[rollins9020]

Hi,

I have installed the Avast antivirus and it keeps detecting that directitfast.com/seneka/... is trying to connect to my computer.

Also, my IE is crashing frequently.

Thank you for the help.

OTListIt logfile created on: 2009-04-28 17:06:18 - Run 1
OTListIt2 by OldTimer - Version 2.0.14.0 Folder = C:\Download
Windows XP Professional Edition Service Pack 1 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 6.0.2800.1106)
Locale: 00000C0C | Country: Canada | Language: FRC | Date Format: yyyy-MM-dd

255,42 Mb Total Physical Memory | 137,78 Mb Available Physical Memory | 53,94% Memory free
617,66 Mb Paging File | 279,10 Mb Available in Paging File | 45,19% Paging File free
Paging file location(s): C:\pagefile.sys 384 768;

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 18,64 Gb Total Space | 8,72 Gb Free Space | 46,80% Space Free | Partition Type: NTFS
D: Drive not present or media not loaded
E: Drive not present or media not loaded
F: Drive not present or media not loaded
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded

Computer Name: CLIENT-B8LWWGNZ
Current User Name: client
Logged in as Administrator.

Current Boot Mode: Normal
Scan Mode: Current user
Output = Minimal
File Age = 30 Days
Company Name Whitelist: On

========== Processes (SafeList) ==========

PRC - C:\Program Files\Bell\Gestionnaire de securite\Fws.exe (Bell Sympatico)
PRC - C:\WINDOWS\Explorer.EXE (Microsoft Corporation)
PRC - C:\Program Files\Winamp\winampa.exe ()
PRC - C:\WINDOWS\essspk.exe ()
PRC - C:\Program Files\QuickTime\qttask.exe (Apple Computer, Inc.)
PRC - C:\Program Files\Bell\Sympatico Security Advisor\SSA.exe (Bell)
PRC - C:\Program Files\SPAMfighter\SFAgent.exe (SPAMfighter ApS)
PRC - C:\Program Files\Java\jre6\bin\jusched.exe (Sun Microsystems, Inc.)
PRC - C:\Program Files\Alwil Software\Avast4\ashDisp.exe (ALWIL Software)
PRC - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe (ALWIL Software)
PRC - C:\Program Files\Alwil Software\Avast4\ashServ.exe (ALWIL Software)
PRC - C:\Program Files\Fichiers communs\Authentium\AntiVirus\dvpapi.exe (Authentium, Inc.)
PRC - C:\Program Files\CA\PPRT\bin\ITMRTSVC.exe (CA, Inc.)
PRC - C:\Program Files\Java\jre6\bin\jqs.exe (Sun Microsystems, Inc.)
PRC - C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe (Microsoft Corporation)
PRC - C:\Program Files\Raxco\PerfectDisk\PDAgent.exe (Raxco Software, Inc.)
PRC - C:\Program Files\SPAMfighter\sfus.exe (SPAMfighter ApS)
PRC - C:\WINDOWS\System32\wdfmgr.exe (Microsoft Corporation)
PRC - C:\Program Files\Canon\CAL\CALMAIN.exe (Canon Inc.)
PRC - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe (ALWIL Software)
PRC - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe (ALWIL Software)
PRC - C:\Program Files\Raxco\PerfectDisk\PDEngine.exe (Raxco Software, Inc.)
PRC - C:\Program Files\internet explorer\iexplore.exe (Microsoft Corporation)
PRC - C:\Program Files\internet explorer\iexplore.exe (Microsoft Corporation)
PRC - C:\Download\OTListIt2.exe (OldTimer Tools)

========== Win32 Services (SafeList) ==========

SRV - (aswUpdSv [Auto | Running]) -- C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe (ALWIL Software)
SRV - (avast! Antivirus [Auto | Running]) -- C:\Program Files\Alwil Software\Avast4\ashServ.exe (ALWIL Software)
SRV - (avast! Mail Scanner [On_Demand | Running]) -- C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe (ALWIL Software)
SRV - (avast! Web Scanner [On_Demand | Running]) -- C:\Program Files\Alwil Software\Avast4\ashWebSv.exe (ALWIL Software)
SRV - (CCALib8 [Auto | Running]) -- C:\Program Files\Canon\CAL\CALMAIN.exe (Canon Inc.)
SRV - (dvpapi [Auto | Running]) -- C:\Program Files\Fichiers communs\Authentium\AntiVirus\dvpapi.exe (Authentium, Inc.)
SRV - (helpsvc [Auto | Running]) -- C:\WINDOWS\PCHealth\HelpCtr\Binaries\pchsvc.dll (Microsoft Corporation)
SRV - (ITMRTSVC [Auto | Running]) -- C:\Program Files\CA\PPRT\bin\ITMRTSVC.exe (CA, Inc.)
SRV - (JavaQuickStarterService [Auto | Running]) -- C:\Program Files\Java\jre6\bin\jqs.exe (Sun Microsystems, Inc.)
SRV - (MDM [Auto | Running]) -- C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe (Microsoft Corporation)
SRV - (PDAgent [Auto | Running]) -- C:\Program Files\Raxco\PerfectDisk\PDAgent.exe (Raxco Software, Inc.)
SRV - (PDEngine [On_Demand | Running]) -- C:\Program Files\Raxco\PerfectDisk\PDEngine.exe (Raxco Software, Inc.)
SRV - (RPSUpdaterR [On_Demand | Stopped]) -- C:\Program Files\Bell\Gestionnaire de securite\rpsupdaterR.exe (Radialpoint Inc.)
SRV - (RP_FWS [Auto | Running]) -- C:\Program Files\Bell\Gestionnaire de securite\Fws.exe (Bell Sympatico)
SRV - (SPAMfighter Update Service [Auto | Running]) -- C:\Program Files\SPAMfighter\sfus.exe (SPAMfighter ApS)
SRV - (UMWdf [Auto | Running]) -- C:\WINDOWS\System32\wdfmgr.exe (Microsoft Corporation)
SRV - (uploadmgr [Auto | Running]) -- C:\WINDOWS\PCHealth\HelpCtr\Binaries\pchsvc.dll (Microsoft Corporation)

