Désactiver avast
Résolu
nat
-
nat1961 Messages postés 1080 Date d'inscription Statut Membre Dernière intervention -
nat1961 Messages postés 1080 Date d'inscription Statut Membre Dernière intervention -
Bonjour,
j'ai eu problème avec avast, il s'est mis en arrêt. je l'ai désinstallé et réinstallé, j'ai une clé mais elle n'est pas valide, le problème est que je dois à nouveau désinstaller avast qui ne parait plus dans mes programmes, impossible de le retrouver, comme puis je faire? merci de me répondre, je suis sans anti virus
j'ai eu problème avec avast, il s'est mis en arrêt. je l'ai désinstallé et réinstallé, j'ai une clé mais elle n'est pas valide, le problème est que je dois à nouveau désinstaller avast qui ne parait plus dans mes programmes, impossible de le retrouver, comme puis je faire? merci de me répondre, je suis sans anti virus
A voir également:
- Désactiver avast
- Desactiver rond bleu whatsapp - Guide
- Désinstaller avast - Télécharger - Antivirus & Antimalwares
- Desactiver uac - Guide
- Avast gratuit - Télécharger - Antivirus & Antimalwares
- Désactiver compte facebook - Guide
124 réponses
http://sd-1.archive-host.com/membres/up/16506160323759868/AD-R.exe
reprends ce car l'autre est cassé
reprends ce car l'autre est cassé
j'ai refais ce que tu m'as dit mesg 32 mais le lien ne fonctionne pas, il me marque "file non found"
Vous n’avez pas trouvé la réponse que vous recherchez ?
Posez votre question
nat , tu fais ad_remover comme demander par nathandre dans le message 32 tu poste le rapports , je te remets la procédure pour
Télécharge AD-Remover de C_XX sur ton Bureau :
http://sd-1.archive-host.com/membres/up/16506160323759868/AD-R.exe
Ferme toutes les applications en cours, y compris ton navigateur *.
Désactive ton antivirus.
Double-clique sur AD-R.exe et installe-le dans le répertoire par défaut. ( C:\Program files )
Double clique sur l'icône Ad-remover : http://pagesperso-orange.fr/FindyKill.Ad.Remover/ad_r_recherche.html
Au menu principal choisis l'option A
Postes le rapport qui apparait à la fin du scan.
Il est sauvegardé ici : C:\Ad-report(date).log
* Process.exe, un composant de l'outil, est détecté par certains antivirus, (AntiVir, Dr.Web, Kaspersky Anti-Virus) comme étant un RiskTool.
Il ne s'agit pas d'un virus, mais d'un utilitaire destiné à mettre fin à des processus.
C'est pourquoi il faut désactiver provisoirement ton antivirus.
Télécharge AD-Remover de C_XX sur ton Bureau :
http://sd-1.archive-host.com/membres/up/16506160323759868/AD-R.exe
Ferme toutes les applications en cours, y compris ton navigateur *.
Désactive ton antivirus.
Double-clique sur AD-R.exe et installe-le dans le répertoire par défaut. ( C:\Program files )
Double clique sur l'icône Ad-remover : http://pagesperso-orange.fr/FindyKill.Ad.Remover/ad_r_recherche.html
Au menu principal choisis l'option A
Postes le rapport qui apparait à la fin du scan.
Il est sauvegardé ici : C:\Ad-report(date).log
* Process.exe, un composant de l'outil, est détecté par certains antivirus, (AntiVir, Dr.Web, Kaspersky Anti-Virus) comme étant un RiskTool.
Il ne s'agit pas d'un virus, mais d'un utilitaire destiné à mettre fin à des processus.
C'est pourquoi il faut désactiver provisoirement ton antivirus.
bonjour,
C'est Nat, la pro des toolbar, ci-joint le dernier rapport
------- LOGFILE OF AD-REMOVER 1.1.2.8 | ONLY XP/VISTA -------
Updated by C_XX on 13/04/2009 at 11:30
Contact: AdRemover.contact@gmail.com
Website: http://pagesperso-orange.fr/FindyKill.Ad.Remover/
Start at: 14:46:45, 14/04/2009 | Boot mode: Normal Boot
Option: SCAN | Executed from: C:\Program Files\Ad-remover\Ad-remover.bat
Operating System: Microsoft® Windows XP™ Service Pack 3 (version 5.1.2600)
Computer Name: COMPUTER-APBHPZ
Current User: computer - Administrator
Drive(s):
- C:\ (File System: NTFS)
System Drive: C:\
Windows Directory: C:\WINDOWS\
System Directory: C:\WINDOWS\System32\
--- Running Processes: 48
============ Known Adwares Found ============
.
HKCU\Software\FunWebProducts
HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{07b18ea9-a523-4961-b6bb-170de4475cca}
HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{1d4db7d2-6ec9-47a3-bd87-1e41684e07bb}
HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{3dc201fb-e9c9-499c-a11f-23c360d7c3f8}
HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{9ff05104-b030-46fc-94b8-81276e4e27df}
HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{EEB86AEF-4A5D-4B75-9D74-F16D438FC286}
HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\premieropinion
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\afd450d9-5a6e-4a5d-e824-729378dd52d0
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\rhoixevkcigosf
.
C:\Program Files\PremierOpinion
C:\Documents and Settings\All Users\Menudm~1\Progra~1\PremierOpinion
C:\Documents and Settings\computer\Application Data\Mozilla\Firefox\Profiles\1ip2sf6r.default\searchplugins\Yoog Search.xml
C:\DOCUME~1\computer\LOCALS~1\Temp\tmp282C.tmp
C:\DOCUME~1\computer\LOCALS~1\Temp\tmp884E.tmp
C:\Program Files\Windows Live\Messenger\Riched20.dll
C:\Documents and Settings\computer\Cookies\computer@atdmt[2].txt
C:\Documents and Settings\computer\Cookies\computer@bs.serving-sys[2].txt
C:\Documents and Settings\computer\Cookies\computer@rotator.its.adjuggler[1].txt
+-----------------| Boonty/Boonty Games Elements Found:
Service: Boonty Games
.
HKCU\Software\Boonty
HKLM\Software\Boonty
HKLM\System\ControlSet001\Services\Boonty Games
HKLM\System\CurrentControlSet\Services\Boonty Games
.
C:\Program Files\Boonty
C:\Program Files\BoontyGames
C:\Program Files\Fichiers communs\BOONTY Shared
C:\Documents and Settings\All Users\Application Data\BOONTY
C:\Documents and Settings\All Users\Menudm~1\Progra~1\BoontyGames
+-----------------| Eorezo Elements Found:
HKCR\AppID\{362A53B2-2913-4F8A-82F5-7E0A23FDC6F9}
HKCR\AppID\EoRezoBHO.DLL
HKCR\CLSID\{C7B76B90-3455-4AE6-A752-EAC4D19689E5}
HKCR\EoRezoBHO.EoBho
HKCR\EoRezoBHO.EoBho.1
HKCR\Typelib\{B6ACB3F1-6A83-432C-B854-3E1056F87F4E}
HKCU\Software\EoRezo
HKLM\Software\EoRezo
HKLM\Software\Classes\AppID\{362A53B2-2913-4F8A-82F5-7E0A23FDC6F9}
HKLM\Software\Classes\AppID\EoRezoBHO.DLL
HKLM\Software\Classes\CLSID\{C7B76B90-3455-4AE6-A752-EAC4D19689E5}
HKLM\Software\Classes\EoRezoBHO.EoBho
HKLM\Software\Classes\EoRezoBHO.EoBho.1
HKLM\Software\Classes\TypeLib\{B6ACB3F1-6A83-432C-B854-3E1056F87F4E}
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C7B76B90-3455-4AE6-A752-EAC4D19689E5}
HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\eoEngine_is1
HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\SoftwareUpdate_is1
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\Eoengine
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\Softwarehelper
.
C:\Program Files\EoRezo
C:\Documents and Settings\computer\Application Data\EoRezo
C:\Documents and Settings\computer\Cookies\computer@ads.eorezo[2].txt
C:\Documents and Settings\computer\Cookies\computer@eorezo[1].txt
+-----------------| It's TV Elements Found:
.
