Chevals de troie

Résolu
chipie-68 -  
 chipie-68 -
Bonsoir,

Voilà, g été victime de trois chevals de troie (MyWay = 192 fois + FunWeb = 85 fois + Trojans MyWeb = 21 fois)

C grâce au logiciel que je viens d'installer Anti Keylogger Shield.


G besoin d votre aide pour identifier la source.

G le détail des fichiers que je viens d récupérer du logiciel après l'avoir fait tourné.
Comment dois-je faire pour édentifier la source.
Je ne pas faire malheureusement de copier/coller.


Merci encore pour votre aide !
A voir également:

9 réponses

Réponse 1 / 9
fabul Messages postés 40964 Date d'inscription   Statut Modérateur Dernière intervention   5 713
 
Salut,

Télécharge et installe RegRun Reanimator.

Clic sur scan for viruses / scan windows startup.

Coche la case "Use deep level scanning once".

Clic sur "Make scan now".

Clic sur la flèche verte "Fix problems".

Il te proposera Regguard,répond "non",(on n'en a pas besoin).

Clic-droit dans le milieu de la fenètre vis a vis le nom du fichier et choisit "Save to file" (Par défaut dans "Mes Documents") dans un fichier nommé 1 (.txt sera ajouté automatiquement).

Clic sur la flèche verte en haut a droite pour voir le suivant et fait la mème chose a l'exception qu'il faudra le nommer 2 et ainsi de suite pour les suivants.

Ensuite,quand une fenètre s'ouvre,choisit "Exit".

Poste les résultats contenus dans tous les fichiers 1.txt 2.txt 3.txt...
0
Réponse 2 / 9
chipie-68
 
Slt,


J t remercie !

J viens tout juste de trouver sur Anti Keylogger Shield où s trouve l rapport.

Mais, j n sais pas le lire pour identifier la source.
0
Réponse 3 / 9
fabul Messages postés 40964 Date d'inscription   Statut Modérateur Dernière intervention   5 713
 
Ce n'est ni Anti Keylogger ni analyser ses raports qui vont aider a régler le problème,il a fait ce qu'il a pu et il ne peut plus...

Si tu veut prendre quelques minutes pour faire une analyse plus efficace,je t'ai donné un moyen.
0
Réponse 4 / 9
chipie-68
 
Slt,

j t remercie pour ton aide.

Quand tu dis "Poste les résultats contenus dans tous les fichiers 1.txt 2.txt 3.txt..."

Je dois les sélectionner et les envoyer où ?

Merci pour ta réponse !
0

Vous n’avez pas trouvé la réponse que vous recherchez ?

Posez votre question
Réponse 5 / 9
fabul Messages postés 40964 Date d'inscription   Statut Modérateur Dernière intervention   5 713
 
Sauvegardés dans le dossier "Mes documents"

Tu peux les coller ici.
0
Réponse 6 / 9
chipie-68
 
Salut,

G installé RegRun Reanimator.
Peux-tu m'expliquer à quoi ils servent et qu'est'ce qu'ils ont pu faire sur mon ordi.
Et comment puis-je identifier la source avec ces données pour porter plainte.

Je te remercie pour ton aide !


Voilà le rapport sur les 3 chevales de Troie et du Trojean :

M3SRCHMN.EXE
Default location: C:\PROGRA~1\MYWEBS~1\BAR\2.BIN\M3SRCHMN.EXE
MD5: 12D29863ADBFC002386B63CDD9BB0FB9
SHA1: A16A4273 08EA5996 DB667DE4 71CF18CF D4E23419
File Size: 24 688
Version Info:
OriginalFilename: m3SrchMn.exe
FileDescription: MyWebSearch SearchScope Monitor
InternalName: m3SrchMn
CompanyName: MyWebSearch.com
FileVersion: 1, 0, 0, 4
LegalCopyright: Copyright ¸ 2006, 2007
ProductName: My Web Search Bar for Internet Explorer and FireFox
ProductVersion: 2, 3, 0, 0

PE Info of the C:\PROGRA~1\MYWEBS~1\BAR\2.BIN\M3SRCHMN.EXE:

Type is Windows GUI.
DOS-stub: 208 bytes
built for machine: Intel 80386 processor
(32-bit-word machine)
Bytes of machine word are not reversed
Relocation info stripped
Local symbols stripped
Debugging info not stripped
executable file
0 entries in symbol table
4 sections
created (GMT): Fri Dec 04 09:11:09 2009
Linker version: 6.0
.text start: 0x1000, length: 8192 bytes
.data start: 0x3000, length: 12288 bytes
.bss start: -/-, length: 0 bytes
execution starts at 0x1006
Preferred load base is 0x400000
Image size in RAM: 24 KB
Sections aligned to 4096 bytes in RAM, 4096 bytes in file
Versions: NT 4.0, Win32 4.0, App 0.0
Checksum: 0x00000000
uses Win32 graphical subsystem
Stack: 1024 KB reserved, 4 KB committed
Heap: 1024 KB reserved, 4 KB committed
Size of headers / offset to sections in file: 0x1000

".text" (virt. Size/Address: 0x1e0a)
8192 bytes at offset 0x1000 in RAM, 0x1000 in file
contains code
default alignment (16 bytes)
is executable
is readable
at offset 0x6: execution start
Section entropy 4.20528

".rdata" (virt. Size/Address: 0x79c)
4096 bytes at offset 0x3000 in RAM, 0x3000 in file
contains initialized data
default alignment (16 bytes)
is readable
Section entropy 0.607003

at offset 0x250 (80 bytes): Import Directory

from "KERNEL32.dll":
not bound
name table at 0x32d0, address table at 0x3030
hint name

449
LeaveCriticalSection
102
EnterCriticalSection
460
LocalFree
318
GetProcAddress
761
lstrcatA
770
lstrcpyA
773
lstrcpynA
269
GetFileAttributesA
260
GetDriveTypeA
27
CloseHandle
68
CreateProcessA
180
FreeLibrary
555
ResetEvent
776
lstrlenA
292
GetModuleFileNameA
718
WaitForSingleObject
282
GetLastError
49
CreateEventA
625
SetLastError
32
CompareFileTime
351
GetSystemTimeAsFileTime
365
GetTickCount
667
SystemTimeToFileTime
349
GetSystemTime
767
lstrcmpiA
373
GetVersionExA
415
HeapFree
418
HeapReAlloc
320
GetProcessHeap
409
HeapAlloc
81
DebugBreak
85
DeleteCriticalSection
426
InitializeCriticalSection
294
GetModuleHandleA
202
GetCommandLineA
125
ExitProcess
450
LoadLibraryA
336
GetStartupInfoA
from "USER32.dll":
not bound
name table at 0x336c, address table at 0x30cc
hint name

684
wsprintfA
610
SetWindowsHookExA
458
MsgWaitForMultipleObjects
298
GetMessageA
642
TranslateMessage
149
DispatchMessageA
646
UnhookWindowsHookEx
37
CharNextA
from "ADVAPI32.dll":
not bound
name table at 0x32a0, address table at 0x3000
hint name

370
RegOpenKeyExA
379
RegQueryValueExA
364
RegFlushKey
390
RegSetValueExA
351
RegCreateKeyExA
356
RegDeleteValueA
354
RegDeleteKeyA
374
RegQueryInfoKeyA
359
RegEnumKeyExA
368
RegNotifyChangeKeyValue
347
RegCloseKey
at offset 0xf0 (28 bytes): Debug Directory

at offset 0x0 (240 bytes): Import Address Table

".data" (virt. Size/Address: 0x37e)
4096 bytes at offset 0x4000 in RAM, 0x4000 in file
contains initialized data
default alignment (16 bytes)
is readable
is writeable
Section entropy 0.607003

".rsrc" (virt. Size/Address: 0x3b0)
4096 bytes at offset 0x5000 in RAM, 0x5000 in file
contains initialized data
default alignment (16 bytes)
is readable
Section entropy 0.607003

at offset 0x0 (944 bytes): Resource Directory
version: 0.0, created (GMT): Thu Jan 01 00:00:00 1970
version info, , broken resource.
Entropy: 4.20528



MWSOEMON.EXE
Default location: C:\PROGRA~1\MYWEBS~1\BAR\2.BIN\MWSOEMON.EXE
MD5: 9ABBE6F791C0B599A7128C9ACA27C094
SHA1: AB86ADA4 FC136255 EDF950B9 ADF3D380 C60EBD8D
File Size: 32 838
Version Info:
OriginalFilename: mwsoemon.exe
FileDescription: My Web Search Plugin Loader
InternalName: mwsoemon
CompanyName: MyWebSearch.com
FileVersion: 1,2,2,5
LegalCopyright: Copyright ¸ 2003-2007 MyWebSearch.com
ProductName: My Web Search Bar for Internet Explorer, email clients, and messenger clients
ProductVersion: 2,3,0,0

