Infectation de fichiers systèmes et dll

Résolu
birdsfly -  
Bonjour,
j'ai fait un scan avec Malwarebytes' Anti-Malware juste pour vérifier, et j'ai trouvé que les fichiers infectés sont les suivant:
C:\Program Files\MSN Messenger\msimg32.dll
C:\Program Files\MSN Messenger\riched20.dll
C:\SDFix\dummy.sys
C:\SDFix\apps\dummy.sys
C:\System Volume Information\_restore{AAFCD855-4609-440C-BB03-F56D03119C50}\RP277\A0146137.exe

mais je pense que ce sont des fichiers importants alors j'ai pas pu les supprimer, qu'est ce que je doit faire dans ce cas?

merci d'avance
Configuration: Windows XP / Firefox 3.5.8

27 réponses

Résumé de la discussion

Une détection par Malwarebytes' Anti-Malware signale des infections sur Windows XP, notamment des DLL liées à MSN Messenger et des fichiers dans SDFix et dans les sauvegardes de restauration système. Les conseils pertinents préconisent de supprimer immédiatement les éléments détectés, comme Toolscleaner et le fichier C:\Tcleaner.txt, et de poursuivre le nettoyage pour éviter les rechutes. Des indications supplémentaires montrent que la suppression des infections et des composants associés à Adware.MyWebSearch et Adware.ShopperReports est possible, puis il convient de vérifier les dossiers et les entrées du Registre. En cas de doute, l'utilisation d'un second outil de nettoyage et la restauration des paramètres du navigateur sont recommandées pour éviter les résidus d'extension et les redirections.

Bobot (l’IA à votre service)
  1. birdsfly Auteur
    pour être plus claire voici le rapport

    Malwarebytes' Anti-Malware 1.44
    Version de la base de données: 3510
    Windows 5.1.2600 Service Pack 2
    Internet Explorer 7.0.5730.13

    20/02/2010 23:28:42
    mbam-log-2010-02-20 (23-28-28).txt

    Type de recherche: Examen complet (C:\|D:\|)
    Eléments examinés: 240504
    Temps écoulé: 1 hour(s), 13 minute(s), 0 second(s)

    Processus mémoire infecté(s): 0
    Module(s) mémoire infecté(s): 0
    Clé(s) du Registre infectée(s): 0
    Valeur(s) du Registre infectée(s): 0
    Elément(s) de données du Registre infecté(s): 0
    Dossier(s) infecté(s): 0
    Fichier(s) infecté(s): 5

    Processus mémoire infecté(s):
    (Aucun élément nuisible détecté)

    Module(s) mémoire infecté(s):
    (Aucun élément nuisible détecté)

    Clé(s) du Registre infectée(s):
    (Aucun élément nuisible détecté)

    Valeur(s) du Registre infectée(s):
    (Aucun élément nuisible détecté)

    Elément(s) de données du Registre infecté(s):
    (Aucun élément nuisible détecté)

    Dossier(s) infecté(s):
    (Aucun élément nuisible détecté)

    Fichier(s) infecté(s):
    C:\Program Files\MSN Messenger\msimg32.dll (Adware.MyWebSearch) -> No action taken.
    C:\Program Files\MSN Messenger\riched20.dll (Adware.MyWebSearch) -> No action taken.
    C:\SDFix\dummy.sys (Malware.Trace) -> No action taken.
    C:\SDFix\apps\dummy.sys (Malware.Trace) -> No action taken.
    C:\System Volume Information\_restore{AAFCD855-4609-440C-BB03-F56D03119C50}\RP277\A0146137.exe (Adware.MyWebSearch) -> No action taken.
    0
    1. crapoulou Modérateur
      Salut,
      Tu peux tout supprimer sans souci.
      Tu as subi une désinfection on dirait il y a quelques temps.

      Supprime ce dossier :
      C:\SDFix\

      Ce qui est dans MSN Messenger est un adware MyWebSearch

      Je ferais une analyse complémentaire :

      Télécharge Ad-Remover ( de Cyrildu17 / C_XX ) sur ton bureau :
      = = = =>>> En cliquant ici <<<= = = =

      /!\ Déconnectes toi et fermes toutes applications en cours, désactive ton antivirus le temps de la manipulation/!\

      * Double clique sur l’exécutable pour le lancer.
      * Au message d’avertissement qui s’affiche, sélectionne ‘Oui’.
      * Au menu principal choisi l’option "S" et tape ensuite sur la touche Entrée.
      * Poste le rapport qui apparaît à la fin de l’analyse qui peut prendre du temps.

      (Le rapport est sauvegardé aussi sous C:\Ad-report(date).log)
      (CTRL+A Pour tout sélectionner, CTRL+C pour copier et CTRL+V pour coller)

      Note :
      "Process.exe", une composante de l’outil, est détecté par certains antivirus (AntiVir, Dr.Web, Kaspersky Anti-Virus) comme étant un RiskTool.
      Il ne s’agit pas d’un virus, mais d’un utilitaire destiné à mettre fin à des processus.
      0
      1. birdsfly Auteur
        alors avant de faire l'analyse complémentaire, je peux supprimer les fichiers msimg32.dll et riched20.dll d'MSN Messenger sans souci? (pour le dossier SDFix je l'ai supprimé maintenant)

        et merci pour votre aide :)
        0
        1. crapoulou Modérateur
          Oui, oui, tu peux les supprimer.
          0
          2. birdsfly Auteur
            voilà j'ai tou supprimé comme vous avez dit, et voici le rapport de l'analyse avec Ad-Remover:

            .
            ======= RAPPORT D'AD-REMOVER 1.1.4.6_J | UNIQUEMENT XP/VISTA/7 =======
            .
            Mis à jour par C_XX le 05.02.2010 à 17:34
            Contact: AdRemover.contact@gmail.com
            Site web: http://pagesperso-orange.fr/NosTools/ad_remover.html
            .
            Lancé à: 16:23:40, 21/02/2010 | Mode Normal | Option: SCAN
            Exécuté de: C:\Ad-Remover\
            Système d'exploitation: Microsoft® Windows XP™ Service Pack 2 v5.1.2600
            Nom du PC: HANAA | Utilisateur actuel: user
            .
            ============== ÉLÉMENT(S) TROUVÉ(S) ==============
            .
            Service: *MyWebSearchService*

