Chevals de troie

Résolu
chipie-68 -  
 chipie-68 -
Bonsoir,

Voilà, g été victime de trois chevals de troie (MyWay = 192 fois + FunWeb = 85 fois + Trojans MyWeb = 21 fois)

C grâce au logiciel que je viens d'installer Anti Keylogger Shield.

G besoin d votre aide pour identifier la source.

G le détail des fichiers que je viens d récupérer du logiciel après l'avoir fait tourné.
Comment dois-je faire pour édentifier la source.
Je ne pas faire malheureusement de copier/coller.

Merci encore pour votre aide !
Configuration: Windows Vista

9 réponses

  1.
    fabul Messages postés 42186 Date d'inscription   Statut Modérateur Dernière intervention   6 071
     
    Salut,

    Télécharge et installe RegRun Reanimator.

    Clic sur scan for viruses / scan windows startup.

    Coche la case "Use deep level scanning once".

    Clic sur "Make scan now".

    Clic sur la flèche verte "Fix problems".

    Il te proposera Regguard,répond "non",(on n'en a pas besoin).

    Clic-droit dans le milieu de la fenètre vis a vis le nom du fichier et choisit "Save to file" (Par défaut dans "Mes Documents") dans un fichier nommé 1 (.txt sera ajouté automatiquement).

    Clic sur la flèche verte en haut a droite pour voir le suivant et fait la mème chose a l'exception qu'il faudra le nommer 2 et ainsi de suite pour les suivants.

    Ensuite,quand une fenètre s'ouvre,choisit "Exit".

    Poste les résultats contenus dans tous les fichiers 1.txt 2.txt 3.txt...
    0
  2. chipie-68
     
    Slt,

    J t remercie !

    J viens tout juste de trouver sur Anti Keylogger Shield où s trouve l rapport.

    Mais, j n sais pas le lire pour identifier la source.
    0
  3. fabul Messages postés 42186 Date d'inscription   Statut Modérateur Dernière intervention   6 071
     
    Ce n'est ni Anti Keylogger ni analyser ses raports qui vont aider a régler le problème,il a fait ce qu'il a pu et il ne peut plus...

    Si tu veut prendre quelques minutes pour faire une analyse plus efficace,je t'ai donné un moyen.
    0
  4. chipie-68
     
    Slt,

    j t remercie pour ton aide.

    Quand tu dis "Poste les résultats contenus dans tous les fichiers 1.txt 2.txt 3.txt..."

    Je dois les sélectionner et les envoyer où ?

    Merci pour ta réponse !
    0

  5. Vous n’avez pas trouvé la réponse que vous recherchez ?

    Posez votre question
  6. fabul Messages postés 42186 Date d'inscription   Statut Modérateur Dernière intervention   6 071
     
    Sauvegardés dans le dossier "Mes documents"

    Tu peux les coller ici.
    0
  7. chipie-68
     
    Salut,

    G installé RegRun Reanimator.
    Peux-tu m'expliquer à quoi ils servent et qu'est'ce qu'ils ont pu faire sur mon ordi.
    Et comment puis-je identifier la source avec ces données pour porter plainte.

    Je te remercie pour ton aide !

    Voilà le rapport sur les 3 chevales de Troie et du Trojean :

    M3SRCHMN.EXE
    Default location: C:\PROGRA~1\MYWEBS~1\BAR\2.BIN\M3SRCHMN.EXE
    MD5: 12D29863ADBFC002386B63CDD9BB0FB9
    SHA1: A16A4273 08EA5996 DB667DE4 71CF18CF D4E23419
    File Size: 24 688
    Version Info:
    OriginalFilename: m3SrchMn.exe
    FileDescription: MyWebSearch SearchScope Monitor
    InternalName: m3SrchMn
    CompanyName: MyWebSearch.com
    FileVersion: 1, 0, 0, 4
    LegalCopyright: Copyright ¸ 2006, 2007
    ProductName: My Web Search Bar for Internet Explorer and FireFox
    ProductVersion: 2, 3, 0, 0

    PE Info of the C:\PROGRA~1\MYWEBS~1\BAR\2.BIN\M3SRCHMN.EXE:

    Type is Windows GUI.
    DOS-stub: 208 bytes
    built for machine: Intel 80386 processor
    (32-bit-word machine)
    Bytes of machine word are not reversed
    Relocation info stripped
    Local symbols stripped
    Debugging info not stripped
    executable file
    0 entries in symbol table
    4 sections
    created (GMT): Fri Dec 04 09:11:09 2009
    Linker version: 6.0
    .text start: 0x1000, length: 8192 bytes
    .data start: 0x3000, length: 12288 bytes
    .bss start: -/-, length: 0 bytes
    execution starts at 0x1006
    Preferred load base is 0x400000
    Image size in RAM: 24 KB
    Sections aligned to 4096 bytes in RAM, 4096 bytes in file
    Versions: NT 4.0, Win32 4.0, App 0.0
    Checksum: 0x00000000
    uses Win32 graphical subsystem
    Stack: 1024 KB reserved, 4 KB committed
    Heap: 1024 KB reserved, 4 KB committed
    Size of headers / offset to sections in file: 0x1000

    ".text" (virt. Size/Address: 0x1e0a)
    8192 bytes at offset 0x1000 in RAM, 0x1000 in file
    contains code
    default alignment (16 bytes)
    is executable
    is readable
    at offset 0x6: execution start
    Section entropy 4.20528

    ".rdata" (virt. Size/Address: 0x79c)
    4096 bytes at offset 0x3000 in RAM, 0x3000 in file
    contains initialized data
    default alignment (16 bytes)
    is readable
    Section entropy 0.607003

    at offset 0x250 (80 bytes): Import Directory

    from "KERNEL32.dll":
    not bound
    name table at 0x32d0, address table at 0x3030
    hint name

    449
    LeaveCriticalSection
    102
    EnterCriticalSection
    460
    LocalFree
    318
    GetProcAddress
    761
    lstrcatA
    770
    lstrcpyA
    773
    lstrcpynA
    269
    GetFileAttributesA
    260
    GetDriveTypeA
    27
    CloseHandle
    68
    CreateProcessA
    180
    FreeLibrary
    555
    ResetEvent
    776
    lstrlenA
    292
    GetModuleFileNameA
    718
    WaitForSingleObject
    282
    GetLastError
    49
    CreateEventA
    625
    SetLastError
    32
    CompareFileTime
    351
    GetSystemTimeAsFileTime
    365
    GetTickCount
    667
    SystemTimeToFileTime
    349
    GetSystemTime
    767
    lstrcmpiA
    373
    GetVersionExA
    415
    HeapFree
    418
    HeapReAlloc
    320
    GetProcessHeap
    409
    HeapAlloc
    81
    DebugBreak
    85
    DeleteCriticalSection
    426
    InitializeCriticalSection
    294
    GetModuleHandleA
    202
    GetCommandLineA
    125
    ExitProcess
    450
    LoadLibraryA
    336
    GetStartupInfoA
    from "USER32.dll":
    not bound
    name table at 0x336c, address table at 0x30cc
    hint name

    684
    wsprintfA
    610
    SetWindowsHookExA
    458
    MsgWaitForMultipleObjects
    298
    GetMessageA
    642
    TranslateMessage
    149
    DispatchMessageA
    646
    UnhookWindowsHookEx
    37
    CharNextA
    from "ADVAPI32.dll":
    not bound
    name table at 0x32a0, address table at 0x3000
    hint name

    370
    RegOpenKeyExA
    379
    RegQueryValueExA
    364
    RegFlushKey
    390
    RegSetValueExA
    351
    RegCreateKeyExA
    356
    RegDeleteValueA
    354
    RegDeleteKeyA
    374
    RegQueryInfoKeyA
    359
    RegEnumKeyExA
    368
    RegNotifyChangeKeyValue
    347
    RegCloseKey
    at offset 0xf0 (28 bytes): Debug Directory

    at offset 0x0 (240 bytes): Import Address Table

    ".data" (virt. Size/Address: 0x37e)
    4096 bytes at offset 0x4000 in RAM, 0x4000 in file
    contains initialized data
    default alignment (16 bytes)
    is readable
    is writeable
    Section entropy 0.607003

    ".rsrc" (virt. Size/Address: 0x3b0)
    4096 bytes at offset 0x5000 in RAM, 0x5000 in file
    contains initialized data
    default alignment (16 bytes)
    is readable
    Section entropy 0.607003

    at offset 0x0 (944 bytes): Resource Directory
    version: 0.0, created (GMT): Thu Jan 01 00:00:00 1970
    version info, , broken resource.
    Entropy: 4.20528

    MWSOEMON.EXE
    Default location: C:\PROGRA~1\MYWEBS~1\BAR\2.BIN\MWSOEMON.EXE
    MD5: 9ABBE6F791C0B599A7128C9ACA27C094
    SHA1: AB86ADA4 FC136255 EDF950B9 ADF3D380 C60EBD8D
    File Size: 32 838
    Version Info:
    OriginalFilename: mwsoemon.exe
    FileDescription: My Web Search Plugin Loader
    InternalName: mwsoemon
    CompanyName: MyWebSearch.com
    FileVersion: 1,2,2,5
    LegalCopyright: Copyright ¸ 2003-2007 MyWebSearch.com
    ProductName: My Web Search Bar for Internet Explorer, email clients, and messenger clients
    ProductVersion: 2,3,0,0

    PE Info of the C:\PROGRA~1\MYWEBS~1\BAR\2.BIN\MWSOEMON.EXE:

    Type is Windows GUI.
    DOS-stub: 200 bytes
    built for machine: Intel 80386 processor
    (32-bit-word machine)
    Bytes of machine word are not reversed
    Relocation info stripped
    Local symbols stripped
    Debugging info not stripped
    executable file
    0 entries in symbol table
    4 sections
    created (GMT): Mon Apr 23 16:48:48 2007
    Linker version: 6.0
    .text start: 0x1000, length: 16384 bytes
    .data start: 0x5000, length: 12288 bytes
    .bss start: -/-, length: 0 bytes
    execution starts at 0x2398
    Preferred load base is 0x400000
    Image size in RAM: 32 KB
    Sections aligned to 4096 bytes in RAM, 4096 bytes in file
    Versions: NT 4.0, Win32 4.0, App 0.0
    Checksum: 0x00000000
    uses Win32 graphical subsystem
    Stack: 1024 KB reserved, 4 KB committed
    Heap: 1024 KB reserved, 4 KB committed
    Size of headers / offset to sections in file: 0x1000

    ".text" (virt. Size/Address: 0x36be)
    16384 bytes at offset 0x1000 in RAM, 0x1000 in file
    contains code
    default alignment (16 bytes)
    is executable
    is readable
    at offset 0x1398: execution start
    Section entropy 5.48576

    ".rdata" (virt. Size/Address: 0x9d6)
    4096 bytes at offset 0x5000 in RAM, 0x5000 in file
    contains initialized data
    default alignment (16 bytes)
    is readable
    Section entropy 0.610149

    at offset 0x1d8 (140 bytes): Import Directory

    from "KERNEL32.dll":
    not bound
    name table at 0x5284, address table at 0x5020
    hint name

    549
    ReleaseMutex
    426
    InitializeCriticalSection
    102
    EnterCriticalSection
    449
    LeaveCriticalSection
    85
    DeleteCriticalSection
    49
    CreateEventA
    764
    lstrcmpA
    52
    CreateFileA
    770
    lstrcpyA
    45
    CreateDirectoryA
    761
    lstrcatA
    716
    WaitForMultipleObjects
    365
    GetTickCount
    351
    GetSystemTimeAsFileTime
    170
    FlushFileBuffers
    735
    WriteFile
    336
    GetStartupInfoA
    125
    ExitProcess
    202
    GetCommandLineA
    294
    GetModuleHandleA
    81
    DebugBreak
    409
    HeapAlloc
    320
    GetProcessHeap
    418
    HeapReAlloc
    63
    CreateMutexA
    484
    MultiByteToWideChar
    722
    WideCharToMultiByte
    777
    lstrlenW
    74
    CreateThread
    662
    Sleep
    180
    FreeLibrary
    318
    GetProcAddress
    450
    LoadLibraryA
    647
    SetThreadPriority
    249
    GetCurrentThread
    269
    GetFileAttributesA
    248
    GetCurrentProcessId
    495
    OpenProcess
    460
    LocalFree
    373
    GetVersionExA
    260
    GetDriveTypeA
    773
    lstrcpynA
    53
    CreateFileMappingA
    625
    SetLastError
    99
    DuplicateHandle
    247
    GetCurrentProcess
    489
    OpenFileMappingA
    470
    MapViewOfFile
    688
    UnmapViewOfFile
    613
    SetEvent
    718
    WaitForSingleObject
    555
    ResetEvent
    292
    GetModuleFileNameA
    776
    lstrlenA
    282
    GetLastError
    415
    HeapFree
    27
    CloseHandle
    from "USER32.dll":
    not bound
    name table at 0x537c, address table at 0x5118
    hint name

    458
    MsgWaitForMultipleObjects
    298
    GetMessageA
    642
    TranslateMessage
    280
    GetKeyboardType
    399
    IsWindow
    142
    DestroyWindow
    646
    UnhookWindowsHookEx
    37
    CharNextA
    684
    wsprintfA
    610
    SetWindowsHookExA
    149
    DispatchMessageA
    76
    CreateDialogIndirectParamA
    from "ADVAPI32.dll":
    not bound
    name table at 0x5264, address table at 0x5000
    hint name

    370
    RegOpenKeyExA
    379
    RegQueryValueExA
    364
    RegFlushKey
    390
    RegSetValueExA
    351
    RegCreateKeyExA
    356
    RegDeleteValueA
    347
    RegCloseKey
    from "SHELL32.dll":
    not bound
    name table at 0x536c, address table at 0x5108
    hint name

    80
    SHGetPathFromIDListA
    75
    SHGetMalloc
    83
    SHGetSpecialFolderLocation
    from "ole32.dll":
    not bound
    name table at 0x53c0, address table at 0x515c
    hint name

    269
    StringFromGUID2
    from "VERSION.dll":
    not bound
    name table at 0x53b0, address table at 0x514c
    hint name

    1
    GetFileVersionInfoSizeA
    10
    VerQueryValueA
    0
    GetFileVersionInfoA
    at offset 0x170 (28 bytes): Debug Directory

    at offset 0x0 (356 bytes): Import Address Table

    ".data" (virt. Size/Address: 0x926)
    4096 bytes at offset 0x6000 in RAM, 0x6000 in file
    contains initialized data
    default alignment (16 bytes)
    is readable
    is writeable
    Section entropy 0.610149

    ".rsrc" (virt. Size/Address: 0x410)
    4096 bytes at offset 0x7000 in RAM, 0x7000 in file
    contains initialized data
    default alignment (16 bytes)
    is readable
    Section entropy 0.610149

    at offset 0x0 (1040 bytes): Resource Directory
    version: 0.0, created (GMT): Thu Jan 01 00:00:00 1970
    version info, , broken resource.
    Entropy: 5.48576

    MWSSVC.EXE
    Default location: C:\PROGRA~1\MYWEBS~1\BAR\2.BIN\MWSSVC.EXE
    MD5: 319F6520EEACE462C0FBFEB6AB400332
    SHA1: F562A0EF F8F7D554 0EFAE723 A3A33CF3 271B1EAB
    File Size: 28 762
    Version Info:
    OriginalFilename: mwssvc.exe
    FileDescription: My Web Search Bar
    InternalName: mwssvc
    CompanyName: MyWebSearch.com
    FileVersion: 1, 0, 0, 4
    LegalCopyright: Copyright ¸ 2007, 2008
    ProductName: My Web Search Bar
    ProductVersion: 2, 3, 0, 0

    PE Info of the C:\PROGRA~1\MYWEBS~1\BAR\2.BIN\MWSSVC.EXE:

    Type is Windows GUI.
    DOS-stub: 200 bytes
    built for machine: Intel 80386 processor
    (32-bit-word machine)
    Bytes of machine word are not reversed
    Relocation info stripped
    Local symbols stripped
    Debugging info not stripped
    executable file
    0 entries in symbol table
    4 sections
    created (GMT): Wed Nov 19 18:10:56 2008
    Linker version: 6.0
    .text start: 0x1000, length: 12288 bytes
    .data start: 0x4000, length: 12288 bytes
    .bss start: -/-, length: 0 bytes
    execution starts at 0x14ac
    Preferred load base is 0x400000
    Image size in RAM: 28 KB
    Sections aligned to 4096 bytes in RAM, 4096 bytes in file
    Versions: NT 4.0, Win32 4.0, App 0.0
    Checksum: 0x00000000
    uses Win32 graphical subsystem
    Stack: 1024 KB reserved, 4 KB committed
    Heap: 1024 KB reserved, 4 KB committed
    Size of headers / offset to sections in file: 0x1000

    ".text" (virt. Size/Address: 0x2fc4)
    12288 bytes at offset 0x1000 in RAM, 0x1000 in file
    contains code
    default alignment (16 bytes)
    is executable
    is readable
    at offset 0x4ac: execution start
    Section entropy 5.07075

    ".rdata" (virt. Size/Address: 0x9ea)
    4096 bytes at offset 0x4000 in RAM, 0x4000 in file
    contains initialized data
    default alignment (16 bytes)
    is readable
    Section entropy 0.630209

    at offset 0x250 (100 bytes): Import Directory

    from "KERNEL32.dll":
    not bound
    name table at 0x4310, address table at 0x405c
    hint name

    456
    LocalAlloc
    662
    Sleep
    292
    GetModuleFileNameA
    175
    FormatMessageA
    45
    CreateDirectoryA
    40
    CopyFileA
    87
    DeleteFileA
    477
    MoveFileA
    754
    _lclose
    759
    _lwrite
    756
    _llseek
    755
    _lcreat
    757
    _lopen
    283
    GetLocalTime
    249
    GetCurrentThread
    250
    GetCurrentThreadId
    716
    WaitForMultipleObjects
    770
    lstrcpyA
    94
    DisconnectNamedPipe
    735
    WriteFile
    306
    GetOverlappedResult
    536
    ReadFile
    35
    ConnectNamedPipe
    625
    SetLastError
    555
    ResetEvent
    65
    CreateNamedPipeA
    49
    CreateEventA
    613
    SetEvent
    182
    FreeResource
    128
    ExpandEnvironmentStringsA
    469
    LockResource
    455
    LoadResource
    163
    FindResourceA
    373
    GetVersionExA
    767
    lstrcmpiA
    460
    LocalFree
    68
    CreateProcessA
    282
    GetLastError
    718
    WaitForSingleObject
    27
    CloseHandle
    102
    EnterCriticalSection
    449
    LeaveCriticalSection
    74
    CreateThread
    776
    lstrlenA
    415
    HeapFree
    418
    HeapReAlloc
    320
    GetProcessHeap
    409
    HeapAlloc
    81
    DebugBreak
    85
    DeleteCriticalSection
    426
    InitializeCriticalSection
    294
    GetModuleHandleA
    202
    GetCommandLineA
    125
    ExitProcess
    336
    GetStartupInfoA
    318
    GetProcAddress
    773
    lstrcpynA
    from "USER32.dll":
    not bound
    name table at 0x4404, address table at 0x4150
    hint name

