Page de pub

gigi21 -  
Bonjour,

j'ai des pages de pub qui s'ouvre tout le temps et je ne sais comment m'en débarrasser.
quelqu'un peut-il m'aider à résoudre le problème.
Configuration: ordinateur portable hp pavillon dv6 Windows vista sevice pack 2 
AMD Athlon X2 dual core
4.00 go memoire systeme exploitation 32 bits

14 réponses

  1.  crapoulou Modérateur
    Salut,

    Désactive l’UAC (User Account Control) le temps de la désinfection.
    Démarrer > Panneau de configuration > Comptes d’utilisateurs > Désactiver le contrôle des comptes d’utilisateur.
    (Manipulation inverse pour le remettre en fin de désinfection).
    (Cela va permettre aux outils de désinfection de travailler correctement).

    *******

    Télécharge Random’s System Information Tool (RSIT) de random/random et enregistre l’exécutable sur le Bureau.
    = = = = >>> En cliquant ici <<< = = = =

    * Clique droit sur RSIT.exe puis sélectionne ‘Exécuter en tant qu’administrateur‘ pour le lancer.
    * Une première fenêtre s’ouvre, clique alors sur Continue (Disclaimer).
    * Si la dernière version de HijackThis n’est pas détectée sur ton PC, RSIT le téléchargera et te demandera d’accepter la licence.
    * Lorsque l’analyse sera terminée, deux fichiers texte s’ouvriront (probablement avec le bloc-notes).
    * Poste le contenu de log.txt et de info.txt.
    0
    1. Utilisateur anonyme
      bonjour crapoulou
      je laisse
      bonne chasse
      0
      1. crapoulou Modérateur
        Salut nathandre, merci.
        0
      2. gigi21 Auteur
        @crapouloumerci de prendre du temps pour m'aider voici les rapportsinfo.txt logfile of random's system information tool 1.06 2010-02-05 16:24:25

