fenetre pop Résolu

Question

Bonjour,
depuis quelque jour et sans avoir modifié quoique ce soit, quand je vais sur le net, firefox m'ouvre une fenêtre d'avertissement pop!! pourquoi? et comment régler ce problème? merci

J_O_J_O · Answer

Salut c'est à dire ?! Pop pour moi pop = pop-up donc publicité ...

bleurk · Answer

oui c'est ça popup,adv

J_O_J_O · Answer

Ok Sa marche fait ça alors s'il te plaît . :

*Télécharges et installes le logiciel HijackThis de Merijn(prog de diagnostic !) :

*ici : http://www.trendsecure.com/portal/en-US/_download/HJTInstall.exe

*Ouvre et click sur: "do you scan systeme and save log file" a la fin du scan poste le rapport ici :)

bleurk · Answer

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 13:13:41, on 23/01/2009
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v7.00 (7.00.6001.18000)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32	askeng.exe
C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Windows\ehome\ehtray.exe
C:\Windows\ehome\ehmsas.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\Windows Live\MessengerSearchAddon\msgrsrch.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\PDFCreator\PDFCreator.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Windows\System32\mobsync.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Windows Live\Contacts\wlcomm.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/webhp?sourceid=navclient&hl=fr&ie=UTF-8&gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://home.sweetim.com/
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = 
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = 
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = 
O1 - Hosts: ::1 localhost
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Download Manager Browser Helper Object - {19C8E43B-07B3-49CB-BFFC-6777B593E6F8} - C:\PROGRA~1\COMMON~1\fluxDVD\DOWNLO~1\XEBDLH~1.DLL
O2 - BHO: SWEETIE - {1A0AADCD-3A72-4b5f-900F-E3BB5A838E2A} - (no file)
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - (no file)
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: EoRezoBHO - {64F56FC1-1272-44CD-BA6E-39723696E350} - (no file)
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.0.926.3450\swg.dll
O2 - BHO: EoBHO - {C7B76B90-3455-4AE6-A752-EAC4D19689E5} - (no file)
O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_219B3E1547538286.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O3 - Toolbar: (no name) - {BC4FFE41-DE9F-46fa-B455-AAD49B9F9938} - (no file)
O3 - Toolbar: &Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O4 - HKLM\..\RunOnce: [Launcher] %WINDIR%\SMINST\launcher.exe
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
O4 - HKCU\..\Run: [msnlivesearch] C:\Program Files\Windows Live\MessengerSearchAddon\msgrsrch.exe /Run
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
O4 - Global Startup: PDFCreator.lnk = C:\Program Files\PDFCreator\PDFCreator.exe
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
O9 - Extra button: Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O13 - Gopher Prefix: 
O16 - DPF: CANALPLAY Installer - https://www.canalplus.com/canalplay/
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.hotmail.com/mail/w2/resources/VistaMSNPUpldfr-fr.cab
O16 - DPF: {7FC1B346-83E6-4774-8D20-1A6B09B0E737} (Windows Live Photo Upload Control) - http://joblamis.spaces.live.com/PhotoUpload/VistaMsnPUpldfr-fr.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O18 - Protocol: bw+0 - {2E1C31C2-8A6F-4CE6-AD09-DD880558C06B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw+0s - {2E1C31C2-8A6F-4CE6-AD09-DD880558C06B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0 - {2E1C31C2-8A6F-4CE6-AD09-DD880558C06B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0s - {2E1C31C2-8A6F-4CE6-AD09-DD880558C06B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00 - {2E1C31C2-8A6F-4CE6-AD09-DD880558C06B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00s - {2E1C31C2-8A6F-4CE6-AD09-DD880558C06B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10 - {2E1C31C2-8A6F-4CE6-AD09-DD880558C06B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10s - {2E1C31C2-8A6F-4CE6-AD09-DD880558C06B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20 - {2E1C31C2-8A6F-4CE6-AD09-DD880558C06B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20s - {2E1C31C2-8A6F-4CE6-AD09-DD880558C06B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30 - {2E1C31C2-8A6F-4CE6-AD09-DD880558C06B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30s - {2E1C31C2-8A6F-4CE6-AD09-DD880558C06B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40 - {2E1C31C2-8A6F-4CE6-AD09-DD880558C06B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40s - {2E1C31C2-8A6F-4CE6-AD09-DD880558C06B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50 - {2E1C31C2-8A6F-4CE6-AD09-DD880558C06B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50s - {2E1C31C2-8A6F-4CE6-AD09-DD880558C06B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60 - {2E1C31C2-8A6F-4CE6-AD09-DD880558C06B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60s - {2E1C31C2-8A6F-4CE6-AD09-DD880558C06B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70 - {2E1C31C2-8A6F-4CE6-AD09-DD880558C06B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70s - {2E1C31C2-8A6F-4CE6-AD09-DD880558C06B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80 - {2E1C31C2-8A6F-4CE6-AD09-DD880558C06B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80s - {2E1C31C2-8A6F-4CE6-AD09-DD880558C06B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90 - {2E1C31C2-8A6F-4CE6-AD09-DD880558C06B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90s - {2E1C31C2-8A6F-4CE6-AD09-DD880558C06B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0 - {2E1C31C2-8A6F-4CE6-AD09-DD880558C06B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0s - {2E1C31C2-8A6F-4CE6-AD09-DD880558C06B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0 - {2E1C31C2-8A6F-4CE6-AD09-DD880558C06B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0s - {2E1C31C2-8A6F-4CE6-AD09-DD880558C06B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0 - {2E1C31C2-8A6F-4CE6-AD09-DD880558C06B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0s - {2E1C31C2-8A6F-4CE6-AD09-DD880558C06B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0 - {2E1C31C2-8A6F-4CE6-AD09-DD880558C06B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0s - {2E1C31C2-8A6F-4CE6-AD09-DD880558C06B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0 - {2E1C31C2-8A6F-4CE6-AD09-DD880558C06B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0s - {2E1C31C2-8A6F-4CE6-AD09-DD880558C06B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0 - {2E1C31C2-8A6F-4CE6-AD09-DD880558C06B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0s - {2E1C31C2-8A6F-4CE6-AD09-DD880558C06B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O18 - Protocol: bwg0 - {2E1C31C2-8A6F-4CE6-AD09-DD880558C06B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwg0s - {2E1C31C2-8A6F-4CE6-AD09-DD880558C06B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0 - {2E1C31C2-8A6F-4CE6-AD09-DD880558C06B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0s - {2E1C31C2-8A6F-4CE6-AD09-DD880558C06B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0 - {2E1C31C2-8A6F-4CE6-AD09-DD880558C06B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0s - {2E1C31C2-8A6F-4CE6-AD09-DD880558C06B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0 - {2E1C31C2-8A6F-4CE6-AD09-DD880558C06B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0s - {2E1C31C2-8A6F-4CE6-AD09-DD880558C06B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0 - {2E1C31C2-8A6F-4CE6-AD09-DD880558C06B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0s - {2E1C31C2-8A6F-4CE6-AD09-DD880558C06B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0 - {2E1C31C2-8A6F-4CE6-AD09-DD880558C06B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0s - {2E1C31C2-8A6F-4CE6-AD09-DD880558C06B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0 - {2E1C31C2-8A6F-4CE6-AD09-DD880558C06B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0s - {2E1C31C2-8A6F-4CE6-AD09-DD880558C06B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0 - {2E1C31C2-8A6F-4CE6-AD09-DD880558C06B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0s - {2E1C31C2-8A6F-4CE6-AD09-DD880558C06B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0 - {2E1C31C2-8A6F-4CE6-AD09-DD880558C06B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0s - {2E1C31C2-8A6F-4CE6-AD09-DD880558C06B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0 - {2E1C31C2-8A6F-4CE6-AD09-DD880558C06B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0s - {2E1C31C2-8A6F-4CE6-AD09-DD880558C06B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0 - {2E1C31C2-8A6F-4CE6-AD09-DD880558C06B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0s - {2E1C31C2-8A6F-4CE6-AD09-DD880558C06B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0 - {2E1C31C2-8A6F-4CE6-AD09-DD880558C06B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0s - {2E1C31C2-8A6F-4CE6-AD09-DD880558C06B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0 - {2E1C31C2-8A6F-4CE6-AD09-DD880558C06B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0s - {2E1C31C2-8A6F-4CE6-AD09-DD880558C06B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0 - {2E1C31C2-8A6F-4CE6-AD09-DD880558C06B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0s - {2E1C31C2-8A6F-4CE6-AD09-DD880558C06B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0 - {2E1C31C2-8A6F-4CE6-AD09-DD880558C06B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0s - {2E1C31C2-8A6F-4CE6-AD09-DD880558C06B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0 - {2E1C31C2-8A6F-4CE6-AD09-DD880558C06B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0s - {2E1C31C2-8A6F-4CE6-AD09-DD880558C06B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0 - {2E1C31C2-8A6F-4CE6-AD09-DD880558C06B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0s - {2E1C31C2-8A6F-4CE6-AD09-DD880558C06B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0 - {2E1C31C2-8A6F-4CE6-AD09-DD880558C06B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0s - {2E1C31C2-8A6F-4CE6-AD09-DD880558C06B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0 - {2E1C31C2-8A6F-4CE6-AD09-DD880558C06B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0s - {2E1C31C2-8A6F-4CE6-AD09-DD880558C06B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0 - {2E1C31C2-8A6F-4CE6-AD09-DD880558C06B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0s - {2E1C31C2-8A6F-4CE6-AD09-DD880558C06B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll
O18 - Protocol: offline-8876480 - {2E1C31C2-8A6F-4CE6-AD09-DD880558C06B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Unknown owner - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe (file missing)
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - c:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: LiveUpdate Notice Service Ex (LiveUpdate Notice Ex) - Unknown owner - c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe (file missing)
O23 - Service: LiveUpdate Notice Service - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe
O23 - Service: LVCOMSer - Logitech Inc. - C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe
O23 - Service: Process Monitor (LVPrcSrv) - Logitech Inc. - C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe
O23 - Service: Nero BackItUp Scheduler 3 - Nero AG - C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe
O23 - Service: Planificateur LiveUpdate automatique - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: PnkBstrB - Unknown owner - C:\Windows\system32\PnkBstrB.exe
O23 - Service: RoxMediaDB9 - Sonic Solutions - c:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe
O23 - Service: SBSD Security Center Service (SBSDWSCService) - Safer Networking Ltd. - C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe
O23 - Service: stllssvr - MicroVision Development, Inc. - c:\Program Files\Common Files\SureThing Shared\stllssvr.exe

bleurk · Answer

je fait quoi maintenant?

J_O_J_O · Answer

Merci et dsl du temps de réponse je mangé ;) donc fait ceci s'il te plaît ::::::

Télécharge de AD-Remover de Cyrildu17 / C_XX) sur ton Bureau.

http://sd-1.archive-host.com/membres/up/16506160323759868/AD­-R.exe 

/!\ Déconnecte-toi et ferme toutes applications en cours /!\

- Double-clique sur le programme d'installation, installe-le dans son emplacement par défaut (C:\Program files).
- Double-clique sur l'icône Ad-remover située sur ton Bureau.
- Au menu principal, choisis l'option "A".
- Poste le rapport qui apparaît à la fin.

(Le rapport est sauvegardé aussi sous C:\Ad-report(date).log)

(CTRL+A pour tout sélectionner, CTRL+C pour copier et CTRL+V pour coller)

bleurk · Answer

dsl mais le lien est pas bon

bleurk · Answer

je l'est trouver ailleurs je te poste le message

J_O_J_O · Answer

Dsl pour le lien j'ai pas fai gaffe . Ok bin si tu la pas de problème ;)

bleurk · Answer

j'ai bien installer AD-Remover de Cyrildu17, quand je le lance, une fenetre s'ouvre et me demande a.b.c.d
je choisi l'option A (scan), une fenetre dialog souvre ...
accés refusé
accés refusé
accés refusé
accés refusé
accés refusé
accés refusé
etc...j'ai pas de rapport

J_O_J_O · Answer

Je suis bète j'ai oublier de te faire désactiver l'uac de vista ! Faut que tu désactive le Tea-timer de Spybot donc tien un ptit tuto : https://forums.cnetfrance.fr

Uac ::: https://www.zebulon.fr/astuces/pratique/220-desactiver-l-uac-dans-vista.html  Ensuite relance Ad-remover ;)

bleurk · Answer

as tu reçus le rapport? car moi je ne le vois pas alors que je te les posté

bleurk · Answer

je recommence le voila merci encore


------- LOGFILE OF AD-REMOVER 1.0.9.3 | ONLY XP/VISTA -------

Updated by C_XX on 17/01/2009 at 12:00

Start at: 15:03:00 | Fri 23/01/2009 | Microsoft® Windows Vista™ Home Premium SP1 (V6.0.6001)
Boot mode: MSE
Option: SCAN | Executed from: C:\Program Files\Ad-remover\Ad-remover.bat
Pc: PC-DE-JOHNNY | User: johnny ( Current user is an administrator)
Drive(s): 
- C:\  (File System: NTFS)
- D:\  (File System: NTFS)
System Drive: C:\
Windows Directory: C:\Windows\
System Directory: C:\Windows\System32\