            C:\DOCUME~1\user\APPLIC~1\Mozilla\FireFox\Profiles\of0vzbp9.default\extensions\toolbar@ask.com
            C:\DOCUME~1\user\APPLIC~1\Mozilla\FireFox\Profiles\of0vzbp9.default\searchplugins\mywebsearch.xml
            C:\WINDOWS\Installer\{86D4B82A-ABED-442A-BE86-96357B70F4FE}
            C:\Program Files\Mozilla FireFox\extensions\{01398B87-61AF-4FFB-9AB5-1A1C5FB39A9C}
            C:\Program Files\Mozilla FireFox\extensions\search@searchsettings.com
            C:\Program Files\Ask.com
            C:\Program Files\Dealio Toolbar
            C:\Program Files\Fun Web Products
            C:\Program Files\Search Settings
            C:\DOCUME~1\user\APPLIC~1\Dealio
            C:\DOCUME~1\user\APPLIC~1\Search Settings
            C:\Documents and Settings\user\Local Settings\Application Data\AskToolbar
            C:\Windows\Installer\42d8a1.msi
            C:\Windows\Installer\42d8a8.msi
            .
            HKCU\software\appdatalow\AskToolbarInfo
            HKCU\software\appdatalow\software\Dealio
            HKCU\software\Ask.com
            HKCU\software\AskToolbar
            HKCU\software\Dealio
            HKCU\software\FunWebProducts
            HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A5AA24EA-11B8-4113-95AE-9ED71DEAF12A}
            HKCU\software\microsoft\internet explorer\searchscopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}
            HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{0E5CBF21-D15F-11D0-8301-00AA005B4383}
            HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{D4027C7F-154A-4066-A1AD-4243D8127440}
            HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{D4027C7F-154A-4066-A1AD-4243D8127440}
            HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks\\{E312764E-7706-43F1-8DAB-FCDD2B1E416D}
            HKCU\software\Search Settings
            HKLM\Software\Classes\AppID\{9B0CB95C-933A-4B8C-B6D4-EDCD19A43874}
            HKLM\software\classes\appid\GenericAskToolbar.DLL
            HKLM\Software\Classes\CLSID\{01398B87-61AF-4FFB-9AB5-1A1C5FB39A9C}
            HKLM\Software\Classes\CLSID\{D4027C7F-154A-4066-A1AD-4243D8127440}
            HKLM\Software\Classes\CLSID\{E312764E-7706-43F1-8DAB-FCDD2B1E416D}
            HKLM\software\classes\GenericAskToolbar.ToolbarWnd
            HKLM\software\classes\GenericAskToolbar.ToolbarWnd.1
            HKLM\software\classes\installer\Features\A3BB3C491A65ED342A24B8144FE679FE
            HKLM\software\classes\installer\Products\79CAA1B036589D14EA74856E2A220F1E
            HKLM\software\classes\installer\Products\A28B4D68DEBAA244EB686953B7074FEF
            HKLM\software\classes\installer\Products\A3BB3C491A65ED342A24B8144FE679FE
            HKLM\Software\Classes\Interface\{6C434537-053E-486D-B62A-160059D9D456}
            HKLM\Software\Classes\Interface\{91CF619A-4686-4CA4-9232-3B2E6B63AA92}
            HKLM\Software\Classes\Interface\{AC71B60E-94C9-4EDE-BA46-E146747BB67E}
            HKLM\Software\Classes\Interface\{D5A1EF9A-7948-435D-8B87-D6A598317288}
            HKLM\software\classes\SearchSettings.BHO
            HKLM\software\classes\SearchSettings.BHO.1
            HKLM\Software\Classes\TypeLib\{2996F0E7-292B-4CAE-893F-47B8B1C05B56}
            HKLM\Software\Classes\TypeLib\{937936AF-28CA-4973-B8AE-F250406149A2}
            HKLM\Software\Classes\TypeLib\{CD082CCA-086F-4FD8-8FD7-247A0DBBD1CC}
            HKLM\software\Dealio
            HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A5AA24EA-11B8-4113-95AE-9ED71DEAF12A}
            HKLM\Software\Microsoft\Internet Explorer\Toolbar\\{01398B87-61AF-4FFB-9AB5-1A1C5FB39A9C}
            HKLM\Software\Microsoft\Internet Explorer\Toolbar\\{D4027C7F-154A-4066-A1AD-4243D8127440}
            HKLM\Software\Microsoft\Internet Explorer\Toolbar\\{D4027C7F-154A-4066-A1AD-4243D8127440}
            HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\MyWebSearch bar Uninstall
            HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{01398B87-61AF-4FFB-9AB5-1A1C5FB39A9C}
            HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}
            HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E312764E-7706-43F1-8DAB-FCDD2B1E416D}
            HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\0292226F570267D459357AF78015E534
            HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\03285961954D5824C85975D955031EE8
            HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\0E12F736682067FDE4D1158D5940A82E
            HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\1A24B5BB8521B03E0C8D908F5ABC0AE6
            HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\23A03A6765D10864EB278629A2DF32C3
            HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\2B0D56C4F4C46D844A57FFED6F0D2852
            HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\323D2420527EA994FB326F15D333660E
            HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\3A4FCCE032CA50340A6975C92410AE30
            HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\49D4375FE41653242AEA4C969E4E65E0
            HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\588DFA161592E9747948BFFE475476F4
            HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\6AA0923513360135B272E8289C5F13FA
            HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\6AC3985F4D64C2245A96D31569D1BF40
            HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\6E00D9B24354FBA44AE2CA0FA86EF2E2
            HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\6F7467AF8F29C134CBBAB394ECCFDE96
            HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\741B4ADF27276464790022C965AB6DA8
            HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\7C13F41728A69EF41AA1A3372FB86FA6
            HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\7DE196B10195F5647A2B21B761F3DE01
            HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\855847FA0E25FBA46B8516389DFDD4B3
            HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\922525DCC5199162F8935747CA3D8E59
            HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\9D4F5849367142E4685ED8C25E44C5ED
            HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\9DC2844D0E3E8924C8973C3B3BAE1F58
            HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\A5875B04372C19545BEB90D4D606C472
            HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\A876D9E80B896EC44A8620248CC79296
            HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\AFEB575AA30ACB243B748619F62F0782
            HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\B072F84D5AF1BB34C980E01F5689D864
            HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\B66FFAB725B92594C986DE826A867888
            HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\B92A2929968AED344BD6B34AD60E6604
            HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\BB1E992117B1B0B42BD2CDAEB8E749C4
            HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\BCDA179D619B91648538E3394CAC94CC
            HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\C7D9132F42224AC49BD8C06A0F8E39C4
            HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\D677B1A9671D4D4004F6F2A4469E86EA
            HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\DA6F069968D91A540A1363E997581959
            HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\DBC7F2B5594E08A4C87EF4C22971C615
            HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\DD1402A9DD4215A43ABDE169A41AFA0E
            HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\E36E114A0EAD2AD46B381D23AD69CDDF
            HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\EF8E618DB3AEDFBB384561B5C548F65E
            HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\F461B8DD96FF5AA41A52D14E1D7B69C7
            HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Products\79CAA1B036589D14EA74856E2A220F1E
            HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Products\A28B4D68DEBAA244EB686953B7074FEF
            HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Products\A3BB3C491A65ED342A24B8144FE679FE
            HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\SearchSettings
            HKLM\software\microsoft\windows\currentversion\uninstall\{0B1AAC97-8563-41D9-AE47-58E6A222F0E1}
            HKLM\software\microsoft\windows\currentversion\uninstall\{86D4B82A-ABED-442A-BE86-96357B70F4FE}
            HKLM\software\microsoft\windows\currentversion\uninstall\{94C3BB3A-56A1-43DE-A242-8B41F46E97EF}
            HKLM\software\Search Settings
            HKU\s-1-5-21-1214440339-162531612-682003330-1003\software\appdatalow\AskToolbarInfo
            HKU\s-1-5-21-1214440339-162531612-682003330-1003\software\appdatalow\software\Dealio
            HKU\s-1-5-21-1214440339-162531612-682003330-1003\software\Ask.com
            HKU\s-1-5-21-1214440339-162531612-682003330-1003\software\AskToolbar
            HKU\s-1-5-21-1214440339-162531612-682003330-1003\software\Dealio
            HKU\s-1-5-21-1214440339-162531612-682003330-1003\software\FunWebProducts
            HKU\s-1-5-21-1214440339-162531612-682003330-1003\software\Search Settings
            .
            ============== Scan additionnel ==============
            .
            .
            * Mozilla FireFox Version 3.5.8 [fr] *
            .
            Nom du profil: of0vzbp9.default (user)
            .
            (user, prefs.js) Browser.download.lastDir, C:\Documents and Settings\user\Mes documents\Mes images
            (user, prefs.js) Browser.search.defaultenginename, Yahoo
            (user, prefs.js) Browser.search.selectedEngine, Yahoo
            (user, prefs.js) Extensions.enabledItems, toolbar@ask.com:3.5.0.144,{01398B87-61AF-4FFB-9AB5-1A1C5FB39A9C}:4.0,fdm_ffext@freedownloadmanager.org:1.3.4,{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA}:6.0.17,jqs@sun.com:1.0,{20a82645-c095-46ed-80e3-08825760534b}:1.1,search@searchsettings.com:1.2.1,{972ce4c6-7e08-4474-a285-3208198ce6fd}:3.5.8
            (user, prefs.js) Keyword.URL, hxxp://fr.search.yahoo.com/search?ei=utf-8&fr=greentree_ff1&p=
            .
            (user, prefs.js) TROUVE - Extensions.asktb.cbid, AH
            (user, prefs.js) TROUVE - Extensions.asktb.default-channel-url-mask, hxxp://www.ask.com/web?q={query}&o={o}&l={l}&qsrc={qsrc}
            (user, prefs.js) TROUVE - Extensions.asktb.dtid,
            (user, prefs.js) TROUVE - Extensions.asktb.l, dis
            (user, prefs.js) TROUVE - Extensions.asktb.locale, en_US
            (user, prefs.js) TROUVE - Extensions.asktb.o, 13169
            (user, prefs.js) TROUVE - Extensions.asktb.options-lang, en
            (user, prefs.js) TROUVE - Extensions.asktb.options-locale, UK
            (user, prefs.js) TROUVE - Extensions.asktb.qsrc, 2871
            (user, prefs.js) TROUVE - Extensions.enabledItems, toolbar@ask.com:3.5.0.144,{01398B87-61AF-4FFB-9AB5-1A1C5FB39A9C}:4.0,fdm_ffext@freedownloadmanager.org:1.3.4,{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA}:6.0.17,jqs@sun.com:1.0,{20a82645-c095-46ed-80e3-08825760534b}:1.1,search@searchsettings.com:1.2.1,{972ce4c6-7e08-4474-a285-3208198ce6fd}:3.5.8
            (user, prefs.js) TROUVE - Extensions.mywebsearch.openSearchURL, hxxp://search.mywebsearch.com/mywebsearch/opensearch.jhtml?id=ZCxdm345YYMA&ptb=_yFo.BNAqqvM_H6PHlj1_w
            (user, prefs.js) TROUVE - Extensions.mywebsearch.prevKwdEnabled, true
            (user, prefs.js) TROUVE - Extensions.mywebsearch.prevKwdURL, hxxp://fr.search.yahoo.com/search?ei=utf-8&fr=greentree_ff1&p=
            .
            .
            * Internet Explorer Version 7.0.5730.13 *
            .
            [HKEY_CURRENT_USER\..\Internet Explorer\Main]
            .
            Start Page: hxxp://search.conduit.com?SearchSource=10&ctid=CT2095689
            Search Bar: hxxp://www.google.fr
            Use Custom Search URL: 1 (0x1)
            Do404Search: 01000000
            Local Page: C:\WINDOWS\system32\blank.htm
            Show_ToolBar: yes
            Search Page: ${URL_SEARCHPAGE}
            Enable Browser Extensions: yes
            Use Search Asst: no
            .
            [HKEY_LOCAL_MACHINE\..\Internet Explorer\Main]
            .
            Default_Page_URL: hxxp://go.microsoft.com/fwlink/?LinkId=69157
            Default_Search_URL: hxxp://go.microsoft.com/fwlink/?LinkId=54896
            Search Page: ${URL_SEARCHPAGE}
            Delete_Temp_Files_On_Exit: yes
            Local Page: %SystemRoot%\system32\blank.htm
            Start Page: hxxp://go.microsoft.com/fwlink/?LinkId=69157
            .
            [HKEY_LOCAL_MACHINE\..\Internet Explorer\ABOUTURLS]
            .
            Tabs: res://ieframe.dll/tabswelcome.htm
            .
            ============== Suspect (Cracks, Serials, ...) ==============
            .
            C:\Documents and Settings\user\Local Settings\Temp\apatch.exe
            C:\Documents and Settings\user\Local Settings\Temp\sspatch.exe
            C:\Documents and Settings\user\Mes documents\cours\instal\Genuine XP\office_crack.rar
            C:\Documents and Settings\user\Mes documents\cours\instal\Genuine XP\Patcher XP Pirated Crack.exe
            C:\Documents and Settings\user\Mes documents\cours\Nouveau dossier\mustapha\hw2patch2.30.zip
            C:\Documents and Settings\user\Mes documents\Islam\oit\ime\WinrRarSerialInstall.exe
            .
            ===================================
            .
            13535 Octet(s) - C:\Ad-Report-SCAN[1].log
            .
            4007 Fichier(s) - C:\DOCUME~1\user\LOCALS~1\Temp
            239 Fichier(s) - C:\WINDOWS\Temp
            78 Fichier(s) - C:\WINDOWS\Prefetch
            .
            2 Fichier(s) - C:\Ad-Remover\BACKUP
            0 Fichier(s) - C:\Ad-Remover\QUARANTINE
            .
            Fin à: 16:32:38 | 21/02/2010 - SCAN[1]
            .
            ============== E.O.F ==============
            .
            0
            1. birdsfly Auteur
              pouvez vous m'éclairer? je ne sais pas quoi faire avec ce rapport :)
              0
              2. crapoulou Modérateur
                No panic, j'arrive...
                J'ai une vie réelle aussi :o).

                Nettoyage avec Ad-Remover :

                /!\ Déconnectes toi et fermes toutes applications en cours, désactive ton antivirus le temps de la manipulation/!\

                * Double clique sur l’exécutable pour le lancer.
                * Au message d’avertissement qui s’affiche, sélectionne ‘Oui’.
                * Au menu principal choisi l’option "L" et tape ensuite sur la touche Entrée.
                * Poste le rapport qui apparaît à la fin de l’analyse qui peut prendre du temps.

                (Le rapport est sauvegardé aussi sous C:\Ad-report(date).log)
                (CTRL+A Pour tout sélectionner, CTRL+C pour copier et CTRL+V pour coller)

                Note :
                "Process.exe", une composante de l’outil, est détecté par certains antivirus (AntiVir, Dr.Web, Kaspersky Anti-Virus) comme étant un RiskTool.
                Il ne s’agit pas d’un virus, mais d’un utilitaire destiné à mettre fin à des processus.
                0
                1. birdsfly Auteur
                  hh merci beaucoup crapoulou et désolée si j'étais pressée (je dois apprendre à être patiente :p )

                  bon je vais faire le nettoyage, et merci encore :D , mais est ce que vous avez une idée sur le dossier SDFix? d'où il est venu?
                  0
                  1. crapoulou Modérateur
                    Il est pas infectieux, c'est un outil utilisé lors d'une désinfection précédente probablement.
                    Il n'est pas à garder sur le PC.
                    0
                    1. birdsfly Auteur
                      d'accord merci, ci joint le rapport après nettoyage :

                      .
                      ======= RAPPORT D'AD-REMOVER 1.1.4.6_J | UNIQUEMENT XP/VISTA/7 =======
                      .
                      Mis à jour par C_XX le 05.02.2010 à 17:34
                      Contact: AdRemover.contact@gmail.com
                      Site web: http://pagesperso-orange.fr/NosTools/ad_remover.html
                      .
                      Lancé à: 18:32:21, 21/02/2010 | Mode Normal | Option: CLEAN
                      Exécuté de: C:\Ad-Remover\
                      Système d'exploitation: Microsoft® Windows XP™ Service Pack 2 v5.1.2600
                      Nom du PC: HANAA | Utilisateur actuel: user
                      .
                      ============== ÉLÉMENT(S) NEUTRALISÉ(S) ==============
                      .
                      Service: *MyWebSearchService*

                      C:\DOCUME~1\user\APPLIC~1\Mozilla\FireFox\Profiles\of0vzbp9.default\extensions\toolbar@ask.com
                      C:\DOCUME~1\user\APPLIC~1\Mozilla\FireFox\Profiles\of0vzbp9.default\searchplugins\mywebsearch.xml
                      C:\WINDOWS\Installer\{86D4B82A-ABED-442A-BE86-96357B70F4FE}
                      C:\Program Files\Mozilla FireFox\extensions\{01398B87-61AF-4FFB-9AB5-1A1C5FB39A9C}
                      C:\Program Files\Mozilla FireFox\extensions\search@searchsettings.com
                      C:\Program Files\Ask.com
                      C:\Program Files\Dealio Toolbar
                      C:\Program Files\Fun Web Products
                      C:\Program Files\Search Settings
                      C:\DOCUME~1\user\APPLIC~1\Dealio
                      C:\DOCUME~1\user\APPLIC~1\Search Settings
                      C:\Documents and Settings\user\Local Settings\Application Data\AskToolbar
                      C:\Windows\Installer\42d8a1.msi
                      C:\Windows\Installer\42d8a8.msi

                      (!) -- Fichiers temporaires supprimés.

