Tom's Guide > Forum > Sécurité - Virus > comment bloquer l'acces a mon pc ???

comment bloquer l'acces a mon pc ???

Forum Sécurité - Virus : comment bloquer l'acces a mon pc ???

TomsGuide.com : 800 000 inscrits répondent à toutes vos questions high-tech et informatique. Pour obtenir de l'aide, inscrivez-vous gratuitement !
Mot :    Pseudo :           
 

Salut

Depuis que j'ai installer ma freebox hier ( non sans avoir patienter un mois !!!) je me fais attaquer de toutes part, suis je parano ou est- normal (j 'ai juste la version gratos de zone alarm qui me dit que des intrusions ont étés bloquées).

Merci de vos réponses car je pense que moi et mon pc on va pas tenir longtemps lol

Liens sponsorisés
Inscrivez-vous ou connectez-vous pour masquer ceci.

Bonjour,

Si tu n'étais pas protégé lors de ta connection, j'ai peur de voir le résultat....


Fais bien TOUT ce qui suit.

- Télécharge Hijackthis de Merjin.
- Mets le dans un dossier ou sur ton bureau.
-- Clique Droit sur Hijackthis :
-> Choisis "Renommer"
-> Tape Scanner.exe puis valide.

- Lance l'application
- Choisis l'option "Do a system scan and save a logfile"
-- Le Bloc-Notes s'ouvre :
-> Edition / Sélectionner Tout
-> Edition / Copier

- Colle le rapport ici.

Aide sur Hijackthis

------------------------------ Prévention & Protection||Vous m'aimez ? Cliquez :o
Répondre à Angeldark

salut voici le resultat

Logfile of HijackThis v1.99.1
Scan saved at 14:45:04, on 19/11/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Acer\eManager\anbmServ.exe
C:\Program Files\Cisco Systems\VPN Client\cvpnd.exe
C:\Program Files\Symantec AntiVirus\DefWatch.exe
C:\WINDOWS\System32\FTRTSVC.exe
C:\WINDOWS\System32\GEARSec.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe
C:\Program Files\lotus\notes\ntmulti.exe
C:\Program Files\Symantec\Norton Ghost\Agent\PQV2iSvc.exe
C:\Program Files\Symantec AntiVirus\SavRoam.exe
C:\Program Files\Symantec AntiVirus\Rtvscan.exe
C:\Program Files\RealVNC\VNC4\WinVNC4.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\igfxtray.exe
C:\WINDOWS\system32\hkcmd.exe
C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
C:\WINDOWS\system32\rundll32.exe
C:\acer\epm\epm-dm.exe
C:\Program Files\Launch Manager\QtZgAcer.EXE
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe
C:\PROGRA~1\SYMANT~1\VPTray.exe
C:\Program Files\Symantec\Norton Ghost\Agent\GhostTray.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\MSN Messenger\MsnMsgr.Exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\WinZip\WZQKPICK.EXE
C:\Program Files\acer\eRecovery\Monitor.exe
C:\Program Files\Google\GoogleToolbarNotifier\1.2.908.5008\GoogleToolbarNotifier.exe
C:\Program Files\lotus\notes\NLNOTES.EXE
C:\Program Files\lotus\notes\ntaskldr.EXE
C:\Program Files\Internet Explorer\iexplore.exe
C:\PROGRA~1\WINZIP\winzip32.exe
C:\Documents and Settings\til\Local Settings\Temp\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://intranet.lgs-net.com
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://global.acer.com/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer provided by Leica Geosystems
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar3.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar3.dll
O4 - HKLM\..\Run: [LaunchApp] Alaunch
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [MSPY2002] C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe /SYNC
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [EPM-DM] c:\acer\epm\epm-dm.exe
O4 - HKLM\..\Run: [ePowerManagement] C:\Acer\ePM\ePM.exe boot
O4 - HKLM\..\Run: [LManager] C:\Program Files\Launch Manager\QtZgAcer.EXE
O4 - HKLM\..\Run: [eRecoveryService] C:\Windows\System32\Check.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [vptray] C:\PROGRA~1\SYMANT~1\VPTray.exe
O4 - HKLM\..\Run: [Norton Ghost 9.0] C:\Program Files\Symantec\Norton Ghost\Agent\GhostTray.exe
O4 - HKLM\..\Run: [OBSWATCH] C:\PROGRA~1\ORANGEBS\Watch.exe
O4 - HKLM\..\Run: [Synchronization Manager] %SystemRoot%\system32\mobsync.exe /logon
O4 - HKLM\..\Run: [AdslTaskBar] rundll32.exe stmctrl.dll,TaskBar
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\1.0.720.3640\GoogleToolbarNotifier.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: Post-it® Software Notes Lite.lnk = C:\Program Files\3M\PSN2Lite\Psn2Lite.exe
O4 - Global Startup: WinZip Quick Pick.lnk = C:\Program Files\WinZip\WZQKPICK.EXE
O4 - Global Startup: Cisco Systems VPN Client.lnk = C:\Program Files\Cisco Systems\VPN Client\vpngui.exe
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O14 - IERESET.INF: START_PAGE_URL=http://intranet.lgs-net.com
O16 - DPF: {09C21411-B9A2-4DE6-8416-4E3B58577BE0} (France Telecom MDM ActiveX Control) - http://minitelweb.minitel.com/imin_data/ocx/MDM.cab
O16 - DPF: {1F83CD9E-505E-4F87-BECE-0832A763E36F} (Image Uploader 3.0 Control) - http://www.mypixmania.com/importer/MypixUploader.cab
O16 - DPF: {8F0DF9DB-AA5A-4ED0-9176-1C4A9C762C59} (JNILoader Control) - http://sametime.lgs-net.com/sameti [...] Loader.cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/ [...] loader.cab
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: Domain = frgen.lgs-net.com
O17 - HKLM\Software\..\Telephony: DomainName = frgen.lgs-net.com
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: Domain = frgen.lgs-net.com
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
O20 - Winlogon Notify: NavLogon - C:\WINDOWS\system32\NavLogon.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O23 - Service: Notebook Manager Service (anbmService) - OSA Technologies Inc. - C:\Acer\eManager\anbmServ.exe
O23 - Service: BlackICE - Internet Security Systems, Inc. - C:\Program Files\ISS\issSensors\DesktopProtection\blackd.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe
O23 - Service: Cisco Systems, Inc. VPN Service (CVPND) - Cisco Systems, Inc. - C:\Program Files\Cisco Systems\VPN Client\cvpnd.exe
O23 - Service: Symantec AntiVirus Definition Watcher (DefWatch) - Symantec Corporation - C:\Program Files\Symantec AntiVirus\DefWatch.exe
O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom - C:\WINDOWS\System32\FTRTSVC.exe
O23 - Service: GEARSecurity - GEAR Software - C:\WINDOWS\System32\GEARSec.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Multi-user Cleanup Service - IBM Corp - C:\Program Files\lotus\notes\ntmulti.exe
O23 - Service: Norton Ghost - Symantec Corporation - C:\Program Files\Symantec\Norton Ghost\Agent\PQV2iSvc.exe
O23 - Service: RapApp - Internet Security Systems, Inc. - C:\Program Files\ISS\issSensors\DesktopProtection\RapApp.exe
O23 - Service: SAVRoam (SavRoam) - symantec - C:\Program Files\Symantec AntiVirus\SavRoam.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exe
O23 - Service: Symantec AntiVirus - Symantec Corporation - C:\Program Files\Symantec AntiVirus\Rtvscan.exe
O23 - Service: VNC Server Version 4 (WinVNC4) - Unknown owner - C:\Program Files\RealVNC\VNC4\WinVNC4.exe" -service (file missing)

Répondre à lolo69-88

Rien de méchant en réalité.

------------------------------ Prévention & Protection||Vous m'aimez ? Cliquez :o
Répondre à Angeldark

et ben tu touche toi c'est quoi ton taf!!!!
Et sinon y c'est passé quoi et il faut que je fasse quoi pour me protéger
Merci de ta reponse

Répondre à lolo69-88

Trop jeune pour un taf :)

Consulte cette page .

------------------------------ Prévention & Protection||Vous m'aimez ? Cliquez :o
Répondre à Angeldark

je me permet de te joindre ce petit fichier que j'ai vu apparaitre apres que mon vpn ce soit mis en noir (prise de main)

