HijackThis

Résolu
angelina! -  
Bonjour,
je viens de télécharger hijackthis ,
qui m'a donner les informations suivantes:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 20:08:11, on 28/12/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\svchost.exe
C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Canal+\CANAL+ CANALSAT A LA DEMANDE\VOD\CanalPlus.VOD.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\System32\HPZipm12.exe
C:\WINDOWS\system32\PSIService.exe
C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe
C:\WINDOWS\wanmpsvc.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Documents and Settings\Administrateur\Application Data\eoRezo\SoftwareUpdate\SoftwareUpdateHP.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\HiYo\bin\HiYo.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Neuf\Widget Neuf\9widget.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Documents and Settings\Administrateur\Application Data\Microsoft\Notification de cadeaux MSN\lsnfier.exe
C:\Program Files\HP\Digital Imaging\bin\hpqimzone.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\Program Files\IncrediMail\bin\IMApp.exe
C:\Program Files\iTunes\iTunes.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Notepad++\notepad++.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Windows Live\Contacts\wlcomm.exe
C:\Program Files\IncrediMail\bin\IncMail.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://mystart.hiyo.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,First Home Page = http://www.windows.fr/ie8/msn/bienvenue
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R3 - URLSearchHook: AOLTBSearch Class - {EA756889-2338-43DB-8F07-D1CA6FB9C90D} - C:\Program Files\AOL\AOL Toolbar 4.0\aoltb.dll
R3 - URLSearchHook: (no name) - {E312764E-7706-43F1-8DAB-FCDD2B1E416D} - (no file)
O2 - BHO: Iminent.SearchTheWeb.HelperObject - {0E896FCA-D07E-45FE-901F-6A26FCF59C02} - mscoree.dll (file missing)
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: IEVkbdBHO - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\ievkbd.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: AOL Toolbar Launcher - {7C554162-8CB7-45A4-B8F4-8EA1C75885F9} - C:\Program Files\AOL\AOL Toolbar 4.0\aoltb.dll
O2 - BHO: (no name) - {8A9D74F9-560B-4FE7-ABEB-3B2E638E5CD6} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: PDFCreator Toolbar Helper - {C451C08A-EC37-45DF-AAAD-18B51AB5E837} - C:\Program Files\PDFCreator Toolbar\v3.3.0.1\PDFCreator_Toolbar.dll
O2 - BHO: EoBHO - {C7B76B90-3455-4AE6-A752-EAC4D19689E5} - C:\Program Files\EoRezo\EoAdv\EoRezoBHO.dll (file missing)
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: (no name) - {E312764E-7706-43F1-8DAB-FCDD2B1E416D} - (no file)
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: AOL Toolbar - {DE9C389F-3316-41A7-809B-AA305ED9D922} - C:\Program Files\AOL\AOL Toolbar 4.0\aoltb.dll
O3 - Toolbar: PDFCreator Toolbar - {31CF9EBE-5755-4A1D-AC25-2834D952D9B4} - C:\Program Files\PDFCreator Toolbar\v3.3.0.1\PDFCreator_Toolbar.dll
O3 - Toolbar: Barre d'outils MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Toolbar\01.01.2607.0\fr\msntb.dll
O4 - HKLM\..\Run: [SoftwareHelper] C:\Documents and Settings\Administrateur\Application Data\eoRezo\SoftwareUpdate\SoftwareUpdateHP.exe
O4 - HKLM\..\Run: [AVP] "C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\avp.exe"
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [Hiyo] C:\Program Files\HiYo\bin\HiYo.exe /RunFromStartup
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Fichiers communs\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Widget Neuf] "C:\Program Files\Neuf\Widget Neuf\9widget.exe"
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O4 - Startup: Notification de cadeaux MSN.lnk = C:\Documents and Settings\Administrateur\Application Data\Microsoft\Notification de cadeaux MSN\lsnfier.exe
O4 - Global Startup: Démarrage rapide de HP Photosmart Premier.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O8 - Extra context menu item: &Recherche AOL Toolbar - c:\program files\aol\aol toolbar 4.0\resources\fr-FR\local\search.html
O8 - Extra context menu item: Ajouter à Kaspersky Anti-Bannière - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\ie_banner_deny.htm
O9 - Extra button: Statistiques de la protection du trafic Internet - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\SCIEPlgn.dll
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\WINDOWS\System32\shdocvw.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\WINDOWS\System32\shdocvw.dll
O9 - Extra button: AOL Toolbar - {3369AF0D-62E9-4bda-8103-B4C75499B578} - C:\Program Files\AOL\AOL Toolbar 4.0\aoltb.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: CabBuilder - http://kiw.imgag.com/imgag/kiw/toolbar/download/InstallerControl.cab
O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx2.hotmail.com/mail/w2/resources/MSNPUpld.cab
O16 - DPF: {5D637FAD-E202-48D1-8F18-5B9C459BD1E3} (Image Uploader Control) - http://www.extrafilm.fr/ImageUploader5.cab
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
O16 - DPF: {7FC1B346-83E6-4774-8D20-1A6B09B0E737} (Windows Live Photo Upload Control) - http://supercathy73.spaces.live.com/PhotoUpload/MsnPUpld.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {CAFEEFAC-0016-0000-0012-ABCDEFFEDCBA} (Java Runtime Environment 1.6.0) -
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
O20 - AppInit_DLLs: C:\PROGRA~1\KASPER~1\KASPER~1\mzvkbd3.dll,C:\PROGRA~1\KASPER~1\KASPER~1\adialhk.dll,C:\PROGRA~1\KASPER~1\KASPER~1\kloehk.dll
O20 - Winlogon Notify: avgrsstarter - avgrsstx.dll (file missing)
O23 - Service: AOL Connectivity Service (AOL ACS) - AOL LLC - C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Kaspersky Internet Security (AVP) - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\avp.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: CanalPlus.VOD - Canal+ Active - C:\Program Files\Canal+\CANAL+ CANALSAT A LA DEMANDE\VOD\CanalPlus.VOD.exe
O23 - Service: HP Port Resolver - Hewlett-Packard Company - C:\WINDOWS\system32\spool\drivers\w32x86\3\HPBPRO.EXE
O23 - Service: HP Status Server - Hewlett-Packard Company - C:\WINDOWS\system32\spool\drivers\w32x86\3\HPBOID.EXE
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: Lavasoft Ad-Aware Service - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe
O23 - Service: Logitech Bluetooth Service (LBTServ) - Logitech, Inc. - C:\Program Files\Fichiers communs\Logitech\Bluetooth\LBTServ.exe
O23 - Service: MSCSPTISRV - Sony Corporation - C:\Program Files\Fichiers communs\Sony Shared\AVLib\MSCSPTISRV.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: PACSPTISVR - Sony Corporation - C:\Program Files\Fichiers communs\Sony Shared\AVLib\PACSPTISVR.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\System32\HPZipm12.exe
O23 - Service: ProtexisLicensing - Unknown owner - C:\WINDOWS\system32\PSIService.exe
O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
O23 - Service: Sony SPTI Service (SPTISRV) - Sony Corporation - C:\Program Files\Fichiers communs\Sony Shared\AVLib\SPTISRV.exe
O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe
O23 - Service: WAN Miniport (ATW) Service (WANMiniportService) - America Online, Inc. - C:\WINDOWS\wanmpsvc.exe

--
End of file - 12170 bytes

maintenant ce que je voudrais savoir c'est comment savoir ce qui est bon et ce qui est a supprimer car la je galère un peux ...
quelqu'un pourrais m'aider s'il vous plait.
merci
Configuration: Windows XP
Firefox 3.0.13

13 réponses

  • Votes
  • Date
  • Date décroissante
  1. Utilisateur anonyme
    Bonsoir

    Commence par ceci:
    • Télécharge Ad-remover ( de C_XX ) sur ton bureau :

    http://pagesperso-orange.fr/NosTools/C_XX/AD-R.exe

    ! Déconnecte toi et ferme toutes applications en cours !

    • Double clique ou clic droit (exécuter en tant que admin…sur Vista) sur "Ad-R.exe" pour lancer l'installation et laisse les paramètres d'installation par défaut.

    • Double-clique ou clic droit (exécuter en tant que admin…sur Vista) sur le raccourci Ad-remover qui est sur ton bureau pour lancer l'outil .

    • Au menu principal choisis l'option "S" et sur [entrée] .

    • Laisse travailler l'outil et ne touche à rien ...

    --> Poste le rapport qui apparaît à la fin , sur le forum ...

    ( Le rapport est sauvegardé aussi sous C:\Ad-report.log )
    ( CTRL+A Pour tout sélectionner , CTRL+C pour copier et CTRL+V pour coller )

    Note : "Process.exe", une composante de l'outil, est détecté par certains antivirus (AntiVir, Dr.Web, Kaspersky Anti-Virus) comme étant un RiskTool.
    Il ne s'agit pas d'un virus, mais d'un utilitaire destiné à mettre fin à des processus.
    Mis entre de mauvaises mains, cet utilitaire pourrait arrêter des logiciels de sécurité (Antivirus, Firewall...) d'où l'alerte émise par ces antivirus.