    37
    CharNextA
    684
    wsprintfA
    from "ADVAPI32.dll":
    not bound
    name table at 0x42b4, address table at 0x4000
    hint name

    329
    OpenThreadToken
    403
    RevertToSelf
    351
    RegCreateKeyExA
    390
    RegSetValueExA
    347
    RegCloseKey
    327
    OpenServiceA
    53
    ControlService
    120
    DeleteService
    325
    OpenSCManagerA
    76
    CreateServiceA
    434
    StartServiceA
    341
    QueryServiceStatus
    52
    CloseServiceHandle
    396
    RegisterEventSourceA
    401
    ReportEventA
    121
    DeregisterEventSource
    430
    SetServiceStatus
    398
    RegisterServiceCtrlHandlerA
    435
    StartServiceCtrlDispatcherA
    220
    ImpersonateNamedPipeClient
    223
    InitializeSecurityDescriptor
    124
    DuplicateTokenEx
    from "SHLWAPI.dll":
    not bound
    name table at 0x43f8, address table at 0x4144
    hint name

    112
    SHDeleteValueA
    108
    SHDeleteKeyA
    at offset 0x160 (28 bytes): Debug Directory

    at offset 0x0 (348 bytes): Import Address Table

    ".data" (virt. Size/Address: 0x506)
    4096 bytes at offset 0x5000 in RAM, 0x5000 in file
    contains initialized data
    default alignment (16 bytes)
    is readable
    is writeable
    Section entropy 0.630209

    ".rsrc" (virt. Size/Address: 0x818)
    4096 bytes at offset 0x6000 in RAM, 0x6000 in file
    contains initialized data
    default alignment (16 bytes)
    is readable
    Section entropy 0.630209

    at offset 0x0 (2072 bytes): Resource Directory
    version: 0.0, created (GMT): Thu Jan 01 00:00:00 1970
    name: "TXTBLOCK", , broken resource. version info, , broken resource.
    Entropy: 5.07075

    Et voici également le rapport Anti Keylogger Shield :

    --- Report generated: 2010-03-17 00:12 ---

    EverestPoker: [SBI $03A31629] Réglages (Clé du registre, nothing done)
    HKEY_USERS\S-1-5-21-2442878764-3048672224-3850667282-1000\Software\Grand Virtual

    EverestPoker: [SBI $C42AAFB3] Réglages utilisateur (Valeur du registre, nothing done)
    HKEY_USERS\S-1-5-21-2442878764-3048672224-3850667282-1000\Software\Grand Virtual\XD3C

    FunWebProducts: [SBI $561F0D2E] Réglages utilisateur (Valeur du registre, nothing done)
    HKEY_USERS\S-1-5-21-2442878764-3048672224-3850667282-1000\Software\Microsoft\Internet Explorer\MenuExt\&Search\=...http://edits.mywebsearch.com/toolbaredits/menusearch.jhtml...

    FunWebProducts: [SBI $FE95534B] Class ID (Clé du registre, nothing done)
    HKEY_CLASSES_ROOT\CLSID\{8E6F1832-9607-4440-8530-13BE7C4B1D14}

    FunWebProducts: [SBI $E56CA373] Class ID (Clé du registre, nothing done)
    HKEY_CLASSES_ROOT\CLSID\{25560540-9571-4D7B-9389-0F166788785A}

    FunWebProducts: [SBI $F021587E] Root class (Clé du registre, nothing done)
    HKEY_LOCAL_MACHINE\SOFTWARE\Classes\FunWebProducts.DataControl

    FunWebProducts: [SBI $F021587E] Root class (Clé du registre, nothing done)
    HKEY_LOCAL_MACHINE\SOFTWARE\Classes\FunWebProducts.DataControl.1

    FunWebProducts: [SBI $F021587E] Class ID (Clé du registre, nothing done)
    HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{25560540-9571-4D7B-9389-0F166788785A}

    FunWebProducts: [SBI $F021587E] Root class (Clé du registre, nothing done)
    HKEY_LOCAL_MACHINE\SOFTWARE\Classes\FunWebProducts.DataControl.1

    FunWebProducts: [SBI $F021587E] Class ID (Clé du registre, nothing done)
    HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{25560540-9571-4D7B-9389-0F166788785A}

    FunWebProducts: [SBI $F021587E] Root class (Clé du registre, nothing done)
    HKEY_LOCAL_MACHINE\SOFTWARE\Classes\FunWebProducts.DataControl

    FunWebProducts: [SBI $8C4358AC] Interface (Clé du registre, nothing done)
    HKEY_CLASSES_ROOT\Interface\{17DE5E5E-BFE3-4E83-8E1F-8755795359EC}

    FunWebProducts: [SBI $E3AF827A] Interface (Clé du registre, nothing done)
    HKEY_CLASSES_ROOT\Interface\{1F52A5FA-A705-4415-B975-88503B291728}

    FunWebProducts: [SBI $036600C0] Interface (Clé du registre, nothing done)
    HKEY_CLASSES_ROOT\Interface\{A626CDBD-3D13-4F78-B819-440A28D7E8FC}

    FunWebProducts: [SBI $F146DAB4] Type library (Clé du registre, nothing done)
    HKEY_CLASSES_ROOT\TypeLib\{C8CECDE3-1AE1-4C4A-AD82-6D5B00212144}

    FunWebProducts: [SBI $A3D08315] Class ID (Clé du registre, nothing done)
    HKEY_CLASSES_ROOT\CLSID\{3DC201FB-E9C9-499C-A11F-23C360D7C3F8}

    FunWebProducts: [SBI $3C959564] Class ID (Clé du registre, nothing done)
    HKEY_CLASSES_ROOT\CLSID\{98D9753D-D73B-42D5-8C85-4469CDA897AB}

    FunWebProducts: [SBI $04BB720B] Class ID (Clé du registre, nothing done)
    HKEY_CLASSES_ROOT\CLSID\{D9FFFB27-D62A-4D64-8CEC-1FF006528805}

    FunWebProducts: [SBI $2AEC0692] Interface (Clé du registre, nothing done)
    HKEY_CLASSES_ROOT\Interface\{E342AF55-B78A-4CD0-A2BB-DA7F52D9D25E}

    FunWebProducts: [SBI $28AAB8CB] Interface (Clé du registre, nothing done)
    HKEY_CLASSES_ROOT\Interface\{E342AF55-B78A-4CD0-A2BB-DA7F52D9D25F}

    FunWebProducts: [SBI $9BCB8D2F] Type library (Clé du registre, nothing done)
    HKEY_CLASSES_ROOT\TypeLib\{0D26BC71-A633-4E71-AD31-EADC3A1B6A3A}

    FunWebProducts: [SBI $61479453] Class ID (Clé du registre, nothing done)
    HKEY_CLASSES_ROOT\CLSID\{63D0ED2C-B45B-4458-8B3B-60C69BBBD83C}

    FunWebProducts: [SBI $724750D4] Dossier Programme (Répertoire, nothing done)
    C:\Program Files\FunWebProducts\ScreenSaver\

    FunWebProducts: [SBI $A4654040] Dossier Programme (Répertoire, nothing done)
    C:\Program Files\FunWebProducts\ScreenSaver\Images\

    FunWebProducts: [SBI $E3B8EA3A] Class ID (Clé du registre, nothing done)
    HKEY_CLASSES_ROOT\CLSID\{84DA4FDF-A1CF-4195-8688-3E961F505983}

    FunWebProducts: [SBI $BA1E7AA1] Class ID (Clé du registre, nothing done)
    HKEY_CLASSES_ROOT\CLSID\{0F8ECF4F-3646-4C3A-8881-8E138FFCAF70}

    FunWebProducts: [SBI $7AEE25A5] Class ID (Clé du registre, nothing done)
    HKEY_CLASSES_ROOT\CLSID\{147A976F-EEE1-4377-8EA7-4716E4CDD239}

    FunWebProducts: [SBI $782F6C08] Class ID (Clé du registre, nothing done)
    HKEY_CLASSES_ROOT\CLSID\{B813095C-81C0-4E40-AA14-67520372B987}

    FunWebProducts: [SBI $4ED0CA01] Class ID (Clé du registre, nothing done)
    HKEY_CLASSES_ROOT\CLSID\{C9D7BE3E-141A-4C85-8CD6-32461F3DF2C7}

    FunWebProducts: [SBI $D4B80C31] Class ID (Clé du registre, nothing done)
    HKEY_CLASSES_ROOT\CLSID\{CFF4CE82-3AA2-451F-9B77-7165605FB835}

    FunWebProducts: [SBI $8CC75C5A] Réglages (Valeur du registre, nothing done)
    HKEY_USERS\S-1-5-21-2442878764-3048672224-3850667282-1000\Software\Microsoft\Internet Explorer\URLSearchHooks\{00A6FAF6-072E-44cf-8957-5838F569A31D}

    FunWebProducts: [SBI $F3554FE5] Root class (Clé du registre, nothing done)
    HKEY_LOCAL_MACHINE\SOFTWARE\Classes\FunWebProducts.HistoryKillerScheduler