=== Verbose logging started: 17/11/2006 19:15:21 Build type: SHIP UNICODE 3.01.4000.2435 Calling process: C:\WINDOWS\system32\msiexec.exe ===
MSI (c) (A8:58) [19:15:21:109]: Resetting cached policy values
MSI (c) (A8:58) [19:15:21:109]: Machine policy value 'Debug' is 0
MSI (c) (A8:58) [19:15:21:109]: ******* RunEngine:
******* Product: d:\c1dedf6e674585cdb147\msxml.msi
******* Action:
******* CommandLine: **********
MSI (c) (A8:58) [19:15:21:109]: Client-side and UI is none or basic: Running entire install on the server.
MSI (c) (A8:58) [19:15:21:109]: Grabbed execution mutex.
MSI (c) (A8:58) [19:15:21:187]: Cloaking enabled.
MSI (c) (A8:58) [19:15:21:187]: Attempting to enable all disabled priveleges before calling Install on Server
MSI (c) (A8:58) [19:15:21:203]: Incrementing counter to disable shutdown. Counter after increment: 0
MSI (s) (38:74) [19:15:21:203]: Grabbed execution mutex.
MSI (s) (38:44) [19:15:21:203]: Resetting cached policy values
MSI (s) (38:44) [19:15:21:203]: Machine policy value 'Debug' is 0
MSI (s) (38:44) [19:15:21:203]: ******* RunEngine:
******* Product: d:\c1dedf6e674585cdb147\msxml.msi
******* Action:
******* CommandLine: **********
MSI (s) (38:44) [19:15:21:265]: Machine policy value 'DisableUserInstalls' is 0
MSI (s) (38:44) [19:15:21:312]: SOFTWARE RESTRICTION POLICY: Verifying package --> 'd:\c1dedf6e674585cdb147\msxml.msi' against software restriction policy
MSI (s) (38:44) [19:15:21:312]: SOFTWARE RESTRICTION POLICY: d:\c1dedf6e674585cdb147\msxml.msi has a digital signature
MSI (s) (38:44) [19:15:22:015]: SOFTWARE RESTRICTION POLICY: d:\c1dedf6e674585cdb147\msxml.msi is permitted to run at the 'unrestricted' authorization level.
MSI (s) (38:44) [19:15:22:015]: End dialog not enabled
MSI (s) (38:44) [19:15:22:093]: Original package ==> d:\c1dedf6e674585cdb147\msxml.msi
MSI (s) (38:44) [19:15:22:093]: Package we're running from ==> C:\WINDOWS\Installer\cb90fec.msi
MSI (s) (38:44) [19:15:22:312]: APPCOMPAT: looking for appcompat database entry with ProductCode '{37477865-A3F1-4772-AD43-AAFC6BCFF99F}'.
MSI (s) (38:44) [19:15:22:312]: APPCOMPAT: no matching ProductCode found in database.
MSI (s) (38:44) [19:15:22:375]: MSCOREE not loaded loading copy from system32
MSI (s) (38:44) [19:15:22:515]: Machine policy value 'TransformsSecure' is 0
MSI (s) (38:44) [19:15:22:515]: User policy value 'TransformsAtSource' is 0
MSI (s) (38:44) [19:15:22:515]: Machine policy value 'DisablePatch' is 0
MSI (s) (38:44) [19:15:22:515]: Machine policy value 'AllowLockdownPatch' is 0
MSI (s) (38:44) [19:15:22:515]: Machine policy value 'DisableLUAPatching' is 0
MSI (s) (38:44) [19:15:22:515]: Machine policy value 'DisableFlyWeightPatching' is 0
MSI (s) (38:44) [19:15:22:531]: APPCOMPAT: looking for appcompat database entry with ProductCode '{37477865-A3F1-4772-AD43-AAFC6BCFF99F}'.
MSI (s) (38:44) [19:15:22:531]: APPCOMPAT: no matching ProductCode found in database.
MSI (s) (38:44) [19:15:22:531]: Transforms are not secure.
MSI (s) (38:44) [19:15:22:531]: Command Line: REBOOT=ReallySuppress CURRENTDIRECTORY=d:\c1dedf6e674585cdb147 CLIENTUILEVEL=3 CLIENTPROCESSID=3752
MSI (s) (38:44) [19:15:22:531]: PROPERTY CHANGE: Adding PackageCode property. Its value is '{2B27DCD9-53FA-4885-B6CD-698623819F4C}'.
MSI (s) (38:44) [19:15:22:531]: Product Code passed to Engine.Initialize: ''
MSI (s) (38:44) [19:15:22:531]: Product Code from property table before transforms: '{37477865-A3F1-4772-AD43-AAFC6BCFF99F}'
MSI (s) (38:44) [19:15:22:531]: Product Code from property table after transforms: '{37477865-A3F1-4772-AD43-AAFC6BCFF99F}'
MSI (s) (38:44) [19:15:22:531]: Product not registered: beginning first-time install
MSI (s) (38:44) [19:15:22:531]: PROPERTY CHANGE: Adding ProductState property. Its value is '-1'.
MSI (s) (38:44) [19:15:22:531]: Entering CMsiConfigurationManager::SetLastUsedSource.
MSI (s) (38:44) [19:15:22:531]: User policy value 'SearchOrder' is 'nmu'
MSI (s) (38:44) [19:15:22:531]: Adding new sources is allowed.
MSI (s) (38:44) [19:15:22:531]: PROPERTY CHANGE: Adding PackagecodeChanging property. Its value is '1'.
MSI (s) (38:44) [19:15:22:531]: Package name extracted from package path: 'msxml.msi'
MSI (s) (38:44) [19:15:22:531]: Package to be registered: 'msxml.msi'
MSI (s) (38:44) [19:15:22:531]: Note: 1: 2729
MSI (s) (38:44) [19:15:22:562]: Note: 1: 2729
MSI (s) (38:44) [19:15:22:578]: Note: 1: 2262 2: AdminProperties 3: -2147287038
MSI (s) (38:44) [19:15:22:578]: Machine policy value 'DisableMsi' is 0
MSI (s) (38:44) [19:15:22:578]: Machine policy value 'AlwaysInstallElevated' is 0
MSI (s) (38:44) [19:15:22:578]: User policy value 'AlwaysInstallElevated' is 0
MSI (s) (38:44) [19:15:22:578]: Product installation will be elevated because user is admin and product is being installed per-machine.
MSI (s) (38:44) [19:15:22:578]: Running product '{37477865-A3F1-4772-AD43-AAFC6BCFF99F}' with elevated privileges: Product is assigned.
MSI (s) (38:44) [19:15:22:578]: PROPERTY CHANGE: Adding REBOOT property. Its value is 'ReallySuppress'.
MSI (s) (38:44) [19:15:22:578]: PROPERTY CHANGE: Adding CURRENTDIRECTORY property. Its value is 'd:\c1dedf6e674585cdb147'.
MSI (s) (38:44) [19:15:22:578]: PROPERTY CHANGE: Adding CLIENTUILEVEL property. Its value is '3'.
MSI (s) (38:44) [19:15:22:578]: PROPERTY CHANGE: Adding CLIENTPROCESSID property. Its value is '3752'.
MSI (s) (38:44) [19:15:22:578]: TRANSFORMS property is now:
MSI (s) (38:44) [19:15:22:578]: PROPERTY CHANGE: Adding VersionDatabase property. Its value is '200'.
MSI (s) (38:44) [19:15:22:578]: SHELL32::SHGetFolderPath returned: C:\WINDOWS\system32\config\systemprofile\Application Data
MSI (s) (38:44) [19:15:22:578]: SHELL32::SHGetFolderPath returned: C:\WINDOWS\system32\config\systemprofile\Favoris
MSI (s) (38:44) [19:15:22:578]: SHELL32::SHGetFolderPath returned: C:\WINDOWS\system32\config\systemprofile\Voisinage réseau
MSI (s) (38:44) [19:15:22:578]: SHELL32::SHGetFolderPath returned: C:\WINDOWS\system32\config\systemprofile\Mes documents
MSI (s) (38:44) [19:15:22:578]: SHELL32::SHGetFolderPath returned: C:\WINDOWS\system32\config\systemprofile\Voisinage d'impression
MSI (s) (38:44) [19:15:22:578]: SHELL32::SHGetFolderPath returned: C:\WINDOWS\system32\config\systemprofile\Recent
MSI (s) (38:44) [19:15:22:578]: SHELL32::SHGetFolderPath returned: C:\WINDOWS\system32\config\systemprofile\SendTo
MSI (s) (38:44) [19:15:22:578]: SHELL32::SHGetFolderPath returned: C:\WINDOWS\system32\config\systemprofile\Modèles
MSI (s) (38:44) [19:15:22:578]: SHELL32::SHGetFolderPath returned: C:\Documents and Settings\All Users\Application Data
MSI (s) (38:44) [19:15:22:593]: SHELL32::SHGetFolderPath returned: C:\WINDOWS\system32\config\systemprofile\Local Settings\Application Data
MSI (s) (38:44) [19:15:22:593]: SHELL32::SHGetFolderPath returned: C:\WINDOWS\system32\config\systemprofile\Mes documents\Mes images
MSI (s) (38:44) [19:15:22:593]: SHELL32::SHGetFolderPath returned: C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Outils d'administration
MSI (s) (38:44) [19:15:22:593]: SHELL32::SHGetFolderPath returned: C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage
MSI (s) (38:44) [19:15:22:593]: SHELL32::SHGetFolderPath returned: C:\Documents and Settings\All Users\Menu Démarrer\Programmes
MSI (s) (38:44) [19:15:22:593]: SHELL32::SHGetFolderPath returned: C:\Documents and Settings\All Users\Menu Démarrer
MSI (s) (38:44) [19:15:22:593]: SHELL32::SHGetFolderPath returned: C:\Documents and Settings\All Users\Bureau
MSI (s) (38:44) [19:15:22:593]: SHELL32::SHGetFolderPath returned: C:\WINDOWS\system32\config\systemprofile\Menu Démarrer\Programmes\Outils d'administration
MSI (s) (38:44) [19:15:22:593]: SHELL32::SHGetFolderPath returned: C:\WINDOWS\system32\config\systemprofile\Menu Démarrer\Programmes\Démarrage
MSI (s) (38:44) [19:15:22:593]: SHELL32::SHGetFolderPath returned: C:\WINDOWS\system32\config\systemprofile\Menu Démarrer\Programmes
MSI (s) (38:44) [19:15:22:593]: SHELL32::SHGetFolderPath returned: C:\WINDOWS\system32\config\systemprofile\Menu Démarrer
MSI (s) (38:44) [19:15:22:593]: SHELL32::SHGetFolderPath returned: C:\WINDOWS\system32\config\systemprofile\Bureau
MSI (s) (38:44) [19:15:22:609]: SHELL32::SHGetFolderPath returned: C:\Documents and Settings\All Users\Modèles
MSI (s) (38:44) [19:15:22:609]: SHELL32::SHGetFolderPath returned: C:\WINDOWS\Fonts
MSI (s) (38:44) [19:15:22:640]: Note: 1: 2898 2: MS Sans Serif 3: MS Sans Serif 4: 0 5: 16
MSI (s) (38:44) [19:15:22:640]: PROPERTY CHANGE: Adding Privileged property. Its value is '1'.
MSI (s) (38:44) [19:15:22:640]: Note: 1: 1402 2: HKEY_CURRENT_USER\Software\Microsoft\MS Setup (ACME)\User Info 3: 2
MSI (s) (38:44) [19:15:22:640]: PROPERTY CHANGE: Adding USERNAME property. Its value is 'Ghislain De Boishebe'.
MSI (s) (38:44) [19:15:22:640]: Note: 1: 1402 2: HKEY_CURRENT_USER\Software\Microsoft\MS Setup (ACME)\User Info 3: 2
MSI (s) (38:44) [19:15:22:640]: PROPERTY CHANGE: Adding DATABASE property. Its value is 'C:\WINDOWS\Installer\cb90fec.msi'.
MSI (s) (38:44) [19:15:22:640]: PROPERTY CHANGE: Adding OriginalDatabase property. Its value is 'd:\c1dedf6e674585cdb147\msxml.msi'.
MSI (s) (38:44) [19:15:22:640]: Note: 1: 2205 2: 3: PatchPackage
MSI (s) (38:44) [19:15:22:640]: Machine policy value 'DisableRollback' is 0
MSI (s) (38:44) [19:15:22:640]: User policy value 'DisableRollback' is 0
MSI (s) (38:44) [19:15:22:640]: PROPERTY CHANGE: Adding UILevel property. Its value is '2'.
=== Logging started: 17/11/2006 19:15:22 ===
MSI (s) (38:44) [19:15:22:640]: PROPERTY CHANGE: Adding ACTION property. Its value is 'INSTALL'.
MSI (s) (38:44) [19:15:22:640]: Doing action: INSTALL
MSI (s) (38:44) [19:15:22:640]: Running ExecuteSequence
MSI (s) (38:44) [19:15:22:640]: Doing action: DesktopFolder.4576A2F1_959E_4BCA_94A9_596523761901
Action start 19:15:22: INSTALL.
MSI (s) (38:44) [19:15:22:640]: PROPERTY CHANGE: Adding DesktopFolder.4576A2F1_959E_4BCA_94A9_596523761901 property. Its value is 'C:\Documents and Settings\All Users\Bureau\'.
Action start 19:15:22: DesktopFolder.4576A2F1_959E_4BCA_94A9_596523761901.
MSI (s) (38:44) [19:15:22:640]: Doing action: ProgramMenuFolder.4576A2F1_959E_4BCA_94A9_596523761901
Action ended 19:15:22: DesktopFolder.4576A2F1_959E_4BCA_94A9_596523761901. Return value 1.
MSI (s) (38:44) [19:15:22:640]: PROPERTY CHANGE: Adding ProgramMenuFolder.4576A2F1_959E_4BCA_94A9_596523761901 property. Its value is 'C:\Documents and Settings\All Users\Menu Démarrer\Programmes\'.
Action start 19:15:22: ProgramMenuFolder.4576A2F1_959E_4BCA_94A9_596523761901.
MSI (s) (38:44) [19:15:22:640]: Doing action: WindowsFolder.0E9F98FC_A692_A6DF_FF6B_D6B9ABF34537