                      .
                      HKCU\software\appdatalow\AskToolbarInfo
                      HKCU\software\appdatalow\software\Dealio
                      HKCU\software\Ask.com
                      HKCU\software\AskToolbar
                      HKCU\software\Dealio
                      HKCU\software\FunWebProducts
                      HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A5AA24EA-11B8-4113-95AE-9ED71DEAF12A}
                      HKCU\software\microsoft\internet explorer\searchscopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}
                      HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{0E5CBF21-D15F-11D0-8301-00AA005B4383}
                      HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{D4027C7F-154A-4066-A1AD-4243D8127440}
                      HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks\\{E312764E-7706-43F1-8DAB-FCDD2B1E416D}
                      HKCU\software\Search Settings
                      HKLM\Software\Classes\AppID\{9B0CB95C-933A-4B8C-B6D4-EDCD19A43874}
                      HKLM\software\classes\appid\GenericAskToolbar.DLL
                      HKLM\Software\Classes\CLSID\{01398B87-61AF-4FFB-9AB5-1A1C5FB39A9C}
                      HKLM\Software\Classes\CLSID\{D4027C7F-154A-4066-A1AD-4243D8127440}
                      HKLM\Software\Classes\CLSID\{E312764E-7706-43F1-8DAB-FCDD2B1E416D}
                      HKLM\software\classes\GenericAskToolbar.ToolbarWnd
                      HKLM\software\classes\GenericAskToolbar.ToolbarWnd.1
                      HKLM\software\classes\installer\Features\A3BB3C491A65ED342A24B8144FE679FE
                      HKLM\software\classes\installer\Products\79CAA1B036589D14EA74856E2A220F1E
                      HKLM\software\classes\installer\Products\A28B4D68DEBAA244EB686953B7074FEF
                      HKLM\software\classes\installer\Products\A3BB3C491A65ED342A24B8144FE679FE
                      HKLM\Software\Classes\Interface\{6C434537-053E-486D-B62A-160059D9D456}
                      HKLM\Software\Classes\Interface\{91CF619A-4686-4CA4-9232-3B2E6B63AA92}
                      HKLM\Software\Classes\Interface\{AC71B60E-94C9-4EDE-BA46-E146747BB67E}
                      HKLM\Software\Classes\Interface\{D5A1EF9A-7948-435D-8B87-D6A598317288}
                      HKLM\software\classes\SearchSettings.BHO
                      HKLM\software\classes\SearchSettings.BHO.1
                      HKLM\Software\Classes\TypeLib\{2996F0E7-292B-4CAE-893F-47B8B1C05B56}
                      HKLM\Software\Classes\TypeLib\{937936AF-28CA-4973-B8AE-F250406149A2}
                      HKLM\Software\Classes\TypeLib\{CD082CCA-086F-4FD8-8FD7-247A0DBBD1CC}
                      HKLM\software\Dealio
                      HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A5AA24EA-11B8-4113-95AE-9ED71DEAF12A}
                      HKLM\Software\Microsoft\Internet Explorer\Toolbar\\{01398B87-61AF-4FFB-9AB5-1A1C5FB39A9C}
                      HKLM\Software\Microsoft\Internet Explorer\Toolbar\\{D4027C7F-154A-4066-A1AD-4243D8127440}
                      HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\MyWebSearch bar Uninstall
                      HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{01398B87-61AF-4FFB-9AB5-1A1C5FB39A9C}
                      HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}
                      HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E312764E-7706-43F1-8DAB-FCDD2B1E416D}
                      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\0292226F570267D459357AF78015E534
                      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\03285961954D5824C85975D955031EE8
                      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\0E12F736682067FDE4D1158D5940A82E
                      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\1A24B5BB8521B03E0C8D908F5ABC0AE6
                      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\23A03A6765D10864EB278629A2DF32C3
                      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\2B0D56C4F4C46D844A57FFED6F0D2852
                      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\323D2420527EA994FB326F15D333660E
                      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\3A4FCCE032CA50340A6975C92410AE30
                      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\49D4375FE41653242AEA4C969E4E65E0
                      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\588DFA161592E9747948BFFE475476F4
                      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\6AA0923513360135B272E8289C5F13FA
                      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\6AC3985F4D64C2245A96D31569D1BF40
                      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\6E00D9B24354FBA44AE2CA0FA86EF2E2
                      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\6F7467AF8F29C134CBBAB394ECCFDE96
                      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\741B4ADF27276464790022C965AB6DA8
                      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\7C13F41728A69EF41AA1A3372FB86FA6
                      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\7DE196B10195F5647A2B21B761F3DE01
                      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\855847FA0E25FBA46B8516389DFDD4B3
                      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\922525DCC5199162F8935747CA3D8E59
                      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\9D4F5849367142E4685ED8C25E44C5ED
                      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\9DC2844D0E3E8924C8973C3B3BAE1F58
                      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\A5875B04372C19545BEB90D4D606C472
                      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\A876D9E80B896EC44A8620248CC79296
                      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\AFEB575AA30ACB243B748619F62F0782
                      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\B072F84D5AF1BB34C980E01F5689D864
                      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\B66FFAB725B92594C986DE826A867888
                      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\B92A2929968AED344BD6B34AD60E6604
                      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\BB1E992117B1B0B42BD2CDAEB8E749C4
                      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\BCDA179D619B91648538E3394CAC94CC
                      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\C7D9132F42224AC49BD8C06A0F8E39C4
                      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\D677B1A9671D4D4004F6F2A4469E86EA
                      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\DA6F069968D91A540A1363E997581959
                      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\DBC7F2B5594E08A4C87EF4C22971C615
                      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\DD1402A9DD4215A43ABDE169A41AFA0E
                      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\E36E114A0EAD2AD46B381D23AD69CDDF
                      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\EF8E618DB3AEDFBB384561B5C548F65E
                      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\F461B8DD96FF5AA41A52D14E1D7B69C7
                      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Products\79CAA1B036589D14EA74856E2A220F1E
                      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Products\A28B4D68DEBAA244EB686953B7074FEF
                      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Products\A3BB3C491A65ED342A24B8144FE679FE
                      HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\SearchSettings
                      HKLM\software\microsoft\windows\currentversion\uninstall\{0B1AAC97-8563-41D9-AE47-58E6A222F0E1}
                      HKLM\software\microsoft\windows\currentversion\uninstall\{86D4B82A-ABED-442A-BE86-96357B70F4FE}
                      HKLM\software\microsoft\windows\currentversion\uninstall\{94C3BB3A-56A1-43DE-A242-8B41F46E97EF}
                      HKLM\software\Search Settings
                      .
                      ============== Scan additionnel ==============
                      .
                      .
                      * Mozilla FireFox Version 3.5.8 [fr] *
                      .
                      Nom du profil: of0vzbp9.default (user)
                      .
                      (user, prefs.js) Browser.download.lastDir, C:\Documents and Settings\user\Mes documents\Mes images
                      (user, prefs.js) Browser.search.defaultenginename, Yahoo
                      (user, prefs.js) Browser.search.selectedEngine, Yahoo
                      (user, prefs.js) Extensions.enabledItems, toolbar@ask.com:3.5.0.144,{01398B87-61AF-4FFB-9AB5-1A1C5FB39A9C}:4.0,fdm_ffext@freedownloadmanager.org:1.3.4,{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA}:6.0.17,jqs@sun.com:1.0,{20a82645-c095-46ed-80e3-08825760534b}:1.1,search@searchsettings.com:1.2.1,{972ce4c6-7e08-4474-a285-3208198ce6fd}:3.5.8
                      (user, prefs.js) Keyword.URL, hxxp://fr.search.yahoo.com/search?ei=utf-8&fr=greentree_ff1&p=
                      .
                      (user, prefs.js) EFFACE - Extensions.asktb.cbid, AH
                      (user, prefs.js) EFFACE - Extensions.asktb.default-channel-url-mask, hxxp://www.ask.com/web?q={query}&o={o}&l={l}&qsrc={qsrc}
                      (user, prefs.js) EFFACE - Extensions.asktb.dtid,
                      (user, prefs.js) EFFACE - Extensions.asktb.l, dis
                      (user, prefs.js) EFFACE - Extensions.asktb.locale, en_US
                      (user, prefs.js) EFFACE - Extensions.asktb.o, 13169
                      (user, prefs.js) EFFACE - Extensions.asktb.options-lang, en
                      (user, prefs.js) EFFACE - Extensions.asktb.options-locale, UK
                      (user, prefs.js) EFFACE - Extensions.asktb.qsrc, 2871
                      (user, prefs.js) EFFACE - Extensions.enabledItems, toolbar@ask.com:3.5.0.144,{01398B87-61AF-4FFB-9AB5-1A1C5FB39A9C}:4.0,fdm_ffext@freedownloadmanager.org:1.3.4,{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA}:6.0.17,jqs@sun.com:1.0,{20a82645-c095-46ed-80e3-08825760534b}:1.1,search@searchsettings.com:1.2.1,{972ce4c6-7e08-4474-a285-3208198ce6fd}:3.5.8
                      (user, prefs.js) EFFACE - Extensions.mywebsearch.openSearchURL, hxxp://search.mywebsearch.com/mywebsearch/opensearch.jhtml?id=ZCxdm345YYMA&ptb=_yFo.BNAqqvM_H6PHlj1_w
                      (user, prefs.js) EFFACE - Extensions.mywebsearch.prevKwdEnabled, true
                      (user, prefs.js) EFFACE - Extensions.mywebsearch.prevKwdURL, hxxp://fr.search.yahoo.com/search?ei=utf-8&fr=greentree_ff1&p=
                      .
                      .
                      * Internet Explorer Version 7.0.5730.13 *
                      .
                      [HKEY_CURRENT_USER\..\Internet Explorer\Main]
                      .
                      Start Page: hxxp://fr.msn.com/
                      Search Bar: hxxp://go.microsoft.com/fwlink/?linkid=54896
                      Use Custom Search URL: 1 (0x1)
                      Do404Search: 01000000
                      Local Page: C:\WINDOWS\system32\blank.htm
                      Show_ToolBar: yes
                      Enable Browser Extensions: yes
                      Use Search Asst: no
                      Default_search_url: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
                      Default_page_url: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
                      .
                      [HKEY_LOCAL_MACHINE\..\Internet Explorer\Main]
                      .
                      Default_Page_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
                      Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
                      Search Page: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
                      Delete_Temp_Files_On_Exit: yes
                      Local Page: %SystemRoot%\system32\blank.htm
                      Start Page: hxxp://fr.msn.com/
                      Search bar: hxxp://search.msn.com/spbasic.htm
                      .
                      [HKEY_LOCAL_MACHINE\..\Internet Explorer\ABOUTURLS]
                      .
                      Tabs: res://ieframe.dll/tabswelcome.htm
                      .
                      ============== Suspect (Cracks, Serials, ...) ==============
                      .
                      C:\Documents and Settings\user\Local Settings\Temp\apatch.exe
                      C:\Documents and Settings\user\Local Settings\Temp\sspatch.exe
                      C:\Documents and Settings\user\Mes documents\cours\instal\Genuine XP\office_crack.rar
                      C:\Documents and Settings\user\Mes documents\cours\instal\Genuine XP\Patcher XP Pirated Crack.exe
                      C:\Documents and Settings\user\Mes documents\cours\Nouveau dossier\mustapha\hw2patch2.30.zip
                      C:\Documents and Settings\user\Mes documents\Islam\oit\ime\WinrRarSerialInstall.exe
                      .
                      ===================================
                      .
                      13094 Octet(s) - C:\Ad-Report-CLEAN[1].log
                      13873 Octet(s) - C:\Ad-Report-SCAN[1].log
                      .
                      2666 Fichier(s) - C:\DOCUME~1\user\LOCALS~1\Temp
                      154 Fichier(s) - C:\WINDOWS\Temp
                      10 Fichier(s) - C:\WINDOWS\Prefetch
                      .
                      19 Fichier(s) - C:\Ad-Remover\BACKUP
                      192 Fichier(s) - C:\Ad-Remover\QUARANTINE
                      .
                      Fin à: 18:40:46 | 21/02/2010 - CLEAN[1]
                      .
                      ============== E.O.F ==============
                      .
                      0
                      1. crapoulou Modérateur
                        Tu étais infectée par :
                        AskToolbar
                        Dealio Toolbar
                        FunWebProducts

                        *******

                        Peux-tu me poster le rapport complet de MBAM (de ta dernière analyse) stp.
                        0
                        1. birdsfly Auteur
                          oui le voilà, c'est le rapport d'hier (il est déjà posté en haut):

