Musique qui se met en route toute seule

Réouvre malewarebyte's , va sur quarantaine et supprime tout , puis fais ceci :

https://forums.commentcamarche.net/forum/affich-15549132-musique-qui-se-met-en-route-toute-seule#15

il reste des details amélie , et je vais te faire changer d antivirus .. car avast est dépassé par les évènement .

Pour commencer fais ceci pour mettre java a jours et virer les anciennes versions ( car faillle de sécurité ) :

Télécharge JavaRa.zip de Paul 'Prm753' McLain et Fred de Vries.
Décompresse le fichier sur ton bureau (clique droit > Extraire tout.)
Double-clique sur le répertoire JavaRa obtenu.
Puis double-clique sur le fichier JavaRa.exe (le .exe peut ne pas s'afficher)
Clique sur Search For Updates.
Sélectionne Update Using jucheck.exe puis clique sur Search.
Autorise le processus à se connecter s'il te le demande, clique sur Install et suis les instructions d'installation. Cela prendra quelques minutes.
Quand l'installation est terminée, revient à l'écran de JavaRa et clique sur Remove Older Versions.
Clique sur Oui pour confirmer. L'outil va travailler, clique ensuite sur Ok, puis une deuxième fois sur Ok.
Un rapport va s'ouvrir, copie-colle le dans ta prochaine réponse.
Note : le rapport se trouve aussi à la racine de la partition système, en général C:\ sous le nom JavaRa.log
(c:\JavaRa.log)
Ferme l'application.

salut

1 - Mdr ^^

2 - mais il y a un lecteur quelconque qui est lancé ? ou un navigateur ?

aucune application n'est lancée ?

tu as déjà essayé de redémarrer le PC pour voir ?

lol,non il n y a rien de lancé,j ai bien verifié mais rien.Ca doit etre la deuxieme fois cette semaine que ca arrive.Quand j eteind le pc ca s arrete.Mais c est quand meme pas normal.Pensez vous que j ai un virus?Je vais eteindre mon pc et rallumé car la je me crois dans la jungle lol.

il faudrait essayer d'identifier le processus dans le gestionnaire des tâches, regarde si tu vois un processus au nom évocateur, ou bizarre, quelque chose qui attire ton attention, qui sort du lot... difficile à expliquer comme ça

mais regarde toujours

ok,merci je vais regarder.Mais la j ai pu la musique,est ce que je pourrai voir ou est ce que je dois attendre la prochaine fois que ca se met en route

bah, fait le quand la musique se mets en route, ça augmente surement les chances de trouver le processus

d accord merci.Je reposterai alors quand elle reviendra.

grrrrrrrr,ca y est ca recommence,avec une musique differente,c est trop bizzare

Bon,j etais entrain de fouiner dans les processus et du coup elle s est eteinte.Sinon,je serai vraiment pas dire s il y avait un processus pas normal,il y en a tellement en plus ca bouge tout le temps et rien n est ecris en entier et les noms c est tout des lettres bizzare lol.Donc pas moyens de savoir si c est normal ou pas.

bizarre ton problème, je te suggère de suivre cette méthode ( à la lettre ) :

https://www.commentcamarche.net/faq/2490-supprimer-les-adwares-publicites-intempestives-pop-up-etc

Merci beaucoup.

Voila le rapport "Log"

Logfile of random's system information tool 1.06 (written by random/random)
Run by amel at 2009-12-11 09:53:15
Microsoft® Windows Vista™ Édition Familiale Premium
System drive C: has 41 GB (27%) free of 149 GB
Total RAM: 767 MB (23% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 09:53:35, on 11/12/2009
Platform: Windows Vista (WinNT 6.00.1904)
MSIE: Internet Explorer v7.00 (7.00.6000.16945)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\taskeng.exe
C:\Windows\system32\taskeng.exe
C:\Program Files\Winamp Remote\bin\OrbTray.exe
C:\Users\amel\AppData\Roaming\eoRezo\SoftwareUpdate\SoftwareUpdateHP.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Winamp\winampa.exe
C:\Windows\System32\rundll32.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
C:\Program Files\Lexmark 3600-4600 Series\lxdxmon.exe
C:\Program Files\Alwil Software\Avast4\ashDisp.exe
C:\Windows\ehome\ehtray.exe
C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe
C:\Program Files\Winamp Remote\bin\Orb.exe
C:\Program Files\Macrogaming\SweetIM\SweetIM.exe
C:\Program Files\Iminent\IMBooster.exe
C:\Users\amel\.COMMgr\complmgr.exe
C:\Program Files\Lexmark 3600-4600 Series\lxdxMsdMon.exe
C:\Windows\ehome\ehmsas.exe
C:\Acer\Empowering Technology\ACER.EMPOWERING.FRAMEWORK.SUPERVISOR.EXE
C:\Acer\Empowering Technology\eRecovery\ERAGENT.EXE
C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Windows Live\Contacts\wlcomm.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Windows\system32\conime.exe
C:\Windows\system32\sdclt.exe
C:\Windows\System32\mobsync.exe
C:\Windows\system32\wuauclt.exe
C:\Users\amel\Downloads\RSIT.exe
C:\Program Files\trend micro\amel.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://actus.sfr.fr
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://actus.sfr.fr
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://y.lo.st
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://fr.yahoo.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://actus.sfr.fr
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://home.sweetim.com/
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = https://actus.sfr.fr
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,First Home Page = http://y.lo.st
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: Winamp Search Class - {57BCA5FA-5DBB-45a2-B558-1755C3F6253B} - C:\Program Files\Winamp Toolbar\winamptb.dll
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
R3 - URLSearchHook: (no name) - {9CB65206-89C4-402c-BA80-02D8C59F9B1D} - C:\Program Files\AskTBar\SrchAstt\1.bin\A5SRCHAS.DLL
R3 - URLSearchHook: (no name) - {BC4FFE41-DE9F-46fa-B455-AAD49B9F9938} - (no file)
R3 - URLSearchHook: toox.com Toolbar - {a841a1c1-4687-4285-89fe-e9df6c5ed4c6} - C:\Program Files\toox.com\tbtoo1.dll
O1 - Hosts: ::1 localhost
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Iminent.SearchTheWeb.HelperObject - {0E896FCA-D07E-45FE-901F-6A26FCF59C02} - mscoree.dll (file missing)
O2 - BHO: Lexmark Barre d'outils - {1017A80C-6F09-4548-A84D-EDD6AC9525F0} - C:\Program Files\Lexmark Toolbar\toolband.dll
O2 - BHO: SWEETIE - {1A0AADCD-3A72-4b5f-900F-E3BB5A838E2A} - (no file)
O2 - BHO: AskBar BHO - {201f27d4-3704-41d6-89c1-aa35e39143ed} - C:\Program Files\AskBarDis\bar\bin\askBar.dll
O2 - BHO: Winamp Toolbar Loader - {25CEE8EC-5730-41bc-8B58-22DDC8AB8C20} - C:\Program Files\Winamp Toolbar\winamptb.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - (no file)
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: EoRezoBHO - {64F56FC1-1272-44CD-BA6E-39723696E350} - (no file)
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Ask Search Assistant BHO - {9CB65201-89C4-402c-BA80-02D8C59F9B1D} - C:\Program Files\AskTBar\SrchAstt\1.bin\A5SRCHAS.DLL
O2 - BHO: toox.com Toolbar - {a841a1c1-4687-4285-89fe-e9df6c5ed4c6} - C:\Program Files\toox.com\tbtoo1.dll
O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O2 - BHO: Ask Toolbar BHO - {FE063DB1-4EC0-403e-8DD8-394C54984B2C} - C:\Program Files\AskTBar\bar\1.bin\ASKTBAR.DLL
O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: Acer eDataSecurity Management - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - C:\Windows\system32\eDStoolbar.dll
O3 - Toolbar: Lexmark Barre d'outils - {1017A80C-6F09-4548-A84D-EDD6AC9525F0} - C:\Program Files\Lexmark Toolbar\toolband.dll
O3 - Toolbar: Ask Toolbar - {FE063DB9-4EC0-403e-8DD8-394C54984B2C} - C:\Program Files\AskTBar\bar\1.bin\ASKTBAR.DLL
O3 - Toolbar: (no name) - {BC4FFE41-DE9F-46fa-B455-AAD49B9F9938} - (no file)
O3 - Toolbar: toox.com Toolbar - {a841a1c1-4687-4285-89fe-e9df6c5ed4c6} - C:\Program Files\toox.com\tbtoo1.dll
O3 - Toolbar: Winamp Toolbar - {EBF2BA02-9094-4c5a-858B-BB198F3D8DE2} - C:\Program Files\Winamp Toolbar\winamptb.dll
O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O3 - Toolbar: Ask Toolbar - {3041d03e-fd4b-44e0-b742-2d9b88305f98} - C:\Program Files\AskBarDis\bar\bin\askBar.dll
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [WinampAgent] "C:\Program Files\Winamp\winampa.exe"
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
O4 - HKLM\..\Run: [lxdxmon.exe] "C:\Program Files\Lexmark 3600-4600 Series\lxdxmon.exe"
O4 - HKLM\..\Run: [lxdxamon] "C:\Program Files\Lexmark 3600-4600 Series\lxdxamon.exe"
O4 - HKLM\..\Run: [FaxCenterServer] "C:\Program Files\Lexmark Fax Solutions\fm3032.exe" /s
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\RunOnce: [SoftwareHelper] C:\Users\amel\AppData\Roaming\eoRezo\SoftwareUpdate\SoftwareUpdateHP.exe -runonce
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [ISUSPM Startup] "C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe" -startup
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [SweetIM] C:\Program Files\Macrogaming\SweetIM\SweetIM.exe
O4 - HKCU\..\Run: [IMBooster] C:\Program Files\Iminent\imbooster.exe /warmup
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [?????????] ??????????????e
O4 - HKCU\..\Run: [COM+ Manager] "C:\Users\amel\.COMMgr\complmgr.exe"
O4 - HKCU\..\RunOnce: [Shockwave Updater] C:\Windows\System32\Adobe\SHOCKW~1\SWHELP~1.EXE -Update -1100465 -"Mozilla/5.0 (Windows; U; Windows NT 6.0; fr; rv:1.9.0.14) Gecko/2009082707 Firefox/3.0.14 GTB5 (.NET CLR 3.5.30729) FBSMTWB" -"https://www.aufeminin.com/"
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
O4 - Global Startup: Empowering Technology Launcher.lnk = ?
O8 - Extra context menu item: &Winamp Search - C:\ProgramData\Winamp Toolbar\ieToolbar\resources\en-US\local\search.html
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200
O8 - Extra context menu item: Add to Windows &Live Favorites - https://onedrive.live.com/?id=favorites
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\PROGRA~1\Java\JRE16~2.0_0\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\PROGRA~1\Java\JRE16~2.0_0\bin\ssv.dll
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O13 - Gopher Prefix:
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: ePerformance Service (AcerMemUsageCheckService) - Unknown owner - C:\Acer\Empowering Technology\ePerformance\MemCheck.exe
O23 - Service: ASKService - Unknown owner - C:\Program Files\AskBarDis\bar\bin\AskService.exe
O23 - Service: ASKUpgrade - Unknown owner - C:\Program Files\AskBarDis\bar\bin\ASKUpgrade.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Unknown owner - c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe (file missing)
O23 - Service: eRecovery Service (eRecoveryService) - Acer Inc. - C:\Acer\Empowering Technology\eRecovery\eRecoveryService.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: lxcr_device - - C:\Windows\system32\lxcrcoms.exe
O23 - Service: lxdxCATSCustConnectService - Lexmark International, Inc. - C:\Windows\system32\spool\DRIVERS\W32X86\3\\lxdxserv.exe
O23 - Service: lxdx_device - - C:\Windows\system32\lxdxcoms.exe
O23 - Service: NBService - Unknown owner - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe (file missing)
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
O23 - Service: StarWind AE Service (StarWindServiceAE) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe

