[color=#e56717]========== Extra Registry (SafeList) ==========[/color]

Transcription

1 OTL Extras logfile created on: 02/02/ :59:39 - Run 1 OTL by OldTimer - Version Folder = C:\WINDOWS\Profiles\nawal\Bureau Windows XP Professional Edition Service Pack 2 (Version = ) - Type = NTWorkstation Internet Explorer (Version = ) Locale: C Country: France Language: FRA Date Format: dd/mm/yyyy 1,99 Gb Total Physical Memory 1,07 Gb Available Physical Memory 53,79% Memory free 3,83 Gb Paging File 2,87 Gb Available in Paging File 74,75% Paging File free Paging file location(s): c:\pagefile.sys [binary data] %SystemDrive% = C: %SystemRoot% = C:\WINDOWS %ProgramFiles% = C:\Program Files Drive C: 195,31 Gb Total Space 142,58 Gb Free Space 73,00% Space Free Partition Type: NTFS Drive D: 195,31 Gb Total Space 191,79 Gb Free Space 98,20% Space Free Partition Type: NTFS Drive E: 205,54 Gb Total Space 126,95 Gb Free Space 61,76% Space Free Partition Type: NTFS Computer Name: NAWAL User Name: nawal Logged in as Administrator. Boot Mode: Normal Scan Mode: All users Company Name Whitelist: Off Skip Microsoft Files: Off No Company Name Whitelist: On File Age = 30 Days [color=#e56717]========== Extra Registry (SafeList) ==========[/color] [color=#e56717]========== File Associations ==========[/color] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>].cpl [@ = cplfile] -- rundll32.exe shell32.dll,control_rundll "%1",%*.html [@ = ChromeHTML] -- Reg Error: Key error. File not found.url [@ = InternetShortcut] -- rundll32.exe ieframe.dll,openurl %l [HKEY_USERS\S \SOFTWARE\Classes\<exte nsion>].html [@ = FirefoxHTML] -- C:\WINDOWS\Profiles\nawal\Local Settings\Application Data\Mozilla Firefox\firefox.exe (Mozilla Corporation) [color=#e56717]========== Shell Spawning ==========[/color] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command] batfile [open] -- "%1" %* cmdfile [open] -- "%1" %* comfile [open] -- "%1" %* cplfile [cplopen] -- rundll32.exe shell32.dll,control_rundll "%1",%* exefile [open] -- "%1" %* htmlfile [edit] -- Reg Error: Key error. http [open] -- Reg Error: Key error. https [open] -- Reg Error: Key error. InternetShortcut [open] -- rundll32.exe ieframe.dll,openurl %l piffile [open] -- "%1" %* regfile [merge] -- Reg Error: Key error. scrfile [config] -- "%1" scrfile [install] -- rundll32.exe desk.cpl,installscreensaver %l scrfile [open] -- "%1" /S txtfile [edit] -- Reg Error: Key error. Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1 Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Folder [open] -- %SystemRoot%\Explorer.exe /idlist,%i,%l (Microsoft Corporation) Folder [explore] -- %SystemRoot%\Explorer.exe /e,/idlist,%i,%l (Microsoft Corporation) Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) [color=#e56717]========== Security Center Settings ==========[/color] Page 1

