[color=#e56717]========== Extra Registry (SafeList) ==========[/color]

OTL Extras logfile created on: 02/02/2013 10:59:39 - Run 1 OTL by OldTimer - Version 3.2.69.0 Folder = C:\WINDOWS\Profiles\nawal\Bureau Windows XP Professional Edition Service Pack 2 (Version = 5.1.2600) - Type = NTWorkstation Internet Explorer (Version = 7.0.5730.13) Locale: 0000040C Country: France Language: FRA Date Format: dd/mm/yyyy 1,99 Gb Total Physical Memory 1,07 Gb Available Physical Memory 53,79% Memory free 3,83 Gb Paging File 2,87 Gb Available in Paging File 74,75% Paging File free Paging file location(s): c:\pagefile.sys 2046 4092 [binary data] %SystemDrive% = C: %SystemRoot% = C:\WINDOWS %ProgramFiles% = C:\Program Files Drive C: 195,31 Gb Total Space 142,58 Gb Free Space 73,00% Space Free Partition Type: NTFS Drive D: 195,31 Gb Total Space 191,79 Gb Free Space 98,20% Space Free Partition Type: NTFS Drive E: 205,54 Gb Total Space 126,95 Gb Free Space 61,76% Space Free Partition Type: NTFS Computer Name: NAWAL User Name: nawal Logged in as Administrator. Boot Mode: Normal Scan Mode: All users Company Name Whitelist: Off Skip Microsoft Files: Off No Company Name Whitelist: On File Age = 30 Days [color=#e56717]========== Extra Registry (SafeList) ==========[/color] [color=#e56717]========== File Associations ==========[/color] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>].cpl [@ = cplfile] -- rundll32.exe shell32.dll,control_rundll "%1",%*.html [@ = ChromeHTML] -- Reg Error: Key error. File not found.url [@ = InternetShortcut] -- rundll32.exe ieframe.dll,openurl %l [HKEY_USERS\S-1-5-21-303113798-1345355644-3440997800-1126\SOFTWARE\Classes\<exte nsion>].html [@ = FirefoxHTML] -- C:\WINDOWS\Profiles\nawal\Local Settings\Application Data\Mozilla Firefox\firefox.exe (Mozilla Corporation) [color=#e56717]========== Shell Spawning ==========[/color] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command] batfile [open] -- "%1" %* cmdfile [open] -- "%1" %* comfile [open] -- "%1" %* cplfile [cplopen] -- rundll32.exe shell32.dll,control_rundll "%1",%* exefile [open] -- "%1" %* htmlfile [edit] -- Reg Error: Key error. http [open] -- Reg Error: Key error. https [open] -- Reg Error: Key error. InternetShortcut [open] -- rundll32.exe ieframe.dll,openurl %l piffile [open] -- "%1" %* regfile [merge] -- Reg Error: Key error. scrfile [config] -- "%1" scrfile [install] -- rundll32.exe desk.cpl,installscreensaver %l scrfile [open] -- "%1" /S txtfile [edit] -- Reg Error: Key error. Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1 Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Folder [open] -- %SystemRoot%\Explorer.exe /idlist,%i,%l (Microsoft Corporation) Folder [explore] -- %SystemRoot%\Explorer.exe /e,/idlist,%i,%l (Microsoft Corporation) Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) [color=#e56717]========== Security Center Settings ==========[/color] Page 1