et maintenant le rapport "info"

info.txt logfile of random's system information tool 1.06 2009-12-11 09:53:44

======Uninstall list======

-->C:\Program Files\Common Files\Real\Update_OB\r1puninst.exe RealNetworks|RealPlayer|6.0
-->C:\Program Files\Nero\Nero 7\\nero\uninstall\UNNERO.exe /UNINSTALL
-->C:\Windows\UNNeroBackItUp.exe /UNINSTALL
-->C:\Windows\UNNeroMediaHome.exe /UNINSTALL
-->C:\Windows\UNNeroShowTime.exe /UNINSTALL
-->C:\Windows\UNNeroVision.exe /UNINSTALL
-->C:\Windows\UNRecode.exe /UNINSTALL
ABBYY FineReader 6.0 Sprint-->MsiExec.exe /X{ACF60000-22B9-4CE9-98D6-2CCF359BAC07}
ACDSee for PENTAX 2.0-->MsiExec.exe /I{D8320DD6-FE47-41DE-B116-4158B7AE3F37}
Acer eDataSecurity Management-->C:\Acer\Empowering Technology\eDataSecurity\eDSnstHelper.exe -Operation UNINSTALL
Acer Empowering Technology-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\11\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{AB6097D9-D722-4987-BD9E-A076E2848EE2}\setup.exe" -l0x40c -removeonly
Acer ePerformance Management-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\11\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{D462BF9E-0C35-4705-BF9B-3DF9F3816643}\setup.exe" -l0x40c -removeonly
Acer Picture Slide DVD-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{41581EF5-45A7-11DA-9D78-000129760D75}\Setup.exe" -uninstall
Acer Plug and Record-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{F6EFFB76-4A07-11DA-9D78-000129760D75}\Setup.exe" -uninstall
Acer ScreenSaver-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\11\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{79DD56FC-DB8B-47F5-9C80-78B62E05F9BC}\setup.exe" -l0x9 -removeonly
Acer Tour-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\11\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{94389919-B0AA-4882-9BE8-9F0B004ECA35}\setup.exe" -l0x40c -removeonly
Acer Zone MagicDirector-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{F79A208D-D929-11D9-9D77-000129760D75}\Setup.exe" -uninstall
Acer Zone Main Page-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{EFBDC2B0-FAA8-4B78-8DE1-AEBE7958FA37}\Setup.exe" -uninstall
Acer Zone MakeDisk-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{B145EC69-66F5-11D8-9D75-000129760D75}\Setup.exe" -uninstall
Acer Zone SoftDMA-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{AA4BF92B-2AAF-11DA-9D78-000129760D75}\Setup.exe" -uninstall
Adobe Flash Player 10 ActiveX-->C:\Windows\system32\Macromed\Flash\uninstall_activeX.exe
Adobe Flash Player 10 Plugin-->C:\Windows\system32\Macromed\Flash\uninstall_plugin.exe
Adobe Shockwave Player-->C:\Windows\System32\Adobe\SHOCKW~1\UNWISE.EXE C:\Windows\System32\Adobe\SHOCKW~1\Install.log
Archiveur WinRAR-->C:\Program Files\WinRAR\uninstall.exe
Ask Toolbar-->rundll32 C:\PROGRA~1\AskTBar\bar\1.bin\AskTBar.dll,O
Assistant de connexion Windows Live-->MsiExec.exe /I{D3116CC7-24DC-4CA3-9CE1-23FED836E9F2}
Auto-école 3D-->"C:\Program Files\Auto-école 3D\uninstall.exe"
avast! Antivirus-->C:\Program Files\Alwil Software\Avast4\aswRunDll.exe "C:\Program Files\Alwil Software\Avast4\Setup\setiface.dll",RunSetup
CCleaner (remove only)-->"C:\Program Files\CCleaner\uninst.exe"
Clifford - En avant la musique !-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{0F9B7543-CF78-4F81-BDC7-60E863E0D21D}\setup.exe" -l0x40c
Clifford. Sur l’île de Birdwell-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{552DEA67-A8F9-4AC5-9146-F40459316172}\Setup.exe" -l0x40c
Code de la route-->"C:\Program Files\Anuman Interactive\Code de la route\unins000.exe"
eMule-->"C:\Program Files\eMule\Uninstall.exe"
Extension de Windows Live Toolbar (Windows Live Toolbar)-->MsiExec.exe /X{0CA6047C-D28B-4295-834A-07C52BA20C2D}
Galerie de photos Windows Live-->MsiExec.exe /X{B131E59D-202C-43C6-84C9-68F0C37541F1}
Guide routier France-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\10\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{DC828A42-3901-4178-81AF-712A55AC5A65}\SETUP.exe" -l0x40c -removeonly
GUILD WARS-->"C:\Program Files\GUILD WARS\Gw.exe" -uninstall
HijackThis 2.0.2-->"C:\Program Files\trend micro\HijackThis.exe" /uninstall
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)-->C:\Windows\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall /qb+ REBOOTPROMPT=""
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)-->C:\Windows\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall {A7EEA2F2-BFCD-4A54-A575-7B81A786E658} /qb+ REBOOTPROMPT=""
IMBooster-->"C:\ProgramData\{7DE2D9B5-C959-4D68-9E63-E73738EF6F02}\IMBoosterSetup.2.0.847.2_prod.exe" REMOVE=TRUE MODIFY=FALSE
IMBooster-->C:\ProgramData\{7DE2D9B5-C959-4D68-9E63-E73738EF6F02}\IMBoosterSetup.2.0.847.2_prod.exe
Imikimi Plugin-->"C:\Program Files\Imikimi\uninstall.exe"
Installation Windows Live-->C:\Program Files\Windows Live\Installer\wlarp.exe
Installation Windows Live-->MsiExec.exe /I{46ABBC54-1872-4AA3-95E2-F2C063A63F31}
Java(TM) 6 Update 3-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160030}
Java(TM) 6 Update 7-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160070}
Junk Mail filter update-->MsiExec.exe /I{E2DFE069-083E-4631-9B6C-43C48E991DE5}
K-Lite Codec Pack 3.8.5 Full-->"C:\Program Files\K-Lite Codec Pack\unins000.exe"
Lexmark 3600-4600 Series-->C:\Program Files\Lexmark 3600-4600 Series\Install\x86\Uninst.exe
Lexmark Barre d'outils-->regsvr32.exe /s /u "C:\Program Files\Lexmark Toolbar\toolband.dll"
Macrogaming SweetIM 2.1-->MsiExec.exe /X{502358FB-0718-45BC-B142-7511F1694D58}
Menus intelligents (Windows Live Toolbar)-->MsiExec.exe /X{0CC70FEF-5068-4CD5-B4DE-86FFD98EC929}
Microsoft .NET Framework 3.5 SP1-->C:\Windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setup.exe
Microsoft .NET Framework 3.5 SP1-->MsiExec.exe /I{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}
Microsoft Choice Guard-->MsiExec.exe /X{F0E12BBA-AD66-4022-A453-A1C8A0C4D570}
Microsoft Office PowerPoint Viewer 2003-->MsiExec.exe /X{90AF040C-6000-11D3-8CFE-0150048383C9}
Microsoft Search Enhancement Pack-->MsiExec.exe /X{4CBA3D4C-8F51-4D60-B27E-F6B641C571E7}
Microsoft Silverlight-->MsiExec.exe /I{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}
Microsoft SQL Server 2005 Compact Edition [ENU]-->MsiExec.exe /I{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}
Microsoft Sync Framework Runtime Native v1.0 (x86)-->MsiExec.exe /I{8A74E887-8F0F-4017-AF53-CBA42211AAA5}
Microsoft Sync Framework Services Native v1.0 (x86)-->MsiExec.exe /I{BD64AF4A-8C80-4152-AD77-FCDDF05208AB}
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053-->MsiExec.exe /X{770657D0-A123-3C07-8E44-1C83EC895118}
Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{7299052b-02a4-4627-81f2-1818da5d550d}
Mozilla Firefox (3.0.15)-->C:\Program Files\Mozilla Firefox\uninstall\helper.exe
MP3 Player Utilities 1.47-->MsiExec.exe /I{5BBFB0E4-2250-49C3-A8A3-65BE2197D13B}
MSVCRT-->MsiExec.exe /I{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}
MSXML 4.0 SP2 (KB936181)-->MsiExec.exe /I{C04E32E0-0416-434D-AFB9-6969D703A9EF}
MSXML 4.0 SP2 (KB954430)-->MsiExec.exe /I{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
MSXML 4.0 SP2 (KB973688)-->MsiExec.exe /I{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}
Multi Virus Cleaner 2009-->"C:\Program Files\AxBx\Multi Virus Cleaner 2009\unins000.exe"
Nero 7 Ultra Edition-->MsiExec.exe /X{CF097717-F174-4144-954A-FBC4BF301036}
neroxml-->MsiExec.exe /I{56C049BE-79E9-4502-BEA7-9754A3E60F9B}
Neuf - Kit de connexion-->C:\Program Files\Neuf\Kit\uninstall.exe
NTI Backup NOW! 4.7-->"C:\Program Files\InstallShield Installation Information\{67ADE9AF-5CD9-4089-8825-55DE4B366799}\setup.exe" -removeonly
NTI CD & DVD-Maker-->C:\PROGRA~1\COMMON~1\INSTAL~1\Driver\7\INTEL3~1\IDriver.exe /M{1577A05B-EE62-4BBC-9DB7-FE748FA44EC2} /l1036 CDM7
NVIDIA Drivers-->C:\Windows\system32\NVUNINST.EXE UninstallGUI
Outil de téléchargement Windows Live-->MsiExec.exe /I{205C6BDD-7B73-42DE-8505-9A093F35A238}
Picasa 3-->"C:\Program Files\Picasa2\Uninstall.exe"
Plug-in AOL Photos (version 10.6.0.8)-->C:\Program Files\AOL Pictures\10_6_0_8a\aolpInstaller.exe /u
RealPlayer-->C:\Program Files\Common Files\Real\Update_OB\r1puninst.exe RealNetworks|RealPlayer|6.0
Realtek High Definition Audio Driver-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\11\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}\setup.exe" -l0x40c -removeonly
Réussir son Code de la Route 2004-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{85F1A401-F428-45B9-8948-DEA86464AE58}\SETUP.EXE" -l0x40c
Skype™ 3.6-->MsiExec.exe /X{5C82DAE5-6EB0-4374-9254-BE3319BA4E82}
SLD Codec Pack-->C:\Program Files\SLD Codec Pack\uninstall.exe
SoftwareUpdate 1.0-->"C:\Users\amel\AppData\Roaming\eoRezo\SoftwareUpdate\unins000.exe"
Solutions de télécopie Lexmark-->C:\Program Files\Lexmark Fax Solutions\Install\x86\Uninst.exe /R:faxunst
Surligneur (Windows Live Toolbar)-->MsiExec.exe /X{81B5F83F-2291-48B0-8375-36B63A9BF5B0}
SweetIM For Internet Explorer 3.0b-->MsiExec.exe /X{F6D63A65-BD23-46F3-B9A3-87F442423481}
toox.com Toolbar-->C:\PROGRA~1\toox.com\UNWISE.EXE C:\PROGRA~1\toox.com\INSTALL.LOG
TV sur PC-->C:\Program Files\Neuf\TV_PC\uninstall.exe
Update for Microsoft .NET Framework 3.5 SP1 (KB963707)-->C:\Windows\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall {B2AE9C82-DC7B-3641-BFC8-87275C4F3607} /qb+ REBOOTPROMPT=""
VideoLAN VLC media player 0.8.6i-->C:\Program Files\VideoLAN\VLC\uninstall.exe
Vuze Toolbar-->"C:\Program Files\AskBarDis\unins000.exe"
Vuze-->C:\Program Files\Vuze\uninstall.exe
Winamp Remote-->"C:\Program Files\Winamp Remote\uninstall.exe"
Winamp Toolbar for Firefox-->"C:\Users\amel\AppData\Roaming\Mozilla\Firefox\Profiles\kpcrz4wj.default\extensions\{0b38152b-1b20-484d-a11f-5e04a9b0661f}\uninstall.exe"
Winamp Toolbar for Internet Explorer-->"C:\Program Files\Winamp Toolbar\uninstall.exe"
Winamp-->"C:\Program Files\Winamp\UninstWA.exe"
Windows Live Call-->MsiExec.exe /I{82C7B308-0BDD-49D8-8EA5-9CD3A3F9DF41}
Windows Live Communications Platform-->MsiExec.exe /I{3B4E636E-9D65-4D67-BA61-189800823F52}
Windows Live Contrôle parental-->MsiExec.exe /X{D5D81435-B8DE-4CAF-867F-7998F2B92CFC}
Windows Live Favorites pour Windows Live Toolbar-->MsiExec.exe /X{786C4AD1-DCBA-49A6-B0EF-B317A344BD66}
Windows Live FolderShare-->MsiExec.exe /X{2075CB0A-D26F-4DAA-B424-5079296B43BA}
Windows Live Mail-->MsiExec.exe /I{5DD76286-9BE7-4894-A990-E905E91AC818}
Windows Live Messenger-->MsiExec.exe /X{770F1BEC-2871-4E70-B837-FB8525FFA3B1}
Windows Live Movie Maker-->MsiExec.exe /X{53B20C18-D8D4-4588-8737-9BBFE303C354}
Windows Live Toolbar-->MsiExec.exe /X{F7D27C70-90F5-49B9-B188-0A133C0CE353}
Windows Live Writer-->MsiExec.exe /X{4634B21A-CC07-4396-890C-2B8168661FEA}
Windows Media Player Firefox Plugin-->MsiExec.exe /I{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}
Yahoo! Toolbar avec bloqueur de fenêtres pop-up-->C:\PROGRA~1\Yahoo!\common\unyt.exe