--- Running Processes: 24

+--------------------| Boonty/Boonty Games Elements Found :

.
HKCR\boontybox
HKLM\Software\Boonty
HKLM\Software\Classes\boontybox
HKLM\SYSTEM\ControlSet001\Services\Boonty Games
HKLM\SYSTEM\ControlSet002\Enum\Root\LEGACY_BOONTY_GAMES
HKLM\SYSTEM\ControlSet002\Services\Boonty Games
HKLM\SYSTEM\CurrentControlSet\Services\Boonty Games
.
C:\ProgramData\BOONTY
C:\ProgramData\BOONTY\Licenses
C:\ProgramData\BOONTY\Licenses\B3624000.dat
C:\ProgramData\BOONTY\Licenses\B36EC000.dat
C:\ProgramData\BOONTY\Licenses\B3CDF000.dat
C:\ProgramData\BOONTY\Licenses\B5210000.dat

+--------------------| Eorezo Elements Found :

.
HKCR\Interface\{B0D071A1-36B3-4757-A126-14C89C56013A}
HKCR\Typelib\{B4C656C9-F2E9-4E77-B3F4-443DF2BD778F}
HKCU\SOFTWARE\EoRezo
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{64F56FC1-1272-44CD-BA6E-39723696E350}
HKLM\SOFTWARE\EoRezo
HKLM\SOFTWARE\Classes\AppID\{362A53B2-2913-4F8A-82F5-7E0A23FDC6F9}
HKLM\SOFTWARE\Classes\AppID\EoRezoBHO.DLL
HKLM\SOFTWARE\Classes\TypeLib\{B6ACB3F1-6A83-432C-B854-3E1056F87F4E}
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{64F56FC1-1272-44CD-BA6E-39723696E350}
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C7B76B90-3455-4AE6-A752-EAC4D19689E5}
.
C:\Users\johnny\AppData\Roaming\EoRezo
C:\Users\johnny\AppData\Roaming\EoRezo\cmhost.cyp
C:\Users\johnny\AppData\Roaming\EoRezo\ConfMedia.cyp
C:\Users\johnny\AppData\Roaming\EoRezo\db
C:\Users\johnny\AppData\Roaming\EoRezo\EoClock.cfg
C:\Users\johnny\AppData\Roaming\EoRezo\EoClockVal.cfg
C:\Users\johnny\AppData\Roaming\EoRezo\EoClockVal_2AAB2F6.cfg
C:\Users\johnny\AppData\Roaming\EoRezo\EoComputer.cfg
C:\Users\johnny\AppData\Roaming\EoRezo\eoDesktop
C:\Users\johnny\AppData\Roaming\EoRezo\EoNet.cfg
C:\Users\johnny\AppData\Roaming\EoRezo\EoPhoto
C:\Users\johnny\AppData\Roaming\EoRezo\EoPhoto.cfg
C:\Users\johnny\AppData\Roaming\EoRezo\EoRss
C:\Users\johnny\AppData\Roaming\EoRezo\EoRss.cfg
C:\Users\johnny\AppData\Roaming\EoRezo\eoStats
C:\Users\johnny\AppData\Roaming\EoRezo\EoSudoku
C:\Users\johnny\AppData\Roaming\EoRezo\EoTraduction
C:\Users\johnny\AppData\Roaming\EoRezo\EoTraduction.cfg
C:\Users\johnny\AppData\Roaming\EoRezo\EoWeather
C:\Users\johnny\AppData\Roaming\EoRezo\EoWeather.cfg
C:\Users\johnny\AppData\Roaming\EoRezo\EoWiki
C:\Users\johnny\AppData\Roaming\EoRezo\EoWiki.cfg
C:\Users\johnny\AppData\Roaming\EoRezo\host.cyp
C:\Users\johnny\AppData\Roaming\EoRezo\user.cyp
C:\Users\johnny\AppData\Roaming\EoRezo\db\cat.cyp
C:\Users\johnny\AppData\Roaming\EoRezo\eoDesktop\config.xml
C:\Users\johnny\AppData\Roaming\EoRezo\eoDesktop\eoDesktop.html
C:\Users\johnny\AppData\Roaming\EoRezo\eoDesktop\userConfig.xml
C:\Users\johnny\AppData\Roaming\EoRezo\EoPhoto\eophoto_default.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoPhoto\eophoto_loading.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoPhoto\images_big_bleu
C:\Users\johnny\AppData\Roaming\EoRezo\EoPhoto\images_classic
C:\Users\johnny\AppData\Roaming\EoRezo\EoPhoto\images_classic_bleu
C:\Users\johnny\AppData\Roaming\EoRezo\EoPhoto\images_classic_gris
C:\Users\johnny\AppData\Roaming\EoRezo\EoPhoto\images_big_bleu\aide.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoPhoto\images_big_bleu\aidePressed.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoPhoto\images_big_bleu\back.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoPhoto\images_big_bleu\background3_2.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoPhoto\images_big_bleu\backPressed.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoPhoto\images_big_bleu\cadre_int.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoPhoto\images_big_bleu\ecran.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoPhoto\images_big_bleu\ecranpressed.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoPhoto\images_big_bleu\eophoto_fond_default.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoPhoto\images_big_bleu\fermer.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoPhoto\images_big_bleu\fermerPressed.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoPhoto\images_big_bleu\minimise.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoPhoto\images_big_bleu\minimisepressed.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoPhoto\images_big_bleu
ext.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoPhoto\images_big_bleu
extPressed.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoPhoto\images_big_bleu\pause.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoPhoto\images_big_bleu\pausepressed.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoPhoto\images_big_bleu\play.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoPhoto\images_big_bleu\playPressed.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoPhoto\images_big_bleu\Thumbs.db
C:\Users\johnny\AppData\Roaming\EoRezo\EoPhoto\images_classic\back.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoPhoto\images_classic\backPressed.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoPhoto\images_classic\fermerPressed.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoPhoto\images_classic
ext.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoPhoto\images_classic
extPressed.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoPhoto\images_classic\pause.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoPhoto\images_classic\pausepressed.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoPhoto\images_classic\play.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoPhoto\images_classic\playPressed.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoPhoto\images_classic\Thumbs.db
C:\Users\johnny\AppData\Roaming\EoRezo\EoPhoto\images_classic_bleu\aide.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoPhoto\images_classic_bleu\aidePressed.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoPhoto\images_classic_bleu\back.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoPhoto\images_classic_bleu\backPressed.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoPhoto\images_classic_bleu\cadre_int.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoPhoto\images_classic_bleu\ecran.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoPhoto\images_classic_bleu\ecranpressed.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoPhoto\images_classic_bleu\eophoto_fond_default.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoPhoto\images_classic_bleu\fermer.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoPhoto\images_classic_bleu\fermerPressed.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoPhoto\images_classic_bleu\minimise.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoPhoto\images_classic_bleu\minimisepressed.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoPhoto\images_classic_bleu
ext.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoPhoto\images_classic_bleu
extPressed.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoPhoto\images_classic_bleu\pause.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoPhoto\images_classic_bleu\pausepressed.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoPhoto\images_classic_bleu\play.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoPhoto\images_classic_bleu\playPressed.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoPhoto\images_classic_bleu\Thumbs.db
C:\Users\johnny\AppData\Roaming\EoRezo\EoPhoto\images_classic_gris\aide.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoPhoto\images_classic_gris\aidePressed.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoPhoto\images_classic_gris\back.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoPhoto\images_classic_gris\background3.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoPhoto\images_classic_gris\backPressed.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoPhoto\images_classic_gris\ecran.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoPhoto\images_classic_gris\ecranPressed.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoPhoto\images_classic_gris\eophoto_fond_default.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoPhoto\images_classic_gris\fermer.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoPhoto\images_classic_gris\fermerPressed.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoPhoto\images_classic_gris\minimise.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoPhoto\images_classic_gris\minimisepressed.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoPhoto\images_classic_gris
ext.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoPhoto\images_classic_gris
extPressed.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoPhoto\images_classic_gris\pause.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoPhoto\images_classic_gris\pausepressed.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoPhoto\images_classic_gris\play.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoPhoto\images_classic_gris\playPressed.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoPhoto\images_classic_gris\Thumbs.db
C:\Users\johnny\AppData\Roaming\EoRezo\EoRss\balance.gif
C:\Users\johnny\AppData\Roaming\EoRezo\EoRss\belier.gif
C:\Users\johnny\AppData\Roaming\EoRezo\EoRss\cancer.gif
C:\Users\johnny\AppData\Roaming\EoRezo\EoRss\capricorne.gif
C:\Users\johnny\AppData\Roaming\EoRezo\EoRss\EoRss.cfg
C:\Users\johnny\AppData\Roaming\EoRezo\EoRss\EoRssServer.cfg
C:\Users\johnny\AppData\Roaming\EoRezo\EoRss\EoRss_01net_actualite.cfg
C:\Users\johnny\AppData\Roaming\EoRezo\EoRss\EoRss_01net_actualite.gif
C:\Users\johnny\AppData\Roaming\EoRezo\EoRss\EoRss_1201.cfg
C:\Users\johnny\AppData\Roaming\EoRezo\EoRss\EoRss_abcbourse_analyse.cfg
C:\Users\johnny\AppData\Roaming\EoRezo\EoRss\EoRss_abcbourse_news.cfg
C:\Users\johnny\AppData\Roaming\EoRezo\EoRss\EoRss_advisto.cfg
C:\Users\johnny\AppData\Roaming\EoRezo\EoRss\EoRss_advisto.gif
C:\Users\johnny\AppData\Roaming\EoRezo\EoRss\EoRss_agenda_musical.cfg
C:\Users\johnny\AppData\Roaming\EoRezo\EoRss\EoRss_agenda_musical.gif
C:\Users\johnny\AppData\Roaming\EoRezo\EoRss\EoRss_aninmint.cfg
C:\Users\johnny\AppData\Roaming\EoRezo\EoRss\EoRss_aninmint.gif
C:\Users\johnny\AppData\Roaming\EoRezo\EoRss\EoRss_annonce_paris.cfg
C:\Users\johnny\AppData\Roaming\EoRezo\EoRss\EoRss_bbc.cfg
C:\Users\johnny\AppData\Roaming\EoRezo\EoRss\EoRss_bbc.gif
C:\Users\johnny\AppData\Roaming\EoRezo\EoRss\EoRss_bd_livres_krinein.cfg
C:\Users\johnny\AppData\Roaming\EoRezo\EoRss\EoRss_besancon.cfg
C:\Users\johnny\AppData\Roaming\EoRezo\EoRss\EoRss_besancon.gif
C:\Users\johnny\AppData\Roaming\EoRezo\EoRss\EoRss_cahier_foot.cfg
C:\Users\johnny\AppData\Roaming\EoRezo\EoRss\EoRss_cahier_foot.gif
C:\Users\johnny\AppData\Roaming\EoRezo\EoRss\EoRss_cinema_krinein.cfg
C:\Users\johnny\AppData\Roaming\EoRezo\EoRss\EoRss_cine_horaire.cfg
C:\Users\johnny\AppData\Roaming\EoRezo\EoRss\EoRss_companynewsgroup.cfg
C:\Users\johnny\AppData\Roaming\EoRezo\EoRss\EoRss_companynewsgroup.gif
C:\Users\johnny\AppData\Roaming\EoRezo\EoRss\EoRss_courrier_int.cfg
C:\Users\johnny\AppData\Roaming\EoRezo\EoRss\EoRss_courrier_int.gif
C:\Users\johnny\AppData\Roaming\EoRezo\EoRss\EoRss_dvd_bonus.cfg
C:\Users\johnny\AppData\Roaming\EoRezo\EoRss\EoRss_echo_une.cfg
C:\Users\johnny\AppData\Roaming\EoRezo\EoRss\EoRss_echo_une.gif
C:\Users\johnny\AppData\Roaming\EoRezo\EoRss\EoRss_EoRezo_Horoscope.cfg
C:\Users\johnny\AppData\Roaming\EoRezo\EoRss\EoRss_equipe_foot.cfg
C:\Users\johnny\AppData\Roaming\EoRezo\EoRss\EoRss_equipe_foot.gif
C:\Users\johnny\AppData\Roaming\EoRezo\EoRss\EoRss_Europe_1.cfg
C:\Users\johnny\AppData\Roaming\EoRezo\EoRss\EoRss_Europe_1.gif
C:\Users\johnny\AppData\Roaming\EoRezo\EoRss\EoRss_eurotop_foot.cfg
C:\Users\johnny\AppData\Roaming\EoRezo\EoRss\EoRss_eurotop_foot.gif
C:\Users\johnny\AppData\Roaming\EoRezo\EoRss\EoRss_fcb_foot.cfg
C:\Users\johnny\AppData\Roaming\EoRezo\EoRss\EoRss_football365_foot.cfg
C:\Users\johnny\AppData\Roaming\EoRezo\EoRss\EoRss_france2_tv.cfg
C:\Users\johnny\AppData\Roaming\EoRezo\EoRss\EoRss_france3_tv.cfg
C:\Users\johnny\AppData\Roaming\EoRezo\EoRss\EoRss_fr_uefa_com.cfg
C:\Users\johnny\AppData\Roaming\EoRezo\EoRss\EoRss_ft.cfg
C:\Users\johnny\AppData\Roaming\EoRezo\EoRss\EoRss_ft.gif
C:\Users\johnny\AppData\Roaming\EoRezo\EoRss\EoRss_humour_blague.cfg
C:\Users\johnny\AppData\Roaming\EoRezo\EoRss\EoRss_iht.cfg
C:\Users\johnny\AppData\Roaming\EoRezo\EoRss\EoRss_iht.gif
C:\Users\johnny\AppData\Roaming\EoRezo\EoRss\EoRss_info_football_foot.cfg
C:\Users\johnny\AppData\Roaming\EoRezo\EoRss\EoRss_jeux_france.cfg
C:\Users\johnny\AppData\Roaming\EoRezo\EoRss\EoRss_jeux_france.gif
C:\Users\johnny\AppData\Roaming\EoRezo\EoRss\EoRss_jeux_video.cfg
C:\Users\johnny\AppData\Roaming\EoRezo\EoRss\EoRss_jeux_video.gif
C:\Users\johnny\AppData\Roaming\EoRezo\EoRss\EoRss_latribune_investissement.cfg
C:\Users\johnny\AppData\Roaming\EoRezo\EoRss\EoRss_latribune_investissement.gif
C:\Users\johnny\AppData\Roaming\EoRezo\EoRss\EoRss_La_croix_une.cfg
C:\Users\johnny\AppData\Roaming\EoRezo\EoRss\EoRss_La_croix_une.gif
C:\Users\johnny\AppData\Roaming\EoRezo\EoRss\EoRss_lefigaro_une.cfg
C:\Users\johnny\AppData\Roaming\EoRezo\EoRss\EoRss_lefigaro_une.gif
C:\Users\johnny\AppData\Roaming\EoRezo\EoRss\EoRss_lelombrik.cfg
C:\Users\johnny\AppData\Roaming\EoRezo\EoRss\EoRss_lemonde_livres.cfg
C:\Users\johnny\AppData\Roaming\EoRezo\EoRss\EoRss_lemonde_livres.gif
C:\Users\johnny\AppData\Roaming\EoRezo\EoRss\EoRss_lesechos_conso.cfg
C:\Users\johnny\AppData\Roaming\EoRezo\EoRss\EoRss_lesechos_conso.gif
C:\Users\johnny\AppData\Roaming\EoRezo\EoRss\EoRss_lesechos_finance.cfg
C:\Users\johnny\AppData\Roaming\EoRezo\EoRss\EoRss_lesechos_finance.gif
C:\Users\johnny\AppData\Roaming\EoRezo\EoRss\EoRss_lesechos_patrimoine.cfg
C:\Users\johnny\AppData\Roaming\EoRezo\EoRss\EoRss_lesechos_patrimoine.gif
C:\Users\johnny\AppData\Roaming\EoRezo\EoRss\EoRss_le_figaro_entreprise.cfg
