Pubs intempestives sur IE, svp aidez moi!!!

voici le rapport,


--------- Logfile of AD-Remover 1.0.8.2 by C_XX ---------

# START at: 15:09:55 | Mer 31/12/2008 | Microsoft® Windows XP™ SP3 (v5.1.2600)
# BOOT MODE: Normal

# OPTION: Scan | EXECUTED FROM: C:\Program Files\Ad-remover\AD-Remover.bat

# PC: ANTHONY | USER: Toto008 ( Current user is an administrator)

# DRIVE(S):
- C:\ (File System: NTFS)
- D:\ (File System: FAT32)

# Internet Explorer v7.0.5730.13

--------- [ RUNNING PROCESSES: 51 ] ---------

C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\msdtc.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
C:\Program Files\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Kerio\Personal Firewall 4\kpf4ss.exe
C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
C:\Program Files\Kerio\Personal Firewall 4\kpf4gui.exe
C:\Program Files\CDBurnerXP\NMSAccessU.exe
C:\Program Files\Kerio\Personal Firewall 4\kpf4gui.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\ehome\mcrdsvc.exe
C:\WINDOWS\system32\mqsvc.exe
C:\Program Files\Windows Media Player\WMPNetwk.exe
C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
C:\Program Files\Canon\CAL\CALMAIN.exe
C:\WINDOWS\system32\mqtgsvc.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\vVX1000.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
C:\Program Files\AVG Anti-Spyware 7.5\avgas.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Windows Live\MessengerSearchAddon\msgrsrch.exe
C:\Program Files\Windows Media Player\WMPNSCFG.exe
C:\Program Files\TomTom HOME 2\HOMERunner.exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\WINDOWS\system32\ntvdm.exe

-----------------------------------


+-----------------------| Boonty/Boonty Games Elements found :

"Boonty Games" (service)
.
"HKEY_CLASSES_ROOT\boontybox"
"HKEY_LOCAL_MACHINE\Software\Boonty"
"HKEY_LOCAL_MACHINE\Software\Classes\boontybox"
"HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Boonty Games"
"HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Boonty Games"
"HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\Boonty Games"
.
[08/01/2008 18:56] C:\Program Files\Boonty
[08/01/2008 16:58] C:\Program Files\Boonty\Components
[08/01/2008 16:58] C:\Program Files\Boonty\Components\BoontyBox_01net_setup.exe
[23/01/2008 22:43] C:\Program Files\BoontyGames
[08/01/2008 18:21] C:\Program Files\BoontyGames\appartement3d2006.exe
[08/01/2008 18:21] C:\Program Files\BoontyGames\Components
[07/12/2005 11:46] C:\Program Files\BoontyGames\Components\bureau.url
[27/10/2003 14:07] C:\Program Files\BoontyGames\Components\Joystick.ico
[07/12/2005 11:46] C:\Program Files\BoontyGames\Components\start.url
[06/11/2006 20:46] C:\Program Files\Fichiers communs\BOONTY Shared
[06/11/2006 20:46] C:\Program Files\Fichiers communs\BOONTY Shared\Service
[06/11/2006 20:46] C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe
[06/11/2006 20:46] C:\Documents and Settings\All Users\Application Data\BOONTY
[08/01/2008 18:54] C:\Documents and Settings\All Users\Application Data\BOONTY\Licenses
[20/11/2006 03:05] C:\Documents and Settings\All Users\Application Data\BOONTY\Licenses\B3D43000.dat
[23/01/2008 22:42] C:\Documents and Settings\All Users\Application Data\BOONTY\Licenses\B45EA000.dat

+-----------------------| Eorezo Elements found :

.

+-----------------------| Everest Poker Elements found :

.

+-----------------------| FunWebProducts/MyWay/MyWebSearch/MyGlobalSearch Elements found :

.

+-----------------------| It's TV Elements found :

.

+-----------------------| Sweetim Elements found :