========== Driver Services (SafeList) ==========

DRV - (Aavmker4 [System | Running]) -- C:\WINDOWS\System32\drivers\aavmker4.sys (ALWIL Software)
DRV - (ac97intc [On_Demand | Running]) -- C:\WINDOWS\system32\drivers\ac97intc.sys (Intel Corporation)
DRV - (aswMon2 [Auto | Running]) -- C:\WINDOWS\System32\drivers\aswmon2.sys (ALWIL Software)
DRV - (aswRdr [On_Demand | Running]) -- C:\WINDOWS\System32\drivers\aswRdr.sys (ALWIL Software)
DRV - (aswSP [System | Running]) -- C:\WINDOWS\System32\drivers\aswSP.sys (ALWIL Software)
DRV - (aswTdi [System | Running]) -- C:\WINDOWS\System32\drivers\aswTdi.sys (ALWIL Software)
DRV - (CSS DVP [Auto | Running]) -- C:\WINDOWS\System32\DRIVERS\css-dvp.sys (Authentium, Inc.)
DRV - (CVirtA [On_Demand | Stopped]) -- C:\WINDOWS\System32\DRIVERS\CVirtA.sys (Cisco Systems, Inc.)
DRV - (DefragFS [Boot | Running]) -- C:\WINDOWS\System32\drivers\DefragFs.sys (Raxco Software, Inc.)
DRV - (E100B [On_Demand | Running]) -- C:\WINDOWS\System32\DRIVERS\e100b325.sys (Intel Corporation)
DRV - (Edspport [On_Demand | Running]) -- C:\WINDOWS\System32\DRIVERS\es56hpi.sys (ESS Technology, Inc.)
DRV - (EL90XBC [On_Demand | Stopped]) -- C:\WINDOWS\System32\DRIVERS\el90xbc5.sys (3Com Corporation)
DRV - (i81x [On_Demand | Stopped]) -- C:\WINDOWS\System32\DRIVERS\i81xnt5.sys (Intel Corporation)
DRV - (iAimFP0 [On_Demand | Stopped]) -- C:\WINDOWS\System32\DRIVERS\wADV01nt.sys (Intel Corporation)
DRV - (iAimFP1 [On_Demand | Stopped]) -- C:\WINDOWS\System32\DRIVERS\wADV02NT.sys (Intel Corporation)
DRV - (iAimFP2 [On_Demand | Stopped]) -- C:\WINDOWS\System32\DRIVERS\wADV05NT.sys (Intel Corporation)
DRV - (iAimFP3 [On_Demand | Stopped]) -- C:\WINDOWS\System32\DRIVERS\wSiINTxx.sys (Intel Corporation)
DRV - (iAimFP4 [On_Demand | Stopped]) -- C:\WINDOWS\System32\DRIVERS\wVchNTxx.sys (Intel Corporation)
DRV - (iAimTV0 [On_Demand | Stopped]) -- C:\WINDOWS\System32\DRIVERS\wATV01nt.sys (Intel Corporation)
DRV - (iAimTV1 [On_Demand | Stopped]) -- C:\WINDOWS\System32\DRIVERS\wATV02NT.sys (Intel Corporation)
DRV - (iAimTV2 [On_Demand | Stopped]) -- C:\WINDOWS\System32\DRIVERS\wATV03nt.sys (Intel Corporation)
DRV - (iAimTV3 [On_Demand | Stopped]) -- C:\WINDOWS\System32\DRIVERS\wATV04nt.sys (Intel Corporation)
DRV - (iAimTV4 [On_Demand | Stopped]) -- C:\WINDOWS\System32\DRIVERS\wCh7xxNT.sys (Intel Corporation)
DRV - (MODEMCSA [On_Demand | Running]) -- C:\WINDOWS\system32\drivers\MODEMCSA.sys (Microsoft Corporation)
DRV - (MREMPR5 [On_Demand | Stopped]) -- C:\Program Files\Common Files\Motive\MREMPR5.sys (Motive, Inc.)
DRV - (MRENDIS5 [On_Demand | Stopped]) -- C:\Program Files\Common Files\Motive\MRENDIS5.sys (Motive, Inc.)
DRV - (nv [On_Demand | Running]) -- C:\WINDOWS\System32\DRIVERS\nv4_mini.sys (NVIDIA Corporation)
DRV - (Ptilink [On_Demand | Running]) -- C:\WINDOWS\System32\DRIVERS\ptilink.sys (Parallel Technologies, Inc.)
DRV - (PxHelp20 [Boot | Running]) -- C:\WINDOWS\System32\DRIVERS\PxHelp20.sys (Sonic Solutions)
DRV - (RPPKT [On_Demand | Running]) -- C:\WINDOWS\System32\DRIVERS\rp_pkt32.sys (Radialpoint, Inc.)
DRV - (RPSKT [Auto | Running]) -- C:\WINDOWS\System32\DRIVERS\rp_skt32.sys (Radialpoint, Inc.)
DRV - (SASDIFSV [System | Running]) -- C:\Program Files\SUPERAntiSpyware\SASDIFSV.SYS ()
DRV - (SASENUM [On_Demand | Stopped]) -- C:\Program Files\SUPERAntiSpyware\SASENUM.SYS (SuperAdBlocker, Inc.)
DRV - (SASKUTIL [System | Running]) -- C:\Program Files\SUPERAntiSpyware\SASKUTIL.sys ()
DRV - (Secdrv [On_Demand | Stopped]) -- C:\WINDOWS\System32\DRIVERS\secdrv.sys ()
DRV - (StarOpen [System | Running]) -- C:\WINDOWS\System32\drivers\StarOpen.sys ()

========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.microsoft...p...&ar=msnhome
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.microsoft...amp;ar=iesearch
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\windows\system32\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft...amp;ar=iesearch
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.microsoft...p...ER}&ar=home
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,CustomizeSearch = http://ie.search.msn...st/srchcust.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.microsoft...amp;ar=iesearch
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant =

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.microsoft...amp;ar=iesearch
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\windows\system32\blank.htm
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Page_Transitions = 1
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page =
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = https://accesd.desjardins.com/
IE - URLSearchHook: - Reg Error: Key error. File not found
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