C:\Users\johnny\AppData\Roaming\EoRezo\EoRss\EoRss_le_figaro_entreprise.gif
C:\Users\johnny\AppData\Roaming\EoRezo\EoRss\EoRss_le_monde_entreprise.cfg
C:\Users\johnny\AppData\Roaming\EoRezo\EoRss\EoRss_le_monde_entreprise.gif
C:\Users\johnny\AppData\Roaming\EoRezo\EoRss\EoRss_liberation_actualite.cfg
C:\Users\johnny\AppData\Roaming\EoRezo\EoRss\EoRss_liberation_actualite.gif
C:\Users\johnny\AppData\Roaming\EoRezo\EoRss\EoRss_l_equipe_rugby.cfg
C:\Users\johnny\AppData\Roaming\EoRezo\EoRss\EoRss_l_equipe_rugby.gif
C:\Users\johnny\AppData\Roaming\EoRezo\EoRss\EoRss_madame_figaro_cuisine.cfg
C:\Users\johnny\AppData\Roaming\EoRezo\EoRss\EoRss_mangaanime.cfg
C:\Users\johnny\AppData\Roaming\EoRezo\EoRss\EoRss_msn_insolites.cfg
C:\Users\johnny\AppData\Roaming\EoRezo\EoRss\EoRss_narutochaos.cfg
C:\Users\johnny\AppData\Roaming\EoRezo\EoRss\EoRss_nord_cinema_box_office.cfg
C:\Users\johnny\AppData\Roaming\EoRezo\EoRss\EoRss_nord_cinema_box_office.gif
C:\Users\johnny\AppData\Roaming\EoRezo\EoRss\EoRss_nord_cinema_critique.cfg
C:\Users\johnny\AppData\Roaming\EoRezo\EoRss\EoRss_nosamieslesstars.cfg
C:\Users\johnny\AppData\Roaming\EoRezo\EoRss\EoRss_nostalgie.cfg
C:\Users\johnny\AppData\Roaming\EoRezo\EoRss\EoRss_nouvelobs_cinema.cfg
C:\Users\johnny\AppData\Roaming\EoRezo\EoRss\EoRss_nouvelobs_cinema.gif
C:\Users\johnny\AppData\Roaming\EoRezo\EoRss\EoRss_nouvelobs_permanent.cfg
C:\Users\johnny\AppData\Roaming\EoRezo\EoRss\EoRss_nouvelobs_permanent.gif
C:\Users\johnny\AppData\Roaming\EoRezo\EoRss\EoRss_om_live.cfg
C:\Users\johnny\AppData\Roaming\EoRezo\EoRss\EoRss_parisetudiant.cfg
C:\Users\johnny\AppData\Roaming\EoRezo\EoRss\EoRss_parisetudiant_job.cfg
C:\Users\johnny\AppData\Roaming\EoRezo\EoRss\EoRss_people_actustar.cfg
C:\Users\johnny\AppData\Roaming\EoRezo\EoRss\EoRss_people_france2.cfg
C:\Users\johnny\AppData\Roaming\EoRezo\EoRss\EoRss_people_madamefigaro.cfg
C:\Users\johnny\AppData\Roaming\EoRezo\EoRss\EoRss_people_nouvelobs.cfg
C:\Users\johnny\AppData\Roaming\EoRezo\EoRss\EoRss_people_nouvelobs.gif
C:\Users\johnny\AppData\Roaming\EoRezo\EoRss\EoRss_people_tf1.cfg
C:\Users\johnny\AppData\Roaming\EoRezo\EoRss\EoRss_people_tf1.gif
C:\Users\johnny\AppData\Roaming\EoRezo\EoRss\EoRss_planet_psg.cfg
C:\Users\johnny\AppData\Roaming\EoRezo\EoRss\EoRss_politique_nouvelobs.cfg
C:\Users\johnny\AppData\Roaming\EoRezo\EoRss\EoRss_politique_nouvelobs.gif
C:\Users\johnny\AppData\Roaming\EoRezo\EoRss\EoRss_politique_premier_ministre.cfg
C:\Users\johnny\AppData\Roaming\EoRezo\EoRss\EoRss_politique_premier_ministre.gif
C:\Users\johnny\AppData\Roaming\EoRezo\EoRss\EoRss_politique_tv5.cfg
C:\Users\johnny\AppData\Roaming\EoRezo\EoRss\EoRss_politique_tv5.gif
C:\Users\johnny\AppData\Roaming\EoRezo\EoRss\EoRss_ptdr.cfg
C:\Users\johnny\AppData\Roaming\EoRezo\EoRss\EoRss_recette_dessert_cuisine.cfg
C:\Users\johnny\AppData\Roaming\EoRezo\EoRss\EoRss_repimmo_immobilier.cfg
C:\Users\johnny\AppData\Roaming\EoRezo\EoRss\EoRss_rtl_foot.cfg
C:\Users\johnny\AppData\Roaming\EoRezo\EoRss\EoRss_rtl_foot.gif
C:\Users\johnny\AppData\Roaming\EoRezo\EoRss\EoRss_rtl_une.cfg
C:\Users\johnny\AppData\Roaming\EoRezo\EoRss\EoRss_rtl_une.gif
C:\Users\johnny\AppData\Roaming\EoRezo\EoRss\EoRss_tf1_actualite.cfg
C:\Users\johnny\AppData\Roaming\EoRezo\EoRss\EoRss_tf1_actualite.gif
C:\Users\johnny\AppData\Roaming\EoRezo\EoRss\EoRss_tf1_cinema.cfg
C:\Users\johnny\AppData\Roaming\EoRezo\EoRss\EoRss_tf1_cinema.gif
C:\Users\johnny\AppData\Roaming\EoRezo\EoRss\EoRss_tf1_economie.cfg
C:\Users\johnny\AppData\Roaming\EoRezo\EoRss\EoRss_tf1_economie.gif
C:\Users\johnny\AppData\Roaming\EoRezo\EoRss\EoRss_tf1_insolites.cfg
C:\Users\johnny\AppData\Roaming\EoRezo\EoRss\EoRss_tf1_insolites.gif
C:\Users\johnny\AppData\Roaming\EoRezo\EoRss\EoRss_tv5_une.cfg
C:\Users\johnny\AppData\Roaming\EoRezo\EoRss\EoRss_tv5_une.gif
C:\Users\johnny\AppData\Roaming\EoRezo\EoRss\EoRss_umoor.cfg
C:\Users\johnny\AppData\Roaming\EoRezo\EoRss\EoRss_yahoo_cuisine.cfg
C:\Users\johnny\AppData\Roaming\EoRezo\EoRss\EoRss_yatahonga.cfg
C:\Users\johnny\AppData\Roaming\EoRezo\EoRss\EoRss_yatahonga.gif
C:\Users\johnny\AppData\Roaming\EoRezo\EoRss\gemeaux.gif
C:\Users\johnny\AppData\Roaming\EoRezo\EoRss\lion.gif
C:\Users\johnny\AppData\Roaming\EoRezo\EoRss\poisson.gif
C:\Users\johnny\AppData\Roaming\EoRezo\EoRss\sagittaire.gif
C:\Users\johnny\AppData\Roaming\EoRezo\EoRss	aureau.gif
C:\Users\johnny\AppData\Roaming\EoRezo\EoRss\verseau.gif
C:\Users\johnny\AppData\Roaming\EoRezo\EoRss\vierge.gif
C:\Users\johnny\AppData\Roaming\EoRezo\eoStats\eoStats.txt
C:\Users\johnny\AppData\Roaming\EoRezo\EoSudoku\images_classic_mauve
C:\Users\johnny\AppData\Roaming\EoRezo\EoSudoku\images_classic_noir
C:\Users\johnny\AppData\Roaming\EoRezo\EoSudoku\images_classic_rouge
C:\Users\johnny\AppData\Roaming\EoRezo\EoSudoku\images_classic_vert
C:\Users\johnny\AppData\Roaming\EoRezo\EoSudoku\images_classic_mauve\aide.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoSudoku\images_classic_mauve\aidePressed.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoSudoku\images_classic_mauve\autoverifno.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoSudoku\images_classic_mauve\autoverifyes.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoSudoku\images_classic_mauve\back.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoSudoku\images_classic_mauve\background3.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoSudoku\images_classic_mauve\backPressed.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoSudoku\images_classic_mauve\blank21_19.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoSudoku\images_classic_mauve\blank25.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoSudoku\images_classic_mauve\correct21_19.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoSudoku\images_classic_mauve\correct25.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoSudoku\images_classic_mauve\ecran.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoSudoku\images_classic_mauve\ecranReflet.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoSudoku\images_classic_mauve\fermer.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoSudoku\images_classic_mauve\fermerPressed.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoSudoku\images_classic_mauve\grey25.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoSudoku\images_classic_mauve\iluminated21_19.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoSudoku\images_classic_mauve\iluminated25.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoSudoku\images_classic_mauve\iluminateno.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoSudoku\images_classic_mauve\iluminateyes.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoSudoku\images_classic_mauve\incorrect25.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoSudoku\images_classic_mauve\keypad.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoSudoku\images_classic_mauve\keypadreflet.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoSudoku\images_classic_mauve\masquer.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoSudoku\images_classic_mauve\masquerPressed.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoSudoku\images_classic_mauve\minimise.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoSudoku\images_classic_mauve\minimisepressed.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoSudoku\images_classic_mauve
ew.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoSudoku\images_classic_mauve
ewPressed.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoSudoku\images_classic_mauve
ext.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoSudoku\images_classic_mauve
extPressed.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoSudoku\images_classic_mauve\print.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoSudoku\images_classic_mauve\save.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoSudoku\images_classic_mauve\savepressed.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoSudoku\images_classic_mauve\Thumbs.db
C:\Users\johnny\AppData\Roaming\EoRezo\EoSudoku\images_classic_mauve\verificationcell.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoSudoku\images_classic_mauve\verificationcellPressed.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoSudoku\images_classic_noir\aide.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoSudoku\images_classic_noir\aidePressed.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoSudoku\images_classic_noir\autoverifno.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoSudoku\images_classic_noir\autoverifyes.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoSudoku\images_classic_noir\back.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoSudoku\images_classic_noir\background3.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoSudoku\images_classic_noir\backPressed.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoSudoku\images_classic_noir\blank21_19.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoSudoku\images_classic_noir\blank25.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoSudoku\images_classic_noir\correct21_19.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoSudoku\images_classic_noir\correct25.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoSudoku\images_classic_noir\ecran.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoSudoku\images_classic_noir\ecranReflet.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoSudoku\images_classic_noir\fermer.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoSudoku\images_classic_noir\fermerPressed.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoSudoku\images_classic_noir\grey25.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoSudoku\images_classic_noir\iluminated21_19.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoSudoku\images_classic_noir\iluminated25.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoSudoku\images_classic_noir\iluminateno.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoSudoku\images_classic_noir\iluminateyes.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoSudoku\images_classic_noir\incorrect25.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoSudoku\images_classic_noir\keypad.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoSudoku\images_classic_noir\keypadreflet.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoSudoku\images_classic_noir\masquer.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoSudoku\images_classic_noir\masquerPressed.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoSudoku\images_classic_noir\minimise.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoSudoku\images_classic_noir\minimisepressed.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoSudoku\images_classic_noir
ew.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoSudoku\images_classic_noir
ewPressed.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoSudoku\images_classic_noir
ext.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoSudoku\images_classic_noir
extPressed.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoSudoku\images_classic_noir\print.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoSudoku\images_classic_noir\save.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoSudoku\images_classic_noir\savepressed.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoSudoku\images_classic_noir\Thumbs.db
C:\Users\johnny\AppData\Roaming\EoRezo\EoSudoku\images_classic_noir\verificationcell.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoSudoku\images_classic_noir\verificationcellPressed.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoSudoku\images_classic_rouge\aide.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoSudoku\images_classic_rouge\aidePressed.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoSudoku\images_classic_rouge\autoverifno.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoSudoku\images_classic_rouge\autoverifyes.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoSudoku\images_classic_rouge\back.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoSudoku\images_classic_rouge\background3.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoSudoku\images_classic_rouge\backPressed.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoSudoku\images_classic_rouge\blank21_19.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoSudoku\images_classic_rouge\blank25.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoSudoku\images_classic_rouge\correct21_19.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoSudoku\images_classic_rouge\correct25.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoSudoku\images_classic_rouge\ecran.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoSudoku\images_classic_rouge\ecranReflet.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoSudoku\images_classic_rouge\fermer.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoSudoku\images_classic_rouge\fermerPressed.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoSudoku\images_classic_rouge\grey25.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoSudoku\images_classic_rouge\iluminated21_19.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoSudoku\images_classic_rouge\iluminated25.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoSudoku\images_classic_rouge\iluminateno.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoSudoku\images_classic_rouge\iluminateyes.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoSudoku\images_classic_rouge\incorrect25.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoSudoku\images_classic_rouge\keypad.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoSudoku\images_classic_rouge\keypadreflet.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoSudoku\images_classic_rouge\masquer.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoSudoku\images_classic_rouge\masquerPressed.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoSudoku\images_classic_rouge\minimise.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoSudoku\images_classic_rouge\minimisepressed.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoSudoku\images_classic_rouge