+-----------------| Sweetim Elements Found:
HKCR\CLSID\{82AC53B4-164C-4B07-A016-437A8388B81A}
HKCR\CLSID\{A4A0CB15-8465-4F58-A7E5-73084EA2A064}
HKCR\CLSID\{EEE6C35B-6118-11DC-9C72-001320C79847}
HKCR\CLSID\{EEE6C35C-6118-11DC-9C72-001320C79847}
HKCR\CLSID\{EEE6C35D-6118-11DC-9C72-001320C79847}
HKCR\Interface\{EEE6C358-6118-11DC-9C72-001320C79847}
HKCR\Interface\{EEE6C359-6118-11DC-9C72-001320C79847}
HKCR\Interface\{EEE6C35A-6118-11DC-9C72-001320C79847}
HKCR\MediaPlayer.GraphicsUtils
HKCR\MediaPlayer.GraphicsUtils.1
HKCR\MgMediaPlayer.GifAnimator
HKCR\MgMediaPlayer.GifAnimator.1
HKCR\SWEETIE.IEToolbar
HKCR\SWEETIE.IEToolbar.1
HKCR\SWEETIE.SWEETIE
HKCR\SWEETIE.SWEETIE.3
HKCR\SweetIM_URLSearchHook.ToolbarURLSearchHook
HKCR\SweetIM_URLSearchHook.ToolbarURLSearchHook.1
HKCR\Toolbar3.SWEETIE
HKCR\Toolbar3.SWEETIE.1
HKCR\TypeLib\{4D3B167E-5FD8-4276-8FD7-9DF19C1E4D19}
HKCR\Typelib\{EEE6C35E-6118-11DC-9C72-001320C79847}
HKCR\Typelib\{EEE6C35F-6118-11DC-9C72-001320C79847}
HKCU\Software\SweetIM
HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}
HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EEE6C35B-6118-11DC-9C72-001320C79847}
HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EEE6C35C-6118-11DC-9C72-001320C79847}
HKLM\Software\Classes\MediaPlayer.GraphicsUtils
HKLM\Software\Classes\MediaPlayer.GraphicsUtils.1
HKLM\Software\Classes\MgMediaPlayer.GifAnimator
HKLM\Software\Classes\MgMediaPlayer.GifAnimator.1
HKLM\Software\Classes\SWEETIE.IEToolbar
HKLM\Software\Classes\SWEETIE.IEToolbar.1
HKLM\Software\Classes\SWEETIE.SWEETIE
HKLM\Software\Classes\SWEETIE.SWEETIE.3
HKLM\Software\Classes\SweetIM_URLSearchHook.ToolbarURLSearchHook
HKLM\Software\Classes\SweetIM_URLSearchHook.ToolbarURLSearchHook.1
HKLM\Software\Classes\Toolbar3.SWEETIE
HKLM\Software\Classes\Toolbar3.SWEETIE.1
HKLM\Software\Classes\TypeLib\{4D3B167E-5FD8-4276-8FD7-9DF19C1E4D19}
HKLM\Software\Classes\TypeLib\{EEE6C35E-6118-11DC-9C72-001320C79847}
HKLM\Software\Classes\TypeLib\{EEE6C35F-6118-11DC-9C72-001320C79847}
HKLM\Software\Classes\CLSID\{82AC53B4-164C-4B07-A016-437A8388B81A}
HKLM\Software\Classes\CLSID\{A4A0CB15-8465-4F58-A7E5-73084EA2A064}
HKLM\Software\Classes\CLSID\{EEE6C35B-6118-11DC-9C72-001320C79847}
HKLM\Software\Classes\CLSID\{EEE6C35C-6118-11DC-9C72-001320C79847}
HKLM\Software\Classes\CLSID\{EEE6C35D-6118-11DC-9C72-001320C79847}
HKLM\Software\Classes\Interface\{A439801C-961D-452C-AB42-7848E9CBD289}
HKLM\Software\Classes\Interface\{EEE6C358-6118-11DC-9C72-001320C79847}
HKLM\Software\Classes\Interface\{EEE6C359-6118-11DC-9C72-001320C79847}
HKLM\Software\Classes\Interface\{EEE6C35A-6118-11DC-9C72-001320C79847}
HKLM\Software\Classes\Interface\{F4EBB1E2-21F3-4786-8CF4-16EC5925867F}
HKLM\Software\Microsoft\ESENT\Process\SweetIM
HKLM\Software\Microsoft\Internet Explorer\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}
HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\SweetIM.exe
HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{266C7330-C0F4-49E5-8F20-A56F9F822875}
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EEE6C35C-6118-11DC-9C72-001320C79847}
HKLM\Software\SweetIM
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\Sweetim
HKCU\Software\Microsoft\Internet Explorer\UrlSearchHooks\\{EEE6C35D-6118-11DC-9C72-001320C79847}
HKLM\Software\Microsoft\Internet Explorer\Toolbar\\{EEE6C35B-6118-11DC-9C72-001320C79847}
HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{EEE6C35B-6118-11DC-9C72-001320C79847}
HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Components\07D5290CDBDAE4242926B8E6CA650501
HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Components\08E33F7B61DEFF24BB9673ED7D467636
HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Components\0E3D8A5B48622A445A7DF73FEFF32C3F
HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Components\1AC67655DD68F8240B2860F2D511EBD8
HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Components\305B09CE8C53A214DB58887F62F25536
HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Components\34EDDB1BFB3A2D448845F3EFD0F15A43
HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Components\351716A953E21214898904032EAE2E81
HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Components\397C771A7BCAC904697C3EC629ED33ED
HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Components\427EA997C413D1D47907CBFC7B2DB432
HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Components\4318DF19719275242801CBE292063A4C
HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Components\45FC115D1FEAEF849A4E1610D6EC8BF0
HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Components\46A5861A389ADB844AF89E31BC9DF0A1
HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Components\49B0E1A6FF50BBE4289E4E23DE6EA0C7
HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Components\4CCCAC049F34D0540AAC13011398BEDB
HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Components\5C4389D0BFB302C479DE4178BD5D9EBA
HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Components\5D19F074C042AD34BAB463D4175A062E
HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Components\5D2B09BDEF4FE54418E6F3373CDBC7AC
HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Components\61B65D3397A1FBF4CB1571B5E4F6B5B0
HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Components\68E8A05C60DD9254591DBD16C94EDDBF
HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Components\697E782CF574CC34CBB9566440BA12BC
HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Components\6AE27A8613CF7EA4782F2886F67295E5
HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Components\7CE172051F585E04187BCB97570BFA74
HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Components\86A901BA5265452499DCBF719C378EE3
HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Components\88ABD1CD5C40EC84789A7F6EF86DAC5E
HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Components\980289C22F80A7C4BB9323DC61255E4E
HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Components\98CC8BF5A4A6E6C4ABF7051DDAB8B058
HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Components\9A4B7EF3789F871419D9302583B20C15
HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Components\A189D17A469616C4688D23E192996267
HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Components\A6C53B0F76C44004A8F36716213017DB
HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Components\B59F2D8189784CC46A4597F2842480B0
HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Components\BD746FB95FB8E5B45BF66BE54D5FD91F
HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Components\CCF399FCD6D2D3F46BF02A1378654FC9
HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Components\D149C1355C98DE24E82CEFBD996FE06A
HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Components\D15DAF33C220F91468A1D7D57C31ACD7
HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Components\D3BA76A44C779424889063D5098ED2D6
HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Components\D6D0EB9FDBD90C04D92A7E729058F10D
HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Components\DB59FDB786388EA4D897F3EE715683AC
HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Components\DB8DAD19CFBCC2049A4477183787E8C5
HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Components\E1C820A74ED67374BA048B52CB3C3804
HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Components\E337925F629CF4C4FB08F3D9674DD839
HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Components\E4748F9A4181FCE46A23C13B517B9420
HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Components\EC65F200D112357449C8B1BC3CFA03D0
HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Components\F327D0C73C0973644A21E8CC852267A0
HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Components\FA96423FE2B98E248A3B23548D1E22D9
.
C:\WINDOWS\Installer\2c846f.msi
C:\WINDOWS\Installer\2c8474.msi
C:\Program Files\SweetIM
C:\Documents and Settings\computer\Application Data\Mozilla\Firefox\Profiles\1ip2sf6r.default\searchplugins\sweetim.xml
C:\Documents and Settings\computer\Application Data\Mozilla\Firefox\Profiles\1ip2sf6r.default\extensions\{EEE6C361-6118-11DC-9C72-001320C79847}
C:\Documents and Settings\computer\Application Data\Mozilla\Firefox\Profiles\1ip2sf6r.default\SweetIMToolbarData
C:\Documents and Settings\All Users\Application Data\SweetIM
+-----------------| Added Scan:
---- Mozilla FireFox Version 3.0.8 ----
ProfilePath: 1ip2sf6r.default (computer)
.
Prefs.js: Browser.Search.DefaultEngineName: "Yoog Search"
Prefs.js: Browser.Search.DefaultEngineName: "Crawler Search"
Prefs.js: Browser.Search.SelectedEngine: "Yoog Search"
Prefs.js: Browser.Search.SelectedEngine: ""
Prefs.js: Browser.Search.DefaultUrl: "hxxp://www15.yoog.com/search.php?q="
Prefs.js: Browser.Search.DefaultUrl: "hxxp://search.live.com/results.aspx?FORM=IEFM1&q="
.