FF - HKLM\software\mozilla\Firefox\Extensions\\[email protected]: C:\PROGRAM FILES\JAVA\JRE6\LIB\DEPLOY\JQS\FF [2009-02-16 15:17:44 | 00,000,000 | ---D | M]


O1 HOSTS File: (304985 bytes) - C:\WINDOWS\System32\drivers\etc\Hosts
O1 - Hosts: 127.0.0.1 localhost
O1 - Hosts: 127.0.0.1 www.007guard.com
O1 - Hosts: 127.0.0.1 007guard.com
O1 - Hosts: 127.0.0.1 008i.com
O1 - Hosts: 127.0.0.1 www.008k.com
O1 - Hosts: 127.0.0.1 008k.com
O1 - Hosts: 127.0.0.1 www.00hq.com
O1 - Hosts: 127.0.0.1 00hq.com
O1 - Hosts: 127.0.0.1 010402.com
O1 - Hosts: 127.0.0.1 www.032439.com
O1 - Hosts: 127.0.0.1 032439.com
O1 - Hosts: 127.0.0.1 www.0scan.com
O1 - Hosts: 127.0.0.1 0scan.com
O1 - Hosts: 127.0.0.1 1000gratisproben.com
O1 - Hosts: 127.0.0.1 www.1000gratisproben.com
O1 - Hosts: 127.0.0.1 www.1001namen.com
O1 - Hosts: 127.0.0.1 1001namen.com
O1 - Hosts: 127.0.0.1 www.100888290cs.com
O1 - Hosts: 127.0.0.1 100888290cs.com
O1 - Hosts: 127.0.0.1 www.100sexlinks.com
O1 - Hosts: 127.0.0.1 100sexlinks.com
O1 - Hosts: 127.0.0.1 www.10sek.com
O1 - Hosts: 127.0.0.1 10sek.com
O1 - Hosts: 127.0.0.1 www.1-2005-search.com
O1 - Hosts: 127.0.0.1 1-2005-search.com
O1 - Hosts: 10526 more lines...
O3 - HKLM\..\Toolbar: (&Radio) - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx (Microsoft Corporation)
O3 - HKCU\..\Toolbar\ShellBrowser: (no name) - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - Reg Error: Key error. File not found
O4 - HKLM..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe (ALWIL Software)
O4 - HKLM..\Run: [EssSpkPhone] essspk.exe ()
O4 - HKLM..\Run: [-FreedomNeedsReboot] "C:\Program Files\Bell\Gestionnaire de securite\ZkRunOnceR.exe" (Bell Sympatico)
O4 - HKLM..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb05.exe (HP)
O4 - HKLM..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime (Apple Computer, Inc.)
O4 - HKLM..\Run: [SPAMfighter Agent] "C:\Program Files\SPAMfighter\SFAgent.exe" update delay 60 (SPAMfighter ApS)
O4 - HKLM..\Run: [SSA.exe] "C:\Program Files\Bell\Sympatico Security Advisor\SSA.exe" /AUTORUN (Bell)
O4 - HKLM..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe" (Sun Microsystems, Inc.)
O4 - HKLM..\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exe ()
O4 - HKCU..\Run: [updateMgr] C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe AcRdB7_1_0 (Adobe Systems Incorporated)
O4 - HKLM..\RunOnce: [Malwarebytes' Anti-Malware] C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe /install /silent (Malwarebytes Corporation)
O4 - Startup: C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage\Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe (Adobe Systems Incorporated)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: dontdisplaylastusername = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticecaption =
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticetext =
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: shutdownwithoutlogon = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: undockwithoutlogon = 1
O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoFolderOptions = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableRegistryTools = 0
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000 (Microsoft Corporation)
O15 - HKLM\..Trusted Domains: 48 domain(s) and sub-domain(s) not assigned to a zone.
O15 - HKCU\..Trusted Domains: 50 domain(s) and sub-domain(s) not assigned to a zone.
O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} http://download.macr...director/sw.cab (Shockwave ActiveX Control)
O16 - DPF: {3EA4FA88-E0BE-419A-A732-9B79B87A6ED0} http://dl.tvunetworks.com/TVUAx.cab (CTVUAxCtrl Object)
O16 - DPF: {4871A87A-BFDD-4106-8153-FFDE2BAC2967} http://dlm.tools.aka...vex-2.2.4.1.cab (DLM Control)
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} http://update.micros...b?1154312457090 (WUWebControl Class)
O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} http://go.divx.com/p...owserPlugin.cab (Reg Error: Key error.)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/...indows-i586.cab (Java Plug-in 1.6.0_12)
O16 - DPF: {CAFEEFAC-0016-0000-0012-ABCDEFFEDCBA} http://java.sun.com/...indows-i586.cab (Java Plug-in 1.6.0_12)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/...indows-i586.cab (Java Plug-in 1.6.0_12)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://download.macr...ash/swflash.cab (Shockwave Flash Object)
O16 - DPF: DirectAnimation Java Classes file://C:\WINDOWS\Java\classes\dajava.cab (Reg Error: Key error.)
O16 - DPF: Microsoft XML Parser for Java file://C:\WINDOWS\Java\classes\xmldso.cab (Reg Error: Key error.)
O18 - Protocol\Handler\cdo {CD00020A-8B95-11D1-82DB-00C04FB1625D} - C:\Program Files\Fichiers communs\Microsoft Shared\Web Folders\PKMCDO.DLL (Microsoft Corporation)
O18 - Protocol\Handler\http\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Fichiers communs\System\OLE DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\http\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Fichiers communs\System\OLE DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\https\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Fichiers communs\System\OLE DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\https\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Fichiers communs\System\OLE DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Fichiers communs\System\OLE DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Fichiers communs\System\OLE DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Fichiers communs\System\OLE DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\ms-itss {0A9007C0-4076-11D3-8789-0000F8105754} - C:\Program Files\Fichiers communs\Microsoft Shared\Information Retrieval\MSITSS.DLL (Microsoft Corporation)
O18 - Protocol\Handler\mso-offdap {3D9F03FA-7A94-11D3-BE81-0050048385D1} - C:\Program Files\Fichiers communs\Microsoft Shared\Web Components\10\OWC10.DLL (Microsoft Corporation)
O18 - Protocol\Handler\vnd.ms.radio {3DA2AA3B-3D96-11D2-9BD2-204C4F4F5020} - C:\WINDOWS\System32\msdxm.ocx (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\Explorer.exe (Microsoft Corporation)
O20 - Winlogon\Notify\!SASWinLogon: DllName - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll (SUPERAntiSpyware.com)
O28 - HKLM ShellExecuteHooks: {5AE067D3-9AFB-48E0-853A-EBB7F4A000DA} - C:\Program Files\SUPERAntiSpyware\SASSEH.DLL (SuperAdBlocker.com)
O31 - SafeBoot: AlternateShell - cmd.exe
O32 - HKLM CDRom: AutoRun - 1
O32 - Autorun File - C:\AUTOEXEC.BAT () - [ NTFS ]
O32 - Autorun File - C:\autorun.inf [2009-02-08 18:44:25 | 00,000,000 | ---D | M] - [ NTFS ]
O34 - HKLM BootExecute: (PDBoot.exe) - C:\WINDOWS\system32\PDBoot.exe (Raxco Software, Inc.)
O34 - HKLM BootExecute: (autocheck) - File not found
O34 - HKLM BootExecute: (autochk) - C:\WINDOWS\System32\autochk.exe (Microsoft Corporation)
O34 - HKLM BootExecute: (*) - File not found