ew.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoSudoku\images_classic_rouge
ewPressed.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoSudoku\images_classic_rouge
ext.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoSudoku\images_classic_rouge
extPressed.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoSudoku\images_classic_rouge\print.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoSudoku\images_classic_rouge\save.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoSudoku\images_classic_rouge\savepressed.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoSudoku\images_classic_rouge\Thumbs.db
C:\Users\johnny\AppData\Roaming\EoRezo\EoSudoku\images_classic_rouge\verificationcell.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoSudoku\images_classic_rouge\verificationcellPressed.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoSudoku\images_classic_vert\aide.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoSudoku\images_classic_vert\aidePressed.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoSudoku\images_classic_vert\autoverifno.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoSudoku\images_classic_vert\autoverifyes.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoSudoku\images_classic_vert\back.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoSudoku\images_classic_vert\background3.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoSudoku\images_classic_vert\backgroundreflet.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoSudoku\images_classic_vert\backPressed.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoSudoku\images_classic_vert\blank21_19.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoSudoku\images_classic_vert\blank25.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoSudoku\images_classic_vert\correct21_19.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoSudoku\images_classic_vert\correct25.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoSudoku\images_classic_vert\ecran.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoSudoku\images_classic_vert\ecranReflet.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoSudoku\images_classic_vert\fermer.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoSudoku\images_classic_vert\fermerPressed.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoSudoku\images_classic_vert\grey25.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoSudoku\images_classic_vert\iluminated21_19.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoSudoku\images_classic_vert\iluminated25.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoSudoku\images_classic_vert\iluminateno.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoSudoku\images_classic_vert\iluminateyes.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoSudoku\images_classic_vert\incorrect25.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoSudoku\images_classic_vert\keypad.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoSudoku\images_classic_vert\keypadreflet.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoSudoku\images_classic_vert\masquer.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoSudoku\images_classic_vert\masquerPressed.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoSudoku\images_classic_vert\minimise.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoSudoku\images_classic_vert\minimisepressed.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoSudoku\images_classic_vert
ew.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoSudoku\images_classic_vert
ewPressed.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoSudoku\images_classic_vert
ext.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoSudoku\images_classic_vert
extPressed.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoSudoku\images_classic_vert\save.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoSudoku\images_classic_vert\savepressed.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoSudoku\images_classic_vert\Thumbs.db
C:\Users\johnny\AppData\Roaming\EoRezo\EoSudoku\images_classic_vert\verificationcell.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoSudoku\images_classic_vert\verificationcellPressed.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoTraduction\conf_site.xml
C:\Users\johnny\AppData\Roaming\EoRezo\EoTraduction\EoTraduction.cfg
C:\Users\johnny\AppData\Roaming\EoRezo\EoTraduction\EoTraductionSkin
C:\Users\johnny\AppData\Roaming\EoRezo\EoTraduction\EoTraductionSkin\aide.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoTraduction\EoTraductionSkin\eoTraduction.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoTraduction\EoTraductionSkin\fermer.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoTraduction\EoTraductionSkin\minimiser.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoTraduction\EoTraductionSkin	raduire.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoWeather\EoWeatherVal_02EC282.cfg
C:\Users\johnny\AppData\Roaming\EoRezo\EoWeather\images
C:\Users\johnny\AppData\Roaming\EoRezo\EoWeather\images_classic
C:\Users\johnny\AppData\Roaming\EoRezo\EoWeather\images_station_meteo
C:\Users\johnny\AppData\Roaming\EoRezo\EoWeather\images_classic\67_day.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoWeather\images_classic\67_night.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoWeather\images_classic\69_day.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoWeather\images_classic\69_night.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoWeather\images_classic\70_day.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoWeather\images_classic\70_night.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoWeather\images_classic\78_day.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoWeather\images_classic\78_night.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoWeather\images_classic\82_day.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoWeather\images_classic\82_night.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoWeather\images_classic\83_day.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoWeather\images_classic\83_night.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoWeather\images_classic\84_day.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoWeather\images_classic\84_night.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoWeather\images_classic\85_day.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoWeather\images_classic\85_night.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoWeather\images_classic\89_day.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoWeather\images_classic\89_night.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoWeather\images_classic\back.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoWeather\images_classic\background.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoWeather\images_classic\background_1.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoWeather\images_classic\background_1days.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoWeather\images_classic\background_2days.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoWeather\images_classic\background_7days.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoWeather\images_classic\backPressed.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoWeather\images_classic\band.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoWeather\images_classic\band_small.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoWeather\images_classic\close.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoWeather\images_classic\closePressed.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoWeather\images_classic\dayPrevisionBackground.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoWeather\images_classic\dayPrevisionClose.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoWeather\images_classic\earth.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoWeather\images_classic\fonds_‚cran.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoWeather\images_classic\help.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoWeather\images_classic\helpPressed.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoWeather\images_classic\minimise.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoWeather\images_classic\minimisePressed.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoWeather\images_classic
ext.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoWeather\images_classic
extPressed.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoWeather\images_classic\option.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoWeather\images_classic\optionPressed.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoWeather\images_classiceflet_ecran.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoWeather\images_classic\small_background.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoWeather\images_classic\Thumbs.db
C:\Users\johnny\AppData\Roaming\EoRezo\EoWeather\images_station_meteo\67_day.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoWeather\images_station_meteo\67_night.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoWeather\images_station_meteo\69_day.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoWeather\images_station_meteo\69_night.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoWeather\images_station_meteo\70_day.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoWeather\images_station_meteo\70_night.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoWeather\images_station_meteo\78_day.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoWeather\images_station_meteo\78_night.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoWeather\images_station_meteo\82_day.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoWeather\images_station_meteo\82_night.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoWeather\images_station_meteo\83_day.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoWeather\images_station_meteo\83_night.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoWeather\images_station_meteo\84_day.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoWeather\images_station_meteo\84_night.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoWeather\images_station_meteo\85_day.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoWeather\images_station_meteo\85_night.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoWeather\images_station_meteo\89_day.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoWeather\images_station_meteo\89_night.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoWeather\images_station_meteo\about.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoWeather\images_station_meteo\back.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoWeather\images_station_meteo\background.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoWeather\images_station_meteo\background_1.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoWeather\images_station_meteo\background_1days.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoWeather\images_station_meteo\background_2days.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoWeather\images_station_meteo\background_7days.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoWeather\images_station_meteo\backPressed.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoWeather\images_station_meteo\close.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoWeather\images_station_meteo\closePressed.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoWeather\images_station_meteo\dayPrevisionBackground.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoWeather\images_station_meteo\dayPrevisionClose.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoWeather\images_station_meteo\earth.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoWeather\images_station_meteo\fonds_‚cran.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoWeather\images_station_meteo\help.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoWeather\images_station_meteo\helpPressed.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoWeather\images_station_meteo\minimise.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoWeather\images_station_meteo\minimisePressed.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoWeather\images_station_meteo
ext.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoWeather\images_station_meteo
extPressed.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoWeather\images_station_meteo\option.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoWeather\images_station_meteo\optionPressed.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoWeather\images_station_meteoeflet_ecran.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoWeather\images_station_meteo\Thumbs.db
C:\Users\johnny\AppData\Roaming\EoRezo\EoWeather\images_station_meteo	xt_14x13.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoWiki\EoWiki.cfg
C:\Users\johnny\AppData\Roaming\EoRezo\EoWiki\EoWikiSkin
C:\Users\johnny\AppData\Roaming\EoRezo\EoWiki\EoWikiSkin\aide.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoWiki\EoWikiSkin\consulter.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoWiki\EoWikiSkin\eowiki.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoWiki\EoWikiSkin\fermer.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoWiki\EoWikiSkin\minimise.png
C:\Users\johnny\AppData\Roaming\EoRezo\EoWiki\EoWikiSkinechercher.png