Action ended 19:15:22: ProgramMenuFolder.4576A2F1_959E_4BCA_94A9_596523761901. Return value 1.
MSI (s) (38:44) [19:15:22:656]: PROPERTY CHANGE: Adding WindowsFolder.0E9F98FC_A692_A6DF_FF6B_D6B9ABF34537 property. Its value is 'C:\WINDOWS\'.
Action start 19:15:22: WindowsFolder.0E9F98FC_A692_A6DF_FF6B_D6B9ABF34537.
MSI (s) (38:44) [19:15:22:656]: Doing action: SystemFolder.0E9F98FC_A692_A6DF_FF6B_D6B9ABF34537
Action ended 19:15:22: WindowsFolder.0E9F98FC_A692_A6DF_FF6B_D6B9ABF34537. Return value 1.
MSI (s) (38:44) [19:15:22:656]: PROPERTY CHANGE: Adding SystemFolder.0E9F98FC_A692_A6DF_FF6B_D6B9ABF34537 property. Its value is 'C:\WINDOWS\system32\'.
Action start 19:15:22: SystemFolder.0E9F98FC_A692_A6DF_FF6B_D6B9ABF34537.
MSI (s) (38:44) [19:15:22:656]: Doing action: WindowsFolder.DA6654F6_456F_3658_FF6B_D6B9ABF34537
Action ended 19:15:22: SystemFolder.0E9F98FC_A692_A6DF_FF6B_D6B9ABF34537. Return value 1.
MSI (s) (38:44) [19:15:22:656]: PROPERTY CHANGE: Adding WindowsFolder.DA6654F6_456F_3658_FF6B_D6B9ABF34537 property. Its value is 'C:\WINDOWS\'.
Action start 19:15:22: WindowsFolder.DA6654F6_456F_3658_FF6B_D6B9ABF34537.
MSI (s) (38:44) [19:15:22:656]: Doing action: SystemFolder.DA6654F6_456F_3658_FF6B_D6B9ABF34537
Action ended 19:15:22: WindowsFolder.DA6654F6_456F_3658_FF6B_D6B9ABF34537. Return value 1.
MSI (s) (38:44) [19:15:22:656]: PROPERTY CHANGE: Adding SystemFolder.DA6654F6_456F_3658_FF6B_D6B9ABF34537 property. Its value is 'C:\WINDOWS\system32\'.
Action start 19:15:22: SystemFolder.DA6654F6_456F_3658_FF6B_D6B9ABF34537.
MSI (s) (38:44) [19:15:22:656]: Doing action: WindowsFolder.7B2FCEFF_0F22_B7E1_FF6B_D6B9ABF34537
Action ended 19:15:22: SystemFolder.DA6654F6_456F_3658_FF6B_D6B9ABF34537. Return value 1.
MSI (s) (38:44) [19:15:22:656]: PROPERTY CHANGE: Adding WindowsFolder.7B2FCEFF_0F22_B7E1_FF6B_D6B9ABF34537 property. Its value is 'C:\WINDOWS\'.
Action start 19:15:22: WindowsFolder.7B2FCEFF_0F22_B7E1_FF6B_D6B9ABF34537.
MSI (s) (38:44) [19:15:22:656]: Doing action: SystemFolder.7B2FCEFF_0F22_B7E1_FF6B_D6B9ABF34537
Action ended 19:15:22: WindowsFolder.7B2FCEFF_0F22_B7E1_FF6B_D6B9ABF34537. Return value 1.
MSI (s) (38:44) [19:15:22:656]: PROPERTY CHANGE: Adding SystemFolder.7B2FCEFF_0F22_B7E1_FF6B_D6B9ABF34537 property. Its value is 'C:\WINDOWS\system32\'.
Action start 19:15:22: SystemFolder.7B2FCEFF_0F22_B7E1_FF6B_D6B9ABF34537.
MSI (s) (38:44) [19:15:22:656]: Doing action: SystemFolder.FA0F135B_0C6B_485B_9A27_5A4A5044D5AB
Action ended 19:15:22: SystemFolder.7B2FCEFF_0F22_B7E1_FF6B_D6B9ABF34537. Return value 1.
MSI (s) (38:44) [19:15:22:656]: PROPERTY CHANGE: Adding SystemFolder.FA0F135B_0C6B_485B_9A27_5A4A5044D5AB property. Its value is 'C:\WINDOWS\system32\'.
Action start 19:15:22: SystemFolder.FA0F135B_0C6B_485B_9A27_5A4A5044D5AB.
MSI (s) (38:44) [19:15:22:656]: Doing action: SystemFolder.781A0624_31FF_4712_BFFD_31C829FFDBF1
Action ended 19:15:22: SystemFolder.FA0F135B_0C6B_485B_9A27_5A4A5044D5AB. Return value 1.
MSI (s) (38:44) [19:15:22:656]: PROPERTY CHANGE: Adding SystemFolder.781A0624_31FF_4712_BFFD_31C829FFDBF1 property. Its value is 'C:\WINDOWS\system32\'.
Action start 19:15:22: SystemFolder.781A0624_31FF_4712_BFFD_31C829FFDBF1.
MSI (s) (38:44) [19:15:22:656]: Doing action: SystemFolder.246EB7AD_459A_4FA8_83D1_41A46D7634B7
Action ended 19:15:22: SystemFolder.781A0624_31FF_4712_BFFD_31C829FFDBF1. Return value 1.
MSI (s) (38:44) [19:15:22:656]: PROPERTY CHANGE: Adding SystemFolder.246EB7AD_459A_4FA8_83D1_41A46D7634B7 property. Its value is 'C:\WINDOWS\system32\'.
Action start 19:15:22: SystemFolder.246EB7AD_459A_4FA8_83D1_41A46D7634B7.
MSI (s) (38:44) [19:15:22:656]: Doing action: LaunchConditions
Action ended 19:15:22: SystemFolder.246EB7AD_459A_4FA8_83D1_41A46D7634B7. Return value 1.
Action start 19:15:22: LaunchConditions.
MSI (s) (38:44) [19:15:22:656]: Doing action: FindRelatedProducts
Action ended 19:15:22: LaunchConditions. Return value 1.
Action start 19:15:22: FindRelatedProducts.
MSI (s) (38:44) [19:15:22:656]: Doing action: AppSearch
Action ended 19:15:22: FindRelatedProducts. Return value 1.
Action start 19:15:22: AppSearch.
MSI (s) (38:44) [19:15:22:656]: Note: 1: 2262 2: Signature 3: -2147287038
MSI (s) (38:44) [19:15:22:656]: PROPERTY CHANGE: Adding WINHTTP_51 property. Its value is 'WinHttpRequest Component version 5.1'.
MSI (s) (38:44) [19:15:22:656]: Skipping action: CCPSearch (condition is false)
MSI (s) (38:44) [19:15:22:656]: Skipping action: RMCCPSearch (condition is false)
MSI (s) (38:44) [19:15:22:656]: Doing action: ValidateProductID
Action ended 19:15:22: AppSearch. Return value 1.
Action start 19:15:22: ValidateProductID.
MSI (s) (38:44) [19:15:22:656]: Doing action: CostInitialize
Action ended 19:15:22: ValidateProductID. Return value 1.
MSI (s) (38:44) [19:15:22:656]: Machine policy value 'MaxPatchCacheSize' is 10
Action start 19:15:22: CostInitialize.
MSI (s) (38:44) [19:15:22:812]: PROPERTY CHANGE: Adding ROOTDRIVE property. Its value is 'd:\'.
MSI (s) (38:44) [19:15:22:812]: PROPERTY CHANGE: Adding CostingComplete property. Its value is '0'.
MSI (s) (38:44) [19:15:22:812]: Note: 1: 2205 2: 3: Patch
MSI (s) (38:44) [19:15:22:812]: Note: 1: 2205 2: 3: PatchPackage
MSI (s) (38:44) [19:15:22:812]: Note: 1: 2205 2: 3: MsiPatchHeaders
MSI (s) (38:44) [19:15:22:812]: Note: 1: 2205 2: 3: __MsiPatchFileList
MSI (s) (38:44) [19:15:22:812]: Note: 1: 2205 2: 3: PatchPackage
MSI (s) (38:44) [19:15:22:812]: Note: 1: 2228 2: 3: PatchPackage 4: SELECT `DiskId`, `PatchId`, `LastSequence` FROM `Media`, `PatchPackage` WHERE `Media`.`DiskId`=`PatchPackage`.`Media_` ORDER BY `DiskId`
MSI (s) (38:44) [19:15:22:812]: Doing action: FileCost
Action ended 19:15:22: CostInitialize. Return value 1.
MSI (s) (38:44) [19:15:22:812]: Note: 1: 2262 2: Extension 3: -2147287038
Action start 19:15:22: FileCost.
MSI (s) (38:44) [19:15:22:812]: Doing action: CostFinalize
Action ended 19:15:22: FileCost. Return value 1.
MSI (s) (38:44) [19:15:22:812]: PROPERTY CHANGE: Adding OutOfDiskSpace property. Its value is '0'.
MSI (s) (38:44) [19:15:22:812]: PROPERTY CHANGE: Adding OutOfNoRbDiskSpace property. Its value is '0'.
MSI (s) (38:44) [19:15:22:812]: PROPERTY CHANGE: Adding PrimaryVolumeSpaceAvailable property. Its value is '0'.
MSI (s) (38:44) [19:15:22:812]: PROPERTY CHANGE: Adding PrimaryVolumeSpaceRequired property. Its value is '0'.
MSI (s) (38:44) [19:15:22:812]: PROPERTY CHANGE: Adding PrimaryVolumeSpaceRemaining property. Its value is '0'.
MSI (s) (38:44) [19:15:22:812]: Note: 1: 2205 2: 3: Patch
MSI (s) (38:44) [19:15:22:812]: PROPERTY CHANGE: Adding TARGETDIR property. Its value is 'd:\'.
MSI (s) (38:44) [19:15:22:812]: PROPERTY CHANGE: Adding MicrosoftShared.3FB7DAB3_19E7_40A0_8730_4482CE77AC59 property. Its value is 'C:\Program Files\Fichiers communs\Microsoft Shared\'.
MSI (s) (38:44) [19:15:22:812]: PROPERTY CHANGE: Adding MSDN.3FB7DAB3_19E7_40A0_8730_4482CE77AC59 property. Its value is 'C:\Program Files\Fichiers communs\Microsoft Shared\MSDN\'.
MSI (s) (38:44) [19:15:22:812]: PROPERTY CHANGE: Adding WinSxsDirectory.0E9F98FC_A692_A6DF_FF6B_D6B9ABF34537 property. Its value is 'C:\WINDOWS\winsxs\'.
MSI (s) (38:44) [19:15:22:812]: PROPERTY CHANGE: Adding policydir_ul.0E9F98FC_A692_A6DF_FF6B_D6B9ABF34537 property. Its value is 'C:\WINDOWS\winsxs\x86_policy.4.20.Microsoft.MSXML2_6bd6b9abf345378f_4.20.9841.0_x-ww_ff05e224\'.
MSI (s) (38:44) [19:15:22:812]: PROPERTY CHANGE: Adding payload.0E9F98FC_A692_A6DF_FF6B_D6B9ABF34537 property. Its value is 'C:\WINDOWS\winsxs\x86_policy.4.20.Microsoft.MSXML2_6bd6b9abf345378f_4.20.9841.0_x-ww_ff05e224\'.
MSI (s) (38:44) [19:15:22:812]: PROPERTY CHANGE: Adding WinSxsManifests.0E9F98FC_A692_A6DF_FF6B_D6B9ABF34537 property. Its value is 'C:\WINDOWS\winsxs\Manifests\'.
MSI (s) (38:44) [19:15:22:812]: PROPERTY CHANGE: Adding WinSxsPolicies.0E9F98FC_A692_A6DF_FF6B_D6B9ABF34537 property. Its value is 'C:\WINDOWS\winsxs\Policies\'.
MSI (s) (38:44) [19:15:22:812]: PROPERTY CHANGE: Adding policydir.0E9F98FC_A692_A6DF_FF6B_D6B9ABF34537 property. Its value is 'C:\WINDOWS\winsxs\Policies\x86_policy.4.20.Microsoft.MSXML2_6bd6b9abf345378f_x-ww_88e8eab8\'.
MSI (s) (38:44) [19:15:22:812]: PROPERTY CHANGE: Adding payload_ul.0E9F98FC_A692_A6DF_FF6B_D6B9ABF34537 property. Its value is 'C:\WINDOWS\winsxs\x86_policy.4.20.microsoft.msxml2_6bd6b9abf345378f_4.20.9841.0_none_a6dfa6920e9f98fc\'.
MSI (s) (38:44) [19:15:22:812]: PROPERTY CHANGE: Adding WinSxsDirectory.DA6654F6_456F_3658_FF6B_D6B9ABF34537 property. Its value is 'C:\WINDOWS\winsxs\'.
MSI (s) (38:44) [19:15:22:812]: PROPERTY CHANGE: Adding policydir_ul.DA6654F6_456F_3658_FF6B_D6B9ABF34537 property. Its value is 'C:\WINDOWS\winsxs\x86_Microsoft.MSXML2R_6bd6b9abf345378f_4.1.0.0_x-ww_29c3ad6a\'.
MSI (s) (38:44) [19:15:22:812]: PROPERTY CHANGE: Adding WinSxsPolicies.DA6654F6_456F_3658_FF6B_D6B9ABF34537 property. Its value is 'C:\WINDOWS\winsxs\Policies\'.
MSI (s) (38:44) [19:15:22:812]: PROPERTY CHANGE: Adding policydir.DA6654F6_456F_3658_FF6B_D6B9ABF34537 property. Its value is 'C:\WINDOWS\winsxs\Policies\x86_Microsoft.MSXML2R_6bd6b9abf345378f_x-ww_f529d679\'.
MSI (s) (38:44) [19:15:22:812]: PROPERTY CHANGE: Adding WinSxsManifests.DA6654F6_456F_3658_FF6B_D6B9ABF34537 property. Its value is 'C:\WINDOWS\winsxs\Manifests\'.
MSI (s) (38:44) [19:15:22:812]: PROPERTY CHANGE: Adding payload.DA6654F6_456F_3658_FF6B_D6B9ABF34537 property. Its value is 'C:\WINDOWS\winsxs\x86_Microsoft.MSXML2R_6bd6b9abf345378f_4.1.0.0_x-ww_29c3ad6a\'.
MSI (s) (38:44) [19:15:22:812]: PROPERTY CHANGE: Adding payload_ul.DA6654F6_456F_3658_FF6B_D6B9ABF34537 property. Its value is 'C:\WINDOWS\winsxs\x86_microsoft.msxml2r_6bd6b9abf345378f_4.1.0.0_none_3658456fda6654f6\'.
MSI (s) (38:44) [19:15:22:812]: PROPERTY CHANGE: Adding WinSxsDirectory.7B2FCEFF_0F22_B7E1_FF6B_D6B9ABF34537 property. Its value is 'C:\WINDOWS\winsxs\'.
MSI (s) (38:44) [19:15:22:812]: PROPERTY CHANGE: Adding policydir_ul.7B2FCEFF_0F22_B7E1_FF6B_D6B9ABF34537 property. Its value is 'C:\WINDOWS\winsxs\x86_Microsoft.MSXML2_6bd6b9abf345378f_4.20.9841.0_x-ww_18171213\'.
MSI (s) (38:44) [19:15:22:812]: PROPERTY CHANGE: Adding WinSxsPolicies.7B2FCEFF_0F22_B7E1_FF6B_D6B9ABF34537 property. Its value is 'C:\WINDOWS\winsxs\Policies\'.
MSI (s) (38:44) [19:15:22:812]: PROPERTY CHANGE: Adding policydir.7B2FCEFF_0F22_B7E1_FF6B_D6B9ABF34537 property. Its value is 'C:\WINDOWS\winsxs\Policies\x86_Microsoft.MSXML2_6bd6b9abf345378f_x-ww_b261cf09\'.
MSI (s) (38:44) [19:15:22:812]: PROPERTY CHANGE: Adding WinSxsManifests.7B2FCEFF_0F22_B7E1_FF6B_D6B9ABF34537 property. Its value is 'C:\WINDOWS\winsxs\Manifests\'.