========== Files/Folders - Created Within 30 Days ==========

[2 C:\WINDOWS\*.tmp files]
[2009-04-28 16:30:16 | 26,789,8880 | -HS- | C] () -- C:\hiberfil.sys
[2009-04-28 00:18:29 | 00,000,000 | ---D | C] -- C:\Program Files\Spybot - Search & Destroy
[2009-04-27 23:01:54 | 00,001,709 | ---- | C] () -- C:\Documents and Settings\All Users\Bureau\avast! Antivirus.lnk
[2009-04-27 23:01:53 | 00,023,152 | ---- | C] (ALWIL Software) -- C:\WINDOWS\System32\drivers\aswRdr.sys
[2009-04-27 23:01:52 | 00,051,376 | ---- | C] (ALWIL Software) -- C:\WINDOWS\System32\drivers\aswTdi.sys
[2009-04-27 23:01:51 | 00,026,944 | ---- | C] (ALWIL Software) -- C:\WINDOWS\System32\drivers\aavmker4.sys
[2009-04-27 23:01:48 | 00,097,480 | ---- | C] (ALWIL Software) -- C:\WINDOWS\System32\AvastSS.scr
[2009-04-27 23:01:42 | 00,114,768 | ---- | C] (ALWIL Software) -- C:\WINDOWS\System32\drivers\aswSP.sys
[2009-04-27 23:01:41 | 00,094,032 | ---- | C] (ALWIL Software) -- C:\WINDOWS\System32\drivers\aswmon2.sys
[2009-04-27 23:01:41 | 00,093,296 | ---- | C] (ALWIL Software) -- C:\WINDOWS\System32\drivers\aswmon.sys
[2009-04-27 23:01:02 | 01,256,296 | ---- | C] (ALWIL Software) -- C:\WINDOWS\System32\aswBoot.exe
[2009-04-27 23:01:02 | 00,380,928 | ---- | C] () -- C:\WINDOWS\System32\actskin4.ocx
[2009-04-27 17:51:13 | 00,029,696 | ---- | C] () -- C:\WINDOWS\System32\loader49.exe
[2009-04-26 22:37:04 | 00,000,383 | -HS- | C] () -- C:\WINDOWS\System32\zutahuva.exe
[2009-04-20 21:35:06 | 00,034,816 | ---- | C] () -- C:\Documents and Settings\client\Mes documents\Enap-.doc
[2009-04-20 16:16:42 | 00,036,864 | ---- | C] () -- C:\Documents and Settings\client\Mes documents\Musée Ville St-Laurent.doc
[2009-04-20 16:00:42 | 00,034,816 | ---- | C] () -- C:\Documents and Settings\client\Mes documents\Cegep Granby- David Vachon.doc
[2009-04-16 23:50:22 | 00,000,000 | ---D | C] -- C:\WINDOWS\SxsCaPendDel
[2009-04-15 16:33:23 | 00,034,816 | ---- | C] () -- C:\Documents and Settings\client\Mes documents\Collège militaire.doc
[2009-04-14 20:26:41 | 00,036,352 | ---- | C] () -- C:\Documents and Settings\client\Mes documents\les arts et la ville.doc
[2009-04-13 17:31:19 | 00,026,112 | ---- | C] () -- C:\Documents and Settings\client\Mes documents\banque du canada.doc
[2009-04-05 15:26:34 | 00,025,088 | ---- | C] () -- C:\Documents and Settings\client\Mes documents\Rapport impot 2008 David (T-4 non recu) Féd.doc
[2009-04-05 15:23:55 | 00,025,088 | ---- | C] () -- C:\Documents and Settings\client\Mes documents\Rapport impot 2008 David (T-4 non recu).doc
[2009-04-04 22:27:51 | 00,000,000 | ---D | C] -- C:\Documents and Settings\client\Application Data\StreamTorrent
[2009-04-02 16:36:38 | 00,036,864 | ---- | C] () -- C:\Documents and Settings\client\Mes documents\Musée Islet.doc
[2009-04-01 15:27:14 | 00,035,328 | ---- | C] () -- C:\Documents and Settings\client\Mes documents\Pointe-à-Callière.doc
[2009-03-31 15:20:40 | 00,034,816 | ---- | C] () -- C:\Documents and Settings\client\Mes documents\Cegep Ste-Foy.doc
[2009-03-30 15:19:26 | 00,035,840 | ---- | C] () -- C:\Documents and Settings\client\Mes documents\CV Morrin centre.doc