    Aides en images (Installation) : http://pagesperso-orange.fr/NosTools/tuto_ad_r1.html
    Aides en images (Recherche) : http://pagesperso-orange.fr/NosTools/tuto_ad_r2.html

    @+
    1. angelina! Auteur
      merci pour l'info
      voici le resultat qu'il me donne:

      .
      ======= RAPPORT D'AD-REMOVER 1.1.4.6_F | UNIQUEMENT XP/VISTA/7 =======
      .
      Mit à jour par C_XX le 26.12.2009 à 20:47
      Contact: AdRemover.contact@gmail.com
      Site web: http://pagesperso-orange.fr/NosTools/ad_remover.html
      .
      Lancé à: 12:34:43, 30/12/2009 | Mode Normal | Option: SCAN
      Exécuté de: C:\Program Files\Ad-Remover\
      Système d'exploitation: Microsoft® Windows XP™ Service Pack 3 v5.1.2600
      Nom du PC: CATHERINE | Utilisateur actuel: catherine

      Bonnes fêtes de fin d'année à vous tous :)
      .
      ============== ÉLÉMENT(S) TROUVÉ(S) ==============
      .

      C:\DOCUME~1\ADMINI~1\APPLIC~1\Mozilla\FireFox\Profiles\skkbgfyl.default\SweetIMToolbarData
      C:\WINDOWS\Installer\{E1B94435-241E-4519-B1C3-C4DD9EB352A2}
      C:\DOCUME~1\ALLUSE~1\MENUDM~1\PROGRA~1\Games-Attack
      C:\Program Files\AGI
      C:\Program Files\Dealio
      C:\Program Files\Games-Attack
      C:\Program Files\Iminent
      C:\Program Files\Search Guard PlusU
      C:\Program Files\Viewpoint
      C:\DOCUME~1\ADMINI~1\APPLIC~1\EoRezo
      C:\DOCUME~1\ADMINI~1\APPLIC~1\Games-Attack
      C:\DOCUME~1\ADMINI~1\APPLIC~1\Iminent
      C:\DOCUME~1\ADMINI~1\APPLIC~1\ItsLabel
      C:\DOCUME~1\ADMINI~1\APPLIC~1\Search Settings
      C:\DOCUME~1\ALLUSE~1\APPLIC~1\Games-Attack
      C:\DOCUME~1\ALLUSE~1\APPLIC~1\Viewpoint
      C:\Documents and Settings\Administrateur\Local Settings\Application Data\Iminent
      C:\Windows\Installer\1317d0f.msi
      C:\Windows\Installer\1d8645.msi
      C:\Windows\Installer\1f2b33f.msi
      C:\Documents and Settings\Administrateur\Application Data\EoRezo
      C:\Documents and Settings\Administrateur\Application Data\EoRezo\SoftwareUpdate\Software\eorezo
      C:\Documents and Settings\Administrateur\Application Data\Games-Attack
      C:\Documents and Settings\Administrateur\Local Settings\Application Data\AOL\ieToolbar
      C:\Documents and Settings\Administrateur\Application Data\Iminent
      C:\Documents and Settings\Administrateur\Local Settings\Application Data\Iminent
      C:\Documents and Settings\Administrateur\Application Data\ItsLabel
      C:\Documents and Settings\Administrateur\Application Data\Search Settings
      C:\WINDOWS\System32\dfinowsxgc.dat
      C:\WINDOWS\System32\dfinowsxgc_nav.dat
      C:\WINDOWS\System32\dfinowsxgc_navps.dat
      C:\Documents and Settings\Administrateur\Local Settings\Application Data\sgqiw_nav.dat
      C:\Documents and Settings\Administrateur\Local Settings\Application Data\sgqiw_nav.dat
      .
      HKCU\software\EoRezo
      HKCU\software\fcn
      HKCU\software\FunWebProducts
      HKCU\software\Games-Attack
      HKCU\software\Iminent
      HKCU\software\ItsLabel
      HKCU\software\LanConfig
      HKCU\software\microsoft\internet explorer\searchscopes\{705997F8-5643-42EC-AC46-082BEDD465AB}
      HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{BC4FFE41-DE9F-46FA-B455-AAD49B9F9938}
      HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{E67C74F4-A00A-4F2C-9FEC-FD9DC004A67F}
      HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks\\{E312764E-7706-43F1-8DAB-FCDD2B1E416D}
      HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{00A6FAF1-072E-44CF-8957-5838F569A31D}
      HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{1A0AADCD-3A72-4B5F-900F-E3BB5A838E2A}
      HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{1A93C934-025B-4C3A-B38E-9654A7003239}
      HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{6F282B65-56BF-4BD1-A8B2-A4449A05863D}
      HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{BC4FFE41-DE9F-46fa-B455-AAD49B9F9938}
      HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EEE6C35B-6118-11DC-9C72-001320C79847}
      HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EEE6C35C-6118-11DC-9C72-001320C79847}
      HKCU\software\Search Settings
      HKLM\Software\Classes\AppID\{362A53B2-2913-4F8A-82F5-7E0A23FDC6F9}
      HKLM\software\classes\appid\EoRezoBHO.DLL
      HKLM\software\classes\AxMetaStream.MetaStreamCtl
      HKLM\software\classes\AxMetaStream.MetaStreamCtl.1
      HKLM\software\classes\AxMetaStream.MetaStreamCtlSecondary
      HKLM\software\classes\AxMetaStream.MetaStreamCtlSecondary.1
      HKLM\Software\Classes\CLSID\{03F998B2-0E00-11D3-A498-00104B6EB52E}
      HKLM\Software\Classes\CLSID\{0E896FCA-D07E-45FE-901F-6A26FCF59C02}
      HKLM\Software\Classes\CLSID\{1B00725B-C455-4DE6-BFB6-AD540AD427CD}
      HKLM\Software\Classes\CLSID\{4260e0cc-0f75-462e-88a3-1e05c248bf4c}
      HKLM\Software\Classes\CLSID\{C7B76B90-3455-4AE6-A752-EAC4D19689E5}
      HKLM\software\classes\EoRezoBHO.EoBHO
      HKLM\software\classes\EoRezoBHO.EoBHO.1
      HKLM\software\classes\installer\Products\53449B1EE14291541B3C4CDDE93B252A
      HKLM\Software\Classes\Interface\{38A7C9DA-8DB7-4D0F-A7B1-C4B1A305BDDB}
      HKLM\Software\Classes\Interface\{63D0ED2D-B45B-4458-8B3B-60C69BBBD83C}
      HKLM\Software\Classes\Interface\{72EE7F04-15BD-4845-A005-D6711144D86A}
      HKLM\Software\Classes\Interface\{819DB72D-1C28-4387-9778-E2FF3DC86F74}
      HKLM\Software\Classes\Interface\{8D292EC0-6792-4A38-82ED-73A087E41BA6}
      HKLM\Software\Classes\Interface\{D5A1EF9A-7948-435D-8B87-D6A598317288}
      HKLM\Software\Classes\Interface\{E342AF55-B78A-4CD0-A2BB-DA7F52D9D25F}
      HKLM\Software\Classes\Interface\{E79DFBC9-5697-4FBD-94E5-5B2A9C7C1612}
      HKLM\Software\Classes\Interface\{E79DFBCB-5697-4FBD-94E5-5B2A9C7C1612}
      HKLM\software\classes\MediaPlayer.GraphicsUtils
      HKLM\software\classes\MediaPlayer.GraphicsUtils.1
      HKLM\software\classes\MgMediaPlayer.GifAnimator
      HKLM\software\classes\MgMediaPlayer.GifAnimator.1
      HKLM\Software\Classes\MIME\Database\Content Type\Application/x-f3embed
      HKLM\software\classes\SearchSettings.BHO
      HKLM\software\classes\SearchSettings.BHO.1
      HKLM\Software\Classes\TypeLib\{4509D3CC-B642-4745-B030-645B79522C6D}
      HKLM\Software\Classes\TypeLib\{621FEACD-8857-43A6-AE26-451D670D5370}
      HKLM\Software\Classes\TypeLib\{98635087-3F5D-418F-990C-B1EFE0797A3B}
      HKLM\Software\Classes\TypeLib\{B6ACB3F1-6A83-432C-B854-3E1056F87F4E}
      HKLM\Software\Classes\TypeLib\{CD082CCA-086F-4FD8-8FD7-247A0DBBD1CC}
      HKLM\Software\Classes\TypeLib\{E79DFBC0-5697-4FBD-94E5-5B2A9C7C1612}
      HKLM\software\classes\URLSearchHook.ToolbarURLSearchHook
      HKLM\software\classes\URLSearchHook.ToolbarURLSearchHook.1
      HKLM\software\Dealio
      HKLM\software\EoRezo
      HKLM\software\FocusInteractive
      HKLM\software\Games-Attack
      HKLM\software\Iminent
      HKLM\software\MetaStream
      HKLM\Software\Microsoft\Active Setup\Installed Components\{03F998B2-0E00-11D3-A498-00104B6EB52E}
      HKLM\Software\Microsoft\Active Setup\Installed Components\{1B00725B-C455-4DE6-BFB6-AD540AD427CD}
      HKLM\Software\Microsoft\Code Store Database\Distribution Units\CabBuilder
      HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{0726A483-27D5-497f-840C-7942FF195DA0}
      HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{1179E926-8507-4706-8110-A61376627499}
      HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{11C58FCA-6F3D-465a-BEC7-7930F31B3626}
      HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{1D9C0556-C0EB-41db-AE8D-8474B3800F15}
      HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{32CBAD7C-9306-40dc-8E1C-A689233D7BEF}
      HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7C7E5DFB-3D15-4ae2-8FCC-71D4C81CE0B3}
      HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A2842911-E52D-4f35-A131-0DFD178C24CB}
      HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{BB31B14B-21EB-4daf-805F-B17B09712B1A}
      HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{D52B574C-B558-4242-BF4A-5648EC9AE8BD}
      HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F4F58B11-22E7-48f1-B6EA-2D1BCB0312D3}
      HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{FD8064C4-D682-4f47-8619-7FD23C0DC55E}
      HKLM\Software\Microsoft\Internet Explorer\SearchScopes\{56256A51-B582-467e-B8D4-7786EDA79AE0}
      HKLM\Software\Microsoft\Multimedia\WMPlayer\Schemes\f3pss
      HKLM\software\microsoft\shared tools\msconfig\startupreg\EoEngine
      HKLM\software\microsoft\shared tools\msconfig\startupreg\IMBooster
      HKLM\software\microsoft\shared tools\msconfig\startupreg\SearchSettings
      HKLM\software\microsoft\shared tools\msconfig\startupreg\SweetIM
      HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0E896FCA-D07E-45FE-901F-6A26FCF59C02}
      HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C7B76B90-3455-4AE6-A752-EAC4D19689E5}
      HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{07B18EAB-A523-4961-B6BB-170DE4475CCA}
      HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{25560540-9571-4D7B-9389-0F166788785A}
      HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{2EFF3CF7-99C1-4C29-BC2B-68E057E22340}
      HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{3DC201FB-E9C9-499C-A11F-23C360D7C3F8}
      HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{3E720452-B472-4954-B7AA-33069EB53906}
      HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{63D0ED2C-B45B-4458-8B3B-60C69BBBD83C}
      HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{7473d294-b7bb-4f24-ae82-7e2ce94bb6a9}
      HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{98D9753D-D73B-42D5-8C85-4469CDA897AB}
      HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{9FF05104-B030-46FC-94B8-81276E4E27DF}
      HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{A6573479-9075-4A65-98A6-19FD29CF7374}
      HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{E79DFBCA-5697-4FBD-94E5-5B2A9C7C1612}
      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\0292226F570267D459357AF78015E534
      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\03285961954D5824C85975D955031EE8
      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\07D5290CDBDAE4242926B8E6CA650501
      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\08E33F7B61DEFF24BB9673ED7D467636
      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\0E3D8A5B48622A445A7DF73FEFF32C3F
      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\0FF2AEFF45EEA0A48A4B33C1973B6094
      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\1AC67655DD68F8240B2860F2D511EBD8
      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\305B09CE8C53A214DB58887F62F25536
      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\34EDDB1BFB3A2D448845F3EFD0F15A43
      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\427EA997C413D1D47907CBFC7B2DB432
      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\4318DF19719275242801CBE292063A4C
