"getyourprizes"

Merci de m'avoir répondu Xplode !!

J'ai fait ce que tu m'as dis et voici le lien : https://www.cjoint.com/?kEcRNbKrAd

De plus mon ordi s'éteind tout seul par moment, ce virus (si virus il y a) pourrait en être la cause ??

à bientôt de te lire !

Et de un !!!

List'em by g3n-h@ckm@n 1.0.4.7

User : Bourdeauducq (Administrateurs) # P4-530-B
Update on 27/10/2009 by g3n-h@ckm@n ::::: 11.30
Start at: 18:30:26 | 28/10/2009
Contact : g3n-h@ckm@n sur CCM

Intel(R) Pentium(R) 4 CPU 3.00GHz
Microsoft Windows XP Édition familiale (5.1.2600 32-bit) # Service Pack 3
Internet Explorer 8.0.6001.18702
Windows Firewall Status : Disabled
AV : Trend Micro Internet Security 17.50.1366 [ (!) Disabled | Updated ]
FW : Pare-feu personnel Trend Micro[ (!) Disabled ]5.8

A:\ -> Lecteur de disquettes 3 ½ pouces
C:\ -> Disque fixe local | 48,02 Go (26,12 Go free) [Windows XP] | NTFS
D:\ -> Disque fixe local | 20 Go (16,69 Go free) [PROGRAMS] | NTFS
F:\ -> Disque CD-ROM
G:\ -> Disque CD-ROM
======================
Cles de demarrage "Run"
======================
Windows Registry Editor Version 5.00

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"msnmsgr"="\"C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe\" /background"
"RestoreDesktop"="C:\\Program Files\\Restore Desktop\\RestoreDesktop.exe"
"OE"="\"C:\\Program Files\\Trend Micro\\Internet Security\\TMAS_OE\\TMAS_OEMon.exe\""

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\AutorunsDisabled]
"ProcessManager"="C:\\Program Files\\Bill2's Process Manager\\ProcessManager.exe -minimized -delay"

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SoundMAXPnP"="C:\\Program Files\\Analog Devices\\SoundMAX\\SMax4PNP.exe"
"SoundMAX"="\"C:\\Program Files\\Analog Devices\\SoundMAX\\Smax4.exe\" /tray"
"PDUiP6210DMon"="C:\\Program Files\\Canon\\Memory Card Utility\\iP6210D\\PDUiP6210DMon.exe"
"Easy-PrintToolBox"="C:\\Program Files\\Canon\\Easy-PrintToolBox\\BJPSMAIN.EXE /logon"
"LVCOMSX"="C:\\WINDOWS\\system32\\LVCOMSX.EXE"
"LogitechCameraAssistant"="C:\\Program Files\\Logitech\\Video\\CameraAssistant.exe"
"LogitechVideo[inspector]"="C:\\Program Files\\Logitech\\Video\\InstallHelper.exe /inspect"
"LogitechCameraService(E)"="C:\\WINDOWS\\system32\\ElkCtrl.exe /automation"
"Logitech Hardware Abstraction Layer"="KHALMNPR.EXE"
"StartCCC"="\"C:\\Program Files\\ATI Technologies\\ATI.ACE\\Core-Static\\CLIStart.exe\" MSRun"
"UfSeAgnt.exe"="\"C:\\Program Files\\Trend Micro\\Internet Security\\UfSeAgnt.exe\""
"QuickTime Task"="\"C:\\Program Files\\QuickTime\\qttask.exe\" -atboottime"
"Malwarebytes Anti-Malware (reboot)"="\"C:\\Program Files\\Malwarebytes' Anti-Malware\\mbam.exe\" /runcleanupscript"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\AutorunsDisabled]
"SunJavaUpdateSched"="\"C:\\Program Files\\Java\\jre6\\bin\\jusched.exe\""
"QuickTime Task"="\"C:\\Program Files\\QuickTime\\qttask.exe\" -atboottime"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\OptionalComponents]
@=""

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\OptionalComponents\IMAIL]
"Installed"="1"
@=""

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\OptionalComponents\MAPI]
"NoChange"="1"
"Installed"="1"
@=""