        ======Uninstall list======

        -->"C:\Program Files\HP Games\5 Card Deluxe\Uninstall.exe"
        -->"C:\Program Files\HP Games\Agatha Christie - Death on the Nile\Uninstall.exe"
        -->"C:\Program Files\HP Games\Age of Castles\Uninstall.exe"
        -->"C:\Program Files\HP Games\Babysitting Mania\Uninstall.exe"
        -->"C:\Program Files\HP Games\Bejeweled 2 Deluxe\Uninstall.exe"
        -->"C:\Program Files\HP Games\Blasterball 3\Uninstall.exe"
        -->"C:\Program Files\HP Games\Build-a-lot 2\Uninstall.exe"
        -->"C:\Program Files\HP Games\Cake Mania\Uninstall.exe"
        -->"C:\Program Files\HP Games\Chuzzle Deluxe\Uninstall.exe"
        -->"C:\Program Files\HP Games\Diner Dash 2 Restaurant Rescue\Uninstall.exe"
        -->"C:\Program Files\HP Games\Diner Dash\Uninstall.exe"
        -->"C:\Program Files\HP Games\FATE\Uninstall.exe"
        -->"C:\Program Files\HP Games\Fish Tycoon\Uninstall.exe"
        -->"C:\Program Files\HP Games\Gem Shop\Uninstall.exe"
        -->"C:\Program Files\HP Games\Granny in Paradise\Uninstall.exe"
        -->"C:\Program Files\HP Games\Insaniquarium Deluxe\Uninstall.exe"
        -->"C:\Program Files\HP Games\Mah Jong Quest\Uninstall.exe"
        -->"C:\Program Files\HP Games\Mahjongg Artifacts\Uninstall.exe"
        -->"C:\Program Files\HP Games\My HP Game Console\Uninstall.exe"
        -->"C:\Program Files\HP Games\Nanny 911\Uninstall.exe"
        -->"C:\Program Files\HP Games\Nanny Mania 2\Uninstall.exe"
        -->"C:\Program Files\HP Games\Nanny Mania\Uninstall.exe"
        -->"C:\Program Files\HP Games\Ocean Express\Uninstall.exe"
        -->"C:\Program Files\HP Games\Peggle\Uninstall.exe"
        -->"C:\Program Files\HP Games\Polar Bowler\Uninstall.exe"
        -->"C:\Program Files\HP Games\Polar Golfer\Uninstall.exe"
        -->"C:\Program Files\HP Games\Polar Pool\Uninstall.exe"
        -->"C:\Program Files\HP Games\Puzzle Express\Uninstall.exe"
        -->"C:\Program Files\HP Games\Slingo Deluxe\Uninstall.exe"
        -->"C:\Program Files\HP Games\SPORE Creature Creator Trial Edition\Uninstall.exe"
        -->"C:\Program Files\HP Games\Sudoku Quest\Uninstall.exe"
        -->"C:\Program Files\HP Games\The Treasures of Montezuma\Uninstall.exe"
        -->"C:\Program Files\HP Games\Tradewinds\Uninstall.exe"
        -->"C:\Program Files\HP Games\Virtual Villagers - The Secret City\Uninstall.exe"
        -->"C:\Program Files\HP Games\Zuma Deluxe\Uninstall.exe"
        32 Bit HP CIO Components Installer-->MsiExec.exe /I{F1E63043-54FC-429B-AB2C-31AF9FBA4BC7}
        Activation Assistant for the 2007 Microsoft Office suites-->"C:\ProgramData\{174892B1-CBE7-44F5-86FF-AB555EFD73A3}\Microsoft Office Activation Assistant.exe" REMOVE=TRUE MODIFY=FALSE
        ActiveCheck component for HP Active Support Library-->MsiExec.exe /X{254C37AA-6B72-4300-84F6-98A82419187E}
        Ad-Aware-->"C:\ProgramData\{CFBD8779-FAAB-4357-84F2-1EC8619FADA6}\Ad-AwareInstallation.exe" REMOVE=TRUE MODIFY=FALSE
        Ad-Aware-->C:\ProgramData\{CFBD8779-FAAB-4357-84F2-1EC8619FADA6}\Ad-AwareInstallation.exe
        Adobe Flash Player 10 ActiveX-->C:\Windows\system32\Macromed\Flash\uninstall_activeX.exe
        Adobe Flash Player 10 Plugin-->C:\Windows\system32\Macromed\Flash\uninstall_plugin.exe
        Adobe Shockwave Player 11.5-->"C:\Windows\system32\Adobe\Shockwave 11\uninstaller.exe"
        Adobe Shockwave Player-->MsiExec.exe /X{AD72CFB4-C2BF-424E-9DF0-C7BAD1F30A11}
        AMD USB Audio Driver Filter-->MsiExec.exe /X{A3AB35FA-943E-4799-99DC-46EFD59E998F}
        AOL Toolbar 5.0-->"C:\Program Files\AOL\AOL Toolbar 5.0\uninstall.exe"
        Ask Toolbar-->MsiExec.exe /I{86D4B82A-ABED-442A-BE86-96357B70F4FE}
        Assistant de connexion Windows Live ID-->MsiExec.exe /X{10A44844-4465-456E-8C97-80BDD4F68845}
        Atheros Driver Installation Program-->C:\Program Files\InstallShield Installation Information\{C3A32068-8AB1-4327-BB16-BED9C6219DC7}\setup.exe -runfromtemp -l0x040c
        avast! Free Antivirus-->C:\Program Files\Alwil Software\Avast5\aswRunDll.exe "C:\Program Files\Alwil Software\Avast5\Setup\setiface.dll" RunSetup
        BitTorrent-->C:\Program Files\BitTorrent\uninst.exe
        Catalyst Control Center - Branding-->MsiExec.exe /I{187817E2-6407-461C-B59B-56CE73363D34}
        CCleaner (remove only)-->"C:\Program Files\CCleaner\uninst.exe"
        CyberLink DVD Suite-->"C:\Program Files\InstallShield Installation Information\{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}\Setup.exe" /z-uninstall
        CyberLink DVD Suite-->"C:\Program Files\InstallShield Installation Information\{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}\Setup.exe" /z-uninstall
        Downloadable Chime PC Suite Deluxe-->"C:\Program Files\Downloadable Chime PC Suite\unins000.exe"
        ESU for Microsoft Vista-->MsiExec.exe /I{3877C901-7B90-4727-A639-B6ED2DD59D43}
        EVEREST Ultimate Edition v5.02-->"C:\Program Files\Lavalys\EVEREST Ultimate Edition\unins000.exe"
        Favorit-->c:\users\gitiane\appdata\local\ykufk.bat
        FloorPlan 3D v6-->MsiExec.exe /I{5F9E742B-8FCB-48C3-9420-63136BD01DA1}
        Galerie de photos Windows Live-->MsiExec.exe /X{B131E59D-202C-43C6-84C9-68F0C37541F1}
        GIMP 2.4.1-->"C:\Program Files\GIMP-2.0\setup\unins000.exe"
        Google Toolbar for Internet Explorer-->"C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarManager_E582EA556D8DE101.exe" /uninstall
        Google Toolbar for Internet Explorer-->MsiExec.exe /I{18455581-E099-4BA8-BC6B-F34B2F06600C}
        HijackThis 2.0.2-->"C:\Program Files\trend micro\HijackThis.exe" /uninstall
        Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)-->C:\Windows\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall /qb+ REBOOTPROMPT=""
        Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)-->C:\Windows\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall {A7EEA2F2-BFCD-4A54-A575-7B81A786E658} /qb+ REBOOTPROMPT=""
        HP Active Support Library-->"C:\Program Files\InstallShield Installation Information\{CE7E3BE0-2DD3-4416-A690-F9E4A99A8CFF}\setup.exe" -runfromtemp -l0x0409 -removeonly
        HP Common Access Service Library-->MsiExec.exe /I{732A3F80-008B-4350-BD58-EC5AE98707B8}
        HP Customer Experience Enhancements-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\11\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{57A5AEC1-97FC-474D-92C4-908FCC2253D4}\setup.exe" -l0x9 -removeonly
        HP Customer Participation Program 9.0-->C:\Program Files\HP\Digital Imaging\ExtCapUninstall\hpzscr01.exe -datfile hpqhsc01.dat
        HP Games-->"C:\Program Files\HP Games\Uninstall.exe"
        HP Help and Support-->MsiExec.exe /I{0054A0F6-00C9-4498-B821-B5C9578F433E}
        HP Imaging Device Functions 9.0-->C:\Program Files\HP\Digital Imaging\DeviceManagement\hpzscr01.exe -datfile hpqbud01.dat
        HP MediaSmart DVD-->"C:\Program Files\InstallShield Installation Information\{DCCAD079-F92C-44DA-B258-624FC6517A5A}\setup.exe" /z-uninstall
        HP MediaSmart DVD-->"C:\Program Files\InstallShield Installation Information\{DCCAD079-F92C-44DA-B258-624FC6517A5A}\setup.exe" /z-uninstall
        HP MediaSmart Music/Photo/Video-->"C:\Program Files\InstallShield Installation Information\{B2EE25B9-5B00-4ACF-94F0-92433C28C39E}\setup.exe" /z-uninstall
        HP MediaSmart Music/Photo/Video-->"C:\Program Files\InstallShield Installation Information\{B2EE25B9-5B00-4ACF-94F0-92433C28C39E}\setup.exe" /z-uninstall /zMS
        HP MediaSmart SmartMenu-->MsiExec.exe /I{A7AC8E69-01FF-494E-9A2C-423B82CEA604}
        HP MediaSmart TV-->"C:\Program Files\InstallShield Installation Information\{67626E09-5366-4480-8F1E-93FADF50CA15}\setup.exe" /z-uninstall
        HP MediaSmart TV-->"C:\Program Files\InstallShield Installation Information\{67626E09-5366-4480-8F1E-93FADF50CA15}\setup.exe" /z-uninstall
        HP MediaSmart Webcam-->"C:\Program Files\InstallShield Installation Information\{01FB4998-33C4-4431-85ED-079E3EEFE75D}\setup.exe" /z-uninstall
        HP MediaSmart Webcam-->"C:\Program Files\InstallShield Installation Information\{01FB4998-33C4-4431-85ED-079E3EEFE75D}\setup.exe" /z-uninstall /z
        HP OCR Software 9.0-->C:\Program Files\HP\Digital Imaging\OCR\hpzscr01.exe -datfile hpqbud11.dat
        HP Photosmart All-In-One Software 9.0-->C:\Program Files\HP\Digital Imaging\{B22C19AE-6A67-4f28-B541-5AE72FB17A25}\setup\hpzscr01.exe -datfile hposcr15.dat
        HP Photosmart Essential 2.01-->C:\Program Files\HP\Digital Imaging\PhotoSmartEssential\hpzscr01.exe -datfile hpqbud13.dat
        HP Product Detection-->MsiExec.exe /X{CAE7D1D9-3794-4169-B4DD-964ADBC534EE}
        HP Quick Launch Buttons 6.40 L1-->C:\Program Files\InstallShield Installation Information\{34D2AB40-150D-475D-AE32-BD23FB5EE355}\setup.exe -runfromtemp -l0x040c uninst
        HP Solution Center 9.0-->C:\Program Files\HP\Digital Imaging\eSupport\hpzscr01.exe -datfile hpqbud05.dat
        HP Total Care Advisor-->MsiExec.exe /X{154A4184-1A3D-4BF9-A5AE-4FA1660445F3}
        HP Total Care Setup-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\11\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{95A747E0-DF19-46CB-A622-20A0107201BD}\setup.exe" -l0x9 -removeonly
        HP Update-->MsiExec.exe /X{47F36D92-E58E-456D-B73C-3382737E4C42}
        HP User Guides 0126-->MsiExec.exe /X{36E90C09-EB23-4EAC-8B47-12C0CA5DBD3A}
        HP Wireless Assistant-->MsiExec.exe /X{E5E29403-3D25-40C6-892B-F9FEE2A95585}
        HPAsset component for HP Active Support Library-->MsiExec.exe /X{669D4A35-146B-4314-89F1-1AC3D7B88367}
        HPNetworkAssistant-->MsiExec.exe /I{228C6B46-64E2-404E-898A-EF0830603EF4}
        HPSSupply-->MsiExec.exe /X{487B0B9B-DCD4-440D-89A0-A6EDE1A545A3}
        IDT Audio-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\10\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{E3A5A8AB-58F6-45FF-AFCB-C9AE18C05001}\setup.exe" -l0x40c -remove -removeonly
        Installation Windows Live-->C:\Program Files\Windows Live\Installer\wlarp.exe
        Installation Windows Live-->MsiExec.exe /I{46ABBC54-1872-4AA3-95E2-F2C063A63F31}
        Java(TM) 6 Update 17-->MsiExec.exe /X{26A24AE4-039D-4CA4-87B4-2F83216016FF}
        JMicron Flash Media Controller Driver-->"C:\Program Files\JMicron\JMCR_DIR\setup.exe" delpkg
        Junk Mail filter update-->MsiExec.exe /I{E2DFE069-083E-4631-9B6C-43C48E991DE5}
        Kiwee Chatbar-->C:\Program Files\AGI\core\4.1\InstallerGUI.exe uninstall KiweeToolbar KiweeChatbar
        Kiwee Toolbar for Firefox-->C:\Program Files\AGI\core\4.1\InstallerGUI.exe uninstall UnifiedToolbar UnifiedToolbarFF
        Kiwee Toolbar for Internet Explorer-->C:\Program Files\AGI\core\4.1\InstallerGUI.exe uninstall UnifiedToolbar UnifiedToolbarIE
        LabelPrint-->"C:\Program Files\InstallShield Installation Information\{C59C179C-668D-49A9-B6EA-0121CCFC1243}\Setup.exe" /z-uninstall
        LabelPrint-->"C:\Program Files\InstallShield Installation Information\{C59C179C-668D-49A9-B6EA-0121CCFC1243}\Setup.exe" /z-uninstall
        Les Sims™ 2 Demeures de rêve Kit-->C:\Program Files\EA GAMES\Les Sims 2 Demeures de rêve Kit\EAUninstall.exe
        Les Sims™ 2 Double Deluxe-->C:\Program Files\EA GAMES\Les Sims 2 Double Deluxe\EAUninstall.exe
        LightScribe System Software 1.14.17.1-->MsiExec.exe /X{0E7DBD52-B097-4F2B-A7C7-F105B0D20FDB}
        Magic Desktop-->C:\Windows\system32\ezMDUninstall.exe
        Microsoft .NET Framework 3.5 Language Pack SP1 - fra-->MsiExec.exe /I{3E31821C-7917-367E-938E-E65FC413EA31}
        Microsoft .NET Framework 3.5 SP1-->c:\Windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setup.exe
        Microsoft .NET Framework 3.5 SP1-->MsiExec.exe /I{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}
        Microsoft Choice Guard-->MsiExec.exe /X{F0E12BBA-AD66-4022-A453-A1C8A0C4D570}
        Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-0016-040C-0000-0000000FF1CE} /uninstall {AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}
        Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-0018-040C-0000-0000000FF1CE} /uninstall {AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}
        Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001B-040C-0000-0000000FF1CE} /uninstall {AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}
        Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-006E-040C-0000-0000000FF1CE} /uninstall {B165D3C2-40AE-4D39-86F7-E5C87C4264C0}
        Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-00A1-040C-0000-0000000FF1CE} /uninstall {AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}
        Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {0B36C6D6-F5D8-4EAF-BF94-4376A230AD5B}
        Microsoft Office Excel MUI (French) 2007-->MsiExec.exe /X{90120000-0016-040C-0000-0000000FF1CE}
        Microsoft Office Home and Student 2007-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE12\Office Setup Controller\setup.exe" /uninstall HOMESTUDENTR /dll OSETUP.DLL
        Microsoft Office Home and Student 2007-->MsiExec.exe /X{91120000-002F-0000-0000-0000000FF1CE}
        Microsoft Office Live Add-in 1.4-->MsiExec.exe /I{AE3CF174-872C-46C6-B9F6-C0593F3BC7B8}
        Microsoft Office OneNote MUI (French) 2007-->MsiExec.exe /X{90120000-00A1-040C-0000-0000000FF1CE}
        Microsoft Office PowerPoint MUI (French) 2007-->MsiExec.exe /X{90120000-0018-040C-0000-0000000FF1CE}
        Microsoft Office PowerPoint Viewer 2007 (French)-->MsiExec.exe /X{95120000-00AF-040C-0000-0000000FF1CE}
        Microsoft Office Proof (Arabic) 2007-->MsiExec.exe /X{90120000-001F-0401-0000-0000000FF1CE}
        Microsoft Office Proof (Dutch) 2007-->MsiExec.exe /X{90120000-001F-0413-0000-0000000FF1CE}
        Microsoft Office Proof (English) 2007-->MsiExec.exe /X{90120000-001F-0409-0000-0000000FF1CE}
        Microsoft Office Proof (French) 2007-->MsiExec.exe /X{90120000-001F-040C-0000-0000000FF1CE}
        Microsoft Office Proof (German) 2007-->MsiExec.exe /X{90120000-001F-0407-0000-0000000FF1CE}
        Microsoft Office Proof (Spanish) 2007-->MsiExec.exe /X{90120000-001F-0C0A-0000-0000000FF1CE}
        Microsoft Office Proofing (French) 2007-->MsiExec.exe /X{90120000-002C-040C-0000-0000000FF1CE}
        Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001F-0401-0000-0000000FF1CE} /uninstall {14809F99-C601-4D4A-9391-F1E8FAA964C5}
        Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001F-0407-0000-0000000FF1CE} /uninstall {A0516415-ED61-419A-981D-93596DA74165}
        Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001F-0409-0000-0000000FF1CE} /uninstall {ABDDE972-355B-4AF1-89A8-DA50B7B5C045}
        Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001F-040C-0000-0000000FF1CE} /uninstall {F580DDD5-8D37-4998-968E-EBB76BB86787}
        Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001F-0413-0000-0000000FF1CE} /uninstall {D66D5A44-E480-4BA4-B4F2-C554F6B30EBB}
        Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001F-0C0A-0000-0000000FF1CE} /uninstall {187308AB-5FA7-4F14-9AB9-D290383A10D9}
        Microsoft Office Shared MUI (French) 2007-->MsiExec.exe /X{90120000-006E-040C-0000-0000000FF1CE}
        Microsoft Office Word MUI (French) 2007-->MsiExec.exe /X{90120000-001B-040C-0000-0000000FF1CE}
        Microsoft Search Enhancement Pack-->MsiExec.exe /X{4CBA3D4C-8F51-4D60-B27E-F6B641C571E7}
        Microsoft Silverlight-->MsiExec.exe /X{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}
        Microsoft SQL Server 2005 Compact Edition [ENU]-->MsiExec.exe /I{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}
        Microsoft Sync Framework Runtime Native v1.0 (x86)-->MsiExec.exe /I{8A74E887-8F0F-4017-AF53-CBA42211AAA5}
        Microsoft Sync Framework Services Native v1.0 (x86)-->MsiExec.exe /I{BD64AF4A-8C80-4152-AD77-FCDDF05208AB}
        Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053-->MsiExec.exe /X{770657D0-A123-3C07-8E44-1C83EC895118}
        Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{7299052b-02a4-4627-81f2-1818da5d550d}
        Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{A49F249F-0C91-497F-86DF-B2585E8E76B7}
        Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148-->MsiExec.exe /X{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}
        Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148-->MsiExec.exe /X{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}
        Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729-->MsiExec.exe /X{3C3D696B-0DB7-3C6D-A356-3DB8CE541918}
        Microsoft Works-->MsiExec.exe /I{3B160861-7250-451E-B5EE-8B92BF30A710}
        Mise à jour Microsoft Office Excel 2007 Help (KB963678)-->msiexec /package {90120000-0016-040C-0000-0000000FF1CE} /uninstall {B761869A-B85C-40E2-994C-A1CE78AC8F2C}
        Mise à jour Microsoft Office Powerpoint 2007 Help (KB963669)-->msiexec /package {90120000-0018-040C-0000-0000000FF1CE} /uninstall {C3DCA38E-005E-41BA-A52A-7C3429F351C3}
        Mise à jour Microsoft Office Word 2007 Help (KB963665)-->msiexec /package {90120000-001B-040C-0000-0000000FF1CE} /uninstall {81536A04-DBFB-4DB3-978F-0F284590C223}
        Module de compatibilité pour Microsoft Office System 2007-->MsiExec.exe /X{90120000-0020-040C-0000-0000000FF1CE}
        Module linguistique Microsoft .NET Framework 3.5 SP1- fra-->c:\Windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 Language Pack SP1 - fra\setup.exe
        Mozilla Firefox (3.6)-->C:\Program Files\Mozilla Firefox\uninstall\helper.exe
        MSVCRT-->MsiExec.exe /I{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}
        MSXML 4.0 SP2 (KB954430)-->MsiExec.exe /I{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
        MSXML 4.0 SP2 (KB973688)-->MsiExec.exe /I{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}
        muvee Reveal-->MsiExec.exe /X{DD35C328-F115-BEDA-6EEE-E00C5AACCCBC}
        My Web Search (Cursor Mania)-->rundll32 C:\PROGRA~1\MYWEBS~1\bar\1.bin\mwsbar.dll,O
        Neuf - Kit de connexion-->C:\Program Files\Neuf\Kit\uninstall.exe
        Norton Internet Security-->MsiExec.exe /I{7B15D70E-9449-4CFB-B9BC-798465B2BD5C}
        Norton Security Scan-->C:\Program Files\NortonInstaller\{397E31AA-0D78-4649-A01C-339D73A2ED35}\NSS\LicenseType\2.3.0.44\InstStub.exe /X
        OpenOffice.org 3.1-->MsiExec.exe /I{0FA44E79-CD7D-4E8D-A2EE-26FE05F509B6}
        Outil de téléchargement Windows Live-->MsiExec.exe /I{205C6BDD-7B73-42DE-8505-9A093F35A238}
        Package de pilotes Windows - ENE (enecir) HIDClass (09/04/2008 2.6.0.0)-->C:\PROGRA~1\DIFX\270581355A767BF1\DPInst.exe /u C:\Windows\System32\DriverStore\FileRepository\enecir.inf_1a3c82dd\enecir.inf
        Power2Go-->"C:\Program Files\InstallShield Installation Information\{40BF1E83-20EB-11D8-97C5-0009C5020658}\Setup.exe" /z-uninstall
        Power2Go-->"C:\Program Files\InstallShield Installation Information\{40BF1E83-20EB-11D8-97C5-0009C5020658}\Setup.exe" /z-uninstall
        PowerDirector-->"C:\Program Files\InstallShield Installation Information\{CB099890-1D5F-11D5-9EA9-0050BAE317E1}\Setup.exe" /z-uninstall
        PowerDirector-->"C:\Program Files\InstallShield Installation Information\{CB099890-1D5F-11D5-9EA9-0050BAE317E1}\Setup.exe" /z-uninstall
        ProtectSmart Hard Drive Protection-->MsiExec.exe /X{9D615069-AA8F-4E89-AE9D-77AAE90F529F}
        Realtek 8169 8168 8101E 8102E Ethernet Driver-->C:\Program Files\InstallShield Installation Information\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}\setup.exe -runfromtemp -removeonly
        Sandlot Games Client Services 1.2.2-->"C:\Program Files\Common Files\Sandlot Shared\unins000.exe"
        Security Update for 2007 Microsoft Office System (KB969559)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {69F52148-9BF6-4CDC-BF76-103DEAF3DD08}
        Security Update for 2007 Microsoft Office System (KB973704)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {E626DC89-A787-4553-9BB3-DC2EC7E1593F}
        Security Update for Microsoft Office Excel 2007 (KB973593)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {7D6255E3-3423-4D8B-A328-F6F8D28DD5FE}
        Security Update for Microsoft Office PowerPoint 2007 (KB957789)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {7559E742-FF9F-4FAE-B279-008ED296CB4D}
        Security Update for Microsoft Office system 2007 (972581)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {3D019598-7B59-447A-80AE-815B703B84FF}
        Security Update for Microsoft Office system 2007 (KB969613)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {5ECEB317-CBE9-4E08-AB10-756CB6F0FB6C}
        Security Update for Microsoft Office system 2007 (KB974234)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {FCD742B9-7A55-44BC-A776-F795F21FEDDC}
        Security Update for Microsoft Office Visio Viewer 2007 (KB973709)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {71127777-8B2C-4F97-AF7A-6CF8CAC8224D}
        Shareware.Pro-FR Toolbar-->C:\PROGRA~1\SHAREW~1.PRO\UNWISE.EXE /U C:\PROGRA~1\SHAREW~1.PRO\INSTALL.LOG
        SPORE Creature Creator Trial Edition-->"C:\Program Files\HP Games\SPORE Creature Creator Trial Edition\Uninstall.exe"
        SweetIM for Messenger 2.8-->MsiExec.exe /X{DF6F459C-8B89-4F88-B63F-A2E136BB6B79}
        SweetIM Toolbar for Internet Explorer 3.6-->MsiExec.exe /X{31CF6C0E-51F0-41D2-B088-A6A143C4303C}
        Synaptics Pointing Device Driver-->rundll32.exe "C:\Program Files\Synaptics\SynTP\SynISDLL.dll",standAloneUninstall
        Update for 2007 Microsoft Office System (KB967642)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {C444285D-5E4F-48A4-91DD-47AAAA68E92D}
        Update for Microsoft .NET Framework 3.5 SP1 (KB963707)-->C:\Windows\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall {B2AE9C82-DC7B-3641-BFC8-87275C4F3607} /qb+ REBOOTPROMPT=""
        Update for Microsoft Office InfoPath 2007 (KB976416)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {432C5EE4-8096-4FF1-95E1-65219365DFF7}
        Update for Microsoft Office Word 2007 (KB974561)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {0CDDBAA2-2111-4A0E-A1B0-76C40C635331}
        VideoLAN VLC media player 0.8.6c-->C:\Program Files\VideoLAN\VLC\uninstall.exe
        Windows Live Call-->MsiExec.exe /I{82C7B308-0BDD-49D8-8EA5-9CD3A3F9DF41}
        Windows Live Communications Platform-->MsiExec.exe /I{3B4E636E-9D65-4D67-BA61-189800823F52}
        Windows Live Contrôle parental-->MsiExec.exe /X{D5D81435-B8DE-4CAF-867F-7998F2B92CFC}
        Windows Live FolderShare-->MsiExec.exe /X{2075CB0A-D26F-4DAA-B424-5079296B43BA}
        Windows Live Mail-->MsiExec.exe /I{5DD76286-9BE7-4894-A990-E905E91AC818}
        Windows Live Messenger-->MsiExec.exe /X{770F1BEC-2871-4E70-B837-FB8525FFA3B1}
        Windows Live Movie Maker-->MsiExec.exe /X{53B20C18-D8D4-4588-8737-9BBFE303C354}
        Windows Live Toolbar-->MsiExec.exe /X{F7D27C70-90F5-49B9-B188-0A133C0CE353}
        Windows Live Writer-->MsiExec.exe /X{4634B21A-CC07-4396-890C-2B8168661FEA}
        WinZip 12.1-->MsiExec.exe /X{CD95F661-A5C4-44F5-A6AA-ECDD91C240B8}