2 Center] "FirstRunDisabled" = 1 "AntiVirusDisableNotify" = 0 "FirewallDisableNotify" = 0 "UpdatesDisableNotify" = 0 "AntiVirusOverride" = 0 "FirewallOverride" = 0 Center\Monitoring] Center\Monitoring\AhnlabAntiVirus] Center\Monitoring\ComputerAssociatesAntiVirus] Center\Monitoring\KasperskyAntiVirus] "DisableMonitoring" = 1 Center\Monitoring\McAfeeAntiVirus] Center\Monitoring\McAfeeFirewall] Center\Monitoring\PandaAntiVirus] Center\Monitoring\PandaFirewall] Center\Monitoring\SophosAntiVirus] Center\Monitoring\SymantecAntiVirus] Center\Monitoring\SymantecFirewall] Center\Monitoring\TinyFirewall] Center\Monitoring\TrendAntiVirus] Center\Monitoring\TrendFirewall] Center\Monitoring\ZoneLabsFirewall] [color=#e56717]========== System Restore Settings ==========[/color] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore] "DisableSR" = 0 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Sr] "Start" = 0 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SrService] "Start" = 2 [color=#e56717]========== Firewall Settings ==========[/color] rewallpolicy\domainprofile] "EnableFirewall" = 0 Page 2

3 rewallpolicy\domainprofile\globallyopenports\list] "139:TCP" = 139:TCP:*:Enabled:@xpsp2res.dll, "445:TCP" = 445:TCP:*:Enabled:@xpsp2res.dll, "137:UDP" = 137:UDP:*:Enabled:@xpsp2res.dll, "138:UDP" = 138:UDP:*:Enabled:@xpsp2res.dll, "4847:TCP" = 4847:TCP:*:Enabled:vophz rewallpolicy\standardprofile] "EnableFirewall" = 0 "DisableNotifications" = 0 rewallpolicy\standardprofile\globallyopenports\list] "4847:TCP" = 4847:TCP:*:Enabled:vophz "139:TCP" = 139:TCP:LocalSubNet:Enabled:@xpsp2res.dll, "445:TCP" = 445:TCP:LocalSubNet:Enabled:@xpsp2res.dll, "137:UDP" = 137:UDP:LocalSubNet:Enabled:@xpsp2res.dll, "138:UDP" = 138:UDP:LocalSubNet:Enabled:@xpsp2res.dll, [color=#e56717]========== Authorized Applications List ==========[/color] rewallpolicy\domainprofile\authorizedapplications\list] "%windir%\system32\sessmgr.exe" = %windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll, (Microsoft Corporation) "C:\Program Files\Iomega StorCenter\sohoclient.exe" = C:\Program Files\Iomega StorCenter\sohoclient.exe:*:Enabled:Storage Manager (EMC) "C:\Program Files\Yeastar\BizFAXClient\BizFAX.exe" = C:\Program Files\Yeastar\BizFAXClient\BizFAX.exe:*:Enabled:BizFAX Client -- (YEASTAR) "C:\Program Files\LMM Order Entry\UpdatSoft.exe" = C:\Program Files\LMM Order Entry\UpdatSoft.exe:*:Enabled:UpdatSoft -- (ORNIS) "G:\setup\hppniprint01.exe" = G:\setup\hppniprint01.exe:*:Enabled:hppniprint01.exe "G:\setup\hppniprint64.exe" = G:\setup\hppniprint64.exe:*:Enabled:hppniprint64.exe "G:\setup\hppnicifs01.exe" = G:\setup\hppnicifs01.exe:*:Enabled:hppnicifs01.exe "G:\setup\hpbtpg.exe" = G:\setup\hpbtpg.exe:*:Enabled:hpbtpg.exe "G:\setup\LaunchApp.exe" = G:\setup\LaunchApp.exe:*:Enabled:launchapp.exe "C:\Program Files\Skype\Phone\Skype.exe" = C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype -- (Skype Technologies S.A.) "C:\Program Files\TeamViewer\Version7\TeamViewer.exe" = C:\Program Files\TeamViewer\Version7\TeamViewer.exe:*:Enabled:Teamviewer Remote Control Application -- (TeamViewer GmbH) "C:\Program Files\TeamViewer\Version7\TeamViewer_Service.exe" = C:\Program Files\TeamViewer\Version7\TeamViewer_Service.exe:*:Enabled:Teamviewer