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\OptionalComponents\MSFS]
"Installed"="1"
@=""

=====================
cles additionnelles
=====================
Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=dword:00000000
"legalnoticecaption"=""
"legalnoticetext"=""
"shutdownwithoutlogon"=dword:00000001
"undockwithoutlogon"=dword:00000001

===============
Windows Registry Editor Version 5.00

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System\Shell]

===============
Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
"PostBootReminder"="{7849596a-48ea-486e-8937-a2a3009f31a9}"
"CDBurn"="{fbeb8a05-beee-4442-804e-409d6c4515e9}"
"WebCheck"="{E6FB5E20-DE35-11CF-9C87-00AA005127ED}"
"SysTray"="{35CEC8A3-2BE6-11D2-8773-92E220524153}"
"WPDShServiceObj"="{AAA288BA-9A4C-45B0-95D7-94D524869DB5}"

======
BHO :
======
Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
@="AcroIEHelperStub"
"NoExplorer"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6EBF7485-159F-4bff-A14F-B9E3AAC4465B}]
@="Search Helper"
"NoExplorer"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
"NoExplorer"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
@="JQSIEStartDetectorImpl"
"NoExplorer"=dword:00000001

==========================

===============
Path : C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\Program Files\Samsung\Samsung PC Studio 3\;C:\Program Files\ATI Technologies\ATI.ACE\Core-Static
===============
¤¤¤¤¤¤¤¤¤¤ Fichiers et dossiers presents :

C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr0.dat
C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr1.dat
C:\WINDOWS\System32\service

¤¤¤¤¤¤¤¤¤¤ Clés de registre Presentes :

HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Setup.exe
HKCR\EoRezoBHO.EoBho
HKCR\EoRezoBHO.EoBho.1
HKCU\SOFTWARE\EoRezo
HKCU\Software\Microsoft\Windows\CurrentVersion\Shell
HKLM\SOFTWARE\Classes\AppID\{362A53B2-2913-4F8A-82F5-7E0A23FDC6F9}
HKLM\SOFTWARE\Classes\AppID\EoRezoBHO.dll
HKLM\Software\Classes\EoRezoBHO.EoBho
HKLM\Software\Classes\EoRezoBHO.EoBho.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\eoEngine_is1
HKLM\SOFTWARE\Classes\AppID\{362A53B2-2913-4F8A-82F5-7E0A23FDC6F9}

¤¤¤¤¤¤¤¤¤¤ C:\WINDOWS\Prefetch :