PE Info of the C:\PROGRA~1\MYWEBS~1\BAR\2.BIN\MWSOEMON.EXE:

Type is Windows GUI.
DOS-stub: 200 bytes
built for machine: Intel 80386 processor
(32-bit-word machine)
Bytes of machine word are not reversed
Relocation info stripped
Local symbols stripped
Debugging info not stripped
executable file
0 entries in symbol table
4 sections
created (GMT): Mon Apr 23 16:48:48 2007
Linker version: 6.0
.text start: 0x1000, length: 16384 bytes
.data start: 0x5000, length: 12288 bytes
.bss start: -/-, length: 0 bytes
execution starts at 0x2398
Preferred load base is 0x400000
Image size in RAM: 32 KB
Sections aligned to 4096 bytes in RAM, 4096 bytes in file
Versions: NT 4.0, Win32 4.0, App 0.0
Checksum: 0x00000000
uses Win32 graphical subsystem
Stack: 1024 KB reserved, 4 KB committed
Heap: 1024 KB reserved, 4 KB committed
Size of headers / offset to sections in file: 0x1000

".text" (virt. Size/Address: 0x36be)
16384 bytes at offset 0x1000 in RAM, 0x1000 in file
contains code
default alignment (16 bytes)
is executable
is readable
at offset 0x1398: execution start
Section entropy 5.48576

".rdata" (virt. Size/Address: 0x9d6)
4096 bytes at offset 0x5000 in RAM, 0x5000 in file
contains initialized data
default alignment (16 bytes)
is readable
Section entropy 0.610149

at offset 0x1d8 (140 bytes): Import Directory

from "KERNEL32.dll":
not bound
name table at 0x5284, address table at 0x5020
hint name

549
ReleaseMutex
426
InitializeCriticalSection
102
EnterCriticalSection
449
LeaveCriticalSection
85
DeleteCriticalSection
49
CreateEventA
764
lstrcmpA
52
CreateFileA
770
lstrcpyA
45
CreateDirectoryA
761
lstrcatA
716
WaitForMultipleObjects
365
GetTickCount
351
GetSystemTimeAsFileTime
170
FlushFileBuffers
735
WriteFile
336
GetStartupInfoA
125
ExitProcess
202
GetCommandLineA
294
GetModuleHandleA
81
DebugBreak
409
HeapAlloc
320
GetProcessHeap
418
HeapReAlloc
63
CreateMutexA
484
MultiByteToWideChar
722
WideCharToMultiByte
777
lstrlenW
74
CreateThread
662
Sleep
180
FreeLibrary
318
GetProcAddress
450
LoadLibraryA
647
SetThreadPriority
249
GetCurrentThread
269
GetFileAttributesA
248
GetCurrentProcessId
495
OpenProcess
460
LocalFree
373
GetVersionExA
260
GetDriveTypeA
773
lstrcpynA
53
CreateFileMappingA
625
SetLastError
99
DuplicateHandle
247
GetCurrentProcess
489
OpenFileMappingA
470
MapViewOfFile
688
UnmapViewOfFile
613
SetEvent
718
WaitForSingleObject
555
ResetEvent
292
GetModuleFileNameA
776
lstrlenA
282
GetLastError
415
HeapFree
27
CloseHandle
from "USER32.dll":
not bound
name table at 0x537c, address table at 0x5118
hint name

458
MsgWaitForMultipleObjects
298
GetMessageA
642
TranslateMessage
280
GetKeyboardType
399
IsWindow
142
DestroyWindow
646
UnhookWindowsHookEx
37
CharNextA
684
wsprintfA
610
SetWindowsHookExA
149
DispatchMessageA
76
CreateDialogIndirectParamA
from "ADVAPI32.dll":
not bound
name table at 0x5264, address table at 0x5000
hint name

370
RegOpenKeyExA
379
RegQueryValueExA
364
RegFlushKey
390
RegSetValueExA
351
RegCreateKeyExA
356
RegDeleteValueA
347
RegCloseKey
from "SHELL32.dll":
not bound
name table at 0x536c, address table at 0x5108
hint name

80
SHGetPathFromIDListA
75
SHGetMalloc
83
SHGetSpecialFolderLocation
from "ole32.dll":
not bound
name table at 0x53c0, address table at 0x515c
hint name

269
StringFromGUID2
from "VERSION.dll":
not bound
name table at 0x53b0, address table at 0x514c
hint name

1
GetFileVersionInfoSizeA
10
VerQueryValueA
0
GetFileVersionInfoA
at offset 0x170 (28 bytes): Debug Directory

at offset 0x0 (356 bytes): Import Address Table

".data" (virt. Size/Address: 0x926)
4096 bytes at offset 0x6000 in RAM, 0x6000 in file
contains initialized data
default alignment (16 bytes)
is readable
is writeable
Section entropy 0.610149

".rsrc" (virt. Size/Address: 0x410)
4096 bytes at offset 0x7000 in RAM, 0x7000 in file
contains initialized data
default alignment (16 bytes)
is readable
Section entropy 0.610149

at offset 0x0 (1040 bytes): Resource Directory
version: 0.0, created (GMT): Thu Jan 01 00:00:00 1970
version info, , broken resource.
Entropy: 5.48576



MWSSVC.EXE
Default location: C:\PROGRA~1\MYWEBS~1\BAR\2.BIN\MWSSVC.EXE
MD5: 319F6520EEACE462C0FBFEB6AB400332
SHA1: F562A0EF F8F7D554 0EFAE723 A3A33CF3 271B1EAB
File Size: 28 762
Version Info:
OriginalFilename: mwssvc.exe
FileDescription: My Web Search Bar
InternalName: mwssvc
CompanyName: MyWebSearch.com
FileVersion: 1, 0, 0, 4
LegalCopyright: Copyright ¸ 2007, 2008
ProductName: My Web Search Bar
ProductVersion: 2, 3, 0, 0

PE Info of the C:\PROGRA~1\MYWEBS~1\BAR\2.BIN\MWSSVC.EXE:

Type is Windows GUI.
DOS-stub: 200 bytes
built for machine: Intel 80386 processor
(32-bit-word machine)
Bytes of machine word are not reversed
Relocation info stripped
Local symbols stripped
Debugging info not stripped
executable file
0 entries in symbol table
4 sections
created (GMT): Wed Nov 19 18:10:56 2008
Linker version: 6.0
.text start: 0x1000, length: 12288 bytes
.data start: 0x4000, length: 12288 bytes
.bss start: -/-, length: 0 bytes
execution starts at 0x14ac
Preferred load base is 0x400000
Image size in RAM: 28 KB
Sections aligned to 4096 bytes in RAM, 4096 bytes in file
Versions: NT 4.0, Win32 4.0, App 0.0
Checksum: 0x00000000
uses Win32 graphical subsystem
Stack: 1024 KB reserved, 4 KB committed
Heap: 1024 KB reserved, 4 KB committed
Size of headers / offset to sections in file: 0x1000

".text" (virt. Size/Address: 0x2fc4)
12288 bytes at offset 0x1000 in RAM, 0x1000 in file
contains code
default alignment (16 bytes)
is executable
is readable
at offset 0x4ac: execution start
Section entropy 5.07075

".rdata" (virt. Size/Address: 0x9ea)
4096 bytes at offset 0x4000 in RAM, 0x4000 in file
contains initialized data
default alignment (16 bytes)
is readable
Section entropy 0.630209

at offset 0x250 (100 bytes): Import Directory

from "KERNEL32.dll":
not bound
name table at 0x4310, address table at 0x405c
hint name

456
LocalAlloc
662
Sleep
292
GetModuleFileNameA
175
FormatMessageA
45
CreateDirectoryA
40
CopyFileA
87
DeleteFileA
477
MoveFileA
754
_lclose
759
_lwrite
756
_llseek
755
_lcreat
757
_lopen
283
GetLocalTime
249
GetCurrentThread
250
GetCurrentThreadId
716
WaitForMultipleObjects
770
lstrcpyA
94
DisconnectNamedPipe
735
WriteFile
306
GetOverlappedResult
536
ReadFile
35
ConnectNamedPipe
625
SetLastError
555
ResetEvent
65
CreateNamedPipeA
49
CreateEventA
613
SetEvent
182
FreeResource
128
ExpandEnvironmentStringsA
469
LockResource
455
LoadResource
163
FindResourceA
373
GetVersionExA
767
lstrcmpiA
460
LocalFree
68
CreateProcessA
282
GetLastError
718
WaitForSingleObject
27
CloseHandle
102
EnterCriticalSection
449
LeaveCriticalSection
74
CreateThread
776
lstrlenA
415
HeapFree
418
HeapReAlloc
320
GetProcessHeap
409
HeapAlloc
81
DebugBreak
85
DeleteCriticalSection
426
InitializeCriticalSection
294
GetModuleHandleA
202
GetCommandLineA
125
ExitProcess
336
GetStartupInfoA
318
GetProcAddress
773
lstrcpynA
from "USER32.dll":
not bound
name table at 0x4404, address table at 0x4150
hint name