Remote Control Service -- (TeamViewer GmbH) "C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE" = C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook -- (Microsoft Corporation) rewallpolicy\standardprofile\authorizedapplications\list] "%windir%\system32\sessmgr.exe" = %windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll, (Microsoft Corporation) "C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe" = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe:*:Enabled:hpqtra08.exe "C:\Program Files\HP\Digital Imaging\bin\hpqste08.exe" = C:\Program Files\HP\Digital Imaging\bin\hpqste08.exe:*:Enabled:hpqste08.exe -- (Hewlett-Packard Development Company, L.P.) "C:\Program Files\HP\Digital Imaging\bin\hpofxm08.exe" = C:\Program Files\HP\Digital Imaging\bin\hpofxm08.exe:*:Enabled:hpofxm08.exe -- "C:\Program Files\HP\Digital Imaging\bin\hposfx08.exe" = C:\Program Files\HP\Digital Imaging\bin\hposfx08.exe:*:Enabled:hposfx08.exe -- Page 3

4 "C:\Program Files\HP\Digital Imaging\bin\hposid01.exe" = C:\Program Files\HP\Digital Imaging\bin\hposid01.exe:*:Enabled:hposid01.exe -- "C:\Program Files\HP\Digital Imaging\bin\hpqscnvw.exe" = C:\Program Files\HP\Digital Imaging\bin\hpqscnvw.exe:*:Enabled:hpqscnvw.exe -- () "C:\Program Files\HP\Digital Imaging\bin\hpqkygrp.exe" = C:\Program Files\HP\Digital Imaging\bin\hpqkygrp.exe:*:Enabled:hpqkygrp.exe -- (Hewlett-Packard) "C:\Program Files\HP\Digital Imaging\bin\hpqCopy.exe" = C:\Program Files\HP\Digital Imaging\bin\hpqCopy.exe:*:Enabled:hpqcopy.exe -- "C:\Program Files\HP\Digital Imaging\bin\hpfccopy.exe" = C:\Program Files\HP\Digital Imaging\bin\hpfccopy.exe:*:Enabled:hpfccopy.exe "C:\Program Files\HP\Digital Imaging\bin\hpzwiz01.exe" = C:\Program Files\HP\Digital Imaging\bin\hpzwiz01.exe:*:Enabled:hpzwiz01.exe -- "C:\Program Files\HP\Digital Imaging\Unload\HpqPhUnl.exe" = C:\Program Files\HP\Digital Imaging\Unload\HpqPhUnl.exe:*:Enabled:hpqphunl.exe "C:\Program Files\HP\Digital Imaging\Unload\HpqDIA.exe" = C:\Program Files\HP\Digital Imaging\Unload\HpqDIA.exe:*:Enabled:hpqdia.exe "C:\Program Files\HP\Digital Imaging\bin\hpoews01.exe" = C:\Program Files\HP\Digital Imaging\bin\hpoews01.exe:*:Enabled:hpoews01.exe -- "C:\Program Files\HP\Digital Imaging\bin\hpqnrs08.exe" = C:\Program Files\HP\Digital Imaging\bin\hpqnrs08.exe:*:Enabled:hpqnrs08.exe -- (Hewlett-Packard Development Company, L.P.) "F:\setup\hppniprint01.exe" = F:\setup\hppniprint01.exe:*:Enabled:hppniprint01.exe "F:\setup\hppniprint64.exe" = F:\setup\hppniprint64.exe:*:Enabled:hppniprint64.exe "F:\setup\hppnicifs01.exe" = F:\setup\hppnicifs01.exe:*:Enabled:hppnicifs01.exe "F:\setup\hpbtpg.exe" = F:\setup\hpbtpg.exe:*:Enabled:hpbtpg.exe "F:\setup\LaunchApp.exe" = F:\setup\LaunchApp.exe:*:Enabled:launchapp.exe "C:\Program Files\Retrospect\Retrospect Express HD 2.5\Retrospect.exe" = C:\Program Files\Retrospect\Retrospect Express HD 2.5\Retrospect.exe:*:Enabled:Retrospect Express HD -- (EMC Corporation) "C:\Program Files\Retrospect\Retrospect Express HD 