      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\45FC115D1FEAEF849A4E1610D6EC8BF0
      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\46A5861A389ADB844AF89E31BC9DF0A1
      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\49B0E1A6FF50BBE4289E4E23DE6EA0C7
      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\4CCCAC049F34D0540AAC13011398BEDB
      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\5C4389D0BFB302C479DE4178BD5D9EBA
      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\5D19F074C042AD34BAB463D4175A062E
      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\5D2B09BDEF4FE54418E6F3373CDBC7AC
      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\61B65D3397A1FBF4CB1571B5E4F6B5B0
      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\68E8A05C60DD9254591DBD16C94EDDBF
      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\697E782CF574CC34CBB9566440BA12BC
      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\6AC3985F4D64C2245A96D31569D1BF40
      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\6AE27A8613CF7EA4782F2886F67295E5
      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\7CE172051F585E04187BCB97570BFA74
      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\855847FA0E25FBA46B8516389DFDD4B3
      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\86A901BA5265452499DCBF719C378EE3
      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\88ABD1CD5C40EC84789A7F6EF86DAC5E
      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\980289C22F80A7C4BB9323DC61255E4E
      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\9A4B7EF3789F871419D9302583B20C15
      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\9DC2844D0E3E8924C8973C3B3BAE1F58
      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\A6C53B0F76C44004A8F36716213017DB
      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\AFEB575AA30ACB243B748619F62F0782
      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\B59F2D8189784CC46A4597F2842480B0
      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\BD746FB95FB8E5B45BF66BE54D5FD91F
      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\CCF399FCD6D2D3F46BF02A1378654FC9
      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\D149C1355C98DE24E82CEFBD996FE06A
      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\DB59FDB786388EA4D897F3EE715683AC
      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\DB8DAD19CFBCC2049A4477183787E8C5
      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\E1C820A74ED67374BA048B52CB3C3804
      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\E337925F629CF4C4FB08F3D9674DD839
      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\EC65F200D112357449C8B1BC3CFA03D0
      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\F327D0C73C0973644A21E8CC852267A0
      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\F461B8DD96FF5AA41A52D14E1D7B69C7
      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\FA96423FE2B98E248A3B23548D1E22D9
      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Products\53449B1EE14291541B3C4CDDE93B252A
      HKLM\Software\Microsoft\Windows\CurrentVersion\Internet Settings\User Agent\post platform\\FunWebProducts
      HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\SoftwareHelper
      HKLM\software\Search Settings
      HKLM\software\Viewpoint
      HKU\s-1-5-21-220523388-1177238915-725345543-500\software\EoRezo
      HKU\s-1-5-21-220523388-1177238915-725345543-500\software\fcn
      HKU\s-1-5-21-220523388-1177238915-725345543-500\software\FunWebProducts
      HKU\s-1-5-21-220523388-1177238915-725345543-500\software\Games-Attack
      HKU\s-1-5-21-220523388-1177238915-725345543-500\software\Iminent
      HKU\s-1-5-21-220523388-1177238915-725345543-500\software\ItsLabel
      HKU\s-1-5-21-220523388-1177238915-725345543-500\software\LanConfig
      HKU\s-1-5-21-220523388-1177238915-725345543-500\software\Search Settings
      .
      ============== Scan additionnel ==============
      .
      .
      * Mozilla FireFox Version 3.5.6 [fr] *
      .
      Nom du profil: skkbgfyl.default (catherine)
      .
      (ADMINI~1, Invalidprefs.js) Browser.download.lastDir, C:\Documents and Settings\Administrateur\Mes documents
      (ADMINI~1, Invalidprefs.js) Browser.search.defaultenginename, MyStart Search
      (ADMINI~1, Invalidprefs.js) Browser.search.selectedEngine, MyStart Search
      (ADMINI~1, Invalidprefs.js) Browser.startup.homepage, hxxp://y.lo.st
      (ADMINI~1, Invalidprefs.js) Extensions.enabledItems, fr@dictionaries.addons.mozilla.org:2.1,it-IT@dictionaries.addons.mozilla.org:3.1,{463F6CA5-EE3C-4be1-B7E6-7FEE11953374}:3.5.9,{77b819fa-95ad-4f2c-ac7c-486b356188a9}:1.5.20090525,{CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA}:6.0.13,{CAFEEFAC-0016-0000-0015-ABCDEFFEDCBA}:6.0.15,jqs@sun.com:1.0,{20a82645-c095-46ed-80e3-08825760534b}:1.1,{B13721C7-F507-4982-B2E5-502A71474FED}:2.2.0.102,en-US@dictionaries.addons.mozilla.org:4.0.0,{635abd67-4fe9-1b23-4f01-e679fa7484c1}:1.6.5.200812101546,{972ce4c6-7e08-4474-a285-3208198ce6fd}:3.0.14
      (ADMINI~1, Invalidprefs.js) Keyword.URL, hxxp://mystart.incredigames.com/?loc=FF_Incredigame_AddressBar&search=
      (ADMINI~1, Invalidprefs.js) Browser.startup.homepage, hxxp://fr.msn.com/
      (ADMINI~1, Invalidprefs.js) Keyword.URL, hxxp://www.bing.com/search?mkt=fr-FR&form=MIMWA5&q=
      (ADMINI~1, Invalidprefs.js) Browser.search.selectedEngine, Bing
      .
      (ADMINI~1, Invalidprefs.js) TROUVE - Browser.search.order.1, Fast Browser Search
      (ADMINI~1, Invalidprefs.js) TROUVE - Browser.startup.homepage, hxxp://y.lo.st
      (ADMINI~1, Invalidprefs.js) TROUVE - Sweetim.toolbar.highlight.colors, #FFFF00,#00FFE4,#5AFF00,#0087FF,#FFCC00,#FF00F0
      (ADMINI~1, Invalidprefs.js) TROUVE - Sweetim.toolbar.logger.ConsoleHandler.MinReportLevel, 7
      (ADMINI~1, Invalidprefs.js) TROUVE - Sweetim.toolbar.logger.FileHandler.FileName, ff-toolbar.log
      (ADMINI~1, Invalidprefs.js) TROUVE - Sweetim.toolbar.logger.FileHandler.MaxFileSize, 200000
      (ADMINI~1, Invalidprefs.js) TROUVE - Sweetim.toolbar.logger.FileHandler.MinReportLevel, 7
      (ADMINI~1, Invalidprefs.js) TROUVE - Sweetim.toolbar.mode.debug, false
      (ADMINI~1, Invalidprefs.js) TROUVE - Sweetim.toolbar.search.external, <?xml version=\1.0\?><TOOLBAR><EXTERNAL_SEARCH engine=\hxxp://*google.*\ param=\q=\ /><EXTERNAL_SEARCH engine=\hxxp://search.yahoo.com/*\ param=\p=\ /><EXTERNAL_SEARCH engine=\hxxp://search.sweetim.*\ param=\q=\ /><EXTERNAL_SEARCH engine=\hxxp://*.live.*/*\ param=\q=\ /><EXTERNAL_SEARCH engine=\hxxp://*youtube.com/\ param=\search_query=\ /><EXTERNAL_SEARCH engine=\hxxp://*.ebay.*/search/*\ param=\satitle=\ /><EXTERNAL_SEARCH engine=\hxxp://*.amazon.com/s/*\ param=\field-keywords=\ /></TOOLBAR>
      (ADMINI~1, Invalidprefs.js) TROUVE - Sweetim.toolbar.search.history, disney%20channel,wikip%C3%A9dia,dossier,Dossier%20%3A%3A,Arborescence%20%3A,Fichier%20%3A,Ic%C3%B4ne%20%3A,Copier%20couper%20coller,Presse%20papier,Syst%C3%A8me%20d%E2%80%99exploitation%20%3A
      (ADMINI~1, Invalidprefs.js) TROUVE - Sweetim.toolbar.search.history.capacity, 10
      (ADMINI~1, Invalidprefs.js) TROUVE - Sweetim.toolbar.simapp_id, {2FDBE89F-F508-43ec-91C4-02F9CEC0D782}
      (ADMINI~1, Invalidprefs.js) TROUVE - Sweetim.toolbar.version, 1.0.0.3
      .
      (ADMINI~1, prefs.js) Browser.download.lastDir, C:\Documents and Settings\Administrateur\Mes documents\Mes fichiers PSP
      (ADMINI~1, prefs.js) Browser.search.defaultenginename, MyStart Rechercher
      (ADMINI~1, prefs.js) Browser.search.selectedEngine, Google
      (ADMINI~1, prefs.js) Browser.startup.homepage, hxxp://www.google.fr/
      (ADMINI~1, prefs.js) Extensions.enabledItems, fr@dictionaries.addons.mozilla.org:2.1,it-IT@dictionaries.addons.mozilla.org:3.1,{463F6CA5-EE3C-4be1-B7E6-7FEE11953374}:3.5.9,{77b819fa-95ad-4f2c-ac7c-486b356188a9}:1.5.20090525,{CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA}:6.0.13,{CAFEEFAC-0016-0000-0015-ABCDEFFEDCBA}:6.0.15,jqs@sun.com:1.0,{20a82645-c095-46ed-80e3-08825760534b}:1.1,en-US@dictionaries.addons.mozilla.org:4.0.0,{972ce4c6-7e08-4474-a285-3208198ce6fd}:3.5.6
      (ADMINI~1, prefs.js) Keyword.URL, hxxp://mystart.hiyo.com/?loc=ff_address&search=
      .
      (ADMINI~1, prefs.js) TROUVE - Browser.search.order.1, Fast Browser Search
      .
      .
      .
      * Internet Explorer Version 8.0.6001.18702 *
      .
      [HKEY_CURRENT_USER\..\Internet Explorer\Main]
      .
      Do404Search: 01000000
      Show_ToolBar: yes
      Start Page: hxxp://mystart.hiyo.com/
      Use Search Asst:
      Search Page:
      Enable Browser Extensions: yes
      Default_Page_URL: hxxp://go.microsoft.com/fwlink/?LinkId=69157
      Local Page: C:\WINDOWS\system32\blank.htm
      SearchAssistant:
      First Home Page: hxxp://www.windows.fr/ie8/msn/bienvenue
      .
      [HKEY_LOCAL_MACHINE\..\Internet Explorer\Main]
      .
      Default_Page_URL: hxxp://go.microsoft.com/fwlink/?LinkId=69157
      Default_Search_URL: hxxp://go.microsoft.com/fwlink/?LinkId=54896
      Search Page: hxxp://go.microsoft.com/fwlink/?LinkId=54896
      Delete_Temp_Files_On_Exit: yes
      Local Page: C:\WINDOWS\system32\blank.htm
      Start Page: hxxp://go.microsoft.com/fwlink/?LinkId=69157
      .
      [HKEY_LOCAL_MACHINE\..\Internet Explorer\ABOUTURLS]
      .
      Tabs: res://ieframe.dll/tabswelcome.htm
      .
      ============== Suspect (Cracks, Serials, ...) ==============
      .
      C:\Documents and Settings\Administrateur\.housecall\patch.exe
      C:\Documents and Settings\Administrateur\Favoris\Mp3 ¯ Telechargement Gratuit T‚l‚charger gratuitement Telechargementz eu Films Music mp3 jeux PC livres magazines logiciels crack sur rapidshare megaupload [RS][MU][Free][FF].URL
      C:\Documents and Settings\Administrateur\Favoris\site de telechargement\Telechargement Gratuit T‚l‚charger gratuitement Telechargementz eu Films Music mp3 jeux PC livres magazines logiciels crack sur rapidshare megaupload [RS][MU][Free][FF].URL
      C:\Documents and Settings\All Users\Application Data\Kaspersky Lab\AVP8\Data\Updater\Temporary Files\temporaryFolder\AutoPatches\kav8exec\8.0.0.506\avp.exe
      .
      ===================================
      .
      21517 Octet(s) - C:\Ad-Report-SCAN[1].log
      .
      244 Fichier(s) - C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp
      71 Fichier(s) - C:\WINDOWS\Temp
      58 Fichier(s) - C:\WINDOWS\Prefetch
      .
      3 Fichier(s) - C:\Program Files\Ad-Remover\BACKUP
      0 Fichier(s) - C:\Program Files\Ad-Remover\QUARANTINE
      .
      Fin à: 13:11:05 | 30/12/2009 - SCAN[1]
      .
      ============== E.O.F ==============
      .
      quelqu'un peux me dire si j'ai un souci .
      car la pour moi c'est compliqué je ne comprend pas trop.
      merci
      1. Utilisateur anonyme
        Bonjour