(Prefs.js) FOUND: user_pref("browser.search.defaultenginename", "Yoog Search");
(Prefs.js) FOUND: user_pref("browser.search.defaulturl", "http://www15.yoog.com/search.php?q=");
(Prefs.js) FOUND: user_pref("browser.search.selectedEngine", "Yoog Search");
(Prefs.js) FOUND: user_pref("keyword.URL", "http://www15.yoog.com/search.php?q=");
(Prefs.js) FOUND: user_pref("sweetim.toolbar.highlight.colors", "#FFFF00,#00FFE4,#5AFF00,#0087FF,#FFCC00,#FF00F0");
(Prefs.js) FOUND: user_pref("sweetim.toolbar.logger.ConsoleHandler.MinReportLevel", "7");
(Prefs.js) FOUND: user_pref("sweetim.toolbar.logger.FileHandler.FileName", "ff-toolbar.log");
(Prefs.js) FOUND: user_pref("sweetim.toolbar.logger.FileHandler.MaxFileSize", "200000");
(Prefs.js) FOUND: user_pref("sweetim.toolbar.logger.FileHandler.MinReportLevel", "7");
(Prefs.js) FOUND: user_pref("sweetim.toolbar.mode.debug", "false");
(Prefs.js) FOUND: user_pref("sweetim.toolbar.previous.browser.search.defaultenginename", "Crawler Search");
(Prefs.js) FOUND: user_pref("sweetim.toolbar.previous.browser.search.defaulturl", "https://www.bing.com/?scope=web&mkt=fr-FR&FORM=IEFM1");
(Prefs.js) FOUND: user_pref("sweetim.toolbar.previous.browser.search.selectedEngine", "");
(Prefs.js) FOUND: user_pref("sweetim.toolbar.previous.browser.startup.homepage", "http://y.lo.st");
(Prefs.js) FOUND: user_pref("sweetim.toolbar.previous.keyword.URL", "http://sr.crawler.com/search_404.aspx?Q=&Code=404&tb_id=60265");
(Prefs.js) FOUND: user_pref("sweetim.toolbar.search.external", "<?xml version=\"1œ÷œ÷.0\"?><TOOLBAR><EXTERNAL_SEARCH engine=\"http://*google.*\" param=\"q=\" /><EXTERNAL_SEARCH eûŠngine=\"https://search.yahoo.com/*\" param=\"p=\" /><EXTERNAL_SEARCH engine=\"http://search.sweetim.*\" param=\"q=\" /><EXTERNAL_SEARCH engine=\"http://*.live.*/*\" param=\"q=\" /><EXTERNAL_SEARCH engine=\"http://*youtube.com/\" param=\"search_query=\" /><EXTERNAL_SEARCH engine=\"http://*.ebay.*/search/*\" param=\"satitle=\" /><EXTERNAL_SEARCH engine=\"http://*.amazon.com/s/*\" param=\"field-keywords=\" /></TOOLBAR>");
(Prefs.js) FOUND: user_pref("sweetim.toolbar.search.history.capacity", "10");
(Prefs.js) FOUND: user_pref("sweetim.toolbar.simapp_id", "{CC5E63B8-E8AA-11DD-BD9C-001167C35E63}");
(Prefs.js) FOUND: user_pref("sweetim.toolbar.urls.homepage", "https://home.sweetim.com/");
(Prefs.js) FOUND: user_pref("sweetim.toolbar.version", "1.0.0.8");
.
Invalidprefs.js: Browser.Search.DefaultEngineName: "SweetIM Search"
Invalidprefs.js: Browser.Search.DefaultEngineName: "Crawler Search"
Invalidprefs.js: Browser.Search.DefaultEngineName: "Crawler Search"
Invalidprefs.js: Browser.Search.SelectedEngine: "SweetIM Search"
Invalidprefs.js: Browser.Search.SelectedEngine: ""
Invalidprefs.js: Browser.Search.SelectedEngine: ""
Invalidprefs.js: Browser.Search.DefaultUrl: "hxxp://search.sweetim.com/search.asp?src=2&q="
Invalidprefs.js: Browser.Search.DefaultUrl: "hxxp://search.live.com/results.aspx?FORM=IEFM1&q="
Invalidprefs.js: Browser.Search.DefaultUrl: "hxxp://search.live.com/results.aspx?FORM=IEFM1&q="
.
(Invalidprefs.js) FOUND: user_pref("browser.search.defaultenginename", "SweetIM Search");
(Invalidprefs.js) FOUND: user_pref("browser.search.defaulturl", "https://search.sweetim.com/search.asp?src=2&q=");
(Invalidprefs.js) FOUND: user_pref("browser.search.selectedEngine", "SweetIM Search");
(Invalidprefs.js) FOUND: user_pref("browser.startup.homepage", "http://y.lo.st");
(Invalidprefs.js) FOUND: user_pref("keyword.URL", "https://search.sweetim.com/search.asp?src=2&q=");
(Invalidprefs.js) FOUND: user_pref("sweetim.toolbar.highlight.colors", "#FFFF00,#00FFE4,#5AFF00,#0087FF,#FFCC00,#FF00F0");
(Invalidprefs.js) FOUND: user_pref("sweetim.toolbar.logger.ConsoleHandler.MinReportLevel", "7");
(Invalidprefs.js) FOUND: user_pref("sweetim.toolbar.logger.FileHandler.FileName", "ff-toolbar.log");
(Invalidprefs.js) FOUND: user_pref("sweetim.toolbar.logger.FileHandler.MaxFileSize", "200000");
(Invalidprefs.js) FOUND: user_pref("sweetim.toolbar.logger.FileHandler.MinReportLevel", "7");
(Invalidprefs.js) FOUND: user_pref("sweetim.toolbar.mode.debug", "false");
(Invalidprefs.js) FOUND: user_pref("sweetim.toolbar.previous.browser.search.defaultenginename", "Crawler Search");
(Invalidprefs.js) FOUND: user_pref("sweetim.toolbar.previous.browser.search.defaulturl", "https://www.bing.com/?scope=web&mkt=fr-FR&FORM=IEFM1");
(Invalidprefs.js) FOUND: user_pref("sweetim.toolbar.previous.browser.search.selectedEngine", "");
(Invalidprefs.js) FOUND: user_pref("sweetim.toolbar.previous.browser.startup.homepage", "http://y.lo.st");
(Invalidprefs.js) FOUND: user_pref("sweetim.toolbar.previous.keyword.URL", "http://sr.crawler.com/search_404.aspx?Q=&Code=404&tb_id=60265");
(Invalidprefs.js) FOUND: user_pref("sweetim.toolbar.search.external", "<?xml version=\"1œ÷.0\"?><TOOLBAR><EXTERNAL_SEARCH engine=\"http://*google.*\" param=\"q=\" /><EXTERNAL_SEARCH eûŠngine=\"https://search.yahoo.com/*\" param=\"p=\" /><EXTERNAL_SEARCH engine=\"http://search.sweetim.*\" param=\"q=\" /><EXTERNAL_SEARCH engine=\"http://*.live.*/*\" param=\"q=\" /><EXTERNAL_SEARCH engine=\"http://*youtube.com/\" param=\"search_query=\" /><EXTERNAL_SEARCH engine=\"http://*.ebay.*/search/*\" param=\"satitle=\" /><EXTERNAL_SEARCH engine=\"http://*.amazon.com/s/*\" param=\"field-keywords=\" /></TOOLBAR>");
(Invalidprefs.js) FOUND: user_pref("sweetim.toolbar.search.history.capacity", "10");
(Invalidprefs.js) FOUND: user_pref("sweetim.toolbar.simapp_id", "{CC5E63B8-E8AA-11DD-BD9C-001167C35E63}");
(Invalidprefs.js) FOUND: user_pref("sweetim.toolbar.urls.homepage", "https://home.sweetim.com/");
(Invalidprefs.js) FOUND: user_pref("sweetim.toolbar.version", "1.0.0.8");
(Invalidprefs.js) FOUND: user_pref("sweetim.toolbar.highlight.colors", "#FFFF00,#00FFE4,#5AFF00,#0087FF,#FFCC00,#FF00F0");
(Invalidprefs.js) FOUND: user_pref("sweetim.toolbar.logger.ConsoleHandler.MinReportLevel", "7");
(Invalidprefs.js) FOUND: user_pref("sweetim.toolbar.logger.FileHandler.FileName", "ff-toolbar.log");
(Invalidprefs.js) FOUND: user_pref("sweetim.toolbar.logger.FileHandler.MaxFileSize", "200000");
(Invalidprefs.js) FOUND: user_pref("sweetim.toolbar.logger.FileHandler.MinReportLevel", "7");
(Invalidprefs.js) FOUND: user_pref("sweetim.toolbar.mode.debug", "false");
(Invalidprefs.js) FOUND: user_pref("sweetim.toolbar.previous.browser.search.defaultenginename", "Crawler Search");
(Invalidprefs.js) FOUND: user_pref("sweetim.toolbar.previous.browser.search.defaulturl", "https://www.bing.com/?scope=web&mkt=fr-FR&FORM=IEFM1");
(Invalidprefs.js) FOUND: user_pref("sweetim.toolbar.previous.browser.search.selectedEngine", "");
(Invalidprefs.js) FOUND: user_pref("sweetim.toolbar.previous.browser.startup.homepage", "http://y.lo.st");
(Invalidprefs.js) FOUND: user_pref("sweetim.toolbar.previous.keyword.URL", "http://sr.crawler.com/search_404.aspx?Q=&Code=404&tb_id=60265");
(Invalidprefs.js) FOUND: user_pref("sweetim.toolbar.search.external", "<?xml version=\"1œ÷
.
User.js: Browser.Search.DefaultEngineName: "Yoog Search"
User.js: Browser.Search.SelectedEngine: "Yoog Search"
User.js: Browser.Search.DefaultUrl: "hxxp://www15.yoog.com/search.php?q="
.