[2009-02-08 02:59:39 | 00,059,392 | R--- | C] () -- C:\WINDOWS\System32\streamhlp.dll
[2008-01-21 22:19:41 | 00,029,752 | ---- | C] () -- C:\WINDOWS\System32\InstHelper.dll
[2008-01-21 22:18:17 | 00,193,584 | ---- | C] () -- C:\WINDOWS\System32\CSGina.dll
[2007-12-15 17:20:08 | 00,970,434 | -HS- | C] () -- C:\WINDOWS\System32\scnepmhs.ini
[2007-12-13 01:45:25 | 00,930,588 | -HS- | C] () -- C:\WINDOWS\System32\pqsmmujr.ini
[2007-12-13 00:36:02 | 00,919,873 | -HS- | C] () -- C:\WINDOWS\System32\quurmtlq.ini
[2007-10-31 10:39:54 | 00,059,904 | ---- | C] () -- C:\WINDOWS\System32\zlib1.dll
[2007-10-13 18:44:02 | 00,000,000 | ---- | C] () -- C:\WINDOWS\SETUP32.INI
[2007-05-17 14:58:10 | 00,143,360 | ---- | C] () -- C:\WINDOWS\System32\libexpatw.dll
[2007-02-20 15:07:56 | 00,005,632 | R--- | C] () -- C:\WINDOWS\System32\drivers\StarOpen.sys
[2006-09-23 19:22:28 | 00,306,688 | ---- | C] () -- C:\WINDOWS\System32\LFFPX7.DLL
[2006-09-23 19:21:44 | 00,007,008 | ---- | C] () -- C:\WINDOWS\System32\SETUPKIT.DLL
[2006-09-23 19:21:44 | 00,000,012 | ---- | C] () -- C:\WINDOWS\ttinstal.ini
[2006-09-23 19:21:26 | 00,321,024 | ---- | C] () -- C:\WINDOWS\System32\Peer.dll
[2006-09-23 19:21:26 | 00,045,952 | ---- | C] () -- C:\WINDOWS\System32\LTVDD62W.DRV
[2006-09-23 19:21:26 | 00,030,720 | ---- | C] () -- C:\WINDOWS\System32\Peer_Res.dll
[2006-09-23 19:21:26 | 00,023,552 | ---- | C] () -- C:\WINDOWS\System32\LFPCX62N.DLL
[2006-09-23 19:21:26 | 00,022,016 | ---- | C] () -- C:\WINDOWS\System32\LFPCT62N.DLL
[2006-09-23 19:21:26 | 00,019,968 | ---- | C] () -- C:\WINDOWS\System32\LFWMF62N.DLL
[2006-09-23 19:21:26 | 00,019,968 | ---- | C] () -- C:\WINDOWS\System32\LFTGA62N.DLL
[2006-09-23 19:21:26 | 00,019,456 | ---- | C] () -- C:\WINDOWS\System32\LFWPG62N.DLL
[2006-09-23 19:21:26 | 00,017,408 | ---- | C] () -- C:\WINDOWS\System32\LFPCD62N.DLL
[2006-09-23 19:21:26 | 00,003,200 | ---- | C] () -- C:\WINDOWS\System32\LTTHK62W.DLL
[2006-09-23 19:21:25 | 00,175,616 | ---- | C] () -- C:\WINDOWS\System32\LFFAX62N.DLL
[2006-09-23 19:21:25 | 00,158,720 | ---- | C] () -- C:\WINDOWS\System32\LFCMP62N.DLL
[2006-09-23 19:21:25 | 00,047,616 | ---- | C] () -- C:\WINDOWS\System32\LFTIF62N.DLL
[2006-09-23 19:21:25 | 00,043,008 | ---- | C] () -- C:\WINDOWS\System32\LTFIL62N.DLL
[2006-09-23 19:21:25 | 00,024,064 | ---- | C] () -- C:\WINDOWS\System32\LTTWN62N.DLL
[2006-09-23 19:21:25 | 00,022,016 | ---- | C] () -- C:\WINDOWS\System32\LFBMP62N.DLL
[2006-09-23 19:19:06 | 00,785,920 | ---- | C] () -- C:\WINDOWS\System32\CBJINST.DLL
[2006-09-23 19:19:06 | 00,000,045 | ---- | C] () -- C:\WINDOWS\System32\CJPREF.INI
[2004-12-14 16:22:14 | 00,040,960 | ---- | C] () -- C:\WINDOWS\System32\TransportUSB.dll
[2004-12-14 16:22:14 | 00,040,960 | ---- | C] () -- C:\WINDOWS\System32\TransportSerial.dll
[2004-12-14 14:03:47 | 00,000,385 | ---- | C] () -- C:\WINDOWS\ODBC.INI
[2004-12-14 13:59:07 | 00,000,155 | ---- | C] () -- C:\WINDOWS\winamp.ini
[2002-08-30 08:00:00 | 00,027,440 | ---- | C] () -- C:\WINDOWS\System32\drivers\secdrv.sys
[2002-08-30 08:00:00 | 00,001,023 | ---- | C] () -- C:\WINDOWS\win.ini
[2002-08-30 08:00:00 | 00,000,282 | ---- | C] () -- C:\WINDOWS\system.ini