Center] "FirstRunDisabled" = 1 "AntiVirusDisableNotify" = 0 "FirewallDisableNotify" = 0 "UpdatesDisableNotify" = 0 "AntiVirusOverride" = 0 "FirewallOverride" = 0 Center\Monitoring] Center\Monitoring\AhnlabAntiVirus] Center\Monitoring\ComputerAssociatesAntiVirus] Center\Monitoring\KasperskyAntiVirus] "DisableMonitoring" = 1 Center\Monitoring\McAfeeAntiVirus] Center\Monitoring\McAfeeFirewall] Center\Monitoring\PandaAntiVirus] Center\Monitoring\PandaFirewall] Center\Monitoring\SophosAntiVirus] Center\Monitoring\SymantecAntiVirus] Center\Monitoring\SymantecFirewall] Center\Monitoring\TinyFirewall] Center\Monitoring\TrendAntiVirus] Center\Monitoring\TrendFirewall] Center\Monitoring\ZoneLabsFirewall] [color=#e56717]========== System Restore Settings ==========[/color] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore] "DisableSR" = 0 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Sr] "Start" = 0 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SrService] "Start" = 2 [color=#e56717]========== Firewall Settings ==========[/color] rewallpolicy\domainprofile] "EnableFirewall" = 0 Page 2

rewallpolicy\domainprofile\globallyopenports\list] "139:TCP" = 139:TCP:*:Enabled:@xpsp2res.dll,-22004 "445:TCP" = 445:TCP:*:Enabled:@xpsp2res.dll,-22005 "137:UDP" = 137:UDP:*:Enabled:@xpsp2res.dll,-22001 "138:UDP" = 138:UDP:*:Enabled:@xpsp2res.dll,-22002 "4847:TCP" = 4847:TCP:*:Enabled:vophz rewallpolicy\standardprofile] "EnableFirewall" = 0 "DisableNotifications" = 0 rewallpolicy\standardprofile\globallyopenports\list] "4847:TCP" = 4847:TCP:*:Enabled:vophz "139:TCP" = 139:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22004 "445:TCP" = 445:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22005 "137:UDP" = 137:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22001 "138:UDP" = 138:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22002 [color=#e56717]========== Authorized Applications List ==========[/color] rewallpolicy\domainprofile\authorizedapplications\list] "%windir%\system32\sessmgr.exe" = %windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019 -- (Microsoft Corporation) "C:\Program Files\Iomega StorCenter\sohoclient.exe" = C:\Program Files\Iomega StorCenter\sohoclient.exe:*:Enabled:Storage Manager 2.1.15.48076 -- (EMC) "C:\Program Files\Yeastar\BizFAXClient\BizFAX.exe" = C:\Program Files\Yeastar\BizFAXClient\BizFAX.exe:*:Enabled:BizFAX Client -- (YEASTAR) "C:\Program Files\LMM Order Entry\UpdatSoft.exe" = C:\Program Files\LMM Order Entry\UpdatSoft.exe:*:Enabled:UpdatSoft -- (ORNIS) "G:\setup\hppniprint01.exe" = G:\setup\hppniprint01.exe:*:Enabled:hppniprint01.exe "G:\setup\hppniprint64.exe" = G:\setup\hppniprint64.exe:*:Enabled:hppniprint64.exe "G:\setup\hppnicifs01.exe" = G:\setup\hppnicifs01.exe:*:Enabled:hppnicifs01.exe "G:\setup\hpbtpg.exe" = G:\setup\hpbtpg.exe:*:Enabled:hpbtpg.exe "G:\setup\LaunchApp.exe" = G:\setup\LaunchApp.exe:*:Enabled:launchapp.exe "C:\Program Files\Skype\Phone\Skype.exe" = C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype -- (Skype Technologies S.A.) "C:\Program Files\TeamViewer\Version7\TeamViewer.exe" = C:\Program Files\TeamViewer\Version7\TeamViewer.exe:*:Enabled:Teamviewer Remote Control Application -- (TeamViewer GmbH) "C:\Program Files\TeamViewer\Version7\TeamViewer_Service.exe" = C:\Program Files\TeamViewer\Version7\TeamViewer_Service.exe:*:Enabled:Teamviewer Remote Control Service -- (TeamViewer GmbH) "C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE" = C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook -- (Microsoft