        ======Security center information======

        AS: Windows Defender

        ======System event log======

        Computer Name: PC-de-gitiane
        Event Code: 4376
        Message: Servicing a requis un redémarrage pour terminer la définition du package KB968816(Security Update) à l’état Installation demandée(Install Requested)
        Record Number: 13110
        Source Name: Microsoft-Windows-Servicing
        Time Written: 20091001082128.000000-000
        Event Type: Avertissement
        User: AUTORITE NT\SYSTEM

        Computer Name: PC-de-gitiane
        Event Code: 4376
        Message: Servicing a requis un redémarrage pour terminer la définition du package KB968816(Security Update) à l’état Installation demandée(Install Requested)
        Record Number: 13108
        Source Name: Microsoft-Windows-Servicing
        Time Written: 20091001082128.000000-000
        Event Type: Avertissement
        User: AUTORITE NT\SYSTEM

        Computer Name: PC-de-gitiane
        Event Code: 4376
        Message: Servicing a requis un redémarrage pour terminer la définition du package KB968816(Security Update) à l’état Installation demandée(Install Requested)
        Record Number: 13105
        Source Name: Microsoft-Windows-Servicing
        Time Written: 20091001082128.000000-000
        Event Type: Avertissement
        User: AUTORITE NT\SYSTEM

        Computer Name: PC-de-gitiane
        Event Code: 4376
        Message: Servicing a requis un redémarrage pour terminer la définition du package KB968816(Security Update) à l’état Installation demandée(Install Requested)
        Record Number: 13101
        Source Name: Microsoft-Windows-Servicing
        Time Written: 20091001082128.000000-000
        Event Type: Avertissement
        User: AUTORITE NT\SYSTEM

        Computer Name: PC-de-gitiane
        Event Code: 4376
        Message: Servicing a requis un redémarrage pour terminer la définition du package KB968816(Security Update) à l’état Installation demandée(Install Requested)
        Record Number: 13098
        Source Name: Microsoft-Windows-Servicing
        Time Written: 20091001082127.000000-000
        Event Type: Avertissement
        User: AUTORITE NT\SYSTEM

        =====Application event log=====

        Computer Name: PC-de-gitiane
        Event Code: 1000
        Message: Application défaillante TVAgent.exe, version 2.1.1.1321, horodatage 0x49772d0a, module défaillant MFC71.DLL, version 7.10.3077.0, horodatage 0x3e77fdfd, code d’exception 0xc0000005, décalage d’erreur 0x0002a3a3, ID du processus 0xebc, heure de début de l’application 0x01ca41a310f790c8.
        Record Number: 487
        Source Name: Application Error
        Time Written: 20090930083414.000000-000
        Event Type: Erreur
        User:

        Computer Name: PC-de-gitiane
        Event Code: 0
        Message: Impossible de se connecter au serveur distant System.Net.Sockets.SocketException: Une tentative de connexion a échoué car le parti connecté n'a pas répondu convenablement au-delà d'une certaine durée ou une connexion établie a échoué car l'hôte de connexion n'a pas répondu 15.216.36.57:443
        à System.Net.Sockets.Socket.DoConnect(EndPoint endPointSnapshot, SocketAddress socketAddress)
        à System.Net.Sockets.Socket.InternalConnect(EndPoint remoteEP)
        à System.Net.ServicePoint.ConnectSocketInternal(Boolean connectFailure, Socket s4, Socket s6, Socket& socket, IPAddress& address, ConnectSocketState state, IAsyncResult asyncResult, Int32 timeout, Exception& exception) à System.Net.HttpWebRequest.GetRequestStream()
        à ConsoleApplication.PostRegistrationData.PostRequest(String postData)
        Record Number: 486
        Source Name: HP AdvisorUpdate
        Time Written: 20090930081300.000000-000
        Event Type: Erreur
        User:

        Computer Name: PC-de-gitiane
        Event Code: 10
        Message: Le filtre d’événement avec la requête « SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99 » n’a pas pu être réactivé dans l’espace de noms « //./root/CIMV2 » à cause de l’erreur 0x80041003. Les événements ne peuvent pas être délivrés à travers ce filtre tant que le problème ne sera pas corrigé.
        Record Number: 479
        Source Name: Microsoft-Windows-WMI
        Time Written: 20090930075352.000000-000
        Event Type: Erreur
        User:

        Computer Name: PC-de-gitiane
        Event Code: 1530
        Message: Windows a détecté que votre fichier de Registre est toujours utilisé par d'autres applications ou services. Le fichier va être déchargé. Les applications ou services qui ont accès à votre Registre risquent de ne pas fonctionner correctement après cela.

        DÉTAIL -
        1 user registry handles leaked from \Registry\User\S-1-5-21-3954504066-4099877028-1251247519-1000:
        Process 556 (\Device\HarddiskVolume1\Windows\System32\winlogon.exe) has opened key \REGISTRY\USER\S-1-5-21-3954504066-4099877028-1251247519-1000

        Record Number: 458
        Source Name: Microsoft-Windows-User Profiles Service
        Time Written: 20090929194749.000000-000
        Event Type: Avertissement
        User: AUTORITE NT\SYSTEM

        Computer Name: PC-de-gitiane
        Event Code: 4621
        Message: Le système d'événements de COM+ n'a pas pu supprimer l'objet EventSystem.EventSubscription {CEB8B221-89C5-41A8-98CE-79B413BF150B}-{00000000-0000-0000-0000-000000000000}-{00000000-0000-0000-0000-000000000000}. HRESULT : 80070005.
        Record Number: 455
        Source Name: Microsoft-Windows-EventSystem
        Time Written: 20090929194747.000000-000
        Event Type: Erreur
        User:

        =====Security event log=====

        Computer Name: PC-de-gitiane
        Event Code: 1100
        Message: Le service d’enregistrement des événements a été arrêté.
        Record Number: 1084
        Source Name: Microsoft-Windows-Eventlog
        Time Written: 20090929194752.317200-000
        Event Type: Succès de l'audit
        User:

        Computer Name: PC-de-gitiane
        Event Code: 4647
        Message: Fermeture de session initiée par l’utilisateur :

        Sujet :
        ID de sécurité : S-1-5-21-3954504066-4099877028-1251247519-1000
        Nom du compte : gitiane
        Domaine du compte : PC-de-gitiane
        ID d’ouverture de session : 0x7fd5e

        Cet événement est généré lorsqu’une fermeture de session est initiée, mais que le nombre de références du jeton n’étant pas zéro, la session ouverte ne peut pas être supprimée. Aucune autre activité initiée par l’utilisateur ne peut se produire. Cet événement peut être interprété comme un événement de fermeture de session.
        Record Number: 1083
        Source Name: Microsoft-Windows-Security-Auditing
        Time Written: 20090929194749.727600-000
        Event Type: Succès de l'audit
        User:

        Computer Name: PC-de-gitiane
        Event Code: 4905
        Message: Une tentative d’annulation d’inscription de la source d’un événement de sécurité a été effectuée.

        Sujet :
        ID de sécurité : S-1-5-18
        Nom du compte : WIN-VI1NVI8KK8T$
        Domaine du compte : WORKGROUP
        ID d’ouverture de session : 0x3e7

        Processus :
        ID du processus : 0x938
        Nom du processus : C:\Windows\System32\VSSVC.exe

        Source de l’événement :
        Nom de la source : VSSAudit
        ID de la source de l’événement : 0x1093da
        Record Number: 1082
        Source Name: Microsoft-Windows-Security-Auditing
        Time Written: 20090929153106.815200-000
        Event Type: Succès de l'audit
        User:

        Computer Name: PC-de-gitiane
        Event Code: 4904
        Message: Une tentative d’inscription de la source d’un événement de sécurité a été effectuée.

        Sujet :
        ID de sécurité : S-1-5-18
        Nom du compte : WIN-VI1NVI8KK8T$
        Domaine du compte : WORKGROUP
        ID d’ouverture de session : 0x3e7

        Processus :
        ID du processus : 0x938
        Nom du processus : C:\Windows\System32\VSSVC.exe

        Source de l’événement :
        Nom de la source : VSSAudit
        ID de la source de l’événement : 0x1093da
        Record Number: 1081
        Source Name: Microsoft-Windows-Security-Auditing
        Time Written: 20090929153106.815200-000
        Event Type: Succès de l'audit
        User:

        Computer Name: PC-de-gitiane
        Event Code: 1102
        Message: Le journal d’audit a été effacé.
        Objet :
        ID de sécurité : S-1-5-21-3954504066-4099877028-1251247519-1000
        Nom de compte : gitiane
        Nom de domaine : PC-de-gitiane
        ID de connexion : 0x7fcfd
        Record Number: 1080
        Source Name: Microsoft-Windows-Eventlog
        Time Written: 20090929153054.928000-000
        Event Type: Succès de l'audit
        User:

        ======Environment variables======

        "ComSpec"=%SystemRoot%\system32\cmd.exe
        "FP_NO_HOST_CHECK"=NO
        "OS"=Windows_NT
        "Path"=%CommonProgramFiles%\Microsoft Shared\Windows Live;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;C:\Program Files\CyberLink\Power2Go;C:\Program Files\ATI Technologies\ATI.ACE\Core-Static
        "PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC
        "PROCESSOR_ARCHITECTURE"=x86
        "TEMP"=%SystemRoot%\TEMP
        "TMP"=%SystemRoot%\TEMP
        "USERNAME"=SYSTEM
        "windir"=%SystemRoot%
        "PROCESSOR_LEVEL"=17
        "PROCESSOR_IDENTIFIER"=x86 Family 17 Model 3 Stepping 1, AuthenticAMD
        "PROCESSOR_REVISION"=0301
        "NUMBER_OF_PROCESSORS"=2
        "TRACE_FORMAT_SEARCH_PATH"=\\NTREL202.ntdev.corp.microsoft.com\4F18C3A5-CA09-4DBD-B6FC-219FDD4C6BE0\TraceFormat
        "DFSTRACINGON"=FALSE
        "OnlineServices"=Online Services
        "Platform"=MCD
        "PCBRAND"=Pavilion

        -----------------EOF-----------------
        Logfile of random's system information tool 1.06 (written by random/random)
        Run by gitiane at 2010-02-05 16:23:52
        Microsoft® Windows Vista™ Édition Familiale Premium Service Pack 2
        System drive C: has 171 GB (58%) free of 294 GB
        Total RAM: 3069 MB (50% free)

        Logfile of Trend Micro HijackThis v2.0.2
        Scan saved at 16:24:21, on 05/02/2010
        Platform: Windows Vista SP2 (WinNT 6.00.1906)
        MSIE: Internet Explorer v8.00 (8.00.6001.18882)
        Boot mode: Normal

        Running processes:
        C:\Windows\system32\taskeng.exe
        C:\Windows\system32\Dwm.exe
        C:\Windows\Explorer.EXE
        C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
        C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
        C:\Program Files\Hewlett-Packard\Media\DVD\DVDAgent.exe
        C:\Program Files\Hewlett-Packard\TouchSmart\Media\TSMAgent.exe
        C:\Program Files\Hewlett-Packard\TouchSmart\Media\Kernel\CLML\CLMLSvc.exe
        C:\Program Files\Hewlett-Packard\HP MediaSmart\SmartMenu.exe
        C:\Program Files\Windows Defender\MSASCui.exe
        C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QLBCTRL.exe
        C:\Program Files\HP\HP Software Update\hpwuSchd2.exe
        C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
        C:\Program Files\MyWebSearch\bar\1.bin\M3SRCHMN.EXE
        C:\Program Files\IDT\WDM\sttray.exe
        C:\Program Files\Kiwee Toolbar\3.1\kwtbaim.exe
        C:\Program Files\Alwil Software\Avast5\AvastUI.exe
        C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe
        C:\Program Files\Hewlett-Packard\HP Advisor\HPAdvisor.exe
        C:\Program Files\MyWebSearch\bar\1.bin\MWSOEMON.EXE
        C:\Users\gitiane\AppData\Local\etriaw.exe
        C:\Program Files\Windows Media Player\wmpnscfg.exe
        C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
        C:\Windows\system32\wbem\unsecapp.exe
        C:\Program Files\WinZip\WZQKPICK.EXE
        C:\Users\gitiane\AppData\Roaming\Microsoft\Notification de cadeaux MSN\lsnfier.exe
        C:\Program Files\OpenOffice.org 3\program\soffice.exe
        C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe
        C:\Program Files\OpenOffice.org 3\program\soffice.bin
        C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
        C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
        C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
        C:\Program Files\Hewlett-Packard\Shared\hpqToaster.exe
        C:\Program Files\Mozilla Firefox\firefox.exe
        C:\Users\gitiane\Downloads\RSIT.exe
        C:\Program Files\trend micro\gitiane.exe