        1)• Relance Ad-remover,
        • Au menu principal choisis l'option "L" et tape sur [entrée] .

        • Laisse travailler l'outil et ne touche à rien ...

        --> Poste le rapport qui apparait à la fin , sur le forum ...

        ( Le rapport est sauvegardé sous C:\Ad-report-clean.log )

        ( CTRL+A Pour tout sélectionner , CTRL+C pour copier et CTRL+V pour coller )

        2)Toujours lancer Navilog1 via clic droit "exécuter en tant qu'administrateur"

        Télécharge Navilog1 (par IL-MAFIOSO) sur ton bureau

        http://perso.orange.fr/il.mafioso/Navifix/Navilog1.exe

        Enregistrer la cible (du lien) sous... et enregistre-le sur ton bureau.
        Ensuite double clique sur navilog1.exe pour lancer l'installation.
        Une fois l'installation terminée, double-clique sur le raccourci Navilog1 présent sur le bureau.

        Laisse-toi guider. Appuie sur une touche quand on te le demande.
        Au menu principal, choisis 1 et valide.

        < Ne fais pas le choix 2 >

        Patiente le temps du scan. Il te sera peut-être demandé de redémarrer ton PC.
        Laisse l'outil le faire automatiquement, sinon redémarre ton PC normalement s'il te le demande.

        Patiente jusqu'au message "Scan terminé le......"
        Appuie sur une touche comme demandée ; le bloc-notes va s'ouvrir.
        Copie colle l'intégralité dans ta réponse. Referme le bloc-notes.

        PS : le rapport est, aussi, sauvegardé à la racine du disque dur C:\cleannavi.txt

        poste les rapports au fur et à mesure;merci

        @+

    2. angelina! Auteur
      voici le 2eme rapport.

      .
      ======= RAPPORT D'AD-REMOVER 1.1.4.6_F | UNIQUEMENT XP/VISTA/7 =======
      .
      Mit à jour par C_XX le 26.12.2009 à 20:47
      Contact: AdRemover.contact@gmail.com
      Site web: http://pagesperso-orange.fr/NosTools/ad_remover.html
      .
      Lancé à: 15:27:31, 30/12/2009 | Mode Normal | Option: CLEAN
      Exécuté de: C:\Program Files\Ad-Remover\
      Système d'exploitation: Microsoft® Windows XP™ Service Pack 3 v5.1.2600
      Nom du PC: CATHERINE | Utilisateur actuel: catherine

      Bonnes fêtes de fin d'année à vous tous :)
      .
      ============== ÉLÉMENT(S) NEUTRALISÉ(S) ==============
      .

      C:\DOCUME~1\ADMINI~1\APPLIC~1\Mozilla\FireFox\Profiles\skkbgfyl.default\SweetIMToolbarData
      C:\WINDOWS\Installer\{E1B94435-241E-4519-B1C3-C4DD9EB352A2}
      C:\DOCUME~1\ALLUSE~1\MENUDM~1\PROGRA~1\Games-Attack
      C:\Program Files\AGI
      C:\Program Files\Dealio
      C:\Program Files\Games-Attack
      C:\Program Files\Iminent
      C:\Program Files\Search Guard PlusU
      C:\Program Files\Viewpoint
      C:\DOCUME~1\ADMINI~1\APPLIC~1\EoRezo
      C:\DOCUME~1\ADMINI~1\APPLIC~1\Games-Attack
      C:\DOCUME~1\ADMINI~1\APPLIC~1\Iminent
      C:\DOCUME~1\ADMINI~1\APPLIC~1\ItsLabel
      C:\DOCUME~1\ADMINI~1\APPLIC~1\Search Settings
      C:\DOCUME~1\ALLUSE~1\APPLIC~1\Games-Attack
      C:\DOCUME~1\ALLUSE~1\APPLIC~1\Viewpoint
      C:\Documents and Settings\Administrateur\Local Settings\Application Data\Iminent
      C:\Windows\Installer\1317d0f.msi
      C:\Windows\Installer\1d8645.msi
      C:\Windows\Installer\1f2b33f.msi
      C:\Documents and Settings\Administrateur\Local Settings\Application Data\AOL\ieToolbar
      C:\WINDOWS\System32\dfinowsxgc.dat
      C:\WINDOWS\System32\dfinowsxgc_nav.dat
      C:\WINDOWS\System32\dfinowsxgc_navps.dat
      C:\Documents and Settings\Administrateur\Local Settings\Application Data\sgqiw_nav.dat

      (!) -- Fichiers temporaires supprimés.