========== Files - Modified Within 30 Days ==========

[1 C:\WINDOWS\System32\*.tmp files]
[2 C:\WINDOWS\*.tmp files]
[2009-04-28 16:30:42 | 00,000,006 | -H-- | M] () -- C:\WINDOWS\tasks\SA.DAT
[2009-04-28 16:30:16 | 26,789,8880 | -HS- | M] () -- C:\hiberfil.sys
[2009-04-28 16:30:16 | 00,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2009-04-28 01:14:18 | 51,560,448 | ---- | M] () -- C:\WINDOWS\MEMORY.DMP
[2009-04-27 23:01:54 | 00,001,709 | ---- | M] () -- C:\Documents and Settings\All Users\Bureau\avast! Antivirus.lnk
[2009-04-27 23:01:42 | 00,003,121 | ---- | M] () -- C:\WINDOWS\System32\CONFIG.NT
[2009-04-27 19:21:46 | 00,775,210 | ---- | M] () -- C:\WINDOWS\System32\PerfStringBackup.INI
[2009-04-27 19:21:46 | 00,367,988 | ---- | M] () -- C:\WINDOWS\System32\perfh00C.dat
[2009-04-27 19:21:46 | 00,311,740 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat
[2009-04-27 19:21:46 | 00,048,820 | ---- | M] () -- C:\WINDOWS\System32\perfc00C.dat
[2009-04-27 19:21:46 | 00,040,128 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat
[2009-04-27 17:51:13 | 00,029,696 | ---- | M] () -- C:\WINDOWS\System32\loader49.exe
[2009-04-26 23:12:59 | 00,011,168 | -H-- | M] () -- C:\WINDOWS\System32\hakoweya
[2009-04-26 22:37:04 | 00,000,383 | -HS- | M] () -- C:\WINDOWS\System32\zutahuva.exe
[2009-04-26 22:36:57 | 00,051,200 | -HS- | M] () -- C:\WINDOWS\System32\zizavamu.exe
[2009-04-26 15:31:11 | 00,000,155 | ---- | M] () -- C:\WINDOWS\winamp.ini
[2009-04-26 08:51:17 | 00,002,206 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2009-04-20 21:38:16 | 00,034,816 | ---- | M] () -- C:\Documents and Settings\client\Mes documents\Enap-.doc
[2009-04-20 21:34:45 | 00,034,816 | ---- | M] () -- C:\Documents and Settings\client\Mes documents\CV- ville de québec.doc
[2009-04-20 16:25:16 | 00,036,864 | ---- | M] () -- C:\Documents and Settings\client\Mes documents\Musée Ville St-Laurent.doc
[2009-04-20 16:13:06 | 00,034,816 | ---- | M] () -- C:\Documents and Settings\client\Mes documents\Cegep Granby- David Vachon.doc
[2009-04-15 16:57:11 | 00,034,816 | ---- | M] () -- C:\Documents and Settings\client\Mes documents\Collège militaire.doc
[2009-04-15 15:08:58 | 00,036,352 | ---- | M] () -- C:\Documents and Settings\client\Mes documents\les arts et la ville.doc
[2009-04-13 17:34:55 | 00,026,112 | ---- | M] () -- C:\Documents and Settings\client\Mes documents\banque du canada.doc
[2009-04-06 15:32:54 | 00,038,496 | ---- | M] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbamswissarmy.sys
[2009-04-06 15:32:46 | 00,015,504 | ---- | M] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbam.sys
[2009-04-05 15:26:34 | 00,025,088 | ---- | M] () -- C:\Documents and Settings\client\Mes documents\Rapport impot 2008 David (T-4 non recu) Féd.doc
[2009-04-05 15:23:56 | 00,025,088 | ---- | M] () -- C:\Documents and Settings\client\Mes documents\Rapport impot 2008 David (T-4 non recu).doc
[2009-04-05 14:53:35 | 00,002,559 | ---- | M] () -- C:\Documents and Settings\client\Bureau\Microsoft Word.lnk
[2009-04-03 18:37:29 | 00,001,632 | ---- | M] () -- C:\WINDOWS\System32\d3d8caps.dat
[2009-04-02 16:49:13 | 00,036,864 | ---- | M] () -- C:\Documents and Settings\client\Mes documents\Musée Islet.doc
[2009-04-01 15:33:11 | 00,035,328 | ---- | M] () -- C:\Documents and Settings\client\Mes documents\Pointe-à-Callière.doc
[2009-03-31 15:41:03 | 00,034,816 | ---- | M] () -- C:\Documents and Settings\client\Mes documents\Cegep Ste-Foy.doc
[2009-03-30 15:32:37 | 00,035,840 | ---- | M] () -- C:\Documents and Settings\client\Mes documents\CV Morrin centre.doc
< End of report >


OTListIt Extras logfile created on: 2009-04-28 17:06:18 - Run 1
OTListIt2 by OldTimer - Version 2.0.14.0 Folder = C:\Download
Windows XP Professional Edition Service Pack 1 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 6.0.2800.1106)
Locale: 00000C0C | Country: Canada | Language: FRC | Date Format: yyyy-MM-dd

255,42 Mb Total Physical Memory | 137,78 Mb Available Physical Memory | 53,94% Memory free
617,66 Mb Paging File | 279,10 Mb Available in Paging File | 45,19% Paging File free
Paging file location(s): C:\pagefile.sys 384 768;

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 18,64 Gb Total Space | 8,72 Gb Free Space | 46,80% Space Free | Partition Type: NTFS
D: Drive not present or media not loaded
E: Drive not present or media not loaded
F: Drive not present or media not loaded
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded

Computer Name: CLIENT-B8LWWGNZ
Current User Name: client
Logged in as Administrator.

Current Boot Mode: Normal
Scan Mode: Current user
Output = Minimal
File Age = 30 Days
Company Name Whitelist: On

========== File Associations ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.html [@ = htmlfile] -- C:\Program Files\Internet Explorer\IEXPLORE.EXE (Microsoft Corporation)

========== Security Center Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"FirewallDisableNotify" = 0x00000000
"AntiVirusDisableNotify" = 0x00000000
"UpdatesDisableNotify" = 0

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile
"EnableFirewall" = 0

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List
"139:TCP" = 139:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22004
"445:TCP" = 445:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22005
"137:UDP" = 137:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22001
"138:UDP" = 138:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22002
"1900:UDP" = 1900:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22007
"2869:TCP" = 2869:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22008

========== Authorized Applications List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]