        R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr?cobrand=hp-notebook.msn.com&ocid=HPDHP&pc=HPNTDF
        R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://actus.sfr.fr
        R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://actus.sfr.fr
        R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://search.imgag.com/?appid=kwtb&c=EMKWO50024&sbs=3&sc=2&f=web&vernum=3.1&uid=&did={3bfb3d72-5ab5-4486-a48b-2f631155e49f}&q=%20
        R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr?cobrand=hp-notebook.msn.com&ocid=HPDHP&pc=HPNTDF
        R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://actus.sfr.fr
        R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
        R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr?cobrand=hp-notebook.msn.com&ocid=HPDHP&pc=HPNTDF
        R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = https://actus.sfr.fr
        R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
        R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
        R3 - URLSearchHook: agihelper.AGUtils - {0BC6E3FA-78EF-4886-842C-5A1258C4455A} - mscoree.dll (file missing)
        F2 - REG:system.ini: UserInit=C:\Windows\system32\ezShellStart.exe
        O1 - Hosts: ::1 localhost
        O2 - BHO: MyWebSearch Search Assistant BHO - {00A6FAF1-072E-44cf-8957-5838F569A31D} - C:\Program Files\MyWebSearch\bar\1.bin\MWSSRCAS.DLL
        O2 - BHO: mwsBar BHO - {07B18EA1-A523-4961-B6BB-170DE4475CCA} - C:\Program Files\MyWebSearch\bar\1.bin\MWSBAR.DLL
        O2 - BHO: agihelper.AGUtils - {0bc6e3fa-78ef-4886-842c-5a1258c4455a} - mscoree.dll (file missing)
        O2 - BHO: Shareware.Pro-FR Toolbar - {280b5d37-4a76-467a-b3d6-942fca90acde} - C:\Program Files\Shareware.Pro-FR\tbSha1.dll
        O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
        O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
        O2 - BHO: AOL Toolbar BHO - {7C554162-8CB7-45A4-B8F4-8EA1C75885F9} - C:\Program Files\AOL\AOL Toolbar 5.0\aoltb.dll
        O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live ID - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
        O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
        O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.2.4204.1700\swg.dll
        O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_B7C5AC242193BB3E.dll
        O2 - BHO: Ask Toolbar BHO - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll
        O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
        O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
        O3 - Toolbar: AOL Toolbar - {DE9C389F-3316-41A7-809B-AA305ED9D922} - C:\Program Files\AOL\AOL Toolbar 5.0\aoltb.dll
        O3 - Toolbar: Ask Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll
        O3 - Toolbar: Shareware.Pro-FR Toolbar - {280b5d37-4a76-467a-b3d6-942fca90acde} - C:\Program Files\Shareware.Pro-FR\tbSha1.dll
        O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
        O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
        O3 - Toolbar: My Web Search - {07B18EA9-A523-4961-B6BB-170DE4475CCA} - C:\Program Files\MyWebSearch\bar\1.bin\MWSBAR.DLL
        O3 - Toolbar: Kiwee Toolbar - {1c99b848-84cb-4ce4-8cd8-ed5719484d9f} - mscoree.dll (file missing)
        O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
        O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
        O4 - HKLM\..\Run: [DVDAgent] "C:\Program Files\Hewlett-Packard\Media\DVD\DVDAgent.exe"
        O4 - HKLM\..\Run: [TSMAgent] "C:\Program Files\Hewlett-Packard\TouchSmart\Media\TSMAgent.exe"
        O4 - HKLM\..\Run: [CLMLServer for HP TouchSmart] "C:\Program Files\Hewlett-Packard\TouchSmart\Media\Kernel\CLML\CLMLSvc.exe"
        O4 - HKLM\..\Run: [TVAgent] "C:\Program Files\Hewlett-Packard\Media\TV\TVAgent.exe"
        O4 - HKLM\..\Run: [UCam_Menu] "C:\Program Files\Hewlett-Packard\Media\Webcam\MUITransfer\MUIStartMenu.exe" "C:\Program Files\Hewlett-Packard\Media\Webcam" update "Software\Hewlett-Packard\Media\Webcam"
        O4 - HKLM\..\Run: [SmartMenu] %ProgramFiles%\Hewlett-Packard\HP MediaSmart\SmartMenu.exe
        O4 - HKLM\..\Run: [UpdateLBPShortCut] "C:\Program Files\CyberLink\LabelPrint\MUITransfer\MUIStartMenu.exe" "C:\Program Files\CyberLink\LabelPrint" UpdateWithCreateOnce "Software\CyberLink\LabelPrint\2.5"
        O4 - HKLM\..\Run: [UpdatePSTShortCut] "C:\Program Files\CyberLink\DVD Suite\MUITransfer\MUIStartMenu.exe" "C:\Program Files\CyberLink\DVD Suite" UpdateWithCreateOnce "Software\CyberLink\PowerStarter"
        O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
        O4 - HKLM\..\Run: [QlbCtrl.exe] C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe /Start
        O4 - HKLM\..\Run: [UpdateP2GoShortCut] "C:\Program Files\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe" "C:\Program Files\CyberLink\Power2Go" UpdateWithCreateOnce "SOFTWARE\CyberLink\Power2Go\6.0"
        O4 - HKLM\..\Run: [UpdatePDIRShortCut] "C:\Program Files\CyberLink\PowerDirector\MUITransfer\MUIStartMenu.exe" "C:\Program Files\CyberLink\PowerDirector" UpdateWithCreateOnce "SOFTWARE\CyberLink\PowerDirector\7.0"
        O4 - HKLM\..\Run: [HP Health Check Scheduler] c:\Program Files\Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe
        O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
        O4 - HKLM\..\Run: [WirelessAssistant] C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
        O4 - HKLM\..\Run: [MyWebSearch Plugin] rundll32 C:\PROGRA~1\MYWEBS~1\bar\1.bin\M3PLUGIN.DLL,UPF
        O4 - HKLM\..\Run: [My Web Search Bar Search Scope Monitor] "C:\PROGRA~1\MYWEBS~1\bar\1.bin\m3SrchMn.exe" /m=2 /w /h
        O4 - HKLM\..\Run: [MyWebSearch Email Plugin] C:\PROGRA~1\MYWEBS~1\bar\1.bin\mwsoemon.exe
        O4 - HKLM\..\Run: [SysTrayApp] %ProgramFiles%\IDT\WDM\sttray.exe
        O4 - HKLM\..\Run: [KiweeHook] "C:\Program Files\Kiwee Toolbar\3.1\kwtbaim.exe"
        O4 - HKLM\..\Run: [avast5] C:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe /nogui
        O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
        O4 - HKCU\..\Run: [LightScribe Control Panel] C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe -hidden
        O4 - HKCU\..\Run: [HPAdvisor] C:\Program Files\Hewlett-Packard\HP Advisor\HPAdvisor.exe autorun=AUTORUN
        O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
        O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
        O4 - HKCU\..\Run: [MyWebSearch Email Plugin] C:\PROGRA~1\MYWEBS~1\bar\1.bin\mwsoemon.exe
        O4 - HKCU\..\Run: [etriaw] "c:\users\gitiane\appdata\local\etriaw.exe" etriaw
        O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
        O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
        O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
        O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
        O4 - Startup: Notification de cadeaux MSN.lnk = C:\Users\gitiane\AppData\Roaming\Microsoft\Notification de cadeaux MSN\lsnfier.exe
        O4 - Startup: OpenOffice.org 3.1.lnk = C:\Program Files\OpenOffice.org 3\program\quickstart.exe
        O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
        O4 - Global Startup: WinZip Quick Pick.lnk = C:\Program Files\WinZip\WZQKPICK.EXE
        O8 - Extra context menu item: &Recherche AOL Toolbar - C:\ProgramData\AOL\ieToolbar\resources\fr-FR\local\search.html
        O8 - Extra context menu item: &Search - http://edits.mywebsearch.com/toolbaredits/menusearch.jhtml?p=ZCxdm924YYFR
        O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
        O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
        O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
        O9 - Extra button: Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
        O9 - Extra 'Tools' menuitem: &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
        O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
        O13 - Gopher Prefix:
        O16 - DPF: CabBuilder - http://kiw.imgag.com/imgag/kiw/toolbar/download/InstallerControl.cab
        O16 - DPF: {1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB} - http://ak.exe.imgfarm.com/images/nocache/funwebproducts/ei-4/CursorManiaInitialSetup1.0.1.1.cab
        O16 - DPF: {73ECB3AA-4717-450C-A2AB-D00DAD9EE203} (GMNRev Class) - http://h20270.www2.hp.com/ediags/gmn2/install/HPProductDetection2.cab
        O23 - Service: Andrea ST Filters Service (AESTFilters) - Andrea Electronics Corporation - C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_c92065b9\aestsrv.exe
        O23 - Service: AG Core Services (AGCoreService) - AG Interactive - C:\Program Files\AGI\core\4.1\AGCoreService.exe
        O23 - Service: Ati External Event Utility - ATI Technologies Inc. - C:\Windows\system32\Ati2evxx.exe
        O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
        O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
        O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
        O23 - Service: Com4QLBEx - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe
        O23 - Service: GameConsoleService - WildTangent, Inc. - C:\Program Files\HP Games\My HP Game Console\GameConsoleService.exe
        O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
        O23 - Service: HP Health Check Service - Hewlett-Packard - c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe
        O23 - Service: hpqwmiex - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
        O23 - Service: HP Service (hpsrv) - Hewlett-Packard Corporation - C:\Windows\system32\Hpservice.exe
        O23 - Service: Lavasoft Ad-Aware Service - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe
        O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
        O23 - Service: My Web Search Service (MyWebSearchService) - MyWebSearch.com - C:\PROGRA~1\MYWEBS~1\bar\1.bin\mwssvc.exe
        O23 - Service: Recovery Service for Windows - Unknown owner - C:\Program Files\SMINST\BLService.exe
        O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared files\RichVideo.exe
        O23 - Service: Audio Service (STacSV) - IDT, Inc. - C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_c92065b9\STacSV.exe
        O23 - Service: TV Background Capture Service (TVBCS) (TVCapSvc) - Unknown owner - C:\Program Files\Hewlett-Packard\Media\TV\Kernel\TV\TVCapSvc.exe
        O23 - Service: TV Task Scheduler (TVTS) (TVSched) - Unknown owner - C:\Program Files\Hewlett-Packard\Media\TV\Kernel\TV\TVSched.exe
        0
    2. crapoulou Modérateur
      Tu es bel et bien infecté.

      Dans la liste des programmes (Démarrer > Panneau de configuration > Ajout/Suppression de programmes), supprime ceci si tu le trouve :

      Ask Toolbar
      Favorit
      My Web Search

      ********

      Je te déconseille d’installer des toolbars (barres d’outils sur ton navigateur).
      Regarde cet article qui explique pourquoi les toolbars, c’est pas obligatoire :
      https://forum.malekal.com/viewtopic.php?f=45&t=6173
      Merci à Malekal pour cet article.
      Si tu lis bien, tu verras que souvent elles sont infectieuses car elles t’espionnent sur le net …
      Tu en as qui sont infectieuses !
      On va s'en charger.

      *******

      Tu as une infection Navipromo / Magic control.
      Télécharge sur le bureau Navilog1 (Merci à IL-MAFIOSO)
      = = = = >>> En cliquant ici <<< = = = =
      * Désactive tes logiciels de sécurité (antivirus, pare-feu, antispyware,…)
      * Clique droit sur "Navilog1" sur ton bureau que tu viens de télécharger et sélectionne "Exécuter en tant qu’administrateur"
      * Appuie sur le chiffre 1 de ton clavier puis sur la touche Entrée pour sélectionner la langue française.
      * Appuie sur une touche de ton clavier pour continuer... (Il te le sera demandé plusieurs fois).
      * Tape 1, puis appuie sur la touche Entrée de ton clavier pour sélectionner l’option "Recherche / Désinfection automatique"
      * Sois patient, cela peut prendre une dizaine de minutes voire plus.
      * Navilog1 t’informe que la recherche est terminée
      * Appuie sur une touche de ton clavier pour afficher le rapport qu’il a généré
      * Le rapport sera sauvegardé dans le fichier suivant : "cleannavi.txt" à la racine de ton disque dur (C:\cleannavi.txt).
      * Poste le rapport généré

      *********

      Recherche avec Ad-Remover :
      Télécharge Ad-Remover ( de Cyrildu17 / C_XX ) sur ton bureau :
      = = = =>>> En cliquant ici <<<= = = =

      /!\ Déconnectes toi et fermes toutes applications en cours, désactive ton antivirus le temps de la manipulation/!\

      * Double clique sur le programme d’installation, et installe le dans son emplacement par défaut. (C:\Program files)
      * Clique droit sur l’icône Ad-remover située sur ton bureau puis sélectionne "Exécuter en tant qu’administrateur".
      * Réponds ‘Oui‘ au message d’alerte automatique.
      * Au menu principal choisi l’option ‘S‘ et tape ensuite [Entrée]
      * Poste le rapport qui apparaît à la fin.

      (Le rapport est sauvegardé aussi sous C:\Ad-report(date).log)
      (CTRL+A Pour tout sélectionner, CTRL+C pour copier et CTRL+V pour coller)

      Note :

      "Process.exe", une composante de l’outil, est détecté par certains antivirus (AntiVir, Dr.Web, Kaspersky Anti-Virus) comme étant un RiskTool.
      Il ne s’agit pas d’un virus, mais d’un utilitaire destiné à mettre fin à des processus.
      0
      1. gigi21 Auteur
        voila le premier rapport
        Fix Navipromo version 4.0.6 commencé le 05/02/2010 17:03:01,84

        !!! Attention,ce rapport peut indiquer des fichiers/programmes légitimes!!!
        !!! Postez ce rapport sur le forum pour le faire analyser !!!

        Outil exécuté depuis C:\Program Files\navilog1

        Mise à jour le 03.01.2010 à 11h00 par IL-MAFIOSO

        Microsoft® Windows Vista™ Édition Familiale Premium ( v6.0.6002 ) Service Pack 2
        X86-based PC ( Multiprocessor Free : AMD Athlon(tm) X2 Dual-Core QL-65 )
        BIOS : Default System BIOS
        USER : gitiane ( Administrator )
        BOOT : Normal boot

        C:\ (Local Disk) - NTFS - Total:287 Go (Free:167 Go)
        D:\ (Local Disk) - NTFS - Total:10 Go (Free:1 Go)
        E:\ (CD or DVD)
        F:\ (CD or DVD)

        Recherche executée en mode normal

        Nettoyage exécuté au redémarrage de l'ordinateur

        C:\Program Files\FunkyEmoticons supprimé !
        c:\progra~2\micros~1\windows\startm~1\programs\FunkyEmoticons supprimé !
        C:\Windows\prefetch\FUNKYEMOTICONS_SETUP[1].EXE-8F7FF1A1.pf supprimé !
        C:\Windows\prefetch\GAMECONSOLE-WT.EXE-10C706BE.pf supprimé !
        C:\Windows\prefetch\GAMECONSOLESERVICE.EXE-905D21D3.pf supprimé !