      .
      HKCU\software\EoRezo
      HKCU\software\fcn
      HKCU\software\FunWebProducts
      HKCU\software\Games-Attack
      HKCU\software\Iminent
      HKCU\software\ItsLabel
      HKCU\software\LanConfig
      HKCU\software\microsoft\internet explorer\searchscopes\{705997F8-5643-42EC-AC46-082BEDD465AB}
      HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{BC4FFE41-DE9F-46FA-B455-AAD49B9F9938}
      HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{E67C74F4-A00A-4F2C-9FEC-FD9DC004A67F}
      HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks\\{E312764E-7706-43F1-8DAB-FCDD2B1E416D}
      HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{00A6FAF1-072E-44CF-8957-5838F569A31D}
      HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{1A0AADCD-3A72-4B5F-900F-E3BB5A838E2A}
      HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{1A93C934-025B-4C3A-B38E-9654A7003239}
      HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{6F282B65-56BF-4BD1-A8B2-A4449A05863D}
      HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{BC4FFE41-DE9F-46fa-B455-AAD49B9F9938}
      HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EEE6C35B-6118-11DC-9C72-001320C79847}
      HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EEE6C35C-6118-11DC-9C72-001320C79847}
      HKCU\software\Search Settings
      HKLM\Software\Classes\AppID\{362A53B2-2913-4F8A-82F5-7E0A23FDC6F9}
      HKLM\software\classes\appid\EoRezoBHO.DLL
      HKLM\software\classes\AxMetaStream.MetaStreamCtl
      HKLM\software\classes\AxMetaStream.MetaStreamCtl.1
      HKLM\software\classes\AxMetaStream.MetaStreamCtlSecondary
      HKLM\software\classes\AxMetaStream.MetaStreamCtlSecondary.1
      HKLM\Software\Classes\CLSID\{03F998B2-0E00-11D3-A498-00104B6EB52E}
      HKLM\Software\Classes\CLSID\{0E896FCA-D07E-45FE-901F-6A26FCF59C02}
      HKLM\Software\Classes\CLSID\{1B00725B-C455-4DE6-BFB6-AD540AD427CD}
      HKLM\Software\Classes\CLSID\{4260e0cc-0f75-462e-88a3-1e05c248bf4c}
      HKLM\Software\Classes\CLSID\{C7B76B90-3455-4AE6-A752-EAC4D19689E5}
      HKLM\software\classes\EoRezoBHO.EoBHO
      HKLM\software\classes\EoRezoBHO.EoBHO.1
      HKLM\software\classes\installer\Products\53449B1EE14291541B3C4CDDE93B252A
      HKLM\Software\Classes\Interface\{38A7C9DA-8DB7-4D0F-A7B1-C4B1A305BDDB}
      HKLM\Software\Classes\Interface\{63D0ED2D-B45B-4458-8B3B-60C69BBBD83C}
      HKLM\Software\Classes\Interface\{72EE7F04-15BD-4845-A005-D6711144D86A}
      HKLM\Software\Classes\Interface\{819DB72D-1C28-4387-9778-E2FF3DC86F74}
      HKLM\Software\Classes\Interface\{8D292EC0-6792-4A38-82ED-73A087E41BA6}
      HKLM\Software\Classes\Interface\{D5A1EF9A-7948-435D-8B87-D6A598317288}
      HKLM\Software\Classes\Interface\{E342AF55-B78A-4CD0-A2BB-DA7F52D9D25F}
      HKLM\Software\Classes\Interface\{E79DFBC9-5697-4FBD-94E5-5B2A9C7C1612}
      HKLM\Software\Classes\Interface\{E79DFBCB-5697-4FBD-94E5-5B2A9C7C1612}
      HKLM\software\classes\MediaPlayer.GraphicsUtils
      HKLM\software\classes\MediaPlayer.GraphicsUtils.1
      HKLM\software\classes\MgMediaPlayer.GifAnimator
      HKLM\software\classes\MgMediaPlayer.GifAnimator.1
      HKLM\Software\Classes\MIME\Database\Content Type\Application/x-f3embed
      HKLM\software\classes\SearchSettings.BHO
      HKLM\software\classes\SearchSettings.BHO.1
      HKLM\Software\Classes\TypeLib\{4509D3CC-B642-4745-B030-645B79522C6D}
      HKLM\Software\Classes\TypeLib\{621FEACD-8857-43A6-AE26-451D670D5370}
      HKLM\Software\Classes\TypeLib\{98635087-3F5D-418F-990C-B1EFE0797A3B}
      HKLM\Software\Classes\TypeLib\{B6ACB3F1-6A83-432C-B854-3E1056F87F4E}
      HKLM\Software\Classes\TypeLib\{CD082CCA-086F-4FD8-8FD7-247A0DBBD1CC}
      HKLM\Software\Classes\TypeLib\{E79DFBC0-5697-4FBD-94E5-5B2A9C7C1612}
      HKLM\software\classes\URLSearchHook.ToolbarURLSearchHook
      HKLM\software\classes\URLSearchHook.ToolbarURLSearchHook.1
      HKLM\software\Dealio
      HKLM\software\EoRezo
      HKLM\software\FocusInteractive
      HKLM\software\Games-Attack
      HKLM\software\Iminent
      HKLM\software\MetaStream
      HKLM\Software\Microsoft\Active Setup\Installed Components\{03F998B2-0E00-11D3-A498-00104B6EB52E}
      HKLM\Software\Microsoft\Active Setup\Installed Components\{1B00725B-C455-4DE6-BFB6-AD540AD427CD}
      HKLM\Software\Microsoft\Code Store Database\Distribution Units\CabBuilder
      HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{0726A483-27D5-497f-840C-7942FF195DA0}
      HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{1179E926-8507-4706-8110-A61376627499}
      HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{11C58FCA-6F3D-465a-BEC7-7930F31B3626}
      HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{1D9C0556-C0EB-41db-AE8D-8474B3800F15}
      HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{32CBAD7C-9306-40dc-8E1C-A689233D7BEF}
      HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7C7E5DFB-3D15-4ae2-8FCC-71D4C81CE0B3}
      HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A2842911-E52D-4f35-A131-0DFD178C24CB}
      HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{BB31B14B-21EB-4daf-805F-B17B09712B1A}
      HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{D52B574C-B558-4242-BF4A-5648EC9AE8BD}
      HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F4F58B11-22E7-48f1-B6EA-2D1BCB0312D3}
      HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{FD8064C4-D682-4f47-8619-7FD23C0DC55E}
      HKLM\Software\Microsoft\Internet Explorer\SearchScopes\{56256A51-B582-467e-B8D4-7786EDA79AE0}
      HKLM\Software\Microsoft\Multimedia\WMPlayer\Schemes\f3pss
      HKLM\software\microsoft\shared tools\msconfig\startupreg\EoEngine
      HKLM\software\microsoft\shared tools\msconfig\startupreg\IMBooster
      HKLM\software\microsoft\shared tools\msconfig\startupreg\SearchSettings
      HKLM\software\microsoft\shared tools\msconfig\startupreg\SweetIM
      HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0E896FCA-D07E-45FE-901F-6A26FCF59C02}
      HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C7B76B90-3455-4AE6-A752-EAC4D19689E5}
      HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{07B18EAB-A523-4961-B6BB-170DE4475CCA}
      HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{25560540-9571-4D7B-9389-0F166788785A}
      HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{2EFF3CF7-99C1-4C29-BC2B-68E057E22340}
      HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{3DC201FB-E9C9-499C-A11F-23C360D7C3F8}
      HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{3E720452-B472-4954-B7AA-33069EB53906}
      HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{63D0ED2C-B45B-4458-8B3B-60C69BBBD83C}
      HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{7473d294-b7bb-4f24-ae82-7e2ce94bb6a9}
      HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{98D9753D-D73B-42D5-8C85-4469CDA897AB}
      HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{9FF05104-B030-46FC-94B8-81276E4E27DF}
      HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{A6573479-9075-4A65-98A6-19FD29CF7374}
      HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{E79DFBCA-5697-4FBD-94E5-5B2A9C7C1612}
      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\0292226F570267D459357AF78015E534
      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\03285961954D5824C85975D955031EE8
      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\07D5290CDBDAE4242926B8E6CA650501
      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\08E33F7B61DEFF24BB9673ED7D467636
      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\0E3D8A5B48622A445A7DF73FEFF32C3F
      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\0FF2AEFF45EEA0A48A4B33C1973B6094
      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\1AC67655DD68F8240B2860F2D511EBD8
      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\305B09CE8C53A214DB58887F62F25536
      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\34EDDB1BFB3A2D448845F3EFD0F15A43
      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\427EA997C413D1D47907CBFC7B2DB432
      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\4318DF19719275242801CBE292063A4C
      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\45FC115D1FEAEF849A4E1610D6EC8BF0
      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\46A5861A389ADB844AF89E31BC9DF0A1
      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\49B0E1A6FF50BBE4289E4E23DE6EA0C7
      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\4CCCAC049F34D0540AAC13011398BEDB
      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\5C4389D0BFB302C479DE4178BD5D9EBA
      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\5D19F074C042AD34BAB463D4175A062E
      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\5D2B09BDEF4FE54418E6F3373CDBC7AC
      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\61B65D3397A1FBF4CB1571B5E4F6B5B0
      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\68E8A05C60DD9254591DBD16C94EDDBF
      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\697E782CF574CC34CBB9566440BA12BC
      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\6AC3985F4D64C2245A96D31569D1BF40
      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\6AE27A8613CF7EA4782F2886F67295E5