+--------------------| Everest Casino/Everest Poker Elements Found :

.
HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\Everest Poker
.
C:\Program Files\Everest Poker
C:\Program Files\Everest Poker\casino.exe
C:\Program Files\Everest Poker\cstart-tmp.exe
C:\Program Files\Everest Poker\cstart.exe
C:\Program Files\Everest Poker\data
C:\Program Files\Everest Poker\Everest Poker.exe
C:\Program Files\Everest Poker\gvbase.dll
C:\Program Files\Everest Poker\gvcrt.dll
C:\Program Files\Everest Poker\gvgfx-dib.dll
C:\Program Files\Everest Poker\gvgfx.dll
C:\Program Files\Everest Poker\gvmain.dll
C:\Program Files\Everest Poker\gvmain.exe
C:\Program Files\Everest Poker\gvnetwork.dll
C:\Program Files\Everest Poker\gvsound.dll
C:\Program Files\Everest Poker\history
C:\Program Files\Everest Poker\init.ini
C:\Program Files\Everest Poker\log.dat
C:\Program Files\Everest Poker\settings.ini
C:\Program Files\Everest Poker	oc_fr.ini
C:\Program Files\Everest Poker\data\fonts
C:\Program Files\Everest Poker\data\mp-lobby
C:\Program Files\Everest Poker\data\mp-poker
C:\Program Files\Everest Poker\data\shared
C:\Program Files\Everest Poker\data\startup
C:\Program Files\Everest Poker\data\fonts\kgp-en.ttf
C:\Program Files\Everest Poker\data\mp-lobby\fr.gvt
C:\Program Files\Everest Poker\data\mp-lobby\shared.gvt
C:\Program Files\Everest Poker\data\mp-poker\background
C:\Program Files\Everest Poker\data\mp-poker\fr
C:\Program Files\Everest Poker\data\mp-poker\shared.gvt
C:\Program Files\Everest Poker\data\mp-poker\background\default.gvt
C:\Program Files\Everest Poker\data\mp-poker\fr\bitmaps.gvt
C:\Program Files\Everest Poker\data\mp-poker\fr\mp-poker_strings.txt
C:\Program Files\Everest Poker\data\mp-poker\fr\mp-poker_tutorial.txt
C:\Program Files\Everest Poker\data\shared\fr
C:\Program Files\Everest Poker\data\shared\shared
C:\Program Files\Everest Poker\data\shared\fr\country.txt
C:\Program Files\Everest Poker\data\shared\fr\language.txt
C:\Program Files\Everest Poker\data\shared\fr\ordinal.txt
C:\Program Files\Everest Poker\data\shared\shared\bitmaps
C:\Program Files\Everest Poker\data\shared\shared\sounds
C:\Program Files\Everest Poker\data\shared\shared\bitmaps\btn_scroll.gvt
C:\Program Files\Everest Poker\data\shared\shared\bitmaps\check.art
C:\Program Files\Everest Poker\data\shared\shared\bitmaps\chips.art
C:\Program Files\Everest Poker\data\shared\shared\sounds\button.ogg
C:\Program Files\Everest Poker\data\shared\shared\sounds\carddeal.ogg
C:\Program Files\Everest Poker\data\shared\shared\sounds\cardflip.ogg
C:\Program Files\Everest Poker\data\shared\shared\sounds\chipclick.ogg
C:\Program Files\Everest Poker\data\startup\en
C:\Program Files\Everest Poker\data\startup\fr
C:\Program Files\Everest Poker\data\startup\shared
C:\Program Files\Everest Poker\data\startup\en\startup_strings.txt
C:\Program Files\Everest Poker\data\startup\fr\cstart.txt
C:\Program Files\Everest Poker\data\startup\fr\startup_strings.txt
C:\Program Files\Everest Poker\data\startup\shared\bitmaps
C:\Program Files\Everest Poker\data\startup\shared\icons
C:\Program Files\Everest Poker\data\startup\shared\sounds
C:\Program Files\Everest Poker\data\startup\shared\bitmaps\splash_poker.art
C:\Program Files\Everest Poker\data\startup\shared\icons\ep.ico
C:\Program Files\Everest Poker\data\startup\shared\sounds\alert.ogg
C:\Program Files\Everest Poker\history\100.txt
C:\Program Files\Everest Poker\history\104.txt
C:\Program Files\Everest Poker\history\106.txt
C:\Program Files\Everest Poker\history\108.txt
C:\Program Files\Everest Poker\history\110.txt
C:\Program Files\Everest Poker\history\111.txt
C:\Program Files\Everest Poker\history\115.txt
C:\Program Files\Everest Poker\history\116.txt
C:\Program Files\Everest Poker\history\117.txt
C:\Program Files\Everest Poker\history\118.txt
C:\Program Files\Everest Poker\history\119.txt
C:\Program Files\Everest Poker\history\120.txt
C:\Program Files\Everest Poker\history\121.txt
C:\Program Files\Everest Poker\history\123.txt
C:\Program Files\Everest Poker\history\125.txt
C:\Program Files\Everest Poker\history\130.txt
C:\Program Files\Everest Poker\history\132.txt
C:\Program Files\Everest Poker\history\133.txt
C:\Program Files\Everest Poker\history\134.txt
C:\Program Files\Everest Poker\history\135.txt
C:\Program Files\Everest Poker\history\138.txt
C:\Program Files\Everest Poker\history\139.txt
C:\Program Files\Everest Poker\history\141.txt
C:\Program Files\Everest Poker\history\142.txt
C:\Program Files\Everest Poker\history\145.txt
C:\Program Files\Everest Poker\history\146.txt
C:\Program Files\Everest Poker\history\147.txt
C:\Program Files\Everest Poker\history\148.txt
C:\Program Files\Everest Poker\history\149.txt
C:\Program Files\Everest Poker\history\151.txt
C:\Program Files\Everest Poker\history\152.txt
C:\Program Files\Everest Poker\history\153.txt
C:\Program Files\Everest Poker\history\154.txt
C:\Program Files\Everest Poker\history\155.txt
C:\Program Files\Everest Poker\history\156.txt
C:\Program Files\Everest Poker\history\157.txt
C:\Program Files\Everest Poker\history\160.txt
C:\Program Files\Everest Poker\history\163.txt
C:\Program Files\Everest Poker\history\164.txt
C:\Program Files\Everest Poker\history\165.txt
C:\Program Files\Everest Poker\history\166.txt
C:\Program Files\Everest Poker\history\168.txt
C:\Program Files\Everest Poker\history\169.txt
C:\Program Files\Everest Poker\history\170.txt
C:\Program Files\Everest Poker\history\171.txt
C:\Program Files\Everest Poker\history\172.txt
C:\Program Files\Everest Poker\history\175.txt
C:\Program Files\Everest Poker\history\176.txt
C:\Program Files\Everest Poker\history\177.txt
C:\Program Files\Everest Poker\history\178.txt
C:\Program Files\Everest Poker\history\179.txt
C:\Program Files\Everest Poker\history\181.txt
C:\Program Files\Everest Poker\history\183.txt
C:\Program Files\Everest Poker\history\184.txt
C:\Program Files\Everest Poker\history\185.txt
C:\Program Files\Everest Poker\history\187.txt
C:\Program Files\Everest Poker\history\188.txt
C:\Program Files\Everest Poker\history\189.txt
C:\Program Files\Everest Poker\history\191.txt
C:\Program Files\Everest Poker\history\192.txt
C:\Program Files\Everest Poker\history\193.txt
C:\Program Files\Everest Poker\history\194.txt
C:\Program Files\Everest Poker\history\204.txt
C:\Program Files\Everest Poker\history\205.txt
C:\Program Files\Everest Poker\history\206.txt
C:\Program Files\Everest Poker\history\207.txt
C:\Program Files\Everest Poker\history\209.txt
C:\Program Files\Everest Poker\history\215.txt
C:\Program Files\Everest Poker\history\217.txt
C:\Program Files\Everest Poker\history\219.txt
C:\Program Files\Everest Poker\history\220.txt
C:\Program Files\Everest Poker\history\221.txt
C:\Program Files\Everest Poker\history\222.txt
C:\Program Files\Everest Poker\history\223.txt
C:\Program Files\Everest Poker\history\224.txt
C:\Program Files\Everest Poker\history\226.txt
C:\Program Files\Everest Poker\history\227.txt
C:\Program Files\Everest Poker\history\231.txt
C:\Program Files\Everest Poker\history\232.txt
C:\Program Files\Everest Poker\history\233.txt
C:\Program Files\Everest Poker\history\235.txt
C:\Program Files\Everest Poker\history\237.txt
C:\Program Files\Everest Poker\history\238.txt
C:\Program Files\Everest Poker\history\239.txt
C:\Program Files\Everest Poker\history\240.txt
C:\Program Files\Everest Poker\history\243.txt
C:\Program Files\Everest Poker\history\245.txt
C:\Program Files\Everest Poker\history\61.txt
C:\Program Files\Everest Poker\history\66.txt
C:\Program Files\Everest Poker\history\68.txt
C:\Program Files\Everest Poker\history\69.txt
C:\Program Files\Everest Poker\history\72.txt
C:\Program Files\Everest Poker\history\76.txt
C:\Program Files\Everest Poker\history\77.txt
C:\Program Files\Everest Poker\history\78.txt
C:\Program Files\Everest Poker\history\80.txt
C:\Program Files\Everest Poker\history\81.txt
C:\Program Files\Everest Poker\history\82.txt
C:\Program Files\Everest Poker\history\84.txt
C:\Program Files\Everest Poker\history\85.txt
C:\Program Files\Everest Poker\history\86.txt
C:\Program Files\Everest Poker\history\87.txt
C:\Program Files\Everest Poker\history\88.txt
C:\Program Files\Everest Poker\history\91.txt
C:\Program Files\Everest Poker\history\92.txt
C:\Program Files\Everest Poker\history\95.txt
C:\Program Files\Everest Poker\history\96.txt
C:\Program Files\Everest Poker\history\97.txt
C:\Program Files\Everest Poker\history\98.txt
C:\Program Files\Everest Poker\history\99.txt
C:\Users\Public\Desktop\Everest Poker.lnk

+--------------------| Funwebproducts/Myway/Mywebsearch/Myglobalsearch Elements Found :

.
.

+--------------------| It's TV Elements Found :

HKCU\SOFTWARE\ItsLabel
.
C:\Users\johnny\AppData\Roaming\ItsLabel
C:\Users\johnny\AppData\Roaming\ItsLabel\ItsTV
C:\Users\johnny\AppData\Roaming\ItsLabel\ItsTV\itsTV.xml

+--------------------| Sweetim Elements Found :

.
HKCR\Typelib\{58906392-79C4-497C-ACC6-6942B59F1A08}
HKCU\SOFTWARE\SWEETIE
HKCU\SOFTWARE\SweetIM
HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{1A0AADCD-3A72-4B5F-900F-E3BB5A838E2A}
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{BC4FFE41-DE9F-46fa-B455-AAD49B9F9938}
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{EEE6C35B-6118-11DC-9C72-001320C79847}
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{EEE6C35C-6118-11DC-9C72-001320C79847}
HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1A0AADCD-3A72-4b5f-900F-E3BB5A838E2A}
HKLM\SOFTWARE\SweetIM
HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\TOOLBAR\{BC4FFE41-DE9F-46FA-B455-AAD49B9F9938}
HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\INTERNETREGISTRY\REGISTRY\USER\S-1-5-21-3603102019-2234686749-2930555637-1000\SOFTWARE\SWEETIM
HKLM\~\USERDATA\S-1-5-18\COMPONENTS\980289C22F80A7C4BB9323DC61255E4E
HKLM\~\USERDATA\S-1-5-18\COMPONENTS\FA96423FE2B98E248A3B23548D1E22D9
.
C:\Users\johnny\AppData\Roaming\Mozilla\Firefox\Profiles\djgklwtr.default\searchplugins\sweetim.xml
C:\Users\johnny\AppData\Roaming\Microsoft\Windows\Cookies\johnny@sweetim[1].txt

+--------------------| Added Scan :


+---------- SCANNING PREFS.JS ... ( # Mozilla user preferences )

..\djgklwtr.default\prefs.js :

~~~~ MOZILLA FIREFOX VERSION 3.0.5 ~~~~

* BROWSER SEARCH DEFAULT ENGINE:  "SweetIM Search"
* BROWSER SEARCH SELECTED ENGINE:  "Google"
* BROWSER SEARCH DEFAULT URL:  "https://search.sweetim.com/search.asp?src=2&q="
* BROWSER STARTUP HOMEPAGE:  "https://www.google.fr/webhp?client=firefox-a&rls=org.mozilla:fr:official&channel=s&hl=fr&btnG=Recherche+Google&gws_rd=ssl"

.
FOUND - user_pref("browser.search.defaultenginename", "SweetIM Search");
FOUND - user_pref("browser.search.defaulturl", "https://search.sweetim.com/search.asp?src=2&q=");
FOUND - user_pref("keyword.URL", "https://search.sweetim.com/search.asp?src=2&q=");

+---------------------------------------------------------------------------+


~~~~ INTERNET EXPLORER VERSION 7.0.6001.18000 ~~~~

+--[HKEY_CURRENT_USER\..\INTERNET EXPLORER\MAIN]

Start page : hxxp://www.google.fr/webhp?sourceid=navclient&hl=fr&ie=UTF-8

+--[HKEY_LOCAL_MACHINE\..\INTERNET EXPLORER\MAIN]

Start page : hxxp://home.sweetim.com

+---------------------------------------------------------------------------+

[~51614 BYTES] - "C:\AD-REPORT-SCAN-23.01.2009.LOG"

End at: 15:03:18 | 23/01/2009 - Time elapsed: 18.1 seconds 

+---------------------------------------------------------------------------+
+------------------------------- [ E.O.F - 764 Lines ]
+---------------------------------------------------------------------------+

bleurk · Answer

je doit y aller, je reviendrais plutard, merci de ton aide

J_O_J_O · Answer

Merci relance comme tout à l'heure Ad-remover en faisant l'option B et et supprimant tout ;) puis poste son nouveau rapport s'il te plaît .

bleurk · Answer

voici le nouveau rapport merci de ton attente


------- LOGFILE OF AD-REMOVER 1.0.9.3 | ONLY XP/VISTA -------

Updated by C_XX on 17/01/2009 at 12:00

*** LIMITED TO ***

Boonty/Boontygames
Eorezo
Everest casino/Everest poker
Funwebproduct/Myway/Mywebsearch
It's TV
Sweetim

******************

Start at: 17:48:50 | Fri 23/01/2009 | Microsoft® Windows Vista™ Home Premium SP1 (V6.0.6001)
Boot mode: MSE
Option: CLEAN | Executed from: C:\Program Files\Ad-remover\Ad-remover.bat
Pc: PC-DE-JOHNNY | User: johnny ( Current user is an administrator)
Drive(s): 
- C:\  (File System: NTFS)
- D:\  (File System: NTFS)
System Drive: C:\
Windows Directory: C:\Windows\
System Directory: C:\Windows\System32\

--- Running Processes: 24

(!) ---- IE start pages reset

+--------------------| Boonty/Boonty Games Elements Deleted :

.
/!\ NOT DELETED - HKCR\boontybox
/!\ NOT DELETED - HKLM\Software\Boonty
/!\ NOT DELETED - HKLM\Software\Classes\boontybox
/!\ NOT DELETED - HKLM\SYSTEM\ControlSet001\Services\Boonty Games
/!\ NOT DELETED - HKLM\SYSTEM\ControlSet002\Enum\Root\LEGACY_BOONTY_GAMES
/!\ NOT DELETED - HKLM\SYSTEM\ControlSet002\Services\Boonty Games
/!\ NOT DELETED - HKLM\SYSTEM\CurrentControlSet\Services\Boonty Games
.
C:\ProgramData\BOONTY

+--------------------| Eorezo Elements Deleted :

.
/!\ NOT DELETED - HKCR\Interface\{B0D071A1-36B3-4757-A126-14C89C56013A}
/!\ NOT DELETED - HKCR\Typelib\{B4C656C9-F2E9-4E77-B3F4-443DF2BD778F}
HKCU\SOFTWARE\EoRezo
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{64F56FC1-1272-44CD-BA6E-39723696E350}
/!\ NOT DELETED - HKLM\SOFTWARE\EoRezo
/!\ NOT DELETED - HKLM\SOFTWARE\Classes\AppID\{362A53B2-2913-4F8A-82F5-7E0A23FDC6F9}
/!\ NOT DELETED - HKLM\SOFTWARE\Classes\AppID\EoRezoBHO.DLL
/!\ NOT DELETED - HKLM\SOFTWARE\Classes\TypeLib\{B6ACB3F1-6A83-432C-B854-3E1056F87F4E}
/!\ NOT DELETED - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{64F56FC1-1272-44CD-BA6E-39723696E350}
/!\ NOT DELETED - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C7B76B90-3455-4AE6-A752-EAC4D19689E5}
.
C:\Users\johnny\AppData\Roaming\EoRezo

+--------------------| Everest Casino/Everest Poker Elements Deleted :

.
/!\ NOT DELETED - HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\Everest Poker
.
C:\Program Files\Everest Poker
C:\Users\Public\Desktop\Everest Poker.lnk

+--------------------| Funwebproducts/Myway/Mywebsearch/Myglobalsearch Elements Deleted :

.
.