========== HKEY_LOCAL_MACHINE Uninstall List ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{0C668FBC-87B7-489E-8DD5-501B089313F5}" = RPS PopupBlocker
"{0F56B9DD-D918-44C1-9659-99186BD29F8A}" = RPS Performance Tool
"{1ACE3F9D-CDA4-4F39-9605-334CF37A1579}" = Authentium AntiVirus SDK - 2
"{1D10AC9D-6398-4B6F-AC82-5799E0056195}" = RPS AntiVirus
"{1E04F83B-2AB9-4301-9EF7-E86307F79C72}" = Google Earth
"{1E90C4DA-4C0B-481A-BCF1-23E06CFFAA80}" = RPS Burn
"{212F5777-1190-4DEF-8E4D-6B2F313B45E7}" = PerfectDisk
"{26A24AE4-039D-4CA4-87B4-2F83216012FF}" = Java™ 6 Update 12
"{26DBDD60-70AE-4E68-B1B9-47E2B84A7E33}" = RPS Ad Blocker
"{350C940c-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP
"{45039313-F71D-47E7-B6F4-97F8C2ECB1D9}" = RPS App Detector
"{50FD1308-78CC-443C-9EF0-42831004856B}" = RPS RpsCore
"{5DFDEAAA-E050-482E-A5B6-138CAE53F7BF}" = Radialpoint Security Services
"{67018A18-107A-4037-9F71-F322D599E100}" = RPS Backup
"{6E1A4932-C2E7-4F8D-BCA2-C975ED2704B0}" = RPS Diagnostic Utility
"{8EA70A19-8441-402E-90C1-B6501088BC52}" = Gestionnaire de sécurité Sympatico
"{9011040C-6000-11D3-8CFE-0050048383C9}" = Microsoft Office XP Professional
"{9BFD4F4C-1890-48D7-8191-B92A6BEA1F65}" = RPS AntiSpyware
"{A5EA564B-6074-4CD5-9C0D-1484C95355E4}" = RPS Zip
"{AC76BA86-7AD7-1036-7B44-A70000000000}" = Adobe Reader 7.0 - Français
"{B4092C6D-E886-4CB2-BA68-FE5A88D31DE6}_is1" = Spybot - Search & Destroy
"{BF54F134-4AB6-4418-83F7-62F2FB736BA8}" = RPS AntiFraud
"{C869F4FF-E5FF-4FBB-9A31-33C23605E170}" = PPSDKRedistributables
"{CDDCBBF1-2703-46BC-938B-BCC81A1EEAAA}" = SUPERAntiSpyware Free Edition
"{D82DB26F-2BE6-44DB-AB2E-A3C0AFBBC7FA}" = RPS Security Cleanup
"{DA424A6A-550B-40FC-9EC5-301AC3FA0F54}" = RPS AsRealtime
"{DADABC00-4698-4A93-B185-EAE4ACD4B364}" = RPS Firewall
"{E4BC66FE-3951-499C-9827-317DB2464810}" = RPS Privacy Manager
"{EAD8B3B0-429C-474F-A506-7182E736B146}" = SPAMfighter
"{F333A33D-125C-32A2-8DCE-5C5D14231E27}" = Visual C++ 2008 x86 Runtime - (v9.0.30729)
"{F333A33D-125C-32A2-8DCE-5C5D14231E27}.vc_x86runtime_30729_01" = Visual C++ 2008 x86 Runtime - v9.0.30729.01
"{F97C9CC8-16E4-4D87-8394-1772A5ED9A70}" = RPS ParentalControl
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"AdobeESD" = Adobe Download Manager 2.2 (Remove Only)
"avast!" = avast! Antivirus
"CAL" = Canon Camera Access Library
"CameraWindowDVC5" = Canon Camera Window DC_DV 5 for ZoomBrowser EX
"CameraWindowDVC6" = Canon Camera Window DC_DV 6 for ZoomBrowser EX
"CameraWindowMC" = Canon Camera Window MC 6 for ZoomBrowser EX
"Canon G.726 WMP-Decoder" = Canon G.726 WMP-Decoder
"CDPhotoDeinstKey" = ColorDesk Photo
"CSCLIB" = Canon Camera Support Core Library
"EOS Utility" = Canon Utilities EOS Utility
"ESSMDM" = Uninstall ESS Modem
"hp deskjet 3820 series" = hp deskjet 3820 series (Supprimer uniquement)
"hp deskjet 3820 series_Driver" = hp deskjet 3820 series
"Macromedia Shockwave Player" = Macromedia Shockwave Player
"Malwarebytes' Anti-Malware_is1" = Malwarebytes' Anti-Malware
"MovieEditTask" = Canon MovieEdit Task for ZoomBrowser EX
"PhotoStitch" = Canon Utilities PhotoStitch
"Q819696" = Correctif Windows XP (SP2) Q819696
"QuickTime" = QuickTime
"RadialpointClientGateway_is1" = Conseiller en sécurité Sympatico 1.5.11
"RAW Image Task" = Canon RAW Image Task for ZoomBrowser EX
"RemoteCaptureTask" = Canon RemoteCapture Task for ZoomBrowser EX
"SPAMfighter" = SPAMfighter
"Vérification Internet" = Vérification Internet
"Winamp" = Winamp (remove only)
"Windows Media Format Runtime" = Windows Media Format Runtime
"Windows Media Player" = Lecteur Windows Media 10
"WinZip" = WinZip
"ZoomBrowser EX" = Canon Utilities ZoomBrowser EX

========== Last 10 Event Log Errors ==========

[ Application Events ]
Error - 2009-04-28 15:15:26 | Computer Name = CLIENT-B8LWWGNZ | Source = Perflib | ID = 2002
Description = La procédure d'ouverture du service "WmiApRpl" dans la bibliothèque
"C:\WINDOWS\System32\wbem\wmiaprpl.dll" a pris plus longtemps que le délai imparti
pour cette opération. Il y a peut-être un problème pour ce compteur extensible ou
le service dont il tire ses informations, ou le système était peut-être très occupé
au moment où l'appel a été tenté.

Error - 2009-04-28 15:16:05 | Computer Name = CLIENT-B8LWWGNZ | Source = Perflib | ID = 1015
Description = Le délai d'exécution de la fonction "PerfProc" de collecte de données
de performance dans la bibliothèque "C:\WINDOWS\system32\perfproc.dll" a expiré.
Il y a peut-être un problème pour ce compteur extensible ou le service dont il tire
ses informations, ou le système était peut-être très occupé au moment où l'appel
a été tenté.

Error - 2009-04-28 15:16:38 | Computer Name = CLIENT-B8LWWGNZ | Source = Perflib | ID = 1015
Description = Le délai d'exécution de la fonction "PerfProc" de collecte de données
de performance dans la bibliothèque "C:\WINDOWS\system32\perfproc.dll" a expiré.
Il y a peut-être un problème pour ce compteur extensible ou le service dont il tire
ses informations, ou le système était peut-être très occupé au moment où l'appel
a été tenté.