ACRORD32.EXE-3A1F13AE.pf
ACRORD32INFO.EXE-242CE4AA.pf
ASPNET_REGIIS.EXE-009D6E80.pf
CCC.EXE-2F1AF7F1.pf
CCLEANER.EXE-0BCE437C.pf
CMD.EXE-087B4001.pf
CSC.EXE-0B7492CD.pf
CSCRIPT.EXE-1C26180C.pf
DEFRAG.EXE-273F131E.pf
DFRGNTFS.EXE-269967DF.pf
DRWTSN32.EXE-2B4B52AC.pf
DWWIN.EXE-30875ADC.pf
EXCEL.EXE-13B3F319.pf
GIMP-2.4.EXE-3B966F60.pf
GIMP-WIN-REMOTE.EXE-1E693A3A.pf
GREP.COM-30632777.pf
GRPCONV.EXE-111CD845.pf
HELPSVC.EXE-2878DDA2.pf
HIJACKTHISINSTALLER.EXE-3588C35F.pf
HOTFIXINSTALLER.EXE-1D8DFE12.pf
IAUPATCH.EXE-0E82CE7C.pf
IEXPLORE.EXE-27122324.pf
JPEG.EXE-3499B985.pf
LADS.EXE-06335087.pf
Layout.ini
LIST_KILLEM.EXE-192D83DB.pf
LODCTR.EXE-1009C3B4.pf
LOGONUI.EXE-0AF22957.pf
MBAM.EXE-0BEE0439.pf
MODE.COM-31685BAE.pf
MOFCOMP.EXE-01718E95.pf
MRT.EXE-1B4A8D49.pf
MRTSTUB.EXE-02C48207.pf
MSCORSVW.EXE-1BF30400.pf
MSIEXEC.EXE-2F8A8CAE.pf
MSIMN.EXE-38BA891D.pf
MSOHTMED.EXE-1BD4AAD2.pf
MSPAINT.EXE-11CBB631.pf
MSTORDB.EXE-08C54F49.pf
NDP20SP2-KB974417-X86.EXE-002420EA.pf
NGEN.EXE-38021CCC.pf
NOTEPAD.EXE-336351A9.pf
NTOSBOOT-B00DFAAD.pf
OFFICELIVESIGNIN.EXE-042374FE.pf
OPERA.EXE-12085680.pf
OSE.EXE-0125EB9C.pf
PROCESS.COM-0458B762.pf
REG.EXE-0D2A95F7.pf
REGEDIT.EXE-1B606482.pf
REGSVCS.EXE-11A17120.pf
REGSVR32.EXE-25EEFE2F.pf
REGTLIBV12.EXE-0E2FA54B.pf
RUNDLL32.EXE-11E8E656.pf
RUNDLL32.EXE-128C4DE8.pf
RUNDLL32.EXE-1357CA32.pf
RUNDLL32.EXE-16E0C8E4.pf
RUNDLL32.EXE-184D2DF3.pf
RUNDLL32.EXE-188DF14E.pf
RUNDLL32.EXE-192BE542.pf
RUNDLL32.EXE-19D6DBA5.pf
RUNDLL32.EXE-1BA24AC8.pf
RUNDLL32.EXE-1F20A0D1.pf
RUNDLL32.EXE-25D5B24F.pf
RUNDLL32.EXE-268BFF96.pf
RUNDLL32.EXE-2B30F8E8.pf
RUNDLL32.EXE-2BF3472E.pf
RUNDLL32.EXE-3564606F.pf
RUNDLL32.EXE-3EE8B86E.pf
RUNDLL32.EXE-3F751984.pf
RUNDLL32.EXE-41F227AC.pf
RUNDLL32.EXE-451FC2C0.pf
RUNDLL32.EXE-45643E29.pf
RUNDLL32.EXE-48482B64.pf
RUNONCE.EXE-2803F297.pf
SCRIPT-FU.EXE-1084196D.pf
SOFFICE.BIN-01E25E9C.pf
SOFFICE.EXE-358D937C.pf
SOFTWAREUPDATE.EXE-16FC0C0C.pf
SOFTWAREUPDATEHP.EXE-06C84477.pf
SSBEZIER.SCR-01465E32.pf
SUBINACL.EXE-17974576.pf
SVCHOST.EXE-3530F672.pf
SWREG.COM-3A277B41.pf
SWRITER.EXE-38A9F6BD.pf
TISPTHTL.EXE-05776EFF.pf
TMAS_OEMON.EXE-3B27CC8C.pf
TMBMSRV.EXE-1835F882.pf
TMPFW.EXE-14EB7A6C.pf
TMPROXY.EXE-0298FA60.pf
TSC.EXE-06CE5F51.pf
UFLOGUI.EXE-1BAE1159.pf
UFNAVI.EXE-25718428.pf
UFUPDUI.EXE-1C7E6879.pf
UPDATE.EXE-083C1822.pf
UPDATE.EXE-0A76DC7F.pf
UPDATE.EXE-0D369EE0.pf
UPDATE.EXE-15346141.pf
UPDATE.EXE-15D09978.pf
UPDATE.EXE-237CC0C5.pf
UPDATE.EXE-25AE4318.pf
UPDATE.EXE-25CD3F5A.pf
UPDATE.EXE-27D23DFC.pf
UPDATE.EXE-2CEEC945.pf
UPDATE.EXE-2D8505A2.pf
UPDATE.EXE-305AFA82.pf
UPDATE.EXE-31262246.pf
UPDATE.EXE-3136BB9D.pf
UPDATE.EXE-34169F25.pf
UPDATE.EXE-3978C406.pf
UPDATE.EXE-3A43BFC4.pf
VERCLSID.EXE-3667BD89.pf
WGATRAY.EXE-0ED38BED.pf
WINDOWS-KB890830-V3.0-DELTA.E-1CF06118.pf
WINWORD.EXE-1EAA55E3.pf
WINWORD.EXE-37F6AE09.pf
WLCOMM.EXE-04AE9009.pf
WLXQUICKTIMECONTROLHOST.EXE-271639BF.pf
WMIADAP.EXE-2DF425B2.pf
WMIPRVSE.EXE-28F301A9.pf
WORDCONV.EXE-1B72C490.pf
WUAUCLT.EXE-399A8E72.pf
ZHPDIAG.EXE-021B7932.pf
ZHPDIAG_1.24.24.EXE-26663D19.pf
ZHPDIAG_1.24.24.TMP-27AF06DF.pf




¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤( EOF )¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤

J'ai du faire le scan qui suit en mode sans échec... J'espère pas d'incidence sur le résultat ?!.
======= RAPPORT D'AD-REMOVER 1.1.4.6_A | UNIQUEMENT XP/VISTA/7 =======
.
Mit à jour par C_XX le 18.10.2009 à 19:05
Contact: AdRemover.contact@gmail.com
Site web: http://pagesperso-orange.fr/NosTools/ad_remover.html
.
Lancé à: 18:49:06, 28/10/2009 | Mode sans echec | Option: SCAN
Exécuté de: C:\Program Files\Ad-Remover\
Système d'exploitation: Microsoft® Windows XP™ Service Pack 3 v5.1.2600
Nom du PC: P4-530-B | Utilisateur actuel: Bourdeauducq
.
============== ÉLÉMENT(S) TROUVÉ(S) ==============
.

HKCU\Software\EoRezo
HKLM\Software\Classes\AppID\{362A53B2-2913-4F8A-82F5-7E0A23FDC6F9}
HKLM\Software\Classes\AppID\EoRezoBHO.DLL
HKLM\Software\Classes\EoRezoBHO.EoBho
HKLM\Software\Classes\EoRezoBHO.EoBho.1
HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\eoEngine_is1
HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\SoftwareUpdate_is1
HKU\S-1-5-21-746137067-1972579041-839522115-1004\Software\Eorezo
.
C:\DOCUME~1\BOURDE~1\APPLIC~1\EoRezo
C:\Program Files\EoRezo
C:\WINDOWS\Prefetch\SOFTWAREUPDATEHP.EXE-06C84477.pf
C:\DOCUME~1\BOURDE~1\Cookies\bourdeauducq@ads.eorezo[2].txt
C:\DOCUME~1\BOURDE~1\Cookies\bourdeauducq@ads.eorezo[3].txt
C:\DOCUME~1\BOURDE~1\Cookies\bourdeauducq@ads.eorezo[4].txt
C:\DOCUME~1\BOURDE~1\Cookies\bourdeauducq@eorezo[1].txt
C:\DOCUME~1\BOURDE~1\Cookies\bourdeauducq@eorezo[2].txt
C:\DOCUME~1\BOURDE~1\Cookies\bourdeauducq@eorezo[4].txt
C:\DOCUME~1\BOURDE~1\Cookies\bourdeauducq@fcg.casino770[2].txt
C:\DOCUME~1\BOURDE~1\Cookies\bourdeauducq@www.casino770[2].txt
.
============== Scan additionnel ==============
.
.
* Mozilla FireFox Version [Impossible d'obtenir la version] *
.
Nom du profil: yocrpo8z.default (Bourdeauducq)
.
(Prefs.js) huser_pref("browser.startup.homepage", "hxxp://y.lo.st");
.
(prefs.js) TROUVÉ: huser_pref("browser.startup.homepage", "hxxp://y.lo.st");
.
* Internet Explorer Version 8.0.6001.18702 *
.
[HKEY_CURRENT_USER\..\Internet Explorer\Main]
.
Search Page: hxxp://go.microsoft.com/fwlink/?LinkId=54896
Start Page: hxxp://www.google.fr/
Default_Page_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
Search Bar: hxxp://go.microsoft.com/fwlink/?linkid=54896
Default_search_url: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
.
[HKEY_LOCAL_MACHINE\..\Internet Explorer\Main]
.
Default_Page_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Search Page: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Start Page: hxxp://fr.msn.com/
Search bar: hxxp://search.msn.com/spbasic.htm
.
[HKEY_LOCAL_MACHINE\..\Internet Explorer\ABOUTURLS]
.
Tabs: hxxp://y.lo.st
.
===================================
.
7852 Octet(s) - C:\Ad-Report-CLEAN.log
1163 Octet(s) - C:\Ad-Report-SCAN.log
953 Octet(s) - C:\Ad-Report-SCAN[1].log
2938 Octet(s) - C:\Ad-Report-SCAN[2].log
.
310 Fichier(s) - C:\DOCUME~1\BOURDE~1\LOCALS~1\Temp
18 Fichier(s) - C:\WINDOWS\Temp
.
4 Fichier(s) - C:\Program Files\Ad-Remover\BACKUP
0 Fichier(s) - C:\Program Files\Ad-Remover\QUARANTINE
.
Fin à: 18:54:52 | 28/10/2009 - SCAN[2]
.
============== E.O.F ==============
.