(User.js) FOUND: user_pref("browser.search.defaultenginename", "Yoog Search");
(User.js) FOUND: user_pref("browser.search.defaulturl", "http://www15.yoog.com/search.php?q=");
(User.js) FOUND: user_pref("browser.search.selectedEngine", "Yoog Search");
(User.js) FOUND: user_pref("keyword.URL", "http://www15.yoog.com/search.php?q=");
---- Internet Explorer Version 7.0.5730.13 ----
+-[HKEY_CURRENT_USER\..\Internet Explorer\Main]
Search bar: hxxp://us.rd.yahoo.com/customize/ie/defaults/sb/ymj/*http
Search Page: hxxp://us.rd.yahoo.com/customize/ie/defaults/sp/ymj/*http
Start page: hxxp://www.yahoo.com/
+-[HKEY_USERS\S-1-5-21-220523388-2025429265-725345543-1004\..\Internet Explorer\Main]
Search bar: hxxp://us.rd.yahoo.com/customize/ie/defaults/sb/ymj/*http
Search Page: hxxp://us.rd.yahoo.com/customize/ie/defaults/sp/ymj/*http
Start page: hxxp://www.yahoo.com/
+-[HKEY_LOCAL_MACHINE\..\Internet Explorer\Main]
Default_Page_URL: hxxp://www.yahoo.com
Default_Search_URL: hxxp://us.rd.yahoo.com/customize/ie/defaults/su/ymj/*http
SearchAssistant: hxxp://www.crawler.com/search/ie.aspx?tb_id=60265
Search bar: hxxp://us.rd.yahoo.com/customize/ie/defaults/sb/ymj/*http
Search Page: hxxp://us.rd.yahoo.com/customize/ie/defaults/sp/ymj/*http
Start page: hxxp://www.msn.com/
+-[HKEY_LOCAL_MACHINE\..\Internet Explorer\ABOUTURLS]
Tabs: hxxp://ieframe.dll/tabswelcome.htm
+---------------------------------------------------------------------------+
22554 Byte(s) - C:\Ad-Report-Scan-14.04.2009.log
0 File(s) - C:\Program Files\Ad-remover\TOOLS\BACKUP
0 File(s) - C:\Program Files\Ad-remover\TOOLS\QUARANTINE
End at: 15:30:37 | 14/04/2009
.
+-----------------| E.O.F - 294 Lines
.
C'est Nat, la pro des toolbar, ci-joint le dernier rapport
------- LOGFILE OF AD-REMOVER 1.1.2.8 | ONLY XP/VISTA -------
Updated by C_XX on 13/04/2009 at 11:30
Contact: AdRemover.contact@gmail.com
Website: http://pagesperso-orange.fr/FindyKill.Ad.Remover/
Start at: 14:46:45, 14/04/2009 | Boot mode: Normal Boot
Option: SCAN | Executed from: C:\Program Files\Ad-remover\Ad-remover.bat
Operating System: Microsoft® Windows XP™ Service Pack 3 (version 5.1.2600)
Computer Name: COMPUTER-APBHPZ
Current User: computer - Administrator
Drive(s):
- C:\ (File System: NTFS)
System Drive: C:\
Windows Directory: C:\WINDOWS\
System Directory: C:\WINDOWS\System32\
--- Running Processes: 48
============ Known Adwares Found ============
.
HKCU\Software\FunWebProducts
HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{07b18ea9-a523-4961-b6bb-170de4475cca}
HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{1d4db7d2-6ec9-47a3-bd87-1e41684e07bb}
HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{3dc201fb-e9c9-499c-a11f-23c360d7c3f8}
HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{9ff05104-b030-46fc-94b8-81276e4e27df}
HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{EEB86AEF-4A5D-4B75-9D74-F16D438FC286}
HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\premieropinion
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\afd450d9-5a6e-4a5d-e824-729378dd52d0
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\rhoixevkcigosf
.
C:\Program Files\PremierOpinion
C:\Documents and Settings\All Users\Menudm~1\Progra~1\PremierOpinion
C:\Documents and Settings\computer\Application Data\Mozilla\Firefox\Profiles\1ip2sf6r.default\searchplugins\Yoog Search.xml
C:\DOCUME~1\computer\LOCALS~1\Temp\tmp282C.tmp
C:\DOCUME~1\computer\LOCALS~1\Temp\tmp884E.tmp
C:\Program Files\Windows Live\Messenger\Riched20.dll
C:\Documents and Settings\computer\Cookies\computer@atdmt[2].txt
C:\Documents and Settings\computer\Cookies\computer@bs.serving-sys[2].txt
C:\Documents and Settings\computer\Cookies\computer@rotator.its.adjuggler[1].txt
+-----------------| Boonty/Boonty Games Elements Found:
Service: Boonty Games
.
HKCU\Software\Boonty
HKLM\Software\Boonty
HKLM\System\ControlSet001\Services\Boonty Games
HKLM\System\CurrentControlSet\Services\Boonty Games
.
C:\Program Files\Boonty
C:\Program Files\BoontyGames
C:\Program Files\Fichiers communs\BOONTY Shared
C:\Documents and Settings\All Users\Application Data\BOONTY
C:\Documents and Settings\All Users\Menudm~1\Progra~1\BoontyGames
+-----------------| Eorezo Elements Found:
HKCR\AppID\{362A53B2-2913-4F8A-82F5-7E0A23FDC6F9}
HKCR\AppID\EoRezoBHO.DLL
HKCR\CLSID\{C7B76B90-3455-4AE6-A752-EAC4D19689E5}
HKCR\EoRezoBHO.EoBho
HKCR\EoRezoBHO.EoBho.1
HKCR\Typelib\{B6ACB3F1-6A83-432C-B854-3E1056F87F4E}
HKCU\Software\EoRezo
HKLM\Software\EoRezo
HKLM\Software\Classes\AppID\{362A53B2-2913-4F8A-82F5-7E0A23FDC6F9}
HKLM\Software\Classes\AppID\EoRezoBHO.DLL
HKLM\Software\Classes\CLSID\{C7B76B90-3455-4AE6-A752-EAC4D19689E5}
HKLM\Software\Classes\EoRezoBHO.EoBho
HKLM\Software\Classes\EoRezoBHO.EoBho.1
HKLM\Software\Classes\TypeLib\{B6ACB3F1-6A83-432C-B854-3E1056F87F4E}
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C7B76B90-3455-4AE6-A752-EAC4D19689E5}
HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\eoEngine_is1
HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\SoftwareUpdate_is1
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\Eoengine
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\Softwarehelper
.
C:\Program Files\EoRezo
C:\Documents and Settings\computer\Application Data\EoRezo
C:\Documents and Settings\computer\Cookies\computer@ads.eorezo[2].txt
C:\Documents and Settings\computer\Cookies\computer@eorezo[1].txt
+-----------------| It's TV Elements Found:
.
+-----------------| Sweetim Elements Found:
HKCR\CLSID\{82AC53B4-164C-4B07-A016-437A8388B81A}
HKCR\CLSID\{A4A0CB15-8465-4F58-A7E5-73084EA2A064}
HKCR\CLSID\{EEE6C35B-6118-11DC-9C72-001320C79847}
HKCR\CLSID\{EEE6C35C-6118-11DC-9C72-001320C79847}
HKCR\CLSID\{EEE6C35D-6118-11DC-9C72-001320C79847}
HKCR\Interface\{EEE6C358-6118-11DC-9C72-001320C79847}
HKCR\Interface\{EEE6C359-6118-11DC-9C72-001320C79847}
HKCR\Interface\{EEE6C35A-6118-11DC-9C72-001320C79847}
HKCR\MediaPlayer.GraphicsUtils
HKCR\MediaPlayer.GraphicsUtils.1
HKCR\MgMediaPlayer.GifAnimator
HKCR\MgMediaPlayer.GifAnimator.1
HKCR\SWEETIE.IEToolbar
HKCR\SWEETIE.IEToolbar.1
HKCR\SWEETIE.SWEETIE
HKCR\SWEETIE.SWEETIE.3
HKCR\SweetIM_URLSearchHook.ToolbarURLSearchHook
HKCR\SweetIM_URLSearchHook.ToolbarURLSearchHook.1
HKCR\Toolbar3.SWEETIE
HKCR\Toolbar3.SWEETIE.1
HKCR\TypeLib\{4D3B167E-5FD8-4276-8FD7-9DF19C1E4D19}
HKCR\Typelib\{EEE6C35E-6118-11DC-9C72-001320C79847}
HKCR\Typelib\{EEE6C35F-6118-11DC-9C72-001320C79847}
HKCU\Software\SweetIM
HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}
HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EEE6C35B-6118-11DC-9C72-001320C79847}
HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EEE6C35C-6118-11DC-9C72-001320C79847}
HKLM\Software\Classes\MediaPlayer.GraphicsUtils
HKLM\Software\Classes\MediaPlayer.GraphicsUtils.1
HKLM\Software\Classes\MgMediaPlayer.GifAnimator
HKLM\Software\Classes\MgMediaPlayer.GifAnimator.1
HKLM\Software\Classes\SWEETIE.IEToolbar
HKLM\Software\Classes\SWEETIE.IEToolbar.1
HKLM\Software\Classes\SWEETIE.SWEETIE
HKLM\Software\Classes\SWEETIE.SWEETIE.3
HKLM\Software\Classes\SweetIM_URLSearchHook.ToolbarURLSearchHook
HKLM\Software\Classes\SweetIM_URLSearchHook.ToolbarURLSearchHook.1
HKLM\Software\Classes\Toolbar3.SWEETIE
HKLM\Software\Classes\Toolbar3.SWEETIE.1
HKLM\Software\Classes\TypeLib\{4D3B167E-5FD8-4276-8FD7-9DF19C1E4D19}
HKLM\Software\Classes\TypeLib\{EEE6C35E-6118-11DC-9C72-001320C79847}
HKLM\Software\Classes\TypeLib\{EEE6C35F-6118-11DC-9C72-001320C79847}
HKLM\Software\Classes\CLSID\{82AC53B4-164C-4B07-A016-437A8388B81A}
HKLM\Software\Classes\CLSID\{A4A0CB15-8465-4F58-A7E5-73084EA2A064}
HKLM\Software\Classes\CLSID\{EEE6C35B-6118-11DC-9C72-001320C79847}
HKLM\Software\Classes\CLSID\{EEE6C35C-6118-11DC-9C72-001320C79847}
HKLM\Software\Classes\CLSID\{EEE6C35D-6118-11DC-9C72-001320C79847}
HKLM\Software\Classes\Interface\{A439801C-961D-452C-AB42-7848E9CBD289}
HKLM\Software\Classes\Interface\{EEE6C358-6118-11DC-9C72-001320C79847}
HKLM\Software\Classes\Interface\{EEE6C359-6118-11DC-9C72-001320C79847}
HKLM\Software\Classes\Interface\{EEE6C35A-6118-11DC-9C72-001320C79847}
HKLM\Software\Classes\Interface\{F4EBB1E2-21F3-4786-8CF4-16EC5925867F}
HKLM\Software\Microsoft\ESENT\Process\SweetIM
HKLM\Software\Microsoft\Internet Explorer\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}
HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\SweetIM.exe
HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{266C7330-C0F4-49E5-8F20-A56F9F822875}
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EEE6C35C-6118-11DC-9C72-001320C79847}
HKLM\Software\SweetIM
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\Sweetim
HKCU\Software\Microsoft\Internet Explorer\UrlSearchHooks\\{EEE6C35D-6118-11DC-9C72-001320C79847}
HKLM\Software\Microsoft\Internet Explorer\Toolbar\\{EEE6C35B-6118-11DC-9C72-001320C79847}
HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{EEE6C35B-6118-11DC-9C72-001320C79847}
HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Components\07D5290CDBDAE4242926B8E6CA650501
HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Components\08E33F7B61DEFF24BB9673ED7D467636
HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Components\0E3D8A5B48622A445A7DF73FEFF32C3F
HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Components\1AC67655DD68F8240B2860F2D511EBD8
HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Components\305B09CE8C53A214DB58887F62F25536
HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Components\34EDDB1BFB3A2D448845F3EFD0F15A43
HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Components\351716A953E21214898904032EAE2E81
HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Components\397C771A7BCAC904697C3EC629ED33ED
HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Components\427EA997C413D1D47907CBFC7B2DB432
HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Components\4318DF19719275242801CBE292063A4C
HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Components\45FC115D1FEAEF849A4E1610D6EC8BF0
HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Components\46A5861A389ADB844AF89E31BC9DF0A1
HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Components\49B0E1A6FF50BBE4289E4E23DE6EA0C7
HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Components\4CCCAC049F34D0540AAC13011398BEDB
HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Components\5C4389D0BFB302C479DE4178BD5D9EBA
HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Components\5D19F074C042AD34BAB463D4175A062E
HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Components\5D2B09BDEF4FE54418E6F3373CDBC7AC
HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Components\61B65D3397A1FBF4CB1571B5E4F6B5B0
HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Components\68E8A05C60DD9254591DBD16C94EDDBF
HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Components\697E782CF574CC34CBB9566440BA12BC
HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Components\6AE27A8613CF7EA4782F2886F67295E5
HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Components\7CE172051F585E04187BCB97570BFA74
HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Components\86A901BA5265452499DCBF719C378EE3
HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Components\88ABD1CD5C40EC84789A7F6EF86DAC5E
HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Components\980289C22F80A7C4BB9323DC61255E4E
HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Components\98CC8BF5A4A6E6C4ABF7051DDAB8B058
HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Components\9A4B7EF3789F871419D9302583B20C15
HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Components\A189D17A469616C4688D23E192996267
HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Components\A6C53B0F76C44004A8F36716213017DB
HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Components\B59F2D8189784CC46A4597F2842480B0
HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Components\BD746FB95FB8E5B45BF66BE54D5FD91F
HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Components\CCF399FCD6D2D3F46BF02A1378654FC9
HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Components\D149C1355C98DE24E82CEFBD996FE06A
HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Components\D15DAF33C220F91468A1D7D57C31ACD7
HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Components\D3BA76A44C779424889063D5098ED2D6
HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Components\D6D0EB9FDBD90C04D92A7E729058F10D
HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Components\DB59FDB786388EA4D897F3EE715683AC
HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Components\DB8DAD19CFBCC2049A4477183787E8C5
HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Components\E1C820A74ED67374BA048B52CB3C3804
HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Components\E337925F629CF4C4FB08F3D9674DD839
HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Components\E4748F9A4181FCE46A23C13B517B9420
HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Components\EC65F200D112357449C8B1BC3CFA03D0
HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Components\F327D0C73C0973644A21E8CC852267A0
HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Components\FA96423FE2B98E248A3B23548D1E22D9
.
C:\WINDOWS\Installer\2c846f.msi
C:\WINDOWS\Installer\2c8474.msi
C:\Program Files\SweetIM
C:\Documents and Settings\computer\Application Data\Mozilla\Firefox\Profiles\1ip2sf6r.default\searchplugins\sweetim.xml
C:\Documents and Settings\computer\Application Data\Mozilla\Firefox\Profiles\1ip2sf6r.default\extensions\{EEE6C361-6118-11DC-9C72-001320C79847}
C:\Documents and Settings\computer\Application Data\Mozilla\Firefox\Profiles\1ip2sf6r.default\SweetIMToolbarData
C:\Documents and Settings\All Users\Application Data\SweetIM
+-----------------| Added Scan:
---- Mozilla FireFox Version 3.0.8 ----
ProfilePath: 1ip2sf6r.default (computer)
.
Prefs.js: Browser.Search.DefaultEngineName: "Yoog Search"
Prefs.js: Browser.Search.DefaultEngineName: "Crawler Search"
Prefs.js: Browser.Search.SelectedEngine: "Yoog Search"
Prefs.js: Browser.Search.SelectedEngine: ""
Prefs.js: Browser.Search.DefaultUrl: "hxxp://www15.yoog.com/search.php?q="
Prefs.js: Browser.Search.DefaultUrl: "hxxp://search.live.com/results.aspx?FORM=IEFM1&q="
.
(Prefs.js) FOUND: user_pref("browser.search.defaultenginename", "Yoog Search");
(Prefs.js) FOUND: user_pref("browser.search.defaulturl", "http://www15.yoog.com/search.php?q=");
(Prefs.js) FOUND: user_pref("browser.search.selectedEngine", "Yoog Search");
(Prefs.js) FOUND: user_pref("keyword.URL", "http://www15.yoog.com/search.php?q=");
(Prefs.js) FOUND: user_pref("sweetim.toolbar.highlight.colors", "#FFFF00,#00FFE4,#5AFF00,#0087FF,#FFCC00,#FF00F0");
(Prefs.js) FOUND: user_pref("sweetim.toolbar.logger.ConsoleHandler.MinReportLevel", "7");
(Prefs.js) FOUND: user_pref("sweetim.toolbar.logger.FileHandler.FileName", "ff-toolbar.log");
(Prefs.js) FOUND: user_pref("sweetim.toolbar.logger.FileHandler.MaxFileSize", "200000");
(Prefs.js) FOUND: user_pref("sweetim.toolbar.logger.FileHandler.MinReportLevel", "7");
(Prefs.js) FOUND: user_pref("sweetim.toolbar.mode.debug", "false");
(Prefs.js) FOUND: user_pref("sweetim.toolbar.previous.browser.search.defaultenginename", "Crawler Search");
(Prefs.js) FOUND: user_pref("sweetim.toolbar.previous.browser.search.defaulturl", "https://www.bing.com/?scope=web&mkt=fr-FR&FORM=IEFM1");
(Prefs.js) FOUND: user_pref("sweetim.toolbar.previous.browser.search.selectedEngine", "");
(Prefs.js) FOUND: user_pref("sweetim.toolbar.previous.browser.startup.homepage", "http://y.lo.st");
(Prefs.js) FOUND: user_pref("sweetim.toolbar.previous.keyword.URL", "http://sr.crawler.com/search_404.aspx?Q=&Code=404&tb_id=60265");
(Prefs.js) FOUND: user_pref("sweetim.toolbar.search.external", "<?xml version=\"1œ÷œ÷.0\"?><TOOLBAR><EXTERNAL_SEARCH engine=\"http://*google.*\" param=\"q=\" /><EXTERNAL_SEARCH eûŠngine=\"https://search.yahoo.com/*\" param=\"p=\" /><EXTERNAL_SEARCH engine=\"http://search.sweetim.*\" param=\"q=\" /><EXTERNAL_SEARCH engine=\"http://*.live.*/*\" param=\"q=\" /><EXTERNAL_SEARCH engine=\"http://*youtube.com/\" param=\"search_query=\" /><EXTERNAL_SEARCH engine=\"http://*.ebay.*/search/*\" param=\"satitle=\" /><EXTERNAL_SEARCH engine=\"http://*.amazon.com/s/*\" param=\"field-keywords=\" /></TOOLBAR>");
(Prefs.js) FOUND: user_pref("sweetim.toolbar.search.history.capacity", "10");
(Prefs.js) FOUND: user_pref("sweetim.toolbar.simapp_id", "{CC5E63B8-E8AA-11DD-BD9C-001167C35E63}");
(Prefs.js) FOUND: user_pref("sweetim.toolbar.urls.homepage", "https://home.sweetim.com/");
(Prefs.js) FOUND: user_pref("sweetim.toolbar.version", "1.0.0.8");
.