      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\7CE172051F585E04187BCB97570BFA74
      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\855847FA0E25FBA46B8516389DFDD4B3
      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\86A901BA5265452499DCBF719C378EE3
      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\88ABD1CD5C40EC84789A7F6EF86DAC5E
      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\980289C22F80A7C4BB9323DC61255E4E
      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\9A4B7EF3789F871419D9302583B20C15
      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\9DC2844D0E3E8924C8973C3B3BAE1F58
      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\A6C53B0F76C44004A8F36716213017DB
      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\AFEB575AA30ACB243B748619F62F0782
      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\B59F2D8189784CC46A4597F2842480B0
      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\BD746FB95FB8E5B45BF66BE54D5FD91F
      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\CCF399FCD6D2D3F46BF02A1378654FC9
      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\D149C1355C98DE24E82CEFBD996FE06A
      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\DB59FDB786388EA4D897F3EE715683AC
      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\DB8DAD19CFBCC2049A4477183787E8C5
      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\E1C820A74ED67374BA048B52CB3C3804
      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\E337925F629CF4C4FB08F3D9674DD839
      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\EC65F200D112357449C8B1BC3CFA03D0
      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\F327D0C73C0973644A21E8CC852267A0
      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\F461B8DD96FF5AA41A52D14E1D7B69C7
      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\FA96423FE2B98E248A3B23548D1E22D9
      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Products\53449B1EE14291541B3C4CDDE93B252A
      HKLM\Software\Microsoft\Windows\CurrentVersion\Internet Settings\User Agent\post platform\\FunWebProducts
      HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\SoftwareHelper
      HKLM\software\Search Settings
      HKLM\software\Viewpoint
      .
      ============== Scan additionnel ==============
      .
      .
      * Mozilla FireFox Version 3.5.6 [fr] *
      .
      Nom du profil: skkbgfyl.default (catherine)
      .
      (ADMINI~1, Invalidprefs.js) Browser.download.lastDir, C:\Documents and Settings\Administrateur\Mes documents
      (ADMINI~1, Invalidprefs.js) Browser.search.defaultenginename, MyStart Search
      (ADMINI~1, Invalidprefs.js) Browser.search.selectedEngine, MyStart Search
      (ADMINI~1, Invalidprefs.js) Browser.startup.homepage, hxxp://y.lo.st
      (ADMINI~1, Invalidprefs.js) Extensions.enabledItems, fr@dictionaries.addons.mozilla.org:2.1,it-IT@dictionaries.addons.mozilla.org:3.1,{463F6CA5-EE3C-4be1-B7E6-7FEE11953374}:3.5.9,{77b819fa-95ad-4f2c-ac7c-486b356188a9}:1.5.20090525,{CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA}:6.0.13,{CAFEEFAC-0016-0000-0015-ABCDEFFEDCBA}:6.0.15,jqs@sun.com:1.0,{20a82645-c095-46ed-80e3-08825760534b}:1.1,{B13721C7-F507-4982-B2E5-502A71474FED}:2.2.0.102,en-US@dictionaries.addons.mozilla.org:4.0.0,{635abd67-4fe9-1b23-4f01-e679fa7484c1}:1.6.5.200812101546,{972ce4c6-7e08-4474-a285-3208198ce6fd}:3.0.14
      (ADMINI~1, Invalidprefs.js) Keyword.URL, hxxp://mystart.incredigames.com/?loc=FF_Incredigame_AddressBar&search=
      (ADMINI~1, Invalidprefs.js) Browser.startup.homepage, hxxp://fr.msn.com/
      (ADMINI~1, Invalidprefs.js) Keyword.URL, hxxp://www.bing.com/search?mkt=fr-FR&form=MIMWA5&q=
      (ADMINI~1, Invalidprefs.js) Browser.search.selectedEngine, Bing
      .
      (ADMINI~1, Invalidprefs.js) EFFACE - Browser.search.order.1, Fast Browser Search
      (ADMINI~1, Invalidprefs.js) EFFACE - Browser.startup.homepage, hxxp://y.lo.st
      (ADMINI~1, Invalidprefs.js) EFFACE - Sweetim.toolbar.highlight.colors, #FFFF00,#00FFE4,#5AFF00,#0087FF,#FFCC00,#FF00F0
      (ADMINI~1, Invalidprefs.js) EFFACE - Sweetim.toolbar.logger.ConsoleHandler.MinReportLevel, 7
      (ADMINI~1, Invalidprefs.js) EFFACE - Sweetim.toolbar.logger.FileHandler.FileName, ff-toolbar.log
      (ADMINI~1, Invalidprefs.js) EFFACE - Sweetim.toolbar.logger.FileHandler.MaxFileSize, 200000
      (ADMINI~1, Invalidprefs.js) EFFACE - Sweetim.toolbar.logger.FileHandler.MinReportLevel, 7
      (ADMINI~1, Invalidprefs.js) EFFACE - Sweetim.toolbar.mode.debug, false
      (ADMINI~1, Invalidprefs.js) EFFACE - Sweetim.toolbar.search.external, <?xml version=\1.0\?><TOOLBAR><EXTERNAL_SEARCH engine=\hxxp://*google.*\ param=\q=\ /><EXTERNAL_SEARCH engine=\hxxp://search.yahoo.com/*\ param=\p=\ /><EXTERNAL_SEARCH engine=\hxxp://search.sweetim.*\ param=\q=\ /><EXTERNAL_SEARCH engine=\hxxp://*.live.*/*\ param=\q=\ /><EXTERNAL_SEARCH engine=\hxxp://*youtube.com/\ param=\search_query=\ /><EXTERNAL_SEARCH engine=\hxxp://*.ebay.*/search/*\ param=\satitle=\ /><EXTERNAL_SEARCH engine=\hxxp://*.amazon.com/s/*\ param=\field-keywords=\ /></TOOLBAR>
      (ADMINI~1, Invalidprefs.js) EFFACE - Sweetim.toolbar.search.history, disney%20channel,wikip%C3%A9dia,dossier,Dossier%20%3A%3A,Arborescence%20%3A,Fichier%20%3A,Ic%C3%B4ne%20%3A,Copier%20couper%20coller,Presse%20papier,Syst%C3%A8me%20d%E2%80%99exploitation%20%3A
      (ADMINI~1, Invalidprefs.js) EFFACE - Sweetim.toolbar.search.history.capacity, 10
      (ADMINI~1, Invalidprefs.js) EFFACE - Sweetim.toolbar.simapp_id, {2FDBE89F-F508-43ec-91C4-02F9CEC0D782}
      (ADMINI~1, Invalidprefs.js) EFFACE - Sweetim.toolbar.version, 1.0.0.3
      .
      (ADMINI~1, prefs.js) Browser.download.lastDir, C:\Documents and Settings\Administrateur\Mes documents\Mes fichiers PSP
      (ADMINI~1, prefs.js) Browser.search.defaultenginename, MyStart Rechercher
      (ADMINI~1, prefs.js) Browser.search.selectedEngine, Google
      (ADMINI~1, prefs.js) Browser.startup.homepage, hxxp://www.google.fr/
      (ADMINI~1, prefs.js) Extensions.enabledItems, fr@dictionaries.addons.mozilla.org:2.1,it-IT@dictionaries.addons.mozilla.org:3.1,{463F6CA5-EE3C-4be1-B7E6-7FEE11953374}:3.5.9,{77b819fa-95ad-4f2c-ac7c-486b356188a9}:1.5.20090525,{CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA}:6.0.13,{CAFEEFAC-0016-0000-0015-ABCDEFFEDCBA}:6.0.15,jqs@sun.com:1.0,{20a82645-c095-46ed-80e3-08825760534b}:1.1,en-US@dictionaries.addons.mozilla.org:4.0.0,{972ce4c6-7e08-4474-a285-3208198ce6fd}:3.5.6
      (ADMINI~1, prefs.js) Keyword.URL, hxxp://mystart.hiyo.com/?loc=ff_address&search=
      .
      (ADMINI~1, prefs.js) EFFACE - Browser.search.order.1, Fast Browser Search
      .
      .
      .
      * Internet Explorer Version 8.0.6001.18702 *
      .
      [HKEY_CURRENT_USER\..\Internet Explorer\Main]
      .
      Do404Search: 01000000
      Show_ToolBar: yes
      Start Page: hxxp://fr.msn.com/
      Use Search Asst:
      Enable Browser Extensions: yes
      Default_Page_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
      Local Page: C:\WINDOWS\system32\blank.htm
      SearchAssistant:
      Default_search_url: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
      Search bar: hxxp://go.microsoft.com/fwlink/?linkid=54896
      .
      [HKEY_LOCAL_MACHINE\..\Internet Explorer\Main]
      .
      Default_Page_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
      Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
      Search Page: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
      Delete_Temp_Files_On_Exit: yes
      Local Page: C:\WINDOWS\system32\blank.htm
      Start Page: hxxp://fr.msn.com/
      Search bar: hxxp://search.msn.com/spbasic.htm
      .
      [HKEY_LOCAL_MACHINE\..\Internet Explorer\ABOUTURLS]
      .
      Tabs: res://ieframe.dll/tabswelcome.htm
      .
      ============== Suspect (Cracks, Serials, ...) ==============
      .
      C:\Documents and Settings\Administrateur\.housecall\patch.exe
      C:\Documents and Settings\Administrateur\Favoris\Mp3 ¯ Telechargement Gratuit T‚l‚charger gratuitement Telechargementz eu Films Music mp3 jeux PC livres magazines logiciels crack sur rapidshare megaupload [RS][MU][Free][FF].URL
      C:\Documents and Settings\Administrateur\Favoris\site de telechargement\Telechargement Gratuit T‚l‚charger gratuitement Telechargementz eu Films Music mp3 jeux PC livres magazines logiciels crack sur rapidshare megaupload [RS][MU][Free][FF].URL
      C:\Documents and Settings\All Users\Application Data\Kaspersky Lab\AVP8\Data\Updater\Temporary Files\temporaryFolder\AutoPatches\kav8exec\8.0.0.506\avp.exe
      .
      ===================================
      .
      20556 Octet(s) - C:\Ad-Report-CLEAN[1].log
      21886 Octet(s) - C:\Ad-Report-SCAN[1].log
      .
      2 Fichier(s) - C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp
      6 Fichier(s) - C:\WINDOWS\Temp
      8 Fichier(s) - C:\WINDOWS\Prefetch
      .
      20 Fichier(s) - C:\Program Files\Ad-Remover\BACKUP
      799 Fichier(s) - C:\Program Files\Ad-Remover\QUARANTINE
      .
      Fin à: 16:15:24 | 30/12/2009 - CLEAN[1]
      .
      ============== E.O.F ==============
      .
      3. angelina! Auteur
        voici mon 3emes rapports