Corporation) rewallpolicy\standardprofile\authorizedapplications\list] "%windir%\system32\sessmgr.exe" = %windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019 -- (Microsoft Corporation) "C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe" = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe:*:Enabled:hpqtra08.exe "C:\Program Files\HP\Digital Imaging\bin\hpqste08.exe" = C:\Program Files\HP\Digital Imaging\bin\hpqste08.exe:*:Enabled:hpqste08.exe -- (Hewlett-Packard Development Company, L.P.) "C:\Program Files\HP\Digital Imaging\bin\hpofxm08.exe" = C:\Program Files\HP\Digital Imaging\bin\hpofxm08.exe:*:Enabled:hpofxm08.exe -- "C:\Program Files\HP\Digital Imaging\bin\hposfx08.exe" = C:\Program Files\HP\Digital Imaging\bin\hposfx08.exe:*:Enabled:hposfx08.exe -- Page 3

"C:\Program Files\HP\Digital Imaging\bin\hposid01.exe" = C:\Program Files\HP\Digital Imaging\bin\hposid01.exe:*:Enabled:hposid01.exe -- "C:\Program Files\HP\Digital Imaging\bin\hpqscnvw.exe" = C:\Program Files\HP\Digital Imaging\bin\hpqscnvw.exe:*:Enabled:hpqscnvw.exe -- () "C:\Program Files\HP\Digital Imaging\bin\hpqkygrp.exe" = C:\Program Files\HP\Digital Imaging\bin\hpqkygrp.exe:*:Enabled:hpqkygrp.exe -- (Hewlett-Packard) "C:\Program Files\HP\Digital Imaging\bin\hpqCopy.exe" = C:\Program Files\HP\Digital Imaging\bin\hpqCopy.exe:*:Enabled:hpqcopy.exe -- "C:\Program Files\HP\Digital Imaging\bin\hpfccopy.exe" = C:\Program Files\HP\Digital Imaging\bin\hpfccopy.exe:*:Enabled:hpfccopy.exe "C:\Program Files\HP\Digital Imaging\bin\hpzwiz01.exe" = C:\Program Files\HP\Digital Imaging\bin\hpzwiz01.exe:*:Enabled:hpzwiz01.exe -- "C:\Program Files\HP\Digital Imaging\Unload\HpqPhUnl.exe" = C:\Program Files\HP\Digital Imaging\Unload\HpqPhUnl.exe:*:Enabled:hpqphunl.exe "C:\Program Files\HP\Digital Imaging\Unload\HpqDIA.exe" = C:\Program Files\HP\Digital Imaging\Unload\HpqDIA.exe:*:Enabled:hpqdia.exe "C:\Program Files\HP\Digital Imaging\bin\hpoews01.exe" = C:\Program Files\HP\Digital Imaging\bin\hpoews01.exe:*:Enabled:hpoews01.exe -- "C:\Program Files\HP\Digital Imaging\bin\hpqnrs08.exe" = C:\Program Files\HP\Digital Imaging\bin\hpqnrs08.exe:*:Enabled:hpqnrs08.exe -- (Hewlett-Packard Development Company, L.P.) "F:\setup\hppniprint01.exe" = F:\setup\hppniprint01.exe:*:Enabled:hppniprint01.exe "F:\setup\hppniprint64.exe" = F:\setup\hppniprint64.exe:*:Enabled:hppniprint64.exe "F:\setup\hppnicifs01.exe" = F:\setup\hppnicifs01.exe:*:Enabled:hppnicifs01.exe "F:\setup\hpbtpg.exe" = F:\setup\hpbtpg.exe:*:Enabled:hpbtpg.exe "F:\setup\LaunchApp.exe" = F:\setup\LaunchApp.exe:*:Enabled:launchapp.exe "C:\Program Files\Retrospect\Retrospect Express HD 2.5\Retrospect.exe" = C:\Program Files\Retrospect\Retrospect Express HD 2.5\Retrospect.exe:*:Enabled:Retrospect Express HD -- (EMC Corporation) "C:\Program Files\Retrospect\Retrospect Express HD 2.5\retrorun.exe" = C:\Program Files\Retrospect\Retrospect Express HD 2.5\retrorun.exe:*:Enabled:Retrospect Express HD Launcher service -- (EMC Corporation) "C:\Program Files\Iomega StorCenter\sohoclient.exe" = C:\Program Files\Iomega StorCenter\sohoclient.exe:*:Enabled:Storage Manager 2.1.15.48076 -- (EMC) [color=#e56717]========== HKEY_LOCAL_MACHINE Uninstall List ==========[/color] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "{043F86B7-EE12-3399-B2CA-D0B603D87963}" = Microsoft.NET Framework 4 Extended FRA Language Pack "{06C4BA69-5210-4707-B5BE-E26D487E1854}" = HP LaserJet P3010 Series Guide d'utilisation "{0A0CADCF-78DA-33C4-A350-CD51849B9702}" = Microsoft.NET Framework 4 Extended "{0F5B4A82-9DAF-3D13-8CB8-AEB25E4A614E}" = Microsoft.NET Framework 4 Client Profile FRA Language Pack "{10907305-D815-486F-8F79-81DA53462469}" = Gestion commerciale "{11B83AD3-7A46-4C2E-A568-9505981D4C6F}" = HP Update "{13E7F4A4-33A0-16B0-6486-FAA38C2A7067}" = Nero 7 "{14DE1C26-6CD6-4FC5-B444-BB52B0F9702E}" = Gestion commerciale "{15095BF3-A3D7-4DDF-B193-3A496881E003}" = Microsoft.NET Framework 3.0 "{1E0BC1A6-A667-40E5-B265-F9BD60F48B17}" = Gestion commerciale "{23B35809-5E4A-4F14-8332-1CDEDDFAC089}" = CP_Package_Variety2 "{2614F54E-A828-49FA-93BA-45A3F756BFAA}" = 32 Bit HP CIO Components Installer "{2CC5FCAE-51BA-4926-8C2B-4F07E54F6EA3}" = ScanSnap "{303350C8-39A5-4D22-8D73-0BAE461D6E8F}" = Biomnis "{33FA49FF-93D9-43BD-96FA-666F6C94A48A}" = Gestion commerciale "{350C940c-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP "{37BE1787-21E4-4B84-BA52-DB4A61F1C3A7}" = Sage 100 Gestion commerciale pour SQL Page 4

Server "{3C3901C5-3455-3E0A-A214-0B093A5070A6}" = Microsoft.NET Framework 4 Client Profile "{3F4B59A4-58A0-4A48-B397-CD428C270BFF}" = Gestion commerciale "{43EA3AB2-FDD2-4B2F-B58C-8694C1905648}" = FileCryptSnmp "{4525B8B9-468B-4BF8-B5CE-464FBE450BED}" = Gestion commerciale "{45E557D6-2271-4F13-8101-C620B4285AB0}" = Kaspersky Internet Security 2012 "{491DD792-AD81-429C-9EB4-86DD3D22E333}" = Windows Communication Foundation "{49E22FA8-C46A-43DF-996D-B48CD82628A9}" = Gestion commerciale "{4C4D61F0-DBC9-41D8-B52E-ADF6CF7CE210}" = Comptabilité "{4FDE7114-EE73-447D-A7DA-90BEBCCA2A4E}" = Sage 100 Comptabilité pour SQL Server "{518E2BDB-B09C-4DC5-A02D-45AC4B2AAADF}" = Gestion commerciale "{522D1D79-9C0A-4361-91F8-2AFF8EC6C2E1}" = CP_Package_Variety1 "{55E63724-2BFE-49BC-B03E-9BE0F62E18C2}" = ScanSnap Organizer "{56723421-86B5-4652-B86B-E499916E836A}" = Comptabilité "{61B1A9C8-B2AD-4F54-B916-388FFD07BDE7}" = 4300 "{68763C27-235D-4165-A961-FDEA228CE504}" = AiOSoftwareNPI "{6C47F3E1-1C1F-466B-A9BA-D7112DF0BE18}" = Gestion commerciale "{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable "{736C803C-DD3B-4015-BC51-AFB9E67B9076}" = Readme "{7D1B85BD-AA07-48B8-808D-67A4067FC6BD}" = Windows Workflow Foundation "{7E7B7865-6C80-4373-8BC1-C2EB9431F9DE}" = ProductContextNPI "{81FB513B-1007-4CE5-A716-41229A42367E}" = Sage 100 Gestion Commerciale Edition Pilotée pour SQL Server "{8DCD0779-8811-4060-9227-871E2FD48E45}" = CardMinder V4.1 "{90120000-0010-040C-0000-0000000FF1CE}" = Microsoft Software Update for Web Folders (French) 12 "{90120000-0011-0000-0000-0000000FF1CE}" = Microsoft Office Professional Plus "{90120000-0015-040C-0000-0000000FF1CE}" = Microsoft Office Access MUI (French) "{90120000-0016-040C-0000-0000000FF1CE}" = Microsoft Office Excel MUI (French) "{90120000-0018-040C-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (French) "{90120000-0019-040C-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (French) "{90120000-001A-040C-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (French) "{90120000-001B-040C-0000-0000000FF1CE}" = Microsoft