Réponse un peu tardive car mon ordi n'arrêtait pas de s'éteindre aprés les scans en mode normal. Voici le premier :

AKill'em by g3n-h@ckm@n 1.0.4.7

User : Bourdeauducq () # P4-530-B
Update on 27/10/2009 by g3n-h@ckm@n ::::: 11.30
Start at: 20:53:09 | 28/10/2009
Contact : g3n-h@ckm@n sur CCM

Intel(R) Pentium(R) 4 CPU 3.00GHz
Microsoft Windows XP Édition familiale (5.1.2600 32-bit) # Service Pack 3
Internet Explorer 8.0.6001.18702
Windows Firewall Status : Enabled
AV : Trend Micro Internet Security 17.50.1366 [ Enabled | Updated ]
FW : Pare-feu personnel Trend Micro[ Enabled ]5.8

A:\ -> Lecteur de disquettes 3 ½ pouces
C:\ -> Disque fixe local | 48,02 Go (26,11 Go free) [Windows XP] | NTFS
D:\ -> Disque fixe local | 20 Go (16,69 Go free) [PROGRAMS] | NTFS
F:\ -> Disque CD-ROM
G:\ -> Disque CD-ROM

Fichiers analysés :
=================


¤¤¤¤¤¤¤¤¤¤ Fichiers et dossiers presents :

"C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr0.dat"
"C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr1.dat"
"C:\WINDOWS\System32\service"


¤¤¤¤¤¤¤¤¤¤ Action sur les fichiers :

Quarantaine :

qmgr0.dat.Kill'em
qmgr1.dat.Kill'em
Service.Kill'em

¤¤¤¤¤¤¤¤¤¤ Verification :


===============
Path : C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\Program Files\Samsung\Samsung PC Studio 3\;C:\Program Files\ATI Technologies\ATI.ACE\Core-Static
===============
¤¤¤¤¤¤¤¤¤¤ Fichiers et dossiers presents :


¤¤¤¤¤¤¤¤¤¤ Clés de registre Presentes :

HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Setup.exe
HKCR\EoRezoBHO.EoBho
HKCR\EoRezoBHO.EoBho.1
HKCU\SOFTWARE\EoRezo
HKCU\Software\Microsoft\Windows\CurrentVersion\Shell
HKLM\SOFTWARE\Classes\AppID\{362A53B2-2913-4F8A-82F5-7E0A23FDC6F9}
HKLM\SOFTWARE\Classes\AppID\EoRezoBHO.dll
HKLM\Software\Classes\EoRezoBHO.EoBho
HKLM\Software\Classes\EoRezoBHO.EoBho.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\eoEngine_is1
HKLM\SOFTWARE\Classes\AppID\{362A53B2-2913-4F8A-82F5-7E0A23FDC6F9}

¤¤¤¤¤¤¤¤¤¤ C:\WINDOWS\Prefetch :

Layout.ini
NTOSBOOT-B00DFAAD.pf




¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤( EOF )¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤

Et le deuxième :
.
======= RAPPORT D'AD-REMOVER 1.1.4.6_A | UNIQUEMENT XP/VISTA/7 =======
.
Mit à jour par C_XX le 18.10.2009 à 19:05
Contact: AdRemover.contact@gmail.com
Site web: http://pagesperso-orange.fr/NosTools/ad_remover.html
.
Lancé à: 18:49:06, 28/10/2009 | Mode sans echec | Option: SCAN
Exécuté de: C:\Program Files\Ad-Remover\
Système d'exploitation: Microsoft® Windows XP™ Service Pack 3 v5.1.2600
Nom du PC: P4-530-B | Utilisateur actuel: Bourdeauducq
.
============== ÉLÉMENT(S) TROUVÉ(S) ==============
.