"HKEY_CURRENT_USER\SOFTWARE\SweetIM"
"HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{EEE6C35B-6118-11DC-9C72-001320C79847}"
"HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{EEE6C35C-6118-11DC-9C72-001320C79847}"
"HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\ESENT\Process\SweetIM"
"HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\SweetIM"
"HKEY_LOCAL_MACHINE\SOFTWARE\SweetIM"
.
[09/10/2008 17:37] C:\Documents and Settings\Toto008\Application Data\Mozilla\Firefox\Profiles\y8ae6y2c.default\searchplugins\sweetim.xml
[09/10/2008 17:38] C:\Documents and Settings\Toto008\Application Data\Mozilla\Firefox\Profiles\y8ae6y2c.default\extensions\{EEE6C361-6118-11DC-9C72-001320C79847}
[09/10/2008 17:38] C:\Documents and Settings\Toto008\Application Data\Mozilla\Firefox\Profiles\y8ae6y2c.default\extensions\{EEE6C361-6118-11DC-9C72-001320C79847}\chrome
[27/04/2008 14:12] C:\Documents and Settings\Toto008\Application Data\Mozilla\Firefox\Profiles\y8ae6y2c.default\extensions\{EEE6C361-6118-11DC-9C72-001320C79847}\chrome.manifest
[09/10/2008 17:38] C:\Documents and Settings\Toto008\Application Data\Mozilla\Firefox\Profiles\y8ae6y2c.default\extensions\{EEE6C361-6118-11DC-9C72-001320C79847}\components
[07/09/2008 18:22] C:\Documents and Settings\Toto008\Application Data\Mozilla\Firefox\Profiles\y8ae6y2c.default\extensions\{EEE6C361-6118-11DC-9C72-001320C79847}\install.rdf
[09/10/2008 17:38] C:\Documents and Settings\Toto008\Application Data\Mozilla\Firefox\Profiles\y8ae6y2c.default\extensions\{EEE6C361-6118-11DC-9C72-001320C79847}\META-INF
[07/09/2008 18:22] C:\Documents and Settings\Toto008\Application Data\Mozilla\Firefox\Profiles\y8ae6y2c.default\extensions\{EEE6C361-6118-11DC-9C72-001320C79847}\chrome\sweetim-toolbar.jar
[01/07/2008 15:54] C:\Documents and Settings\Toto008\Application Data\Mozilla\Firefox\Profiles\y8ae6y2c.default\extensions\{EEE6C361-6118-11DC-9C72-001320C79847}\components\SIMAutoCompleteSearch.js
[07/09/2008 18:22] C:\Documents and Settings\Toto008\Application Data\Mozilla\Firefox\Profiles\y8ae6y2c.default\extensions\{EEE6C361-6118-11DC-9C72-001320C79847}\META-INF\manifest.mf
[07/09/2008 18:22] C:\Documents and Settings\Toto008\Application Data\Mozilla\Firefox\Profiles\y8ae6y2c.default\extensions\{EEE6C361-6118-11DC-9C72-001320C79847}\META-INF\zigbert.rsa
[07/09/2008 18:22] C:\Documents and Settings\Toto008\Application Data\Mozilla\Firefox\Profiles\y8ae6y2c.default\extensions\{EEE6C361-6118-11DC-9C72-001320C79847}\META-INF\zigbert.sf
[14/10/2008 16:26] C:\Documents and Settings\Toto008\Application Data\Mozilla\Firefox\Profiles\y8ae6y2c.default\SweetIMToolbarData
[14/10/2008 16:26] C:\Documents and Settings\Toto008\Application Data\Mozilla\Firefox\Profiles\y8ae6y2c.default\SweetIMToolbarData\logs
[17/08/2008 09:41] C:\WINDOWS\Installer\{1D14373E-7970-4F2F-A467-ACA4F0EA21E3}\ARPPRODUCTICON.exe
[01/09/2006 09:55] C:\WINDOWS\Installer\{23012310-3E05-46A5-88A9-C6CBCABCAC79}\ARPPRODUCTICON.exe
[01/09/2006 09:55] C:\WINDOWS\Installer\{8105684D-8CA6-440D-8F58-7E5FD67A499D}\ARPPRODUCTICON.exe
[01/04/2008 17:45] C:\WINDOWS\Installer\{AC76BA86-7AD7-5464-3428-800000000003}\ARPPRODUCTICON.exe
[01/09/2006 09:56] C:\WINDOWS\Installer\{BB85ED9C-AFC9-43BD-B8DC-258C3C7DF72E}\ARPPRODUCTICON.exe
[30/12/2008 09:58] C:\WINDOWS\Prefetch\SWEETIM.EXE-114201E6.pf

+-----------------------| ADDED SCAN :



+---------- Scanning prefs.js ... ( # Mozilla User Preferences )