Office Word MUI (French) "{90120000-001F-0401-0000-0000000FF1CE}" = Microsoft Office Proof (Arabic) "{90120000-001F-0407-0000-0000000FF1CE}" = Microsoft Office Proof (German) "{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) "{90120000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) "{90120000-001F-0413-0000-0000000FF1CE}" = Microsoft Office Proof (Dutch) "{90120000-001F-0C0A-0000-0000000FF1CE}" = Microsoft Office Proof (Spanish) "{90120000-002C-040C-0000-0000000FF1CE}" = Microsoft Office Proofing (French) "{90120000-0044-040C-0000-0000000FF1CE}" = Microsoft Office InfoPath MUI (French) "{90120000-006E-040C-0000-0000000FF1CE}" = Microsoft Office Shared MUI (French) "{90FF23FE-0E1B-40DF-A22E-B4C0372E5936}" = Iomega Product Registration "{9B2BB60D-A092-47B7-855E-91F6E3461402}" = Arcana Scheduler "{9C7E944F-4502-40B8-A0AB-66B2FA9EE829}" = Microsoft SQL Server Native Client "{9E397C06-75DF-4978-91BD-ADB980839D09}" = Sage 100 pour SQL Server poste Client "{9E60B26C-3760-4B94-853A-B3206CD94BB3}" = Comptabilité "{A4C1208B-88E7-46F0-A205-17E0F6612349}" = Comptabilité "{A744C7C3-76F5-42F5-9E15-497A3DFBC709}" = 4300Trb "{AC76BA86-1033-F400-BA7E-000000000004}" = Adobe Acrobat 9 Standard - English, Français, Deutsch "{AC76BA86-1033-F400-BA7E-000000000004}_953" = Adobe Acrobat 9.5.3 - CPSID_83708 "{AC76BA86-1033-F400-BA7E-000000000004}{AC76BA86-1033-F400-BA7E-000000000004}" = Adobe Acrobat 9 Standard - English, Français, Deutsch "{AC76BA86-7AD7-1036-7B44-A70800000002}" = Adobe Reader 7.0.8 - Français "{B508B3F1-A24A-32C0-B310-85786919EF28}" = Microsoft.NET Framework 2.0 Service Page 5

Pack 1 "{B57F2FF0-5A25-4332-B503-4592B370C02F}" = CP_Package_Variety3 "{BAF78226-3200-4DB4-BE33-4D922A799840}" = Windows Presentation Foundation "{BCC57687-98A2-4C4C-B0F8-BC6B6F52D4E3}" = Retrospect Express HD 2.5 "{BCE46757-7674-4416-BEDB-68205A60409E}" = CanoScan Toolbox 4.1 "{C2597D76-5322-4719-92EC-E58EC39F9F7B}" = Sage 100 pour SQL Server poste Client "{C5AFBBBB-3BC8-40EB-A06C-68C0C8F7BB62}" = Gestion commerciale "{C6812939-B117-48E6-A3BA-1709C14A3C8C}" = Scan "{C8753E28-2680-49BF-BD48-DD38FD086EFE}" = AiO_Scan_CDA "{C9D312C8-E3EC-4478-A3FF-93B65E077DC3}" = Sage 100 pour SQL Server poste Client "{CB71331A-9DCE-4A0D-B527-FD96BD5CFC4A}" = HP LaserJet P3010 Series Polices d'écran "{CEBE9CD4-7F02-4876-BBA4-41A53711F53F}" = Gestion commerciale "{D4F2AFD3-0167-4464-B92F-78AB6DA8A0AA}" = CardMinder "{D8488C28-A96C-419E-841D-24FA720A8841}" = Comptabilité "{DBCDB997-EEEB-4BE9-BAFF-26B4094DBDE6}" = ScanSnap Manager "{DC3483D1-D77B-4095-BBAF-78CA734CE68A}" = Sage 100 Comptabilité Edition Pilotée pour SQL Server "{E075E39D-BCA8-4C37-A8D1-AD4F857CBE77}" = Comptabilité "{E36AC2C1-0CEB-4AC3-9408-3564EEA9C076}" = Gestion commerciale "{E58F3B88-3B3E-4F85-9323-04789D979C15}" = ScanSnap Organizer "{E5A8DDAB-AE80-48C6-A75B-D0FAB83B299D}" = HP PSC & OfficeJet 6.1.A "{E769999E-D0D9-4D51-AEFE-1BD44289E550}" = 4300_Help "{EE7257A2-39A2-4D2F-9DAC-F9F25B8AE1D8}" = Skype 5.10 "{F0F1158A-2695-409E-92B7-D20C18EB23A3}" = LMM Order Entry "{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver "{F45B3B64-610D-4AA1-AE25-3AF4C1A029B7}" = Gestion