37
CharNextA
684
wsprintfA
from "ADVAPI32.dll":
not bound
name table at 0x42b4, address table at 0x4000
hint name

329
OpenThreadToken
403
RevertToSelf
351
RegCreateKeyExA
390
RegSetValueExA
347
RegCloseKey
327
OpenServiceA
53
ControlService
120
DeleteService
325
OpenSCManagerA
76
CreateServiceA
434
StartServiceA
341
QueryServiceStatus
52
CloseServiceHandle
396
RegisterEventSourceA
401
ReportEventA
121
DeregisterEventSource
430
SetServiceStatus
398
RegisterServiceCtrlHandlerA
435
StartServiceCtrlDispatcherA
220
ImpersonateNamedPipeClient
223
InitializeSecurityDescriptor
124
DuplicateTokenEx
from "SHLWAPI.dll":
not bound
name table at 0x43f8, address table at 0x4144
hint name

112
SHDeleteValueA
108
SHDeleteKeyA
at offset 0x160 (28 bytes): Debug Directory

at offset 0x0 (348 bytes): Import Address Table

".data" (virt. Size/Address: 0x506)
4096 bytes at offset 0x5000 in RAM, 0x5000 in file
contains initialized data
default alignment (16 bytes)
is readable
is writeable
Section entropy 0.630209

".rsrc" (virt. Size/Address: 0x818)
4096 bytes at offset 0x6000 in RAM, 0x6000 in file
contains initialized data
default alignment (16 bytes)
is readable
Section entropy 0.630209

at offset 0x0 (2072 bytes): Resource Directory
version: 0.0, created (GMT): Thu Jan 01 00:00:00 1970
name: "TXTBLOCK", , broken resource. version info, , broken resource.
Entropy: 5.07075


Et voici également le rapport Anti Keylogger Shield :


--- Report generated: 2010-03-17 00:12 ---

EverestPoker: [SBI $03A31629] Réglages (Clé du registre, nothing done)
HKEY_USERS\S-1-5-21-2442878764-3048672224-3850667282-1000\Software\Grand Virtual

EverestPoker: [SBI $C42AAFB3] Réglages utilisateur (Valeur du registre, nothing done)
HKEY_USERS\S-1-5-21-2442878764-3048672224-3850667282-1000\Software\Grand Virtual\XD3C

FunWebProducts: [SBI $561F0D2E] Réglages utilisateur (Valeur du registre, nothing done)
HKEY_USERS\S-1-5-21-2442878764-3048672224-3850667282-1000\Software\Microsoft\Internet Explorer\MenuExt\&Search\=...http://edits.mywebsearch.com/toolbaredits/menusearch.jhtml...

FunWebProducts: [SBI $FE95534B] Class ID (Clé du registre, nothing done)
HKEY_CLASSES_ROOT\CLSID\{8E6F1832-9607-4440-8530-13BE7C4B1D14}

FunWebProducts: [SBI $E56CA373] Class ID (Clé du registre, nothing done)
HKEY_CLASSES_ROOT\CLSID\{25560540-9571-4D7B-9389-0F166788785A}

FunWebProducts: [SBI $F021587E] Root class (Clé du registre, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\FunWebProducts.DataControl

FunWebProducts: [SBI $F021587E] Root class (Clé du registre, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\FunWebProducts.DataControl.1

FunWebProducts: [SBI $F021587E] Class ID (Clé du registre, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{25560540-9571-4D7B-9389-0F166788785A}

FunWebProducts: [SBI $F021587E] Root class (Clé du registre, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\FunWebProducts.DataControl.1

FunWebProducts: [SBI $F021587E] Class ID (Clé du registre, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{25560540-9571-4D7B-9389-0F166788785A}

FunWebProducts: [SBI $F021587E] Root class (Clé du registre, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\FunWebProducts.DataControl

FunWebProducts: [SBI $8C4358AC] Interface (Clé du registre, nothing done)
HKEY_CLASSES_ROOT\Interface\{17DE5E5E-BFE3-4E83-8E1F-8755795359EC}

FunWebProducts: [SBI $E3AF827A] Interface (Clé du registre, nothing done)
HKEY_CLASSES_ROOT\Interface\{1F52A5FA-A705-4415-B975-88503B291728}

FunWebProducts: [SBI $036600C0] Interface (Clé du registre, nothing done)
HKEY_CLASSES_ROOT\Interface\{A626CDBD-3D13-4F78-B819-440A28D7E8FC}

FunWebProducts: [SBI $F146DAB4] Type library (Clé du registre, nothing done)
HKEY_CLASSES_ROOT\TypeLib\{C8CECDE3-1AE1-4C4A-AD82-6D5B00212144}

FunWebProducts: [SBI $A3D08315] Class ID (Clé du registre, nothing done)
HKEY_CLASSES_ROOT\CLSID\{3DC201FB-E9C9-499C-A11F-23C360D7C3F8}

FunWebProducts: [SBI $3C959564] Class ID (Clé du registre, nothing done)
HKEY_CLASSES_ROOT\CLSID\{98D9753D-D73B-42D5-8C85-4469CDA897AB}

FunWebProducts: [SBI $04BB720B] Class ID (Clé du registre, nothing done)
HKEY_CLASSES_ROOT\CLSID\{D9FFFB27-D62A-4D64-8CEC-1FF006528805}

FunWebProducts: [SBI $2AEC0692] Interface (Clé du registre, nothing done)
HKEY_CLASSES_ROOT\Interface\{E342AF55-B78A-4CD0-A2BB-DA7F52D9D25E}

FunWebProducts: [SBI $28AAB8CB] Interface (Clé du registre, nothing done)
HKEY_CLASSES_ROOT\Interface\{E342AF55-B78A-4CD0-A2BB-DA7F52D9D25F}

FunWebProducts: [SBI $9BCB8D2F] Type library (Clé du registre, nothing done)
HKEY_CLASSES_ROOT\TypeLib\{0D26BC71-A633-4E71-AD31-EADC3A1B6A3A}

FunWebProducts: [SBI $61479453] Class ID (Clé du registre, nothing done)
HKEY_CLASSES_ROOT\CLSID\{63D0ED2C-B45B-4458-8B3B-60C69BBBD83C}

FunWebProducts: [SBI $724750D4] Dossier Programme (Répertoire, nothing done)
C:\Program Files\FunWebProducts\ScreenSaver\

FunWebProducts: [SBI $A4654040] Dossier Programme (Répertoire, nothing done)
C:\Program Files\FunWebProducts\ScreenSaver\Images\

FunWebProducts: [SBI $E3B8EA3A] Class ID (Clé du registre, nothing done)
HKEY_CLASSES_ROOT\CLSID\{84DA4FDF-A1CF-4195-8688-3E961F505983}

FunWebProducts: [SBI $BA1E7AA1] Class ID (Clé du registre, nothing done)
HKEY_CLASSES_ROOT\CLSID\{0F8ECF4F-3646-4C3A-8881-8E138FFCAF70}

FunWebProducts: [SBI $7AEE25A5] Class ID (Clé du registre, nothing done)
HKEY_CLASSES_ROOT\CLSID\{147A976F-EEE1-4377-8EA7-4716E4CDD239}

FunWebProducts: [SBI $782F6C08] Class ID (Clé du registre, nothing done)
HKEY_CLASSES_ROOT\CLSID\{B813095C-81C0-4E40-AA14-67520372B987}

FunWebProducts: [SBI $4ED0CA01] Class ID (Clé du registre, nothing done)
HKEY_CLASSES_ROOT\CLSID\{C9D7BE3E-141A-4C85-8CD6-32461F3DF2C7}

FunWebProducts: [SBI $D4B80C31] Class ID (Clé du registre, nothing done)
HKEY_CLASSES_ROOT\CLSID\{CFF4CE82-3AA2-451F-9B77-7165605FB835}

FunWebProducts: [SBI $8CC75C5A] Réglages (Valeur du registre, nothing done)
HKEY_USERS\S-1-5-21-2442878764-3048672224-3850667282-1000\Software\Microsoft\Internet Explorer\URLSearchHooks\{00A6FAF6-072E-44cf-8957-5838F569A31D}

FunWebProducts: [SBI $F3554FE5] Root class (Clé du registre, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\FunWebProducts.HistoryKillerScheduler

FunWebProducts: [SBI $F3554FE5] Root class (Clé du registre, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\FunWebProducts.HistoryKillerScheduler.1

FunWebProducts: [SBI $F3554FE5] Class ID (Clé du registre, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{C9D7BE3E-141A-4C85-8CD6-32461F3DF2C7}

FunWebProducts: [SBI $F3554FE5] Root class (Clé du registre, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\FunWebProducts.HistoryKillerScheduler.1