    FunWebProducts: [SBI $F3554FE5] Root class (Clé du registre, nothing done)
    HKEY_LOCAL_MACHINE\SOFTWARE\Classes\FunWebProducts.HistoryKillerScheduler.1

    FunWebProducts: [SBI $F3554FE5] Class ID (Clé du registre, nothing done)
    HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{C9D7BE3E-141A-4C85-8CD6-32461F3DF2C7}

    FunWebProducts: [SBI $F3554FE5] Root class (Clé du registre, nothing done)
    HKEY_LOCAL_MACHINE\SOFTWARE\Classes\FunWebProducts.HistoryKillerScheduler.1

    FunWebProducts: [SBI $F3554FE5] Class ID (Clé du registre, nothing done)
    HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{C9D7BE3E-141A-4C85-8CD6-32461F3DF2C7}

    FunWebProducts: [SBI $F3554FE5] Root class (Clé du registre, nothing done)
    HKEY_LOCAL_MACHINE\SOFTWARE\Classes\FunWebProducts.HistoryKillerScheduler

    FunWebProducts: [SBI $46DB56C2] Root class (Clé du registre, nothing done)
    HKEY_LOCAL_MACHINE\SOFTWARE\Classes\FunWebProducts.HistorySwatterControlBar

    FunWebProducts: [SBI $46DB56C2] Root class (Clé du registre, nothing done)
    HKEY_LOCAL_MACHINE\SOFTWARE\Classes\FunWebProducts.HistorySwatterControlBar.1

    FunWebProducts: [SBI $46DB56C2] Class ID (Clé du registre, nothing done)
    HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CFF4CE82-3AA2-451F-9B77-7165605FB835}

    FunWebProducts: [SBI $46DB56C2] Root class (Clé du registre, nothing done)
    HKEY_LOCAL_MACHINE\SOFTWARE\Classes\FunWebProducts.HistorySwatterControlBar.1

    FunWebProducts: [SBI $46DB56C2] Class ID (Clé du registre, nothing done)
    HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CFF4CE82-3AA2-451F-9B77-7165605FB835}

    FunWebProducts: [SBI $46DB56C2] Root class (Clé du registre, nothing done)
    HKEY_LOCAL_MACHINE\SOFTWARE\Classes\FunWebProducts.HistorySwatterControlBar

    FunWebProducts: [SBI $14E102B0] Root class (Clé du registre, nothing done)
    HKEY_LOCAL_MACHINE\SOFTWARE\Classes\FunWebProducts.IECookiesManager

    FunWebProducts: [SBI $14E102B0] Root class (Clé du registre, nothing done)
    HKEY_LOCAL_MACHINE\SOFTWARE\Classes\FunWebProducts.IECookiesManager.1

    FunWebProducts: [SBI $14E102B0] Class ID (Clé du registre, nothing done)
    HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0F8ECF4F-3646-4C3A-8881-8E138FFCAF70}

    FunWebProducts: [SBI $14E102B0] Root class (Clé du registre, nothing done)
    HKEY_LOCAL_MACHINE\SOFTWARE\Classes\FunWebProducts.IECookiesManager.1

    FunWebProducts: [SBI $14E102B0] Class ID (Clé du registre, nothing done)
    HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0F8ECF4F-3646-4C3A-8881-8E138FFCAF70}

    FunWebProducts: [SBI $14E102B0] Root class (Clé du registre, nothing done)
    HKEY_LOCAL_MACHINE\SOFTWARE\Classes\FunWebProducts.IECookiesManager

    FunWebProducts: [SBI $F794F996] Root class (Clé du registre, nothing done)
    HKEY_LOCAL_MACHINE\SOFTWARE\Classes\FunWebProducts.KillerObjManager

    FunWebProducts: [SBI $F794F996] Root class (Clé du registre, nothing done)
    HKEY_LOCAL_MACHINE\SOFTWARE\Classes\FunWebProducts.KillerObjManager.1

    FunWebProducts: [SBI $F794F996] Class ID (Clé du registre, nothing done)
    HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B813095C-81C0-4E40-AA14-67520372B987}

    FunWebProducts: [SBI $F794F996] Root class (Clé du registre, nothing done)
    HKEY_LOCAL_MACHINE\SOFTWARE\Classes\FunWebProducts.KillerObjManager.1

    FunWebProducts: [SBI $F794F996] Class ID (Clé du registre, nothing done)
    HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B813095C-81C0-4E40-AA14-67520372B987}

    FunWebProducts: [SBI $F794F996] Root class (Clé du registre, nothing done)
    HKEY_LOCAL_MACHINE\SOFTWARE\Classes\FunWebProducts.KillerObjManager

    FunWebProducts: [SBI $B71E4FFD] Dossier Programme (Répertoire, nothing done)
    C:\Program Files\FunWebProducts\

    MyWay.MyWebSearch: [SBI $17F9DD99] Réglages Autorun (MyWebSearch Email Plugin) (Valeur du registre, nothing done)
    HKEY_USERS\S-1-5-21-2442878764-3048672224-3850667282-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\MyWebSearch Email Plugin

    MyWay.MyWebSearch: [SBI $17F9DD99] Fichier de programme (Fichier, nothing done)
    C:\PROGRA~1\MYWEBS~1\bar\2.bin\mwsoemon.exe
    Properties.size=32838
    Properties.md5=9ABBE6F791C0B599A7128C9ACA27C094
    Properties.filedate=1261677399
    Properties.filedatetext=2009-12-24 18:56:39

    MyWay.MyWebSearch: [SBI $17F9DD99] Réglages Autorun (MyWebSearch Email Plugin) (Valeur du registre, nothing done)
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\MyWebSearch Email Plugin

    MyWay.MyWebSearch: [SBI $17F9DD99] Réglages Autorun (MyWebSearch Email Plugin) (Valeur du registre, nothing done)
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\MyWebSearch Email Plugin

    MyWay.MyWebSearch: [SBI $A4CB4D37] Réglages Autorun (My Web Search Bar Search Scope Monitor) (Valeur du registre, nothing done)
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\My Web Search Bar Search Scope Monitor

    MyWay.MyWebSearch: [SBI $A4CB4D37] Fichier de programme (Fichier, nothing done)
    C:\PROGRA~1\MYWEBS~1\bar\2.bin\m3SrchMn.exe
    Properties.size=24688
    Properties.md5=12D29863ADBFC002386B63CDD9BB0FB9
    Properties.filedate=1261677399
    Properties.filedatetext=2009-12-24 18:56:38

    MyWay.MyWebSearch: [SBI $A4CB4D37] Réglages Autorun (My Web Search Bar Search Scope Monitor) (Valeur du registre, nothing done)
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\My Web Search Bar Search Scope Monitor

    MyWay.MyWebSearch: [SBI $31A33FBC] Interface (Clé du registre, nothing done)
    HKEY_CLASSES_ROOT\Interface\{72EE7F04-15BD-4845-A005-D6711144D86A}

    MyWay.MyWebSearch: [SBI $45492A3B] Interface (Clé du registre, nothing done)
    HKEY_CLASSES_ROOT\Interface\{E79DFBC9-5697-4FBD-94E5-5B2A9C7C1612}

    MyWay.MyWebSearch: [SBI $C7B4FC73] Interface (Clé du registre, nothing done)
    HKEY_CLASSES_ROOT\Interface\{E79DFBCB-5697-4FBD-94E5-5B2A9C7C1612}

    MyWay.MyWebSearch: [SBI $A7E0CDDB] Root class (Clé du registre, nothing done)
    HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MyWebSearch.ChatSessionPlugin

    MyWay.MyWebSearch: [SBI $A7E0CDDB] Root class (Clé du registre, nothing done)
    HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MyWebSearch.ChatSessionPlugin.1

    MyWay.MyWebSearch: [SBI $A7E0CDDB] Class ID (Clé du registre, nothing done)
    HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E79DFBCA-5697-4fbd-94E5-5B2A9C7C1612}

    MyWay.MyWebSearch: [SBI $A7E0CDDB] Root class (Clé du registre, nothing done)
    HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MyWebSearch.ChatSessionPlugin.1

    MyWay.MyWebSearch: [SBI $A7E0CDDB] Class ID (Clé du registre, nothing done)
    HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E79DFBCA-5697-4fbd-94E5-5B2A9C7C1612}

    MyWay.MyWebSearch: [SBI $A7E0CDDB] Root class (Clé du registre, nothing done)
    HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MyWebSearch.ChatSessionPlugin

    MyWay.MyWebSearch: [SBI $1EFB65ED] Type library (Clé du registre, nothing done)
    HKEY_CLASSES_ROOT\TypeLib\{E79DFBC0-5697-4FBD-94E5-5B2A9C7C1612}

    MyWay.MyWebSearch: [SBI $A9DBD3A1] Interface (Clé du registre, nothing done)
    HKEY_CLASSES_ROOT\Interface\{3E720451-B472-4954-B7AA-33069EB53906}

    MyWay.MyWebSearch: [SBI $B4140203] Interface (Clé du registre, nothing done)
    HKEY_CLASSES_ROOT\Interface\{3E720453-B472-4954-B7AA-33069EB53906}

    MyWay.MyWebSearch: [SBI $F1C75F59] Root class (Clé du registre, nothing done)
    HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MyWebSearch.HTMLPanel

    MyWay.MyWebSearch: [SBI $F1C75F59] Root class (Clé du registre, nothing done)
    HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MyWebSearch.HTMLPanel.1