                          Malwarebytes' Anti-Malware 1.44
                          Version de la base de données: 3510
                          Windows 5.1.2600 Service Pack 2
                          Internet Explorer 7.0.5730.13

                          20/02/2010 23:28:42
                          mbam-log-2010-02-20 (23-28-28).txt

                          Type de recherche: Examen complet (C:\|D:\|)
                          Eléments examinés: 240504
                          Temps écoulé: 1 hour(s), 13 minute(s), 0 second(s)

                          Processus mémoire infecté(s): 0
                          Module(s) mémoire infecté(s): 0
                          Clé(s) du Registre infectée(s): 0
                          Valeur(s) du Registre infectée(s): 0
                          Elément(s) de données du Registre infecté(s): 0
                          Dossier(s) infecté(s): 0
                          Fichier(s) infecté(s): 5

                          Processus mémoire infecté(s):
                          (Aucun élément nuisible détecté)

                          Module(s) mémoire infecté(s):
                          (Aucun élément nuisible détecté)

                          Clé(s) du Registre infectée(s):
                          (Aucun élément nuisible détecté)

                          Valeur(s) du Registre infectée(s):
                          (Aucun élément nuisible détecté)

                          Elément(s) de données du Registre infecté(s):
                          (Aucun élément nuisible détecté)

                          Dossier(s) infecté(s):
                          (Aucun élément nuisible détecté)

                          Fichier(s) infecté(s):
                          C:\Program Files\MSN Messenger\msimg32.dll (Adware.MyWebSearch) -> No action taken.
                          C:\Program Files\MSN Messenger\riched20.dll (Adware.MyWebSearch) -> No action taken.
                          C:\SDFix\dummy.sys (Malware.Trace) -> No action taken.
                          C:\SDFix\apps\dummy.sys (Malware.Trace) -> No action taken.
                          C:\System Volume Information\_restore{AAFCD855-4609-440C-BB03-F56D03119C50}\RP277\A0146137.exe (Adware.MyWebSearch) -> No action taken.
                          0
                          1. birdsfly Auteur
                            Ci-joint aussi le rapport d'une analyse du 17-02-2010 (après cette analyse j'ai supprimé tous les fichiers infectés qui étaient en quarantaine) si cela peut aider :)

                            Malwarebytes' Anti-Malware 1.44
                            Version de la base de données: 3510
                            Windows 5.1.2600 Service Pack 2
                            Internet Explorer 7.0.5730.13

                            17/02/2010 15:51:14
                            mbam-log-2010-02-17 (15-51-06).txt

                            Type de recherche: Examen rapide
                            Eléments examinés: 121886
                            Temps écoulé: 10 minute(s), 27 second(s)

                            Processus mémoire infecté(s): 1
                            Module(s) mémoire infecté(s): 3
                            Clé(s) du Registre infectée(s): 179
                            Valeur(s) du Registre infectée(s): 13
                            Elément(s) de données du Registre infecté(s): 0
                            Dossier(s) infecté(s): 34
                            Fichier(s) infecté(s): 149

                            Processus mémoire infecté(s):
                            C:\Program Files\MyWebSearch\bar\3.bin\MWSOEMON.EXE (Adware.MyWebSearch) -> No action taken.

                            Module(s) mémoire infecté(s):
                            C:\Program Files\Mozilla Firefox\plugins\NPMyWebS.dll (Adware.MyWebSearch) -> No action taken.
                            C:\Program Files\MyWebSearch\bar\3.bin\MWSBAR.DLL (Adware.MyWebSearch) -> No action taken.
                            C:\Program Files\MyWebSearch\bar\3.bin\F3HTMLMU.DLL (Adware.MyWebSearch) -> No action taken.