FunWebProducts: [SBI $F3554FE5] Class ID (Clé du registre, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{C9D7BE3E-141A-4C85-8CD6-32461F3DF2C7}

FunWebProducts: [SBI $F3554FE5] Root class (Clé du registre, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\FunWebProducts.HistoryKillerScheduler

FunWebProducts: [SBI $46DB56C2] Root class (Clé du registre, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\FunWebProducts.HistorySwatterControlBar

FunWebProducts: [SBI $46DB56C2] Root class (Clé du registre, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\FunWebProducts.HistorySwatterControlBar.1

FunWebProducts: [SBI $46DB56C2] Class ID (Clé du registre, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CFF4CE82-3AA2-451F-9B77-7165605FB835}

FunWebProducts: [SBI $46DB56C2] Root class (Clé du registre, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\FunWebProducts.HistorySwatterControlBar.1

FunWebProducts: [SBI $46DB56C2] Class ID (Clé du registre, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CFF4CE82-3AA2-451F-9B77-7165605FB835}

FunWebProducts: [SBI $46DB56C2] Root class (Clé du registre, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\FunWebProducts.HistorySwatterControlBar

FunWebProducts: [SBI $14E102B0] Root class (Clé du registre, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\FunWebProducts.IECookiesManager

FunWebProducts: [SBI $14E102B0] Root class (Clé du registre, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\FunWebProducts.IECookiesManager.1

FunWebProducts: [SBI $14E102B0] Class ID (Clé du registre, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0F8ECF4F-3646-4C3A-8881-8E138FFCAF70}

FunWebProducts: [SBI $14E102B0] Root class (Clé du registre, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\FunWebProducts.IECookiesManager.1

FunWebProducts: [SBI $14E102B0] Class ID (Clé du registre, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0F8ECF4F-3646-4C3A-8881-8E138FFCAF70}

FunWebProducts: [SBI $14E102B0] Root class (Clé du registre, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\FunWebProducts.IECookiesManager

FunWebProducts: [SBI $F794F996] Root class (Clé du registre, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\FunWebProducts.KillerObjManager

FunWebProducts: [SBI $F794F996] Root class (Clé du registre, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\FunWebProducts.KillerObjManager.1

FunWebProducts: [SBI $F794F996] Class ID (Clé du registre, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B813095C-81C0-4E40-AA14-67520372B987}

FunWebProducts: [SBI $F794F996] Root class (Clé du registre, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\FunWebProducts.KillerObjManager.1

FunWebProducts: [SBI $F794F996] Class ID (Clé du registre, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B813095C-81C0-4E40-AA14-67520372B987}

FunWebProducts: [SBI $F794F996] Root class (Clé du registre, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\FunWebProducts.KillerObjManager

FunWebProducts: [SBI $B71E4FFD] Dossier Programme (Répertoire, nothing done)
C:\Program Files\FunWebProducts\

MyWay.MyWebSearch: [SBI $17F9DD99] Réglages Autorun (MyWebSearch Email Plugin) (Valeur du registre, nothing done)
HKEY_USERS\S-1-5-21-2442878764-3048672224-3850667282-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\MyWebSearch Email Plugin

MyWay.MyWebSearch: [SBI $17F9DD99] Fichier de programme (Fichier, nothing done)
C:\PROGRA~1\MYWEBS~1\bar\2.bin\mwsoemon.exe
Properties.size=32838
Properties.md5=9ABBE6F791C0B599A7128C9ACA27C094
Properties.filedate=1261677399
Properties.filedatetext=2009-12-24 18:56:39

MyWay.MyWebSearch: [SBI $17F9DD99] Réglages Autorun (MyWebSearch Email Plugin) (Valeur du registre, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\MyWebSearch Email Plugin

MyWay.MyWebSearch: [SBI $17F9DD99] Réglages Autorun (MyWebSearch Email Plugin) (Valeur du registre, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\MyWebSearch Email Plugin

MyWay.MyWebSearch: [SBI $A4CB4D37] Réglages Autorun (My Web Search Bar Search Scope Monitor) (Valeur du registre, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\My Web Search Bar Search Scope Monitor

MyWay.MyWebSearch: [SBI $A4CB4D37] Fichier de programme (Fichier, nothing done)
C:\PROGRA~1\MYWEBS~1\bar\2.bin\m3SrchMn.exe
Properties.size=24688
Properties.md5=12D29863ADBFC002386B63CDD9BB0FB9
Properties.filedate=1261677399
Properties.filedatetext=2009-12-24 18:56:38

MyWay.MyWebSearch: [SBI $A4CB4D37] Réglages Autorun (My Web Search Bar Search Scope Monitor) (Valeur du registre, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\My Web Search Bar Search Scope Monitor

MyWay.MyWebSearch: [SBI $31A33FBC] Interface (Clé du registre, nothing done)
HKEY_CLASSES_ROOT\Interface\{72EE7F04-15BD-4845-A005-D6711144D86A}

MyWay.MyWebSearch: [SBI $45492A3B] Interface (Clé du registre, nothing done)
HKEY_CLASSES_ROOT\Interface\{E79DFBC9-5697-4FBD-94E5-5B2A9C7C1612}

MyWay.MyWebSearch: [SBI $C7B4FC73] Interface (Clé du registre, nothing done)
HKEY_CLASSES_ROOT\Interface\{E79DFBCB-5697-4FBD-94E5-5B2A9C7C1612}

MyWay.MyWebSearch: [SBI $A7E0CDDB] Root class (Clé du registre, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MyWebSearch.ChatSessionPlugin

MyWay.MyWebSearch: [SBI $A7E0CDDB] Root class (Clé du registre, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MyWebSearch.ChatSessionPlugin.1

MyWay.MyWebSearch: [SBI $A7E0CDDB] Class ID (Clé du registre, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E79DFBCA-5697-4fbd-94E5-5B2A9C7C1612}

MyWay.MyWebSearch: [SBI $A7E0CDDB] Root class (Clé du registre, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MyWebSearch.ChatSessionPlugin.1

MyWay.MyWebSearch: [SBI $A7E0CDDB] Class ID (Clé du registre, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E79DFBCA-5697-4fbd-94E5-5B2A9C7C1612}

MyWay.MyWebSearch: [SBI $A7E0CDDB] Root class (Clé du registre, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MyWebSearch.ChatSessionPlugin

MyWay.MyWebSearch: [SBI $1EFB65ED] Type library (Clé du registre, nothing done)
HKEY_CLASSES_ROOT\TypeLib\{E79DFBC0-5697-4FBD-94E5-5B2A9C7C1612}

MyWay.MyWebSearch: [SBI $A9DBD3A1] Interface (Clé du registre, nothing done)
HKEY_CLASSES_ROOT\Interface\{3E720451-B472-4954-B7AA-33069EB53906}

MyWay.MyWebSearch: [SBI $B4140203] Interface (Clé du registre, nothing done)
HKEY_CLASSES_ROOT\Interface\{3E720453-B472-4954-B7AA-33069EB53906}

MyWay.MyWebSearch: [SBI $F1C75F59] Root class (Clé du registre, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MyWebSearch.HTMLPanel

MyWay.MyWebSearch: [SBI $F1C75F59] Root class (Clé du registre, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MyWebSearch.HTMLPanel.1

MyWay.MyWebSearch: [SBI $F1C75F59] Class ID (Clé du registre, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{3E720452-B472-4954-B7AA-33069EB53906}

MyWay.MyWebSearch: [SBI $F1C75F59] Root class (Clé du registre, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MyWebSearch.HTMLPanel.1

MyWay.MyWebSearch: [SBI $F1C75F59] Class ID (Clé du registre, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{3E720452-B472-4954-B7AA-33069EB53906}

MyWay.MyWebSearch: [SBI $F1C75F59] Root class (Clé du registre, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MyWebSearch.HTMLPanel

MyWay.MyWebSearch: [SBI $8556DAFF] Type library (Clé du registre, nothing done)
HKEY_CLASSES_ROOT\TypeLib\{3E720450-B472-4954-B7AA-33069EB53906}

MyWay.MyWebSearch: [SBI $FE001122] Class ID (Clé du registre, nothing done)
HKEY_CLASSES_ROOT\CLSID\{7473D296-B7BB-4f24-AE82-7E2CE94BB6A9}

MyWay.MyWebSearch: [SBI $74CCF0A1] Root class (Clé du registre, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MyWebSearch.PseudoTransparentPlugin

MyWay.MyWebSearch: [SBI $74CCF0A1] Root class (Clé du registre, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MyWebSearch.PseudoTransparentPlugin.1

MyWay.MyWebSearch: [SBI $74CCF0A1] Class ID (Clé du registre, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7473D294-B7BB-4f24-AE82-7E2CE94BB6A9}

MyWay.MyWebSearch: [SBI $74CCF0A1] Root class (Clé du registre, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MyWebSearch.PseudoTransparentPlugin.1