    MyWay.MyWebSearch: [SBI $F1C75F59] Class ID (Clé du registre, nothing done)
    HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{3E720452-B472-4954-B7AA-33069EB53906}

    MyWay.MyWebSearch: [SBI $F1C75F59] Root class (Clé du registre, nothing done)
    HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MyWebSearch.HTMLPanel.1

    MyWay.MyWebSearch: [SBI $F1C75F59] Class ID (Clé du registre, nothing done)
    HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{3E720452-B472-4954-B7AA-33069EB53906}

    MyWay.MyWebSearch: [SBI $F1C75F59] Root class (Clé du registre, nothing done)
    HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MyWebSearch.HTMLPanel

    MyWay.MyWebSearch: [SBI $8556DAFF] Type library (Clé du registre, nothing done)
    HKEY_CLASSES_ROOT\TypeLib\{3E720450-B472-4954-B7AA-33069EB53906}

    MyWay.MyWebSearch: [SBI $FE001122] Class ID (Clé du registre, nothing done)
    HKEY_CLASSES_ROOT\CLSID\{7473D296-B7BB-4f24-AE82-7E2CE94BB6A9}

    MyWay.MyWebSearch: [SBI $74CCF0A1] Root class (Clé du registre, nothing done)
    HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MyWebSearch.PseudoTransparentPlugin

    MyWay.MyWebSearch: [SBI $74CCF0A1] Root class (Clé du registre, nothing done)
    HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MyWebSearch.PseudoTransparentPlugin.1

    MyWay.MyWebSearch: [SBI $74CCF0A1] Class ID (Clé du registre, nothing done)
    HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7473D294-B7BB-4f24-AE82-7E2CE94BB6A9}

    MyWay.MyWebSearch: [SBI $74CCF0A1] Root class (Clé du registre, nothing done)
    HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MyWebSearch.PseudoTransparentPlugin.1

    MyWay.MyWebSearch: [SBI $74CCF0A1] Class ID (Clé du registre, nothing done)
    HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7473D294-B7BB-4f24-AE82-7E2CE94BB6A9}

    MyWay.MyWebSearch: [SBI $74CCF0A1] Root class (Clé du registre, nothing done)
    HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MyWebSearch.PseudoTransparentPlugin

    MyWay.MyWebSearch: [SBI $7D166358] Interface (Clé du registre, nothing done)
    HKEY_CLASSES_ROOT\Interface\{7473D293-B7BB-4F24-AE82-7E2CE94BB6A9}

    MyWay.MyWebSearch: [SBI $5B4611BE] Interface (Clé du registre, nothing done)
    HKEY_CLASSES_ROOT\Interface\{7473D295-B7BB-4F24-AE82-7E2CE94BB6A9}

    MyWay.MyWebSearch: [SBI $4689C01C] Interface (Clé du registre, nothing done)
    HKEY_CLASSES_ROOT\Interface\{7473D297-B7BB-4F24-AE82-7E2CE94BB6A9}

    MyWay.MyWebSearch: [SBI $39BC590A] Réglages (Clé du registre, nothing done)
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{3E720452-B472-4954-B7AA-33069EB53906}

    MyWay.MyWebSearch: [SBI $D40B462F] Réglages (Clé du registre, nothing done)
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{7473D294-B7BB-4f24-AE82-7E2CE94BB6A9}

    MyWay.MyWebSearch: [SBI $4A61CD5B] Réglages (Clé du registre, nothing done)
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{E79DFBCA-5697-4fbd-94E5-5B2A9C7C1612}

    MyWay.MyWebSearch: [SBI $6404C538] Réglages (Clé du registre, nothing done)
    HKEY_USERS\S-1-5-21-2442878764-3048672224-3850667282-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{07B18EA1-A523-4961-B6BB-170DE4475CCA}

    MyWay.MyWebSearch: [SBI $3EAEA461] Class ID (Clé du registre, nothing done)
    HKEY_CLASSES_ROOT\CLSID\{07B18EA9-A523-4961-B6BB-170DE4475CCA}

    MyWay.MyWebSearch: [SBI $9FB1BDFC] Class ID (Clé du registre, nothing done)
    HKEY_CLASSES_ROOT\CLSID\{00A6FAF6-072E-44cf-8957-5838F569A31D}

    MyWay.MyWebSearch: [SBI $359D9C97] Class ID (Clé du registre, nothing done)
    HKEY_CLASSES_ROOT\CLSID\{53CED2D0-5E9A-4761-9005-648404E6F7E5}

    MyWay.MyWebSearch: [SBI $7390AC55] Interface (Clé du registre, nothing done)
    HKEY_CLASSES_ROOT\Interface\{F87D7FB5-9DC5-4C8C-B998-D8DFE02E2978}

    MyWay.MyWebSearch: [SBI $7B038A85] Root class (Clé du registre, nothing done)
    HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MyWebSearchToolBar.ToolbarPlugin

    MyWay.MyWebSearch: [SBI $7B038A85] Root class (Clé du registre, nothing done)
    HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MyWebSearchToolBar.ToolbarPlugin.1

    MyWay.MyWebSearch: [SBI $7B038A85] Class ID (Clé du registre, nothing done)
    HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{53CED2D0-5E9A-4761-9005-648404E6F7E5}

    MyWay.MyWebSearch: [SBI $7B038A85] Root class (Clé du registre, nothing done)
    HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MyWebSearchToolBar.ToolbarPlugin.1

    MyWay.MyWebSearch: [SBI $7B038A85] Class ID (Clé du registre, nothing done)
    HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{53CED2D0-5E9A-4761-9005-648404E6F7E5}

    MyWay.MyWebSearch: [SBI $7B038A85] Root class (Clé du registre, nothing done)
    HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MyWebSearchToolBar.ToolbarPlugin

    MyWay.MyWebSearch: [SBI $39E631BB] Réglages (Clé du registre, nothing done)
    HKEY_USERS\S-1-5-21-2442878764-3048672224-3850667282-1000\Software\Microsoft\Internet Explorer\SearchScopes\{56256A51-B582-467e-B8D4-7786EDA79AE0}

    MyWay.MyWebSearch: [SBI $1D729FD1] Réglages (Clé du registre, nothing done)
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{56256A51-B582-467e-B8D4-7786EDA79AE0}

    MyWay.MyWebSearch: [SBI $8B97F486] Réglages (Clé du registre, nothing done)
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{07B18EAB-A523-4961-B6BB-170DE4475CCA}

    MyWay.MyWebSearch: [SBI $B1C70274] Browser helper object (Clé du registre, nothing done)
    HKEY_USERS\S-1-5-21-2442878764-3048672224-3850667282-1000\Software\MyWebSearch

    MyWay.MyWebSearch: [SBI $B70627CB] Class ID (Clé du registre, nothing done)
    HKEY_CLASSES_ROOT\CLSID\{00A6FAF1-072E-44cf-8957-5838F569A31D}

    MyWay.MyWebSearch: [SBI $4991E2E9] Class ID (Clé du registre, nothing done)
    HKEY_CLASSES_ROOT\CLSID\{07B18EA1-A523-4961-B6BB-170DE4475CCA}

    MyWay.MyWebSearch: [SBI $BC537229] Class ID (Clé du registre, nothing done)
    HKEY_CLASSES_ROOT\CLSID\{07B18EAB-A523-4961-B6BB-170DE4475CCA}

    MyWay.MyWebSearch: [SBI $91B56C2A] Class ID (Clé du registre, nothing done)
    HKEY_CLASSES_ROOT\CLSID\{1E0DE227-5CE4-4ea3-AB0C-8B03E1AA76BC}

    MyWay.MyWebSearch: [SBI $C59FB266] Class ID (Clé du registre, nothing done)
    HKEY_CLASSES_ROOT\CLSID\{7473D292-B7BB-4f24-AE82-7E2CE94BB6A9}

    MyWay.MyWebSearch: [SBI $5EE91522] Class ID (Clé du registre, nothing done)
    HKEY_CLASSES_ROOT\CLSID\{938AA51A-996C-4884-98CE-80DD16A5C9DA}

    MyWay.MyWebSearch: [SBI $8B1EDE10] Class ID (Clé du registre, nothing done)
    HKEY_CLASSES_ROOT\CLSID\{9FF05104-B030-46FC-94B8-81276E4E27DF}

    MyWay.MyWebSearch: [SBI $80863035] Class ID (Clé du registre, nothing done)
    HKEY_CLASSES_ROOT\CLSID\{A9571378-68A1-443d-B082-284F960C6D17}

    MyWay.MyWebSearch: [SBI $39556604] Class ID (Clé du registre, nothing done)
    HKEY_CLASSES_ROOT\CLSID\{ADB01E81-3C79-4272-A0F1-7B2BE7A782DC}

    MyWay.MyWebSearch: [SBI $8B82F326] Root class (Clé du registre, nothing done)
    HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MyWebSearch.OutlookAddin

    MyWay.MyWebSearch: [SBI $8B82F326] Root class (Clé du registre, nothing done)
    HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MyWebSearch.OutlookAddin.1

    MyWay.MyWebSearch: [SBI $8B82F326] Class ID (Clé du registre, nothing done)
    HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{ADB01E81-3C79-4272-A0F1-7B2BE7A782DC}

    MyWay.MyWebSearch: [SBI $8B82F326] Root class (Clé du registre, nothing done)
    HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MyWebSearch.OutlookAddin.1

    MyWay.MyWebSearch: [SBI $8B82F326] Class ID (Clé du registre, nothing done)
    HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{ADB01E81-3C79-4272-A0F1-7B2BE7A782DC}