                            Clé(s) du Registre infectée(s):
                            HKEY_CLASSES_ROOT\TypeLib\{07b18ea0-a523-4961-b6bb-170de4475cca} (Adware.MyWebSearch) -> No action taken.
                            HKEY_CLASSES_ROOT\Interface\{07b18eaa-a523-4961-b6bb-170de4475cca} (Adware.MyWebSearch) -> No action taken.
                            HKEY_CLASSES_ROOT\Interface\{07b18eac-a523-4961-b6bb-170de4475cca} (Adware.MyWebSearch) -> No action taken.
                            HKEY_CLASSES_ROOT\Interface\{f87d7fb5-9dc5-4c8c-b998-d8dfe02e2978} (Adware.MyWebSearch) -> No action taken.
                            HKEY_CLASSES_ROOT\CLSID\{07b18ea1-a523-4961-b6bb-170de4475cca} (Adware.MyWebSearch) -> No action taken.
                            HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{07b18ea1-a523-4961-b6bb-170de4475cca} (Adware.MyWebSearch) -> No action taken.
                            HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{07b18ea1-a523-4961-b6bb-170de4475cca} (Adware.MyWebSearch) -> No action taken.
                            HKEY_CLASSES_ROOT\CLSID\{07b18ea9-a523-4961-b6bb-170de4475cca} (Adware.MyWebSearch) -> No action taken.
                            HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{07b18ea9-a523-4961-b6bb-170de4475cca} (Adware.MyWebSearch) -> No action taken.
                            HKEY_CLASSES_ROOT\CLSID\{07b18eab-a523-4961-b6bb-170de4475cca} (Adware.MyWebSearch) -> No action taken.
                            HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{07b18eab-a523-4961-b6bb-170de4475cca} (Adware.MyWebSearch) -> No action taken.
                            HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{07b18eab-a523-4961-b6bb-170de4475cca} (Adware.MyWebSearch) -> No action taken.
                            HKEY_CLASSES_ROOT\CLSID\{53ced2d0-5e9a-4761-9005-648404e6f7e5} (Adware.MyWebSearch) -> No action taken.
                            HKEY_CLASSES_ROOT\funwebproducts.datacontrol (Adware.MyWebSearch) -> No action taken.
                            HKEY_CLASSES_ROOT\TypeLib\{c8cecde3-1ae1-4c4a-ad82-6d5b00212144} (Adware.MyWebSearch) -> No action taken.
                            HKEY_CLASSES_ROOT\Interface\{17de5e5e-bfe3-4e83-8e1f-8755795359ec} (Adware.MyWebSearch) -> No action taken.
                            HKEY_CLASSES_ROOT\Interface\{1f52a5fa-a705-4415-b975-88503b291728} (Adware.MyWebSearch) -> No action taken.
                            HKEY_CLASSES_ROOT\Interface\{a626cdbd-3d13-4f78-b819-440a28d7e8fc} (Adware.MyWebSearch) -> No action taken.
                            HKEY_CLASSES_ROOT\CLSID\{25560540-9571-4d7b-9389-0f166788785a} (Adware.MyWebSearch) -> No action taken.
                            HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{25560540-9571-4d7b-9389-0f166788785a} (Adware.MyWebSearch) -> No action taken.
                            HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{25560540-9571-4d7b-9389-0f166788785a} (Adware.MyWebSearch) -> No action taken.
                            HKEY_CLASSES_ROOT\funwebproducts.datacontrol.1 (Adware.MyWebSearch) -> No action taken.
                            HKEY_CLASSES_ROOT\funwebproducts.historykillerscheduler (Adware.MyWebSearch) -> No action taken.
                            HKEY_CLASSES_ROOT\TypeLib\{8ca01f0e-987c-49c3-b852-2f1ac4a7094c} (Adware.MyWebSearch) -> No action taken.
                            HKEY_CLASSES_ROOT\Interface\{1093995a-ba37-41d2-836e-091067c4ad17} (Adware.MyWebSearch) -> No action taken.
                            HKEY_CLASSES_ROOT\Interface\{120927bf-1700-43bc-810f-fab92549b390} (Adware.MyWebSearch) -> No action taken.
                            HKEY_CLASSES_ROOT\Interface\{247a115f-06c2-4fb3-967d-2d62d3cf4f0a} (Adware.MyWebSearch) -> No action taken.
                            HKEY_CLASSES_ROOT\Interface\{3e53e2cb-86db-4a4a-8bd9-ffeb7a64df82} (Adware.MyWebSearch) -> No action taken.
                            HKEY_CLASSES_ROOT\Interface\{90449521-d834-4703-bb4e-d3aa44042ff8} (Adware.MyWebSearch) -> No action taken.
                            HKEY_CLASSES_ROOT\Interface\{991aac62-b100-47ce-8b75-253965244f69} (Adware.MyWebSearch) -> No action taken.
                            HKEY_CLASSES_ROOT\Interface\{bbabdc90-f3d5-4801-863a-ee6ae529862d} (Adware.MyWebSearch) -> No action taken.
                            HKEY_CLASSES_ROOT\Interface\{d6ff3684-ad3b-48eb-bbb4-b9e6c5a355c1} (Adware.MyWebSearch) -> No action taken.
                            HKEY_CLASSES_ROOT\Interface\{eb9e5c1c-b1f9-4c2b-be8a-27d6446fdaf8} (Adware.MyWebSearch) -> No action taken.
                            HKEY_CLASSES_ROOT\CLSID\{0f8ecf4f-3646-4c3a-8881-8e138ffcaf70} (Adware.MyWebSearch) -> No action taken.
                            HKEY_CLASSES_ROOT\CLSID\{b813095c-81c0-4e40-aa14-67520372b987} (Adware.MyWebSearch) -> No action taken.
                            HKEY_CLASSES_ROOT\CLSID\{c9d7be3e-141a-4c85-8cd6-32461f3df2c7} (Adware.MyWebSearch) -> No action taken.
                            HKEY_CLASSES_ROOT\CLSID\{cff4ce82-3aa2-451f-9b77-7165605fb835} (Adware.MyWebSearch) -> No action taken.
                            HKEY_CLASSES_ROOT\funwebproducts.historykillerscheduler.1 (Adware.MyWebSearch) -> No action taken.
                            HKEY_CLASSES_ROOT\funwebproducts.historyswattercontrolbar (Adware.MyWebSearch) -> No action taken.
                            HKEY_CLASSES_ROOT\funwebproducts.historyswattercontrolbar.1 (Adware.MyWebSearch) -> No action taken.
                            HKEY_CLASSES_ROOT\funwebproducts.htmlmenu (Adware.MyWebSearch) -> No action taken.
                            HKEY_CLASSES_ROOT\TypeLib\{e47caee0-deea-464a-9326-3f2801535a4d} (Adware.MyWebSearch) -> No action taken.
                            HKEY_CLASSES_ROOT\Interface\{3e1656ed-f60e-4597-b6aa-b6a58e171495} (Adware.MyWebSearch) -> No action taken.
                            HKEY_CLASSES_ROOT\Interface\{741de825-a6f0-4497-9aa6-8023cf9b0fff} (Adware.MyWebSearch) -> No action taken.
                            HKEY_CLASSES_ROOT\CLSID\{3dc201fb-e9c9-499c-a11f-23c360d7c3f8} (Adware.MyWebSearch) -> No action taken.
                            HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{3dc201fb-e9c9-499c-a11f-23c360d7c3f8} (Adware.MyWebSearch) -> No action taken.
                            HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{3dc201fb-e9c9-499c-a11f-23c360d7c3f8} (Adware.MyWebSearch) -> No action taken.
                            HKEY_CLASSES_ROOT\CLSID\{98d9753d-d73b-42d5-8c85-4469cda897ab} (Adware.MyWebSearch) -> No action taken.
                            HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{98d9753d-d73b-42d5-8c85-4469cda897ab} (Adware.MyWebSearch) -> No action taken.
                            HKEY_CLASSES_ROOT\funwebproducts.htmlmenu.1 (Adware.MyWebSearch) -> No action taken.
                            HKEY_CLASSES_ROOT\funwebproducts.htmlmenu.2 (Adware.MyWebSearch) -> No action taken.
                            HKEY_CLASSES_ROOT\funwebproducts.iecookiesmanager (Adware.MyWebSearch) -> No action taken.
                            HKEY_CLASSES_ROOT\funwebproducts.iecookiesmanager.1 (Adware.MyWebSearch) -> No action taken.
                            HKEY_CLASSES_ROOT\funwebproducts.killerobjmanager (Adware.MyWebSearch) -> No action taken.
                            HKEY_CLASSES_ROOT\funwebproducts.killerobjmanager.1 (Adware.MyWebSearch) -> No action taken.
                            HKEY_CLASSES_ROOT\funwebproducts.popswatterbarbutton (Adware.MyWebSearch) -> No action taken.
                            HKEY_CLASSES_ROOT\TypeLib\{8e6f1830-9607-4440-8530-13be7c4b1d14} (Adware.MyWebSearch) -> No action taken.
                            HKEY_CLASSES_ROOT\Interface\{63d0ed2b-b45b-4458-8b3b-60c69bbbd83c} (Adware.MyWebSearch) -> No action taken.
                            HKEY_CLASSES_ROOT\Interface\{63d0ed2d-b45b-4458-8b3b-60c69bbbd83c} (Adware.MyWebSearch) -> No action taken.
                            HKEY_CLASSES_ROOT\CLSID\{63d0ed2c-b45b-4458-8b3b-60c69bbbd83c} (Adware.MyWebSearch) -> No action taken.
                            HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{63d0ed2c-b45b-4458-8b3b-60c69bbbd83c} (Adware.MyWebSearch) -> No action taken.
                            HKEY_CLASSES_ROOT\CLSID\{8e6f1832-9607-4440-8530-13be7c4b1d14} (Adware.MyWebSearch) -> No action taken.
                            HKEY_CLASSES_ROOT\CLSID\{a9571378-68a1-443d-b082-284f960c6d17} (Adware.MyWebSearch) -> No action taken.
                            HKEY_CLASSES_ROOT\funwebproducts.popswatterbarbutton.1 (Adware.MyWebSearch) -> No action taken.
                            HKEY_CLASSES_ROOT\funwebproducts.popswattersettingscontrol (Adware.MyWebSearch) -> No action taken.
                            HKEY_CLASSES_ROOT\funwebproducts.popswattersettingscontrol.1 (Adware.MyWebSearch) -> No action taken.
                            HKEY_CLASSES_ROOT\mywebsearch.chatsessionplugin (Adware.MyWebSearch) -> No action taken.
                            HKEY_CLASSES_ROOT\TypeLib\{e79dfbc0-5697-4fbd-94e5-5b2a9c7c1612} (Adware.MyWebSearch) -> No action taken.
                            HKEY_CLASSES_ROOT\Interface\{72ee7f04-15bd-4845-a005-d6711144d86a} (Adware.MyWebSearch) -> No action taken.
                            HKEY_CLASSES_ROOT\Interface\{e79dfbc9-5697-4fbd-94e5-5b2a9c7c1612} (Adware.MyWebSearch) -> No action taken.
                            HKEY_CLASSES_ROOT\Interface\{e79dfbcb-5697-4fbd-94e5-5b2a9c7c1612} (Adware.MyWebSearch) -> No action taken.
                            HKEY_CLASSES_ROOT\CLSID\{e79dfbca-5697-4fbd-94e5-5b2a9c7c1612} (Adware.MyWebSearch) -> No action taken.
                            HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{e79dfbca-5697-4fbd-94e5-5b2a9c7c1612} (Adware.MyWebSearch) -> No action taken.
                            HKEY_CLASSES_ROOT\mywebsearch.chatsessionplugin.1 (Adware.MyWebSearch) -> No action taken.
                            HKEY_CLASSES_ROOT\mywebsearch.htmlpanel (Adware.MyWebSearch) -> No action taken.
                            HKEY_CLASSES_ROOT\TypeLib\{3e720450-b472-4954-b7aa-33069eb53906} (Adware.MyWebSearch) -> No action taken.
                            HKEY_CLASSES_ROOT\Interface\{3e720451-b472-4954-b7aa-33069eb53906} (Adware.MyWebSearch) -> No action taken.
                            HKEY_CLASSES_ROOT\Interface\{3e720453-b472-4954-b7aa-33069eb53906} (Adware.MyWebSearch) -> No action taken.
                            HKEY_CLASSES_ROOT\CLSID\{3e720452-b472-4954-b7aa-33069eb53906} (Adware.MyWebSearch) -> No action taken.
                            HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{3e720452-b472-4954-b7aa-33069eb53906} (Adware.MyWebSearch) -> No action taken.
                            HKEY_CLASSES_ROOT\mywebsearch.htmlpanel.1 (Adware.MyWebSearch) -> No action taken.
                            HKEY_CLASSES_ROOT\mywebsearch.outlookaddin (Adware.MyWebSearch) -> No action taken.
                            HKEY_CLASSES_ROOT\CLSID\{adb01e81-3c79-4272-a0f1-7b2be7a782dc} (Adware.MyWebSearch) -> No action taken.
                            HKEY_CLASSES_ROOT\mywebsearch.outlookaddin.1 (Adware.MyWebSearch) -> No action taken.
                            HKEY_CLASSES_ROOT\mywebsearch.pseudotransparentplugin (Adware.MyWebSearch) -> No action taken.
                            HKEY_CLASSES_ROOT\TypeLib\{7473d290-b7bb-4f24-ae82-7e2ce94bb6a9} (Adware.MyWebSearch) -> No action taken.
                            HKEY_CLASSES_ROOT\Interface\{7473d291-b7bb-4f24-ae82-7e2ce94bb6a9} (Adware.MyWebSearch) -> No action taken.
                            HKEY_CLASSES_ROOT\Interface\{7473d293-b7bb-4f24-ae82-7e2ce94bb6a9} (Adware.MyWebSearch) -> No action taken.
                            HKEY_CLASSES_ROOT\Interface\{7473d295-b7bb-4f24-ae82-7e2ce94bb6a9} (Adware.MyWebSearch) -> No action taken.
                            HKEY_CLASSES_ROOT\Interface\{7473d297-b7bb-4f24-ae82-7e2ce94bb6a9} (Adware.MyWebSearch) -> No action taken.
                            HKEY_CLASSES_ROOT\CLSID\{7473d292-b7bb-4f24-ae82-7e2ce94bb6a9} (Adware.MyWebSearch) -> No action taken.
                            HKEY_CLASSES_ROOT\CLSID\{7473d294-b7bb-4f24-ae82-7e2ce94bb6a9} (Adware.MyWebSearch) -> No action taken.
                            HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{7473d294-b7bb-4f24-ae82-7e2ce94bb6a9} (Adware.MyWebSearch) -> No action taken.
                            HKEY_CLASSES_ROOT\CLSID\{7473d296-b7bb-4f24-ae82-7e2ce94bb6a9} (Adware.MyWebSearch) -> No action taken.
                            HKEY_CLASSES_ROOT\mywebsearch.pseudotransparentplugin.1 (Adware.MyWebSearch) -> No action taken.
                            HKEY_CLASSES_ROOT\mywebsearchtoolbar.settingsplugin (Adware.MyWebSearch) -> No action taken.
                            HKEY_CLASSES_ROOT\mywebsearchtoolbar.settingsplugin.1 (Adware.MyWebSearch) -> No action taken.
                            HKEY_CLASSES_ROOT\mywebsearchtoolbar.toolbarplugin (Adware.MyWebSearch) -> No action taken.
                            HKEY_CLASSES_ROOT\mywebsearchtoolbar.toolbarplugin.1 (Adware.MyWebSearch) -> No action taken.
                            HKEY_CLASSES_ROOT\screensavercontrol.screensaverinstaller (Adware.MyWebSearch) -> No action taken.
                            HKEY_CLASSES_ROOT\TypeLib\{29d67d3c-509a-4544-903f-c8c1b8236554} (Adware.MyWebSearch) -> No action taken.
                            HKEY_CLASSES_ROOT\Interface\{2e3537fc-cf2f-4f56-af54-5a6a3dd375cc} (Adware.MyWebSearch) -> No action taken.
                            HKEY_CLASSES_ROOT\Interface\{2e9937fc-cf2f-4f56-af54-5a6a3dd375cc} (Adware.MyWebSearch) -> No action taken.
                            HKEY_CLASSES_ROOT\CLSID\{938aa51a-996c-4884-98ce-80dd16a5c9da} (Adware.MyWebSearch) -> No action taken.
                            HKEY_CLASSES_ROOT\CLSID\{9ff05104-b030-46fc-94b8-81276e4e27df} (Adware.MyWebSearch) -> No action taken.
                            HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{9ff05104-b030-46fc-94b8-81276e4e27df} (Adware.MyWebSearch) -> No action taken.
                            HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{9ff05104-b030-46fc-94b8-81276e4e27df} (Adware.MyWebSearch) -> No action taken.
                            HKEY_CLASSES_ROOT\screensavercontrol.screensaverinstaller.1 (Adware.MyWebSearch) -> No action taken.
                            HKEY_CLASSES_ROOT\shoppingreport.hbax (Adware.ShopperReports) -> No action taken.
                            HKEY_CLASSES_ROOT\TypeLib\{e343edfc-1e6c-4cb5-aa29-e9c922641c80} (Adware.ShopperReports) -> No action taken.
                            HKEY_CLASSES_ROOT\Interface\{d8560ac2-21b5-4c1a-bdd4-bd12bc83b082} (Adware.ShopperReports) -> No action taken.
                            HKEY_CLASSES_ROOT\CLSID\{100eb1fd-d03e-47fd-81f3-ee91287f9465} (Adware.ShopperReports) -> No action taken.
                            HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{100eb1fd-d03e-47fd-81f3-ee91287f9465} (Adware.ShopperReports) -> No action taken.
                            HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{100eb1fd-d03e-47fd-81f3-ee91287f9465} (Adware.ShopperReports) -> No action taken.
                            HKEY_CLASSES_ROOT\CLSID\{20ea9658-6bc3-4599-a87d-6371fe9295fc} (Adware.ShopperReports) -> No action taken.
                            HKEY_CLASSES_ROOT\CLSID\{a16ad1e9-f69a-45af-9462-b1c286708842} (Adware.ShopperReports) -> No action taken.
                            HKEY_CLASSES_ROOT\CLSID\{a7cddcdc-beeb-4685-a062-978f5e07ceee} (Adware.ShopperReports) -> No action taken.
                            HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Explorer Bars\{a7cddcdc-beeb-4685-a062-978f5e07ceee} (Adware.ShopperReports) -> No action taken.
                            HKEY_CLASSES_ROOT\CLSID\{c9ccbb35-d123-4a31-affc-9b2933132116} (Adware.ShopperReports) -> No action taken.
                            HKEY_CLASSES_ROOT\shoppingreport.hbax.1 (Adware.ShopperReports) -> No action taken.
                            HKEY_CLASSES_ROOT\shoppingreport.hbinfoband (Adware.ShopperReports) -> No action taken.
                            HKEY_CLASSES_ROOT\shoppingreport.hbinfoband.1 (Adware.ShopperReports) -> No action taken.
                            HKEY_CLASSES_ROOT\shoppingreport.iebutton (Adware.ShopperReports) -> No action taken.
                            HKEY_CLASSES_ROOT\shoppingreport.iebutton.1 (Adware.ShopperReports) -> No action taken.
                            HKEY_CLASSES_ROOT\shoppingreport.iebuttona (Adware.ShopperReports) -> No action taken.
                            HKEY_CLASSES_ROOT\shoppingreport.iebuttona.1 (Adware.ShopperReports) -> No action taken.
                            HKEY_CLASSES_ROOT\shoppingreport.rprtctrl (Adware.ShopperReports) -> No action taken.
                            HKEY_CLASSES_ROOT\shoppingreport.rprtctrl.1 (Adware.ShopperReports) -> No action taken.
                            HKEY_CLASSES_ROOT\Interface\{6e74766c-4d93-4cc0-96d1-47b8e07ff9ca} (Adware.MyWebSearch) -> No action taken.
                            HKEY_CLASSES_ROOT\Interface\{8ad9ad05-36be-4e40-ba62-5422eb0d02fb} (Adware.ShopperReports) -> No action taken.
                            HKEY_CLASSES_ROOT\Interface\{aebf09e2-0c15-43c8-99bf-928c645d98a0} (Adware.ShopperReports) -> No action taken.
                            HKEY_CLASSES_ROOT\Interface\{cf54be1c-9359-4395-8533-1657cf209cfe} (Adware.MyWebSearch) -> No action taken.
                            HKEY_CLASSES_ROOT\Interface\{de38c398-b328-4f4c-a3ad-1b5e4ed93477} (Adware.MyWebSearch) -> No action taken.
                            HKEY_CLASSES_ROOT\Interface\{e342af55-b78a-4cd0-a2bb-da7f52d9d25e} (Adware.MyWebSearch) -> No action taken.
                            HKEY_CLASSES_ROOT\Interface\{e342af55-b78a-4cd0-a2bb-da7f52d9d25f} (Adware.MyWebSearch) -> No action taken.
                            HKEY_CLASSES_ROOT\CLSID\{00a6faf1-072e-44cf-8957-5838f569a31d} (Adware.MyWebSearch) -> No action taken.
                            HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{00a6faf1-072e-44cf-8957-5838f569a31d} (Adware.MyWebSearch) -> No action taken.
                            HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{00a6faf1-072e-44cf-8957-5838f569a31d} (Adware.MyWebSearch) -> No action taken.
                            HKEY_CLASSES_ROOT\CLSID\{00a6faf6-072e-44cf-8957-5838f569a31d} (Adware.MyWebSearch) -> No action taken.
                            HKEY_CLASSES_ROOT\CLSID\{147a976f-eee1-4377-8ea7-4716e4cdd239} (Adware.MyWebSearch) -> No action taken.
                            HKEY_CLASSES_ROOT\CLSID\{1e0de227-5ce4-4ea3-ab0c-8b03e1aa76bc} (Adware.MyWebSearch) -> No action taken.
                            HKEY_CLASSES_ROOT\CLSID\{84da4fdf-a1cf-4195-8688-3e961f505983} (Adware.MyWebSearch) -> No action taken.
                            HKEY_CLASSES_ROOT\CLSID\{a4730ebe-43a6-443e-9776-36915d323ad3} (Adware.MyWebSearch) -> No action taken.
                            HKEY_CLASSES_ROOT\CLSID\{d9fffb27-d62a-4d64-8cec-1ff006528805} (Adware.MyWebSearch) -> No action taken.
                            HKEY_CLASSES_ROOT\TypeLib\{0d26bc71-a633-4e71-ad31-eadc3a1b6a3a} (Adware.MyWebSearch) -> No action taken.
                            HKEY_CLASSES_ROOT\Typelib\{d518921a-4a03-425e-9873-b9a71756821e} (Adware.MyWebSearch) -> No action taken.
                            HKEY_CLASSES_ROOT\Typelib\{f42228fb-e84e-479e-b922-fbbd096e792c} (Adware.MyWebSearch) -> No action taken.
                            HKEY_CLASSES_ROOT\Typelib\{cdca70d8-c6a6-49ee-9bed-7429d6c477a2} (Adware.ShopperReports) -> No action taken.
                            HKEY_CLASSES_ROOT\Typelib\{d136987f-e1c4-4ccc-a220-893df03ec5df} (Adware.ShopperReports) -> No action taken.
                            HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{56256a51-b582-467e-b8d4-7786eda79ae0} (Trojan.Vundo) -> No action taken.
                            HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{6fd31ed6-7c94-4bbc-8e95-f927f4d3a949} (Adware.180Solutions) -> No action taken.
                            HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{c5428486-50a0-4a02-9d20-520b59a9f9b2} (Adware.ShopperReports) -> No action taken.
                            HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{c5428486-50a0-4a02-9d20-520b59a9f9b3} (Adware.ShopperReports) -> No action taken.
                            HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{1d4db7d2-6ec9-47a3-bd87-1e41684e07bb} (Adware.MyWebSearch) -> No action taken.
                            HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{c5428486-50a0-4a02-9d20-520b59a9f9b2} (Adware.ShopperReports) -> No action taken.
                            HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{c5428486-50a0-4a02-9d20-520b59a9f9b3} (Adware.ShopperReports) -> No action taken.
                            HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{59c7fc09-1c83-4648-b3e6-003d2bbc7481} (Adware.MyWebSearch) -> No action taken.
                            HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{68af847f-6e91-45dd-9b68-d6a12c30e5d7} (Adware.MyWebSearch) -> No action taken.
                            HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9170b96c-28d4-4626-8358-27e6caeef907} (Adware.MyWebSearch) -> No action taken.
                            HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{d1a71fa0-ff48-48dd-9b6d-7a13a3e42127} (Adware.MyWebSearch) -> No action taken.
                            HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{ddb1968e-ead6-40fd-8dae-ff14757f60c7} (Adware.MyWebSearch) -> No action taken.
                            HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{f138d901-86f0-4383-99b6-9cdd406036da} (Adware.MyWebSearch) -> No action taken.
                            HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{56256a51-b582-467e-b8d4-7786eda79ae0} (Trojan.Vundo) -> No action taken.
                            HKEY_CLASSES_ROOT\CLSID\{67fa02c4-ab30-4e77-a640-78ee8ec8673b} (Adware.MyWebSearch) -> No action taken.
                            HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\shoppingreport (Adware.ShopperReports) -> No action taken.
                            HKEY_CURRENT_USER\SOFTWARE\Fun Web Products (Adware.MyWebSearch) -> No action taken.
                            HKEY_CURRENT_USER\SOFTWARE\Microsoft\cs41275 (Malware.Trace) -> No action taken.
                            HKEY_CURRENT_USER\SOFTWARE\MyWebSearch (Adware.MyWebSearch) -> No action taken.
                            HKEY_CURRENT_USER\SOFTWARE\ShoppingReport (Adware.ShopperReports) -> No action taken.
                            HKEY_LOCAL_MACHINE\SOFTWARE\FocusInteractive (Adware.MyWebSearch) -> No action taken.
                            HKEY_LOCAL_MACHINE\SOFTWARE\Fun Web Products (Adware.MyWebSearch) -> No action taken.
                            HKEY_LOCAL_MACHINE\SOFTWARE\FunWebProducts (Adware.MyWebSearch) -> No action taken.
                            HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\RunDll32Policy\f3ScrCtr.dll (Adware.MyWebSearch) -> No action taken.
                            HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Schemes\f3pss (Adware.MyWebSearch) -> No action taken.
                            HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\Outlook\Addins\MyWebSearch.OutlookAddin (Adware.MyWebSearch) -> No action taken.
                            HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\Word\Addins\MyWebSearch.OutlookAddin (Adware.MyWebSearch) -> No action taken.
                            HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\MyWebSearch bar Uninstall (Adware.MyWebSearch) -> No action taken.
                            HKEY_LOCAL_MACHINE\SOFTWARE\MyWebSearch (Adware.MyWebSearch) -> No action taken.
                            HKEY_LOCAL_MACHINE\SOFTWARE\ShoppingReport (Adware.ShopperReports) -> No action taken.