MyWay.MyWebSearch: [SBI $74CCF0A1] Class ID (Clé du registre, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7473D294-B7BB-4f24-AE82-7E2CE94BB6A9}

MyWay.MyWebSearch: [SBI $74CCF0A1] Root class (Clé du registre, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MyWebSearch.PseudoTransparentPlugin

MyWay.MyWebSearch: [SBI $7D166358] Interface (Clé du registre, nothing done)
HKEY_CLASSES_ROOT\Interface\{7473D293-B7BB-4F24-AE82-7E2CE94BB6A9}

MyWay.MyWebSearch: [SBI $5B4611BE] Interface (Clé du registre, nothing done)
HKEY_CLASSES_ROOT\Interface\{7473D295-B7BB-4F24-AE82-7E2CE94BB6A9}

MyWay.MyWebSearch: [SBI $4689C01C] Interface (Clé du registre, nothing done)
HKEY_CLASSES_ROOT\Interface\{7473D297-B7BB-4F24-AE82-7E2CE94BB6A9}

MyWay.MyWebSearch: [SBI $39BC590A] Réglages (Clé du registre, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{3E720452-B472-4954-B7AA-33069EB53906}

MyWay.MyWebSearch: [SBI $D40B462F] Réglages (Clé du registre, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{7473D294-B7BB-4f24-AE82-7E2CE94BB6A9}

MyWay.MyWebSearch: [SBI $4A61CD5B] Réglages (Clé du registre, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{E79DFBCA-5697-4fbd-94E5-5B2A9C7C1612}

MyWay.MyWebSearch: [SBI $6404C538] Réglages (Clé du registre, nothing done)
HKEY_USERS\S-1-5-21-2442878764-3048672224-3850667282-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{07B18EA1-A523-4961-B6BB-170DE4475CCA}

MyWay.MyWebSearch: [SBI $3EAEA461] Class ID (Clé du registre, nothing done)
HKEY_CLASSES_ROOT\CLSID\{07B18EA9-A523-4961-B6BB-170DE4475CCA}

MyWay.MyWebSearch: [SBI $9FB1BDFC] Class ID (Clé du registre, nothing done)
HKEY_CLASSES_ROOT\CLSID\{00A6FAF6-072E-44cf-8957-5838F569A31D}

MyWay.MyWebSearch: [SBI $359D9C97] Class ID (Clé du registre, nothing done)
HKEY_CLASSES_ROOT\CLSID\{53CED2D0-5E9A-4761-9005-648404E6F7E5}

MyWay.MyWebSearch: [SBI $7390AC55] Interface (Clé du registre, nothing done)
HKEY_CLASSES_ROOT\Interface\{F87D7FB5-9DC5-4C8C-B998-D8DFE02E2978}

MyWay.MyWebSearch: [SBI $7B038A85] Root class (Clé du registre, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MyWebSearchToolBar.ToolbarPlugin

MyWay.MyWebSearch: [SBI $7B038A85] Root class (Clé du registre, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MyWebSearchToolBar.ToolbarPlugin.1

MyWay.MyWebSearch: [SBI $7B038A85] Class ID (Clé du registre, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{53CED2D0-5E9A-4761-9005-648404E6F7E5}

MyWay.MyWebSearch: [SBI $7B038A85] Root class (Clé du registre, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MyWebSearchToolBar.ToolbarPlugin.1

MyWay.MyWebSearch: [SBI $7B038A85] Class ID (Clé du registre, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{53CED2D0-5E9A-4761-9005-648404E6F7E5}

MyWay.MyWebSearch: [SBI $7B038A85] Root class (Clé du registre, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MyWebSearchToolBar.ToolbarPlugin

MyWay.MyWebSearch: [SBI $39E631BB] Réglages (Clé du registre, nothing done)
HKEY_USERS\S-1-5-21-2442878764-3048672224-3850667282-1000\Software\Microsoft\Internet Explorer\SearchScopes\{56256A51-B582-467e-B8D4-7786EDA79AE0}

MyWay.MyWebSearch: [SBI $1D729FD1] Réglages (Clé du registre, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{56256A51-B582-467e-B8D4-7786EDA79AE0}

MyWay.MyWebSearch: [SBI $8B97F486] Réglages (Clé du registre, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{07B18EAB-A523-4961-B6BB-170DE4475CCA}

MyWay.MyWebSearch: [SBI $B1C70274] Browser helper object (Clé du registre, nothing done)
HKEY_USERS\S-1-5-21-2442878764-3048672224-3850667282-1000\Software\MyWebSearch

MyWay.MyWebSearch: [SBI $B70627CB] Class ID (Clé du registre, nothing done)
HKEY_CLASSES_ROOT\CLSID\{00A6FAF1-072E-44cf-8957-5838F569A31D}

MyWay.MyWebSearch: [SBI $4991E2E9] Class ID (Clé du registre, nothing done)
HKEY_CLASSES_ROOT\CLSID\{07B18EA1-A523-4961-B6BB-170DE4475CCA}

MyWay.MyWebSearch: [SBI $BC537229] Class ID (Clé du registre, nothing done)
HKEY_CLASSES_ROOT\CLSID\{07B18EAB-A523-4961-B6BB-170DE4475CCA}

MyWay.MyWebSearch: [SBI $91B56C2A] Class ID (Clé du registre, nothing done)
HKEY_CLASSES_ROOT\CLSID\{1E0DE227-5CE4-4ea3-AB0C-8B03E1AA76BC}

MyWay.MyWebSearch: [SBI $C59FB266] Class ID (Clé du registre, nothing done)
HKEY_CLASSES_ROOT\CLSID\{7473D292-B7BB-4f24-AE82-7E2CE94BB6A9}

MyWay.MyWebSearch: [SBI $5EE91522] Class ID (Clé du registre, nothing done)
HKEY_CLASSES_ROOT\CLSID\{938AA51A-996C-4884-98CE-80DD16A5C9DA}

MyWay.MyWebSearch: [SBI $8B1EDE10] Class ID (Clé du registre, nothing done)
HKEY_CLASSES_ROOT\CLSID\{9FF05104-B030-46FC-94B8-81276E4E27DF}

MyWay.MyWebSearch: [SBI $80863035] Class ID (Clé du registre, nothing done)
HKEY_CLASSES_ROOT\CLSID\{A9571378-68A1-443d-B082-284F960C6D17}

MyWay.MyWebSearch: [SBI $39556604] Class ID (Clé du registre, nothing done)
HKEY_CLASSES_ROOT\CLSID\{ADB01E81-3C79-4272-A0F1-7B2BE7A782DC}

MyWay.MyWebSearch: [SBI $8B82F326] Root class (Clé du registre, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MyWebSearch.OutlookAddin

MyWay.MyWebSearch: [SBI $8B82F326] Root class (Clé du registre, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MyWebSearch.OutlookAddin.1

MyWay.MyWebSearch: [SBI $8B82F326] Class ID (Clé du registre, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{ADB01E81-3C79-4272-A0F1-7B2BE7A782DC}

MyWay.MyWebSearch: [SBI $8B82F326] Root class (Clé du registre, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MyWebSearch.OutlookAddin.1

MyWay.MyWebSearch: [SBI $8B82F326] Class ID (Clé du registre, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{ADB01E81-3C79-4272-A0F1-7B2BE7A782DC}

MyWay.MyWebSearch: [SBI $8B82F326] Root class (Clé du registre, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MyWebSearch.OutlookAddin

MyWay.MyWebSearch: [SBI $21C50ADC] Root class (Clé du registre, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MyWebSearchToolBar.SettingsPlugin

MyWay.MyWebSearch: [SBI $21C50ADC] Root class (Clé du registre, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MyWebSearchToolBar.SettingsPlugin.1

MyWay.MyWebSearch: [SBI $21C50ADC] Class ID (Clé du registre, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{07B18EAB-A523-4961-B6BB-170DE4475CCA}

MyWay.MyWebSearch: [SBI $21C50ADC] Root class (Clé du registre, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MyWebSearchToolBar.SettingsPlugin.1

MyWay.MyWebSearch: [SBI $21C50ADC] Class ID (Clé du registre, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{07B18EAB-A523-4961-B6BB-170DE4475CCA}

MyWay.MyWebSearch: [SBI $21C50ADC] Root class (Clé du registre, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MyWebSearchToolBar.SettingsPlugin

MyWay.MyWebSearch: [SBI $6D6DC0D4] Root class (Clé du registre, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ScreenSaverControl.ScreenSaverInstaller

MyWay.MyWebSearch: [SBI $6D6DC0D4] Root class (Clé du registre, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ScreenSaverControl.ScreenSaverInstaller.1

MyWay.MyWebSearch: [SBI $6D6DC0D4] Class ID (Clé du registre, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{9FF05104-B030-46FC-94B8-81276E4E27DF}