+--------------------| It's TV Elements Deleted :

HKCU\SOFTWARE\ItsLabel
.
C:\Users\johnny\AppData\Roaming\ItsLabel

+--------------------| Sweetim Elements Deleted :

.
/!\ NOT DELETED - HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\TOOLBAR\{BC4FFE41-DE9F-46FA-B455-AAD49B9F9938}
HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\INTERNETREGISTRY\REGISTRY\USER\S-1-5-21-3603102019-2234686749-2930555637-1000\SOFTWARE\SWEETIM
/!\ NOT DELETED - HKLM\~\USERDATA\S-1-5-18\COMPONENTS\980289C22F80A7C4BB9323DC61255E4E
/!\ NOT DELETED - HKLM\~\USERDATA\S-1-5-18\COMPONENTS\FA96423FE2B98E248A3B23548D1E22D9
/!\ NOT DELETED - HKCR\Typelib\{58906392-79C4-497C-ACC6-6942B59F1A08}
HKCU\SOFTWARE\SWEETIE
HKCU\SOFTWARE\SweetIM
HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{1A0AADCD-3A72-4B5F-900F-E3BB5A838E2A}
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{BC4FFE41-DE9F-46fa-B455-AAD49B9F9938}
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{EEE6C35B-6118-11DC-9C72-001320C79847}
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{EEE6C35C-6118-11DC-9C72-001320C79847}
/!\ NOT DELETED - HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}
/!\ NOT DELETED - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1A0AADCD-3A72-4b5f-900F-E3BB5A838E2A}
/!\ NOT DELETED - HKLM\SOFTWARE\SweetIM
.
C:\Users\johnny\AppData\Roaming\Mozilla\Firefox\Profiles\djgklwtr.default\searchplugins\sweetim.xml
C:\Users\johnny\AppData\Roaming\Microsoft\Windows\Cookies\johnny@sweetim[1].txt

(!) ---- Temp files deleted.
(!) ---- Recycle bin emptied in all drives.


************* /!\ REGISTRY ELEMENT(S) NOT DELETED /!\ *************

"HKCR\boontybox"
"HKLM\Software\Boonty"
"HKLM\Software\Classes\boontybox"
"HKLM\SYSTEM\ControlSet001\Services\Boonty Games"
"HKLM\SYSTEM\ControlSet002\Enum\Root\LEGACY_BOONTY_GAMES"
"HKLM\SYSTEM\ControlSet002\Services\Boonty Games"
"HKLM\SYSTEM\CurrentControlSet\Services\Boonty Games"
"HKCR\Interface\{B0D071A1-36B3-4757-A126-14C89C56013A}"
"HKCR\Typelib\{B4C656C9-F2E9-4E77-B3F4-443DF2BD778F}"
"HKLM\SOFTWARE\EoRezo"
"HKLM\SOFTWARE\Classes\AppID\{362A53B2-2913-4F8A-82F5-7E0A23FDC6F9}"
"HKLM\SOFTWARE\Classes\AppID\EoRezoBHO.DLL"
"HKLM\SOFTWARE\Classes\TypeLib\{B6ACB3F1-6A83-432C-B854-3E1056F87F4E}"
"HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{64F56FC1-1272-44CD-BA6E-39723696E350}"
"HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C7B76B90-3455-4AE6-A752-EAC4D19689E5}"
"HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\Everest Poker"
"HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\TOOLBAR" /V "{BC4FFE41-DE9F-46FA-B455-AAD49B9F9938}"
"HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\INSTALLER\USERDATA\S-1-5-18\COMPONENTS\980289C22F80A7C4BB9323DC61255E4E"
"HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\INSTALLER\USERDATA\S-1-5-18\COMPONENTS\FA96423FE2B98E248A3B23548D1E22D9"
"HKCR\Typelib\{58906392-79C4-497C-ACC6-6942B59F1A08}"
"HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}"
"HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1A0AADCD-3A72-4b5f-900F-E3BB5A838E2A}"
"HKLM\SOFTWARE\SweetIM"

SECOND RUN ...

RESIST ! - ""HKCR\boontybox""
RESIST ! - ""HKLM\Software\Boonty""
RESIST ! - ""HKLM\Software\Classes\boontybox""
DELETED ! - ""HKLM\SYSTEM\ControlSet001\Services\Boonty Games""
RESIST ! - ""HKLM\SYSTEM\ControlSet002\Enum\Root\LEGACY_BOONTY_GAMES""
DELETED ! - ""HKLM\SYSTEM\ControlSet002\Services\Boonty Games""
DELETED ! - ""HKLM\SYSTEM\CurrentControlSet\Services\Boonty Games""
RESIST ! - ""HKCR\Interface\{B0D071A1-36B3-4757-A126-14C89C56013A}""
RESIST ! - ""HKCR\Typelib\{B4C656C9-F2E9-4E77-B3F4-443DF2BD778F}""
RESIST ! - ""HKLM\SOFTWARE\EoRezo""
RESIST ! - ""HKLM\SOFTWARE\Classes\AppID\{362A53B2-2913-4F8A-82F5-7E0A23FDC6F9}""
RESIST ! - ""HKLM\SOFTWARE\Classes\AppID\EoRezoBHO.DLL""
RESIST ! - ""HKLM\SOFTWARE\Classes\TypeLib\{B6ACB3F1-6A83-432C-B854-3E1056F87F4E}""
DELETED ! - ""HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{64F56FC1-1272-44CD-BA6E-39723696E350}""
DELETED ! - ""HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C7B76B90-3455-4AE6-A752-EAC4D19689E5}""
DELETED ! - ""HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\Everest Poker""
DELETED ! - ""HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\TOOLBAR" /V "{BC4FFE41-DE9F-46FA-B455-AAD49B9F9938}""
RESIST ! - ""HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\INSTALLER\USERDATA\S-1-5-18\COMPONENTS\980289C22F80A7C4BB9323DC61255E4E""
RESIST ! - ""HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\INSTALLER\USERDATA\S-1-5-18\COMPONENTS\FA96423FE2B98E248A3B23548D1E22D9""
RESIST ! - ""HKCR\Typelib\{58906392-79C4-497C-ACC6-6942B59F1A08}""
DELETED ! - ""HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}""
DELETED ! - ""HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1A0AADCD-3A72-4b5f-900F-E3BB5A838E2A}""
RESIST ! - ""HKLM\SOFTWARE\SweetIM""


+--------------------| Added Scan :


+---------- SCANNING PREFS.JS ... ( # MOZILLA USER PREFERENCES )

..\djgklwtr.default\prefs.js :

~~~~ MOZILLA FIREFOX VERSION 3.0.5 ~~~~

* BROWSER SEARCH DEFAULT ENGINE:  "SweetIM Search"
* BROWSER SEARCH SELECTED ENGINE:  "Google"
* BROWSER SEARCH DEFAULT URL:  "https://search.sweetim.com/search.asp?src=2&q="
* BROWSER STARTUP HOMEPAGE:  "https://www.google.fr/webhp?client=firefox-a&rls=org.mozilla:fr:official&channel=s&hl=fr&btnG=Recherche+Google&gws_rd=ssl"

.
REMOVED - user_pref("browser.search.defaultenginename", "SweetIM Search");
REMOVED - user_pref("browser.search.defaulturl", "https://search.sweetim.com/search.asp?src=2&q=");
REMOVED - user_pref("keyword.URL", "https://search.sweetim.com/search.asp?src=2&q=");

+---------------------------------------------------------------------------+


~~~~ INTERNET EXPLORER VERSION 7.0.6001.18000 ~~~~

+--[HKEY_CURRENT_USER\..\INTERNET EXPLORER\MAIN]

Start page : hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome

+--[HKEY_LOCAL_MACHINE\..\INTERNET EXPLORER\MAIN]

Start page : hxxp://home.sweetim.com

+---------------------------------------------------------------------------+

[~9026 BYTES] - "C:\AD-REPORT-CLEAN-23.01.2009.LOG"
[~51948 BYTES] - "C:\AD-REPORT-SCAN-23.01.2009.LOG"

End at: 17:51:13 | 23/01/2009 - Time elapsed: 2 minutes, 22 seconds 

+---------------------------------------------------------------------------+
+------------------------------- [ E.O.F - 149 Lines ]
+---------------------------------------------------------------------------+

J_O_J_O · Answer

Merci et bin c'est bien cool tout ça :) refait un hijackthis steup .

bleurk · Answer

il y a autre chose a faire?

J_O_J_O · Answer

Oui un hijacthis .

bleurk · Answer

j'ai bon? lol

J_O_J_O · Answer

no

J_O_J_O · Answer

Relance hijackthis et poste un rapport .

J_O_J_O · Answer

Non il date de lgtps ce rapport . Réouvre hijackthis puis fait un scan et poste son rapport .