Error - 2009-04-28 15:18:52 | Computer Name = CLIENT-B8LWWGNZ | Source = EventSystem | ID = 4609
Description = Le système d'événements de COM+ a détecté un code de renvoi erroné
lors de son traitement interne. Le HRESULT est 8007043C à partir de la ligne 44
de d:\nt_qxp\com\com1x\src\events\tier1\eventsystemobj.cpp. Contactez les services
du Support Technique Microsoft pour signaler cette erreu

Error - 2009-04-28 15:18:52 | Computer Name = CLIENT-B8LWWGNZ | Source = VSS | ID = 8193
Description = Erreur du service de cliché instantané des volumes : erreur lors de
l'appel de la routine CoCreateInstance. hr = 0x80040206.

Error - 2009-04-28 16:31:18 | Computer Name = CLIENT-B8LWWGNZ | Source = Perflib | ID = 2002
Description = La procédure d'ouverture du service "WmiApRpl" dans la bibliothèque
"C:\WINDOWS\System32\wbem\wmiaprpl.dll" a pris plus longtemps que le délai imparti
pour cette opération. Il y a peut-être un problème pour ce compteur extensible ou
le service dont il tire ses informations, ou le système était peut-être très occupé
au moment où l'appel a été tenté.

Error - 2009-04-28 16:32:03 | Computer Name = CLIENT-B8LWWGNZ | Source = Perflib | ID = 1015
Description = Le délai d'exécution de la fonction "PerfProc" de collecte de données
de performance dans la bibliothèque "C:\WINDOWS\system32\perfproc.dll" a expiré.
Il y a peut-être un problème pour ce compteur extensible ou le service dont il tire
ses informations, ou le système était peut-être très occupé au moment où l'appel
a été tenté.

Error - 2009-04-28 16:36:02 | Computer Name = CLIENT-B8LWWGNZ | Source = Application Error | ID = 1000
Description = Application défaillante iexplore.exe, version 6.0.2800.1106, module
défaillant ntdll.dll, version 5.1.2600.1217, adresse de défaillance 0x000081bd.

Error - 2009-04-28 16:36:14 | Computer Name = CLIENT-B8LWWGNZ | Source = Application Error | ID = 1001
Description = Détecteur d'erreurs 49041728.

Error - 2009-04-28 17:02:09 | Computer Name = CLIENT-B8LWWGNZ | Source = Application Error | ID = 1000
Description = Application défaillante iexplore.exe, version 6.0.2800.1106, module
défaillant urlmon.dll, version 6.0.2800.1572, adresse de défaillance 0x0001bd5f.

[ System Events ]
Error - 2009-04-28 16:29:10 | Computer Name = CLIENT-B8LWWGNZ | Source = DCOM | ID = 10005
Description = DCOM a reçu l'erreur "%1084" lors de la mise en route du service EventSystem
avec les arguments "" pour démarrer le serveur : {1BE1F766-5536-11D1-B726-00C04FB926AF}

Error - 2009-04-28 16:30:18 | Computer Name = CLIENT-B8LWWGNZ | Source = SideBySide | ID = 16842784
Description = L'assemblage dépendant Microsoft.VC80.MFCLOC ne peut pas être trouvé.
La dernière erreur était L'assemblage référencé n'est pas installé sur votre système.


Error - 2009-04-28 16:30:18 | Computer Name = CLIENT-B8LWWGNZ | Source = SideBySide | ID = 16842811
Description = Resolve Partial Assembly a échoué pour Microsoft.VC80.MFCLOC. Message
d'erreur de référence : L'assemblage référencé n'est pas installé sur votre système.
.

Error - 2009-04-28 16:30:18 | Computer Name = CLIENT-B8LWWGNZ | Source = SideBySide | ID = 16842811
Description = Generate Activation Context a échoué pour C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.363_x-ww_3a00bc02\MFC80.DLL.
Message
d'erreur de référence : Opération réussie. .

Error - 2009-04-28 16:30:23 | Computer Name = CLIENT-B8LWWGNZ | Source = SideBySide | ID = 16842784
Description = L'assemblage dépendant Microsoft.VC80.MFCLOC ne peut pas être trouvé.
La dernière erreur était L'assemblage référencé n'est pas installé sur votre système.


Error - 2009-04-28 16:30:23 | Computer Name = CLIENT-B8LWWGNZ | Source = SideBySide | ID = 16842811
Description = Resolve Partial Assembly a échoué pour Microsoft.VC80.MFCLOC. Message
d'erreur de référence : L'assemblage référencé n'est pas installé sur votre système.
.

Error - 2009-04-28 16:30:23 | Computer Name = CLIENT-B8LWWGNZ | Source = SideBySide | ID = 16842811
Description = Generate Activation Context a échoué pour C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.363_x-ww_3a00bc02\MFC80.DLL.
Message
d'erreur de référence : Opération réussie. .

Error - 2009-04-28 16:30:46 | Computer Name = CLIENT-B8LWWGNZ | Source = ACPI | ID = 327685
Description = AMLI : le BIOS ACPI tente de lire une adresse de port E/S non autorisée
(0x70) dans la gamme d'adresses protégées 0x70 - 0x71. Cela peut provoquer l'instabilité
du système. Contactez le fabricant de votre ordinateur pour une assistance technique.

Error - 2009-04-28 16:30:46 | Computer Name = CLIENT-B8LWWGNZ | Source = ACPI | ID = 327684
Description = AMLI : le BIOS ACPI tente de lire à partir d'une adresse de port E/S
non autorisée (0x71) dans la plage d'adresses protégées 0x70 - 0x71. Cela peut provoquer
l'instabilité du système. Contactez le fabricant de votre ordinateur pour une assistance
technique.

Error - 2009-04-28 16:32:01 | Computer Name = CLIENT-B8LWWGNZ | Source = Service Control Manager | ID = 7000
Description = Le service wscsvc n'a pas pu démarrer en raison de l'erreur : %%1083


< End of report >