2.5\retrorun.exe" = C:\Program Files\Retrospect\Retrospect Express HD 2.5\retrorun.exe:*:Enabled:Retrospect Express HD Launcher service -- (EMC Corporation) "C:\Program Files\Iomega StorCenter\sohoclient.exe" = C:\Program Files\Iomega StorCenter\sohoclient.exe:*:Enabled:Storage Manager (EMC) [color=#e56717]========== HKEY_LOCAL_MACHINE Uninstall List ==========[/color] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "{043F86B7-EE B2CA-D0B603D87963}" = Microsoft.NET Framework 4 Extended FRA Language Pack "{06C4BA B5BE-E26D487E1854}" = HP LaserJet P3010 Series Guide d'utilisation "{0A0CADCF-78DA-33C4-A350-CD51849B9702}" = Microsoft.NET Framework 4 Extended "{0F5B4A82-9DAF-3D13-8CB8-AEB25E4A614E}" = Microsoft.NET Framework 4 Client Profile FRA Language Pack "{ D F-8F79-81DA }" = Gestion commerciale "{11B83AD3-7A46-4C2E-A D4C6F}" = HP Update "{13E7F4A4-33A0-16B FAA38C2A7067}" = Nero 7 "{14DE1C26-6CD6-4FC5-B444-BB52B0F9702E}" = Gestion commerciale "{15095BF3-A3D7-4DDF-B193-3A496881E003}" = Microsoft.NET Framework 3.0 "{1E0BC1A6-A667-40E5-B265-F9BD60F48B17}" = Gestion commerciale "{23B E4A-4F CDEDDFAC089}" = CP_Package_Variety2 "{2614F54E-A828-49FA-93BA-45A3F756BFAA}" = 32 Bit HP CIO Components Installer "{2CC5FCAE-51BA C2B-4F07E54F6EA3}" = ScanSnap "{303350C8-39A5-4D22-8D73-0BAE461D6E8F}" = Biomnis "{33FA49FF-93D9-43BD-96FA-666F6C94A48A}" = Gestion commerciale "{350C940c-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP "{37BE E4-4B84-BA52-DB4A61F1C3A7}" = Sage 100 Gestion commerciale pour SQL Page 4

5 Server "{3C3901C E0A-A214-0B093A5070A6}" = Microsoft.NET Framework 4 Client Profile "{3F4B59A4-58A0-4A48-B397-CD428C270BFF}" = Gestion commerciale "{43EA3AB2-FDD2-4B2F-B58C-8694C }" = FileCryptSnmp "{4525B8B9-468B-4BF8-B5CE-464FBE450BED}" = Gestion commerciale "{45E557D F C620B4285AB0}" = Kaspersky Internet Security 2012 "{491DD792-AD81-429C-9EB4-86DD3D22E333}" = Windows Communication Foundation "{49E22FA8-C46A-43DF-996D-B48CD82628A9}" = Gestion commerciale "{4C4D61F0-DBC9-41D8-B52E-ADF6CF7CE210}" = Comptabilité "{4FDE7114-EE73-447D-A7DA-90BEBCCA2A4E}" = Sage 100 Comptabilité pour SQL Server "{518E2BDB-B09C-4DC5-A02D-45AC4B2AAADF}" = Gestion commerciale "{522D1D79-9C0A F8-2AFF8EC6C2E1}" = CP_Package_Variety1 "{55E BFE-49BC-B03E-9BE0F62E18C2}" = ScanSnap Organizer "{ B B86B-E499916E836A}" = Comptabilité "{61B1A9C8-B2AD-4F54-B FFD07BDE7}" = 4300 "{68763C27-235D-4165-A961-FDEA228CE504}" = AiOSoftwareNPI "{6C47F3E1-1C1F-466B-A9BA-D7112DF0BE18}" = Gestion commerciale "{ b-02a f2-1818da5d550d}" = Microsoft Visual C Redistributable "{736C803C-DD3B-4015-BC51-AFB9E67B9076}" = Readme "{7D1B85BD-AA07-48B8-808D-67A4067FC6BD}" = Windows Workflow Foundation "{7E7B7865-6C BC1-C2EB9431F9DE}" = ProductContextNPI "{81FB513B CE5-A A42367E}" = Sage 100 Gestion Commerciale Edition Pilotée pour SQL Server "{8DCD E2FD48E45}" = CardMinder V4.1 "{ C FF1CE}" = Microsoft Software Update for Web Folders (French) 12 "{ FF1CE}" = Microsoft Office Professional Plus "{ C FF1CE}" = Microsoft Office Access MUI (French) "{ C FF1CE}" = Microsoft Office Excel MUI (French) "{ C FF1CE}" = Microsoft Office PowerPoint MUI (French) "{ C FF1CE}" = Microsoft Office Publisher MUI (French) "{ A-040C FF1CE}" = Microsoft Office Outlook MUI (French) "{ B-040C FF1CE}" = Microsoft Office Word MUI (French) "{ F FF1CE}" = Microsoft Office Proof (Arabic) "{ F FF1CE}" = Microsoft Office Proof (German) "{ F FF1CE}" = Microsoft Office Proof (English) "{ F-040C FF1CE}" = Microsoft Office Proof (French) "{ F FF1CE}" = Microsoft Office Proof (Dutch) "{ F-0C0A FF1CE}" = Microsoft Office Proof (Spanish) "{ C-040C FF1CE}" = Microsoft Office Proofing (French) "{ C FF1CE}" = Microsoft Office InfoPath MUI (French) "{ E-040C FF1CE}" = Microsoft Office Shared MUI (French) "{90FF23FE-0E1B-40DF-A22E-B4C0372E5936}" = Iomega Product Registration "{9B2BB60D-A092-47B7-855E-91F6E }" = Arcana Scheduler "{9C7E944F B8-A0AB-66B2FA9EE829}" = Microsoft SQL Server Native Client "{9E397C06-75DF BD-ADB980839D09}" = Sage 100 pour SQL Server poste Client "{9E60B26C B94-853A-B3206CD94BB3}" = Comptabilité "{A4C1208B-88E7-46F0-A205-17E0F }" = Comptabilité "{A744C7C3-76F5-42F5-9E15-497A3DFBC709}" = 4300Trb "{AC76BA F400-BA7E }" = Adobe Acrobat 9 Standard - English, Français, Deutsch "{AC76BA F400-BA7E }_953" = Adobe Acrobat CPSID_83708 "{AC76BA F400-BA7E }{AC76BA F400-BA7E }" = Adobe Acrobat 9 Standard - English, Français, Deutsch "{AC76BA86-7AD B44-A }" = Adobe Reader Français "{B508B3F1-A24A-32C0-B EF28}" = Microsoft.NET Framework 2.0 Service Page 5

6 Pack 1 "{B57F2FF0-5A B B370C02F}" = CP_Package_Variety3 "{BAF DB4-BE33-4D922A799840}" = Windows Presentation Foundation "{BCC A2-4C4C-B0F8-BC6B6F52D4E3}" = Retrospect Express HD 2.5 "{BCE BEDB-68205A60409E}" = CanoScan Toolbox 4.1 "{C2597D EC-E58EC39F9F7B}" = Sage 100 pour SQL Server poste Client "{C5AFBBBB-3BC8-40EB-A06C-68C0C8F7BB62}" = Gestion commerciale "{C B117-48E6-A3BA-1709C14A3C8C}" = Scan "{C8753E BF-BD48-DD38FD086EFE}" = AiO_Scan_CDA "{C9D312C8-E3EC-4478-A3FF-93B65E077DC3}" = Sage 100 pour SQL Server poste Client "{CB71331A-9DCE-4A0D-B527-FD96BD5CFC4A}" = HP LaserJet P3010 Series Polices d'écran "{CEBE9CD4-7F BBA4-41A53711F53F}" = Gestion commerciale "{D4F2AFD B92F-78AB6DA8A0AA}" = CardMinder "{D8488C28-A96C-419E-841D-24FA720A8841}" = Comptabilité "{DBCDB997-EEEB-4BE9-BAFF-26B4094DBDE6}" = ScanSnap Manager "{DC3483D1-D77B-4095-BBAF-78CA734CE68A}" = Sage 100 Comptabilité Edition Pilotée pour SQL Server "{E075E39D-BCA8-4C37-A8D1-AD4F857CBE77}" = Comptabilité "{E36AC2C1-0CEB-4AC EEA9C076}" = Gestion commerciale "{E58F3B88-3B3E-4F D979C15}" = ScanSnap Organizer "{E5A8DDAB-AE80-48C6-A75B-D0FAB83B299D}" = HP PSC & OfficeJet 6.1.A "{E769999E-D0D9-4D51-AEFE-1BD44289E550}" = 4300_Help "{EE7257A2-39A2-4D2F-9DAC-F9F25B8AE1D8}" = Skype 5.10 "{F0F1158A E-92B7-D20C18EB23A3}" = LMM Order Entry "{F132AF7F-7BCA-4EDE-8A7C FE7DBC}" = Realtek High Definition Audio Driver "{F45B3B64-610D-4AA1-AE25-3AF4C1A029B7}" = Gestion commerciale "{F6076EF9-08E1-442F-B6A2-BFB61B295A14}" = Fax_CDA "{FB }" = ABBYY FineReader