commerciale "{F6076EF9-08E1-442F-B6A2-BFB61B295A14}" = Fax_CDA "{FB400000-0002-0000-0000-074957833700}" = ABBYY FineReader for ScanSnap (TM) 4.1 "{FBB54D98-B6A4-412E-A8AB-2BA2825A70E6}" = Gestion commerciale "{FBB980B0-63F8-4B48-8D65-90F1D9F81D9F}" = NewCopy_CDA "Adobe Acrobat 5.0" = Adobe Acrobat 5.0 "Adobe Flash Player ActiveX" = Adobe Flash Player 11 ActiveX "Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin "BizFAXClient" = BizFAXClient "BusinessObjects 5.0" = BusinessObjects 5.1.9 "DHL Connect v3.2" = DHL Connect v3.2 "FaxTalk Communicator 4.5" = FaxTalk Communicator 4.5 "HDMI" = Intel(R) Graphics Media Accelerator Driver "HECI" = Interface Intel Management Engine "HP LaserJet P3010 Series PCL 6" = HP LaserJet P3010 Series PCL 6 [HP LaserJet P3010 Series PCL 6_1, HP LaserJet P3010 Series PCL 6] "IDNMitigationAPIs" = Microsoft Internationalized Domain Names Mitigation APIs "ie7" = Windows Internet Explorer 7 "incoml177" = Logiciel Testo Comfort Basic testo 174/175/177 "InstallWIX_{45E557D6-2271-4F13-8101-C620B4285AB0}" = Kaspersky Internet Security 2012 "Iomega StorCenter" = Iomega StorCenter "LiveReg" = LiveReg (Symantec Corporation) "LiveUpdate1.6" = LiveUpdate 1.6 (Symantec Corporation) "MESOL" = Technologie d administration active Intel "Microsoft.NET Framework 3.0" = Microsoft.NET Framework 3.0 "Microsoft.NET Framework 4 Client Profile" = Microsoft.NET Framework 4 Client Profile "Microsoft.NET Framework 4 Client Profile FRA Language Pack" = Module linguistique Microsoft.NET Framework 4 Client Profile FRA "Microsoft.NET Framework 4 Extended" = Microsoft.NET Framework 4 Extended "Microsoft.NET Framework 4 Extended FRA Language Pack" = Module linguistique Microsoft.NET Framework 4 Extended FRA "Mozilla Firefox 18.0.1 (x86 fr)" = Mozilla Firefox 18.0.1 (x86 fr) "MozillaMaintenanceService" = Mozilla Maintenance Service "NLSDownlevelMapping" = Microsoft National Language Support Downlevel APIs "PROPLUS" = Microsoft Office Professional Plus "PROSet" = Intel(R) PRO Network Connections Drivers "Super Flexible File Synchronizer_is1" = Super Flexible File Synchronizer 5.67 "TeamViewer 7" = TeamViewer 7 "VeryPDF PDF2Word v3.0_is1" = VeryPDF PDF2Word v3.0 Page 6

"WIC" = Windows Imaging Component "WinRAR archiver" = WinRAR archiver "XpsEPSC" = XML Paper Specification Shared Components Pack 1.0 [color=#e56717]========== Last 20 Event Log Errors ==========[/color] [ Application Events ] Error - 31/01/2013 05:49:02 Computer Name = NAWAL Source = crypt32 ID = Error - 31/01/2013 05:49:02 Computer Name = NAWAL Source = crypt32 ID = Error - 31/01/2013 05:49:03 Computer Name = NAWAL Source = crypt32 ID = Error - 31/01/2013 05:49:03 Computer Name = NAWAL Source = crypt32 ID = Error - 31/01/2013 05:49:04 Computer Name = NAWAL Source = crypt32 ID = Error - 31/01/2013 05:49:18 Computer Name = NAWAL Source = crypt32 ID = 131075 Description = Échec de la récupération de la mise à jour automatique du CAB de la liste racine tierce partie à partir de : avec l'erreur : The server name or address could not be resolved Error - 01/02/2013 04:45:26 Computer Name = NAWAL Source = LMS ID = 2 Description = LMS Service cannot connect to HECI driver Error - 01/02/2013 04:45:30 Computer Name = NAWAL Source = Intel(R) AMT ID = 2002 Description = [UNS] Failed to subscribe to local Intel(R) AMT. Error - 02/02/2013 04:40:05 Computer Name = NAWAL Source = LMS ID = 2 Page 7