        Nettoyage contenu C:\Windows\Temp effectué !
        Nettoyage contenu C:\Users\gitiane\AppData\Local\Temp effectué !

        *** Sauvegarde du Registre vers dossier Safebackup ***

        sauvegarde du Registre réalisée avec succès !

        *** Nettoyage Registre ***

        Nettoyage Registre Ok

        *** Scan terminé 05/02/2010 17:08:44,78 ***
        0
        2. crapoulou Modérateur
          C'est Ok pour Navilog.
          Tu peux passer à la suite.
          0
          1. gigi21 Auteur
            voilà la suite
            .
            ======= RAPPORT D'AD-REMOVER 1.1.4.6_J | UNIQUEMENT XP/VISTA/7 =======
            .
            Mis à jour par C_XX le 03.02.2010 à 19:46
            Contact: AdRemover.contact@gmail.com
            Site web: http://pagesperso-orange.fr/NosTools/ad_remover.html
            .
            Lancé à: 17:22:35, 05/02/2010 | Mode Normal | Option: SCAN
            Exécuté de: C:\Ad-Remover\
            Système d'exploitation: Microsoft® Windows Vista™ HomePremium Service Pack 2 v6.0.6002
            Nom du PC: PC-DE-GITIANE | Utilisateur actuel: gitiane
            .
            ============== ÉLÉMENT(S) TROUVÉ(S) ==============
            .
            Service: *AGCoreService*

            C:\Users\gitiane\AppData\Roaming\Macromedia\Flash Player\#Security\FlashPlayerTrust\UnifiedToolbar.cfg
            C:\Users\gitiane\AppData\Roaming\Mozilla\FireFox\Profiles\xvllzw1k.default\extensions\{EEE6C361-6118-11DC-9C72-001320C79847}
            C:\Users\gitiane\AppData\Roaming\Mozilla\FireFox\Profiles\xvllzw1k.default\searchplugins\kiwee-toolbar.xml
            C:\Users\gitiane\AppData\Roaming\Mozilla\FireFox\Profiles\xvllzw1k.default\searchplugins\sweetim.xml
            C:\Program Files\Uninstall Fun Web Products.dll
            C:\Windows\System32\Macromed\Flash\FlashPlayerTrust\UnifiedToolbar.cfg
            C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\Kiwee Toolbar
            C:\Program Files\AGI
            C:\Program Files\FunWebProducts
            C:\Program Files\Kiwee Toolbar
            C:\Program Files\MyWebSearch
            C:\Program Files\UnifiedToolbar
            C:\Users\gitiane\AppData\LocalLow\AGI
            C:\Users\gitiane\AppData\LocalLow\FunWebProducts
            C:\Users\gitiane\AppData\LocalLow\Kiwee Toolbar
            C:\Users\gitiane\AppData\LocalLow\MyWebSearch
            C:\Users\gitiane\AppData\LocalLow\SweetIM
            C:\ProgramData\agi
            C:\ProgramData\Kiwee Toolbar
            C:\ProgramData\SweetIM
            C:\Program Files\Windows Live\Messenger\Riched20.dll
            C:\Program Files\Windows Live\Messenger\Msimg32.dll
            C:\Windows\Installer\1bf682.msi
            C:\Windows\Installer\1bf688.msi
            .
            HKCU\software\AGI
            HKCU\software\appdatalow\software\Fun Web Products
            HKCU\software\appdatalow\software\FunWebProducts
            HKCU\software\appdatalow\software\MyWebSearch
            HKCU\Software\Microsoft\Internet Explorer\InternetRegistry\Registry\User\S-1-5-21-3954504066-4099877028-1251247519-1000\Software\Sweetim
            HKCU\software\microsoft\internet explorer\searchscopes\{0BC6E3FA-78EF-4886-842C-5A1258C4455A}
            HKCU\software\microsoft\internet explorer\searchscopes\{171DEBEB-C3D4-40b7-AC73-056A5EBA4A7E}
            HKCU\software\microsoft\internet explorer\searchscopes\{56256A51-B582-467e-B8D4-7786EDA79AE0}
            HKCU\software\microsoft\internet explorer\searchscopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}
            HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{D4027C7F-154A-4066-A1AD-4243D8127440}
            HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks\\{0BC6E3FA-78EF-4886-842C-5A1258C4455A}
            HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{00A6FAF1-072E-44CF-8957-5838F569A31D}
            HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{07B18EA1-A523-4961-B6BB-170DE4475CCA}
            HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{07B18EA9-A523-4961-B6BB-170DE4475CCA}
            HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{00A6FAF1-072E-44CF-8957-5838F569A31D}
            HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{07B18EA1-A523-4961-B6BB-170DE4475CCA}
            HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{07B18EA9-A523-4961-B6BB-170DE4475CCA}
            HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{07B18EAB-A523-4961-B6BB-170DE4475CCA}
            HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB}
            HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{9FF05104-B030-46FC-94B8-81276E4E27DF}
            HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EEE6C35B-6118-11DC-9C72-001320C79847}
            HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EEE6C35C-6118-11DC-9C72-001320C79847}
            HKCU\software\MyWebSearch
            HKLM\software\AGI
            HKLM\software\classes\AG.MediaPlayerCOM
            HKLM\software\classes\agcore.Config.AGConfig
            HKLM\software\classes\agcore.Search.Search
            HKLM\software\classes\agihelper.AGUtils
            HKLM\Software\Classes\CLSID\{0BC6E3FA-78EF-4886-842C-5A1258C4455A}
            HKLM\Software\Classes\CLSID\{1C99B848-84CB-4CE4-8CD8-ED5719484D9F}
            HKLM\Software\Classes\CLSID\{4260e0cc-0f75-462e-88a3-1e05c248bf4c}
            HKLM\Software\Classes\CLSID\{E03BAFDC-EB9D-4C35-A7A2-AB6C62FF0A68}
            HKLM\Software\Classes\CLSID\{E6375F37-E4D1-4F51-B651-4658C27AC5BF}
            HKLM\Software\Classes\Interface\{2E9937FC-CF2F-4F56-AF54-5A6A3DD375CC}
            HKLM\Software\Classes\Interface\{3E16A203-C0AA-4D44-ACC5-38A70A8C76DA}
            HKLM\Software\Classes\Interface\{741DE825-A6F0-4497-9AA6-8023CF9B0FFF}
            HKLM\Software\Classes\Interface\{CF54BE1C-9359-4395-8533-1657CF209CFE}
            HKLM\software\classes\MediaPlayer.GraphicsUtils
            HKLM\software\classes\MediaPlayer.GraphicsUtils.1
            HKLM\software\classes\MgMediaPlayer.GifAnimator
            HKLM\software\classes\MgMediaPlayer.GifAnimator.1
            HKLM\Software\Classes\TypeLib\{C7403C30-3644-43D8-A82F-4BD84B9682D9}
            HKLM\Software\Classes\TypeLib\{D518921A-4A03-425E-9873-B9A71756821E}
            HKLM\software\classes\UnifiedToolbar.UnifiedToolbar
            HKLM\software\FocusInteractive
            HKLM\software\Fun Web Products
            HKLM\software\FunWebProducts
            HKLM\Software\Microsoft\Code Store Database\Distribution Units\{1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB}
            HKLM\Software\Microsoft\Code Store Database\Distribution Units\CabBuilder
            HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{59C7FC09-1C83-4648-B3E6-003D2BBC7481}
            HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{68AF847F-6E91-45DD-9B68-D6A12C30E5D7}
            HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9170B96C-28D4-4626-8358-27E6CAEEF907}
            HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{D1A71FA0-FF48-48dd-9B6D-7A13A3E42127}
            HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{DDB1968E-EAD6-40fd-8DAE-FF14757F60C7}
            HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F138D901-86F0-4383-99B6-9CDD406036DA}
            HKLM\Software\Microsoft\Internet Explorer\Low Rights\RunDll32Policy\f3ScrCtr.dll
            HKLM\software\microsoft\internet explorer\searchscopes\{0BC6E3FA-78EF-4886-842C-5A1258C4455A}
            HKLM\software\microsoft\internet explorer\searchscopes\{56256A51-B582-467e-B8D4-7786EDA79AE0}
            HKLM\software\microsoft\internet explorer\searchscopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}
            HKLM\Software\Microsoft\Internet Explorer\Toolbar\\{1c99b848-84cb-4ce4-8cd8-ed5719484d9f}
            HKLM\Software\Microsoft\Multimedia\WMPlayer\Schemes\f3pss
            HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0BC6E3FA-78EF-4886-842C-5A1258C4455A}
            HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\02F47BF73B948514FAACADD8CBBDF37D
            HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\07D5290CDBDAE4242926B8E6CA650501
            HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\080D9F5E1E95FEE4794CE438E635239E
            HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\08E33F7B61DEFF24BB9673ED7D467636
            HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\0E3D8A5B48622A445A7DF73FEFF32C3F
            HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\0FF2AEFF45EEA0A48A4B33C1973B6094
            HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\1AC67655DD68F8240B2860F2D511EBD8
            HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\1E264E0A5959A1C46BA9175A878B12EA
            HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\2E6768B6932D112438F047C54D180635
            HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\305B09CE8C53A214DB58887F62F25536
            HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\34EDDB1BFB3A2D448845F3EFD0F15A43
            HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\351716A953E21214898904032EAE2E81
            HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\397C771A7BCAC904697C3EC629ED33ED
            HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\427EA997C413D1D47907CBFC7B2DB432
            HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\4318DF19719275242801CBE292063A4C
            HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\45FC115D1FEAEF849A4E1610D6EC8BF0
            HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\46A5861A389ADB844AF89E31BC9DF0A1
            HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\49B0E1A6FF50BBE4289E4E23DE6EA0C7
            HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\4CCCAC049F34D0540AAC13011398BEDB
            HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\5C4389D0BFB302C479DE4178BD5D9EBA
            HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\5D19F074C042AD34BAB463D4175A062E
            HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\5D2B09BDEF4FE54418E6F3373CDBC7AC
            HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\61B65D3397A1FBF4CB1571B5E4F6B5B0
            HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\68E8A05C60DD9254591DBD16C94EDDBF
            HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\697E782CF574CC34CBB9566440BA12BC
            HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\6AE27A8613CF7EA4782F2886F67295E5
            HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\7CE172051F585E04187BCB97570BFA74
            HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\7FFA128C2B0FF414D805FC5627883401
            HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\86A901BA5265452499DCBF719C378EE3
            HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\88ABD1CD5C40EC84789A7F6EF86DAC5E
            HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\980289C22F80A7C4BB9323DC61255E4E
            HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\98CC8BF5A4A6E6C4ABF7051DDAB8B058
            HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\9A4B7EF3789F871419D9302583B20C15
            HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\A189D17A469616C4688D23E192996267
            HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\A6C53B0F76C44004A8F36716213017DB
            HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\B59F2D8189784CC46A4597F2842480B0
            HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\BD746FB95FB8E5B45BF66BE54D5FD91F
            HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\CCF399FCD6D2D3F46BF02A1378654FC9
            HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\D149C1355C98DE24E82CEFBD996FE06A
            HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\D15DAF33C220F91468A1D7D57C31ACD7
            HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\D3BA76A44C779424889063D5098ED2D6
            HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\D6D0EB9FDBD90C04D92A7E729058F10D
            HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\DB59FDB786388EA4D897F3EE715683AC
            HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\DB8DAD19CFBCC2049A4477183787E8C5
            HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\E1C820A74ED67374BA048B52CB3C3804
            HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\E337925F629CF4C4FB08F3D9674DD839
            HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\E4748F9A4181FCE46A23C13B517B9420
            HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\EC65F200D112357449C8B1BC3CFA03D0
            HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\F327D0C73C0973644A21E8CC852267A0
            HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\FA96423FE2B98E248A3B23548D1E22D9
            HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\KiweeHook
            HKLM\software\microsoft\windows\currentversion\uninstall\{0cab6984-fb27-3e30-b7a3-4e9ee4f8249b}
            HKLM\software\microsoft\windows\currentversion\uninstall\{8aade841-03c5-486a-b048-bb112cc0cac5}
            HKLM\software\microsoft\windows\currentversion\uninstall\{8f87bc9c-44e8-35c4-add8-09178c9b22d5}
            HKLM\Software\Mozilla\Firefox\Extensions\\unifiedtoolbar@aginteractive.com
            HKLM\software\MyWebSearch
            HKU\s-1-5-21-3954504066-4099877028-1251247519-1000\software\AGI
            HKU\s-1-5-21-3954504066-4099877028-1251247519-1000\software\appdatalow\software\Fun Web Products
            HKU\s-1-5-21-3954504066-4099877028-1251247519-1000\software\appdatalow\software\FunWebProducts
            HKU\s-1-5-21-3954504066-4099877028-1251247519-1000\software\appdatalow\software\MyWebSearch
            HKU\S-1-5-21-3954504066-4099877028-1251247519-1000\Software\Microsoft\Internet Explorer\Searchscopes\{56256A51-B582-467E-B8D4-7786EDA79AE0}
            HKU\s-1-5-21-3954504066-4099877028-1251247519-1000\software\MyWebSearch
            .
            ============== Scan additionnel ==============
            .
            .
            * Mozilla FireFox Version 3.6 [fr] *
            .
            Nom du profil: xvllzw1k.default (gitiane)
            .
            (gitiane, prefs.js) Browser.search.defaultenginename, Kiwee Toolbar
            (gitiane, prefs.js) Browser.search.defaulturl, hxxp://www.bing.com/search?FORM=IEFM1&q=
            (gitiane, prefs.js) Browser.search.selectedEngine, Google
            (gitiane, prefs.js) Browser.startup.homepage, hxxp://www.google.fr/firefox
            (gitiane, prefs.js) Extensions.enabledItems, {CAFEEFAC-0016-0000-0016-ABCDEFFEDCBA}:6.0.16,unifiedtoolbar@aginteractive.com:3.0,{20a82645-c095-46ed-80e3-08825760534b}:1.1,{EEE6C361-6118-11DC-9C72-001320C79847}:1.0.0.9,{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA}:6.0.17,{972ce4c6-7e08-4474-a285-3208198ce6fd}:3.6
            (gitiane, prefs.js) Keyword.URL, hxxp://search.imgag.com/?appid=kwtb&component=UnifiedToolbarFF&c=EMKWO50024&sbs=1&sc=&f=web&vernum=3.1&uid=&did={3bfb3d72-5ab5-4486-a48b-2f631155e49f}&q=
            (gitiane, prefs.js) Sweetim.toolbar.previous.keyword.URL, hxxp://search.imgag.com/?appid=kwtb&component=UnifiedToolbarFF&c=EMKWO50024&sbs=1&sc=&f=web&vernum=3.1&uid=&did={3bfb3d72-5ab5-4486-a48b-2f631155e49f}&q=
            .
            (gitiane, prefs.js) TROUVE - Agcore.default.extid, unifiedtoolbar@aginteractive.com
            (gitiane, prefs.js) TROUVE - Browser.search.defaultenginename, Kiwee Toolbar
            (gitiane, prefs.js) TROUVE - Extensions.enabledItems, {CAFEEFAC-0016-0000-0016-ABCDEFFEDCBA}:6.0.16,unifiedtoolbar@aginteractive.com:3.0,{20a82645-c095-46ed-80e3-08825760534b}:1.1,{EEE6C361-6118-11DC-9C72-001320C79847}:1.0.0.9,{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA}:6.0.17,{972ce4c6-7e08-4474-a285-3208198ce6fd}:3.6
            (gitiane, prefs.js) TROUVE - Keyword.URL, hxxp://search.imgag.com/?appid=kwtb&component=UnifiedToolbarFF&c=EMKWO50024&sbs=1&sc=&f=web&vernum=3.1&uid=&did={3bfb3d72-5ab5-4486-a48b-2f631155e49f}&q=
            (gitiane, prefs.js) TROUVE - Sweetim.toolbar.highlight.colors, #FFFF00,#00FFE4,#5AFF00,#0087FF,#FFCC00,#FF00F0
            (gitiane, prefs.js) TROUVE - Sweetim.toolbar.logger.ConsoleHandler.MinReportLevel, 7
            (gitiane, prefs.js) TROUVE - Sweetim.toolbar.logger.FileHandler.FileName, ff-toolbar.log
            (gitiane, prefs.js) TROUVE - Sweetim.toolbar.logger.FileHandler.MaxFileSize, 200000
            (gitiane, prefs.js) TROUVE - Sweetim.toolbar.logger.FileHandler.MinReportLevel, 7
            (gitiane, prefs.js) TROUVE - Sweetim.toolbar.mode.debug, false
            (gitiane, prefs.js) TROUVE - Sweetim.toolbar.previous.keyword.URL, hxxp://search.imgag.com/?appid=kwtb&component=UnifiedToolbarFF&c=EMKWO50024&sbs=1&sc=&f=web&vernum=3.1&uid=&did={3bfb3d72-5ab5-4486-a48b-2f631155e49f}&q=
            (gitiane, prefs.js) TROUVE - Sweetim.toolbar.search.external, <?xml version=\1.0\?><TOOLBAR><EXTERNAL_SEARCH engine=\hxxp://*google.*\ param=\q=\ /><EXTERNAL_SEARCH engine=\hxxp://search.yahoo.com/*\ param=\p=\ /><EXTERNAL_SEARCH engine=\hxxp://search.sweetim.*\ param=\q=\ /><EXTERNAL_SEARCH engine=\hxxp://*.live.*/*\ param=\q=\ /><EXTERNAL_SEARCH engine=\hxxp://*youtube.com/\ param=\search_query=\ /><EXTERNAL_SEARCH engine=\hxxp://*.ebay.*/search/*\ param=\satitle=\ /><EXTERNAL_SEARCH engine=\hxxp://*.amazon.com/s/*\ param=\field-keywords=\ /></TOOLBAR>
            (gitiane, prefs.js) TROUVE - Sweetim.toolbar.search.history.capacity, 10
            (gitiane, prefs.js) TROUVE - Sweetim.toolbar.version, 1.0.0.9
            .
            .
            * Internet Explorer Version 8.0.6001.18882 *
            .
            [HKEY_CURRENT_USER\..\Internet Explorer\Main]
            .
            Start Page: hxxp://search.imgag.com/?appid=kwtb&c=EMKWO50024&sbs=3&sc=2&f=web&vernum=3.1&uid=&did={3bfb3d72-5ab5-4486-a48b-2f631155e49f}&q=%20
            Default_Page_URL: hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=fr_fr&c=91&bd=Pavilion&pf=cnnb
            Do404Search: 01000000
            Local Page: C:\Windows\system32\blank.htm
            Show_ToolBar: yes
            Search Page: hxxp://recherche.neuf.fr/
            Enable Browser Extensions: yes
            Search Bar: hxxp://recherche.neuf.fr/ie/default.html
            Use Search Asst: no
            Start Page Redirect Cache: hxxp://fr.msn.com/?ocid=iehp
            Start Page Redirect Cache_TIMESTAMP: 296f5011a480ca01
            Start Page Redirect Cache AcceptLangs: fr
            .
            [HKEY_LOCAL_MACHINE\..\Internet Explorer\Main]
            .
            Start Page: hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=fr_fr&c=91&bd=Pavilion&pf=cnnb
            Default_Page_URL: hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=fr_fr&c=91&bd=Pavilion&pf=cnnb
            Default_Search_URL: hxxp://recherche.neuf.fr/
            Search Page: hxxp://go.microsoft.com/fwlink/?LinkId=54896
            Delete_Temp_Files_On_Exit: yes
            Local Page: C:\Windows\System32\blank.htm
            Enable Browser Extensions: yes
            Use Search Asst: no
            .
            [HKEY_LOCAL_MACHINE\..\Internet Explorer\ABOUTURLS]
            .
            Tabs: hxxp://search.imgag.com/?appid=kwtb&c=EMKWO50024&sbs=3&sc=2&f=web&vernum=3.1&uid=&did={3bfb3d72-5ab5-4486-a48b-2f631155e49f}&q=%20
            .
            ===================================
            .
            18362 Octet(s) - C:\Ad-Report-SCAN[1].log
            .
            8 Fichier(s) - C:\Users\gitiane\AppData\Local\Temp
            1 Fichier(s) - C:\Windows\Temp
            129 Fichier(s) - C:\Windows\Prefetch
            .
            1 Fichier(s) - C:\Ad-Remover\BACKUP
            0 Fichier(s) - C:\Ad-Remover\QUARANTINE
            .
            Fin à: 17:33:15 | 05/02/2010 - SCAN[1]
            .
            ============== E.O.F ==============
            .
            0
            1. crapoulou Modérateur
              ça c'est de la détection d'infection !