Invalidprefs.js: Browser.Search.DefaultEngineName: "SweetIM Search"
Invalidprefs.js: Browser.Search.DefaultEngineName: "Crawler Search"
Invalidprefs.js: Browser.Search.DefaultEngineName: "Crawler Search"
Invalidprefs.js: Browser.Search.SelectedEngine: "SweetIM Search"
Invalidprefs.js: Browser.Search.SelectedEngine: ""
Invalidprefs.js: Browser.Search.SelectedEngine: ""
Invalidprefs.js: Browser.Search.DefaultUrl: "hxxp://search.sweetim.com/search.asp?src=2&q="
Invalidprefs.js: Browser.Search.DefaultUrl: "hxxp://search.live.com/results.aspx?FORM=IEFM1&q="
Invalidprefs.js: Browser.Search.DefaultUrl: "hxxp://search.live.com/results.aspx?FORM=IEFM1&q="
.
(Invalidprefs.js) FOUND: user_pref("browser.search.defaultenginename", "SweetIM Search");
(Invalidprefs.js) FOUND: user_pref("browser.search.defaulturl", "https://search.sweetim.com/search.asp?src=2&q=");
(Invalidprefs.js) FOUND: user_pref("browser.search.selectedEngine", "SweetIM Search");
(Invalidprefs.js) FOUND: user_pref("browser.startup.homepage", "http://y.lo.st");
(Invalidprefs.js) FOUND: user_pref("keyword.URL", "https://search.sweetim.com/search.asp?src=2&q=");
(Invalidprefs.js) FOUND: user_pref("sweetim.toolbar.highlight.colors", "#FFFF00,#00FFE4,#5AFF00,#0087FF,#FFCC00,#FF00F0");
(Invalidprefs.js) FOUND: user_pref("sweetim.toolbar.logger.ConsoleHandler.MinReportLevel", "7");
(Invalidprefs.js) FOUND: user_pref("sweetim.toolbar.logger.FileHandler.FileName", "ff-toolbar.log");
(Invalidprefs.js) FOUND: user_pref("sweetim.toolbar.logger.FileHandler.MaxFileSize", "200000");
(Invalidprefs.js) FOUND: user_pref("sweetim.toolbar.logger.FileHandler.MinReportLevel", "7");
(Invalidprefs.js) FOUND: user_pref("sweetim.toolbar.mode.debug", "false");
(Invalidprefs.js) FOUND: user_pref("sweetim.toolbar.previous.browser.search.defaultenginename", "Crawler Search");
(Invalidprefs.js) FOUND: user_pref("sweetim.toolbar.previous.browser.search.defaulturl", "https://www.bing.com/?scope=web&mkt=fr-FR&FORM=IEFM1");
(Invalidprefs.js) FOUND: user_pref("sweetim.toolbar.previous.browser.search.selectedEngine", "");
(Invalidprefs.js) FOUND: user_pref("sweetim.toolbar.previous.browser.startup.homepage", "http://y.lo.st");
(Invalidprefs.js) FOUND: user_pref("sweetim.toolbar.previous.keyword.URL", "http://sr.crawler.com/search_404.aspx?Q=&Code=404&tb_id=60265");
(Invalidprefs.js) FOUND: user_pref("sweetim.toolbar.search.external", "<?xml version=\"1œ÷.0\"?><TOOLBAR><EXTERNAL_SEARCH engine=\"http://*google.*\" param=\"q=\" /><EXTERNAL_SEARCH eûŠngine=\"https://search.yahoo.com/*\" param=\"p=\" /><EXTERNAL_SEARCH engine=\"http://search.sweetim.*\" param=\"q=\" /><EXTERNAL_SEARCH engine=\"http://*.live.*/*\" param=\"q=\" /><EXTERNAL_SEARCH engine=\"http://*youtube.com/\" param=\"search_query=\" /><EXTERNAL_SEARCH engine=\"http://*.ebay.*/search/*\" param=\"satitle=\" /><EXTERNAL_SEARCH engine=\"http://*.amazon.com/s/*\" param=\"field-keywords=\" /></TOOLBAR>");
(Invalidprefs.js) FOUND: user_pref("sweetim.toolbar.search.history.capacity", "10");
(Invalidprefs.js) FOUND: user_pref("sweetim.toolbar.simapp_id", "{CC5E63B8-E8AA-11DD-BD9C-001167C35E63}");
(Invalidprefs.js) FOUND: user_pref("sweetim.toolbar.urls.homepage", "https://home.sweetim.com/");
(Invalidprefs.js) FOUND: user_pref("sweetim.toolbar.version", "1.0.0.8");
(Invalidprefs.js) FOUND: user_pref("sweetim.toolbar.highlight.colors", "#FFFF00,#00FFE4,#5AFF00,#0087FF,#FFCC00,#FF00F0");
(Invalidprefs.js) FOUND: user_pref("sweetim.toolbar.logger.ConsoleHandler.MinReportLevel", "7");
(Invalidprefs.js) FOUND: user_pref("sweetim.toolbar.logger.FileHandler.FileName", "ff-toolbar.log");
(Invalidprefs.js) FOUND: user_pref("sweetim.toolbar.logger.FileHandler.MaxFileSize", "200000");
(Invalidprefs.js) FOUND: user_pref("sweetim.toolbar.logger.FileHandler.MinReportLevel", "7");
(Invalidprefs.js) FOUND: user_pref("sweetim.toolbar.mode.debug", "false");
(Invalidprefs.js) FOUND: user_pref("sweetim.toolbar.previous.browser.search.defaultenginename", "Crawler Search");
(Invalidprefs.js) FOUND: user_pref("sweetim.toolbar.previous.browser.search.defaulturl", "https://www.bing.com/?scope=web&mkt=fr-FR&FORM=IEFM1");
(Invalidprefs.js) FOUND: user_pref("sweetim.toolbar.previous.browser.search.selectedEngine", "");
(Invalidprefs.js) FOUND: user_pref("sweetim.toolbar.previous.browser.startup.homepage", "http://y.lo.st");
(Invalidprefs.js) FOUND: user_pref("sweetim.toolbar.previous.keyword.URL", "http://sr.crawler.com/search_404.aspx?Q=&Code=404&tb_id=60265");
(Invalidprefs.js) FOUND: user_pref("sweetim.toolbar.search.external", "<?xml version=\"1œ÷
.
User.js: Browser.Search.DefaultEngineName: "Yoog Search"
User.js: Browser.Search.SelectedEngine: "Yoog Search"
User.js: Browser.Search.DefaultUrl: "hxxp://www15.yoog.com/search.php?q="
.
(User.js) FOUND: user_pref("browser.search.defaultenginename", "Yoog Search");
(User.js) FOUND: user_pref("browser.search.defaulturl", "http://www15.yoog.com/search.php?q=");
(User.js) FOUND: user_pref("browser.search.selectedEngine", "Yoog Search");
(User.js) FOUND: user_pref("keyword.URL", "http://www15.yoog.com/search.php?q=");
---- Internet Explorer Version 7.0.5730.13 ----
+-[HKEY_CURRENT_USER\..\Internet Explorer\Main]
Search bar: hxxp://us.rd.yahoo.com/customize/ie/defaults/sb/ymj/*http
Search Page: hxxp://us.rd.yahoo.com/customize/ie/defaults/sp/ymj/*http
Start page: hxxp://www.yahoo.com/
+-[HKEY_USERS\S-1-5-21-220523388-2025429265-725345543-1004\..\Internet Explorer\Main]
Search bar: hxxp://us.rd.yahoo.com/customize/ie/defaults/sb/ymj/*http
Search Page: hxxp://us.rd.yahoo.com/customize/ie/defaults/sp/ymj/*http
Start page: hxxp://www.yahoo.com/
+-[HKEY_LOCAL_MACHINE\..\Internet Explorer\Main]
Default_Page_URL: hxxp://www.yahoo.com
Default_Search_URL: hxxp://us.rd.yahoo.com/customize/ie/defaults/su/ymj/*http
SearchAssistant: hxxp://www.crawler.com/search/ie.aspx?tb_id=60265
Search bar: hxxp://us.rd.yahoo.com/customize/ie/defaults/sb/ymj/*http
Search Page: hxxp://us.rd.yahoo.com/customize/ie/defaults/sp/ymj/*http
Start page: hxxp://www.msn.com/
+-[HKEY_LOCAL_MACHINE\..\Internet Explorer\ABOUTURLS]
Tabs: hxxp://ieframe.dll/tabswelcome.htm
+---------------------------------------------------------------------------+
22554 Byte(s) - C:\Ad-Report-Scan-14.04.2009.log
0 File(s) - C:\Program Files\Ad-remover\TOOLS\BACKUP
0 File(s) - C:\Program Files\Ad-remover\TOOLS\QUARANTINE
End at: 15:30:37 | 14/04/2009
.