======Security center information======

AV: avast! antivirus 4.8.1368 [VPS 091210-1]
AS: AVG Anti-Spyware (disabled) (outdated)
AS: Windows Defender
AS: avast! antivirus 4.8.1368 [VPS 091210-1]

======System event log======

Computer Name: pc-de-amel
Event Code: 7000
Message: Le service lxdxCATSCustConnectService n'a pas pu démarrer en raison de l'erreur :
Le service n'a pas répondu assez vite à la demande de lancement ou de contrôle.
Record Number: 242040
Source Name: Service Control Manager
Time Written: 20091211083400.000000-000
Event Type: Erreur
User:

Computer Name: pc-de-amel
Event Code: 4
Message: Le spouleur d’impression n’a pas pu rouvrir une connexion d’imprimante existante car il n’a pas pu lire les informations de configuration dans la clé de Registre S-1-5-18\Printers\Connections. Le spouleur d’impression n’a pas pu ouvrir la clé de Registre. Ceci peut se produire si la clé de Registre est endommagée ou absente, ou si le Registre est momentanément indisponible.
Record Number: 242086
Source Name: Microsoft-Windows-SpoolerWin32SPL
Time Written: 20091211083931.000000-000
Event Type: Avertissement
User:

Computer Name: pc-de-amel
Event Code: 4
Message: Le spouleur d’impression n’a pas pu rouvrir une connexion d’imprimante existante car il n’a pas pu lire les informations de configuration dans la clé de Registre S-1-5-18\Printers\Connections. Le spouleur d’impression n’a pas pu ouvrir la clé de Registre. Ceci peut se produire si la clé de Registre est endommagée ou absente, ou si le Registre est momentanément indisponible.
Record Number: 242087
Source Name: Microsoft-Windows-SpoolerWin32SPL
Time Written: 20091211083931.000000-000
Event Type: Avertissement
User:

Computer Name: pc-de-amel
Event Code: 4
Message: Le spouleur d’impression n’a pas pu rouvrir une connexion d’imprimante existante car il n’a pas pu lire les informations de configuration dans la clé de Registre S-1-5-18\Printers\Connections. Le spouleur d’impression n’a pas pu ouvrir la clé de Registre. Ceci peut se produire si la clé de Registre est endommagée ou absente, ou si le Registre est momentanément indisponible.
Record Number: 242096
Source Name: Microsoft-Windows-SpoolerWin32SPL
Time Written: 20091211084942.000000-000
Event Type: Avertissement
User:

Computer Name: pc-de-amel
Event Code: 4
Message: Le spouleur d’impression n’a pas pu rouvrir une connexion d’imprimante existante car il n’a pas pu lire les informations de configuration dans la clé de Registre S-1-5-18\Printers\Connections. Le spouleur d’impression n’a pas pu ouvrir la clé de Registre. Ceci peut se produire si la clé de Registre est endommagée ou absente, ou si le Registre est momentanément indisponible.
Record Number: 242097
Source Name: Microsoft-Windows-SpoolerWin32SPL
Time Written: 20091211084942.000000-000
Event Type: Avertissement
User:

=====Application event log=====

Computer Name: pc-de-amel
Event Code: 1000
Message: Application défaillante firefox.exe, version 1.9.0.3576, horodatage 0x4ad844c0, module défaillant msvcrt.dll, version 7.0.6000.16386, horodatage 0x4549bd61, code d’exception 0xc0000005, décalage d’erreur 0x0001e225, ID du processus 0x1154, heure de début de l’application 0x01ca7921b1702980.
Record Number: 51759
Source Name: Application Error
Time Written: 20091209232507.000000-000
Event Type: Erreur
User:

Computer Name: pc-de-amel
Event Code: 6000
Message: L’abonné aux notifications Winlogon <GPClient> n’était pas disponible pour traiter un événement de notification.
Record Number: 51905
Source Name: Microsoft-Windows-Winlogon
Time Written: 20091210203845.000000-000
Event Type: Avertissement
User:

Computer Name: pc-de-amel
Event Code: 4609
Message: Le système d'événements de COM+ a détecté un code de renvoi erroné lors de son traitement interne. Le HRESULT est 8007043c à partir de la ligne 45 de d:\vista_gdr\com\complus\src\events\tier1\eventsystemobj.cpp. Contactez les services de support technique Microsoft pour signaler cette erreur.
Record Number: 51907
Source Name: Microsoft-Windows-EventSystem
Time Written: 20091210203855.000000-000
Event Type: Erreur
User:

Computer Name: pc-de-amel
Event Code: 6000
Message: L’abonné aux notifications Winlogon <GPClient> n’était pas disponible pour traiter un événement de notification.
Record Number: 51908
Source Name: Microsoft-Windows-Winlogon
Time Written: 20091210212050.000000-000
Event Type: Avertissement
User:

Computer Name: pc-de-amel
Event Code: 6000
Message: L’abonné aux notifications Winlogon <GPClient> n’était pas disponible pour traiter un événement de notification.
Record Number: 51911
Source Name: Microsoft-Windows-Winlogon
Time Written: 20091210212051.000000-000
Event Type: Avertissement
User:

=====Security event log=====

Computer Name: pc-de-amel
Event Code: 4672
Message: Privilèges spéciaux attribués à la nouvelle ouverture de session.

Sujet :
ID de sécurité : S-1-5-18
Nom du compte : SYSTEM
Domaine du compte : AUTORITE NT
ID d’ouverture de session : 0x3e7

Privilèges : SeAssignPrimaryTokenPrivilege
SeTcbPrivilege
SeSecurityPrivilege
SeTakeOwnershipPrivilege
SeLoadDriverPrivilege
SeBackupPrivilege
SeRestorePrivilege
SeDebugPrivilege
SeAuditPrivilege
SeSystemEnvironmentPrivilege
SeImpersonatePrivilege
Record Number: 50397
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20090426170001.819942-000
Event Type: Succès de l'audit
User:

Computer Name: pc-de-amel
Event Code: 4904
Message: Une tentative d’inscription de la source d’un événement de sécurité a été effectuée.

Sujet :
ID de sécurité : S-1-5-18
Nom du compte : PC-DE-AMEL$
Domaine du compte : WORKGROUP
ID d’ouverture de session : 0x3e7

Processus :
ID du processus : 0xfb0
Nom du processus : C:\Windows\System32\VSSVC.exe

Source de l’événement :
Nom de la source : VSSAudit
ID de la source de l’événement : 0xae17b6
Record Number: 50398
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20090426200747.030942-000
Event Type: Succès de l'audit
User:

Computer Name: pc-de-amel
Event Code: 4905
Message: Une tentative d’annulation d’inscription de la source d’un événement de sécurité a été effectuée.

Sujet :
ID de sécurité : S-1-5-18
Nom du compte : PC-DE-AMEL$
Domaine du compte : WORKGROUP
ID d’ouverture de session : 0x3e7

Processus :
ID du processus : 0xfb0
Nom du processus : C:\Windows\System32\VSSVC.exe

Source de l’événement :
Nom de la source : VSSAudit
ID de la source de l’événement : 0xae17b6
Record Number: 50399
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20090426200747.030942-000
Event Type: Succès de l'audit
User:

Computer Name: pc-de-amel
Event Code: 4904
Message: Une tentative d’inscription de la source d’un événement de sécurité a été effectuée.