                            Valeur(s) du Registre infectée(s):
                            HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Toolbar\WebBrowser\{07b18ea9-a523-4961-b6bb-170de4475cca} (Adware.MyWebSearch) -> No action taken.
                            HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar\{07b18ea9-a523-4961-b6bb-170de4475cca} (Adware.MyWebSearch) -> No action taken.
                            HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Extensions\CmdMapping\{c5428486-50a0-4a02-9d20-520b59a9f9b2} (Adware.ShopperReports) -> No action taken.
                            HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Extensions\CmdMapping\{c5428486-50a0-4a02-9d20-520b59a9f9b3} (Adware.ShopperReports) -> No action taken.
                            HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Toolbar\WebBrowser\{90b8b761-df2b-48ac-bbe0-bcc03a819b3b} (Adware.Zango) -> No action taken.
                            HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks\{00a6faf6-072e-44cf-8957-5838f569a31d} (Adware.MyWebSearch) -> No action taken.
                            HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\MenuExt\&Search\(default) (Adware.Hotbar) -> No action taken.
                            HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Media\WMSDK\Sources\f3popularscreensavers (Adware.MyWebSearch) -> No action taken.
                            HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\User Agent\Post Platform\funwebproducts (Adware.MyWebSearch) -> No action taken.
                            HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\my web search bar search scope monitor (Adware.MyWebSearch) -> No action taken.
                            HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\mywebsearch email plugin (Adware.MyWebSearch) -> No action taken.
                            HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\mywebsearch plugin (Adware.MyWebSearch) -> No action taken.
                            HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\mywebsearch email plugin (Adware.MyWebSearch) -> No action taken.

                            Elément(s) de données du Registre infecté(s):
                            (Aucun élément nuisible détecté)

                            Dossier(s) infecté(s):
                            C:\Documents and Settings\user\Application Data\FunWebProducts (Adware.MyWebSearch) -> No action taken.
                            C:\Documents and Settings\user\Application Data\FunWebProducts\Data (Adware.MyWebSearch) -> No action taken.
                            C:\Documents and Settings\user\Application Data\FunWebProducts\Data\user (Adware.MyWebSearch) -> No action taken.
                            C:\Documents and Settings\user\Application Data\ShoppingReport (Adware.ShopperReports) -> No action taken.
                            C:\Documents and Settings\user\Application Data\ShoppingReport\cs (Adware.ShopperReports) -> No action taken.
                            C:\Documents and Settings\user\Application Data\ShoppingReport\cs\db (Adware.ShopperReports) -> No action taken.
                            C:\Documents and Settings\user\Application Data\ShoppingReport\cs\dwld (Adware.ShopperReports) -> No action taken.
                            C:\Documents and Settings\user\Application Data\ShoppingReport\cs\report (Adware.ShopperReports) -> No action taken.
                            C:\Documents and Settings\user\Application Data\ShoppingReport\cs\res1 (Adware.ShopperReports) -> No action taken.
                            C:\Program Files\FunWebProducts (Adware.MyWebSearch) -> No action taken.
                            C:\Program Files\FunWebProducts\ScreenSaver (Adware.MyWebSearch) -> No action taken.
                            C:\Program Files\FunWebProducts\ScreenSaver\Cache (Adware.MyWebSearch) -> No action taken.
                            C:\Program Files\FunWebProducts\ScreenSaver\Images (Adware.MyWebSearch) -> No action taken.
                            C:\Program Files\FunWebProducts\ScreenSaver\Images\101x135 (Adware.MyWebSearch) -> No action taken.
                            C:\Program Files\FunWebProducts\Shared (Adware.MyWebSearch) -> No action taken.
                            C:\Program Files\FunWebProducts\Shared\Cache (Adware.MyWebSearch) -> No action taken.
                            C:\Program Files\MyWebSearch (Adware.MyWebSearch) -> No action taken.
                            C:\Program Files\MyWebSearch\bar (Adware.MyWebSearch) -> No action taken.
                            C:\Program Files\MyWebSearch\bar\3.bin (Adware.MyWebSearch) -> No action taken.
                            C:\Program Files\MyWebSearch\bar\Avatar (Adware.MyWebSearch) -> No action taken.
                            C:\Program Files\MyWebSearch\bar\Cache (Adware.MyWebSearch) -> No action taken.
                            C:\Program Files\MyWebSearch\bar\Game (Adware.MyWebSearch) -> No action taken.
                            C:\Program Files\MyWebSearch\bar\History (Adware.MyWebSearch) -> No action taken.
                            C:\Program Files\MyWebSearch\bar\icons (Adware.MyWebSearch) -> No action taken.
                            C:\Program Files\MyWebSearch\bar\Message (Adware.MyWebSearch) -> No action taken.
                            C:\Program Files\MyWebSearch\bar\Message\COMMON (Adware.MyWebSearch) -> No action taken.
                            C:\Program Files\MyWebSearch\bar\Notifier (Adware.MyWebSearch) -> No action taken.
                            C:\Program Files\MyWebSearch\bar\Settings (Adware.MyWebSearch) -> No action taken.
                            C:\Program Files\MyWebSearch\bar\setups (Adware.MyWebSearch) -> No action taken.
                            C:\Program Files\MyWebSearch\SrchAstt (Adware.MyWebSearch) -> No action taken.
                            C:\Program Files\MyWebSearch\SrchAstt\2.bin (Adware.MyWebSearch) -> No action taken.
                            C:\Program Files\ShoppingReport (Adware.ShopperReports) -> No action taken.
                            C:\Program Files\ShoppingReport\Bin (Adware.ShopperReports) -> No action taken.
                            C:\Program Files\ShoppingReport\Bin\2.5.0 (Adware.ShopperReports) -> No action taken.