    MyWay.MyWebSearch: [SBI $8B82F326] Root class (Clé du registre, nothing done)
    HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MyWebSearch.OutlookAddin

    MyWay.MyWebSearch: [SBI $21C50ADC] Root class (Clé du registre, nothing done)
    HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MyWebSearchToolBar.SettingsPlugin

    MyWay.MyWebSearch: [SBI $21C50ADC] Root class (Clé du registre, nothing done)
    HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MyWebSearchToolBar.SettingsPlugin.1

    MyWay.MyWebSearch: [SBI $21C50ADC] Class ID (Clé du registre, nothing done)
    HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{07B18EAB-A523-4961-B6BB-170DE4475CCA}

    MyWay.MyWebSearch: [SBI $21C50ADC] Root class (Clé du registre, nothing done)
    HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MyWebSearchToolBar.SettingsPlugin.1

    MyWay.MyWebSearch: [SBI $21C50ADC] Class ID (Clé du registre, nothing done)
    HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{07B18EAB-A523-4961-B6BB-170DE4475CCA}

    MyWay.MyWebSearch: [SBI $21C50ADC] Root class (Clé du registre, nothing done)
    HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MyWebSearchToolBar.SettingsPlugin

    MyWay.MyWebSearch: [SBI $6D6DC0D4] Root class (Clé du registre, nothing done)
    HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ScreenSaverControl.ScreenSaverInstaller

    MyWay.MyWebSearch: [SBI $6D6DC0D4] Root class (Clé du registre, nothing done)
    HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ScreenSaverControl.ScreenSaverInstaller.1

    MyWay.MyWebSearch: [SBI $6D6DC0D4] Class ID (Clé du registre, nothing done)
    HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{9FF05104-B030-46FC-94B8-81276E4E27DF}

    MyWay.MyWebSearch: [SBI $6D6DC0D4] Root class (Clé du registre, nothing done)
    HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ScreenSaverControl.ScreenSaverInstaller.1

    MyWay.MyWebSearch: [SBI $6D6DC0D4] Class ID (Clé du registre, nothing done)
    HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{9FF05104-B030-46FC-94B8-81276E4E27DF}

    MyWay.MyWebSearch: [SBI $6D6DC0D4] Root class (Clé du registre, nothing done)
    HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ScreenSaverControl.ScreenSaverInstaller

    MyWay.MyWebSearch: [SBI $8B993408] Type library (Clé du registre, nothing done)
    HKEY_CLASSES_ROOT\TypeLib\{29D67D3C-509A-4544-903F-C8C1B8236554}

    MyWay.MyWebSearch: [SBI $4C54BBA4] Type library (Clé du registre, nothing done)
    HKEY_CLASSES_ROOT\TypeLib\{7473D290-B7BB-4F24-AE82-7E2CE94BB6A9}

    MyWay.MyWebSearch: [SBI $75BB5611] Type library (Clé du registre, nothing done)
    HKEY_CLASSES_ROOT\TypeLib\{8E6F1830-9607-4440-8530-13BE7C4B1D14}

    MyWay.MyWebSearch: [SBI $EABEA47E] Type library (Clé du registre, nothing done)
    HKEY_CLASSES_ROOT\TypeLib\{E47CAEE0-DEEA-464A-9326-3F2801535A4D}

    MyWay.MyWebSearch: [SBI $95E7D650] Type library (Clé du registre, nothing done)
    HKEY_CLASSES_ROOT\TypeLib\{F42228FB-E84E-479E-B922-FBBD096E792C}

    MyWay.MyWebSearch: [SBI $DBE9DC78] Browser helper object (Clé du registre, nothing done)
    HKEY_LOCAL_MACHINE\Software\FocusInteractive

    MyWay.MyWebSearch: [SBI $0AB712F8] Réglages (Clé du registre, nothing done)
    HKEY_LOCAL_MACHINE\Software\Microsoft\Office\Outlook\Addins\MyWebSearch.OutlookAddin

    MyWay.MyWebSearch: [SBI $6CDD369B] Réglages (Clé du registre, nothing done)
    HKEY_LOCAL_MACHINE\Software\Microsoft\Office\Word\Addins\MyWebSearch.OutlookAddin

    MyWay.MyWebSearch: [SBI $BDD40B52] Réglages (Clé du registre, nothing done)
    HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{00A6FAF1-072E-44cf-8957-5838F569A31D}

    MyWay.MyWebSearch: [SBI $5A6A799D] Réglages désinstallation (Clé du registre, nothing done)
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\MyWebSearch bar Uninstall

    MyWay.MyWebSearch: [SBI $5A6A799D] Réglages désinstallation (Clé du registre, nothing done)
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\MyWebSearch bar Uninstall

    MyWay.MyWebSearch: [SBI $AC7657F9] Réglages (Clé du registre, nothing done)
    HKEY_LOCAL_MACHINE\Software\MyWebSearch

    MyWay.MyWebSearch: [SBI $BF485355] Barre d'outils IE (Valeur du registre, nothing done)
    HKEY_USERS\S-1-5-21-2442878764-3048672224-3850667282-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\{07B18EA9-A523-4961-B6BB-170DE4475CCA}

    MyWay.MyWebSearch: [SBI $63E2271D] Barre d'outils IE (Valeur du registre, nothing done)
    HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\{07B18EA9-A523-4961-B6BB-170DE4475CCA}

    MyWay.MyWebSearch: [SBI $51E6ABA2] Dossier Programme (Répertoire, nothing done)
    C:\Program Files\MyWebSearch\

    MyWay.MyWebSearch: [SBI $43FCC3D4] Browser helper object (Clé du registre, nothing done)
    HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{07B18EA1-A523-4961-B6BB-170DE4475CCA}

    FunWebProducts: [SBI $934664E3] Exécutable (Fichier, nothing done)
    C:\Windows\System32\f3PSSavr.scr
    Properties.size=28672
    Properties.md5=4CD346697529EFC743A608B2F5D0CC94
    Properties.filedate=1261677399
    Properties.filedatetext=2009-12-24 18:56:38

    FunWebProducts: [SBI $51F213BA] Dossier Programme (Répertoire, nothing done)
    C:\Program Files\MyWebSearch\bar\

    FunWebProducts: [SBI $9975C0B8] Dossier Programme (Répertoire, nothing done)
    C:\Program Files\MyWebSearch\bar\1.bin\

    FunWebProducts: [SBI $9AC0555D] Dossier Programme (Répertoire, nothing done)
    C:\Program Files\MyWebSearch\bar\Avatar\

    FunWebProducts: [SBI $87976B73] Dossier Programme (Répertoire, nothing done)
    C:\Program Files\funwebproducts\ScreenSaver

    MyWay.MyWebSearch: [SBI $91166FCC] Class ID (Clé du registre, nothing done)
    HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{00A6FAF1-072E-44cf-8957-5838F569A31D}

    MyWay.MyWebSearch: [SBI $91166FCC] Browser helper object (Clé du registre, nothing done)
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{00A6FAF1-072E-44cf-8957-5838F569A31D}

    MyWay.MyWebSearch: [SBI $91166FCC] Class ID (Clé du registre, nothing done)
    HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{00A6FAF1-072E-44cf-8957-5838F569A31D}

    MyWay.MyWebSearch: [SBI $E8826233] Class ID (Clé du registre, nothing done)
    HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{07B18EA1-A523-4961-B6BB-170DE4475CCA}

    MyWay.MyWebSearch: [SBI $E8826233] Browser helper object (Clé du registre, nothing done)
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{07B18EA1-A523-4961-B6BB-170DE4475CCA}

    MyWay.MyWebSearch: [SBI $E8826233] Class ID (Clé du registre, nothing done)
    HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{07B18EA1-A523-4961-B6BB-170DE4475CCA}

    MyWay.MyWebSearch: [SBI $72D40B69] Class ID (Clé du registre, nothing done)
    HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{07B18EA9-A523-4961-B6BB-170DE4475CCA}

    MyWay.MyWebSearch: [SBI $72D40B69] Barre d'outils IE (Valeur du registre, nothing done)
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar\{07B18EA9-A523-4961-B6BB-170DE4475CCA}

    MyWay.MyWebSearch: [SBI $72D40B69] Class ID (Clé du registre, nothing done)
    HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{07B18EA9-A523-4961-B6BB-170DE4475CCA}

    MyWay.MyWebSearch: [SBI $B836F058] Interface (Clé du registre, nothing done)
    HKEY_CLASSES_ROOT\Interface\{CF54BE1C-9359-4395-8533-1657CF209CFE}

    MyWay.MyWebSearch: [SBI $4A8ED495] Type library (Clé du registre, nothing done)
    HKEY_CLASSES_ROOT\TypeLib\{D518921A-4A03-425E-9873-B9A71756821E}

    MyWay.MyWebSearch: [SBI $0ACED923] Donnée (Fichier, nothing done)
    C:\Program Files\MyWebSearch\bar\Avatar\COMMON.F3S
    Properties.size=89655
    Properties.md5=140AB62FFB5E3991894AEAD1E105393D
    Properties.filedate=1261677401
    Properties.filedatetext=2009-12-24 18:56:40

    MyWay.MyWebSearch: [SBI $0ACED923] Donnée (Fichier, nothing done)
    C:\Program Files\MyWebSearch\bar\Game\CHECKERS.F3S
    Properties.size=56438
    Properties.md5=87B6FB1125216E8D7B293400B715FB8D
    Properties.filedate=1261677401
    Properties.filedatetext=2009-12-24 18:56:40