              Tu étais infecté par :

              ­MyWebSearch
              AGI
              FunWebProducts
              Kiwee Toolbar
              MyWebSearch
              UnifiedToolbar
              SweetIM

              Oublie vraiment les barres d'outils !

              ********

              Suppression avec Ad-Remover :
              /!\ Déconnectes toi et fermes toutes applications en cours, désactive ton antivirus le temps de la manipulation/!\

              * Clique droit sur l’icône Ad-Remover située sur ton bureau puis sélectionne "Exécuter en tant qu’administrateur".
              * Au menu principal choisi l’option "L" et tape ensuite [Entrée]
              * Poste le rapport qui apparaît à la fin.

              (Le rapport est sauvegardé aussi sous C:\Ad-report(date).log)
              (CTRL+A Pour tout sélectionner, CTRL+C pour copier et CTRL+V pour coller)

              Note :

              "Process.exe", une composante de l’outil, est détecté par certains antivirus (AntiVir, Dr.Web, Kaspersky Anti-Virus) comme étant un RiskTool.
              Il ne s’agit pas d’un virus, mais d’un utilitaire destiné à mettre fin à des processus.
              0
              1. gigi21 Auteur
                bonsoir crapoulou

                j'ai lancer Ad remover en choisissant l'option L et l'ordinateur affiche un écran noir depuis 1 heure.
                est ce normal que cela prenne autant de temps
                0
                1. gigi21 Auteur
                  voici le rapport :
                  .
                  ======= RAPPORT D'AD-REMOVER 1.1.4.6_J | UNIQUEMENT XP/VISTA/7 =======
                  .
                  Mis à jour par C_XX le 03.02.2010 à 19:46
                  Contact: AdRemover.contact@gmail.com
                  Site web: http://pagesperso-orange.fr/NosTools/ad_remover.html
                  .
                  Lancé à: 20:59:40, 05/02/2010 | Mode Normal | Option: CLEAN
                  Exécuté de: C:\Ad-Remover\
                  Système d'exploitation: Microsoft® Windows Vista™ HomePremium Service Pack 2 v6.0.6002
                  Nom du PC: PC-DE-GITIANE | Utilisateur actuel: gitiane
                  .
                  ============== ÉLÉMENT(S) NEUTRALISÉ(S) ==============
                  .
                  Service: *AGCoreService*

                  C:\Users\gitiane\AppData\Roaming\Macromedia\Flash Player\#Security\FlashPlayerTrust\UnifiedToolbar.cfg
                  C:\Users\gitiane\AppData\Roaming\Mozilla\FireFox\Profiles\xvllzw1k.default\extensions\{EEE6C361-6118-11DC-9C72-001320C79847}
                  C:\Users\gitiane\AppData\Roaming\Mozilla\FireFox\Profiles\xvllzw1k.default\searchplugins\kiwee-toolbar.xml
                  C:\Users\gitiane\AppData\Roaming\Mozilla\FireFox\Profiles\xvllzw1k.default\searchplugins\sweetim.xml
                  C:\Windows\System32\Macromed\Flash\FlashPlayerTrust\UnifiedToolbar.cfg
                  C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\Kiwee Toolbar
                  C:\Program Files\AGI
                  C:\Program Files\FunWebProducts
                  C:\Program Files\Kiwee Toolbar
                  C:\Program Files\MyWebSearch
                  C:\Program Files\UnifiedToolbar
                  C:\Users\gitiane\AppData\LocalLow\AGI
                  C:\Users\gitiane\AppData\LocalLow\FunWebProducts
                  C:\Users\gitiane\AppData\LocalLow\Kiwee Toolbar
                  C:\Users\gitiane\AppData\LocalLow\MyWebSearch
                  C:\Users\gitiane\AppData\LocalLow\SweetIM
                  C:\ProgramData\agi
                  C:\ProgramData\Kiwee Toolbar
                  C:\ProgramData\SweetIM
                  C:\Program Files\Windows Live\Messenger\Riched20.dll
                  C:\Program Files\Windows Live\Messenger\Msimg32.dll
                  C:\Windows\Installer\1bf682.msi
                  C:\Windows\Installer\1bf688.msi

                  (!) -- Fichiers temporaires supprimés.