        Fix Navipromo version 4.0.5 commencé le 30/12/2009 16:39:26,03

        !!! Attention,ce rapport peut indiquer des fichiers/programmes légitimes!!!
        !!! Postez ce rapport sur le forum pour le faire analyser !!!

        Outil exécuté depuis C:\Program Files\navilog1

        Mise à jour le 10.11.2009 à 18h00 par IL-MAFIOSO

        Microsoft Windows XP Professionnel ( v5.1.2600 ) Service Pack 3
        X86-based PC ( Uniprocessor Free : AMD Athlon(TM) XP 2000+ )
        BIOS : Award Modular BIOS v6.0
        USER : catherine ( Administrator )
        BOOT : Normal boot

        Antivirus : Kaspersky Internet Security 8.0.0.506 (Activated)
        Firewall : Kaspersky Internet Security 8.0.0.506 (Activated)

        C:\ (Local Disk) - NTFS - Total:152 Go (Free:32 Go)
        D:\ (CD or DVD) - CDFS - Total:0 Go (Free:0 Go)
        F:\ (CD or DVD)
        G:\ (USB)

        Recherche executée en mode normal

        Nettoyage exécuté au redémarrage de l'ordinateur

        Nettoyage contenu C:\WINDOWS\Temp effectué !
        Nettoyage contenu C:\Documents and Settings\Administrateur\locals~1\Temp effectué !

        *** Sauvegarde du Registre vers dossier Safebackup ***

        sauvegarde du Registre réalisée avec succès !

        *** Nettoyage Registre ***

        Nettoyage Registre Ok

        Certificat Egroup supprimé !

        *** Scan terminé 30/12/2009 17:08:32,03 ***
        1. Utilisateur anonyme
          Re

          Télécharge Malwarebytes anti malware ici
          http://www.malwarebytes.org/mbam.php

          * Installe le (choisis bien "français" ; ne modifie pas les paramètres d'installe ) et mets le à jour .

          (NB : S'il te manque "COMCTL32.OCX" lors de l'installe, alors télécharge le ici : https://www.malekal.com/tutorial-aboutbuster/

          * Potasse le tuto pour te familiariser avec le prg :

          https://forum.pcastuces.com/sujet.asp?f=31&s=3

          (cela dis, il est très simple d’utilisation).

          relance malwarebytes en suivant scrupuleusement ces consignes :

          ! Déconnecte toi et ferme toutes applications en cours !

          * Lance Malwarebyte's .

          Fais un examen dit "Complet" .

          --> Laisse le programme travailler ( et ne rien faire d'autre avec le PC durant le scan ).
          --> à la fin tu cliques sur "résultat" .
          --> Vérifie que tous les objets infectés soient validés, puis clique sur " suppression " .

          Note : si il faut redémarrer ton PC pour finir le nettoyage, fais le !

          Poste le rapport sauvegardé après la suppression des objets infectés (dans l'onglet "rapport/log"de Malwarebytes, le dernier en date)

          @+
      4. angelina! Auteur
        voici le rapport :

        Malwarebytes' Anti-Malware 1.42
        Version de la base de données: 3455
        Windows 5.1.2600 Service Pack 3
        Internet Explorer 8.0.6001.18702

        30/12/2009 19:42:41
        mbam-log-2009-12-30 (19-42-41).txt

        Type de recherche: Examen complet (C:\|D:\|E:\|F:\|G:\|)
        Eléments examinés: 272565
        Temps écoulé: 1 hour(s), 40 minute(s), 26 second(s)

        Processus mémoire infecté(s): 0
        Module(s) mémoire infecté(s): 0
        Clé(s) du Registre infectée(s): 1
        Valeur(s) du Registre infectée(s): 0
        Elément(s) de données du Registre infecté(s): 0
        Dossier(s) infecté(s): 0
        Fichier(s) infecté(s): 8

        Processus mémoire infecté(s):
        (Aucun élément nuisible détecté)

        Module(s) mémoire infecté(s):
        (Aucun élément nuisible détecté)

        Clé(s) du Registre infectée(s):
        HKEY_CLASSES_ROOT\Interface\{2763e333-b168-41a0-a112-d35f96f410c0} (Adware.MyWebSearch) -> Quarantined and deleted successfully.

        Valeur(s) du Registre infectée(s):
        (Aucun élément nuisible détecté)

        Elément(s) de données du Registre infecté(s):
        (Aucun élément nuisible détecté)

        Dossier(s) infecté(s):
        (Aucun élément nuisible détecté)

        Fichier(s) infecté(s):
        C:\Program Files\Ad-Remover\QUARANTINE\DOCUME~1\ADMINI~1\APPLIC~1\EoRezo\SOFTWA~1\SoftwareUpdate.exe.vir (Rogue.Eorezo) -> Quarantined and deleted successfully.
        C:\Program Files\Ad-Remover\QUARANTINE\DOCUME~1\ADMINI~1\APPLIC~1\EoRezo\SOFTWA~1\SoftwareUpdateHP.exe.vir (Rogue.Eorezo) -> Quarantined and deleted successfully.
        C:\System Volume Information\_restore{24AF5F6F-17B1-42E4-9C64-E9498A760F22}\RP1402\A0453522.exe (Rogue.Eorezo) -> Quarantined and deleted successfully.
        C:\System Volume Information\_restore{24AF5F6F-17B1-42E4-9C64-E9498A760F22}\RP1402\A0453545.dll (Rogue.Eorezo) -> Quarantined and deleted successfully.
        C:\System Volume Information\_restore{24AF5F6F-17B1-42E4-9C64-E9498A760F22}\RP1402\A0453546.dll (Rogue.Eorezo) -> Quarantined and deleted successfully.
        C:\System Volume Information\_restore{24AF5F6F-17B1-42E4-9C64-E9498A760F22}\RP1403\A0453667.exe (Rogue.Eorezo) -> Quarantined and deleted successfully.
        C:\System Volume Information\_restore{24AF5F6F-17B1-42E4-9C64-E9498A760F22}\RP1403\A0453668.exe (Rogue.Eorezo) -> Quarantined and deleted successfully.
        C:\WINDOWS\system32\stera.job (Rogue.WinAntiVirus) -> Quarantined and deleted successfully.
        1. Utilisateur anonyme
          Re

          1)Pour vérifier les mises à jour logiciels à appliquer sur ton PC
          https://www.flexera.com/products/operations/software-vulnerability-management.html
          Divers liens te seront proposés pour les logiciels non à jour.

          2)Pour java utilises javaRa https://www.commentcamarche.net/faq/15645-supprimer-les-anciennes-versions-de-java-avec-javara

          et un autre tutoriel javaRa http://www.libellules.ch/dotclear/index.php?post/2008/07/13/2689-javara

          Décompresse le fichier sur le Bureau (Clic droit > Extraire tout).
          * Double-cliques sur le répertoire JavaRa.
          * Puis double-cliques sur le fichier JavaRa.exe (le exe peut ne pas s'afficher).
          * Choisis Français puis cliques sur Select.
          * Cliques sur Recherche de mises à jour.
          * Sélectionne Mettre à jour via jucheck.exe puis clique sur Rechercher.
          * Autorises le processus à se connecter s'il le demande, cliques sur Installer et suis les instructions d'installation qui prennent quelques minutes.
          * L'installation est terminée, reviens à l'écran de JavaRa et cliques sur Effacer les anciennes versions.
          * Cliques sur Oui pour confirmer. Laisses travailler et cliques ensuite sur OK, puis une deuxième fois sur OK.
          * Un rapport va s'ouvrir. Postes-le dans ta prochaine réponse.
          * Ferme l'application.