Sujet :
ID de sécurité : S-1-5-18
Nom du compte : PC-DE-AMEL$
Domaine du compte : WORKGROUP
ID d’ouverture de session : 0x3e7

Processus :
ID du processus : 0xfb0
Nom du processus : C:\Windows\System32\VSSVC.exe

Source de l’événement :
Nom de la source : VSSAudit
ID de la source de l’événement : 0xae1825
Record Number: 50400
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20090426200747.037942-000
Event Type: Succès de l'audit
User:

Computer Name: pc-de-amel
Event Code: 4905
Message: Une tentative d’annulation d’inscription de la source d’un événement de sécurité a été effectuée.

Sujet :
ID de sécurité : S-1-5-18
Nom du compte : PC-DE-AMEL$
Domaine du compte : WORKGROUP
ID d’ouverture de session : 0x3e7

Processus :
ID du processus : 0xfb0
Nom du processus : C:\Windows\System32\VSSVC.exe

Source de l’événement :
Nom de la source : VSSAudit
ID de la source de l’événement : 0xae1825
Record Number: 50401
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20090426200747.037942-000
Event Type: Succès de l'audit
User:

======Environment variables======

"ComSpec"=%SystemRoot%\system32\cmd.exe
"FP_NO_HOST_CHECK"=NO
"OS"=Windows_NT
"Path"=%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;C:\Program Files\QuickTime\QTSystem\;C:\Program Files\Common Files\GIS\Tools
"PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC
"PROCESSOR_ARCHITECTURE"=x86
"TEMP"=%SystemRoot%\TEMP
"TMP"=%SystemRoot%\TEMP
"USERNAME"=SYSTEM
"windir"=%SystemRoot%
"PROCESSOR_LEVEL"=15
"PROCESSOR_IDENTIFIER"=x86 Family 15 Model 75 Stepping 2, AuthenticAMD
"PROCESSOR_REVISION"=4b02
"NUMBER_OF_PROCESSORS"=2
"CLASSPATH"=C:\Program Files\QuickTime\QTSystem\QTJava.zip
"QTJAVA"=C:\Program Files\QuickTime\QTSystem\QTJava.zip

-----------------EOF-----------------

merci pour ton aide webernard :)

Bonjour Amélie , Webernard .

Amélie :

Désactive le contrôle des comptes utilisateurs avant l'utilisation de cet outil:

• Allez dans "Démarrer" puis Panneau de configuration.
• Double Cliquez sur l'icône Comptes d'utilisateurs et sur "Activer ou désactiver le contrôle des comptes d'utilisateurs".
• Décochez la case Utiliser le contrôle des comptes d'utilisateurs pour vous aider à protéger votre ordinateur.
• Validez par OK et redémarrez .
• Aide en image: http://pagesperso-orange.fr/NosTools/uac_vista.html

##########

• Télécharge Ad-remover ( de C_XX ) sur ton bureau :

! Déconnecte toi et ferme toutes applications en cours !

• Double clique sur "Ad-R.exe" pour lancer l'installation .

• L'installation est automatique , l outil souvre .

• Au menu principal choisis l'option "L" et tape sur [entrée] .

• Laisse travailler l'outil et ne touche à rien ...

--> Poste le rapport qui apparait à la fin , sur le forum ...

( Le rapport est sauvegardé aussi sous C:\Ad-report.log )
( CTRL+A Pour tout sélectionner , CTRL+C pour copier et CTRL+V pour coller )

Tuto : http://pagesperso-orange.fr/NosTools/tuto_adr_3.html

Le rapport MBAM
Malwarebytes' Anti-Malware 1.42
Version de la base de données: 3344
Windows 6.0.6000
Internet Explorer 7.0.6000.16945

11/12/2009 10:46:01
mbam-log-2009-12-11 (10-46-01).txt

Type de recherche: Examen rapide
Eléments examinés: 96456
Temps écoulé: 6 minute(s), 38 second(s)

Processus mémoire infecté(s): 2
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 3
Valeur(s) du Registre infectée(s): 3
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 3

Processus mémoire infecté(s):
C:\Users\amel\AppData\Roaming\EoRezo\SoftwareUpdate\SoftwareUpdateHP.exe (Rogue.Eorezo) -> Unloaded process successfully.
C:\Users\amel\.COMMgr\complmgr.exe (Trojan.Scar) -> Failed to unload process.

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
HKEY_CLASSES_ROOT\CLSID\{147a976f-eee1-4377-8ea7-4716e4cdd239} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{7aa32fc7-133b-4ae7-998e-ced0d9829b12} (Trojan.Dialer) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\EoRezo (Rogue.Eorezo) -> Quarantined and deleted successfully.

Valeur(s) du Registre infectée(s):
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce\softwarehelper (Rogue.Eorezo) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\com+ manager (Trojan.Scar) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\{110b50f0-4954-4300-b71d-d4de33922b3a} (Rogue.SpywareCleaner2009) -> Quarantined and deleted successfully.

Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)

Dossier(s) infecté(s):
(Aucun élément nuisible détecté)

Fichier(s) infecté(s):
C:\Users\amel\AppData\Roaming\EoRezo\SoftwareUpdate\SoftwareUpdateHP.exe (Rogue.Eorezo) -> Quarantined and deleted successfully.
C:\Users\amel\.COMMgr\complmgr.exe (Trojan.Scar) -> Delete on reboot.
C:\Users\amel\downloads\setup.exe (Rogue.Installer) -> Quarantined and deleted successfully.

Bonjour Chiquitine29,merci je m y met de suite.

ok,merci

Voila le rapport Ad remover
.
======= RAPPORT D'AD-REMOVER 1.1.4.6_E | UNIQUEMENT XP/VISTA/7 =======
.
Mit à jour par C_XX le 10.12.2009 à 21:08
Contact: AdRemover.contact@gmail.com
Site web: http://pagesperso-orange.fr/NosTools/ad_remover.html
.
Lancé à: 11:16:40, 11/12/2009 | Mode Normal | Option: CLEAN
Exécuté de: C:\Program Files\Ad-Remover\
Système d'exploitation: Microsoft® Windows Vista™ Home Premium v6.0.6000
Nom du PC: PC-DE-AMEL | Utilisateur actuel: amel
.
============== ÉLÉMENT(S) NEUTRALISÉ(S) ==============
.
Service: ASKService
Service: ASKUpgrade

C:\Users\amel\AppData\Roaming\EoRezo
C:\Users\amel\AppData\Roaming\ItsLabel
C:\Users\amel\AppData\Roaming\Mozilla\Firefox\Profiles\kpcrz4wj.default\extensions\{E9A1DEE0-C623-4439-8932-001E7D17607D}
C:\Users\amel\AppData\Roaming\Mozilla\Firefox\Profiles\kpcrz4wj.default\searchplugins\ask.xml
C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\IMBooster
C:\Windows\Installer\{E1B94435-241E-4519-B1C3-C4DD9EB352A2}
C:\Program Files\AskBarDis
C:\Program Files\AskTBar
C:\Program Files\EoRezo
C:\Program Files\Iminent - ... [b]ERREUR SUPPRESSION !!/b
C:\Program Files\Macrogaming - ... [b]ERREUR SUPPRESSION !!/b
C:\Program Files\Mozilla FireFox\Components\AskSearch.js
C:\Windows\Installer\30e295.msi
C:\Windows\Installer\30e29b.msi
C:\Windows\Installer\5ec56.msi
C:\Users\amel\Desktop\IMBoosterSetup.raufem2fitbofc2sglhskryt.exe
C:\Users\amel\AppData\Local\aeoaaca.bat
C:\Users\amel\AppData\Local\amgus.bat
C:\Users\amel\AppData\Local\qmcoiui.bat

(!) -- Fichiers temporaires supprimés.