                  .
                  HKCU\software\AGI
                  HKCU\software\appdatalow\software\Fun Web Products
                  HKCU\software\appdatalow\software\FunWebProducts
                  HKCU\software\appdatalow\software\MyWebSearch
                  HKCU\Software\Microsoft\Internet Explorer\InternetRegistry\Registry\User\S-1-5-21-3954504066-4099877028-1251247519-1000\Software\Sweetim
                  HKCU\software\microsoft\internet explorer\searchscopes\{0BC6E3FA-78EF-4886-842C-5A1258C4455A}
                  HKCU\software\microsoft\internet explorer\searchscopes\{171DEBEB-C3D4-40b7-AC73-056A5EBA4A7E}
                  HKCU\software\microsoft\internet explorer\searchscopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}
                  HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{D4027C7F-154A-4066-A1AD-4243D8127440}
                  HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks\\{0BC6E3FA-78EF-4886-842C-5A1258C4455A}
                  HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{00A6FAF1-072E-44CF-8957-5838F569A31D}
                  HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{07B18EA1-A523-4961-B6BB-170DE4475CCA}
                  HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{07B18EA9-A523-4961-B6BB-170DE4475CCA}
                  HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{00A6FAF1-072E-44CF-8957-5838F569A31D}
                  HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{07B18EA1-A523-4961-B6BB-170DE4475CCA}
                  HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{07B18EA9-A523-4961-B6BB-170DE4475CCA}
                  HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{07B18EAB-A523-4961-B6BB-170DE4475CCA}
                  HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB}
                  HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{9FF05104-B030-46FC-94B8-81276E4E27DF}
                  HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EEE6C35B-6118-11DC-9C72-001320C79847}
                  HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EEE6C35C-6118-11DC-9C72-001320C79847}
                  HKCU\software\MyWebSearch
                  HKLM\software\AGI
                  HKLM\software\classes\AG.MediaPlayerCOM
                  HKLM\software\classes\agcore.Config.AGConfig
                  HKLM\software\classes\agcore.Search.Search
                  HKLM\software\classes\agihelper.AGUtils
                  HKLM\Software\Classes\CLSID\{0BC6E3FA-78EF-4886-842C-5A1258C4455A}
                  HKLM\Software\Classes\CLSID\{1C99B848-84CB-4CE4-8CD8-ED5719484D9F}
                  HKLM\Software\Classes\CLSID\{4260e0cc-0f75-462e-88a3-1e05c248bf4c}
                  HKLM\Software\Classes\CLSID\{E03BAFDC-EB9D-4C35-A7A2-AB6C62FF0A68}
                  HKLM\Software\Classes\CLSID\{E6375F37-E4D1-4F51-B651-4658C27AC5BF}
                  HKLM\Software\Classes\Interface\{2E9937FC-CF2F-4F56-AF54-5A6A3DD375CC}
                  HKLM\Software\Classes\Interface\{3E16A203-C0AA-4D44-ACC5-38A70A8C76DA}
                  HKLM\Software\Classes\Interface\{741DE825-A6F0-4497-9AA6-8023CF9B0FFF}
                  HKLM\Software\Classes\Interface\{CF54BE1C-9359-4395-8533-1657CF209CFE}
                  HKLM\software\classes\MediaPlayer.GraphicsUtils
                  HKLM\software\classes\MediaPlayer.GraphicsUtils.1
                  HKLM\software\classes\MgMediaPlayer.GifAnimator
                  HKLM\software\classes\MgMediaPlayer.GifAnimator.1
                  HKLM\Software\Classes\TypeLib\{C7403C30-3644-43D8-A82F-4BD84B9682D9}
                  HKLM\Software\Classes\TypeLib\{D518921A-4A03-425E-9873-B9A71756821E}
                  HKLM\software\classes\UnifiedToolbar.UnifiedToolbar
                  HKLM\software\FocusInteractive
                  HKLM\software\Fun Web Products
                  HKLM\software\FunWebProducts
                  HKLM\Software\Microsoft\Code Store Database\Distribution Units\{1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB}
                  HKLM\Software\Microsoft\Code Store Database\Distribution Units\CabBuilder
                  HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{59C7FC09-1C83-4648-B3E6-003D2BBC7481}
                  HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{68AF847F-6E91-45DD-9B68-D6A12C30E5D7}
                  HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9170B96C-28D4-4626-8358-27E6CAEEF907}
                  HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{D1A71FA0-FF48-48dd-9B6D-7A13A3E42127}
                  HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{DDB1968E-EAD6-40fd-8DAE-FF14757F60C7}
                  HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F138D901-86F0-4383-99B6-9CDD406036DA}
                  HKLM\Software\Microsoft\Internet Explorer\Low Rights\RunDll32Policy\f3ScrCtr.dll
                  HKLM\software\microsoft\internet explorer\searchscopes\{0BC6E3FA-78EF-4886-842C-5A1258C4455A}
                  HKLM\software\microsoft\internet explorer\searchscopes\{56256A51-B582-467e-B8D4-7786EDA79AE0}
                  HKLM\software\microsoft\internet explorer\searchscopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}
                  HKLM\Software\Microsoft\Internet Explorer\Toolbar\\{1c99b848-84cb-4ce4-8cd8-ed5719484d9f}
                  HKLM\Software\Microsoft\Multimedia\WMPlayer\Schemes\f3pss
                  HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0BC6E3FA-78EF-4886-842C-5A1258C4455A}
                  HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\02F47BF73B948514FAACADD8CBBDF37D
                  HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\07D5290CDBDAE4242926B8E6CA650501
                  HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\080D9F5E1E95FEE4794CE438E635239E
                  HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\08E33F7B61DEFF24BB9673ED7D467636
                  HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\0E3D8A5B48622A445A7DF73FEFF32C3F
                  HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\0FF2AEFF45EEA0A48A4B33C1973B6094
                  HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\1AC67655DD68F8240B2860F2D511EBD8
                  HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\1E264E0A5959A1C46BA9175A878B12EA
                  HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\2E6768B6932D112438F047C54D180635
                  HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\305B09CE8C53A214DB58887F62F25536
                  HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\34EDDB1BFB3A2D448845F3EFD0F15A43
                  HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\351716A953E21214898904032EAE2E81
                  HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\397C771A7BCAC904697C3EC629ED33ED
                  HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\427EA997C413D1D47907CBFC7B2DB432
                  HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\4318DF19719275242801CBE292063A4C
                  HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\45FC115D1FEAEF849A4E1610D6EC8BF0
                  HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\46A5861A389ADB844AF89E31BC9DF0A1
                  HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\49B0E1A6FF50BBE4289E4E23DE6EA0C7
                  HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\4CCCAC049F34D0540AAC13011398BEDB
                  HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\5C4389D0BFB302C479DE4178BD5D9EBA
                  HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\5D19F074C042AD34BAB463D4175A062E
                  HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\5D2B09BDEF4FE54418E6F3373CDBC7AC
                  HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\61B65D3397A1FBF4CB1571B5E4F6B5B0
                  HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\68E8A05C60DD9254591DBD16C94EDDBF
                  HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\697E782CF574CC34CBB9566440BA12BC
                  HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\6AE27A8613CF7EA4782F2886F67295E5
                  HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\7CE172051F585E04187BCB97570BFA74
                  HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\7FFA128C2B0FF414D805FC5627883401
                  HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\86A901BA5265452499DCBF719C378EE3
                  HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\88ABD1CD5C40EC84789A7F6EF86DAC5E
                  HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\980289C22F80A7C4BB9323DC61255E4E
                  HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\98CC8BF5A4A6E6C4ABF7051DDAB8B058
                  HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\9A4B7EF3789F871419D9302583B20C15
                  HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\A189D17A469616C4688D23E192996267
                  HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\A6C53B0F76C44004A8F36716213017DB
                  HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\B59F2D8189784CC46A4597F2842480B0
                  HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\BD746FB95FB8E5B45BF66BE54D5FD91F
                  HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\CCF399FCD6D2D3F46BF02A1378654FC9
                  HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\D149C1355C98DE24E82CEFBD996FE06A
                  HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\D15DAF33C220F91468A1D7D57C31ACD7
                  HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\D3BA76A44C779424889063D5098ED2D6
                  HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\D6D0EB9FDBD90C04D92A7E729058F10D
                  HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\DB59FDB786388EA4D897F3EE715683AC
                  HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\DB8DAD19CFBCC2049A4477183787E8C5
                  HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\E1C820A74ED67374BA048B52CB3C3804
                  HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\E337925F629CF4C4FB08F3D9674DD839
                  HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\E4748F9A4181FCE46A23C13B517B9420
                  HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\EC65F200D112357449C8B1BC3CFA03D0
                  HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\F327D0C73C0973644A21E8CC852267A0
                  HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\FA96423FE2B98E248A3B23548D1E22D9
                  HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\KiweeHook
                  HKLM\software\microsoft\windows\currentversion\uninstall\{0cab6984-fb27-3e30-b7a3-4e9ee4f8249b}
                  HKLM\software\microsoft\windows\currentversion\uninstall\{8aade841-03c5-486a-b048-bb112cc0cac5}
                  HKLM\software\microsoft\windows\currentversion\uninstall\{8f87bc9c-44e8-35c4-add8-09178c9b22d5}
                  HKLM\Software\Mozilla\Firefox\Extensions\\unifiedtoolbar@aginteractive.com
                  HKLM\software\MyWebSearch
                  HKU\S-1-5-21-3954504066-4099877028-1251247519-1000\Software\Microsoft\Internet Explorer\Searchscopes\{56256A51-B582-467E-B8D4-7786EDA79AE0}
                  .
                  ============== Scan additionnel ==============
                  .
                  .
                  * Mozilla FireFox Version 3.6 [fr] *
                  .
                  Nom du profil: xvllzw1k.default (gitiane)
                  .
                  (gitiane, prefs.js) Browser.search.defaultenginename, Kiwee Toolbar
                  (gitiane, prefs.js) Browser.search.defaulturl, hxxp://www.bing.com/search?FORM=IEFM1&q=
                  (gitiane, prefs.js) Browser.search.selectedEngine, Google
                  (gitiane, prefs.js) Browser.startup.homepage, hxxp://www.google.fr/firefox
                  (gitiane, prefs.js) Extensions.enabledItems, {CAFEEFAC-0016-0000-0016-ABCDEFFEDCBA}:6.0.16,unifiedtoolbar@aginteractive.com:3.0,{20a82645-c095-46ed-80e3-08825760534b}:1.1,{EEE6C361-6118-11DC-9C72-001320C79847}:1.0.0.9,{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA}:6.0.17,{972ce4c6-7e08-4474-a285-3208198ce6fd}:3.6
                  (gitiane, prefs.js) Keyword.URL, hxxp://search.imgag.com/?appid=kwtb&component=UnifiedToolbarFF&c=EMKWO50024&sbs=1&sc=&f=web&vernum=3.1&uid=&did={3bfb3d72-5ab5-4486-a48b-2f631155e49f}&q=
                  (gitiane, prefs.js) Sweetim.toolbar.previous.keyword.URL, hxxp://search.imgag.com/?appid=kwtb&component=UnifiedToolbarFF&c=EMKWO50024&sbs=1&sc=&f=web&vernum=3.1&uid=&did={3bfb3d72-5ab5-4486-a48b-2f631155e49f}&q=
                  .
                  (gitiane, prefs.js) EFFACE - Agcore.default.extid, unifiedtoolbar@aginteractive.com
                  (gitiane, prefs.js) EFFACE - Browser.search.defaultenginename, Kiwee Toolbar
                  (gitiane, prefs.js) EFFACE - Extensions.enabledItems, {CAFEEFAC-0016-0000-0016-ABCDEFFEDCBA}:6.0.16,unifiedtoolbar@aginteractive.com:3.0,{20a82645-c095-46ed-80e3-08825760534b}:1.1,{EEE6C361-6118-11DC-9C72-001320C79847}:1.0.0.9,{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA}:6.0.17,{972ce4c6-7e08-4474-a285-3208198ce6fd}:3.6
                  (gitiane, prefs.js) EFFACE - Keyword.URL, hxxp://search.imgag.com/?appid=kwtb&component=UnifiedToolbarFF&c=EMKWO50024&sbs=1&sc=&f=web&vernum=3.1&uid=&did={3bfb3d72-5ab5-4486-a48b-2f631155e49f}&q=
                  (gitiane, prefs.js) EFFACE - Sweetim.toolbar.highlight.colors, #FFFF00,#00FFE4,#5AFF00,#0087FF,#FFCC00,#FF00F0
                  (gitiane, prefs.js) EFFACE - Sweetim.toolbar.logger.ConsoleHandler.MinReportLevel, 7
                  (gitiane, prefs.js) EFFACE - Sweetim.toolbar.logger.FileHandler.FileName, ff-toolbar.log
                  (gitiane, prefs.js) EFFACE - Sweetim.toolbar.logger.FileHandler.MaxFileSize, 200000
                  (gitiane, prefs.js) EFFACE - Sweetim.toolbar.logger.FileHandler.MinReportLevel, 7
                  (gitiane, prefs.js) EFFACE - Sweetim.toolbar.mode.debug, false
                  (gitiane, prefs.js) EFFACE - Sweetim.toolbar.previous.keyword.URL, hxxp://search.imgag.com/?appid=kwtb&component=UnifiedToolbarFF&c=EMKWO50024&sbs=1&sc=&f=web&vernum=3.1&uid=&did={3bfb3d72-5ab5-4486-a48b-2f631155e49f}&q=
                  (gitiane, prefs.js) EFFACE - Sweetim.toolbar.search.external, <?xml version=\1.0\?><TOOLBAR><EXTERNAL_SEARCH engine=\hxxp://*google.*\ param=\q=\ /><EXTERNAL_SEARCH engine=\hxxp://search.yahoo.com/*\ param=\p=\ /><EXTERNAL_SEARCH engine=\hxxp://search.sweetim.*\ param=\q=\ /><EXTERNAL_SEARCH engine=\hxxp://*.live.*/*\ param=\q=\ /><EXTERNAL_SEARCH engine=\hxxp://*youtube.com/\ param=\search_query=\ /><EXTERNAL_SEARCH engine=\hxxp://*.ebay.*/search/*\ param=\satitle=\ /><EXTERNAL_SEARCH engine=\hxxp://*.amazon.com/s/*\ param=\field-keywords=\ /></TOOLBAR>
                  (gitiane, prefs.js) EFFACE - Sweetim.toolbar.search.history.capacity, 10
                  (gitiane, prefs.js) EFFACE - Sweetim.toolbar.version, 1.0.0.9
                  .
                  .
                  * Internet Explorer Version 8.0.6001.18882 *
                  .
                  [HKEY_CURRENT_USER\..\Internet Explorer\Main]
                  .
                  Start Page: hxxp://fr.msn.com/
                  Default_Page_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
                  Do404Search: 01000000
                  Local Page: C:\Windows\system32\blank.htm
                  Show_ToolBar: yes
                  Enable Browser Extensions: yes
                  Search Bar: hxxp://go.microsoft.com/fwlink/?linkid=54896
                  Use Search Asst: no
                  Start Page Redirect Cache: hxxp://fr.msn.com/?ocid=iehp
                  Start Page Redirect Cache_TIMESTAMP: 296f5011a480ca01
                  Start Page Redirect Cache AcceptLangs: fr
                  Default_search_url: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
                  .
                  [HKEY_LOCAL_MACHINE\..\Internet Explorer\Main]
                  .
                  Start Page: hxxp://fr.msn.com/
                  Default_Page_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
                  Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
                  Search Page: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
                  Delete_Temp_Files_On_Exit: yes
                  Local Page: C:\Windows\System32\blank.htm
                  Enable Browser Extensions: yes
                  Use Search Asst: no
                  Search bar: hxxp://search.msn.com/spbasic.htm
                  .
                  [HKEY_LOCAL_MACHINE\..\Internet Explorer\ABOUTURLS]
                  .
                  Tabs: res://ieframe.dll/tabswelcome.htm
                  .
                  ===================================
                  .
                  17663 Octet(s) - C:\Ad-Report-CLEAN[1].log
                  18701 Octet(s) - C:\Ad-Report-SCAN[1].log
                  .
                  4 Fichier(s) - C:\Users\gitiane\AppData\Local\Temp
                  2 Fichier(s) - C:\Windows\Temp
                  0 Fichier(s) - C:\Windows\Prefetch
                  .
                  20 Fichier(s) - C:\Ad-Remover\BACKUP
                  267 Fichier(s) - C:\Ad-Remover\QUARANTINE
                  .
                  Fin à: 21:04:40 | 05/02/2010 - CLEAN[1]
                  .
                  ============== E.O.F ==============
                  .
                  0
                  1. crapoulou Modérateur
                    Génère un nouveau rapport RSIT stp.
                    (Seul le log.txt sera affiché, c'est normal).
                    Poste le rapport ici stp.
                    0
                    1. gigi21 Auteur
                      bonsoir crapoulou

                      pardon d'avoir mis autant de temps mais mes weekend sont très surchargé en ce moment