MSI (s) (38:44) [19:15:22:812]: PROPERTY CHANGE: Adding payload.7B2FCEFF_0F22_B7E1_FF6B_D6B9ABF34537 property. Its value is 'C:\WINDOWS\winsxs\x86_Microsoft.MSXML2_6bd6b9abf345378f_4.20.9841.0_x-ww_18171213\'.
MSI (s) (38:44) [19:15:22:812]: PROPERTY CHANGE: Adding payload_ul.7B2FCEFF_0F22_B7E1_FF6B_D6B9ABF34537 property. Its value is 'C:\WINDOWS\winsxs\x86_microsoft.msxml2_6bd6b9abf345378f_4.20.9841.0_none_b7e10f227b2fceff\'.
MSI (s) (38:44) [19:15:22:812]: PROPERTY CHANGE: Adding MSXML property. Its value is 'C:\Program Files\MSXML 4.0\'.
MSI (s) (38:44) [19:15:22:812]: PROPERTY CHANGE: Adding INC.4576A2F1_959E_4BCA_94A9_596523761901 property. Its value is 'C:\Program Files\MSXML 4.0\inc\'.
MSI (s) (38:44) [19:15:22:812]: PROPERTY CHANGE: Adding LIB.4576A2F1_959E_4BCA_94A9_596523761901 property. Its value is 'C:\Program Files\MSXML 4.0\lib\'.
MSI (s) (38:44) [19:15:22:812]: PROPERTY CHANGE: Adding DOC.4576A2F1_959E_4BCA_94A9_596523761901 property. Its value is 'C:\Program Files\MSXML 4.0\doc\'.
MSI (s) (38:44) [19:15:22:812]: PROPERTY CHANGE: Adding MenuMSXML.4576A2F1_959E_4BCA_94A9_596523761901 property. Its value is 'C:\Documents and Settings\All Users\Menu Démarrer\Programmes\MSXML 4.0\'.
MSI (s) (38:44) [19:15:22:812]: Target path resolution complete. Dumping Directory table...
MSI (s) (38:44) [19:15:22:812]: Note: target paths subject to change (via custom actions or browsing)
MSI (s) (38:44) [19:15:22:812]: Dir (target): Key: TARGETDIR , Object: d:\
MSI (s) (38:44) [19:15:22:812]: Dir (target): Key: WindowsFolder , Object: C:\WINDOWS\
MSI (s) (38:44) [19:15:22:812]: Dir (target): Key: CommonFilesFolder , Object: C:\Program Files\Fichiers communs\
MSI (s) (38:44) [19:15:22:812]: Dir (target): Key: MicrosoftShared.3FB7DAB3_19E7_40A0_8730_4482CE77AC59 , Object: C:\Program Files\Fichiers communs\Microsoft Shared\
MSI (s) (38:44) [19:15:22:812]: Dir (target): Key: MSDN.3FB7DAB3_19E7_40A0_8730_4482CE77AC59 , Object: C:\Program Files\Fichiers communs\Microsoft Shared\MSDN\
MSI (s) (38:44) [19:15:22:812]: Dir (target): Key: WindowsFolder.0E9F98FC_A692_A6DF_FF6B_D6B9ABF34537 , Object: C:\WINDOWS\
MSI (s) (38:44) [19:15:22:812]: Dir (target): Key: SystemFolder.0E9F98FC_A692_A6DF_FF6B_D6B9ABF34537 , Object: C:\WINDOWS\system32\
MSI (s) (38:44) [19:15:22:812]: Dir (target): Key: WinSxsDirectory.0E9F98FC_A692_A6DF_FF6B_D6B9ABF34537 , Object: C:\WINDOWS\winsxs\
MSI (s) (38:44) [19:15:22:812]: Dir (target): Key: policydir_ul.0E9F98FC_A692_A6DF_FF6B_D6B9ABF34537 , Object: C:\WINDOWS\winsxs\x86_policy.4.20.Microsoft.MSXML2_6bd6b9abf345378f_4.20.9841.0_x-ww_ff05e224\
MSI (s) (38:44) [19:15:22:812]: Dir (target): Key: payload.0E9F98FC_A692_A6DF_FF6B_D6B9ABF34537 , Object: C:\WINDOWS\winsxs\x86_policy.4.20.Microsoft.MSXML2_6bd6b9abf345378f_4.20.9841.0_x-ww_ff05e224\
MSI (s) (38:44) [19:15:22:812]: Dir (target): Key: WinSxsManifests.0E9F98FC_A692_A6DF_FF6B_D6B9ABF34537 , Object: C:\WINDOWS\winsxs\Manifests\
MSI (s) (38:44) [19:15:22:812]: Dir (target): Key: WinSxsPolicies.0E9F98FC_A692_A6DF_FF6B_D6B9ABF34537 , Object: C:\WINDOWS\winsxs\Policies\
MSI (s) (38:44) [19:15:22:812]: Dir (target): Key: policydir.0E9F98FC_A692_A6DF_FF6B_D6B9ABF34537 , Object: C:\WINDOWS\winsxs\Policies\x86_policy.4.20.Microsoft.MSXML2_6bd6b9abf345378f_x-ww_88e8eab8\
MSI (s) (38:44) [19:15:22:812]: Dir (target): Key: payload_ul.0E9F98FC_A692_A6DF_FF6B_D6B9ABF34537 , Object: C:\WINDOWS\winsxs\x86_policy.4.20.microsoft.msxml2_6bd6b9abf345378f_4.20.9841.0_none_a6dfa6920e9f98fc\
MSI (s) (38:44) [19:15:22:812]: Dir (target): Key: WindowsFolder.DA6654F6_456F_3658_FF6B_D6B9ABF34537 , Object: C:\WINDOWS\
MSI (s) (38:44) [19:15:22:812]: Dir (target): Key: SystemFolder.DA6654F6_456F_3658_FF6B_D6B9ABF34537 , Object: C:\WINDOWS\system32\
MSI (s) (38:44) [19:15:22:812]: Dir (target): Key: WinSxsDirectory.DA6654F6_456F_3658_FF6B_D6B9ABF34537 , Object: C:\WINDOWS\winsxs\
MSI (s) (38:44) [19:15:22:812]: Dir (target): Key: policydir_ul.DA6654F6_456F_3658_FF6B_D6B9ABF34537 , Object: C:\WINDOWS\winsxs\x86_Microsoft.MSXML2R_6bd6b9abf345378f_4.1.0.0_x-ww_29c3ad6a\
MSI (s) (38:44) [19:15:22:812]: Dir (target): Key: WinSxsPolicies.DA6654F6_456F_3658_FF6B_D6B9ABF34537 , Object: C:\WINDOWS\winsxs\Policies\
MSI (s) (38:44) [19:15:22:812]: Dir (target): Key: policydir.DA6654F6_456F_3658_FF6B_D6B9ABF34537 , Object: C:\WINDOWS\winsxs\Policies\x86_Microsoft.MSXML2R_6bd6b9abf345378f_x-ww_f529d679\
MSI (s) (38:44) [19:15:22:812]: Dir (target): Key: WinSxsManifests.DA6654F6_456F_3658_FF6B_D6B9ABF34537 , Object: C:\WINDOWS\winsxs\Manifests\
MSI (s) (38:44) [19:15:22:812]: Dir (target): Key: payload.DA6654F6_456F_3658_FF6B_D6B9ABF34537 , Object: C:\WINDOWS\winsxs\x86_Microsoft.MSXML2R_6bd6b9abf345378f_4.1.0.0_x-ww_29c3ad6a\
MSI (s) (38:44) [19:15:22:812]: Dir (target): Key: payload_ul.DA6654F6_456F_3658_FF6B_D6B9ABF34537 , Object: C:\WINDOWS\winsxs\x86_microsoft.msxml2r_6bd6b9abf345378f_4.1.0.0_none_3658456fda6654f6\
MSI (s) (38:44) [19:15:22:812]: Dir (target): Key: WindowsFolder.7B2FCEFF_0F22_B7E1_FF6B_D6B9ABF34537 , Object: C:\WINDOWS\
MSI (s) (38:44) [19:15:22:812]: Dir (target): Key: SystemFolder.7B2FCEFF_0F22_B7E1_FF6B_D6B9ABF34537 , Object: C:\WINDOWS\system32\
MSI (s) (38:44) [19:15:22:812]: Dir (target): Key: WinSxsDirectory.7B2FCEFF_0F22_B7E1_FF6B_D6B9ABF34537 , Object: C:\WINDOWS\winsxs\
MSI (s) (38:44) [19:15:22:812]: Dir (target): Key: policydir_ul.7B2FCEFF_0F22_B7E1_FF6B_D6B9ABF34537 , Object: C:\WINDOWS\winsxs\x86_Microsoft.MSXML2_6bd6b9abf345378f_4.20.9841.0_x-ww_18171213\
MSI (s) (38:44) [19:15:22:812]: Dir (target): Key: WinSxsPolicies.7B2FCEFF_0F22_B7E1_FF6B_D6B9ABF34537 , Object: C:\WINDOWS\winsxs\Policies\
MSI (s) (38:44) [19:15:22:812]: Dir (target): Key: policydir.7B2FCEFF_0F22_B7E1_FF6B_D6B9ABF34537 , Object: C:\WINDOWS\winsxs\Policies\x86_Microsoft.MSXML2_6bd6b9abf345378f_x-ww_b261cf09\
MSI (s) (38:44) [19:15:22:812]: Dir (target): Key: WinSxsManifests.7B2FCEFF_0F22_B7E1_FF6B_D6B9ABF34537 , Object: C:\WINDOWS\winsxs\Manifests\
MSI (s) (38:44) [19:15:22:812]: Dir (target): Key: payload.7B2FCEFF_0F22_B7E1_FF6B_D6B9ABF34537 , Object: C:\WINDOWS\winsxs\x86_Microsoft.MSXML2_6bd6b9abf345378f_4.20.9841.0_x-ww_18171213\
MSI (s) (38:44) [19:15:22:812]: Dir (target): Key: payload_ul.7B2FCEFF_0F22_B7E1_FF6B_D6B9ABF34537 , Object: C:\WINDOWS\winsxs\x86_microsoft.msxml2_6bd6b9abf345378f_4.20.9841.0_none_b7e10f227b2fceff\
MSI (s) (38:44) [19:15:22:812]: Dir (target): Key: SystemFolder.FA0F135B_0C6B_485B_9A27_5A4A5044D5AB , Object: C:\WINDOWS\system32\
MSI (s) (38:44) [19:15:22:812]: Dir (target): Key: SystemFolder.781A0624_31FF_4712_BFFD_31C829FFDBF1 , Object: C:\WINDOWS\system32\
MSI (s) (38:44) [19:15:22:812]: Dir (target): Key: SystemFolder.246EB7AD_459A_4FA8_83D1_41A46D7634B7 , Object: C:\WINDOWS\system32\
MSI (s) (38:44) [19:15:22:812]: Dir (target): Key: DesktopFolder , Object: C:\Documents and Settings\All Users\Bureau\
MSI (s) (38:44) [19:15:22:812]: Dir (target): Key: ProgramFilesFolder , Object: C:\Program Files\
MSI (s) (38:44) [19:15:22:812]: Dir (target): Key: MSXML , Object: C:\Program Files\MSXML 4.0\
MSI (s) (38:44) [19:15:22:812]: Dir (target): Key: INC.4576A2F1_959E_4BCA_94A9_596523761901 , Object: C:\Program Files\MSXML 4.0\inc\
MSI (s) (38:44) [19:15:22:812]: Dir (target): Key: LIB.4576A2F1_959E_4BCA_94A9_596523761901 , Object: C:\Program Files\MSXML 4.0\lib\
MSI (s) (38:44) [19:15:22:812]: Dir (target): Key: DOC.4576A2F1_959E_4BCA_94A9_596523761901 , Object: C:\Program Files\MSXML 4.0\doc\
MSI (s) (38:44) [19:15:22:812]: Dir (target): Key: ProgramMenuFolder.4576A2F1_959E_4BCA_94A9_596523761901 , Object: C:\Documents and Settings\All Users\Menu Démarrer\Programmes\
MSI (s) (38:44) [19:15:22:812]: Dir (target): Key: MenuMSXML.4576A2F1_959E_4BCA_94A9_596523761901 , Object: C:\Documents and Settings\All Users\Menu Démarrer\Programmes\MSXML 4.0\
MSI (s) (38:44) [19:15:22:812]: Dir (target): Key: DesktopFolder.4576A2F1_959E_4BCA_94A9_596523761901 , Object: C:\Documents and Settings\All Users\Bureau\
Action start 19:15:22: CostFinalize.
MSI (s) (38:44) [19:15:22:828]: Doing action: SetODBCFolders
Action ended 19:15:22: CostFinalize. Return value 1.
MSI (s) (38:44) [19:15:22:828]: Note: 1: 2205 2: 3: ODBCDriver
MSI (s) (38:44) [19:15:22:828]: Note: 1: 2228 2: 3: ODBCDriver 4: SELECT `ComponentId`,`Description`,`Directory_`, `ActionRequest`, `Installed`, `Attributes` FROM `ODBCDriver`, `Component` WHERE `ODBCDriver`.`Component_` = `Component` AND (`ActionRequest` = 1 OR `ActionRequest` = 2)
MSI (s) (38:44) [19:15:22:828]: Note: 1: 2205 2: 3: ODBCTranslator
MSI (s) (38:44) [19:15:22:828]: Note: 1: 2228 2: 3: ODBCTranslator 4: SELECT `ComponentId`,`Description`,`Directory_`, `ActionRequest`, `Installed`, `Attributes` FROM `ODBCTranslator`, `Component` WHERE `ODBCTranslator`.`Component_` = `Component` AND (`ActionRequest` = 1 OR `ActionRequest` = 2)
Action start 19:15:22: SetODBCFolders.
MSI (s) (38:44) [19:15:22:828]: Doing action: MigrateFeatureStates
Action ended 19:15:22: SetODBCFolders. Return value 0.
Action start 19:15:22: MigrateFeatureStates.
MSI (s) (38:44) [19:15:22:828]: Doing action: InstallValidate
Action ended 19:15:22: MigrateFeatureStates. Return value 0.
MSI (s) (38:44) [19:15:22:828]: Feature: MSXML; Installed: Absent; Request: Local; Action: Local
MSI (s) (38:44) [19:15:22:828]: Feature: MSXMLSYS; Installed: Absent; Request: Local; Action: Local
MSI (s) (38:44) [19:15:22:828]: Feature: MSXMLSUPP; Installed: Absent; Request: Null; Action: Null
MSI (s) (38:44) [19:15:22:828]: Feature: MSXMLSUPP2; Installed: Absent; Request: Local; Action: Local
MSI (s) (38:44) [19:15:22:828]: Feature: MSXMLSXS; Installed: Absent; Request: Local; Action: Local
MSI (s) (38:44) [19:15:22:828]: Feature: XMLSDK; Installed: Absent; Request: Null; Action: Null
MSI (s) (38:44) [19:15:22:828]: Component: RememberInstallFolder; Installed: Absent; Request: Local; Action: Local
MSI (s) (38:44) [19:15:22:828]: Component: QKBKEY; Installed: Absent; Request: Local; Action: Local
MSI (s) (38:44) [19:15:22:828]: Component: MSXML4_System.246EB7AD_459A_4FA8_83D1_41A46D7634B7; Installed: Absent; Request: Local; Action: Local
MSI (s) (38:44) [19:15:22:828]: Component: MSXML4_SystemRes.246EB7AD_459A_4FA8_83D1_41A46D7634B7; Installed: Absent; Request: Local; Action: Local
MSI (s) (38:44) [19:15:22:828]: Component: MSXML4_ANSI.246EB7AD_459A_4FA8_83D1_41A46D7634B7; Installed: Absent; Request: Local; Action: Null
MSI (s) (38:44) [19:15:22:828]: Component: WINHTTP50_COMPONENT.781A0624_31FF_4712_BFFD_31C829FFDBF1; Installed: Absent; Request: Null; Action: Null
MSI (s) (38:44) [19:15:22:828]: Component: PROXYCFG_COMPONENT.FA0F135B_0C6B_485B_9A27_5A4A5044D5AB; Installed: Absent; Request: Local; Action: Null