for ScanSnap (TM) 4.1 "{FBB54D98-B6A4-412E-A8AB-2BA2825A70E6}" = Gestion commerciale "{FBB980B0-63F8-4B48-8D65-90F1D9F81D9F}" = NewCopy_CDA "Adobe Acrobat 5.0" = Adobe Acrobat 5.0 "Adobe Flash Player ActiveX" = Adobe Flash Player 11 ActiveX "Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin "BizFAXClient" = BizFAXClient "BusinessObjects 5.0" = BusinessObjects "DHL Connect v3.2" = DHL Connect v3.2 "FaxTalk Communicator 4.5" = FaxTalk Communicator 4.5 "HDMI" = Intel(R) Graphics Media Accelerator Driver "HECI" = Interface Intel Management Engine "HP LaserJet P3010 Series PCL 6" = HP LaserJet P3010 Series PCL 6 [HP LaserJet P3010 Series PCL 6_1, HP LaserJet P3010 Series PCL 6] "IDNMitigationAPIs" = Microsoft Internationalized Domain Names Mitigation APIs "ie7" = Windows Internet Explorer 7 "incoml177" = Logiciel Testo Comfort Basic testo 174/175/177 "InstallWIX_{45E557D F C620B4285AB0}" = Kaspersky Internet Security 2012 "Iomega StorCenter" = Iomega StorCenter "LiveReg" = LiveReg (Symantec Corporation) "LiveUpdate1.6" = LiveUpdate 1.6 (Symantec Corporation) "MESOL" = Technologie d administration active Intel "Microsoft.NET Framework 3.0" = Microsoft.NET Framework 3.0 "Microsoft.NET Framework 4 Client Profile" = Microsoft.NET Framework 4 Client Profile "Microsoft.NET Framework 4 Client Profile FRA Language Pack" = Module linguistique Microsoft.NET Framework 4 Client Profile FRA "Microsoft.NET Framework 4 Extended" = Microsoft.NET Framework 4 Extended "Microsoft.NET Framework 4 Extended FRA Language Pack" = Module linguistique Microsoft.NET Framework 4 Extended FRA "Mozilla Firefox (x86 fr)" = Mozilla Firefox (x86 fr) "MozillaMaintenanceService" = Mozilla Maintenance Service "NLSDownlevelMapping" = Microsoft National Language Support Downlevel APIs "PROPLUS" = Microsoft Office Professional Plus "PROSet" = Intel(R) PRO Network Connections Drivers "Super Flexible File Synchronizer_is1" = Super Flexible File Synchronizer 5.67 "TeamViewer 7" = TeamViewer 7 "VeryPDF PDF2Word v3.0_is1" = VeryPDF PDF2Word v3.0 Page 6

7 "WIC" = Windows Imaging Component "WinRAR archiver" = WinRAR archiver "XpsEPSC" = XML Paper Specification Shared Components Pack 1.0 [color=#e56717]========== Last 20 Event Log Errors ==========[/color] [ Application Events ] Error - 31/01/ :49:02 Computer Name = NAWAL Source = crypt32 ID = Error - 31/01/ :49:02 Computer Name = NAWAL Source = crypt32 ID = Error - 31/01/ :49:03 Computer Name = NAWAL Source = crypt32 ID = Error - 31/01/ :49:03 Computer Name = NAWAL Source = crypt32 ID = Error - 31/01/ :49:04 Computer Name = NAWAL Source = crypt32 ID = Error - 31/01/ :49:18 Computer Name = NAWAL Source = crypt32 ID = Description = Échec de la récupération de la mise à jour automatique du CAB de la liste racine tierce partie à partir de : avec l'erreur : The server name or address could not be resolved Error - 01/02/ :45:26 Computer Name = NAWAL Source = LMS ID = 2 Description = LMS Service cannot connect to HECI driver Error - 01/02/ :45:30 Computer Name = NAWAL Source = Intel(R) AMT ID = 2002 Description = [UNS] Failed to subscribe to local Intel(R) AMT. Error - 02/02/ :40:05 Computer Name = NAWAL Source = LMS ID = 2 Page 7