                            Fichier(s) infecté(s):
                            C:\Program Files\MyWebSearch\bar\3.bin\F3HKSTUB.DLL (Adware.MyWebSearch) -> No action taken.
                            C:\Program Files\MyWebSearch\bar\3.bin\MWSOESTB.DLL (Adware.MyWebSearch) -> No action taken.
                            C:\Program Files\MyWebSearch\bar\3.bin\MWSOEMON.EXE (Adware.MyWebSearch) -> No action taken.
                            C:\Program Files\MyWebSearch\bar\3.bin\M3SRCHMN.EXE (Adware.MyWebSearch) -> No action taken.
                            C:\Program Files\Mozilla Firefox\plugins\NPMyWebS.dll (Adware.MyWebSearch) -> No action taken.
                            C:\Program Files\MyWebSearch\bar\3.bin\M3PLUGIN.DLL (Adware.MyWebSearch) -> No action taken.
                            C:\Program Files\MyWebSearch\bar\3.bin\MWSBAR.DLL (Adware.MyWebSearch) -> No action taken.
                            C:\Program Files\MyWebSearch\bar\3.bin\F3DTACTL.DLL (Adware.MyWebSearch) -> No action taken.
                            C:\Program Files\MyWebSearch\bar\3.bin\F3HISTSW.DLL (Adware.MyWebSearch) -> No action taken.
                            C:\Program Files\MyWebSearch\bar\3.bin\F3HTMLMU.DLL (Adware.MyWebSearch) -> No action taken.
                            C:\Program Files\MyWebSearch\bar\3.bin\F3POPSWT.DLL (Adware.MyWebSearch) -> No action taken.
                            C:\Program Files\MyWebSearch\bar\3.bin\M3MSG.DLL (Adware.MyWebSearch) -> No action taken.
                            C:\Program Files\MyWebSearch\bar\3.bin\M3HTML.DLL (Adware.MyWebSearch) -> No action taken.
                            C:\Program Files\MyWebSearch\bar\3.bin\M3OUTLCN.DLL (Adware.MyWebSearch) -> No action taken.
                            C:\Program Files\MyWebSearch\bar\3.bin\M3SKIN.DLL (Adware.MyWebSearch) -> No action taken.
                            C:\Program Files\MyWebSearch\bar\3.bin\F3SCRCTR.DLL (Adware.MyWebSearch) -> No action taken.
                            C:\Program Files\ShoppingReport\Bin\2.5.0\ShoppingReport.dll (Adware.ShopperReports) -> No action taken.
                            C:\Program Files\MyWebSearch\bar\3.bin\MWSSRCAS.DLL (Adware.MyWebSearch) -> No action taken.
                            C:\Program Files\MyWebSearch\bar\3.bin\F3CJPEG.DLL (Adware.MyWebSearch) -> No action taken.
                            C:\Program Files\MyWebSearch\bar\3.bin\F3HTTPCT.DLL (Adware.MyWebSearch) -> No action taken.
                            C:\Program Files\MyWebSearch\bar\3.bin\F3REPROX.DLL (Adware.MyWebSearch) -> No action taken.
                            C:\Program Files\MyWebSearch\bar\3.bin\MWSOEPLG.DLL (Adware.MyWebSearch) -> No action taken.
                            C:\Program Files\Internet Explorer\msimg32.dll (Adware.MyWebSearch) -> No action taken.
                            C:\WINDOWS\system32\f3PSSavr.scr (Adware.MyWebSearch) -> No action taken.
                            C:\Documents and Settings\user\Application Data\FunWebProducts\Data\user\avatar.dat (Adware.MyWebSearch) -> No action taken.
                            C:\Documents and Settings\user\Application Data\ShoppingReport\cs\Config.xml (Adware.ShopperReports) -> No action taken.
                            C:\Documents and Settings\user\Application Data\ShoppingReport\cs\db\Aliases.dbs (Adware.ShopperReports) -> No action taken.
                            C:\Documents and Settings\user\Application Data\ShoppingReport\cs\db\Sites.dbs (Adware.ShopperReports) -> No action taken.
                            C:\Documents and Settings\user\Application Data\ShoppingReport\cs\dwld\WhiteList.xip (Adware.ShopperReports) -> No action taken.
                            C:\Documents and Settings\user\Application Data\ShoppingReport\cs\report\aggr_storage.xml (Adware.ShopperReports) -> No action taken.
                            C:\Documents and Settings\user\Application Data\ShoppingReport\cs\report\send_storage.xml (Adware.ShopperReports) -> No action taken.
                            C:\Documents and Settings\user\Application Data\ShoppingReport\cs\res1\WhiteList.dbs (Adware.ShopperReports) -> No action taken.
                            C:\Program Files\FunWebProducts\ScreenSaver\Cache\01026327.jpg (Adware.MyWebSearch) -> No action taken.
                            C:\Program Files\FunWebProducts\ScreenSaver\Cache\0102BB4A.jpg (Adware.MyWebSearch) -> No action taken.
                            C:\Program Files\FunWebProducts\ScreenSaver\Cache\0102F611.jpg (Adware.MyWebSearch) -> No action taken.
                            C:\Program Files\FunWebProducts\ScreenSaver\Cache\01031ED6.jpg (Adware.MyWebSearch) -> No action taken.
                            C:\Program Files\FunWebProducts\ScreenSaver\Cache\010364B9.jpg (Adware.MyWebSearch) -> No action taken.
                            C:\Program Files\FunWebProducts\ScreenSaver\Cache\files.ini (Adware.MyWebSearch) -> No action taken.
                            C:\Program Files\FunWebProducts\ScreenSaver\Images\00FD2F5E.urr (Adware.MyWebSearch) -> No action taken.
                            C:\Program Files\FunWebProducts\ScreenSaver\Images\010261FF.urr (Adware.MyWebSearch) -> No action taken.
                            C:\Program Files\FunWebProducts\ScreenSaver\Images\0102BB0B.dat (Adware.MyWebSearch) -> No action taken.
                            C:\Program Files\FunWebProducts\ScreenSaver\Images\0102F5D2.dat (Adware.MyWebSearch) -> No action taken.
                            C:\Program Files\FunWebProducts\ScreenSaver\Images\01031E98.dat (Adware.MyWebSearch) -> No action taken.
                            C:\Program Files\FunWebProducts\ScreenSaver\Images\0103646B.dat (Adware.MyWebSearch) -> No action taken.
                            C:\Program Files\FunWebProducts\ScreenSaver\Images\01039A5F.dat (Adware.MyWebSearch) -> No action taken.
                            C:\Program Files\FunWebProducts\ScreenSaver\Images\0103A3C6.dat (Adware.MyWebSearch) -> No action taken.
                            C:\Program Files\FunWebProducts\ScreenSaver\Images\0103B346.dat (Adware.MyWebSearch) -> No action taken.
                            C:\Program Files\FunWebProducts\ScreenSaver\Images\0103C632.dat (Adware.MyWebSearch) -> No action taken.
                            C:\Program Files\FunWebProducts\ScreenSaver\Images\wrkparam.lst (Adware.MyWebSearch) -> No action taken.
                            C:\Program Files\FunWebProducts\ScreenSaver\Images\101x135\0102BB0B.jpg (Adware.MyWebSearch) -> No action taken.
                            C:\Program Files\FunWebProducts\ScreenSaver\Images\101x135\0102F5D2.jpg (Adware.MyWebSearch) -> No action taken.
                            C:\Program Files\FunWebProducts\ScreenSaver\Images\101x135\01031E98.jpg (Adware.MyWebSearch) -> No action taken.
                            C:\Program Files\FunWebProducts\ScreenSaver\Images\101x135\0103646B.jpg (Adware.MyWebSearch) -> No action taken.
                            C:\Program Files\FunWebProducts\ScreenSaver\Images\101x135\01039A5F.jpg (Adware.MyWebSearch) -> No action taken.
                            C:\Program Files\FunWebProducts\ScreenSaver\Images\101x135\0103A3C6.jpg (Adware.MyWebSearch) -> No action taken.
                            C:\Program Files\FunWebProducts\ScreenSaver\Images\101x135\0103B346.jpg (Adware.MyWebSearch) -> No action taken.
                            C:\Program Files\FunWebProducts\ScreenSaver\Images\101x135\0103C632.jpg (Adware.MyWebSearch) -> No action taken.
                            C:\Program Files\FunWebProducts\Shared\00E8E2D5.dat (Adware.MyWebSearch) -> No action taken.
                            C:\Program Files\FunWebProducts\Shared\Cache\CursorManiaBtn.html (Adware.MyWebSearch) -> No action taken.
                            C:\Program Files\FunWebProducts\Shared\Cache\MyFunCardsIMBtn.html (Adware.MyWebSearch) -> No action taken.
                            C:\Program Files\FunWebProducts\Shared\Cache\SmileyCentralBtn.html (Adware.MyWebSearch) -> No action taken.
                            C:\Program Files\FunWebProducts\Shared\Cache\WebfettiBtn-new.htmlx (Adware.MyWebSearch) -> No action taken.
                            C:\Program Files\FunWebProducts\Shared\Cache\WebfettiBtn.html (Adware.MyWebSearch) -> No action taken.
                            C:\Program Files\MyWebSearch\bar\3.bin\F3BKGERR.JPG (Adware.MyWebSearch) -> No action taken.
                            C:\Program Files\MyWebSearch\bar\3.bin\F3PSSAVR.SCR (Adware.MyWebSearch) -> No action taken.
                            C:\Program Files\MyWebSearch\bar\3.bin\F3REGHK.DLL (Adware.MyWebSearch) -> No action taken.
                            C:\Program Files\MyWebSearch\bar\3.bin\F3RESTUB.DLL (Adware.MyWebSearch) -> No action taken.
                            C:\Program Files\MyWebSearch\bar\3.bin\F3SCHMON.EXE (Adware.MyWebSearch) -> No action taken.
                            C:\Program Files\MyWebSearch\bar\3.bin\F3SPACER.WMV (Adware.MyWebSearch) -> No action taken.
                            C:\Program Files\MyWebSearch\bar\3.bin\F3WALLPP.DAT (Adware.MyWebSearch) -> No action taken.
                            C:\Program Files\MyWebSearch\bar\3.bin\F3WPHOOK.DLL (Adware.MyWebSearch) -> No action taken.
                            C:\Program Files\MyWebSearch\bar\3.bin\FWPBUDDY.PNG (Adware.MyWebSearch) -> No action taken.
                            C:\Program Files\MyWebSearch\bar\3.bin\M3FFXTBR.JAR (Adware.MyWebSearch) -> No action taken.
                            C:\Program Files\MyWebSearch\bar\3.bin\M3FFXTBR.MANIFEST (Adware.MyWebSearch) -> No action taken.
                            C:\Program Files\MyWebSearch\bar\3.bin\M3HIGHIN.EXE (Adware.MyWebSearch) -> No action taken.
                            C:\Program Files\MyWebSearch\bar\3.bin\M3IDLE.DLL (Adware.MyWebSearch) -> No action taken.
                            C:\Program Files\MyWebSearch\bar\3.bin\M3IMPIPE.EXE (Adware.MyWebSearch) -> No action taken.
                            C:\Program Files\MyWebSearch\bar\3.bin\M3MEDINT.EXE (Adware.MyWebSearch) -> No action taken.
                            C:\Program Files\MyWebSearch\bar\3.bin\M3NTSTBR.JAR (Adware.MyWebSearch) -> No action taken.
                            C:\Program Files\MyWebSearch\bar\3.bin\M3NTSTBR.MANIFEST (Adware.MyWebSearch) -> No action taken.
                            C:\Program Files\MyWebSearch\bar\3.bin\M3PATCH.DLL (Adware.MyWebSearch) -> No action taken.
                            C:\Program Files\MyWebSearch\bar\3.bin\M3SKPLAY.EXE (Adware.MyWebSearch) -> No action taken.
                            C:\Program Files\MyWebSearch\bar\3.bin\M3SLSRCH.EXE (Adware.MyWebSearch) -> No action taken.
                            C:\Program Files\MyWebSearch\bar\3.bin\MWSSVC.EXE (Adware.MyWebSearch) -> No action taken.
                            C:\Program Files\MyWebSearch\bar\3.bin\NPMYWEBS.DLL (Adware.MyWebSearch) -> No action taken.
                            C:\Program Files\MyWebSearch\bar\Avatar\COMMON.F3S (Adware.MyWebSearch) -> No action taken.
                            C:\Program Files\MyWebSearch\bar\Cache\0002E804 (Adware.MyWebSearch) -> No action taken.
                            C:\Program Files\MyWebSearch\bar\Cache\0002F591.bin (Adware.MyWebSearch) -> No action taken.
                            C:\Program Files\MyWebSearch\bar\Cache\000333D3 (Adware.MyWebSearch) -> No action taken.
                            C:\Program Files\MyWebSearch\bar\Cache\000767FF (Adware.MyWebSearch) -> No action taken.
                            C:\Program Files\MyWebSearch\bar\Cache\0011507E (Adware.MyWebSearch) -> No action taken.
                            C:\Program Files\MyWebSearch\bar\Cache\0042F6B3.bin (Adware.MyWebSearch) -> No action taken.
                            C:\Program Files\MyWebSearch\bar\Cache\0042F982 (Adware.MyWebSearch) -> No action taken.
                            C:\Program Files\MyWebSearch\bar\Cache\00554614 (Adware.MyWebSearch) -> No action taken.
                            C:\Program Files\MyWebSearch\bar\Cache\00698FBE (Adware.MyWebSearch) -> No action taken.
                            C:\Program Files\MyWebSearch\bar\Cache\00999DBE (Adware.MyWebSearch) -> No action taken.
                            C:\Program Files\MyWebSearch\bar\Cache\00DB984F (Adware.MyWebSearch) -> No action taken.
                            C:\Program Files\MyWebSearch\bar\Cache\00DB9ADF.bin (Adware.MyWebSearch) -> No action taken.
                            C:\Program Files\MyWebSearch\bar\Cache\00DBA196.bin (Adware.MyWebSearch) -> No action taken.
                            C:\Program Files\MyWebSearch\bar\Cache\00DBB174.bin (Adware.MyWebSearch) -> No action taken.
                            C:\Program Files\MyWebSearch\bar\Cache\00DBC589.bin (Adware.MyWebSearch) -> No action taken.
                            C:\Program Files\MyWebSearch\bar\Cache\00F98BF8.bin (Adware.MyWebSearch) -> No action taken.
                            C:\Program Files\MyWebSearch\bar\Cache\00F98F35.bin (Adware.MyWebSearch) -> No action taken.
                            C:\Program Files\MyWebSearch\bar\Cache\00F9939A.bin (Adware.MyWebSearch) -> No action taken.
                            C:\Program Files\MyWebSearch\bar\Cache\00F99DBB.bin (Adware.MyWebSearch) -> No action taken.
                            C:\Program Files\MyWebSearch\bar\Cache\02347F1B.exe (Adware.MyWebSearch) -> No action taken.
                            C:\Program Files\MyWebSearch\bar\Cache\files.ini (Adware.MyWebSearch) -> No action taken.
                            C:\Program Files\MyWebSearch\bar\Game\CHECKERS.F3S (Adware.MyWebSearch) -> No action taken.
                            C:\Program Files\MyWebSearch\bar\Game\CHESS.F3S (Adware.MyWebSearch) -> No action taken.
                            C:\Program Files\MyWebSearch\bar\Game\REVERSI.F3S (Adware.MyWebSearch) -> No action taken.
                            C:\Program Files\MyWebSearch\bar\History\search3 (Adware.MyWebSearch) -> No action taken.
                            C:\Program Files\MyWebSearch\bar\icons\CM.ICO (Adware.MyWebSearch) -> No action taken.
                            C:\Program Files\MyWebSearch\bar\icons\MFC.ICO (Adware.MyWebSearch) -> No action taken.
                            C:\Program Files\MyWebSearch\bar\icons\PSS.ICO (Adware.MyWebSearch) -> No action taken.
                            C:\Program Files\MyWebSearch\bar\icons\SMILEY.ICO (Adware.MyWebSearch) -> No action taken.
                            C:\Program Files\MyWebSearch\bar\icons\WB.ICO (Adware.MyWebSearch) -> No action taken.
                            C:\Program Files\MyWebSearch\bar\icons\ZWINKY.ICO (Adware.MyWebSearch) -> No action taken.
                            C:\Program Files\MyWebSearch\bar\Message\COMMON.F3S (Adware.MyWebSearch) -> No action taken.
                            C:\Program Files\MyWebSearch\bar\Message\COMMON\ask_logo.gif (Adware.MyWebSearch) -> No action taken.
                            C:\Program Files\MyWebSearch\bar\Message\COMMON\autoup.gif (Adware.MyWebSearch) -> No action taken.
                            C:\Program Files\MyWebSearch\bar\Message\COMMON\autoup.htm (Adware.MyWebSearch) -> No action taken.
                            C:\Program Files\MyWebSearch\bar\Message\COMMON\center.htm (Adware.MyWebSearch) -> No action taken.
                            C:\Program Files\MyWebSearch\bar\Message\COMMON\index.htm (Adware.MyWebSearch) -> No action taken.
                            C:\Program Files\MyWebSearch\bar\Message\COMMON\mid_dots.gif (Adware.MyWebSearch) -> No action taken.
                            C:\Program Files\MyWebSearch\bar\Message\COMMON\mws_logo.gif (Adware.MyWebSearch) -> No action taken.
                            C:\Program Files\MyWebSearch\bar\Message\COMMON\protect.htm (Adware.MyWebSearch) -> No action taken.
                            C:\Program Files\MyWebSearch\bar\Message\COMMON\shocked.gif (Adware.MyWebSearch) -> No action taken.
                            C:\Program Files\MyWebSearch\bar\Message\COMMON\stop.gif (Adware.MyWebSearch) -> No action taken.
                            C:\Program Files\MyWebSearch\bar\Message\COMMON\systray.htm (Adware.MyWebSearch) -> No action taken.
                            C:\Program Files\MyWebSearch\bar\Message\COMMON\systrayp.htm (Adware.MyWebSearch) -> No action taken.
                            C:\Program Files\MyWebSearch\bar\Message\COMMON\tp_grad.gif (Adware.MyWebSearch) -> No action taken.
                            C:\Program Files\MyWebSearch\bar\Message\COMMON\warn.gif (Adware.MyWebSearch) -> No action taken.
                            C:\Program Files\MyWebSearch\bar\Notifier\COMMON.F3S (Adware.MyWebSearch) -> No action taken.
                            C:\Program Files\MyWebSearch\bar\Notifier\DOG.F3S (Adware.MyWebSearch) -> No action taken.
                            C:\Program Files\MyWebSearch\bar\Notifier\FISH.F3S (Adware.MyWebSearch) -> No action taken.
                            C:\Program Files\MyWebSearch\bar\Notifier\KUNGFU.F3S (Adware.MyWebSearch) -> No action taken.
                            C:\Program Files\MyWebSearch\bar\Notifier\LIFEGARD.F3S (Adware.MyWebSearch) -> No action taken.
                            C:\Program Files\MyWebSearch\bar\Notifier\MAID.F3S (Adware.MyWebSearch) -> No action taken.
                            C:\Program Files\MyWebSearch\bar\Notifier\MAILBOX.F3S (Adware.MyWebSearch) -> No action taken.
                            C:\Program Files\MyWebSearch\bar\Notifier\OPERA.F3S (Adware.MyWebSearch) -> No action taken.
                            C:\Program Files\MyWebSearch\bar\Notifier\ROBOT.F3S (Adware.MyWebSearch) -> No action taken.
                            C:\Program Files\MyWebSearch\bar\Notifier\SEDUCT.F3S (Adware.MyWebSearch) -> No action taken.
                            C:\Program Files\MyWebSearch\bar\Notifier\SURFER.F3S (Adware.MyWebSearch) -> No action taken.
                            C:\Program Files\MyWebSearch\bar\Settings\prevcfg2.htm (Adware.MyWebSearch) -> No action taken.
                            C:\Program Files\MyWebSearch\bar\Settings\setting2.htm (Adware.MyWebSearch) -> No action taken.
                            C:\Program Files\MyWebSearch\bar\Settings\settings.dat (Adware.MyWebSearch) -> No action taken.
                            C:\Program Files\MyWebSearch\bar\Settings\s_pid.dat (Adware.MyWebSearch) -> No action taken.
                            C:\Program Files\MyWebSearch\SrchAstt\2.bin\MWSSRCAS.DLL (Adware.MyWebSearch) -> No action taken.
                            C:\Program Files\ShoppingReport\Uninst.exe (Adware.ShopperReports) -> No action taken.

