Informations détaillées sur l’authentification :
Processus d’ouverture de session : Advapi
Package d’authentification : Negotiate
Services en transit : -
Nom du package (NTLM uniquement) : -
Longueur de la clé : 0

Cet événement est généré lors de la création d’une ouverture de session. Il est généré sur l’ordinateur sur lequel l’ouverture de session a été effectuée.

Le champ Objet indique le compte sur le système local qui a demandé l’ouverture de session. Il s’agit le plus souvent d’un service, comme le service Serveur, ou un processus local tel que Winlogon.exe ou Services.exe.

Le champ Type d’ouverture de session indique le type d’ouverture de session qui s’est produit. Les types les plus courants sont 2 (interactif) et 3 (réseau).

Le champ Nouvelle ouverture de session indique le compte pour lequel la nouvelle ouverture de session a été créée, par exemple, le compte qui s’est connecté.

Les champs relatifs au réseau indiquent la provenance d’une demande d’ouverture de session à distance. Le nom de la station de travail n’étant pas toujours disponible, peut être laissé vide dans certains cas.

Les champs relatifs aux informations d’authentification fournissent des détails sur cette demande d’ouverture de session spécifique.
- Le GUID d’ouverture de session est un identificateur unique pouvant servir à associer cet événement à un événement KDC .
- Les services en transit indiquent les services intermédiaires qui ont participé à cette demande d’ouverture de session.
- Nom du package indique quel est le sous-protocole qui a été utilisé parmi les protocoles NTLM.
- La longueur de la clé indique la longueur de la clé de session générée. Elle a la valeur 0 si aucune clé de session n’a été demandée.
Record Number: 11529
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20080607183600.530084-000
Event Type: Succès de l'audit
User:

Computer Name: SATURN
Event Code: 4648
Message: Tentative d’ouverture de session en utilisant des informations d’identification explicites.

Sujet :
ID de sécurité : S-1-5-18
Nom du compte : SATURN$
Domaine du compte : WORKGROUP
ID d’ouverture de session : 0x3e7
GUID d’ouverture de session : {00000000-0000-0000-0000-000000000000}

Compte dont les informations d’identification ont été utilisées :
Nom du compte : SYSTEM
Domaine du compte : AUTORITE NT
GUID d’ouverture de session : {00000000-0000-0000-0000-000000000000}

Serveur cible :
Nom du serveur cible : localhost
Informations supplémentaires : localhost

Informations sur le processus :
ID du processus : 0x26c
Nom du processus : C:\Windows\System32\services.exe

Informations sur le réseau :
Adresse du réseau : -
Port : -

Cet événement est généré lorsqu’un processus tente d’ouvrir une session pour un compte en spécifiant explicitement les informations d’identification de ce compte. Ceci se produit le plus souvent dans les configurations par lot comme les tâches planifiées, ou avec l’utilisation de la commande RUNAS.
Record Number: 11528
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20080607183600.530084-000
Event Type: Succès de l'audit
User:

Computer Name: SATURN
Event Code: 1100
Message: Le service d’enregistrement des événements a été arrêté.
Record Number: 11527
Source Name: Microsoft-Windows-Eventlog
Time Written: 20080607183601.325684-000
Event Type: Succès de l'audit
User:

Computer Name: SATURN
Event Code: 4647
Message: Fermeture de session initiée par l’utilisateur :

Sujet :
ID de sécurité : S-1-5-21-810918014-1524722749-2520742022-1000
Nom du compte : Arnaud
Domaine du compte : SATURN
ID d’ouverture de session : 0x235e2

Cet événement est généré lorsqu’une fermeture de session est initiée, mais que le nombre de références du jeton n’étant pas zéro, la session ouverte ne peut pas être supprimée. Aucune autre activité initiée par l’utilisateur ne peut se produire. Cet événement peut être interprété comme un événement de fermeture de session.
Record Number: 11526
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20080607183600.186884-000
Event Type: Succès de l'audit
User:

======Environment variables======

"ComSpec"=%SystemRoot%\system32\cmd.exe
"FP_NO_HOST_CHECK"=NO
"OS"=Windows_NT
"Path"=%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;C:\Program Files\QuickTime\QTSystem\
"PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC
"PROCESSOR_ARCHITECTURE"=x86
"TEMP"=%SystemRoot%\TEMP
"TMP"=%SystemRoot%\TEMP
"USERNAME"=SYSTEM
"windir"=%SystemRoot%
"PROCESSOR_LEVEL"=6
"PROCESSOR_IDENTIFIER"=x86 Family 6 Model 15 Stepping 11, GenuineIntel
"PROCESSOR_REVISION"=0f0b
"NUMBER_OF_PROCESSORS"=4
"TRACE_FORMAT_SEARCH_PATH"=\\NTREL202.ntdev.corp.microsoft.com\4F18C3A5-CA09-4DBD-B6FC-219FDD4C6BE0\TraceFormat
"DFSTRACINGON"=FALSE
"CLASSPATH"=.;C:\Program Files\Java\jre6\lib\ext\QTJava.zip
"QTJAVA"=C:\Program Files\Java\jre6\lib\ext\QTJava.zip
"VBOX_INSTALL_PATH"=C:\Program Files\Sun\VirtualBox\

-----------------EOF-----------------

[bernard53]

Fait ceci pour accéder a hijackthis qui a été renommé.

Démarrer>Exécuter ou (Touche windows+R) puis fait un copier coller de ceci.

C:\Program Files\Trend Micro

Ensuite clique droit sur Arnaud.exe puis

Relance HijackThis renommé Arnaud.exe en >puis : Do a system scan only > coche ces lignes: ensuite valides sur Fix checked

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http=127.0.0.1:4128


Puis ::

Télécharge >>OTM<< (de Old_Timer) sur ton Bureau.


>> Pour VISTA : Clic-droit et choisis "Exécuter en tant qu'administrateur".

>> AVAST reconnait ce logiciel comme un intrus, donc le désactiver le temps des manipulations.

Double-clique sur OTM pour le lancer.

Copie la liste qui se trouve en citation ci-dessous:

:Processes

:Services

:Reg
[-HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{433efd4e-0cac-11dd-a9e9-806e6f6e6963}]
:Files
G:\SETUP.EXE
:Commands
[purity]
[emptytemp]

[Reboot]

et colle-la dans le cadre de gauche de OTM sous ceci:



Clique sur pour lancer la suppression.
attendre la fin du travail de l'outil puis fermer OTM

Le résultat apparaitra dans le cadre Results.
Clique sur Exit pour fermer.
Poste le rapport situé dans C:\_OTM\MovedFiles\06092009_130526.log "Exemple"

NB: Il te sera peut-être demandé de redémarrer le pc pour achever la suppression.
si c'est le cas accepte par Oui/Yes.


Ensuite ceci à vérifier:

o Désactivez le proxy ajouté par l'infection pour cela :
o Sur Firefox, Outils /Options puis onglet Avancés.
o Cliquez sur Réseau et Paramètres.
o Choisissez "Ne pas mettre de Proxy".
o Sur Internet Explorer , c'est le menu Outils / Options Internet.
o Onglet Connexions puis Paramètres réseau--> désactiver le proxy.
* Redémarrez l'ordinateur

Sous Vista, la désactivation du proxy dans IE ne suffit pas à rétablir les mises à jour.

Pour rétablir Windows Update, il faut lancer la commande suivante (avec les droits administrateur):
Démarrer->Exécuter

netsh winhttp reset proxy

[ah1000]

Formidable, ça fonctionne de nouveau !!

Merci beaucoup.

[bernard53]

Super