    MyWay.MyWebSearch: [SBI $0ACED923] Donnée (Fichier, nothing done)
    C:\Program Files\MyWebSearch\bar\Game\CHESS.F3S
    Properties.size=66726
    Properties.md5=E660C15170591EBE447F601DDC6163C1
    Properties.filedate=1261677401
    Properties.filedatetext=2009-12-24 18:56:40

    MyWay.MyWebSearch: [SBI $0ACED923] Donnée (Fichier, nothing done)
    C:\Program Files\MyWebSearch\bar\Game\REVERSI.F3S
    Properties.size=56688
    Properties.md5=C13224330D67C961D2E3E4279A5BC1A6
    Properties.filedate=1261677401
    Properties.filedatetext=2009-12-24 18:56:41

    MyWay.MyWebSearch: [SBI $0ACED923] Donnée (Fichier, nothing done)
    C:\Program Files\MyWebSearch\bar\Message\COMMON.F3S
    Properties.size=159525
    Properties.md5=8881A24974408D6611EFA9BE7AF37E31
    Properties.filedate=1261677401
    Properties.filedatetext=2009-12-24 18:56:40

    MyWay.MyWebSearch: [SBI $0ACED923] Donnée (Fichier, nothing done)
    C:\Program Files\MyWebSearch\bar\Notifier\COMMON.F3S
    Properties.size=301118
    Properties.md5=FD8A7DE5CE05EDA235B4D29C0E64FBFF
    Properties.filedate=1261677401
    Properties.filedatetext=2009-12-24 18:56:40

    MyWay.MyWebSearch: [SBI $0ACED923] Donnée (Fichier, nothing done)
    C:\Program Files\MyWebSearch\bar\Notifier\DOG.F3S
    Properties.size=71675
    Properties.md5=EAD44A1AC4FD80104D1B4814CE3582E1
    Properties.filedate=1261677401
    Properties.filedatetext=2009-12-24 18:56:40

    MyWay.MyWebSearch: [SBI $0ACED923] Donnée (Fichier, nothing done)
    C:\Program Files\MyWebSearch\bar\Notifier\FISH.F3S
    Properties.size=106998
    Properties.md5=43182F0E08638C0FFB08B33D7876B340
    Properties.filedate=1261677401
    Properties.filedatetext=2009-12-24 18:56:40

    MyWay.MyWebSearch: [SBI $0ACED923] Donnée (Fichier, nothing done)
    C:\Program Files\MyWebSearch\bar\Notifier\KUNGFU.F3S
    Properties.size=129559
    Properties.md5=1A47783E119A96A3597DA38717FB9E59
    Properties.filedate=1261677401
    Properties.filedatetext=2009-12-24 18:56:40

    MyWay.MyWebSearch: [SBI $0ACED923] Donnée (Fichier, nothing done)
    C:\Program Files\MyWebSearch\bar\Notifier\LIFEGARD.F3S
    Properties.size=272367
    Properties.md5=72876A9D1BA63B025CF73A5EB622569E
    Properties.filedate=1261677401
    Properties.filedatetext=2009-12-24 18:56:40

    MyWay.MyWebSearch: [SBI $0ACED923] Donnée (Fichier, nothing done)
    C:\Program Files\MyWebSearch\bar\Notifier\MAID.F3S
    Properties.size=122747
    Properties.md5=46DD0C9F0820FE10E0DB7D2DC5B18E2F
    Properties.filedate=1261677401
    Properties.filedatetext=2009-12-24 18:56:40

    MyWay.MyWebSearch: [SBI $0ACED923] Donnée (Fichier, nothing done)
    C:\Program Files\MyWebSearch\bar\Notifier\MAILBOX.F3S
    Properties.size=43287
    Properties.md5=4C64C9C48FAFB1CE394BAD985A1A1CA6
    Properties.filedate=1261677401
    Properties.filedatetext=2009-12-24 18:56:40

    MyWay.MyWebSearch: [SBI $0ACED923] Donnée (Fichier, nothing done)
    C:\Program Files\MyWebSearch\bar\Notifier\OPERA.F3S
    Properties.size=155471
    Properties.md5=256AC64A886E9E60E56CE07A0F5C6808
    Properties.filedate=1261677401
    Properties.filedatetext=2009-12-24 18:56:40

    MyWay.MyWebSearch: [SBI $0ACED923] Donnée (Fichier, nothing done)
    C:\Program Files\MyWebSearch\bar\Notifier\ROBOT.F3S
    Properties.size=149817
    Properties.md5=648274DCDAE169827E769628379D342A
    Properties.filedate=1261677401
    Properties.filedatetext=2009-12-24 18:56:40

    MyWay.MyWebSearch: [SBI $0ACED923] Donnée (Fichier, nothing done)
    C:\Program Files\MyWebSearch\bar\Notifier\SEDUCT.F3S
    Properties.size=243509
    Properties.md5=D9E3A3AEB53C0B0E1A4F6987D1995F0B
    Properties.filedate=1261677401
    Properties.filedatetext=2009-12-24 18:56:40

    MyWay.MyWebSearch: [SBI $0ACED923] Donnée (Fichier, nothing done)
    C:\Program Files\MyWebSearch\bar\Notifier\SURFER.F3S
    Properties.size=113081
    Properties.md5=14DF54094BF76DBE5D71DB552DFB2633
    Properties.filedate=1261677401
    Properties.filedatetext=2009-12-24 18:56:40

    MyWay.MyWebSearch: [SBI $2CFDFB02] Donnée (Fichier, nothing done)
    C:\Program Files\MyWebSearch\bar\2.bin\F3WALLPP.DAT
    Properties.size=305
    Properties.md5=BC3475B177749B81BFAB5D21091786B5
    Properties.filedate=1261677399
    Properties.filedatetext=2009-12-24 18:56:38

    MyWay.MyWebSearch: [SBI $2CFDFB02] Donnée (Fichier, nothing done)
    C:\Program Files\MyWebSearch\bar\Settings\s_pid.dat
    Properties.size=16
    Properties.md5=F9CFD0FE31F03C06126E4129A88481C1
    Properties.filedate=1261677401
    Properties.filedatetext=2009-12-24 18:56:41

    MyWay.MyWebSearch: [SBI $0888C8CD] Image (Fichier, nothing done)
    C:\Program Files\MyWebSearch\bar\icons\CM.ICO
    Properties.size=7406
    Properties.md5=089EFCEA98317E0D0DC0543BE2EDA81F
    Properties.filedate=1261677401
    Properties.filedatetext=2009-12-24 18:56:41

    MyWay.MyWebSearch: [SBI $0888C8CD] Image (Fichier, nothing done)
    C:\Program Files\MyWebSearch\bar\icons\MFC.ICO
    Properties.size=7406
    Properties.md5=141581A8DE0D46FB85F25A89DA38284C
    Properties.filedate=1261677401
    Properties.filedatetext=2009-12-24 18:56:41

    MyWay.MyWebSearch: [SBI $0888C8CD] Image (Fichier, nothing done)
    C:\Program Files\MyWebSearch\bar\icons\PSS.ICO
    Properties.size=10134
    Properties.md5=24E6DA5796608E7DAD1011EC432B1666
    Properties.filedate=1261677401
    Properties.filedatetext=2009-12-24 18:56:41

    MyWay.MyWebSearch: [SBI $0888C8CD] Image (Fichier, nothing done)
    C:\Program Files\MyWebSearch\bar\icons\SMILEY.ICO
    Properties.size=7406
    Properties.md5=2327AE7F0BAC7814F0870CED67420AAC
    Properties.filedate=1261677401
    Properties.filedatetext=2009-12-24 18:56:41

    MyWay.MyWebSearch: [SBI $0888C8CD] Image (Fichier, nothing done)
    C:\Program Files\MyWebSearch\bar\icons\WB.ICO
    Properties.size=7406
    Properties.md5=7429E321AC5058790EA073CD55F7328F
    Properties.filedate=1261677401
    Properties.filedatetext=2009-12-24 18:56:41

    MyWay.MyWebSearch: [SBI $0888C8CD] Image (Fichier, nothing done)
    C:\Program Files\MyWebSearch\bar\icons\ZWINKY.ICO
    Properties.size=12782
    Properties.md5=EC6393D63343AF0856E5DCBD16C182BC
    Properties.filedate=1261677401
    Properties.filedatetext=2009-12-24 18:56:41

    MyWay.MyWebSearch: [SBI $AA1369A1] Donnée (Fichier, nothing done)
    C:\Program Files\MyWebSearch\bar\1.bin\M3FFXTBR.JAR
    Properties.size=4466
    Properties.md5=24BF210F4B66401C73DF15656822CB3A
    Properties.filedate=1255287204
    Properties.filedatetext=2009-10-11 19:53:24

    MyWay.MyWebSearch: [SBI $AA1369A1] Donnée (Fichier, nothing done)
    C:\Program Files\MyWebSearch\bar\1.bin\M3NTSTBR.JAR
    Properties.size=6462
    Properties.md5=AB3215E9A56E91D45753D1BC56682B96
    Properties.filedate=1255287204
    Properties.filedatetext=2009-10-11 19:53:24

    MyWay.MyWebSearch: [SBI $E4947DDB] Bibliothèque (Fichier, nothing done)
    C:\Program Files\MyWebSearch\bar\1.bin\NPMYWEBS.DLL
    Properties.size=24684
    Properties.md5=7BDBC3B0462EC1D1774EC733F523EC95
    Properties.filedate=1255287205
    Properties.filedatetext=2009-10-11 19:53:24