                            merci
                            0
                            1. crapoulou Modérateur
                              Oui mais il me fallait l'en-tête.
                              MBAM n'était pas à jour.
                              Met-le à jour et refais une analyse complète stp.
                              0
                              1. birdsfly Auteur
                                voilà j'ai mis MBAM à jour, et ci-joint le rapport d'analyse (3 fichiers infectés):

                                Malwarebytes' Anti-Malware 1.44
                                Version de la base de données: 3772
                                Windows 5.1.2600 Service Pack 2
                                Internet Explorer 7.0.5730.13

                                21/02/2010 21:28:53
                                mbam-log-2010-02-21 (21-28-49).txt

                                Type de recherche: Examen complet (C:\|D:\|)
                                Eléments examinés: 239491
                                Temps écoulé: 1 hour(s), 2 minute(s), 33 second(s)

                                Processus mémoire infecté(s): 0
                                Module(s) mémoire infecté(s): 0
                                Clé(s) du Registre infectée(s): 0
                                Valeur(s) du Registre infectée(s): 0
                                Elément(s) de données du Registre infecté(s): 0
                                Dossier(s) infecté(s): 0
                                Fichier(s) infecté(s): 3

                                Processus mémoire infecté(s):
                                (Aucun élément nuisible détecté)

                                Module(s) mémoire infecté(s):
                                (Aucun élément nuisible détecté)

                                Clé(s) du Registre infectée(s):
                                (Aucun élément nuisible détecté)

                                Valeur(s) du Registre infectée(s):
                                (Aucun élément nuisible détecté)

                                Elément(s) de données du Registre infecté(s):
                                (Aucun élément nuisible détecté)

                                Dossier(s) infecté(s):
                                (Aucun élément nuisible détecté)

                                Fichier(s) infecté(s):
                                C:\System Volume Information\_restore{AAFCD855-4609-440C-BB03-F56D03119C50}\RP277\A0146137.exe (Adware.MyWebSearch) -> No action taken.
                                C:\System Volume Information\_restore{AAFCD855-4609-440C-BB03-F56D03119C50}\RP300\A0152058.dll (Adware.MyWebSearch) -> No action taken.
                                C:\System Volume Information\_restore{AAFCD855-4609-440C-BB03-F56D03119C50}\RP300\A0152059.dll (Adware.MyWebSearch) -> No action taken.
                                0
                                1. crapoulou Modérateur
                                  Supprime ce qu'il a détecté.
                                  0
                                  1. birdsfly Auteur
                                    Je les ai supprimés, merci infiniment crapoulou :) ^^

                                    @+
                                    0
                                    1. crapoulou Modérateur
                                      Supprime Ad Remover et ce qui concerne ad Remover dans C:\ (un dossier et 2 rapports).
                                      0
                                      1. birdsfly Auteur
                                        C'est fait, mais pourquoi je devais le supprimer? il représente un danger ?
                                        0
                                        • 1
                                        • 2

                                        Discussions similaires

                                        Adobe acrobat fich api-ms-win-core-winrt-l1-1-0.dll manquant
                                        crinik2002

                                        41 réponses
                                        XINPUT1_3.dll manquant (missing)
                                        Maxirugue

                                        39 réponses
                                        MSVCR100.dll manquant (missing), la solution !
                                        mipolette

                                        107 réponses