.
HKCU\software\appdatalow\AskBarDis
HKCU\software\EoRezo
HKCU\software\Iminent
HKCU\software\ItsLabel
HKCU\software\microsoft\internet explorer\searchscopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}
HKCU\software\microsoft\internet explorer\searchscopes\{BFFED5CA-8BDF-47CC-AED0-23F4E6D77732}
HKCU\software\microsoft\internet explorer\searchscopes\{CF739809-1C6C-47C0-85B9-569DBB141420}
HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{3041d03e-fd4b-44e0-b742-2d9b88305f98}
HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{BC4FFE41-DE9F-46fa-B455-AAD49B9F9938}
HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{FE063DB9-4EC0-403e-8DD8-394C54984B2C}
HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks\\{9CB65206-89C4-402c-BA80-02D8C59F9B1D}
HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks\\{BC4FFE41-DE9F-46fa-B455-AAD49B9F9938}
HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{1A0AADCD-3A72-4B5F-900F-E3BB5A838E2A}
HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{64F56FC1-1272-44CD-BA6E-39723696E350}
HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{BC4FFE41-DE9F-46fa-B455-AAD49B9F9938}
HKCU\Software\Microsoft\Windows\CurrentVersion\Run\\IMBooster
HKCU\Software\Microsoft\Windows\CurrentVersion\Run\\SweetIM
HKCU\software\SWEETIE
HKLM\software\appdatalow\AskBarDis
HKLM\Software\Classes\CLSID\{0702a2b6-13aa-4090-9e01-bcdc85dd933f}
HKLM\Software\Classes\CLSID\{0E896FCA-D07E-45FE-901F-6A26FCF59C02}
HKLM\Software\Classes\CLSID\{201f27d4-3704-41d6-89c1-aa35e39143ed}
HKLM\Software\Classes\CLSID\{3041d03e-fd4b-44e0-b742-2d9b88305f98}
HKLM\Software\Classes\CLSID\{622fd888-4e91-4d68-84d4-7262fd0811bf}
HKLM\Software\Classes\CLSID\{9CB65201-89C4-402c-BA80-02D8C59F9B1D}
HKLM\Software\Classes\CLSID\{b0de3308-5d5a-470d-81b9-634fc078393b}
HKLM\Software\Classes\CLSID\{FE063DB1-4EC0-403e-8DD8-394C54984B2C}
HKLM\Software\Classes\CLSID\{FE063DB9-4EC0-403e-8DD8-394C54984B2C}
HKLM\Software\Classes\CLSID\{FE063DBB-4EC0-403e-8DD8-394C54984B2C}
HKLM\software\classes\installer\Products\53449B1EE14291541B3C4CDDE93B252A
HKLM\Software\Classes\Interface\{B0D071A1-36B3-4757-A126-14C89C56013A}
HKLM\software\classes\MgMediaPlayer.GifAnimator
HKLM\software\classes\MgMediaPlayer.GifAnimator.1
HKLM\Software\Classes\TypeLib\{4B1C1E16-6B34-430E-B074-5928ECA4C150}
HKLM\Software\Classes\TypeLib\{B4C656C9-F2E9-4E77-B3F4-443DF2BD778F}
HKLM\software\Iminent
HKLM\software\Macrogaming
HKLM\Software\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}
HKLM\Software\Microsoft\Internet Explorer\Toolbar\\{3041d03e-fd4b-44e0-b742-2d9b88305f98}
HKLM\Software\Microsoft\Internet Explorer\Toolbar\\{BC4FFE41-DE9F-46fa-B455-AAD49B9F9938}
HKLM\Software\Microsoft\Internet Explorer\Toolbar\\{FE063DB9-4EC0-403e-8DD8-394C54984B2C}
HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\SweetIM.exe
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0E896FCA-D07E-45FE-901F-6A26FCF59C02}
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{201f27d4-3704-41d6-89c1-aa35e39143ed}
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9CB65201-89C4-402c-BA80-02D8C59F9B1D}
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FE063DB1-4EC0-403e-8DD8-394C54984B2C}
HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Products\53449B1EE14291541B3C4CDDE93B252A
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\EoEngine
HKLM\software\microsoft\windows\currentversion\uninstall\{502358FB-0718-45BC-B142-7511F1694D58}
HKLM\software\microsoft\windows\currentversion\uninstall\{E1B94435-241E-4519-B1C3-C4DD9EB352A2}
HKLM\software\microsoft\windows\currentversion\uninstall\{F6D63A65-BD23-46F3-B9A3-87F442423481}
HKLM\software\microsoft\windows\currentversion\uninstall\IMBooster
HKLM\software\microsoft\windows\currentversion\uninstall\SoftwareUpdate_is1
.
============== Scan additionnel ==============
.
.
* Mozilla FireFox Version 3.0.15 [fr] *
.
Nom du profil: kpcrz4wj.default (amel)
.
(amel, Invalidprefs.js) Browser.download.dir, C:\Users\amel\Downloads
(amel, Invalidprefs.js) Browser.download.lastDir, C:\Users\amel\Desktop
(amel, Invalidprefs.js) Browser.search.defaultenginename, Fast Browser Search
(amel, Invalidprefs.js) Browser.search.defaulturl, hxxp://www.fastbrowsersearch.com/results/results.aspx?s=DEF&v=18&q=
(amel, Invalidprefs.js) Browser.search.selectedEngine, Fast Browser Search
(amel, Invalidprefs.js) Browser.startup.homepage, hxxp://y.lo.st
.
(amel, Invalidprefs.js) EFFACE - Browser.search.defaultenginename, Fast Browser Search
(amel, Invalidprefs.js) EFFACE - Browser.search.defaultthis.engineName, Web Search
(amel, Invalidprefs.js) EFFACE - Browser.search.defaulturl, hxxp://www.fastbrowsersearch.com/results/results.aspx?s=DEF&v=18&q=
(amel, Invalidprefs.js) EFFACE - Browser.search.order.1, Fast Browser Search
(amel, Invalidprefs.js) EFFACE - Browser.search.selectedEngine, Fast Browser Search
(amel, Invalidprefs.js) EFFACE - Browser.startup.homepage, hxxp://y.lo.st
(amel, Invalidprefs.js) EFFACE - Keyword.URL, hxxp://www.fastbrowsersearch.com/results/results.aspx?s=NAUS&v=18&tid={214445B9-AC37-2AD6-5FA6-F6DF4EFC2DDC}&q=
.
(amel, prefs.js) Browser.download.dir, C:\Users\amel\Downloads
(amel, prefs.js) Browser.search.defaultenginename, Fast Browser Search
(amel, prefs.js) Browser.search.defaulturl, hxxp://www.fastbrowsersearch.com/results/results.aspx?s=DEF&v=19&q=
(amel, prefs.js) Browser.search.selectedEngine, Fast Browser Search
(amel, prefs.js) Browser.startup.homepage, hxxp://fr.msn.com/
.
(amel, prefs.js) EFFACE - Browser.search.defaultenginename, Fast Browser Search
(amel, prefs.js) EFFACE - Browser.search.defaulturl, hxxp://www.fastbrowsersearch.com/results/results.aspx?s=DEF&v=19&q=
(amel, prefs.js) EFFACE - Browser.search.order.1, Fast Browser Search
(amel, prefs.js) EFFACE - Browser.search.selectedEngine, Fast Browser Search
(amel, prefs.js) EFFACE - Extensions.snipit.chromeURL, hxxp://toolbar.ask.com/toolbarv/askRedirect?o=10611&gct=&gc=1&q={searchTerms}&crm=1
(amel, prefs.js) EFFACE - Extensions.snipit.history_query, bebe%20lilly=ASKURL=hxxp://www.ask.com/web?q=bebe%20lilly&qsrc=2871&o=10611&l=dis||bebe%20lilly=ASKURL=//www.ask.com/web?q=bebe%20lilly&qsrc=2871&o=10611&l=dis||bebe%20lilly=ASKURL=//www.ask.com/web?q=bebe%20lilly&qsrc=2871&o=10611&l=dis||bebe%20lilly=ASKURL=//www.ask.com/web?q=bebe%20lilly&qsrc=2871&o=10611&l=dis||bebe%20lilly=ASKURL=//www.ask.com/web?q=bebe%20lilly&qsrc=2871&o=10611&l=dis||bebe%20lilly=ASKURL=//www.ask.com/web?q=bebe%20lilly&qsrc=2871&o=10611&l=dis||bebe%20lilly=ASKURL=//www.ask.com/web?q=bebe%20lilly&qsrc=2871&o=10611&l=dis||bebe%20lilly=ASKURL=//www.ask.com/web?q=bebe%20lilly&qsrc=2871&o=10611&l=dis||bebe%20lilly=ASKURL=//www.ask.com/web?q=bebe%20lilly&qsrc=2871&o=10611&l=dis||bebe%20lilly=ASKURL=//www.ask.com/web?q=bebe%20lilly&qsrc=2871&o=10611&l=dis||bebe%20lilly=ASKURL=//www.ask.com/web?q=bebe%20lilly&qsrc=2871&o=10611&l=dis||bebe%20lilly=ASKURL=//www.ask.com/web?q=bebe%20lilly&qsrc=2871&o=10611&l=dis||bebe%20lilly=ASKURL=//www.ask.com/web?q=bebe%20lilly&qsrc=2871&o=10611&l=dis||bebe%20lilly=ASKURL=//www.ask.com/web?q=bebe%20lilly&qsrc=2871&o=10611&l=dis||bebe%20lilly=ASKURL=//www.ask.com/web?q=bebe%20lilly&qsrc=2871&o=10611&l=dis||bebe%20lilly=ASKURL=//www.ask.com/web?q=bebe%20lilly&qsrc=2871&o=10611&l=dis||bebe%20lilly=ASKURL=//www.ask.com/web?q=bebe%20lilly&qsrc=2871&o=10611&l=dis||bebe%20lilly=ASKURL=//www.ask.com/web?q=bebe%20lilly&qsrc=2871&o=10611&l=dis||bebe%20lilly=ASKURL=//www.ask.com/web?q=bebe%20lilly&qsrc=2871&o=10611&l=dis||bebe%20lilly=ASKURL=//www.ask.com/web?q=bebe%20lilly&qsrc=2871&o=10611&l=dis||bebe%20lilly=ASKURL=//www.ask.com/web?q=bebe%20lilly&qsrc=2871&o=10611&l=dis||bebe%20lilly=ASKURL=//www.ask.com/web?q=bebe%20lilly&qsrc=2871&o=10611&l=dis||bebe%20lilly=ASKURL=//www.ask.com/web?q=bebe%20lilly&qsrc=2871&o=10611&l=dis||bebe%20lilly=ASKURL=//www.ask.com/web?q=bebe%20lilly&qsrc=2871&o=10611&l=dis||bebe%20lilly=ASKURL=//www.ask.com/web?q=bebe%20lilly&qsrc=2871&o=10611&l=dis||bebe%20lilly=ASKURL=//www.ask.com/web?q=bebe%20lilly&qsrc=2871&o=10611&l=dis||bebe%20lilly=ASKURL=//www.ask.com/web?q=bebe%20lilly&qsrc=2871&o=10611&l=dis||bebe%20lilly=ASKURL=//www.ask.com/web?q=bebe%20lilly&qsrc=2871&o=10611&l=dis||bebe%20lilly=ASKURL=//www.ask.com/web?q=bebe%20lilly&qsrc=2871&o=10611&l=dis||bebe%20lilly=ASKURL=//www.ask.com/web?q=bebe%20lilly&qsrc=2871&o=10611&l=dis||bebe%20lilly=ASKURL=//www.ask.com/web?q=bebe%20lilly&qsrc=2871&o=10611&l=dis||bebe%20lilly=ASKURL=//www.ask.com/web?q=bebe%20lilly&qsrc=2871&o=10611&l=dis||bebe%20lilly=ASKURL=//www.ask.com/web?q=bebe%20lilly&qsrc=2871&o=10611&l=dis||bebe%20lilly=ASKURL=//www.ask.com/web?q=bebe%20lilly&qsrc=2871&o=10611&l=dis||bebe%20lilly=ASKURL=//www.ask.com/web?q=bebe%20lilly&qsrc=2871&o=10611&l=dis||bebe%20lilly=ASKURL=//www.ask.com/web?q=bebe%20lilly&qsrc=2871&o=10611&l=dis||bebe%20lilly=ASKURL=//www.ask.com/web?q=bebe%20lilly&qsrc=2871&o=10611&l=dis||bebe%20lilly=ASKURL=//www.ask.com/web?q=bebe%20lilly&qsrc=2871&o=10611&l=dis||bebe%20lilly=ASKURL=//www.ask.com/web?q=bebe%20lilly&qsrc=2871&o=10611&l=dis||bebe%20lilly=ASKURL=//www.ask.com/web?q=bebe%20lilly&qsrc=2871&o=10611&l=dis||bebe%20lilly=ASKURL=//www.ask.com/web?q=bebe%20lilly&qsrc=2871&o=10611&l=dis||bebe%20lilly=ASKURL=//www.ask.com/web?q=bebe%20lilly&qsrc=2871&o=10611&l=dis||bebe%20lilly=ASKURL=//www.ask.com/web?q=bebe%20lilly&qsrc=2871&o=10611&l=dis||bebe%20lilly=ASKURL=//www.ask.com/web?q=bebe%20lilly&qsrc=2871&o=10611&l=dis||bebe%20lilly=ASKURL=//www.ask.com/web?q=bebe%20lilly&qsrc=2871&o=10611&l=dis||bebe%20lilly=ASKURL=//www.ask.com/web?q=bebe%20lilly&qsrc=2871&o=10611&l=dis||bebe%20lilly=ASKURL=//www.ask.com/web?q=bebe%20lilly&qsrc=2871&o=10611&l=dis||bebe%20lilly=ASKURL=//www.ask.com/web?q=bebe%20lilly&qsrc=2871&o=10611&l=dis||bebe%20lilly=ASKURL=//www.ask.com/web?q=bebe%20lilly&qsrc=2871&o=10611&l=dis||bebe%20lilly=ASKURL=//www.ask.com/web?q=bebe%20lilly&qsrc=2871&o=10611&l=dis||bebe%20lilly=ASKURL=//www.ask.com/web?q=bebe%20lilly&qsrc=2871&o=10611&l=dis||azhiurugtoppujgo%5Edmlgkilofdpodloiiioeppzdioeeookdio=ASKURL= hxxp://www.vuze.com/asktoolbar/login ||bebe%20lilly=ASKURL=//www.ask.com/web?q=bebe%20lilly&qsrc=2871&o=10611&l=dis||azhiurugtoppujgo%5Edmlgkilofdpodloiiioeppzdioeeookdio=ASKURL=://www.vuze.com/asktoolbar/login ||bebe%20lilly=ASKURL=//www.ask.com/web?q=bebe%20lilly&qsrc=2871&o=10611&l=dis||azhiurugtoppujgo%5Edmlgkilofdpodloiiioeppzdioeeookdio=ASKURL=://www.vuze.com/asktoolbar/login ||bebe%20lilly=ASKURL=//www.ask.com/web?q=bebe%20lilly&qsrc=2871&o=10611&l=dis||azhiurugtoppujgo%5Edmlgkilofdpodloiiioeppzdioeeookdio=ASKURL=://www.vuze.com/asktoolbar/login ||bebe%20lilly=ASKURL=//www.ask.com/web?q=bebe%20lilly&qsrc=2871&o=10611&l=dis||azhiurugtoppujgo%5Edmlgkilofdpodloiiioeppzdioeeookdio=ASKURL=://www.vuze.com/asktoolbar/login ||bebe%20lilly=ASKURL=//www.ask.com/web?q=bebe%20lilly&qsrc=2871&o=10611&l=dis||azhiurugtoppujgo%5Edmlgkilofdpodloiiioeppzdioeeookdio=ASKURL=://www.vuze.com/asktoolbar/login ||bebe%20lilly=ASKURL=//www.ask.com/web?q=bebe%20lilly&qsrc=2871&o=10611&l=dis||azhiurugtoppujgo%5Edmlgkilofdpodloiiioeppzdioeeookdio=ASKURL=://www.vuze.com/asktoolbar/login ||bebe%20lilly=ASKURL=//www.ask.com/web?q=bebe%20lilly&qsrc=2871&o=10611&l=dis||azhiurugtoppujgo%5Edmlgkilofdpodloiiioeppzdioeeookdio=ASKURL=://www.vuze.com/asktoolbar/login ||bebe%20lilly=ASKURL=//www.ask.com/web?q=bebe%20lilly&qsrc=2871&o=10611&l=dis||azhiurugtoppujgo%5Edmlgkilofdpodloiiioeppzdioeeookdio=ASKURL=://www.vuze.com/asktoolbar/login ||bebe%20lilly=ASKURL=//www.ask.com/web?q=bebe%20lilly&qsrc=2871&o=10611&l=dis||azhiurugtoppujgo%5Edmlgkilofdpodloiiioeppzdioeeookdio=ASKURL=://www.vuze.com/asktoolbar/login ||bebe%20lilly=ASKURL=//www.ask.com/web?q=bebe%20lilly&qsrc=2871&o=10611&l=dis||azhiurugtoppujgo%5Edmlgkilofdpodloiiioeppzdioeeookdio=ASKURL=://www.vuze.com/asktoolbar/login ||bebe%20lilly=ASKURL=//www.ask.com/web?q=bebe%20lilly&qsrc=2871&o=10611&l=dis||azhiurugtoppujgo%5Edmlgkilofdpodloiiioeppzdioeeookdio=ASKURL=://www.vuze.com/asktoolbar/login ||bebe%20lilly=ASKURL=//www.ask.com/web?q=bebe%20lilly&qsrc=2871&o=10611&l=dis||azhiurugtoppujgo%5Edmlgkilofdpodloiiioeppzdioeeookdio=ASKURL=://www.vuze.com/asktoolbar/login ||bebe%20lilly=ASKURL=//www.ask.com/web?q=bebe%20lilly&qsrc=2871&o=10611&l=dis||azhiurugtoppujgo%5Edmlgkilofdpodloiiioeppzdioeeookdio=ASKURL=://www.vuze.com/asktoolbar/login ||bebe%20lilly=ASKURL=//www.ask.com/web?q=bebe%20lilly&qsrc=2871&o=10611&l=dis||azhiurugtoppujgo%5Edmlgkilofdpodloiiioeppzdioeeookdio=ASKURL=://www.vuze.com/asktoolbar/login ||bebe%20lilly=ASKURL=//www.ask.com/web?q=bebe%20lilly&qsrc=2871&o=10611&l=dis||azhiurugtoppujgo%5Edmlgkilofdpodloiiioeppzdioeeookdio=ASKURL=://www.vuze.com/asktoolbar/login ||bebe%20lilly=ASKURL=//www.ask.com/web?q=bebe%20lilly&qsrc=2871&o=10611&l=dis||azhiurugtoppujgo%5Edmlgkilofdpodloiiioeppzdioeeookdio=ASKURL=://www.vuze.com/asktoolbar/login ||bebe%20lilly=ASKURL=//www.ask.com/web?q=bebe%20lilly&qsrc=2871&o=10611&l=dis||azhiurugtoppujgo%5Edmlgkilofdpodloiiioeppzdioeeookdio=ASKURL=://www.vuze.com/asktoolbar/login ||bebe%20lilly=ASKURL=//www.ask.com/web?q=bebe%20lilly&qsrc=2871&o=10611&l=dis||azhiurugtoppujgo%5Edmlgkilofdpodloiiioeppzdioeeookdio=ASKURL=://www.vuze.com/asktoolbar/login ||bebe%20lilly=ASKURL=//www.ask.com/web?q=bebe%20lilly&qsrc=2871&o=10611&l=dis||azhiurugtoppujgo%5Edmlgkilofdpodloiiioeppzdioeeookdio=ASKURL=://www.vuze.com/asktoolbar/login ||bebe%20lilly=ASKURL=//www.ask.com/web?q=bebe%20lilly&qsrc=2871&o=10611&l=dis||azhiurugtoppujgo%5Edmlgkilofdpodloiiioeppzdioeeookdio=ASKURL=://www.vuze.com/asktoolbar/login ||bebe%20lilly=ASKURL=//www.ask.com/web?q=bebe%20lilly&qsrc=2871&o=10611&l=dis||azhiurugtoppujgo%5Edmlgkilofdpodloiiioeppzdioeeookdio=ASKURL=://www.vuze.com/asktoolbar/login ||bebe%20lilly=ASKURL=//www.ask.com/web?q=bebe%20lilly&qsrc=2871&o=10611&l=dis||azhiurugtoppujgo%5Edmlgkilofdpodloiiioeppzdioeeookdio=ASKURL=://www.vuze.com/asktoolbar/login ||bebe%20lilly=ASKURL=//www.ask.com/web?q=bebe%20lilly&qsrc=2871&o=10611&l=dis||azhiurugtoppujgo%5Edmlgkilofdpodloiiioeppzdioeeookdio=ASKURL=://www.vuze.com/asktoolbar/login ||bebe%20lilly=ASKURL=//www.ask.com/web?q=bebe%20lilly&qsrc=2871&o=10611&l=dis||azhiurugtoppujgo%5Edmlgkilofdpodloiiioeppzdioeeookdio=ASKURL=://www.vuze.com/asktoolbar/login ||bebe%20lilly=ASKURL=//www.ask.com/web?q=bebe%20lilly&qsrc=2871&o=10611&l=dis||azhiurugtoppujgo%5Edmlgkilofdpodloiiioeppzdioeeookdio=ASKURL=://www.vuze.com/asktoolbar/login ||bebe%20lilly=ASKURL=//www.ask.com/web?q=bebe%20lilly&qsrc=2871&o=10611&l=dis||azhiurugtoppujgo%5Edmlgkilofdpodloiiioeppzdioeeookdio=ASKURL=://www.vuze.com/asktoolbar/login ||bebe%20lilly=ASKURL=//www.ask.com/web?q=bebe%20lilly&qsrc=2871&o=10611&l=dis||azhiurugtoppujgo%5Edmlgkilofdpodloiiioeppzdioeeookdio=ASKURL=://www.vuze.com/asktoolbar/login ||bebe%20lilly=ASKURL=//www.ask.com/web?q=bebe%20lilly&qsrc=2871&o=10611&l=dis||azhiurugtoppujgo%5Edmlgkilofdpodloiiioeppzdioeeookdio=ASKURL=://www.vuze.com/asktoolbar/login ||bebe%20lilly=ASKURL=//www.ask.com/web?q=bebe%20lilly&qsrc=2871&o=10611&l=dis||azhiurugtoppujgo%5Edmlgkilofdpodloiiioeppzdioeeookdio=ASKURL=://www.vuze.com/asktoolbar/login ||bebe%20lilly=ASKURL=//www.ask.com/web?q=bebe%20lilly&qsrc=2871&o=10611&l=dis||azhiurugtoppujgo%5Edmlgkilofdpodloiiioeppzdioeeookdio=ASKURL=://www.vuze.com/asktoolbar/login ||bebe%20lilly=ASKURL=//www.ask.com/web?q=bebe%20lilly&qsrc=2871&o=10611&l=dis||azhiurugtoppujgo%5Edmlgkilofdpodloiiioeppzdioeeookdio=ASKURL=://www.vuze.com/asktoolbar/login ||bebe%20lilly=ASKURL=//www.ask.com/web?q=bebe%20lilly&qsrc=2871&o=10611&l=dis||azhiurugtoppujgo%5Edmlgkilofdpodloiiioeppzdioeeookdio=ASKURL=://www.vuze.com/asktoolbar/login ||bebe%20lilly=ASKURL=//www.ask.com/web?q=bebe%20lilly&qsrc=2871&o=10611&l=dis||azhiurugtoppujgo%5Edmlgkilofdpodloiiioeppzdioeeookdio=ASKURL=://www.vuze.com/asktoolbar/login ||bebe%20lilly=ASKURL=//www.ask.com/web?q=bebe%20lilly&qsrc=2871&o=10611&l=dis||azhiurugtoppujgo%5Edmlgkilofdpodloiiioeppzdioeeookdio=ASKURL=://www.vuze.com/asktoolbar/login ||bebe%20lilly=ASKURL=//www.ask.com/web?q=bebe%20lilly&qsrc=2871&o=10611&l=dis||azhiurugtoppujgo%5Edmlgkilofdpodloiiioeppzdioeeookdio=ASKURL=://www.vuze.com/asktoolbar/login ||bebe%20lilly=ASKURL=//www.ask.com/web?q=bebe%20lilly&qsrc=2871&o=10611&l=dis||azhiurugtoppujgo%5Edmlgkilofdpodloiiioeppzdioeeookdio=ASKURL=://www.vuze.com/asktoolbar/login ||bebe%20lilly=ASKURL=//www.ask.com/web?q=bebe%20lilly&qsrc=2871&o=10611&l=dis||azhiurugtoppujgo%5Edmlgkilofdpodloiiioeppzdioeeookdio=ASKURL=://www.vuze.com/asktoolbar/login ||bebe%20lilly=ASKURL=//www.ask.com/web?q=bebe%20lilly&qsrc=2871&o=10611&l=dis||azhiurugtoppujgo%5Edmlgkilofdpodloiiioeppzdioeeookdio=ASKURL=://www.vuze.com/asktoolbar/login ||bebe%20lilly=ASKURL=//www.ask.com/web?q=bebe%20lilly&qsrc=2871&o=10611&l=dis||azhiurugtoppujgo%5Edmlgkilofdpodloiiioeppzdioeeookdio=ASKURL=://www.vuze.com/asktoolbar/login ||bebe%20lilly=ASKURL=//www.ask.com/web?q=bebe%20lilly&qsrc=2871&o=10611&l=dis||azhiurugtoppujgo%5Edmlgkilofdpodloiiioeppzdioeeookdio=ASKURL=://www.vuze.com/asktoolbar/login ||bebe%20lilly=ASKURL=//www.ask.com/web?q=bebe%20lilly&qsrc=2871&o=10611&l=dis||azhiurugtoppujgo%5Edmlgkilofdpodloiiioeppzdioeeookdio=ASKURL=://www.vuze.com/asktoolbar/login ||bebe%20lilly=ASKURL=//www.ask.com/web?q=bebe%20lilly&qsrc=2871&o=10611&l=dis||azhiurugtoppujgo%5Edmlgkilofdpodloiiioeppzdioeeookdio=ASKURL=://www.vuze.com/asktoolbar/login ||bebe%20lilly=ASKURL=//www.ask.com/web?q=bebe%20lilly&qsrc=2871&o=10611&l=dis||azhiurugtoppujgo%5Edmlgkilofdpodloiiioeppzdioeeookdio=ASKURL=://www.vuze.com/asktoolbar/login ||bebe%20lilly=ASKURL=//www.ask.com/web?q=bebe%20lilly&qsrc=2871&o=10611&l=dis||azhiurugtoppujgo%5Edmlgkilofdpodloiiioeppzdioeeookdio=ASKURL=://www.vuze.com/asktoolbar/login ||bebe%20lilly=ASKURL=//www.ask.com/web?q=bebe%20lilly&qsrc=2871&o=10611&l=dis||azhiurugtoppujgo%5Edmlgkilofdpodloiiioeppzdioeeookdio=ASKURL=://www.vuze.com/asktoolbar/login ||bebe%20lilly=ASKURL=//www.ask.com/web?q=bebe%20lilly&qsrc=2871&o=10611&l=dis||azhiurugtoppujgo%5Edmlgkilofdpodloiiioeppzdioeeookdio=ASKURL=://www.vuze.com/asktoolbar/login ||bebe%20lilly=ASKURL=//www.ask.com/web?q=bebe%20lilly&qsrc=2871&o=10611&l=dis||azhiurugtoppujgo%5Edmlgkilofdpodloiiioeppzdioeeookdio=ASKURL=://www.vuze.com/asktoolbar/login ||bebe%20lilly=ASKURL=//www.ask.com/web?q=bebe%20lilly&qsrc=2871&o=10611&l=dis||azhiurugtoppujgo%5Edmlgkilofdpodloiiioeppzdioeeookdio=ASKURL=://www.vuze.com/asktoolbar/login ||bebe%20lilly=ASKURL=//www.ask.com/web?q=bebe%20lilly&qsrc=2871&o=10611&l=dis||azhiurugtoppujgo%5Edmlgkilofdpodloiiioeppzdioeeookdio=ASKURL=://www.vuze.com/asktoolbar/login ||bebe%20lilly=ASKURL=//www.ask.com/web?q=bebe%20lilly&qsrc=2871&o=10611&l=dis||azhiurugtoppujgo%5Edmlgkilofdpodloiiioeppzdioeeookdio=ASKURL=://www.vuze.com/asktoolbar/login ||bebe%20lilly=ASKURL=//www.ask.com/web?q=bebe%20lilly&qsrc=2871&o=10611&l=dis||azhiurugtoppujgo%5Edmlgkilofdpodloiiioeppzdioeeookdio=ASKURL=://www.vuze.com/asktoolbar/login ||bebe%20lilly=ASKURL=//www.ask.com/web?q=bebe%20lilly&qsrc=2871&o=10611&l=dis||azhiurugtoppujgo%5Edmlgkilofdpodloiiioeppzdioeeookdio=ASKURL=://www.vuze.com/asktoolbar/login ||bebe%20lilly=ASKURL=//www.ask.com/web?q=bebe%20lilly&qsrc=2871&o=10611&l=dis||azhiurugtoppujgo%5Edmlgkilofdpodloiiioeppzdioeeookdio=ASKURL=://www.vuze.com/asktoolbar/login ||bebe%20lilly=ASKURL=//www.ask.com/web?q=bebe%20lilly&qsrc=2871&o=10611&l=dis||azhiurugtoppujgo%5Edmlgkilofdpodloiiioeppzdioeeookdio=ASKURL=://www.vuze.com/asktoolbar/login ||bebe%20lilly=ASKURL=//www.ask.com/web?q=bebe%20lilly&qsrc=2871&o=10611&l=dis||azhiurugtoppujgo%5Edmlgkilofdpodloiiioeppzdioeeookdio=ASKURL=://www.vuze.com/asktoolbar/login ||bebe%20lilly=ASKURL=//www.ask.com/web?q=bebe%20lilly&qsrc=2871&o=10611&l=dis||azhiurugtoppujgo%5Edmlgkilofdpodloiiioeppzdioeeookdio=ASKURL=://www.vuze.com/asktoolbar/login ||bebe%20lilly=ASKURL=//www.ask.com/web?q=bebe%20lilly&qsrc=2871&o=10611&l=dis||azhiurugtoppujgo%5Edmlgkilofdpodloiiioeppzdioeeookdio=ASKURL=://www.vuze.com/asktoolbar/login ||bebe%20lilly=ASKURL=//www.ask.com/web?q=bebe%20lilly&qsrc=2871&o=10611&l=dis||azhiurugtoppujgo%5Edmlgkilofdpodloiiioeppzdioeeookdio=ASKURL=://www.vuze.com/asktoolbar/login ||bebe%20lilly=ASKURL=//www.ask.com/web?q=bebe%20lilly&qsrc=2871&o=10611&l=dis||azhiurugtoppujgo%5Edmlgkilofdpodloiiioeppzdioeeookdio=ASKURL=://www.vuze.com/asktoolbar/login ||bebe%20lilly=ASKURL=//www.ask.com/web?q=bebe%20lilly&qsrc=2871&o=10611&l=dis||azhiurugtoppujgo%5Edmlgkilofdpodloiiioeppzdioeeookdio=ASKURL=://www.vuze.com/asktoolbar/login ||bebe%20lilly=ASKURL=//www.ask.com/web?q=bebe%20lilly&qsrc=2871&o=10611&l=dis||azhiurugtoppujgo%5Edmlgkilofdpodloiiioeppzdioeeookdio=ASKURL=://www.vuze.com/asktoolbar/login ||bebe%20lilly=ASKURL=//www.ask.com/web?q=bebe%20lilly&qsrc=2871&o=10611&l=dis||azhiurugtoppujgo%5Edmlgkilofdpodloiiioeppzdioeeookdio=ASKURL=://www.vuze.com/asktoolbar/login ||bebe%20lilly=ASKURL=//www.ask.com/web?q=bebe%20lilly&qsrc=2871&o=10611&l=dis||azhiurugtoppujgo%5Edmlgkilofdpodloiiioeppzdioeeookdio=ASKURL=://www.vuze.com/asktoolbar/login ||bebe%20lilly=ASKURL=//www.ask.com/web?q=bebe%20lilly&qsrc=2871&o=10611&l=dis||azhiurugtoppujgo%5Edmlgkilofdpodloiiioeppzdioeeookdio=ASKURL=://www.vuze.com/asktoolbar/login ||bebe%20lilly=ASKURL=//www.ask.com/web?q=bebe%20lilly&qsrc=2871&o=10611&l=dis||azhiurugtoppujgo%5Edmlgkilofdpodloiiioeppzdioeeookdio=ASKURL=://www.vuze.com/asktoolbar/login ||bebe%20lilly=ASKURL=//www.ask.com/web?q=bebe%20lilly&qsrc=2871&o=10611&l=dis||azhiurugtoppujgo%5Edmlgkilofdpodloiiioeppzdioeeookdio=ASKURL=://www.vuze.com/asktoolbar/login ||bebe%20lilly=ASKURL=//www.ask.com/web?q=bebe%20lilly&qsrc=2871&o=10611&l=dis||azhiurugtoppujgo%5Edmlgkilofdpodloiiioeppzdioeeookdio=ASKURL=://www.vuze.com/asktoolbar/login ||bebe%20lilly=ASKURL=//www.ask.com/web?q=bebe%20lilly&qsrc=2871&o=10611&l=dis||azhiurugtoppujgo%5Edmlgkilofdpodloiiioeppzdioeeookdio=ASKURL=://www.vuze.com/asktoolbar/login ||bebe%20lilly=ASKURL=//www.ask.com/web?q=bebe%20lilly&qsrc=2871&o=10611&l=dis||azhiurugtoppujgo%5Edmlgkilofdpodloiiioeppzdioeeookdio=ASKURL=://www.vuze.com/asktoolbar/login ||bebe%20lilly=ASKURL=//www.ask.com/web?q=bebe%20lilly&qsrc=2871&o=10611&l=dis||azhiurugtoppujgo%5Edmlgkilofdpodloiiioeppzdioeeookdio=ASKURL=://www.vuze.com/asktoolbar/login ||bebe%20lilly=ASKURL=//www.ask.com/web?q=bebe%20lilly&qsrc=2871&o=10611&l=dis||azhiurugtoppujgo%5Edmlgkilofdpodloiiioeppzdioeeookdio=ASKURL=://www.vuze.com/asktoolbar/login ||bebe%20lilly=ASKURL=//www.ask.com/web?q=bebe%20lilly&qsrc=2871&o=10611&l=dis||azhiurugtoppujgo%5Edmlgkilofdpodloiiioeppzdioeeookdio=ASKURL=://www.vuze.com/asktoolbar/login ||bebe%20lilly=ASKURL=//www.ask.com/web?q=bebe%20lilly&qsrc=2871&o=10611&l=dis||azhiurugtoppujgo%5Edmlgkilofdpodloiiioeppzdioeeookdio=ASKURL=://www.vuze.com/asktoolbar/login ||bebe%20lilly=ASKURL=//www.ask.com/web?q=bebe%20lilly&qsrc=2871&o=10611&l=dis||azhiurugtoppujgo%5Edmlgkilofdpodloiiioeppzdioeeookdio=ASKURL=://www.vuze.com/asktoolbar/login ||bebe%20lilly=ASKURL=//www.ask.com/web?q=bebe%20lilly&qsrc=2871&o=10611&l=dis||azhiurugtoppujgo%5Edmlgkilofdpodloiiioeppzdioeeookdio=ASKURL=://www.vuze.com/asktoolbar/login ||bebe%20lilly=ASKURL=//www.ask.com/web?q=bebe%20lilly&qsrc=2871&o=10611&l=dis||azhiurugtoppujgo%5Edmlgkilofdpodloiiioeppzdioeeookdio=ASKURL=://www.vuze.com/asktoolbar/login ||bebe%20lilly=ASKURL=//www.ask.com/web?q=bebe%20lilly&qsrc=2871&o=10611&l=dis||azhiurugtoppujgo%5Edmlgkilofdpodloiiioeppzdioeeookdio=ASKURL=://www.vuze.com/asktoolbar/login ||bebe%20lilly=ASKURL=//www.ask.com/web?q=bebe%20lilly&qsrc=2871&o=10611&l=dis||azhiurugtoppujgo%5Edmlgkilofdpodloiiioeppzdioeeookdio=ASKURL=://www.vuze.com/asktoolbar/login ||bebe%20lilly=ASKURL=//www.ask.com/web?q=bebe%20lilly&qsrc=2871&o=10611&l=dis||azhiurugtoppujgo%5Edmlgkilofdpodloiiioeppzdioeeookdio=ASKURL=://www.vuze.com/asktoolbar/login ||bebe%20lilly=ASKURL=//www.ask.com/web?q=bebe%20lilly&qsrc=2871&o=10611&l=dis||azhiurugtoppujgo%5Edmlgkilofdpodloiiioeppzdioeeookdio=ASKURL=://www.vuze.com/asktoolbar/login ||bebe%20lilly=ASKURL=//www.ask.com/web?q=bebe%20lilly&qsrc=2871&o=10611&l=dis||azhiurugtoppujgo%5Edmlgkilofdpodloiiioeppzdioeeookdio=ASKURL=://www.vuze.com/asktoolbar/login ||bebe%20lilly=ASKURL=//www.ask.com/web?q=bebe%20lilly&qsrc=2871&o=10611&l=dis||azhiurugtoppujgo%5Edmlgkilofdpodloiiioeppzdioeeookdio=ASKURL=://www.vuze.com/asktoolbar/login ||bebe%20lilly=ASKURL=//www.ask.com/web?q=bebe%20lilly&qsrc=2871&o=10611&l=dis||azhiurugtoppujgo%5Edmlgkilofdpodloiiioeppzdioeeookdio=ASKURL=://www.vuze.com/asktoolbar/login ||bebe%20lilly=ASKURL=//www.ask.com/web?q=bebe%20lilly&qsrc=2871&o=10611&l=dis||azhiurugtoppujgo%5Edmlgkilofdpodloiiioeppzdioeeookdio=ASKURL=://www.vuze.com/asktoolbar/login ||bebe%20lilly=ASKURL=//www.ask.com/web?q=bebe%20lilly&qsrc=2871&o=10611&l=dis||azhiurugtoppujgo%5Edmlgkilofdpodloiiioeppzdioeeookdio=ASKURL=://www.vuze.com/asktoolbar/login ||bebe%20lilly=ASKURL=//www.ask.com/web?q=bebe%20lilly&qsrc=2871&o=10611&l=dis||azhiurugtoppujgo%5Edmlgkilofdpodloiiioeppzdioeeookdio=ASKURL=://www.vuze.com/asktoolbar/login ||bebe%20lilly=ASKURL=//www.ask.com/web?q=bebe%20lilly&qsrc=2871&o=10611&l=dis||azhiurugtoppujgo%5Edmlgkilofdpodloiiioeppzdioeeookdio=ASKURL=://www.vuze.com/asktoolbar/login ||bebe%20lilly=ASKURL=//www.ask.com/web?q=bebe%20lilly&qsrc=2871&o=10611&l=dis||azhiurugtoppujgo%5Edmlgkilofdpodloiiioeppzdioeeookdio=ASKURL=://www.vuze.com/asktoolbar/login ||bebe%20lilly=ASKURL=//www.ask.com/web?q=bebe%20lilly&qsrc=2871&o=10611&l=dis||azhiurugtoppujgo%5Edmlgkilofdpodloiiioeppzdioeeookdio=ASKURL=://www.vuze.com/asktoolbar/login ||bebe%20lilly=ASKURL=//www.ask.com/web?q=bebe%20lilly&qsrc=2871&o=10611&l=dis||azhiurugtoppujgo%5Edmlgkilofdpodloiiioeppzdioeeookdio=ASKURL=://www.vuze.com/asktoolbar/login ||bebe%20lilly=ASKURL=//www.ask.com/web?q=bebe%20lilly&qsrc=2871&o=10611&l=dis||azhiurugtoppujgo%5Edmlgkilofdpodloiiioeppzdioeeookdio=ASKURL=://www.vuze.com/asktoolbar/login ||bebe%20lilly=ASKURL=//www.ask.com/web?q=bebe%20lilly&qsrc=2871&o=10611&l=dis||azhiurugtoppujgo%5Edmlgkilofdpodloiiioeppzdioeeookdio=ASKURL=://www.vuze.com/asktoolbar/login ||bebe%20lilly=ASKURL=//www.ask.com/web?q=bebe%20lilly&qsrc=2871&o=10611&l=dis||azhiurugtoppujgo%5Edmlgkilofdpodloiiioeppzdioeeookdio=ASKURL=://www.vuze.com/asktoolbar/login ||bebe%20lilly=ASKURL=//www.ask.com/web?q=bebe%20lilly&qsrc=2871&o=10611&l=dis||azhiurugtoppujgo%5Edmlgkilofdpodloiiioeppzdioeeookdio=ASKURL=://www.vuze.com/asktoolbar/login ||bebe%20lilly=ASKURL=//www.ask.com/web?q=bebe%20lilly&qsrc=2871&o=10611&l=dis||azhiurugtoppujgo%5Edmlgkilofdpodloiiioeppzdioeeookdio=ASKURL=://www.vuze.com/asktoolbar/login ||bebe%20lilly=ASKURL=//www.ask.com/web?q=bebe%20lilly&qsrc=2871&o=10611&l=dis||azhiurugtoppujgo%5Edmlgkilofdpodloiiioeppzdioeeookdio=ASKURL=://www.vuze.com/asktoolbar/login ||bebe%20lilly=ASKURL=//www.ask.com/web?q=bebe%20lilly&qsrc=2871&o=10611&l=dis||azhiurugtoppujgo%5Edmlgkilofdpodloiiioeppzdioeeookdio=ASKURL=://www.vuze.com/asktoolbar/login ||bebe%20lilly=ASKURL=//www.ask.com/web?q=bebe%20lilly&qsrc=2871&o=10611&l=dis||azhiurugtoppujgo%5Edmlgkilofdpodloiiioeppzdioeeookdio=ASKURL=://www.vuze.com/asktoolbar/login ||bebe%20lilly=ASKURL=//www.ask.com/web?q=bebe%20lilly&qsrc=2871&o=10611&l=dis||azhiurugtoppujgo%5Edmlgkilofdpodloiiioeppzdioeeookdio=ASKURL=://www.vuze.com/asktoolbar/login ||bebe%20lilly=ASKURL=//www.ask.com/web?q=bebe%20lilly&qsrc=2871&o=10611&l=dis||azhiurugtoppujgo%5Edmlgkilofdpodloiiioeppzdioeeookdio=ASKURL=://www.vuze.com/asktoolbar/login ||bebe%20lilly=ASKURL=//www.ask.com/web?q=bebe%20lilly&qsrc=2871&o=10611&l=dis||azhiurugtoppujgo%5Edmlgkilofdpodloiiioeppzdioeeookdio=ASKURL=://www.vuze.com/asktoolbar/login ||bebe%20lilly=ASKURL=//www.ask.com/web?q=bebe%20lilly&qsrc=2871&o=10611&l=dis||azhiurugtoppujgo%5Edmlgkilofdpodloiiioeppzdioeeookdio=ASKURL=://www.vuze.com/asktoolbar/login ||bebe%20lilly=ASKURL=//www.ask.com/web?q=bebe%20lilly&qsrc=2871&o=10611&l=dis||azhiurugtoppujgo%5Edmlgkilofdpodloiiioeppzdioeeookdio=ASKURL=://www.vuze.com/asktoolbar/login ||bebe%20lilly=ASKURL=//www.ask.com/web?q=bebe%20lilly&qsrc=2871&o=10611&l=dis||azhiurugtoppujgo%5Edmlgkilofdpodloiiioeppzdioeeookdio=ASKURL=://www.vuze.com/asktoolbar/login ||bebe%20lilly=ASKURL=//www.ask.com/web?q=bebe%20lilly&qsrc=2871&o=10611&l=dis||azhiurugtoppujgo%5Edmlgkilofdpodloiiioeppzdioeeookdio=ASKURL=://www.vuze.com/asktoolbar/login ||bebe%20lilly=ASKURL=//www.ask.com/web?q=bebe%20lilly&qsrc=2871&o=10611&l=dis||azhiurugtoppujgo%5Edmlgkilofdpodloiiioeppzdioeeookdio=ASKURL=://www.vuze.com/asktoolbar/login
(amel, prefs.js) EFFACE - Keyword.URL, hxxp://www.fastbrowsersearch.com/results/results.aspx?s=NAUS&v=19&tid={214445B9-AC37-2AD6-5FA6-F6DF4EFC2DDC}&q=
.
.
* Internet Explorer Version 7.0.6000.16945 *
.
[HKEY_CURRENT_USER\..\Internet Explorer\Main]
.
Start Page: hxxp://fr.msn.com/
Use Custom Search URL: 0 (0x0)
Do404Search: 01000000
Local Page: C:\Windows\system32\blank.htm
Show_ToolBar: yes
Enable Browser Extensions: yes
Search Bar: hxxp://go.microsoft.com/fwlink/?linkid=54896
Use Search Asst: no
Default_search_url: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Default_page_url: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
.
[HKEY_LOCAL_MACHINE\..\Internet Explorer\Main]
.
Start Page: hxxp://fr.msn.com/
Default_Page_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Search Page: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Delete_Temp_Files_On_Exit: yes
Local Page: %SystemRoot%\system32\blank.htm
Enable Browser Extensions: yes
Use Search Asst: no
Search bar: hxxp://search.msn.com/spbasic.htm
.
[HKEY_LOCAL_MACHINE\..\Internet Explorer\ABOUTURLS]
.
Tabs: res://ieframe.dll/tabswelcome.htm
.
===================================
.
31739 Octet(s) - C:\Ad-Report-CLEAN[1].log
.
0 Fichier(s) - C:\Users\amel\AppData\Local\Temp
1 Fichier(s) - C:\Windows\Temp
1 Fichier(s) - C:\Windows\Prefetch
.
20 Fichier(s) - C:\Program Files\Ad-Remover\BACKUP
268 Fichier(s) - C:\Program Files\Ad-Remover\QUARANTINE
.
Fin à: 11:23:47 | 11/12/2009 - CLEAN[1]
.
============== E.O.F ==============
.

Refais un scan RSIT et post log.txt stp