HKCU\Software\EoRezo
HKLM\Software\Classes\AppID\{362A53B2-2913-4F8A-82F5-7E0A23FDC6F9}
HKLM\Software\Classes\AppID\EoRezoBHO.DLL
HKLM\Software\Classes\EoRezoBHO.EoBho
HKLM\Software\Classes\EoRezoBHO.EoBho.1
HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\eoEngine_is1
HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\SoftwareUpdate_is1
HKU\S-1-5-21-746137067-1972579041-839522115-1004\Software\Eorezo
.
C:\DOCUME~1\BOURDE~1\APPLIC~1\EoRezo
C:\Program Files\EoRezo
C:\WINDOWS\Prefetch\SOFTWAREUPDATEHP.EXE-06C84477.pf
C:\DOCUME~1\BOURDE~1\Cookies\bourdeauducq@ads.eorezo[2].txt
C:\DOCUME~1\BOURDE~1\Cookies\bourdeauducq@ads.eorezo[3].txt
C:\DOCUME~1\BOURDE~1\Cookies\bourdeauducq@ads.eorezo[4].txt
C:\DOCUME~1\BOURDE~1\Cookies\bourdeauducq@eorezo[1].txt
C:\DOCUME~1\BOURDE~1\Cookies\bourdeauducq@eorezo[2].txt
C:\DOCUME~1\BOURDE~1\Cookies\bourdeauducq@eorezo[4].txt
C:\DOCUME~1\BOURDE~1\Cookies\bourdeauducq@fcg.casino770[2].txt
C:\DOCUME~1\BOURDE~1\Cookies\bourdeauducq@www.casino770[2].txt
.
============== Scan additionnel ==============
.
.
* Mozilla FireFox Version [Impossible d'obtenir la version] *
.
Nom du profil: yocrpo8z.default (Bourdeauducq)
.
(Prefs.js) huser_pref("browser.startup.homepage", "hxxp://y.lo.st");
.
(prefs.js) TROUVÉ: huser_pref("browser.startup.homepage", "hxxp://y.lo.st");
.
* Internet Explorer Version 8.0.6001.18702 *
.
[HKEY_CURRENT_USER\..\Internet Explorer\Main]
.
Search Page: hxxp://go.microsoft.com/fwlink/?LinkId=54896
Start Page: hxxp://www.google.fr/
Default_Page_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
Search Bar: hxxp://go.microsoft.com/fwlink/?linkid=54896
Default_search_url: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
.
[HKEY_LOCAL_MACHINE\..\Internet Explorer\Main]
.
Default_Page_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Search Page: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Start Page: hxxp://fr.msn.com/
Search bar: hxxp://search.msn.com/spbasic.htm
.
[HKEY_LOCAL_MACHINE\..\Internet Explorer\ABOUTURLS]
.
Tabs: hxxp://y.lo.st
.
===================================
.
7852 Octet(s) - C:\Ad-Report-CLEAN.log
1163 Octet(s) - C:\Ad-Report-SCAN.log
953 Octet(s) - C:\Ad-Report-SCAN[1].log
2938 Octet(s) - C:\Ad-Report-SCAN[2].log
.
310 Fichier(s) - C:\DOCUME~1\BOURDE~1\LOCALS~1\Temp
18 Fichier(s) - C:\WINDOWS\Temp
.
4 Fichier(s) - C:\Program Files\Ad-Remover\BACKUP
0 Fichier(s) - C:\Program Files\Ad-Remover\QUARANTINE
.
Fin à: 18:54:52 | 28/10/2009 - SCAN[2]
.
============== E.O.F ==============
.
Est ce tout pour les manip" ??Je vous laisse à l'exploration...