bleurk · Answer

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 19:21:26, on 23/01/2009
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v7.00 (7.00.6001.18000)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32	askeng.exe
C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe
C:\Windows\System32\mobsync.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Windows\ehome\ehtray.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\Windows Live\MessengerSearchAddon\msgrsrch.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\PDFCreator\PDFCreator.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Windows\ehome\ehmsas.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Windows Live\Contacts\wlcomm.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
C:\Windows\system32\SearchFilterHost.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://home.sweetim.com/
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = 
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = 
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = 
O1 - Hosts: ::1 localhost
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Download Manager Browser Helper Object - {19C8E43B-07B3-49CB-BFFC-6777B593E6F8} - C:\PROGRA~1\COMMON~1\fluxDVD\DOWNLO~1\XEBDLH~1.DLL
O2 - BHO: SWEETIE - {1A0AADCD-3A72-4b5f-900F-E3BB5A838E2A} - (no file)
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - (no file)
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: EoRezoBHO - {64F56FC1-1272-44CD-BA6E-39723696E350} - (no file)
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.0.926.3450\swg.dll
O2 - BHO: EoBHO - {C7B76B90-3455-4AE6-A752-EAC4D19689E5} - (no file)
O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_219B3E1547538286.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O3 - Toolbar: (no name) - {BC4FFE41-DE9F-46fa-B455-AAD49B9F9938} - (no file)
O3 - Toolbar: &Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O4 - HKLM\..\RunOnce: [Launcher] %WINDIR%\SMINST\launcher.exe
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
O4 - HKCU\..\Run: [msnlivesearch] C:\Program Files\Windows Live\MessengerSearchAddon\msgrsrch.exe /Run
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
O4 - Global Startup: PDFCreator.lnk = C:\Program Files\PDFCreator\PDFCreator.exe
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
O9 - Extra button: Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O13 - Gopher Prefix: 
O18 - Protocol: bw+0 - {2E1C31C2-8A6F-4CE6-AD09-DD880558C06B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw+0s - {2E1C31C2-8A6F-4CE6-AD09-DD880558C06B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0 - {2E1C31C2-8A6F-4CE6-AD09-DD880558C06B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0s - {2E1C31C2-8A6F-4CE6-AD09-DD880558C06B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00 - {2E1C31C2-8A6F-4CE6-AD09-DD880558C06B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00s - {2E1C31C2-8A6F-4CE6-AD09-DD880558C06B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10 - {2E1C31C2-8A6F-4CE6-AD09-DD880558C06B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10s - {2E1C31C2-8A6F-4CE6-AD09-DD880558C06B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20 - {2E1C31C2-8A6F-4CE6-AD09-DD880558C06B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20s - {2E1C31C2-8A6F-4CE6-AD09-DD880558C06B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30 - {2E1C31C2-8A6F-4CE6-AD09-DD880558C06B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30s - {2E1C31C2-8A6F-4CE6-AD09-DD880558C06B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40 - {2E1C31C2-8A6F-4CE6-AD09-DD880558C06B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40s - {2E1C31C2-8A6F-4CE6-AD09-DD880558C06B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50 - {2E1C31C2-8A6F-4CE6-AD09-DD880558C06B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50s - {2E1C31C2-8A6F-4CE6-AD09-DD880558C06B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60 - {2E1C31C2-8A6F-4CE6-AD09-DD880558C06B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60s - {2E1C31C2-8A6F-4CE6-AD09-DD880558C06B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70 - {2E1C31C2-8A6F-4CE6-AD09-DD880558C06B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70s - {2E1C31C2-8A6F-4CE6-AD09-DD880558C06B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80 - {2E1C31C2-8A6F-4CE6-AD09-DD880558C06B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80s - {2E1C31C2-8A6F-4CE6-AD09-DD880558C06B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90 - {2E1C31C2-8A6F-4CE6-AD09-DD880558C06B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90s - {2E1C31C2-8A6F-4CE6-AD09-DD880558C06B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0 - {2E1C31C2-8A6F-4CE6-AD09-DD880558C06B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0s - {2E1C31C2-8A6F-4CE6-AD09-DD880558C06B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0 - {2E1C31C2-8A6F-4CE6-AD09-DD880558C06B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0s - {2E1C31C2-8A6F-4CE6-AD09-DD880558C06B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0 - {2E1C31C2-8A6F-4CE6-AD09-DD880558C06B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0s - {2E1C31C2-8A6F-4CE6-AD09-DD880558C06B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0 - {2E1C31C2-8A6F-4CE6-AD09-DD880558C06B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0s - {2E1C31C2-8A6F-4CE6-AD09-DD880558C06B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0 - {2E1C31C2-8A6F-4CE6-AD09-DD880558C06B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0s - {2E1C31C2-8A6F-4CE6-AD09-DD880558C06B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0 - {2E1C31C2-8A6F-4CE6-AD09-DD880558C06B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0s - {2E1C31C2-8A6F-4CE6-AD09-DD880558C06B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O18 - Protocol: bwg0 - {2E1C31C2-8A6F-4CE6-AD09-DD880558C06B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwg0s - {2E1C31C2-8A6F-4CE6-AD09-DD880558C06B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0 - {2E1C31C2-8A6F-4CE6-AD09-DD880558C06B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0s - {2E1C31C2-8A6F-4CE6-AD09-DD880558C06B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0 - {2E1C31C2-8A6F-4CE6-AD09-DD880558C06B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0s - {2E1C31C2-8A6F-4CE6-AD09-DD880558C06B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0 - {2E1C31C2-8A6F-4CE6-AD09-DD880558C06B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0s - {2E1C31C2-8A6F-4CE6-AD09-DD880558C06B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0 - {2E1C31C2-8A6F-4CE6-AD09-DD880558C06B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0s - {2E1C31C2-8A6F-4CE6-AD09-DD880558C06B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0 - {2E1C31C2-8A6F-4CE6-AD09-DD880558C06B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0s - {2E1C31C2-8A6F-4CE6-AD09-DD880558C06B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0 - {2E1C31C2-8A6F-4CE6-AD09-DD880558C06B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0s - {2E1C31C2-8A6F-4CE6-AD09-DD880558C06B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0 - {2E1C31C2-8A6F-4CE6-AD09-DD880558C06B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0s - {2E1C31C2-8A6F-4CE6-AD09-DD880558C06B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0 - {2E1C31C2-8A6F-4CE6-AD09-DD880558C06B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0s - {2E1C31C2-8A6F-4CE6-AD09-DD880558C06B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0 - {2E1C31C2-8A6F-4CE6-AD09-DD880558C06B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0s - {2E1C31C2-8A6F-4CE6-AD09-DD880558C06B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0 - {2E1C31C2-8A6F-4CE6-AD09-DD880558C06B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0s - {2E1C31C2-8A6F-4CE6-AD09-DD880558C06B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0 - {2E1C31C2-8A6F-4CE6-AD09-DD880558C06B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0s - {2E1C31C2-8A6F-4CE6-AD09-DD880558C06B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0 - {2E1C31C2-8A6F-4CE6-AD09-DD880558C06B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0s - {2E1C31C2-8A6F-4CE6-AD09-DD880558C06B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0 - {2E1C31C2-8A6F-4CE6-AD09-DD880558C06B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0s - {2E1C31C2-8A6F-4CE6-AD09-DD880558C06B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0 - {2E1C31C2-8A6F-4CE6-AD09-DD880558C06B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0s - {2E1C31C2-8A6F-4CE6-AD09-DD880558C06B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0 - {2E1C31C2-8A6F-4CE6-AD09-DD880558C06B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0s - {2E1C31C2-8A6F-4CE6-AD09-DD880558C06B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0 - {2E1C31C2-8A6F-4CE6-AD09-DD880558C06B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0s - {2E1C31C2-8A6F-4CE6-AD09-DD880558C06B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0 - {2E1C31C2-8A6F-4CE6-AD09-DD880558C06B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0s - {2E1C31C2-8A6F-4CE6-AD09-DD880558C06B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0 - {2E1C31C2-8A6F-4CE6-AD09-DD880558C06B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0s - {2E1C31C2-8A6F-4CE6-AD09-DD880558C06B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0 - {2E1C31C2-8A6F-4CE6-AD09-DD880558C06B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0s - {2E1C31C2-8A6F-4CE6-AD09-DD880558C06B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll
O18 - Protocol: offline-8876480 - {2E1C31C2-8A6F-4CE6-AD09-DD880558C06B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Unknown owner - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe (file missing)
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - c:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: LiveUpdate Notice Service Ex (LiveUpdate Notice Ex) - Unknown owner - c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe (file missing)
O23 - Service: LiveUpdate Notice Service - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe
O23 - Service: LVCOMSer - Logitech Inc. - C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe
O23 - Service: Process Monitor (LVPrcSrv) - Logitech Inc. - C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe
O23 - Service: Nero BackItUp Scheduler 3 - Nero AG - C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe
O23 - Service: Planificateur LiveUpdate automatique - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: PnkBstrB - Unknown owner - C:\Windows\system32\PnkBstrB.exe
O23 - Service: RoxMediaDB9 - Sonic Solutions - c:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe
O23 - Service: SBSD Security Center Service (SBSDWSCService) - Safer Networking Ltd. - C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe
O23 - Service: stllssvr - MicroVision Development, Inc. - c:\Program Files\Common Files\SureThing Shared\stllssvr.exe

J_O_J_O · Answer

Tu n'as pas d'antivirus !! fait tout ce que je vais te demande de faire s'il te plaît ! ::::

Installe Avira antivir :::: http://forum.telecharger.01net.com/forum/high-tech/PRODUITS/Questions-techniques/antivir-installation-configuration-sujet_201938_1.htm  



Ccleaner ::::


*Télécharge et installe CCleaner  https://www.01net.com/telecharger/windows/Utilitaire/nettoyeurs_et_installeurs/fiches/32599.html ( à l'installation, pense à DÉCOCHER l'installation de Yahoo toolbar !!!).

*Lance CCleaner
Option --> avancé --> décoche « effacer uniquement les fichiers plus vieux que 48h »
Puis nettoyeur --> Analyse > Lancer le nettoyage, puis sur OK dans la fenêtre qui s' affiche.
Relance le nettoyage une deuxième fois.(pense à cocher toutes les cases décochées !!!!)

*Enfin, registre --> corrige toutes les erreurs, et recommence jusqu'à ce qu'il ne trouve plus d'erreurs.

*(garde ce logiciel et utilise le régulièrement).



Mbam :::::

Télécharge Malwarebytes' Anti-Malware: https://www.malekal.com/tutoriel-malwarebyte-anti-malware/­

. sur la page cliques sur Télécharger Malwarebyte's Anti-Malware
. enregistres le sur le bureau
. Double cliques sur le fichier téléchargé pour lancer le processus d'installation.
. Dans l'onglet "mise à jour", cliques sur le bouton Recherche de mise à jour
. si le pare-feu demande l'autorisation de se connecter pour malwarebytes, acceptes
. Une fois la mise à jour terminée,fermes Malwarebytes
. redemarres en mode sans échec pour savoir comment au cas ou tu ne saurais pas regarde plus bas
. une fois en mode sans echec tu double-cliques sur l'icône de malwarebytes
. une fois ouvert rend-toi dans l'onglet, Recherche
. Sélectionnes Exécuter un examen complet
. Cliques sur Rechercher
. Le scan démarre.
. A la fin de l'analyse, un message s'affiche :
L'examen s'est terminé normalement. Cliquez sur 'Afficher les résultats' pour afficher tous les objets trouvés.
. Cliques sur Ok pour poursuivre.
. Si des malwares ont été détectés, cliques sur Afficher les résultats
. Sélectionnes tout (ou laisses cochés)

. cliques sur Supprimer la sélection

. Malwarebytes va détruire les fichiers et clés de registre et en mettre une copie dans la quarantaine.
. Malwarebytes va ouvrir le bloc-notes et y copier le rapport d'analyse.
. redemarre le pc
. une fois redémarré en mode normal double-cliques sur malwarebytes
. rends toi dans l'onglet rapport/log
. tu cliques dessus pour l'afficher une fois affiché
. tu cliques sur édition en haut du boc notes,et puis sur sélectionner tous
. tu re-cliques sur édition et puis sur copier et tu reviens sur le forum et dans ta réponse
. tu cliques droit dans le cadre de la réponse et coller


Si tu as besoin d'aide regarde ces tutoriels :
https://forum.pcastuces.com/malwarebytes_antimalwares___tutoriel-f31s3.htm
https://www.malekal.com/tutoriel-malwarebyte-anti-malware/


(attention : pas de connexion possible en mode sans échec , donc copies ou imprimes bien la manipe
pour éviter les erreurs ...)

pour redémarrer en mode sans échec : /!\ Ne jamais démarrer en mode sans échec via MSCONFIG /!\



. Cliques sur Démarrer
. Cliques sur Arrêter
. Sélectionnes Redémarrer et au redémarrage
. Appuis sur la touche F8 sans discontinuer "1 appuis seconde" dès qu'un écran de texte apparaît puis disparaît
. Utilises les touches de direction pour sélectionner mode sans échec
. puis appuis sur ENTRÉE des fois cela peut prendre plusieurs minute entre la validation et l'affichage
. Il faudra choisir ta session habituelle, pas le compte "Administrateur" ou une autre
une fois démarré ne t'inquiète pas si les couleurs et les icônes ne sont pas comme d'habitude

tuto:http://www.vista-xp.fr/forum/topic93.html

bleurk · Answer

g bien 1 antivirus AVAST
g aussi  CCLEANER
et g aussi  Malwarebytes' Anti-Malware

J_O_J_O · Answer

Ok bin je te conseil Avira quand même ;) plus performant etc ...