MyWay.MyWebSearch: [SBI $6D6DC0D4] Root class (Clé du registre, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ScreenSaverControl.ScreenSaverInstaller.1

MyWay.MyWebSearch: [SBI $6D6DC0D4] Class ID (Clé du registre, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{9FF05104-B030-46FC-94B8-81276E4E27DF}

MyWay.MyWebSearch: [SBI $6D6DC0D4] Root class (Clé du registre, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ScreenSaverControl.ScreenSaverInstaller

MyWay.MyWebSearch: [SBI $8B993408] Type library (Clé du registre, nothing done)
HKEY_CLASSES_ROOT\TypeLib\{29D67D3C-509A-4544-903F-C8C1B8236554}

MyWay.MyWebSearch: [SBI $4C54BBA4] Type library (Clé du registre, nothing done)
HKEY_CLASSES_ROOT\TypeLib\{7473D290-B7BB-4F24-AE82-7E2CE94BB6A9}

MyWay.MyWebSearch: [SBI $75BB5611] Type library (Clé du registre, nothing done)
HKEY_CLASSES_ROOT\TypeLib\{8E6F1830-9607-4440-8530-13BE7C4B1D14}

MyWay.MyWebSearch: [SBI $EABEA47E] Type library (Clé du registre, nothing done)
HKEY_CLASSES_ROOT\TypeLib\{E47CAEE0-DEEA-464A-9326-3F2801535A4D}

MyWay.MyWebSearch: [SBI $95E7D650] Type library (Clé du registre, nothing done)
HKEY_CLASSES_ROOT\TypeLib\{F42228FB-E84E-479E-B922-FBBD096E792C}

MyWay.MyWebSearch: [SBI $DBE9DC78] Browser helper object (Clé du registre, nothing done)
HKEY_LOCAL_MACHINE\Software\FocusInteractive

MyWay.MyWebSearch: [SBI $0AB712F8] Réglages (Clé du registre, nothing done)
HKEY_LOCAL_MACHINE\Software\Microsoft\Office\Outlook\Addins\MyWebSearch.OutlookAddin

MyWay.MyWebSearch: [SBI $6CDD369B] Réglages (Clé du registre, nothing done)
HKEY_LOCAL_MACHINE\Software\Microsoft\Office\Word\Addins\MyWebSearch.OutlookAddin

MyWay.MyWebSearch: [SBI $BDD40B52] Réglages (Clé du registre, nothing done)
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{00A6FAF1-072E-44cf-8957-5838F569A31D}

MyWay.MyWebSearch: [SBI $5A6A799D] Réglages désinstallation (Clé du registre, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\MyWebSearch bar Uninstall

MyWay.MyWebSearch: [SBI $5A6A799D] Réglages désinstallation (Clé du registre, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\MyWebSearch bar Uninstall

MyWay.MyWebSearch: [SBI $AC7657F9] Réglages (Clé du registre, nothing done)
HKEY_LOCAL_MACHINE\Software\MyWebSearch

MyWay.MyWebSearch: [SBI $BF485355] Barre d'outils IE (Valeur du registre, nothing done)
HKEY_USERS\S-1-5-21-2442878764-3048672224-3850667282-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\{07B18EA9-A523-4961-B6BB-170DE4475CCA}

MyWay.MyWebSearch: [SBI $63E2271D] Barre d'outils IE (Valeur du registre, nothing done)
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\{07B18EA9-A523-4961-B6BB-170DE4475CCA}

MyWay.MyWebSearch: [SBI $51E6ABA2] Dossier Programme (Répertoire, nothing done)
C:\Program Files\MyWebSearch\

MyWay.MyWebSearch: [SBI $43FCC3D4] Browser helper object (Clé du registre, nothing done)
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{07B18EA1-A523-4961-B6BB-170DE4475CCA}

FunWebProducts: [SBI $934664E3] Exécutable (Fichier, nothing done)
C:\Windows\System32\f3PSSavr.scr
Properties.size=28672
Properties.md5=4CD346697529EFC743A608B2F5D0CC94
Properties.filedate=1261677399
Properties.filedatetext=2009-12-24 18:56:38

FunWebProducts: [SBI $51F213BA] Dossier Programme (Répertoire, nothing done)
C:\Program Files\MyWebSearch\bar\

FunWebProducts: [SBI $9975C0B8] Dossier Programme (Répertoire, nothing done)
C:\Program Files\MyWebSearch\bar\1.bin\

FunWebProducts: [SBI $9AC0555D] Dossier Programme (Répertoire, nothing done)
C:\Program Files\MyWebSearch\bar\Avatar\

FunWebProducts: [SBI $87976B73] Dossier Programme (Répertoire, nothing done)
C:\Program Files\funwebproducts\ScreenSaver

MyWay.MyWebSearch: [SBI $91166FCC] Class ID (Clé du registre, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{00A6FAF1-072E-44cf-8957-5838F569A31D}

MyWay.MyWebSearch: [SBI $91166FCC] Browser helper object (Clé du registre, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{00A6FAF1-072E-44cf-8957-5838F569A31D}

MyWay.MyWebSearch: [SBI $91166FCC] Class ID (Clé du registre, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{00A6FAF1-072E-44cf-8957-5838F569A31D}

MyWay.MyWebSearch: [SBI $E8826233] Class ID (Clé du registre, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{07B18EA1-A523-4961-B6BB-170DE4475CCA}

MyWay.MyWebSearch: [SBI $E8826233] Browser helper object (Clé du registre, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{07B18EA1-A523-4961-B6BB-170DE4475CCA}

MyWay.MyWebSearch: [SBI $E8826233] Class ID (Clé du registre, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{07B18EA1-A523-4961-B6BB-170DE4475CCA}

MyWay.MyWebSearch: [SBI $72D40B69] Class ID (Clé du registre, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{07B18EA9-A523-4961-B6BB-170DE4475CCA}

MyWay.MyWebSearch: [SBI $72D40B69] Barre d'outils IE (Valeur du registre, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar\{07B18EA9-A523-4961-B6BB-170DE4475CCA}

MyWay.MyWebSearch: [SBI $72D40B69] Class ID (Clé du registre, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{07B18EA9-A523-4961-B6BB-170DE4475CCA}

MyWay.MyWebSearch: [SBI $B836F058] Interface (Clé du registre, nothing done)
HKEY_CLASSES_ROOT\Interface\{CF54BE1C-9359-4395-8533-1657CF209CFE}

MyWay.MyWebSearch: [SBI $4A8ED495] Type library (Clé du registre, nothing done)
HKEY_CLASSES_ROOT\TypeLib\{D518921A-4A03-425E-9873-B9A71756821E}

MyWay.MyWebSearch: [SBI $0ACED923] Donnée (Fichier, nothing done)
C:\Program Files\MyWebSearch\bar\Avatar\COMMON.F3S
Properties.size=89655
Properties.md5=140AB62FFB5E3991894AEAD1E105393D
Properties.filedate=1261677401
Properties.filedatetext=2009-12-24 18:56:40

MyWay.MyWebSearch: [SBI $0ACED923] Donnée (Fichier, nothing done)
C:\Program Files\MyWebSearch\bar\Game\CHECKERS.F3S
Properties.size=56438
Properties.md5=87B6FB1125216E8D7B293400B715FB8D
Properties.filedate=1261677401
Properties.filedatetext=2009-12-24 18:56:40

MyWay.MyWebSearch: [SBI $0ACED923] Donnée (Fichier, nothing done)
C:\Program Files\MyWebSearch\bar\Game\CHESS.F3S
Properties.size=66726
Properties.md5=E660C15170591EBE447F601DDC6163C1
Properties.filedate=1261677401
Properties.filedatetext=2009-12-24 18:56:40

MyWay.MyWebSearch: [SBI $0ACED923] Donnée (Fichier, nothing done)
C:\Program Files\MyWebSearch\bar\Game\REVERSI.F3S
Properties.size=56688
Properties.md5=C13224330D67C961D2E3E4279A5BC1A6
Properties.filedate=1261677401
Properties.filedatetext=2009-12-24 18:56:41

MyWay.MyWebSearch: [SBI $0ACED923] Donnée (Fichier, nothing done)
C:\Program Files\MyWebSearch\bar\Message\COMMON.F3S
Properties.size=159525
Properties.md5=8881A24974408D6611EFA9BE7AF37E31
Properties.filedate=1261677401
Properties.filedatetext=2009-12-24 18:56:40

MyWay.MyWebSearch: [SBI $0ACED923] Donnée (Fichier, nothing done)
C:\Program Files\MyWebSearch\bar\Notifier\COMMON.F3S
Properties.size=301118
Properties.md5=FD8A7DE5CE05EDA235B4D29C0E64FBFF
Properties.filedate=1261677401
Properties.filedatetext=2009-12-24 18:56:40