MSI (s) (38:44) [19:15:22:828]: Component: uplevel.7B2FCEFF_0F22_B7E1_FF6B_D6B9ABF34537; Installed: Absent; Request: Local; Action: Null
MSI (s) (38:44) [19:15:22:828]: Component: downlevel_manifest.7B2FCEFF_0F22_B7E1_FF6B_D6B9ABF34537; Installed: Absent; Request: Local; Action: Local
MSI (s) (38:44) [19:15:22:828]: Component: downlevel_payload.7B2FCEFF_0F22_B7E1_FF6B_D6B9ABF34537; Installed: Absent; Request: Local; Action: Local
MSI (s) (38:44) [19:15:22:828]: Component: uplevel.DA6654F6_456F_3658_FF6B_D6B9ABF34537; Installed: Absent; Request: Local; Action: Null
MSI (s) (38:44) [19:15:22:828]: Component: downlevel_manifest.DA6654F6_456F_3658_FF6B_D6B9ABF34537; Installed: Absent; Request: Local; Action: Local
MSI (s) (38:44) [19:15:22:828]: Component: downlevel_payload.DA6654F6_456F_3658_FF6B_D6B9ABF34537; Installed: Absent; Request: Local; Action: Local
MSI (s) (38:44) [19:15:22:828]: Component: uplevel.0E9F98FC_A692_A6DF_FF6B_D6B9ABF34537; Installed: Absent; Request: Local; Action: Null
MSI (s) (38:44) [19:15:22:828]: Component: downlevel_manifest.0E9F98FC_A692_A6DF_FF6B_D6B9ABF34537; Installed: Absent; Request: Local; Action: Local
MSI (s) (38:44) [19:15:22:828]: Component: XMLSDK_Docs.4576A2F1_959E_4BCA_94A9_596523761901; Installed: Absent; Request: Null; Action: Null
MSI (s) (38:44) [19:15:22:828]: Component: XMLSDK_LIB.4576A2F1_959E_4BCA_94A9_596523761901; Installed: Absent; Request: Null; Action: Null
MSI (s) (38:44) [19:15:22:828]: Component: XMLSDK_INC.4576A2F1_959E_4BCA_94A9_596523761901; Installed: Absent; Request: Null; Action: Null
MSI (s) (38:44) [19:15:22:828]: Component: CookDoc_dll.3FB7DAB3_19E7_40A0_8730_4482CE77AC59; Installed: Absent; Request: Null; Action: Null
MSI (s) (38:44) [19:15:22:828]: Component: __uplevel.7B2FCEFF_0F22_B7E1_FF6B_D6B9ABF365; Installed: Null; Request: Local; Action: Null
MSI (s) (38:44) [19:15:22:828]: Component: __uplevel.DA6654F6_456F_3658_FF6B_D6B9ABF365; Installed: Null; Request: Local; Action: Null
MSI (s) (38:44) [19:15:22:828]: Component: __uplevel.0E9F98FC_A692_A6DF_FF6B_D6B9ABF365; Installed: Null; Request: Local; Action: Null
MSI (s) (38:44) [19:15:22:828]: Component: __QKBKEY65; Installed: Null; Request: Local; Action: Local
MSI (s) (38:44) [19:15:22:828]: Component: __MSXML4_System.246EB7AD_459A_4FA8_83D1_4165; Installed: Null; Request: Local; Action: Local
MSI (s) (38:44) [19:15:22:828]: Component: __downlevel_payload.7B2FCEFF_0F22_B7E1_FF665; Installed: Null; Request: Local; Action: Local
MSI (s) (38:44) [19:15:22:828]: Component: __downlevel_manifest.7B2FCEFF_0F22_B7E1_FF65; Installed: Null; Request: Local; Action: Local
MSI (s) (38:44) [19:15:22:828]: Component: __downlevel_payload.DA6654F6_456F_3658_FF665; Installed: Null; Request: Local; Action: Local
MSI (s) (38:44) [19:15:22:828]: Component: __downlevel_manifest.DA6654F6_456F_3658_FF65; Installed: Null; Request: Local; Action: Local
MSI (s) (38:44) [19:15:22:828]: Component: __downlevel_manifest.0E9F98FC_A692_A6DF_FF65; Installed: Null; Request: Local; Action: Local
MSI (s) (38:44) [19:15:22:828]: Component: __CookDoc_dll.3FB7DAB3_19E7_40A0_8730_448265; Installed: Null; Request: Null; Action: Null
MSI (s) (38:44) [19:15:22:828]: Component: __XMLSDK_Docs.4576A2F1_959E_4BCA_94A9_596565; Installed: Null; Request: Null; Action: Null
MSI (s) (38:44) [19:15:22:828]: Note: 1: 2205 2: 3: BindImage
MSI (s) (38:44) [19:15:22:828]: Note: 1: 2262 2: PublishComponent 3: -2147287038
MSI (s) (38:44) [19:15:22:828]: Note: 1: 2262 2: Extension 3: -2147287038
MSI (s) (38:44) [19:15:22:828]: Note: 1: 2205 2: 3: Font
Action start 19:15:22: InstallValidate.
MSI (s) (38:44) [19:15:22:828]: Note: 1: 2205 2: 3: _RemoveFilePath
MSI (s) (38:44) [19:15:22:937]: Note: 1: 2262 2: Extension 3: -2147287038
MSI (s) (38:44) [19:15:22:937]: Note: 1: 2262 2: Extension 3: -2147287038
MSI (s) (38:44) [19:15:22:937]: Note: 1: 2262 2: Extension 3: -2147287038
MSI (s) (38:44) [19:15:22:937]: Note: 1: 2262 2: Extension 3: -2147287038
MSI (s) (38:44) [19:15:22:953]: Note: 1: 2262 2: Extension 3: -2147287038
MSI (s) (38:44) [19:15:22:953]: Note: 1: 2262 2: Extension 3: -2147287038
MSI (s) (38:44) [19:15:22:953]: Note: 1: 2262 2: Extension 3: -2147287038
MSI (s) (38:44) [19:15:22:953]: PROPERTY CHANGE: Modifying CostingComplete property. Its current value is '0'. Its new value: '1'.
MSI (s) (38:44) [19:15:22:953]: Note: 1: 2205 2: 3: BindImage
MSI (s) (38:44) [19:15:22:953]: Note: 1: 2262 2: PublishComponent 3: -2147287038
MSI (s) (38:44) [19:15:22:953]: Note: 1: 2262 2: Extension 3: -2147287038
MSI (s) (38:44) [19:15:22:953]: Note: 1: 2205 2: 3: Font
MSI (s) (38:44) [19:15:22:953]: Note: 1: 2727 2:
MSI (s) (38:44) [19:15:31:296]: 1 application(s) had been reported to have files in use.
Info 1603. The file C:\WINDOWS\system32\msxml4.dll is being held in use by the following process: Name: anbmServ, Id: 312, Window Title: '(not determined yet)'. Close that application and retry.
MSI (c) (A8:18) [19:15:31:296]: File In Use: -anbmServ- Window could not be found. Process ID: 312
MSI (c) (A8:18) [19:15:31:296]: No window with title could be found for FilesInUse
MSI (s) (38:44) [19:15:31:296]: Note: 1: 2727 2:
MSI (s) (38:44) [19:15:31:296]: Doing action: InstallInitialize
Action ended 19:15:31: InstallValidate. Return value 1.
MSI (s) (38:44) [19:15:31:296]: Machine policy value 'AlwaysInstallElevated' is 0
MSI (s) (38:44) [19:15:31:296]: User policy value 'AlwaysInstallElevated' is 0
MSI (s) (38:44) [19:15:31:296]: BeginTransaction: Locking Server
MSI (s) (38:44) [19:15:31:296]: SRSetRestorePoint skipped for this transaction.
MSI (s) (38:44) [19:15:31:296]: Server not locked: locking for product {37477865-A3F1-4772-AD43-AAFC6BCFF99F}
Action start 19:15:31: InstallInitialize.
MSI (s) (38:44) [19:15:31:718]: Doing action: SxsInstallCA
Action ended 19:15:31: InstallInitialize. Return value 1.
MSI (s) (38:7C) [19:15:31:734]: Invoking remote custom action. DLL: C:\WINDOWS\Installer\MSI214.tmp, Entrypoint: CustomAction_SxsMsmInstall
MSI (s) (38:E8) [19:15:31:734]: Generating random cookie.
MSI (s) (38:E8) [19:15:31:734]: Created Custom Action Server with PID 4012 (0xFAC).
MSI (s) (38:54) [19:15:31:781]: Running as a service.
MSI (s) (38:54) [19:15:31:781]: Hello, I'm your 32bit Elevated custom action server.
Action start 19:15:31: SxsInstallCA.
1: sxsdelca 2: traceop 3: 1256 4: 0
1: sxsdelca 2: traceop 3: 1257 4: 0
1: sxsdelca 2: traceop 3: 1258 4: 0
1: sxsdelca 2: traceop 3: 1284 4: 0
1: sxsdelca 2: traceop 3: 1288 4: 0
1: sxsdelca 2: traceop 3: 1289 4: 0
1: sxsdelca 2: traceop 3: 1290 4: 0
1: sxsdelca 2: traceop 3: 1292 4: 0
1: sxsdelca 2: traceop 3: 1306 4: 0
1: sxsdelca 2: traceop 3: 1307 4: 0
1: sxsdelca 2: traceop 3: 796 4: 0
1: sxsdelca 2: traceop 3: 801 4: 0
1: sxsdelca 2: traceop 3: 802 4: 0
1: sxsdelca 2: traceop 3: 803 4: 0
1: sxsdelca 2: traceop 3: 805 4: 0
1: sxsdelca 2: traceop 3: 812 4: 0
1: sxsdelca 2: traceop 3: 813 4: 0
1: sxsdelca 2: traceop 3: 814 4: 0
1: sxsdelca 2: traceop 3: 819 4: 0
1: sxsdelca 2: traceop 3: 820 4: 0
1: sxsdelca 2: traceop 3: 821 4: 0
1: sxsdelca 2: traceop 3: 827 4: 0
1: sxsdelca 2: traceop 3: 831 4: 0
1: sxsdelca 2: traceop 3: 827 4: 0
1: sxsdelca 2: traceop 3: 831 4: 0
1: sxsdelca 2: traceop 3: 827 4: 259
1: sxsdelca 2: traceop 3: 1311 4: 0
1: sxsdelca 2: traceop 3: 1312 4: 0
1: sxsdelca 2: traceop 3: 1077 4: 0
1: sxsdelca 2: traceop 3: 1081 4: 0
1: sxsdelca 2: traceop 3: 1083 4: 0
1: sxsdelca 2: traceop 3: 1087 4: 0
1: sxsdelca 2: traceop 3: 1093 4: 0
1: sxsdelca 2: traceop 3: 1097 4: 0
1: sxsdelca 2: traceop 3: 1093 4: 0
1: sxsdelca 2: traceop 3: 1101 4: 0
1: sxsdelca 2: traceop 3: 1093 4: 0
1: sxsdelca 2: traceop 3: 1105 4: 0
1: sxsdelca 2: traceop 3: 1093 4: 0
1: sxsdelca 2: traceop 3: 1109 4: 0
1: sxsdelca 2: traceop 3: 1093 4: 0
1: sxsdelca 2: traceop 3: 1113 4: 0
1: sxsdelca 2: traceop 3: 1093 4: 0
1: sxsdelca 2: traceop 3: 1117 4: 0
1: sxsdelca 2: traceop 3: 1121 4: 0
1: sxsdelca 2: traceop 3: 1313 4: 0
1: sxsdelca 2: traceop 3: 1314 4: 0
1: sxsdelca: Added reg value for 2: downlevel_manifest.7B2FCEFF_0F22_B7E1_FF6B_D6B9ABF34537
1: sxsdelca 2: traceop 3: 1284 4: 0
1: sxsdelca 2: traceop 3: 1288 4: 0
1: sxsdelca 2: traceop 3: 1289 4: 0
1: sxsdelca 2: traceop 3: 1290 4: 0
1: sxsdelca 2: traceop 3: 1292 4: 0
1: sxsdelca 2: traceop 3: 796 4: 0
1: sxsdelca 2: traceop 3: 801 4: 0
1: sxsdelca 2: traceop 3: 802 4: 0
1: sxsdelca 2: traceop 3: 803 4: 0
1: sxsdelca 2: traceop 3: 805 4: 0
1: sxsdelca 2: traceop 3: 812 4: 0
1: sxsdelca 2: traceop 3: 813 4: 0
1: sxsdelca 2: traceop 3: 814 4: 0
1: sxsdelca 2: traceop 3: 819 4: 0
1: sxsdelca 2: traceop 3: 820 4: 0
1: sxsdelca 2: traceop 3: 821 4: 0
1: sxsdelca 2: traceop 3: 827 4: 0
1: sxsdelca 2: traceop 3: 831 4: 0
1: sxsdelca 2: traceop 3: 827 4: 259
1: sxsdelca 2: traceop 3: 1311 4: 0
1: sxsdelca 2: traceop 3: 1312 4: 0
1: sxsdelca 2: traceop 3: 1077 4: 0
1: sxsdelca 2: traceop 3: 1081 4: 0
1: sxsdelca 2: traceop 3: 1083 4: 0
1: sxsdelca 2: traceop 3: 1087 4: 0
1: sxsdelca 2: traceop 3: 1093 4: 0
1: sxsdelca 2: traceop 3: 1097 4: 0
1: sxsdelca 2: traceop 3: 1093 4: 0
1: sxsdelca 2: traceop 3: 1101 4: 0
1: sxsdelca 2: traceop 3: 1093 4: 0
1: sxsdelca 2: traceop 3: 1105 4: 0
1: sxsdelca 2: traceop 3: 1093 4: 0
1: sxsdelca 2: traceop 3: 1109 4: 0
1: sxsdelca 2: traceop 3: 1093 4: 0
1: sxsdelca 2: traceop 3: 1113 4: 0
1: sxsdelca 2: traceop 3: 1093 4: 0
1: sxsdelca 2: traceop 3: 1117 4: 0
1: sxsdelca 2: traceop 3: 1121 4: 0
1: sxsdelca 2: traceop 3: 1313 4: 0
1: sxsdelca 2: traceop 3: 1314 4: 0
1: sxsdelca: Added reg value for 2: downlevel_payload.7B2FCEFF_0F22_B7E1_FF6B_D6B9ABF34537
1: sxsdelca 2: traceop 3: 1284 4: 0
1: sxsdelca 2: traceop 3: 1288 4: 0
1: sxsdelca 2: traceop 3: 1289 4: 0
1: sxsdelca 2: traceop 3: 1290 4: 0
1: sxsdelca 2: traceop 3: 1292 4: 0
1: sxsdelca 2: traceop 3: 796 4: 0
1: sxsdelca 2: traceop 3: 801 4: 0
1: sxsdelca 2: traceop 3: 802 4: 0
1: sxsdelca 2: traceop 3: 803 4: 0
1: sxsdelca 2: traceop 3: 805 4: 0
1: sxsdelca 2: traceop 3: 812 4: 0
1: sxsdelca 2: traceop 3: 813 4: 0
1: sxsdelca 2: traceop 3: 814 4: 0
1: sxsdelca 2: traceop 3: 819 4: 0
1: sxsdelca 2: traceop 3: 820 4: 0
1: sxsdelca 2: traceop 3: 821 4: 0
1: sxsdelca 2: traceop 3: 827 4: 0
1: sxsdelca 2: traceop 3: 831 4: 0
1: sxsdelca 2: traceop 3: 827 4: 0
1: sxsdelca 2: traceop 3: 831 4: 0
1: sxsdelca 2: traceop 3: 827 4: 259
1: sxsdelca 2: traceop 3: 1311 4: 0
1: sxsdelca 2: traceop 3: 1312 4: 0
1: sxsdelca 2: traceop 3: 1077 4: 0
1: sxsdelca 2: traceop 3: 1081 4: 0
1: sxsdelca 2: traceop 3: 1083 4: 0
1: sxsdelca 2: traceop 3: 1087 4: 0
1: sxsdelca 2: traceop 3: 1093 4: 0
1: sxsdelca 2: traceop 3: 1097 4: 0
1: sxsdelca 2: traceop 3: 1093 4: 0