                      Logfile of random's system information tool 1.06 (written by random/random)
                      Run by gitiane at 2010-02-07 22:39:04
                      Microsoft® Windows Vista™ Édition Familiale Premium Service Pack 2
                      System drive C: has 171 GB (58%) free of 294 GB
                      Total RAM: 3069 MB (59% free)

                      Logfile of Trend Micro HijackThis v2.0.2
                      Scan saved at 22:39:28, on 07/02/2010
                      Platform: Windows Vista SP2 (WinNT 6.00.1906)
                      MSIE: Internet Explorer v8.00 (8.00.6001.18882)
                      Boot mode: Normal

                      Running processes:
                      C:\Windows\system32\taskeng.exe
                      C:\Windows\system32\Dwm.exe
                      C:\Windows\Explorer.EXE
                      C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
                      C:\Program Files\Hewlett-Packard\Media\DVD\DVDAgent.exe
                      C:\Program Files\Hewlett-Packard\TouchSmart\Media\TSMAgent.exe
                      C:\Program Files\Hewlett-Packard\TouchSmart\Media\Kernel\CLML\CLMLSvc.exe
                      C:\Program Files\Hewlett-Packard\Media\TV\TVAgent.exe
                      C:\Program Files\Hewlett-Packard\HP MediaSmart\SmartMenu.exe
                      C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
                      C:\Program Files\Windows Defender\MSASCui.exe
                      C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QLBCTRL.exe
                      C:\Program Files\Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe
                      C:\Program Files\HP\HP Software Update\hpwuSchd2.exe
                      C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
                      C:\Program Files\IDT\WDM\sttray.exe
                      C:\Program Files\Alwil Software\Avast5\AvastUI.exe
                      C:\Program Files\Java\jre6\bin\jusched.exe
                      C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe
                      C:\Program Files\Windows Live\Messenger\msnmsgr.exe
                      C:\Program Files\Windows Media Player\wmpnscfg.exe
                      C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
                      C:\Program Files\WinZip\WZQKPICK.EXE
                      C:\Users\gitiane\AppData\Roaming\Microsoft\Notification de cadeaux MSN\lsnfier.exe
                      C:\Program Files\OpenOffice.org 3\program\soffice.exe
                      C:\Program Files\OpenOffice.org 3\program\soffice.bin
                      C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
                      C:\Windows\system32\wbem\unsecapp.exe
                      C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe
                      C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
                      C:\Program Files\Hewlett-Packard\Shared\hpqToaster.exe
                      C:\Program Files\Mozilla Firefox\firefox.exe
                      C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
                      C:\Users\gitiane\Downloads\RSIT.exe
                      C:\Program Files\trend micro\gitiane.exe

                      R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://go.microsoft.com/fwlink/?linkid=54896
                      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://fr.msn.com/
                      R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://fr.msn.com/
                      R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
                      R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
                      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
                      R3 - Default URLSearchHook is missing
                      F2 - REG:system.ini: UserInit=C:\Windows\system32\ezShellStart.exe
                      O1 - Hosts: ::1 localhost
                      O2 - BHO: Shareware.Pro-FR Toolbar - {280b5d37-4a76-467a-b3d6-942fca90acde} - C:\Program Files\Shareware.Pro-FR\tbSha1.dll
                      O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
                      O2 - BHO: AOL Toolbar BHO - {7C554162-8CB7-45A4-B8F4-8EA1C75885F9} - C:\Program Files\AOL\AOL Toolbar 5.0\aoltb.dll
                      O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live ID - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
                      O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
                      O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.2.4204.1700\swg.dll
                      O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_B7C5AC242193BB3E.dll
                      O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
                      O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
                      O3 - Toolbar: AOL Toolbar - {DE9C389F-3316-41A7-809B-AA305ED9D922} - C:\Program Files\AOL\AOL Toolbar 5.0\aoltb.dll
                      O3 - Toolbar: Shareware.Pro-FR Toolbar - {280b5d37-4a76-467a-b3d6-942fca90acde} - C:\Program Files\Shareware.Pro-FR\tbSha1.dll
                      O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
                      O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
                      O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
                      O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
                      O4 - HKLM\..\Run: [DVDAgent] "C:\Program Files\Hewlett-Packard\Media\DVD\DVDAgent.exe"
                      O4 - HKLM\..\Run: [TSMAgent] "C:\Program Files\Hewlett-Packard\TouchSmart\Media\TSMAgent.exe"
                      O4 - HKLM\..\Run: [CLMLServer for HP TouchSmart] "C:\Program Files\Hewlett-Packard\TouchSmart\Media\Kernel\CLML\CLMLSvc.exe"
                      O4 - HKLM\..\Run: [TVAgent] "C:\Program Files\Hewlett-Packard\Media\TV\TVAgent.exe"
                      O4 - HKLM\..\Run: [UCam_Menu] "C:\Program Files\Hewlett-Packard\Media\Webcam\MUITransfer\MUIStartMenu.exe" "C:\Program Files\Hewlett-Packard\Media\Webcam" update "Software\Hewlett-Packard\Media\Webcam"
                      O4 - HKLM\..\Run: [SmartMenu] %ProgramFiles%\Hewlett-Packard\HP MediaSmart\SmartMenu.exe
                      O4 - HKLM\..\Run: [UpdateLBPShortCut] "C:\Program Files\CyberLink\LabelPrint\MUITransfer\MUIStartMenu.exe" "C:\Program Files\CyberLink\LabelPrint" UpdateWithCreateOnce "Software\CyberLink\LabelPrint\2.5"
                      O4 - HKLM\..\Run: [UpdatePSTShortCut] "C:\Program Files\CyberLink\DVD Suite\MUITransfer\MUIStartMenu.exe" "C:\Program Files\CyberLink\DVD Suite" UpdateWithCreateOnce "Software\CyberLink\PowerStarter"
                      O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
                      O4 - HKLM\..\Run: [QlbCtrl.exe] C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe /Start
                      O4 - HKLM\..\Run: [UpdateP2GoShortCut] "C:\Program Files\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe" "C:\Program Files\CyberLink\Power2Go" UpdateWithCreateOnce "SOFTWARE\CyberLink\Power2Go\6.0"
                      O4 - HKLM\..\Run: [UpdatePDIRShortCut] "C:\Program Files\CyberLink\PowerDirector\MUITransfer\MUIStartMenu.exe" "C:\Program Files\CyberLink\PowerDirector" UpdateWithCreateOnce "SOFTWARE\CyberLink\PowerDirector\7.0"
                      O4 - HKLM\..\Run: [HP Health Check Scheduler] c:\Program Files\Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe
                      O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
                      O4 - HKLM\..\Run: [WirelessAssistant] C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
                      O4 - HKLM\..\Run: [SysTrayApp] %ProgramFiles%\IDT\WDM\sttray.exe
                      O4 - HKLM\..\Run: [avast5] C:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe /nogui
                      O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
                      O4 - HKCU\..\Run: [LightScribe Control Panel] C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe -hidden
                      O4 - HKCU\..\Run: [HPAdvisor] C:\Program Files\Hewlett-Packard\HP Advisor\HPAdvisor.exe autorun=AUTORUN
                      O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
                      O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
                      O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
                      O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
                      O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
                      O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
                      O4 - Startup: Notification de cadeaux MSN.lnk = C:\Users\gitiane\AppData\Roaming\Microsoft\Notification de cadeaux MSN\lsnfier.exe
                      O4 - Startup: OpenOffice.org 3.1.lnk = C:\Program Files\OpenOffice.org 3\program\quickstart.exe
                      O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
                      O4 - Global Startup: WinZip Quick Pick.lnk = C:\Program Files\WinZip\WZQKPICK.EXE
                      O8 - Extra context menu item: &Recherche AOL Toolbar - C:\ProgramData\AOL\ieToolbar\resources\fr-FR\local\search.html
                      O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
                      O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
                      O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
                      O9 - Extra button: Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
                      O9 - Extra 'Tools' menuitem: &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
                      O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
                      O13 - Gopher Prefix:
                      O16 - DPF: {73ECB3AA-4717-450C-A2AB-D00DAD9EE203} (GMNRev Class) - http://h20270.www2.hp.com/ediags/gmn2/install/HPProductDetection2.cab
                      O23 - Service: Andrea ST Filters Service (AESTFilters) - Andrea Electronics Corporation - C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_c92065b9\aestsrv.exe
                      O23 - Service: Ati External Event Utility - ATI Technologies Inc. - C:\Windows\system32\Ati2evxx.exe
                      O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
                      O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
                      O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
                      O23 - Service: Com4QLBEx - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe
                      O23 - Service: GameConsoleService - WildTangent, Inc. - C:\Program Files\HP Games\My HP Game Console\GameConsoleService.exe
                      O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
                      O23 - Service: HP Health Check Service - Hewlett-Packard - c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe
                      O23 - Service: hpqwmiex - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
                      O23 - Service: HP Service (hpsrv) - Hewlett-Packard Corporation - C:\Windows\system32\Hpservice.exe
                      O23 - Service: Lavasoft Ad-Aware Service - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe
                      O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
                      O23 - Service: Recovery Service for Windows - Unknown owner - C:\Program Files\SMINST\BLService.exe
                      O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared files\RichVideo.exe
                      O23 - Service: Audio Service (STacSV) - IDT, Inc. - C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_c92065b9\STacSV.exe
                      O23 - Service: TV Background Capture Service (TVBCS) (TVCapSvc) - Unknown owner - C:\Program Files\Hewlett-Packard\Media\TV\Kernel\TV\TVCapSvc.exe
                      O23 - Service: TV Task Scheduler (TVTS) (TVSched) - Unknown owner - C:\Program Files\Hewlett-Packard\Media\TV\Kernel\TV\TVSched.exe
                      0
                      1. crapoulou Modérateur
                        Pas de soucis.
                        Quel est ton disque dur E ?

                        ********

                        Télécharge Malwarebytes’ Anti-Malware
                        = = = = >>> En cliquant ici <<< = = = =

                        - Enregistre le sur le bureau
                        - Double-clique sur le fichier téléchargé pour lancer le processus d’installation
                        - Lorsqu’il te le sera demandé, mets à jour Malwarebytes anti malware
                        - Si le pare-feu demande l’autorisation de se connecter pour malwarebytes, acceptes
                        - Une fois la mise à jour terminée, ferme Malwarebytes
                        - Double-clique sur l’icône de malwarebytes pour le relancer
                        - Dans l’onglet, Recherche, probablement ouvert par défaut,
                        - Sélectionne Exécuter un examen complet
                        - Clique sur Rechercher
                        - Le scan démarre
                        - A la fin de l’analyse, un message s’affiche : L’examen s’est terminé normalement. Cliquez sur ‘Afficher les résultats’ pour afficher tous les objets trouvés.
                        - Clique sur Ok pour poursuivre.
                        - Si des malwares ont été détectés, cliques sur Afficher les résultats
                        - Sélectionnes tout (ou laisses cochés) et cliques sur Supprimer la sélection Malwarebytes va détruire les fichiers et clés de registre et en mettre une copie dans la quarantaine.
                        - Malwarebytes va ouvrir le bloc-notes et y copier le rapport d’analyse.
                        - Rends toi dans l’onglet rapport/log
                        - Tu clique dessus pour l’afficher une fois affiché
                        - Tu clique sur édition en haut du bloc notes, et puis sur sélectionner tout
                        - Tu reclique sur édition et puis sur copier et tu reviens sur le forum et dans ta réponse
                        - Tu clique droit dans le cadre de la réponse et coller

                        Si tu as besoin d’aide regarde ce tutorial ICI
                        0
                        1. gigi21 Auteur
                          bonjour

                          E est un lecteur de DVD
                          voila le rapport log

                          Malwarebytes' Anti-Malware 1.44
                          Version de la base de données: 3704
                          Windows 6.0.6002 Service Pack 2
                          Internet Explorer 8.0.6001.18882

                          08/02/2010 10:23:57
                          mbam-log-2010-02-08 (10-23-57).txt

                          Type de recherche: Examen complet (C:\|D:\|F:\|)
                          Eléments examinés: 357248
                          Temps écoulé: 1 hour(s), 30 minute(s), 29 second(s)

                          Processus mémoire infecté(s): 0
                          Module(s) mémoire infecté(s): 0
                          Clé(s) du Registre infectée(s): 2
                          Valeur(s) du Registre infectée(s): 0
                          Elément(s) de données du Registre infecté(s): 0
                          Dossier(s) infecté(s): 0
                          Fichier(s) infecté(s): 2

                          Processus mémoire infecté(s):
                          (Aucun élément nuisible détecté)

                          Module(s) mémoire infecté(s):
                          (Aucun élément nuisible détecté)

                          Clé(s) du Registre infectée(s):
                          HKEY_CLASSES_ROOT\CLSID\{a4730ebe-43a6-443e-9776-36915d323ad3} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
                          HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{1d4db7d2-6ec9-47a3-bd87-1e41684e07bb} (Adware.MyWebSearch) -> Quarantined and deleted successfully.

                          Valeur(s) du Registre infectée(s):
                          (Aucun élément nuisible détecté)

                          Elément(s) de données du Registre infecté(s):
                          (Aucun élément nuisible détecté)

                          Dossier(s) infecté(s):
                          (Aucun élément nuisible détecté)

                          Fichier(s) infecté(s):
                          C:\Ad-Remover\QUARANTINE\PROGRA~1\WI1F86~1\MESSEN~1\msimg32.dll.vir (Adware.MyWebSearch) -> Quarantined and deleted successfully.
                          C:\Ad-Remover\QUARANTINE\PROGRA~1\WI1F86~1\MESSEN~1\riched20.dll.vir (Adware.MyWebSearch) -> Quarantined and deleted successfully.
                          0
                          1. crapoulou Modérateur
                            Vide la quarantaine de Malwarebyte' Anti Malware.
                            Comment va le PC ?
                            0

                            Discussions similaires

                            Ouvrir un fichier .pub sans Publisher
                            baissaoui

                            0 réponse
                            Ouvrir document Publisher sans Publisher
                            Curtis Hayes

                            7 réponses
                            Code source couleur de fond
                            Mehdi-Amg

                            9 réponses