MyWay.MyWebSearch: [SBI $0ACED923] Donnée (Fichier, nothing done)
C:\Program Files\MyWebSearch\bar\Notifier\DOG.F3S
Properties.size=71675
Properties.md5=EAD44A1AC4FD80104D1B4814CE3582E1
Properties.filedate=1261677401
Properties.filedatetext=2009-12-24 18:56:40

MyWay.MyWebSearch: [SBI $0ACED923] Donnée (Fichier, nothing done)
C:\Program Files\MyWebSearch\bar\Notifier\FISH.F3S
Properties.size=106998
Properties.md5=43182F0E08638C0FFB08B33D7876B340
Properties.filedate=1261677401
Properties.filedatetext=2009-12-24 18:56:40

MyWay.MyWebSearch: [SBI $0ACED923] Donnée (Fichier, nothing done)
C:\Program Files\MyWebSearch\bar\Notifier\KUNGFU.F3S
Properties.size=129559
Properties.md5=1A47783E119A96A3597DA38717FB9E59
Properties.filedate=1261677401
Properties.filedatetext=2009-12-24 18:56:40

MyWay.MyWebSearch: [SBI $0ACED923] Donnée (Fichier, nothing done)
C:\Program Files\MyWebSearch\bar\Notifier\LIFEGARD.F3S
Properties.size=272367
Properties.md5=72876A9D1BA63B025CF73A5EB622569E
Properties.filedate=1261677401
Properties.filedatetext=2009-12-24 18:56:40

MyWay.MyWebSearch: [SBI $0ACED923] Donnée (Fichier, nothing done)
C:\Program Files\MyWebSearch\bar\Notifier\MAID.F3S
Properties.size=122747
Properties.md5=46DD0C9F0820FE10E0DB7D2DC5B18E2F
Properties.filedate=1261677401
Properties.filedatetext=2009-12-24 18:56:40

MyWay.MyWebSearch: [SBI $0ACED923] Donnée (Fichier, nothing done)
C:\Program Files\MyWebSearch\bar\Notifier\MAILBOX.F3S
Properties.size=43287
Properties.md5=4C64C9C48FAFB1CE394BAD985A1A1CA6
Properties.filedate=1261677401
Properties.filedatetext=2009-12-24 18:56:40

MyWay.MyWebSearch: [SBI $0ACED923] Donnée (Fichier, nothing done)
C:\Program Files\MyWebSearch\bar\Notifier\OPERA.F3S
Properties.size=155471
Properties.md5=256AC64A886E9E60E56CE07A0F5C6808
Properties.filedate=1261677401
Properties.filedatetext=2009-12-24 18:56:40

MyWay.MyWebSearch: [SBI $0ACED923] Donnée (Fichier, nothing done)
C:\Program Files\MyWebSearch\bar\Notifier\ROBOT.F3S
Properties.size=149817
Properties.md5=648274DCDAE169827E769628379D342A
Properties.filedate=1261677401
Properties.filedatetext=2009-12-24 18:56:40

MyWay.MyWebSearch: [SBI $0ACED923] Donnée (Fichier, nothing done)
C:\Program Files\MyWebSearch\bar\Notifier\SEDUCT.F3S
Properties.size=243509
Properties.md5=D9E3A3AEB53C0B0E1A4F6987D1995F0B
Properties.filedate=1261677401
Properties.filedatetext=2009-12-24 18:56:40

MyWay.MyWebSearch: [SBI $0ACED923] Donnée (Fichier, nothing done)
C:\Program Files\MyWebSearch\bar\Notifier\SURFER.F3S
Properties.size=113081
Properties.md5=14DF54094BF76DBE5D71DB552DFB2633
Properties.filedate=1261677401
Properties.filedatetext=2009-12-24 18:56:40

MyWay.MyWebSearch: [SBI $2CFDFB02] Donnée (Fichier, nothing done)
C:\Program Files\MyWebSearch\bar\2.bin\F3WALLPP.DAT
Properties.size=305
Properties.md5=BC3475B177749B81BFAB5D21091786B5
Properties.filedate=1261677399
Properties.filedatetext=2009-12-24 18:56:38

MyWay.MyWebSearch: [SBI $2CFDFB02] Donnée (Fichier, nothing done)
C:\Program Files\MyWebSearch\bar\Settings\s_pid.dat
Properties.size=16
Properties.md5=F9CFD0FE31F03C06126E4129A88481C1
Properties.filedate=1261677401
Properties.filedatetext=2009-12-24 18:56:41

MyWay.MyWebSearch: [SBI $0888C8CD] Image (Fichier, nothing done)
C:\Program Files\MyWebSearch\bar\icons\CM.ICO
Properties.size=7406
Properties.md5=089EFCEA98317E0D0DC0543BE2EDA81F
Properties.filedate=1261677401
Properties.filedatetext=2009-12-24 18:56:41

MyWay.MyWebSearch: [SBI $0888C8CD] Image (Fichier, nothing done)
C:\Program Files\MyWebSearch\bar\icons\MFC.ICO
Properties.size=7406
Properties.md5=141581A8DE0D46FB85F25A89DA38284C
Properties.filedate=1261677401
Properties.filedatetext=2009-12-24 18:56:41

MyWay.MyWebSearch: [SBI $0888C8CD] Image (Fichier, nothing done)
C:\Program Files\MyWebSearch\bar\icons\PSS.ICO
Properties.size=10134
Properties.md5=24E6DA5796608E7DAD1011EC432B1666
Properties.filedate=1261677401
Properties.filedatetext=2009-12-24 18:56:41

MyWay.MyWebSearch: [SBI $0888C8CD] Image (Fichier, nothing done)
C:\Program Files\MyWebSearch\bar\icons\SMILEY.ICO
Properties.size=7406
Properties.md5=2327AE7F0BAC7814F0870CED67420AAC
Properties.filedate=1261677401
Properties.filedatetext=2009-12-24 18:56:41

MyWay.MyWebSearch: [SBI $0888C8CD] Image (Fichier, nothing done)
C:\Program Files\MyWebSearch\bar\icons\WB.ICO
Properties.size=7406
Properties.md5=7429E321AC5058790EA073CD55F7328F
Properties.filedate=1261677401
Properties.filedatetext=2009-12-24 18:56:41

MyWay.MyWebSearch: [SBI $0888C8CD] Image (Fichier, nothing done)
C:\Program Files\MyWebSearch\bar\icons\ZWINKY.ICO
Properties.size=12782
Properties.md5=EC6393D63343AF0856E5DCBD16C182BC
Properties.filedate=1261677401
Properties.filedatetext=2009-12-24 18:56:41

MyWay.MyWebSearch: [SBI $AA1369A1] Donnée (Fichier, nothing done)
C:\Program Files\MyWebSearch\bar\1.bin\M3FFXTBR.JAR
Properties.size=4466
Properties.md5=24BF210F4B66401C73DF15656822CB3A
Properties.filedate=1255287204
Properties.filedatetext=2009-10-11 19:53:24

MyWay.MyWebSearch: [SBI $AA1369A1] Donnée (Fichier, nothing done)
C:\Program Files\MyWebSearch\bar\1.bin\M3NTSTBR.JAR
Properties.size=6462
Properties.md5=AB3215E9A56E91D45753D1BC56682B96
Properties.filedate=1255287204
Properties.filedatetext=2009-10-11 19:53:24

MyWay.MyWebSearch: [SBI $E4947DDB] Bibliothèque (Fichier, nothing done)
C:\Program Files\MyWebSearch\bar\1.bin\NPMYWEBS.DLL
Properties.size=24684
Properties.md5=7BDBC3B0462EC1D1774EC733F523EC95
Properties.filedate=1255287205
Properties.filedatetext=2009-10-11 19:53:24

MyWay.MyWebSearch: [SBI $E4947DDB] Bibliothèque (Fichier, nothing done)
C:\Program Files\MyWebSearch\bar\2.bin\F3HKSTUB.DLL
Properties.size=24685
Properties.md5=AD4A35A2F5068E3F8CFE22AA73370408
Properties.filedate=1261677399
Properties.filedatetext=2009-12-24 18:56:38

MyWay.MyWebSearch: [SBI $E4947DDB] Bibliothèque (Fichier, nothing done)
C:\Program Files\MyWebSearch\bar\2.bin\F3REGHK.DLL
Properties.size=28776
Properties.md5=F79220B730D91FBF4D8C94BA91C1A857
Properties.filedate=1261677399
Properties.filedatetext=2009-12-24 18:56:38

MyWay.MyWebSearch: [SBI $E4947DDB] Bibliothèque (Fichier, nothing done)
C:\Program Files\MyWebSearch\bar\2.bin\M3AUXSTB.DLL
Properties.size=24681
Properties.md5=8A30BDCA937CF837F3FD6B66CE905632
Properties.filedate=1261677399
Properties.filedatetext=2009-12-24 18:56:38