1: sxsdelca 2: traceop 3: 1101 4: 0
1: sxsdelca 2: traceop 3: 1093 4: 0
1: sxsdelca 2: traceop 3: 1105 4: 0
1: sxsdelca 2: traceop 3: 1093 4: 0
1: sxsdelca 2: traceop 3: 1109 4: 0
1: sxsdelca 2: traceop 3: 1093 4: 0
1: sxsdelca 2: traceop 3: 1113 4: 0
1: sxsdelca 2: traceop 3: 1093 4: 0
1: sxsdelca 2: traceop 3: 1117 4: 0
1: sxsdelca 2: traceop 3: 1121 4: 0
1: sxsdelca 2: traceop 3: 1313 4: 0
1: sxsdelca 2: traceop 3: 1314 4: 0
1: sxsdelca: Added reg value for 2: downlevel_manifest.DA6654F6_456F_3658_FF6B_D6B9ABF34537
1: sxsdelca 2: traceop 3: 1284 4: 0
1: sxsdelca 2: traceop 3: 1288 4: 0
1: sxsdelca 2: traceop 3: 1289 4: 0
1: sxsdelca 2: traceop 3: 1290 4: 0
1: sxsdelca 2: traceop 3: 1292 4: 0
1: sxsdelca 2: traceop 3: 796 4: 0
1: sxsdelca 2: traceop 3: 801 4: 0
1: sxsdelca 2: traceop 3: 802 4: 0
1: sxsdelca 2: traceop 3: 803 4: 0
1: sxsdelca 2: traceop 3: 805 4: 0
1: sxsdelca 2: traceop 3: 812 4: 0
1: sxsdelca 2: traceop 3: 813 4: 0
1: sxsdelca 2: traceop 3: 814 4: 0
1: sxsdelca 2: traceop 3: 819 4: 0
1: sxsdelca 2: traceop 3: 820 4: 0
1: sxsdelca 2: traceop 3: 821 4: 0
1: sxsdelca 2: traceop 3: 827 4: 0
1: sxsdelca 2: traceop 3: 831 4: 0
1: sxsdelca 2: traceop 3: 827 4: 259
1: sxsdelca 2: traceop 3: 1311 4: 0
1: sxsdelca 2: traceop 3: 1312 4: 0
1: sxsdelca 2: traceop 3: 1077 4: 0
1: sxsdelca 2: traceop 3: 1081 4: 0
1: sxsdelca 2: traceop 3: 1083 4: 0
1: sxsdelca 2: traceop 3: 1087 4: 0
1: sxsdelca 2: traceop 3: 1093 4: 0
1: sxsdelca 2: traceop 3: 1097 4: 0
1: sxsdelca 2: traceop 3: 1093 4: 0
1: sxsdelca 2: traceop 3: 1101 4: 0
1: sxsdelca 2: traceop 3: 1093 4: 0
1: sxsdelca 2: traceop 3: 1105 4: 0
1: sxsdelca 2: traceop 3: 1093 4: 0
1: sxsdelca 2: traceop 3: 1109 4: 0
1: sxsdelca 2: traceop 3: 1093 4: 0
1: sxsdelca 2: traceop 3: 1113 4: 0
1: sxsdelca 2: traceop 3: 1093 4: 0
1: sxsdelca 2: traceop 3: 1117 4: 0
1: sxsdelca 2: traceop 3: 1121 4: 0
1: sxsdelca 2: traceop 3: 1313 4: 0
1: sxsdelca 2: traceop 3: 1314 4: 0
1: sxsdelca: Added reg value for 2: downlevel_payload.DA6654F6_456F_3658_FF6B_D6B9ABF34537
1: sxsdelca 2: traceop 3: 1284 4: 0
1: sxsdelca 2: traceop 3: 1288 4: 0
1: sxsdelca 2: traceop 3: 1289 4: 0
1: sxsdelca 2: traceop 3: 1290 4: 0
1: sxsdelca 2: traceop 3: 1292 4: 0
1: sxsdelca 2: traceop 3: 796 4: 0
1: sxsdelca 2: traceop 3: 801 4: 0
1: sxsdelca 2: traceop 3: 802 4: 0
1: sxsdelca 2: traceop 3: 803 4: 0
1: sxsdelca 2: traceop 3: 805 4: 0
1: sxsdelca 2: traceop 3: 812 4: 0
1: sxsdelca 2: traceop 3: 813 4: 0
1: sxsdelca 2: traceop 3: 814 4: 0
1: sxsdelca 2: traceop 3: 819 4: 0
1: sxsdelca 2: traceop 3: 820 4: 0
1: sxsdelca 2: traceop 3: 821 4: 0
1: sxsdelca 2: traceop 3: 827 4: 0
1: sxsdelca 2: traceop 3: 831 4: 0
1: sxsdelca 2: traceop 3: 827 4: 0
1: sxsdelca 2: traceop 3: 831 4: 0
1: sxsdelca 2: traceop 3: 827 4: 259
1: sxsdelca 2: traceop 3: 1311 4: 0
1: sxsdelca 2: traceop 3: 1312 4: 0
1: sxsdelca 2: traceop 3: 1077 4: 0
1: sxsdelca 2: traceop 3: 1081 4: 0
1: sxsdelca 2: traceop 3: 1083 4: 0
1: sxsdelca 2: traceop 3: 1087 4: 0
1: sxsdelca 2: traceop 3: 1093 4: 0
1: sxsdelca 2: traceop 3: 1097 4: 0
1: sxsdelca 2: traceop 3: 1093 4: 0
1: sxsdelca 2: traceop 3: 1101 4: 0
1: sxsdelca 2: traceop 3: 1093 4: 0
1: sxsdelca 2: traceop 3: 1105 4: 0
1: sxsdelca 2: traceop 3: 1093 4: 0
1: sxsdelca 2: traceop 3: 1109 4: 0
1: sxsdelca 2: traceop 3: 1093 4: 0
1: sxsdelca 2: traceop 3: 1113 4: 0
1: sxsdelca 2: traceop 3: 1093 4: 0
1: sxsdelca 2: traceop 3: 1117 4: 0
1: sxsdelca 2: traceop 3: 1121 4: 0
1: sxsdelca 2: traceop 3: 1313 4: 0
1: sxsdelca 2: traceop 3: 1314 4: 0
1: sxsdelca: Added reg value for 2: downlevel_manifest.0E9F98FC_A692_A6DF_FF6B_D6B9ABF34537
1: sxsdelca 2: traceop 3: 1284 4: 259
1: sxsdelca 2: SxsMsmInstall completed 3: 0 4: 0
MSI (s) (38:44) [19:15:31:953]: Doing action: AllocateRegistrySpace
Action ended 19:15:31: SxsInstallCA. Return value 1.
Action start 19:15:31: AllocateRegistrySpace.
MSI (s) (38:44) [19:15:31:953]: Doing action: ProcessComponents
Action ended 19:15:31: AllocateRegistrySpace. Return value 1.
MSI (s) (38:44) [19:15:31:953]: Note: 1: 2205 2: 3: MsiPatchCertificate
MSI (s) (38:44) [19:15:31:953]: LUA patching is disabled: missing MsiPatchCertificate table
MSI (s) (38:44) [19:15:31:953]: Resolving source.
MSI (s) (38:44) [19:15:31:953]: Resolving source to launched-from source.
MSI (s) (38:44) [19:15:31:953]: Setting launched-from source as last-used.
MSI (s) (38:44) [19:15:31:953]: PROPERTY CHANGE: Adding SourceDir property. Its value is 'd:\c1dedf6e674585cdb147\'.
MSI (s) (38:44) [19:15:31:953]: PROPERTY CHANGE: Adding SOURCEDIR property. Its value is 'd:\c1dedf6e674585cdb147\'.
MSI (s) (38:44) [19:15:31:953]: PROPERTY CHANGE: Adding SourcedirProduct property. Its value is '{37477865-A3F1-4772-AD43-AAFC6BCFF99F}'.
MSI (s) (38:44) [19:15:31:953]: SOURCEDIR ==> d:\c1dedf6e674585cdb147\
MSI (s) (38:44) [19:15:31:953]: SOURCEDIR product ==> {37477865-A3F1-4772-AD43-AAFC6BCFF99F}
MSI (s) (38:44) [19:15:31:953]: Determining source type
MSI (s) (38:44) [19:15:31:953]: Source type from package 'msxml.msi': 2
Action start 19:15:31: ProcessComponents.
MSI (s) (38:44) [19:15:31:953]: Source path resolution complete. Dumping Directory table...
MSI (s) (38:44) [19:15:31:953]: Dir (source): Key: TARGETDIR , Object: d:\c1dedf6e674585cdb147\ , LongSubPath: , ShortSubPath:
MSI (s) (38:44) [19:15:31:953]: Dir (source): Key: WindowsFolder , Object: d:\c1dedf6e674585cdb147\ , LongSubPath: , ShortSubPath:
MSI (s) (38:44) [19:15:31:953]: Dir (source): Key: CommonFilesFolder , Object: d:\c1dedf6e674585cdb147\ , LongSubPath: , ShortSubPath:
MSI (s) (38:44) [19:15:31:953]: Dir (source): Key: MicrosoftShared.3FB7DAB3_19E7_40A0_8730_4482CE77AC59 , Object: d:\c1dedf6e674585cdb147\ , LongSubPath: Microsoft Shared\ , ShortSubPath: MICROS~1\
MSI (s) (38:44) [19:15:31:953]: Dir (source): Key: MSDN.3FB7DAB3_19E7_40A0_8730_4482CE77AC59 , Object: d:\c1dedf6e674585cdb147\ , LongSubPath: Microsoft Shared\MSDN\ , ShortSubPath: MICROS~1\MSDN\
MSI (s) (38:44) [19:15:31:953]: Dir (source): Key: WindowsFolder.0E9F98FC_A692_A6DF_FF6B_D6B9ABF34537 , Object: d:\c1dedf6e674585cdb147\ , LongSubPath: Windows\ , ShortSubPath:
MSI (s) (38:44) [19:15:31:953]: Dir (source): Key: SystemFolder.0E9F98FC_A692_A6DF_FF6B_D6B9ABF34537 , Object: d:\c1dedf6e674585cdb147\ , LongSubPath: Windows\system32\ , ShortSubPath:
MSI (s) (38:44) [19:15:31:953]: Dir (source): Key: WinSxsDirectory.0E9F98FC_A692_A6DF_FF6B_D6B9ABF34537 , Object: d:\c1dedf6e674585cdb147\ , LongSubPath: Windows\winsxs\ , ShortSubPath:
MSI (s) (38:44) [19:15:31:953]: Dir (source): Key: policydir_ul.0E9F98FC_A692_A6DF_FF6B_D6B9ABF34537 , Object: d:\c1dedf6e674585cdb147\ , LongSubPath: Windows\winsxs\k0r1wg7y.dqe\ , ShortSubPath:
MSI (s) (38:44) [19:15:31:953]: Dir (source): Key: payload.0E9F98FC_A692_A6DF_FF6B_D6B9ABF34537 , Object: d:\c1dedf6e674585cdb147\ , LongSubPath: Windows\winsxs\h0r1wg7y.dqe\ , ShortSubPath:
MSI (s) (38:44) [19:15:31:953]: Dir (source): Key: WinSxsManifests.0E9F98FC_A692_A6DF_FF6B_D6B9ABF34537 , Object: d:\c1dedf6e674585cdb147\ , LongSubPath: Windows\winsxs\Manifests\ , ShortSubPath: Windows\winsxs\manifest\
MSI (s) (38:44) [19:15:31:953]: Dir (source): Key: WinSxsPolicies.0E9F98FC_A692_A6DF_FF6B_D6B9ABF34537 , Object: d:\c1dedf6e674585cdb147\ , LongSubPath: Windows\winsxs\Policies\ , ShortSubPath:
MSI (s) (38:44) [19:15:31:953]: Dir (source): Key: policydir.0E9F98FC_A692_A6DF_FF6B_D6B9ABF34537 , Object: d:\c1dedf6e674585cdb147\ , LongSubPath: Windows\winsxs\Policies\i0r1wg7y.dqe\ , ShortSubPath:
MSI (s) (38:44) [19:15:31:953]: Dir (source): Key: payload_ul.0E9F98FC_A692_A6DF_FF6B_D6B9ABF34537 , Object: d:\c1dedf6e674585cdb147\ , LongSubPath: Windows\winsxs\j0r1wg7y.dqe\ , ShortSubPath:
MSI (s) (38:44) [19:15:31:953]: Dir (source): Key: WindowsFolder.DA6654F6_456F_3658_FF6B_D6B9ABF34537 , Object: d:\c1dedf6e674585cdb147\ , LongSubPath: Windows\ , ShortSubPath:
MSI (s) (38:44) [19:15:31:953]: Dir (source): Key: SystemFolder.DA6654F6_456F_3658_FF6B_D6B9ABF34537 , Object: d:\c1dedf6e674585cdb147\ , LongSubPath: Windows\system32\ , ShortSubPath:
MSI (s) (38:44) [19:15:31:953]: Dir (source): Key: WinSxsDirectory.DA6654F6_456F_3658_FF6B_D6B9ABF34537 , Object: d:\c1dedf6e674585cdb147\ , LongSubPath: Windows\winsxs\ , ShortSubPath:
MSI (s) (38:44) [19:15:31:953]: Dir (source): Key: policydir_ul.DA6654F6_456F_3658_FF6B_D6B9ABF34537 , Object: d:\c1dedf6e674585cdb147\ , LongSubPath: Windows\winsxs\8n0mtfut.k85\ , ShortSubPath:
MSI (s) (38:44) [19:15:31:953]: Dir (source): Key: WinSxsPolicies.DA6654F6_456F_3658_FF6B_D6B9ABF34537 , Object: d:\c1dedf6e674585cdb147\ , LongSubPath: Windows\winsxs\Policies\ , ShortSubPath:
MSI (s) (38:44) [19:15:31:953]: Dir (source): Key: policydir.DA6654F6_456F_3658_FF6B_D6B9ABF34537 , Object: d:\c1dedf6e674585cdb147\ , LongSubPath: Windows\winsxs\Policies\6n0mtfut.k85\ , ShortSubPath:
MSI (s) (38:44) [19:15:31:953]: Dir (source): Key: WinSxsManifests.DA6654F6_456F_3658_FF6B_D6B9ABF34537 , Object: d:\c1dedf6e674585cdb147\ , LongSubPath: Windows\winsxs\Manifests\ , ShortSubPath: Windows\winsxs\manifest\
MSI (s) (38:44) [19:15:31:953]: Dir (source): Key: payload.DA6654F6_456F_3658_FF6B_D6B9ABF34537 , Object: d:\c1dedf6e674585cdb147\ , LongSubPath: Windows\winsxs\5n0mtfut.k85\ , ShortSubPath:
MSI (s) (38:44) [19:15:31:953]: Dir (source): Key: payload_ul.DA6654F6_456F_3658_FF6B_D6B9ABF34537 , Object: d:\c1dedf6e674585cdb147\ , LongSubPath: Windows\winsxs\7n0mtfut.k85\ , ShortSubPath:
MSI (s) (38:44) [19:15:31:953]: Dir (source): Key: WindowsFolder.7B2FCEFF_0F22_B7E1_FF6B_D6B9ABF34537 , Object: d:\c1dedf6e674585cdb147\ , LongSubPath: Windows\ , ShortSubPath:
MSI (s) (38:44) [19:15:31:953]: Dir (source): Key: SystemFolder.7B2FCEFF_0F22_B7E1_FF6B_D6B9ABF34537 , Object: d:\c1dedf6e674585cdb147\ , LongSubPath: Windows\system32\ , ShortSubPath:
MSI (s) (38:44) [19:15:31:953]: Dir (source): Key: WinSxsDirectory.7B2FCEFF_0F22_B7E1_FF6B_D6B9ABF34537 , Object: d:\c1dedf6e674585cdb147\ , LongSubPath: Windows\winsxs\ , ShortSubPath:
MSI (s) (38:44) [19:15:31:953]: Dir (source): Key: policydir_ul.7B2FCEFF_0F22_B7E1_FF6B_D6B9ABF34537 , Object: d:\c1dedf6e674585cdb147\ , LongSubPath: Windows\winsxs\wl34x2va.rt8\ , ShortSubPath:
MSI (s) (38:44) [19:15:31:953]: Dir (source): Key: WinSxsPolicies.7B2FCEFF_0F22_B7E1_FF6B_D6B9ABF34537 , Object: d:\c1dedf6e674585cdb147\ , LongSubPath: Windows\winsxs\Policies\ , ShortSubPath:
MSI (s) (38:44) [19:15:31:953]: Dir (source): Key: policydir.7B2FCEFF_0F22_B7E1_FF6B_D6B9ABF34537 , Object: d:\c1dedf6e674585cdb147\ , LongSubPath: Windows\winsxs\Policies\ul34x2va.rt8\ , ShortSubPath:
MSI (s) (38:44) [19:15:31:953]: Dir (source): Key: WinSxsManifests.7B2FCEFF_0F22_B7E1_FF6B_D6B9ABF34537 , Object: d:\c1dedf6e674585cdb147\ , LongSubPath: Windows\winsxs\Manifests\ , ShortSubPath: Windows\winsxs\manifest\
MSI (s) (38:44) [19:15:31:953]: Dir (source): Key: payload.7B2FCEFF_0F22_B7E1_FF6B_D6B9ABF34537 , Object: d:\c1dedf6e674585cdb147\ , LongSubPath: Windows\winsxs\tl34x2va.rt8\ , ShortSubPath:
MSI (s) (38:44) [19:15:31:953]: Dir (source): Key: payload_ul.7B2FCEFF_0F22_B7E1_FF6B_D6B9ABF34537 , Object: d:\c1dedf6e674585cdb147\ , LongSubPath: Windows\winsxs\vl34x2va.rt8\ , ShortSubPath:
MSI (s) (38:44) [19:15:31:953]: Dir (source): Key: SystemFolder.FA0F135B_0C6B_485B_9A27_5A4A5044D5AB , Object: d:\c1dedf6e674585cdb147\ , LongSubPath: , ShortSubPath:
MSI (s) (38:44) [19:15:31:953]: Dir (source): Key: SystemFolder.781A0624_31FF_4712_BFFD_31C829FFDBF1 , Object: d:\c1dedf6e674585cdb147\ , LongSubPath: , ShortSubPath:
MSI (s) (38:44) [19:15:31:953]: Dir (source): Key: SystemFolder.246EB7AD_459A_4FA8_83D1_41A46D7634B7 , Object: d:\c1dedf6e674585cdb147\ , LongSubPath: System\ , ShortSubPath:
MSI (s) (38:44) [19:15:31:953]: Dir (source): Key: DesktopFolder , Object: d:\c1dedf6e674585cdb147\ , LongSubPath: , ShortSubPath:
MSI (s) (38:44) [19:15:31:953]: Dir (source): Key: ProgramFilesFolder , Object: d:\c1dedf6e674585cdb147\ , LongSubPath: , ShortSubPath:
MSI (s) (38:44) [19:15:31:953]: Dir (source): Key: MSXML , Object: d:\c1dedf6e674585cdb147\ , LongSubPath: redist\ , ShortSubPath:
MSI (s) (38:44) [19:15:31:953]: Dir (source): Key: INC.4576A2F1_959E_4BCA_94A9_596523761901 , Object: d:\c1dedf6e674585cdb147\ , LongSubPath: redist\inc\ , ShortSubPath:
MSI (s) (38:44) [19:15:31:953]: Dir (source): Key: LIB.4576A2F1_959E_4BCA_94A9_596523761901 , Object: d:\c1dedf6e674585cdb147\ , LongSubPath: redist\lib\ , ShortSubPath:
MSI (s) (38:44) [19:15:31:953]: Dir (source): Key: DOC.4576A2F1_959E_4BCA_94A9_596523761901 , Object: d:\c1dedf6e674585cdb147\ , LongSubPath: redist\doc\ , ShortSubPath:
MSI (s) (38:44) [19:15:31:953]: Dir (source): Key: ProgramMenuFolder.4576A2F1_959E_4BCA_94A9_596523761901 , Object: d:\c1dedf6e674585cdb147\ , LongSubPath: redist\ , ShortSubPath:
MSI (s) (38:44) [19:15:31:953]: Dir (source): Key: MenuMSXML.4576A2F1_959E_4BCA_94A9_596523761901 , Object: d:\c1dedf6e674585cdb147\ , LongSubPath: redist\MSXML 4.0\ , ShortSubPath: redist\MSXML4\
MSI (s) (38:44) [19:15:31:953]: Dir (source): Key: DesktopFolder.4576A2F1_959E_4BCA_94A9_596523761901 , Object: d:\c1dedf6e674585cdb147\ , LongSubPath: redist\ , ShortSubPath:
MSI (s) (38:44) [19:15:31:968]: Doing action: UnpublishComponents
Action ended 19:15:31: ProcessComponents. Return value 1.
MSI (s) (38:44) [19:15:31:968]: Note: 1: 2262 2: PublishComponent 3: -2147287038
Action start 19:15:31: UnpublishComponents.
MSI (s) (38:44) [19:15:31:968]: Doing action: MsiUnpublishAssemblies
Action ended 19:15:31: UnpublishComponents. Return value 1.
Action start 19:15:31: MsiUnpublishAssemblies.
MSI (s) (38:44) [19:15:31:968]: Doing action: UnpublishFeatures
Action ended 19:15:31: MsiUnpublishAssemblies. Return value 1.
Action start 19:15:31: UnpublishFeatures.
MSI (s) (38:44) [19:15:31:968]: Doing action: StopServices
Action ended 19:15:31: UnpublishFeatures. Return value 1.
MSI (s) (38:44) [19:15:31:968]: Note: 1: 2205 2: 3: ServiceControl
MSI (s) (38:44) [19:15:31:968]: Note: 1: 2228 2: 3: ServiceControl 4: SELECT `Name`,`Wait`,`Arguments`,`Event`, `Action` FROM `ServiceControl`, `Component` WHERE `Component_` = `Component` AND (`Action` = 0 OR `Action` = 1 OR `Action` = 2)
Action start 19:15:31: StopServices.
MSI (s) (38:44) [19:15:31:968]: Doing action: DeleteServices
Action ended 19:15:31: StopServices. Return value 1.
MSI (s) (38:44) [19:15:31:968]: Note: 1: 2205 2: 3: ServiceControl
MSI (s) (38:44) [19:15:31:968]: Note: 1: 2228 2: 3: ServiceControl 4: SELECT `Name`,`Wait`,`Arguments`,`Event`, `Action` FROM `ServiceControl`, `Component` WHERE `Component_` = `Component` AND (`Action` = 0 OR `Action` = 1 OR `Action` = 2)
Action start 19:15:31: DeleteServices.
MSI (s) (38:44) [19:15:31:968]: Doing action: UnregisterComPlus
Action ended 19:15:31: DeleteServices. Return value 1.
MSI (s) (38:44) [19:15:31:968]: Note: 1: 2205 2: 3: Complus
MSI (s) (38:44) [19:15:31:968]: Note: 1: 2228 2: 3: Complus 4: SELECT `ComponentId`, `FileName`, `Component`.`Directory_`, `ExpType`, `Component`.`Action`, `Component`.`Installed` FROM `Complus`, `Component`, `File` WHERE `Complus`.`Component_` = `Component` AND `Component`.`KeyPath` = `File`.`File` AND `Action` = 0
Action start 19:15:31: UnregisterComPlus.
MSI (s) (38:44) [19:15:31:968]: Doing action: SelfUnregModules
Action ended 19:15:31: UnregisterComPlus. Return value 0.
Action start 19:15:31: SelfUnregModules.
MSI (s) (38:44) [19:15:31:968]: Doing action: UnregisterTypeLibraries
Action ended 19:15:31: SelfUnregModules. Return value 1.
Action start 19:15:31: UnregisterTypeLibraries.
MSI (s) (38:44) [19:15:31:968]: Doing action: RemoveODBC
Action ended 19:15:31: UnregisterTypeLibraries. Return value 1.
MSI (s) (38:44) [19:15:31:968]: Note: 1: 2205 2: 3: ODBCDataSource
MSI (s) (38:44) [19:15:31:968]: Note: 1: 2228 2: 3: ODBCDataSource 4: SELECT `DataSource`,`ComponentId`,`DriverDescription`,`Description`,`Registration` FROM `ODBCDataSource`, `Component` WHERE `Component_` = `Component` AND `Component`.`Action` = 0 AND `BinaryType` = ?
MSI (s) (38:44) [19:15:31:968]: Note: 1: 2205 2: 3: ODBCDataSource
MSI (s) (38:44) [19:15:31:968]: Note: 1: 2228 2: 3: ODBCDataSource 4: SELECT `DataSource`,`ComponentId`,`DriverDescription`,`Description`,`Registration` FROM `ODBCDataSource`, `Component` WHERE `Component_` = `Component` AND `Component`.`Action` = 0 AND `BinaryType` = ?
MSI (s) (38:44) [19:15:31:968]: Note: 1: 2205 2: 3: ODBCTranslator
MSI (s) (38:44) [19:15:31:968]: Note: 1: 2228 2: 3: ODBCTranslator 4: SELECT `Translator`,`ComponentId`,`Description`, `RuntimeFlags`, `Component`.`Attributes` FROM `ODBCTranslator`, `Component` WHERE `Component_` = `Component` AND `Component`.`ActionRequest` = 0 AND `BinaryType` = ?
MSI (s) (38:44) [19:15:31:968]: Note: 1: 2205 2: 3: ODBCTranslator
MSI (s) (38:44) [19:15:31:968]: Note: 1: 2228 2: 3: ODBCTranslator 4: SELECT `Translator`,`ComponentId`,`Description`, `RuntimeFlags`, `Component`.`Attributes` FROM `ODBCTranslator`, `Component` WHERE `Component_` = `Component` AND `Component`.`ActionRequest` = 0 AND `BinaryType` = ?
MSI (s) (38:44) [19:15:31:968]: Note: 1: 2205 2: 3: ODBCDriver
MSI (s) (38:44) [19:15:31:968]: Note: 1: 2228 2: 3: ODBCDriver 4: SELECT `Driver`,`ComponentId`,`Description`, `RuntimeFlags`, `Component`.`Attributes` FROM `ODBCDriver`, `Component` WHERE `Component_` = `Component` AND `Component`.`ActionRequest` = 0 AND `BinaryType` = ?
MSI (s) (38:44) [19:15:31:968]: Note: 1: 2205 2: 3: ODBCDriver
MSI (s) (38:44) [19:15:31:968]: Note: 1: 2228 2: 3: ODBCDriver 4: SELECT `Driver`,`ComponentId`,`Description`, `RuntimeFlags`, `Component`.`Attributes` FROM `ODBCDriver`, `Component` WHERE `Component_` = `Component` AND `Component`.`ActionRequest` = 0 AND `BinaryType` = ?
MSI (s) (38:44) [19:15:31:968]: Note: 1: 2711 2: ODBCDriverManager
Action start 19:15:31: RemoveODBC.
MSI (s) (38:44) [19:15:31:968]: Note: 1: 2711 2: ODBCDriverManager64
MSI (s) (38:44) [19:15:31:968]: Doing action: UnregisterFonts
Action ended 19:15:31: RemoveODBC. Return value 1.
MSI (s) (38:44) [19:15:31:968]: Note: 1: 2205 2: 3: Font
MSI (s) (38:44) [19:15:31:968]: Note: 1: 2228 2: 3: Font 4: SELECT `FontTitle`, `FileName`, `Directory_`, `Installed`From `Font`, `FileAction` Where `Font`.`File_` = `FileAction`.`File` And `FileAction`.`Action` = 0 ORDER BY `FileAction`.`Directory_`
Action start 19:15:31: UnregisterFonts.
MSI (s) (38:44) [19:15:31:968]: Doing action: RemoveRegistryValues
Action ended 19:15:31: UnregisterFonts. Return value 1.
Action start 19:15:31: RemoveRegistryValues.
MSI (s) (38:44) [19:15:31:968]: Doing action: UnregisterClassInfo
Action ended 19:15:31: RemoveRegistryValues. Return value 1.
Action start 19:15:31: UnregisterClassInfo.
MSI (s) (38:44) [19:15:31:968]: Doing action: UnregisterExtensionInfo
Action ended 19:15:31: UnregisterClassInfo. Return value 1.
MSI (s) (38:44) [19:15:31:968]: Note: 1: 2262 2: Extension 3: -2147287038
Action start 19:15:31: UnregisterExtensionInfo.
MSI (s) (38:44) [19:15:31:968]: Doing action: UnregisterProgIdInfo
Action ended 19:15:31: UnregisterExtensionInfo. Return value 1.
MSI (s) (38:44) [19:15:31:984]: Note: 1: 2262 2: Extension 3: -2147287038
Action start 19:15:31: UnregisterProgIdInfo.
MSI (s) (38:44) [19:15:31:984]: Doing action: UnregisterMIMEInfo
Action ended 19:15:31: UnregisterProgIdInfo. Return value 1.
MSI (s) (38:44) [19:15:31:984]: Note: 1: 2262 2: MIME 3: -2147287038
MSI (s) (38:44) [19:15:31:984]: Note: 1: 2262 2: Extension 3: -2147287038
Action start 19:15:31: UnregisterMIMEInfo.
MSI (s) (38:44) [19:15:31:984]: Doing action: RemoveIniValues
Action ended 19:15:31: UnregisterMIMEInfo. Return value 1.
MSI (s) (38:44) [19:15:31:984]: Note: 1: 2205 2: 3: IniFile
MSI (s) (38:44) [19:15:31:984]: Note: 1: 2228 2: 3: IniFile 4: SELECT `FileName`,`IniFile`.`DirProperty`,`Section`,`IniFile`.`Key`,`IniFile`.`Value`,`IniFile`.`Action` FROM `IniFile`, `Component` WHERE `Component`=`Component_` AND `Component`.`Action`=0 ORDER BY `FileName`,`Section`
Action start 19:15:31: RemoveIniValues.
MSI (s) (38:44) [19:15:31:984]: Doing action: RemoveShortcuts
Action ended 19:15:31: RemoveIniValues. Return value 1.
Action start 19:15:31: RemoveShortcuts.
MSI (s) (38:44) [19:15:31:984]: Doing action: RemoveEnvironmentStrings
Action ended 19:15:31: RemoveShortcuts. Return value 1.
MSI (s) (38:44) [19:15:31:984]: Note: 1: 2205 2: 3: Environment
MSI (s) (38:44) [19:15:31:984]: Note: 1: 2228 2: 3: Environment 4: SELECT `Name`,`Value` FROM `Environment`,`Component` WHERE `Component_`=`Component` AND (`Component`.`Action` = 0)
Action start 19:15:31: RemoveEnvironmentStrings.
MSI (s) (38:44) [19:15:31:984]: Doing action: RemoveDuplicateFiles
Action ended 19:15:31: RemoveEnvironmentStrings. Return value 1.
Action start 19:15:31: RemoveDuplicateFiles.
MSI (s) (38:44) [19:15:31:984]: Doing action: RemoveFiles
Action ended 19:15:31: RemoveDuplicateFiles. Return value 1.
MSI (s) (38:44) [19:15:31:984]: Note: 1: 2205 2: 3: RemoveFile
MSI (s) (38:44) [19:15:31:984]: Note: 1: 2205 2: 3: RemoveFile
Action start 19:15:31: RemoveFiles.
MSI (s) (38:44) [19:15:31:984]: Doing action: RemoveFolders
Action ended 19:15:31: RemoveFiles. Return value 0.
Action start 19:15:31: RemoveFolders.
MSI (s) (38:44) [19:15:31:984]: Doing action: CreateFolders
Action ended 19:15:31: RemoveFolders. Return v