...\y8ae6y2c.default\prefs.js :

~~~~ Mozilla FireFox version 3.0.5 ~~~~

* Browser Search Default Engine: "SweetIM Search"
* Browser Search Default Engine: "MyStart Rechercher"
* Browser Search Selected Engine: "SweetIM Search"
* Browser Search Selected Engine: "Live Search"
* Browser Search Default Url: "https://search.sweetim.com/search.asp?src=2&q="
* Browser Search Default Url: "https://www.google.com/webhp?lr=&ie=UTF-8&oe=UTF-8&gws_rd=ssl"
* Browser Startup HomePage: "https://www.google.fr/webhp?sourceid=navclient-ff&ie=UTF-8&rlz=1B3GGGL_frFR241FR241&gws_rd=ssl"
* Browser Startup HomePage: "https://www.msn.com/fr-fr/?redirfallthru=http%3a%2f%2fwww.msn.fr%2fimg%2ffr%2ffr-fr%2fdivertissement%2fcelebrites%2fgalery%2fwentworth02.jpg%3f"

+--+ +--+ +--+ +--+
.
FOUND- user_pref("browser.search.defaultenginename", "SweetIM Search");
FOUND- user_pref("browser.search.defaulturl", "https://search.sweetim.com/search.asp?src=2&q=");
FOUND- user_pref("browser.search.selectedEngine", "SweetIM Search");
FOUND- user_pref("keyword.URL", "https://search.sweetim.com/search.asp?src=2&q=");
FOUND- user_pref("sweetim.toolbar.highlight.colors", "#FFFF00,#00FFE4,#5AFF00,#0087FF,#FFCC00,#FF00F0");
FOUND- user_pref("sweetim.toolbar.logger.ConsoleHandler.MinReportLevel", "7");
FOUND- user_pref("sweetim.toolbar.logger.FileHandler.FileName", "ff-toolbar.log");
FOUND- user_pref("sweetim.toolbar.logger.FileHandler.MaxFileSize", "200000");
FOUND- user_pref("sweetim.toolbar.logger.FileHandler.MinReportLevel", "7");
FOUND- user_pref("sweetim.toolbar.mode.debug", "false");
FOUND- user_pref("sweetim.toolbar.previous.browser.search.defaultenginename", "MyStart Rechercher");
FOUND- user_pref("sweetim.toolbar.previous.browser.search.defaulturl", "https://www.google.com/webhp?lr=&ie=UTF-8&oe=UTF-8&gws_rd=ssl");
FOUND- user_pref("sweetim.toolbar.previous.browser.search.selectedEngine", "Live Search");
FOUND- user_pref("sweetim.toolbar.previous.browser.startup.homepage", "https://www.msn.com/fr-fr/?redirfallthru=http%3a%2f%2fwww.msn.fr%2fimg%2ffr%2ffr-fr%2fdivertissement%2fcelebrites%2fgalery%2fwentworth02.jpg%3f");
FOUND- user_pref("sweetim.toolbar.previous.keyword.URL", "https://www.bing.com/?scope=web&mkt=fr-FR&FORM=MICWV2");
FOUND- user_pref("sweetim.toolbar.search.external", "<?xml version=\"1.0\"?><TOOLBAR><EXTERNAL_SEARCH engine=\"http://*google.*\" param=\"q=\" /><EXTERNAL_SEARCH engine=\"https://search.yahoo.com/*\" param=\"p=\" /><EXTERNAL_SEARCH engine=\"http://search.sweetim.*\" param=\"q=\" /><EXTERNAL_SEARCH engine=\"http://*.live.*/*\" param=\"q=\" /><EXTERNAL_SEARCH engine=\"http://*youtube.com/\" param=\"search_query=\" /><EXTERNAL_SEARCH engine=\"http://*.ebay.*/search/*\" param=\"satitle=\" /><EXTERNAL_SEARCH engine=\"http://*.amazon.com/s/*\" param=\"field-keywords=\" /></TOOLBAR>");
FOUND- user_pref("sweetim.toolbar.search.history.capacity", "10");
FOUND- user_pref("sweetim.toolbar.simapp_id", "{9D3EB6F3-1CE5-4E64-8100-B7A2210C9665}");
FOUND- user_pref("sweetim.toolbar.urls.homepage", "https://home.sweetim.com/");
FOUND- user_pref("sweetim.toolbar.version", "1.0.0.6");

+---------------------------------------------------------------------------+

+--[HKEY_CURRENT_USER\..\Run]

swg REG_SZ C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
ctfmon.exe REG_SZ C:\WINDOWS\system32\ctfmon.exe
msnlivesearch REG_SZ C:\Program Files\Windows Live\MessengerSearchAddon\msgrsrch.exe /Run
WMPNSCFG REG_SZ C:\Program Files\Windows Media Player\WMPNSCFG.exe
TomTomHOME.exe REG_SZ "C:\Program Files\TomTom HOME 2\HOMERunner.exe"

+--[HKEY_LOCAL_MACHINE\..\Run]

NvCplDaemon REG_SZ RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
VX1000 REG_SZ C:\WINDOWS\vVX1000.exe
avgnt REG_SZ "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
NvMediaCenter REG_SZ RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
TkBellExe REG_SZ "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
!AVG Anti-Spyware REG_SZ "C:\Program Files\AVG Anti-Spyware 7.5\avgas.exe" /minimized
QuickTime Task REG_SZ "C:\Program Files\QuickTime\qttask.exe" -atboottime
Adobe Reader Speed Launcher REG_SZ "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
SunJavaUpdateSched REG_SZ "C:\Program Files\Java\jre6\bin\jusched.exe"

+--[HKEY_USERS\.DEFAULT\..\Run]

CTFMON.EXE REG_SZ C:\WINDOWS\system32\CTFMON.EXE
DWQueuedReporting REG_SZ "C:\PROGRA~1\FICHIE~1\MICROS~1\DW\dwtrig20.exe" -t

+--[HKEY_CURRENT_USER\..\Internet Explorer\MAIN]

Start Page : hxxp://www.google.fr/webhp?sourceid=navclient&hl=fr&ie=UTF-8&rls=GFRD,GFRD

+--[HKEY_LOCAL_MACHINE\..\Internet Explorer\MAIN]

Start Page : hxxp:blank

+---------------------------------------------------------------------------+

- "C:\AD-report-Scan-31.12.2008.log" (~12699 bytes)

# END at: 15:10:14 | 31/12/2008 - Time elapsed: 18.1 seconds

+---------------------------------------------------------------------------+
+------------------------------- [ E.O.F - 183 lines ]
+---------------------------------------------------------------------------+