MyWay.MyWebSearch: [SBI $E4947DDB] Bibliothèque (Fichier, nothing done)
C:\Program Files\MyWebSearch\bar\2.bin\M3DLGHK.DLL
Properties.size=28779
Properties.md5=4956D50F1212650BBF8655976E18EE2B
Properties.filedate=1261677399
Properties.filedatetext=2009-12-24 18:56:38

MyWay.MyWebSearch: [SBI $E4947DDB] Bibliothèque (Fichier, nothing done)
C:\Program Files\MyWebSearch\bar\2.bin\M3HIGHIN.EXE
Properties.size=16502
Properties.md5=5129CC4F1B78FDDDFEC80F91E12311AC
Properties.filedate=1261677399
Properties.filedatetext=2009-12-24 18:56:38

MyWay.MyWebSearch: [SBI $E4947DDB] Bibliothèque (Fichier, nothing done)
C:\Program Files\MyWebSearch\bar\2.bin\M3HTML.DLL
Properties.size=86078
Properties.md5=D460ECA5D4574507FF4DABCC2CBC5F2E
Properties.filedate=1261677399
Properties.filedatetext=2009-12-24 18:56:38

MyWay.MyWebSearch: [SBI $E4947DDB] Bibliothèque (Fichier, nothing done)
C:\Program Files\MyWebSearch\bar\2.bin\M3IDLE.DLL
Properties.size=28672
Properties.md5=86445E5A1C4B02574D8BB1B49EBC1A73
Properties.filedate=1261677399
Properties.filedatetext=2009-12-24 18:56:38

MyWay.MyWebSearch: [SBI $E4947DDB] Bibliothèque (Fichier, nothing done)
C:\Program Files\MyWebSearch\bar\2.bin\M3IMPIPE.EXE
Properties.size=16384
Properties.md5=FFF6063F3245896A084068CD5D8250FE
Properties.filedate=1261677399
Properties.filedatetext=2009-12-24 18:56:38

MyWay.MyWebSearch: [SBI $E4947DDB] Bibliothèque (Fichier, nothing done)
C:\Program Files\MyWebSearch\bar\2.bin\M3MEDINT.EXE
Properties.size=16501
Properties.md5=2B63825777FF3587B6F8BD928614E4EE
Properties.filedate=1261677399
Properties.filedatetext=2009-12-24 18:56:38

MyWay.MyWebSearch: [SBI $E4947DDB] Bibliothèque (Fichier, nothing done)
C:\Program Files\MyWebSearch\bar\2.bin\M3MSG.DLL
Properties.size=155738
Properties.md5=445CA5E2DA8147D1C7BD7C6D5A8FAC4F
Properties.filedate=1261677399
Properties.filedatetext=2009-12-24 18:56:38

MyWay.MyWebSearch: [SBI $E4947DDB] Bibliothèque (Fichier, nothing done)
C:\Program Files\MyWebSearch\bar\2.bin\M3OUTLCN.DLL
Properties.size=69717
Properties.md5=26F833B7AD465A044A8DA50B619775B2
Properties.filedate=1261677399
Properties.filedatetext=2009-12-24 18:56:38

MyWay.MyWebSearch: [SBI $E4947DDB] Bibliothèque (Fichier, nothing done)
C:\Program Files\MyWebSearch\bar\2.bin\M3PLUGIN.DLL
Properties.size=57448
Properties.md5=CDB8CD8AE523D22AFE6CBCCDFCEC6E30
Properties.filedate=1261677399
Properties.filedatetext=2009-12-24 18:56:38

MyWay.MyWebSearch: [SBI $E4947DDB] Bibliothèque (Fichier, nothing done)
C:\Program Files\MyWebSearch\bar\2.bin\M3SKIN.DLL
Properties.size=131141
Properties.md5=D1A29FBD9263013A3AFD6BB24EE92604
Properties.filedate=1261677399
Properties.filedatetext=2009-12-24 18:56:38

MyWay.MyWebSearch: [SBI $E4947DDB] Bibliothèque (Fichier, nothing done)
C:\Program Files\MyWebSearch\bar\2.bin\M3SKPLAY.EXE
Properties.size=28672
Properties.md5=0606CBCDC54D2E5971F2B6AEC860FF6D
Properties.filedate=1261677399
Properties.filedatetext=2009-12-24 18:56:38

MyWay.MyWebSearch: [SBI $E4947DDB] Bibliothèque (Fichier, nothing done)
C:\Program Files\MyWebSearch\bar\2.bin\M3SLSRCH.EXE
Properties.size=24686
Properties.md5=A823C5911BC5BE53EE44A070D3B3FAE0
Properties.filedate=1261677399
Properties.filedatetext=2009-12-24 18:56:38

MyWay.MyWebSearch: [SBI $E4947DDB] Bibliothèque (Fichier, nothing done)
C:\Program Files\MyWebSearch\bar\2.bin\M3SRCHMN.EXE
Properties.size=24688
Properties.md5=12D29863ADBFC002386B63CDD9BB0FB9
Properties.filedate=1261677399
Properties.filedatetext=2009-12-24 18:56:38

MyWay.MyWebSearch: [SBI $E4947DDB] Bibliothèque (Fichier, nothing done)
C:\Program Files\MyWebSearch\bar\2.bin\MWSBAR.DLL
Properties.size=456112
Properties.md5=5AF5E16C19173C295C26C989FE98A6D5
Properties.filedate=1261677399
Properties.filedatetext=2009-12-24 18:56:38

MyWay.MyWebSearch: [SBI $E4947DDB] Bibliothèque (Fichier, nothing done)
C:\Program Files\MyWebSearch\bar\2.bin\MWSOEMON.EXE
Properties.size=32838
Properties.md5=9ABBE6F791C0B599A7128C9ACA27C094
Properties.filedate=1261677399
Properties.filedatetext=2009-12-24 18:56:39

MyWay.MyWebSearch: [SBI $E4947DDB] Bibliothèque (Fichier, nothing done)
C:\Program Files\MyWebSearch\bar\2.bin\MWSOEPLG.DLL
Properties.size=389204
Properties.md5=ED90588522210940832AFC8A51DC172B
Properties.filedate=1261677399
Properties.filedatetext=2009-12-24 18:56:39

MyWay.MyWebSearch: [SBI $E4947DDB] Bibliothèque (Fichier, nothing done)
C:\Program Files\MyWebSearch\bar\2.bin\MWSOESTB.DLL
Properties.size=45134
Properties.md5=DCE9724842497960E7148DCA20295E97
Properties.filedate=1261677399
Properties.filedatetext=2009-12-24 18:56:39

MyWay.MyWebSearch: [SBI $E4947DDB] Bibliothèque (Fichier, nothing done)
C:\Program Files\MyWebSearch\bar\2.bin\MWSSRCAS.DLL
Properties.size=54608
Properties.md5=A79779D6D331E1346D9569B17638F221
Properties.filedate=1261677399
Properties.filedatetext=2009-12-24 18:56:39

MyWay.MyWebSearch: [SBI $E4947DDB] Bibliothèque (Fichier, nothing done)
C:\Program Files\MyWebSearch\bar\2.bin\MWSSVC.EXE
Properties.size=28762
Properties.md5=319F6520EEACE462C0FBFEB6AB400332
Properties.filedate=1261677399
Properties.filedatetext=2009-12-24 18:56:39

My
0
Réponse 7 / 9
fabul Messages postés 40964 Date d'inscription   Statut Modérateur Dernière intervention   5 713
 
La source,probablement ici:http://download.mywebsearch.com/

Pour porter plainte,bonne chance.

Pour supprimer MyWebSearch,c'est Ad-Remover,fait option L pour analyse, et poste le raport généré par Ad-Remover.
0
chipie-68
 
Où dois-je aller pour l'option L ?

J ne suis pas une spécialiste ! lol
0
fabul Messages postés 40964 Date d'inscription   Statut Modérateur Dernière intervention   5 713 > chipie-68
 
Désolé,c'est plutot "S" pour Scan et "L" pour Launch cleaning (Nettoyage).

Démarre le et clic "Oui" et ensuite sur "S"
0
Réponse 8 / 9
jfkpresident Messages postés 13408 Date d'inscription   Statut Contributeur sécurité Dernière intervention   1 175
 
Bonsoir ,

Option "scanner" et "nettoyer" pour AD-R

L'interface a changé ...
0
Réponse 9 / 9
chipie-68
 
merci à tous pour votre aide !
0

Discussions similaires

Cheval de troie comment le supprimer?
sonia -
^^Marie^^ -

28 réponses
virus: comment supprimer ccxprocess (virus cheval de troie)
grrlesang -
bazfile -

1 réponse
comment se debarasser d un cheval de troie
jennyfer1 -
MrMaDGaME -

66 réponses
Troie Le film
keurdange -
keurdange -

3 réponses
comment eliminer un cheval de troie?
Lorenzo4440 -
Elo -

23 réponses