Répondre à lolo69-88

Vois pas ce que c'est ...

------------------------------ Prévention & Protection||Vous m'aimez ? Cliquez :o
Répondre à Angeldark

a part ca j'ai mon autre pc qui devrait t'interessé lol il a du recevoir lui

sinon je vais ouvrir une société d'info et t'embaucher lol

Si tu veut je refait le scan et te l'envoie

Répondre à lolo69-88

en fait je crois que c'est arrivé apres que qq ai pris le controle de mon pc par real vnc mais ca a pas l'air bien grave

Répondre à lolo69-88

Re,

Tu peux m'envoyer le rapport de l'autre pc.

------------------------------ Prévention & Protection||Vous m'aimez ? Cliquez :o
Répondre à Angeldark

voici


Logfile of HijackThis v1.99.1
Scan saved at 15:00:15, on 19/11/2006
Platform: Windows XP (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2600.0000)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\SYSTEM32\ZoneLabs\vsmon.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\MSI\BToes Bluetooth Software\bin\btwdins.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\LVCOMSX.EXE
C:\HP\KBD\KBD.EXE
C:\windows\system\hpsysdrv.exe
C:\WINDOWS\System32\rundll32.exe
C:\PROGRA~1\MESSAG~1\StartMessager.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\Program Files\MSI\BToes Bluetooth Software\BTTray.exe
C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe
C:\PROGRA~1\WinZip\winzip32.exe
C:\DOCUME~1\TEMP\LOCALS~1\Temp\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://adsl.free.fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://srch-fr3.hpwis.com/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\Wanadoo\SEARCH~1.DLL (file missing)
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.02.0002.1001\en-xu\stmain.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.2001.0001\fr\msntb.dll
O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.2001.0001\fr\msntb.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O3 - Toolbar: Internet Anonyme - {00000000-0002-0002-0000-000000000000} - c:\program files\steganos internet anonym pro 6\siaiep.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\System32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [Microsoft Works Update Detection] C:\Program Files\Microsoft Works\WkDetect.exe
O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\System32\LVCOMSX.EXE
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\System32\igfxtray.exe
O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exe
O4 - HKLM\..\Run: [AdslTaskBar] rundll32.exe stmctrl.dll,TaskBar
O4 - HKLM\..\Run: [MessagerStarter Wanadoo] C:\PROGRA~1\MESSAG~1\StartMessager.exe Messager Wanadoo
O4 - HKLM\..\Run: [Zone Labs Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKLM\..\Run: [LXCFCATS] rundll32 8ôwÿÿÿÿÁŽôw!åw\3\LXCFtime.dll,_RunDLLEntry@16
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: BTTray.lnk = ?
O4 - Global Startup: DSLMON.lnk = C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~4\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: Envoyer à &Bluetooth - C:\Program Files\MSI\BToes Bluetooth Software\btsendto_ie_ctx.htm
O9 - Extra button: Organise-notes - {9455301C-CF6B-11D3-A266-00C04F689C50} - C:\Program Files\Fichiers communs\Microsoft Shared\Reference 2001\EROProj.dll
O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\MSI\BToes Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: @btrez.dll,-4017 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\MSI\BToes Bluetooth Software\btsendto_ie.htm
O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O9 - Extra button: (no name) - SolidConverterPDF - (no file) (HKCU)
O18 - Protocol: widimg - {EE7C2AFF-5742-44FF-BD0E-E521B0D3C3BA} - C:\WINDOWS\System32\btxppanel.dll
O23 - Service: Adobe LM Service - Unknown owner - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation - C:\Program Files\MSI\BToes Bluetooth Software\bin\btwdins.exe
O23 - Service: lxcf_device - Unknown owner - C:\WINDOWS\System32\lxcfcoms.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\SYSTEM32\ZoneLabs\vsmon.exe

Répondre à lolo69-88

en fait j'ai juste la version gratos de zone alarm ca suffit pas ca ??

Ce pc il tourne a deux a l'heure sur internet si tu a une solution par hasard !!

Répondre à lolo69-88

C'est OK.
Il faut un antivirus aussi (Antivir, AVG...)

------------------------------ Prévention & Protection||Vous m'aimez ? Cliquez :o
Répondre à Angeldark

mais quand je l'allume il me met un message d'erreur c'est pas grave ca?? l'extension du fichier est en .dll et le nom est a couper au couteau lol
Sinon pour ameliorer la rapidité sur le net tu sais comment je peut faire

Répondre à lolo69-88

Je suis allé trop vite.

Quel est le nom de la .dll ?

------------------------------ Prévention & Protection||Vous m'aimez ? Cliquez :o
Répondre à Angeldark

suis de retour dsl j'ai du m'absenter
je veridie le nom du point dll et te le reposte

Répondre à lolo69-88

c'est un rundll il me dit erreur de chargement de des caracters louche et à la fin \3\LXCFtime.dll

voila

Répondre à lolo69-88

Re,

- Lance Hijackthis ->Do a system scan only
->Coche la ligne ci-dessous :

O4 - HKLM\..\Run: [LXCFCATS] rundll32 8ôwÿÿÿÿÁŽôw!åw\3\LXCFtime.dll,_RunDLLEntry@16

Clique sur Fix checked (en bas à gauche)

------------------------------ Prévention & Protection||Vous m'aimez ? Cliquez :o
Répondre à Angeldark

merci beaucoup je vai essayer et te tiendrai au courant
Bonne journée

Répondre à lolo69-88

salut en cliquant sur fix checked le message ne va plus apparaitre et qu'est ce qui va se passer !! ce fihier empeche t'il quelque chose de tourner correctement ??

Répondre à lolo69-88

Fais Fix Chercked puis redémarre :)

------------------------------ Prévention & Protection||Vous m'aimez ? Cliquez :o
Répondre à Angeldark

ok pu rien merci
mais mon pc est super lent quand je suis connécté
sais tu si ca a qq chose a voir ou pas et sinon sait tu comment faire
merci d'avance

Répondre à lolo69-88
Tom's Guide > Forum > Sécurité - Virus > comment bloquer l'acces a mon pc ???
Aller à :

Il y a 1841 utilisateurs connus et inconnus. Pour voir la liste des connectés connus, cliquez ici.

Attention

Vous allez répondre sur un sujet resté inactif pendant plus de 6 mois.
Assurez-vous d'apporter des éléments nouveaux à la discussion avant de poursuivre.

Répondre Annuler
Liens