8 Description = LMS Service cannot connect to HECI driver Error - 02/02/ :40:12 Computer Name = NAWAL Source = Intel(R) AMT ID = 2002 Description = [UNS] Failed to subscribe to local Intel(R) AMT. [ OSession Events ] Error - 26/03/ :05:16 Computer Name = NAWAL Source = Microsoft Office 12 Sessions ID = 7001 Description = ID: 0, Application Name: Microsoft Office Word, Application Version: , Microsoft Office Version: This session lasted 112 seconds with 0 seconds of active time. This session ended with a crash. Error - 28/03/ :52:53 Computer Name = NAWAL Source = Microsoft Office 12 Sessions ID = 7001 Description = ID: 6, Application Name: Microsoft Office Outlook, Application Version: , Microsoft Office Version: This session lasted 265 seconds with 240 seconds of active time. This session ended with a crash. Error - 30/03/ :18:12 Computer Name = NAWAL Source = Microsoft Office 12 Sessions ID = 7001 Description = ID: 0, Application Name: Microsoft Office Word, Application Version: , Microsoft Office Version: This session lasted 858 seconds with 180 seconds of active time. This session ended with a crash. Error - 14/05/ :39:51 Computer Name = NAWAL Source = Microsoft Office 12 Sessions ID = 7001 Description = ID: 1, Application Name: Microsoft Office Excel, Application Version: , Microsoft Office Version: This session lasted seconds with 2700 seconds of active time. This session ended with a crash. [ System Events ] Error - 30/01/ :21:51 Computer Name = NAWAL Source = Service Control Description = Le service Installer Manager s'est arrêté avec l'erreur : %%2 Error - 31/01/ :44:44 Computer Name = NAWAL Source = HECI ID = Description = HECI driver has failed to perform handshake with the Firmware. Error - 31/01/ :46:08 Computer Name = NAWAL Source = Service Control Description = Le service eesbhrmm s'est arrêté avec l'erreur : %%2 Error - 31/01/ :46:08 Computer Name = NAWAL Source = Service Control Description = Le service Installer Manager s'est arrêté avec l'erreur : %%2 Error - 01/02/ :45:26 Computer Name = NAWAL Source = HECI ID = Description = HECI driver has failed to perform handshake with the Firmware. Error - 01/02/ :46:48 Computer Name = NAWAL Source = Service Control Description = Le service eesbhrmm s'est arrêté avec l'erreur : %%2 Error - 01/02/ :46:48 Computer Name = NAWAL Source = Service Control Description = Le service Installer Manager s'est arrêté avec l'erreur : %%2 Page 8

9 Error - 02/02/ :40:06 Computer Name = NAWAL Source = HECI ID = Description = HECI driver has failed to perform handshake with the Firmware. Error - 02/02/ :41:28 Computer Name = NAWAL Source = Service Control Description = Le service eesbhrmm s'est arrêté avec l'erreur : %%2 Error - 02/02/ :41:28 Computer Name = NAWAL Source = Service Control Description = Le service Installer Manager s'est arrêté avec l'erreur : %%2 < End of report > Page 9