+-----------------| E.O.F - 294 Lines
.
Bonjour, tu collectionnes les infections
Relance "Ad-remover" : au menu principal choisi l'option "B" .
A l'écran de sélection ( comme montré ici )
http://sd-1.archive-host.com/membres/up/16506160323759868/Capturer-ADR.JPG
choisis le chiffre à gauche de ces lignes en validant par ENTREE à chaque fois :
Suppression Eorezo
Suppression Sweetim
Suppression autres adwares
boonty game
Puis choisis "S", le programme va travailler,
Poste le rapport qui apparait à la fin.
Relance "Ad-remover" : au menu principal choisi l'option "B" .
A l'écran de sélection ( comme montré ici )
http://sd-1.archive-host.com/membres/up/16506160323759868/Capturer-ADR.JPG
choisis le chiffre à gauche de ces lignes en validant par ENTREE à chaque fois :
Suppression Eorezo
Suppression Sweetim
Suppression autres adwares
boonty game
Puis choisis "S", le programme va travailler,
Poste le rapport qui apparait à la fin.
bonjour pour faire la suppression avec ad_remover tu tappes A et entrée
et tu le lances en appuyant sur S et puis Entréelaisses le travailler
et tu le lances en appuyant sur S et puis Entréelaisses le travailler
j'ai eu un petit problème, le scan avait fait nettoyage du disque, et ici on a de l'orage, j'ai eu une coupure, je n'ai pas de rapport, je dois tout recommencer??
et merci de ta patience
et merci de ta patience
je suppose que je refais l'autre manip, parcontre, quand je fais A entrée, et S entrée, je n'ai plus aucun icône sur le bureau, est ce normal?
------- LOGFILE OF AD-REMOVER 1.1.2.8 | ONLY XP/VISTA -------
Updated by C_XX on 13/04/2009 at 11:30
Contact: AdRemover.contact@gmail.com
Website: http://pagesperso-orange.fr/FindyKill.Ad.Remover/
Start at: 17:58:01, 14/04/2009 | Boot mode: Normal Boot
Option: SCAN | Executed from: C:\Program Files\Ad-remover\Ad-remover.bat
Operating System: Microsoft® Windows XP™ Service Pack 3 (version 5.1.2600)
Computer Name: COMPUTER-APBHPZ
Current User: computer - Administrator
Drive(s):
- C:\ (File System: NTFS)
System Drive: C:\
Windows Directory: C:\WINDOWS\
System Directory: C:\WINDOWS\System32\
--- Running Processes: 46
============ Known Adwares Found ============
.
.
C:\Program Files\PremierOpinion
C:\Documents and Settings\computer\Application Data\Mozilla\Firefox\Profiles\1ip2sf6r.default\searchplugins\Yoog Search.xml
+-----------------| Boonty/Boonty Games Elements Found:
.
.
+-----------------| Eorezo Elements Found:
.
+-----------------| It's TV Elements Found:
.
+-----------------| Sweetim Elements Found:
.
C:\Program Files\SweetIM
+-----------------| Added Scan:
---- Mozilla FireFox Version 3.0.8 ----
ProfilePath: 1ip2sf6r.default (computer)
.
Prefs.js: Browser.Search.DefaultEngineName: "Yoog Search"
Prefs.js: Browser.Search.SelectedEngine: "Yoog Search"
Prefs.js: Browser.Search.DefaultUrl: "hxxp://www15.yoog.com/search.php?q="
.
(Prefs.js) FOUND: user_pref("browser.search.defaultenginename", "Yoog Search");
(Prefs.js) FOUND: user_pref("browser.search.defaulturl", "http://www15.yoog.com/search.php?q=");
(Prefs.js) FOUND: user_pref("browser.search.selectedEngine", "Yoog Search");
(Prefs.js) FOUND: user_pref("keyword.URL", "http://www15.yoog.com/search.php?q=");
.
Invalidprefs.js: Browser.Search.DefaultEngineName: "SweetIM Search"
Invalidprefs.js: Browser.Search.DefaultEngineName: "Crawler Search"
Invalidprefs.js: Browser.Search.SelectedEngine: "SweetIM Search"
Invalidprefs.js: Browser.Search.SelectedEngine: ""
Invalidprefs.js: Browser.Search.DefaultUrl: "hxxp://search.sweetim.com/search.asp?src=2&q="
Invalidprefs.js: Browser.Search.DefaultUrl: "hxxp://search.live.com/results.aspx?FORM=IEFM1&q="
.
(Invalidprefs.js) FOUND: user_pref("browser.search.defaultenginename", "SweetIM Search");
(Invalidprefs.js) FOUND: user_pref("browser.search.defaulturl", "https://search.sweetim.com/search.asp?src=2&q=");
(Invalidprefs.js) FOUND: user_pref("browser.search.selectedEngine", "SweetIM Search");
(Invalidprefs.js) FOUND: user_pref("keyword.URL", "https://search.sweetim.com/search.asp?src=2&q=");
(Invalidprefs.js) FOUND: user_pref("sweetim.toolbar.highlight.colors", "#FFFF00,#00FFE4,#5AFF00,#0087FF,#FFCC00,#FF00F0");
(Invalidprefs.js) FOUND: user_pref("sweetim.toolbar.logger.ConsoleHandler.MinReportLevel", "7");
(Invalidprefs.js) FOUND: user_pref("sweetim.toolbar.logger.FileHandler.FileName", "ff-toolbar.log");
(Invalidprefs.js) FOUND: user_pref("sweetim.toolbar.logger.FileHandler.MaxFileSize", "200000");
(Invalidprefs.js) FOUND: user_pref("sweetim.toolbar.logger.FileHandler.MinReportLevel", "7");
(Invalidprefs.js) FOUND: user_pref("sweetim.toolbar.mode.debug", "false");
(Invalidprefs.js) FOUND: user_pref("sweetim.toolbar.previous.browser.search.defaultenginename", "Crawler Search");
(Invalidprefs.js) FOUND: user_pref("sweetim.toolbar.previous.browser.search.defaulturl", "https://www.bing.com/?scope=web&mkt=fr-FR&FORM=IEFM1");
(Invalidprefs.js) FOUND: user_pref("sweetim.toolbar.previous.browser.search.selectedEngine", "");
(Invalidprefs.js) FOUND: user_pref("sweetim.toolbar.previous.keyword.URL", "http://sr.crawler.com/search_404.aspx?Q=&Code=404&tb_id=60265");
(Invalidprefs.js) FOUND: user_pref("sweetim.toolbar.search.external", "<?xml version=\"1œ÷.0\"?><TOOLBAR><EXTERNAL_SEARCH engine=\"http://*google.*\" param=\"q=\" /><EXTERNAL_SEARCH eûŠngine=\"https://search.yahoo.com/*\" param=\"p=\" /><EXTERNAL_SEARCH engine=\"http://search.sweetim.*\" param=\"q=\" /><EXTERNAL_SEARCH engine=\"http://*.live.*/*\" param=\"q=\" /><EXTERNAL_SEARCH engine=\"http://*youtube.com/\" param=\"search_query=\" /><EXTERNAL_SEARCH engine=\"http://*.ebay.*/search/*\" param=\"satitle=\" /><EXTERNAL_SEARCH engine=\"http://*.amazon.com/s/*\" param=\"field-keywords=\" /></TOOLBAR>");
(Invalidprefs.js) FOUND: user_pref("sweetim.toolbar.search.history.capacity", "10");
(Invalidprefs.js) FOUND: user_pref("sweetim.toolbar.simapp_id", "{CC5E63B8-E8AA-11DD-BD9C-001167C35E63}");
(Invalidprefs.js) FOUND: user_pref("sweetim.toolbar.urls.homepage", "https://home.sweetim.com/");
(Invalidprefs.js) FOUND: user_pref("sweetim.toolbar.version", "1.0.0.8");
.
User.js: Browser.Search.DefaultEngineName: "Yoog Search"
User.js: Browser.Search.SelectedEngine: "Yoog Search"
User.js: Browser.Search.DefaultUrl: "hxxp://www15.yoog.com/search.php?q="
.
(User.js) FOUND: user_pref("browser.search.defaultenginename", "Yoog Search");
(User.js) FOUND: user_pref("browser.search.defaulturl", "http://www15.yoog.com/search.php?q=");
(User.js) FOUND: user_pref("browser.search.selectedEngine", "Yoog Search");
(User.js) FOUND: user_pref("keyword.URL", "http://www15.yoog.com/search.php?q=");
---- Internet Explorer Version 7.0.5730.13 ----
+-[HKEY_CURRENT_USER\..\Internet Explorer\Main]
Default_Page_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Search bar: hxxp://go.microsoft.com/fwlink/?linkid=54896
Search Page: hxxp://us.rd.yahoo.com/customize/ie/defaults/sp/ymj/*http
Start page: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
+-[HKEY_USERS\S-1-5-21-220523388-2025429265-725345543-1004\..\Internet Explorer\Main]
Default_Page_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Search bar: hxxp://go.microsoft.com/fwlink/?linkid=54896
Search Page: hxxp://us.rd.yahoo.com/customize/ie/defaults/sp/ymj/*http
Start page: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
+-[HKEY_LOCAL_MACHINE\..\Internet Explorer\Main]
Default_Page_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
SearchAssistant: hxxp://www.crawler.com/search/ie.aspx?tb_id=60265
Search bar: hxxp://search.msn.com/spbasic.htm
Search Page: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Start page: hxxp://fr.msn.com/
+-[HKEY_LOCAL_MACHINE\..\Internet Explorer\ABOUTURLS]
Tabs: hxxp://ieframe.dll/tabswelcome.htm
+---------------------------------------------------------------------------+
15743 Byte(s) - C:\Ad-Report-Clean-14.04.2009.log
6858 Byte(s) - C:\Ad-Report-Scan-14.04.2009.log
3 File(s) - C:\Program Files\Ad-remover\TOOLS\BACKUP
13 File(s) - C:\Program Files\Ad-remover\TOOLS\QUARANTINE
End at: 18:08:41 | 14/04/2009
.