bleurk · Answer

je reposte un rapport HIJACKSTHIS

est ce quil y a  un problm? merci

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 10:44:26, on 24/01/2009
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v7.00 (7.00.6001.18000)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32	askeng.exe
C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe
C:\Windows\System32\mobsync.exe
C:\Program Files\Alwil Software\Avast4\ashDisp.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Windows\ehome\ehtray.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\Windows Live\MessengerSearchAddon\msgrsrch.exe
C:\Windows\ehome\ehmsas.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\PDFCreator\PDFCreator.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://go.microsoft.com/fwlink/?linkid=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://home.sweetim.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = 
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = 
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = 
O1 - Hosts: ::1 localhost
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Download Manager Browser Helper Object - {19C8E43B-07B3-49CB-BFFC-6777B593E6F8} - C:\PROGRA~1\COMMON~1\fluxDVD\DOWNLO~1\XEBDLH~1.DLL
O2 - BHO: SWEETIE - {1A0AADCD-3A72-4b5f-900F-E3BB5A838E2A} - (no file)
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - (no file)
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: EoRezoBHO - {64F56FC1-1272-44CD-BA6E-39723696E350} - (no file)
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.0.926.3450\swg.dll
O2 - BHO: EoBHO - {C7B76B90-3455-4AE6-A752-EAC4D19689E5} - (no file)
O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_219B3E1547538286.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O3 - Toolbar: (no name) - {BC4FFE41-DE9F-46fa-B455-AAD49B9F9938} - (no file)
O3 - Toolbar: &Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\RunOnce: [Launcher] %WINDIR%\SMINST\launcher.exe
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
O4 - HKCU\..\Run: [msnlivesearch] C:\Program Files\Windows Live\MessengerSearchAddon\msgrsrch.exe /Run
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
O4 - Global Startup: PDFCreator.lnk = C:\Program Files\PDFCreator\PDFCreator.exe
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
O9 - Extra button: Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O13 - Gopher Prefix: 
O18 - Protocol: bw+0 - {2E1C31C2-8A6F-4CE6-AD09-DD880558C06B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw+0s - {2E1C31C2-8A6F-4CE6-AD09-DD880558C06B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0 - {2E1C31C2-8A6F-4CE6-AD09-DD880558C06B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0s - {2E1C31C2-8A6F-4CE6-AD09-DD880558C06B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00 - {2E1C31C2-8A6F-4CE6-AD09-DD880558C06B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00s - {2E1C31C2-8A6F-4CE6-AD09-DD880558C06B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10 - {2E1C31C2-8A6F-4CE6-AD09-DD880558C06B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10s - {2E1C31C2-8A6F-4CE6-AD09-DD880558C06B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20 - {2E1C31C2-8A6F-4CE6-AD09-DD880558C06B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20s - {2E1C31C2-8A6F-4CE6-AD09-DD880558C06B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30 - {2E1C31C2-8A6F-4CE6-AD09-DD880558C06B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30s - {2E1C31C2-8A6F-4CE6-AD09-DD880558C06B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40 - {2E1C31C2-8A6F-4CE6-AD09-DD880558C06B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40s - {2E1C31C2-8A6F-4CE6-AD09-DD880558C06B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50 - {2E1C31C2-8A6F-4CE6-AD09-DD880558C06B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50s - {2E1C31C2-8A6F-4CE6-AD09-DD880558C06B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60 - {2E1C31C2-8A6F-4CE6-AD09-DD880558C06B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60s - {2E1C31C2-8A6F-4CE6-AD09-DD880558C06B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70 - {2E1C31C2-8A6F-4CE6-AD09-DD880558C06B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70s - {2E1C31C2-8A6F-4CE6-AD09-DD880558C06B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80 - {2E1C31C2-8A6F-4CE6-AD09-DD880558C06B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80s - {2E1C31C2-8A6F-4CE6-AD09-DD880558C06B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90 - {2E1C31C2-8A6F-4CE6-AD09-DD880558C06B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90s - {2E1C31C2-8A6F-4CE6-AD09-DD880558C06B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0 - {2E1C31C2-8A6F-4CE6-AD09-DD880558C06B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0s - {2E1C31C2-8A6F-4CE6-AD09-DD880558C06B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0 - {2E1C31C2-8A6F-4CE6-AD09-DD880558C06B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0s - {2E1C31C2-8A6F-4CE6-AD09-DD880558C06B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0 - {2E1C31C2-8A6F-4CE6-AD09-DD880558C06B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0s - {2E1C31C2-8A6F-4CE6-AD09-DD880558C06B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0 - {2E1C31C2-8A6F-4CE6-AD09-DD880558C06B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0s - {2E1C31C2-8A6F-4CE6-AD09-DD880558C06B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0 - {2E1C31C2-8A6F-4CE6-AD09-DD880558C06B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0s - {2E1C31C2-8A6F-4CE6-AD09-DD880558C06B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0 - {2E1C31C2-8A6F-4CE6-AD09-DD880558C06B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0s - {2E1C31C2-8A6F-4CE6-AD09-DD880558C06B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O18 - Protocol: bwg0 - {2E1C31C2-8A6F-4CE6-AD09-DD880558C06B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwg0s - {2E1C31C2-8A6F-4CE6-AD09-DD880558C06B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0 - {2E1C31C2-8A6F-4CE6-AD09-DD880558C06B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0s - {2E1C31C2-8A6F-4CE6-AD09-DD880558C06B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0 - {2E1C31C2-8A6F-4CE6-AD09-DD880558C06B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0s - {2E1C31C2-8A6F-4CE6-AD09-DD880558C06B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0 - {2E1C31C2-8A6F-4CE6-AD09-DD880558C06B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0s - {2E1C31C2-8A6F-4CE6-AD09-DD880558C06B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0 - {2E1C31C2-8A6F-4CE6-AD09-DD880558C06B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0s - {2E1C31C2-8A6F-4CE6-AD09-DD880558C06B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0 - {2E1C31C2-8A6F-4CE6-AD09-DD880558C06B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0s - {2E1C31C2-8A6F-4CE6-AD09-DD880558C06B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0 - {2E1C31C2-8A6F-4CE6-AD09-DD880558C06B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0s - {2E1C31C2-8A6F-4CE6-AD09-DD880558C06B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0 - {2E1C31C2-8A6F-4CE6-AD09-DD880558C06B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0s - {2E1C31C2-8A6F-4CE6-AD09-DD880558C06B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0 - {2E1C31C2-8A6F-4CE6-AD09-DD880558C06B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0s - {2E1C31C2-8A6F-4CE6-AD09-DD880558C06B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0 - {2E1C31C2-8A6F-4CE6-AD09-DD880558C06B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0s - {2E1C31C2-8A6F-4CE6-AD09-DD880558C06B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0 - {2E1C31C2-8A6F-4CE6-AD09-DD880558C06B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0s - {2E1C31C2-8A6F-4CE6-AD09-DD880558C06B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0 - {2E1C31C2-8A6F-4CE6-AD09-DD880558C06B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0s - {2E1C31C2-8A6F-4CE6-AD09-DD880558C06B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0 - {2E1C31C2-8A6F-4CE6-AD09-DD880558C06B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0s - {2E1C31C2-8A6F-4CE6-AD09-DD880558C06B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0 - {2E1C31C2-8A6F-4CE6-AD09-DD880558C06B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0s - {2E1C31C2-8A6F-4CE6-AD09-DD880558C06B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0 - {2E1C31C2-8A6F-4CE6-AD09-DD880558C06B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0s - {2E1C31C2-8A6F-4CE6-AD09-DD880558C06B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0 - {2E1C31C2-8A6F-4CE6-AD09-DD880558C06B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0s - {2E1C31C2-8A6F-4CE6-AD09-DD880558C06B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0 - {2E1C31C2-8A6F-4CE6-AD09-DD880558C06B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0s - {2E1C31C2-8A6F-4CE6-AD09-DD880558C06B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0 - {2E1C31C2-8A6F-4CE6-AD09-DD880558C06B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0s - {2E1C31C2-8A6F-4CE6-AD09-DD880558C06B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0 - {2E1C31C2-8A6F-4CE6-AD09-DD880558C06B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0s - {2E1C31C2-8A6F-4CE6-AD09-DD880558C06B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0 - {2E1C31C2-8A6F-4CE6-AD09-DD880558C06B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0s - {2E1C31C2-8A6F-4CE6-AD09-DD880558C06B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll
O18 - Protocol: offline-8876480 - {2E1C31C2-8A6F-4CE6-AD09-DD880558C06B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Unknown owner - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe (file missing)
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - c:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: LiveUpdate Notice Service Ex (LiveUpdate Notice Ex) - Unknown owner - c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe (file missing)
O23 - Service: LiveUpdate Notice Service - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe
O23 - Service: LVCOMSer - Logitech Inc. - C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe
O23 - Service: Process Monitor (LVPrcSrv) - Logitech Inc. - C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe
O23 - Service: Nero BackItUp Scheduler 3 - Nero AG - C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe
O23 - Service: Planificateur LiveUpdate automatique - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: PnkBstrB - Unknown owner - C:\Windows\system32\PnkBstrB.exe
O23 - Service: RoxMediaDB9 - Sonic Solutions - c:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe
O23 - Service: SBSD Security Center Service (SBSDWSCService) - Safer Networking Ltd. - C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe
O23 - Service: stllssvr - MicroVision Development, Inc. - c:\Program Files\Common Files\SureThing Shared\stllssvr.exe

J_O_J_O · Answer

Merci désactive le tea-timer de spybot puis fait toolbar S&D ! ::::

http://www.safer-networking.org/fr/howto/disable.html  


Télécharge Toolbar-S&D (Team IDN) sur ton Bureau.
https://77b4795d-a-62cb3a1a-s-sites.googlegroups.com/site/eric71mespages/ToolBarSD.exe?attachauth=ANoY7cqJWPphpudyTqv7TRo5RQ3nm_Sx8JluVMO59X5E9cyE3j3LqKlmStIqiDqJdIgMJLi7MXn2nKVajQfoWuVvZZ2wIx_vkqO4k4P0K9jh-ra9jaKPXdZcoaVF2UqJZNH8ubL_42uIwh6f35xJ2GJMuzddVj2Qth1DgZ839lxEIFGkgWz3TdfvNMy-YtxfA3gqBUrj4U4LFeAPiWr3ClmjIP0t_Xs5PQ%3D%3D&attredirects=2

* Lance l'installation du programme en exécutant le fichier téléchargé.
* Double-clique maintenant sur le raccourci de Toolbar-S&D.
* Sélectionne la langue souhaitée en tapant la lettre de ton choix puis en validant avec la touche Entrée.
* Choisis maintenant l'option 1 (Recherche). Patiente jusqu'à la fin de la recherche.
* Poste le rapport généré. (C:\TB.txt)

bleurk · Answer

voici le rapport


   -----------\  ToolBar S&D 1.2.8   XP/Vista

   Microsoft® Windows Vista™ Édition Familiale Premium  ( v6.0.6001 ) Service Pack 1
   X86-based PC ( Multiprocessor Free : AMD Athlon(tm) 64 X2 Dual Core Processor 5600+ )
   BIOS : Phoenix - AwardBIOS v6.00PG
   USER : johnny ( Administrator )
   BOOT : Normal boot
   C:\ (Local Disk) - NTFS - Total:290 Go (Free:186 Go)
   D:\ (Local Disk) - NTFS - Total:7 Go (Free:1 Go)
   E:\ (CD or DVD)
   G:\ (USB)
   H:\ (USB)
   I:\ (USB)
   J:\ (USB)
   K:\ (USB)

   "C:\ToolBar SD" ( MAJ : 21-12-2008|20:47 )
   Option : [1] ( 24/01/2009|17:42 )

   -----------\  Recherche de Fichiers / Dossiers ...

   C:\Program Files\GamesBar
   C:\Program Files\GamesBar\Localization2-French.ini

   -----------\  [..\Internet Explorer\Main]

   [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
   "Local Page"="C:\Windows\system32\blank.htm"
   "Start Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome"
   "Search Bar"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
   "Default_search_url"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
   "Default_page_URL"="http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome"
   "Url"="https://www.msn.com/fr-fr/actualite/"

   [HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
   "Start Page"="https://home.sweetim.com/"
   "Default_Page_URL"="https://www.msn.com/fr-fr/?ocid=iehp"
   "Default_Search_URL"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
   "Search Page"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"


   --------------------\  Recherche d'autres infections

   --------------------\  Cracks & Keygens ..

   C:\Users\johnny\AppData\Roaming\uTorrent\Beijing 2008 Crack.torrent
   C:\Users\johnny\Desktop\Downloads\Ricochet\Ricochet Infinity 3.62\Keygen.exe
   C:\Users\johnny\Documents\Downloads\Bubble Shooter Deluxe v1.6 + Crack
   C:\Users\johnny\Documents\Downloads\Bubble Shooter Deluxe v1.6 + Crack\Report.html



   1 - "C:\ToolBar SD\TB_1.txt" - 24/01/2009|17:43 - Option : [1]

   -----------\  Fin du rapport a 17:43:18,14

J_O_J_O · Answer

Salut relance Toolbar S&D et fait l'option 2 Puis poste son rapport ici . Supprime tous t'es cracks ::::::

C:\Users\johnny\AppData\Roaming\uTorrent\Beijing 2008 Crack.torrent
C:\Users\johnny\Desktop\Downloads\Ricochet\Ricochet Infinity 3.62\Keygen.exe
C:\Users\johnny\Documents\Downloads\Bubble Shooter Deluxe v1.6 + Crack
C:\Users\johnny\Documents\Downloads\Bubble Shooter Deluxe v1.6 + Crack\Report.html


  ;)

J_O_J_O · Answer

Merci . T'es cracks son toujours présents ... Donc fait ce que tu veux ...  Pour finir je te conseil Avira antivir comme antivirus gratuit et performant comparé à Avast donc si sa te dit désinstalle correctement Avast avec ccleaner puis installer Avira je te met les lien ci dessous ;) :::::


http://forum.telecharger.01net.com/forum/high-tech/PRODUITS/Questions-techniques/antivir-installation-configuration-sujet_201938_1.htm

 Ccleaner ::::::

*Télécharge et installe CCleaner  https://www.01net.com/telecharger/windows/Utilitaire/nettoyeurs_et_installeurs/fiches/32599.html ( à l'installation, pense à DECOCHER l'installation de Yahoo toolbar !!!).

*Lance CCleaner
Option --> avancé --> décoche « effacer uniquement les fichiers plus vieux que 48h »
Puis nettoyeur --> Analyse > Lancer le nettoyage, puis sur OK dans la fenêtre qui s' affiche.
Relance le nettoyage une deuxième fois.(pense à cocher toutes les cases décochées !!!!)

*Enfin, registre --> corrige toutes les erreurs, et recommence jusqu'à ce qu'il ne trouve plus d'erreurs.

*(garde ce logiciel et utilise le régulièrement).




Ad-remover à faire !!! pour ton programme eorezo !


Télécharge de AD-Remover de Cyrildu17 / C_XX) sur ton Bureau.

http://sd-1.archive-host.com/membres/up/16506160323759868/AD­-R.exe 

/!\ Déconnecte-toi et ferme toutes applications en cours /!\

- Double-clique sur le programme d'installation, installe-le dans son emplacement par défaut (C:\Program files).
- Double-clique sur l'icône Ad-remover située sur ton Bureau.
- Au menu principal, choisis l'option "A".
- Poste le rapport qui apparaît à la fin.

(Le rapport est sauvegardé aussi sous C:\Ad-report(date).log)

(CTRL+A pour tout sélectionner, CTRL+C pour copier et CTRL+V pour coller)

Fenetre pop

32 réponses

Votre réponse

Discussions similaires

Newsletters