          Note : le rapport se trouve aussi dans C:\ sous le nom JavaRa.log.

          3)Fait une analyse complète avec ton antivirus et poste le rapport à l'issue;merci

          @+
      5. angelina! Auteur
        bonjour et avant tout merci de me donner un coup de main!

        aujourd'huis dur dur l'ordi le prossesseur tourne a 100 je ne sais pas pourquoi c'est mozilla qui tourne a 100 %
        j'ai du relancer mon ordi !

        bon sinon voici le rapport suivant:

        JavaRa 1.15 Removal Log.

        Report follows after line.

        ------------------------------------

        The JavaRa removal process was started on Thu Dec 31 11:07:03 2009

        Found and removed: C:\Program Files\Java\jre1.5.0_06

        Found and removed: C:\Documents and Settings\Administrateur\Application Data\Sun\Java\jre1.6.0_13

        JavaRa 1.15 Removal Log.

        Report follows after line.

        ------------------------------------

        The JavaRa removal process was started on Thu Dec 31 11:17:11 2009

        Found and removed: Software\JavaSoft\Java2D\1.5.0_06

        Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0000-0003-ABCDEFFEDCBA}

        Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0000-0004-ABCDEFFEDCBA}

        Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0000-0005-ABCDEFFEDCBA}

        Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.0.1

        Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.0.1_02

        Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.0.1_03

        Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.0.1_04

        Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.2

        Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.2.0_01

        Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0000-ABCDEFFEDCBA}

        Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0001-ABCDEFFEDCBA}

        Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0001-ABCDEFFEDCBB}

        Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0002-ABCDEFFEDCBA}

        Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0002-ABCDEFFEDCBB}

        Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0003-ABCDEFFEDCBA}

        Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0003-ABCDEFFEDCBB}

        Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0004-ABCDEFFEDCBA}

        Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0004-ABCDEFFEDCBB}

        Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0005-ABCDEFFEDCBA}

        Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0005-ABCDEFFEDCBB}

        Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0006-ABCDEFFEDCBA}

        Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0006-ABCDEFFEDCBB}

        Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0007-ABCDEFFEDCBA}

        Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0007-ABCDEFFEDCBB}

        Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0008-ABCDEFFEDCBA}

        Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0008-ABCDEFFEDCBB}

        Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0009-ABCDEFFEDCBA}

        Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0009-ABCDEFFEDCBB}

        Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0010-ABCDEFFEDCBA}

        Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0010-ABCDEFFEDCBB}

        Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0011-ABCDEFFEDCBA}

        Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0011-ABCDEFFEDCBB}

        Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0012-ABCDEFFEDCBA}

        Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0012-ABCDEFFEDCBB}

        Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0013-ABCDEFFEDCBA}

        Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0013-ABCDEFFEDCBB}

        Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0014-ABCDEFFEDCBA}

        Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0014-ABCDEFFEDCBB}

        Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0015-ABCDEFFEDCBA}

        Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0015-ABCDEFFEDCBB}

        Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0016-ABCDEFFEDCBA}

        Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0016-ABCDEFFEDCBB}

        Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0017-ABCDEFFEDCBA}

        Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0017-ABCDEFFEDCBB}

        Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0018-ABCDEFFEDCBA}

        Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0018-ABCDEFFEDCBB}

        Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0019-ABCDEFFEDCBA}

        Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0019-ABCDEFFEDCBB}

        Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0020-ABCDEFFEDCBA}

        Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0020-ABCDEFFEDCBB}

        Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0021-ABCDEFFEDCBA}

        Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0021-ABCDEFFEDCBB}

        Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0022-ABCDEFFEDCBA}

        Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0022-ABCDEFFEDCBB}

        Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0023-ABCDEFFEDCBA}

        Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0023-ABCDEFFEDCBB}

        Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0024-ABCDEFFEDCBA}

        Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0024-ABCDEFFEDCBB}

        Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0025-ABCDEFFEDCBA}

        Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0025-ABCDEFFEDCBB}

        Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0026-ABCDEFFEDCBA}

        Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0026-ABCDEFFEDCBB}

        Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0027-ABCDEFFEDCBA}

        Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0027-ABCDEFFEDCBB}

        Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0028-ABCDEFFEDCBA}

        Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0028-ABCDEFFEDCBB}

        Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0029-ABCDEFFEDCBA}

        Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0029-ABCDEFFEDCBB}

        Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0030-ABCDEFFEDCBA}

        Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0030-ABCDEFFEDCBB}

        Found and removed: SOFTWARE\Microsoft\Active Setup\Installed Components\{08B0E5C0-4FCB-11CF-AAA5-00401C608500}

        Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files\Java\jre1.5.0_06\

        ------------------------------------

        Finished reporting.
        1. Utilisateur anonyme
          Re

          Passe à la suite;merci
      6. angelina! Auteur
        voici la suite ce que kaspersky a analysé.

        Analyse complète: terminée le 31/12/2009 14:52:57 (événements : 10, objets : 615053, durée : 03:13:43)
        31/12/2009 11:39:14 Lancement de la tâche
        31/12/2009 11:48:28 Détectés: Trojan.Win32.Agent.deil C:\System Volume Information\_restore{24AF5F6F-17B1-42E4-9C64-E9498A760F22}\RP1342\A0439839.exe
        31/12/2009 11:48:28 Non réparés: Trojan.Win32.Agent.deil C:\System Volume Information\_restore{24AF5F6F-17B1-42E4-9C64-E9498A760F22}\RP1342\A0439839.exe Reporté
        31/12/2009 13:08:21 Détectés: https://securelist.fr/ C:\Program Files\ACD Systems\PlugIns\ID_PSP.APL
        31/12/2009 13:26:12 Détectés: https://securelist.fr/ C:\Program Files\Fichiers communs\Adobe AIR\Versions\1.0\Adobe AIR.dll
        31/12/2009 13:47:10 Détectés: https://securelist.fr/ C:\Program Files\Java\jre6\bin\java.exe
        31/12/2009 14:48:08 Détectés: https://securelist.fr/ C:\WINDOWS\system32\java.exe
        31/12/2009 14:49:02 Détectés: https://securelist.fr/ C:\WINDOWS\system32\Adobe\Director\np32dsw.dll
        31/12/2009 14:49:04 Détectés: https://securelist.fr/ C:\WINDOWS\system32\Adobe\Shockwave 11\Plugin.dll
        31/12/2009 14:52:57 Fin de la tâche
        1. Utilisateur anonyme
          Re

          Vide la quarantaine De Kaspersky.

          1)          supprime Navilog:C>programfilesfiles>navilog

          2)Télécharges Toolscleaner afin de supprimer les logiciels de désinfection inutiles

          ---> Télécharge Toolscleaner sur ton Bureau.
          https://www.commentcamarche.net/telecharger/securite/22061-toolscleaner/
          * Double-clique sur ToolsCleaner2.exe(ou clic droit « exécuter en tant que administrateur » pour Vista)pour le lancer.
          * Clique sur Recherche et laisse le scan agir.
          * Clique sur Suppression pour finaliser.
          * Tu peux, si tu le souhaites, te servir des Options Facultatives.
          * Clique sur Quitter pour obtenir le rapport.
          * Poste le rapport (TCleaner.txt) qui se trouve à la racine de ton disque dur (C:\).

          3)Purge la restauration comme ceci :
          http://service1.symantec.com/support/inter/tsgeninfointl.Nsf/fr_docid/20020830101856924

          Cela supprime toutes traces des diverses infections ;et permettra une éventuelle restauration sans infections

          @+
      7. angelina! Auteur
        bonjour et bonne année.
        j'ai un petit soussi quand je veux purger avec le dernier logiciel je fait ce qu'il me dit mais j'ai un hic :

        Dans l'onglet Restauration du système, sélectionnez Désactiver la Restauration du système ou Désactiver la Restauration du système sur tous les lecteurs.
        Si vous ne voyez pas l'onglet Restauration du système, vous n’êtes pas connecté sous Windows comme Administrateur.

        voila je ne trouve pas l'onglet restauration!
        1. Utilisateur anonyme
          Bonsoir

          Meilleurs vœux également pour cette année 2010.

          On reprends :
          -Panneau de configuration
          -système
          -l'onglet restauration n'est pas présent?

          est ce cela?
          @+
      8. angelina! Auteur
        scuse sa y est j'ai reussi c'est fait et maintenant?
        je vais avoir un ordi qui va tourné a font avec tous ce que je lui fait ! heureusement qu'il y a des personnes comme toi qui donne un coup de main tu ti connais drolement.
        1. Utilisateur anonyme
          Re
          as tu fais tools cleaner?

          @+
      10. angelina! Auteur
        oui voila tout a été fait comme tu as dit maintenant je pense qu'il faut que je le laisse un peux tournée pour voir le resulta.
        peux tu me dire en quelque ligne si j'avais des m....s sur mon ordi et quoi
        pour que je puisse savoir un peux
        en tout ca merci pour ton soutiens et ton aide et encore bonne année 2010

      Discussions similaires

      Analyse des logs hijackthis
      philnoug

      35 réponses
      Hijackthis
      brioche95

      2 réponses
      Hijackthis
      The Dj

      4 réponses
      rapport hijackthis
      lamaisonverte

      34 réponses
      Log HIJACKTHIS
      Thi83

      13 réponses