Description = LMS Service cannot connect to HECI driver Error - 02/02/2013 04:40:12 Computer Name = NAWAL Source = Intel(R) AMT ID = 2002 Description = [UNS] Failed to subscribe to local Intel(R) AMT. [ OSession Events ] Error - 26/03/2012 15:05:16 Computer Name = NAWAL Source = Microsoft Office 12 Sessions ID = 7001 Description = ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.4518.1014, Microsoft Office Version: 12.0.6514.5001. This session lasted 112 seconds with 0 seconds of active time. This session ended with a crash. Error - 28/03/2012 08:52:53 Computer Name = NAWAL Source = Microsoft Office 12 Sessions ID = 7001 Description = ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.4518.1014, Microsoft Office Version: 12.0.6514.5001. This session lasted 265 seconds with 240 seconds of active time. This session ended with a crash. Error - 30/03/2012 07:18:12 Computer Name = NAWAL Source = Microsoft Office 12 Sessions ID = 7001 Description = ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.4518.1014, Microsoft Office Version: 12.0.6514.5001. This session lasted 858 seconds with 180 seconds of active time. This session ended with a crash. Error - 14/05/2012 10:39:51 Computer Name = NAWAL Source = Microsoft Office 12 Sessions ID = 7001 Description = ID: 1, Application Name: Microsoft Office Excel, Application Version: 12.0.4518.1014, Microsoft Office Version: 12.0.6514.5001. This session lasted 24556 seconds with 2700 seconds of active time. This session ended with a crash. [ System Events ] Error - 30/01/2013 04:21:51 Computer Name = NAWAL Source = Service Control Description = Le service Installer Manager s'est arrêté avec l'erreur : %%2 Error - 31/01/2013 04:44:44 Computer Name = NAWAL Source = HECI ID = 458755 Description = HECI driver has failed to perform handshake with the Firmware. Error - 31/01/2013 04:46:08 Computer Name = NAWAL Source = Service Control Description = Le service eesbhrmm s'est arrêté avec l'erreur : %%2 Error - 31/01/2013 04:46:08 Computer Name = NAWAL Source = Service Control Description = Le service Installer Manager s'est arrêté avec l'erreur : %%2 Error - 01/02/2013 04:45:26 Computer Name = NAWAL Source = HECI ID = 458755 Description = HECI driver has failed to perform handshake with the Firmware. Error - 01/02/2013 04:46:48 Computer Name = NAWAL Source = Service Control Description = Le service eesbhrmm s'est arrêté avec l'erreur : %%2 Error - 01/02/2013 04:46:48 Computer Name = NAWAL Source = Service Control Description = Le service Installer Manager s'est arrêté avec l'erreur : %%2 Page 8

Error - 02/02/2013 04:40:06 Computer Name = NAWAL Source = HECI ID = 458755 Description = HECI driver has failed to perform handshake with the Firmware. Error - 02/02/2013 04:41:28 Computer Name = NAWAL Source = Service Control Description = Le service eesbhrmm s'est arrêté avec l'erreur : %%2 Error - 02/02/2013 04:41:28 Computer Name = NAWAL Source = Service Control Description = Le service Installer Manager s'est arrêté avec l'erreur : %%2 < End of report > Page 9