+-----------------| E.O.F - 101 Lines
.
------- LOGFILE OF AD-REMOVER 1.1.2.8 | ONLY XP/VISTA -------
Updated by C_XX on 13/04/2009 at 11:30
Contact: AdRemover.contact@gmail.com
Website: http://pagesperso-orange.fr/FindyKill.Ad.Remover/
Start at: 17:58:01, 14/04/2009 | Boot mode: Normal Boot
Option: SCAN | Executed from: C:\Program Files\Ad-remover\Ad-remover.bat
Operating System: Microsoft® Windows XP™ Service Pack 3 (version 5.1.2600)
Computer Name: COMPUTER-APBHPZ
Current User: computer - Administrator
Drive(s):
- C:\ (File System: NTFS)
System Drive: C:\
Windows Directory: C:\WINDOWS\
System Directory: C:\WINDOWS\System32\
--- Running Processes: 46
============ Known Adwares Found ============
.
.
C:\Program Files\PremierOpinion
C:\Documents and Settings\computer\Application Data\Mozilla\Firefox\Profiles\1ip2sf6r.default\searchplugins\Yoog Search.xml
+-----------------| Boonty/Boonty Games Elements Found:
.
.
+-----------------| Eorezo Elements Found:
.
+-----------------| It's TV Elements Found:
.
+-----------------| Sweetim Elements Found:
.
C:\Program Files\SweetIM
+-----------------| Added Scan:
---- Mozilla FireFox Version 3.0.8 ----
ProfilePath: 1ip2sf6r.default (computer)
.
Prefs.js: Browser.Search.DefaultEngineName: "Yoog Search"
Prefs.js: Browser.Search.SelectedEngine: "Yoog Search"
Prefs.js: Browser.Search.DefaultUrl: "hxxp://www15.yoog.com/search.php?q="
.
(Prefs.js) FOUND: user_pref("browser.search.defaultenginename", "Yoog Search");
(Prefs.js) FOUND: user_pref("browser.search.defaulturl", "http://www15.yoog.com/search.php?q=");
(Prefs.js) FOUND: user_pref("browser.search.selectedEngine", "Yoog Search");
(Prefs.js) FOUND: user_pref("keyword.URL", "http://www15.yoog.com/search.php?q=");
.
Invalidprefs.js: Browser.Search.DefaultEngineName: "SweetIM Search"
Invalidprefs.js: Browser.Search.DefaultEngineName: "Crawler Search"
Invalidprefs.js: Browser.Search.SelectedEngine: "SweetIM Search"
Invalidprefs.js: Browser.Search.SelectedEngine: ""
Invalidprefs.js: Browser.Search.DefaultUrl: "hxxp://search.sweetim.com/search.asp?src=2&q="
Invalidprefs.js: Browser.Search.DefaultUrl: "hxxp://search.live.com/results.aspx?FORM=IEFM1&q="
.
(Invalidprefs.js) FOUND: user_pref("browser.search.defaultenginename", "SweetIM Search");
(Invalidprefs.js) FOUND: user_pref("browser.search.defaulturl", "https://search.sweetim.com/search.asp?src=2&q=");
(Invalidprefs.js) FOUND: user_pref("browser.search.selectedEngine", "SweetIM Search");
(Invalidprefs.js) FOUND: user_pref("keyword.URL", "https://search.sweetim.com/search.asp?src=2&q=");
(Invalidprefs.js) FOUND: user_pref("sweetim.toolbar.highlight.colors", "#FFFF00,#00FFE4,#5AFF00,#0087FF,#FFCC00,#FF00F0");
(Invalidprefs.js) FOUND: user_pref("sweetim.toolbar.logger.ConsoleHandler.MinReportLevel", "7");
(Invalidprefs.js) FOUND: user_pref("sweetim.toolbar.logger.FileHandler.FileName", "ff-toolbar.log");
(Invalidprefs.js) FOUND: user_pref("sweetim.toolbar.logger.FileHandler.MaxFileSize", "200000");
(Invalidprefs.js) FOUND: user_pref("sweetim.toolbar.logger.FileHandler.MinReportLevel", "7");
(Invalidprefs.js) FOUND: user_pref("sweetim.toolbar.mode.debug", "false");
(Invalidprefs.js) FOUND: user_pref("sweetim.toolbar.previous.browser.search.defaultenginename", "Crawler Search");
(Invalidprefs.js) FOUND: user_pref("sweetim.toolbar.previous.browser.search.defaulturl", "https://www.bing.com/?scope=web&mkt=fr-FR&FORM=IEFM1");
(Invalidprefs.js) FOUND: user_pref("sweetim.toolbar.previous.browser.search.selectedEngine", "");
(Invalidprefs.js) FOUND: user_pref("sweetim.toolbar.previous.keyword.URL", "http://sr.crawler.com/search_404.aspx?Q=&Code=404&tb_id=60265");
(Invalidprefs.js) FOUND: user_pref("sweetim.toolbar.search.external", "<?xml version=\"1œ÷.0\"?><TOOLBAR><EXTERNAL_SEARCH engine=\"http://*google.*\" param=\"q=\" /><EXTERNAL_SEARCH eûŠngine=\"https://search.yahoo.com/*\" param=\"p=\" /><EXTERNAL_SEARCH engine=\"http://search.sweetim.*\" param=\"q=\" /><EXTERNAL_SEARCH engine=\"http://*.live.*/*\" param=\"q=\" /><EXTERNAL_SEARCH engine=\"http://*youtube.com/\" param=\"search_query=\" /><EXTERNAL_SEARCH engine=\"http://*.ebay.*/search/*\" param=\"satitle=\" /><EXTERNAL_SEARCH engine=\"http://*.amazon.com/s/*\" param=\"field-keywords=\" /></TOOLBAR>");
(Invalidprefs.js) FOUND: user_pref("sweetim.toolbar.search.history.capacity", "10");
(Invalidprefs.js) FOUND: user_pref("sweetim.toolbar.simapp_id", "{CC5E63B8-E8AA-11DD-BD9C-001167C35E63}");
(Invalidprefs.js) FOUND: user_pref("sweetim.toolbar.urls.homepage", "https://home.sweetim.com/");
(Invalidprefs.js) FOUND: user_pref("sweetim.toolbar.version", "1.0.0.8");
.
User.js: Browser.Search.DefaultEngineName: "Yoog Search"
User.js: Browser.Search.SelectedEngine: "Yoog Search"
User.js: Browser.Search.DefaultUrl: "hxxp://www15.yoog.com/search.php?q="
.
(User.js) FOUND: user_pref("browser.search.defaultenginename", "Yoog Search");
(User.js) FOUND: user_pref("browser.search.defaulturl", "http://www15.yoog.com/search.php?q=");
(User.js) FOUND: user_pref("browser.search.selectedEngine", "Yoog Search");
(User.js) FOUND: user_pref("keyword.URL", "http://www15.yoog.com/search.php?q=");
---- Internet Explorer Version 7.0.5730.13 ----
+-[HKEY_CURRENT_USER\..\Internet Explorer\Main]
Default_Page_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Search bar: hxxp://go.microsoft.com/fwlink/?linkid=54896
Search Page: hxxp://us.rd.yahoo.com/customize/ie/defaults/sp/ymj/*http
Start page: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
+-[HKEY_USERS\S-1-5-21-220523388-2025429265-725345543-1004\..\Internet Explorer\Main]
Default_Page_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Search bar: hxxp://go.microsoft.com/fwlink/?linkid=54896
Search Page: hxxp://us.rd.yahoo.com/customize/ie/defaults/sp/ymj/*http
Start page: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
+-[HKEY_LOCAL_MACHINE\..\Internet Explorer\Main]
Default_Page_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
SearchAssistant: hxxp://www.crawler.com/search/ie.aspx?tb_id=60265
Search bar: hxxp://search.msn.com/spbasic.htm
Search Page: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Start page: hxxp://fr.msn.com/
+-[HKEY_LOCAL_MACHINE\..\Internet Explorer\ABOUTURLS]
Tabs: hxxp://ieframe.dll/tabswelcome.htm
+---------------------------------------------------------------------------+
15743 Byte(s) - C:\Ad-Report-Clean-14.04.2009.log
6858 Byte(s) - C:\Ad-Report-Scan-14.04.2009.log
3 File(s) - C:\Program Files\Ad-remover\TOOLS\BACKUP
13 File(s) - C:\Program Files\Ad-remover\TOOLS\QUARANTINE
End at: 18:08:41 | 14/04/2009
.
+-----------------| E.O.F - 101 Lines
.