    MyWay.MyWebSearch: [SBI $E4947DDB] Bibliothèque (Fichier, nothing done)
    C:\Program Files\MyWebSearch\bar\2.bin\F3HKSTUB.DLL
    Properties.size=24685
    Properties.md5=AD4A35A2F5068E3F8CFE22AA73370408
    Properties.filedate=1261677399
    Properties.filedatetext=2009-12-24 18:56:38

    MyWay.MyWebSearch: [SBI $E4947DDB] Bibliothèque (Fichier, nothing done)
    C:\Program Files\MyWebSearch\bar\2.bin\F3REGHK.DLL
    Properties.size=28776
    Properties.md5=F79220B730D91FBF4D8C94BA91C1A857
    Properties.filedate=1261677399
    Properties.filedatetext=2009-12-24 18:56:38

    MyWay.MyWebSearch: [SBI $E4947DDB] Bibliothèque (Fichier, nothing done)
    C:\Program Files\MyWebSearch\bar\2.bin\M3AUXSTB.DLL
    Properties.size=24681
    Properties.md5=8A30BDCA937CF837F3FD6B66CE905632
    Properties.filedate=1261677399
    Properties.filedatetext=2009-12-24 18:56:38

    MyWay.MyWebSearch: [SBI $E4947DDB] Bibliothèque (Fichier, nothing done)
    C:\Program Files\MyWebSearch\bar\2.bin\M3DLGHK.DLL
    Properties.size=28779
    Properties.md5=4956D50F1212650BBF8655976E18EE2B
    Properties.filedate=1261677399
    Properties.filedatetext=2009-12-24 18:56:38

    MyWay.MyWebSearch: [SBI $E4947DDB] Bibliothèque (Fichier, nothing done)
    C:\Program Files\MyWebSearch\bar\2.bin\M3HIGHIN.EXE
    Properties.size=16502
    Properties.md5=5129CC4F1B78FDDDFEC80F91E12311AC
    Properties.filedate=1261677399
    Properties.filedatetext=2009-12-24 18:56:38

    MyWay.MyWebSearch: [SBI $E4947DDB] Bibliothèque (Fichier, nothing done)
    C:\Program Files\MyWebSearch\bar\2.bin\M3HTML.DLL
    Properties.size=86078
    Properties.md5=D460ECA5D4574507FF4DABCC2CBC5F2E
    Properties.filedate=1261677399
    Properties.filedatetext=2009-12-24 18:56:38

    MyWay.MyWebSearch: [SBI $E4947DDB] Bibliothèque (Fichier, nothing done)
    C:\Program Files\MyWebSearch\bar\2.bin\M3IDLE.DLL
    Properties.size=28672
    Properties.md5=86445E5A1C4B02574D8BB1B49EBC1A73
    Properties.filedate=1261677399
    Properties.filedatetext=2009-12-24 18:56:38

    MyWay.MyWebSearch: [SBI $E4947DDB] Bibliothèque (Fichier, nothing done)
    C:\Program Files\MyWebSearch\bar\2.bin\M3IMPIPE.EXE
    Properties.size=16384
    Properties.md5=FFF6063F3245896A084068CD5D8250FE
    Properties.filedate=1261677399
    Properties.filedatetext=2009-12-24 18:56:38

    MyWay.MyWebSearch: [SBI $E4947DDB] Bibliothèque (Fichier, nothing done)
    C:\Program Files\MyWebSearch\bar\2.bin\M3MEDINT.EXE
    Properties.size=16501
    Properties.md5=2B63825777FF3587B6F8BD928614E4EE
    Properties.filedate=1261677399
    Properties.filedatetext=2009-12-24 18:56:38

    MyWay.MyWebSearch: [SBI $E4947DDB] Bibliothèque (Fichier, nothing done)
    C:\Program Files\MyWebSearch\bar\2.bin\M3MSG.DLL
    Properties.size=155738
    Properties.md5=445CA5E2DA8147D1C7BD7C6D5A8FAC4F
    Properties.filedate=1261677399
    Properties.filedatetext=2009-12-24 18:56:38

    MyWay.MyWebSearch: [SBI $E4947DDB] Bibliothèque (Fichier, nothing done)
    C:\Program Files\MyWebSearch\bar\2.bin\M3OUTLCN.DLL
    Properties.size=69717
    Properties.md5=26F833B7AD465A044A8DA50B619775B2
    Properties.filedate=1261677399
    Properties.filedatetext=2009-12-24 18:56:38

    MyWay.MyWebSearch: [SBI $E4947DDB] Bibliothèque (Fichier, nothing done)
    C:\Program Files\MyWebSearch\bar\2.bin\M3PLUGIN.DLL
    Properties.size=57448
    Properties.md5=CDB8CD8AE523D22AFE6CBCCDFCEC6E30
    Properties.filedate=1261677399
    Properties.filedatetext=2009-12-24 18:56:38

    MyWay.MyWebSearch: [SBI $E4947DDB] Bibliothèque (Fichier, nothing done)
    C:\Program Files\MyWebSearch\bar\2.bin\M3SKIN.DLL
    Properties.size=131141
    Properties.md5=D1A29FBD9263013A3AFD6BB24EE92604
    Properties.filedate=1261677399
    Properties.filedatetext=2009-12-24 18:56:38

    MyWay.MyWebSearch: [SBI $E4947DDB] Bibliothèque (Fichier, nothing done)
    C:\Program Files\MyWebSearch\bar\2.bin\M3SKPLAY.EXE
    Properties.size=28672
    Properties.md5=0606CBCDC54D2E5971F2B6AEC860FF6D
    Properties.filedate=1261677399
    Properties.filedatetext=2009-12-24 18:56:38

    MyWay.MyWebSearch: [SBI $E4947DDB] Bibliothèque (Fichier, nothing done)
    C:\Program Files\MyWebSearch\bar\2.bin\M3SLSRCH.EXE
    Properties.size=24686
    Properties.md5=A823C5911BC5BE53EE44A070D3B3FAE0
    Properties.filedate=1261677399
    Properties.filedatetext=2009-12-24 18:56:38

    MyWay.MyWebSearch: [SBI $E4947DDB] Bibliothèque (Fichier, nothing done)
    C:\Program Files\MyWebSearch\bar\2.bin\M3SRCHMN.EXE
    Properties.size=24688
    Properties.md5=12D29863ADBFC002386B63CDD9BB0FB9
    Properties.filedate=1261677399
    Properties.filedatetext=2009-12-24 18:56:38

    MyWay.MyWebSearch: [SBI $E4947DDB] Bibliothèque (Fichier, nothing done)
    C:\Program Files\MyWebSearch\bar\2.bin\MWSBAR.DLL
    Properties.size=456112
    Properties.md5=5AF5E16C19173C295C26C989FE98A6D5
    Properties.filedate=1261677399
    Properties.filedatetext=2009-12-24 18:56:38

    MyWay.MyWebSearch: [SBI $E4947DDB] Bibliothèque (Fichier, nothing done)
    C:\Program Files\MyWebSearch\bar\2.bin\MWSOEMON.EXE
    Properties.size=32838
    Properties.md5=9ABBE6F791C0B599A7128C9ACA27C094
    Properties.filedate=1261677399
    Properties.filedatetext=2009-12-24 18:56:39

    MyWay.MyWebSearch: [SBI $E4947DDB] Bibliothèque (Fichier, nothing done)
    C:\Program Files\MyWebSearch\bar\2.bin\MWSOEPLG.DLL
    Properties.size=389204
    Properties.md5=ED90588522210940832AFC8A51DC172B
    Properties.filedate=1261677399
    Properties.filedatetext=2009-12-24 18:56:39

    MyWay.MyWebSearch: [SBI $E4947DDB] Bibliothèque (Fichier, nothing done)
    C:\Program Files\MyWebSearch\bar\2.bin\MWSOESTB.DLL
    Properties.size=45134
    Properties.md5=DCE9724842497960E7148DCA20295E97
    Properties.filedate=1261677399
    Properties.filedatetext=2009-12-24 18:56:39

    MyWay.MyWebSearch: [SBI $E4947DDB] Bibliothèque (Fichier, nothing done)
    C:\Program Files\MyWebSearch\bar\2.bin\MWSSRCAS.DLL
    Properties.size=54608
    Properties.md5=A79779D6D331E1346D9569B17638F221
    Properties.filedate=1261677399
    Properties.filedatetext=2009-12-24 18:56:39

    MyWay.MyWebSearch: [SBI $E4947DDB] Bibliothèque (Fichier, nothing done)
    C:\Program Files\MyWebSearch\bar\2.bin\MWSSVC.EXE
    Properties.size=28762
    Properties.md5=319F6520EEACE462C0FBFEB6AB400332
    Properties.filedate=1261677399
    Properties.filedatetext=2009-12-24 18:56:39

    My
    0
  8. fabul Messages postés 42186 Date d'inscription   Statut Modérateur Dernière intervention   6 071
     
    La source,probablement ici:http://download.mywebsearch.com/

    Pour porter plainte,bonne chance.

    Pour supprimer MyWebSearch,c'est Ad-Remover,fait option L pour analyse, et poste le raport généré par Ad-Remover.
    0
    1. chipie-68
       
      Où dois-je aller pour l'option L ?

      J ne suis pas une spécialiste ! lol
      0
      1. fabul Messages postés 42186 Date d'inscription   Statut Modérateur Dernière intervention   6 071 > chipie-68
         
        Désolé,c'est plutot "S" pour Scan et "L" pour Launch cleaning (Nettoyage).

        Démarre le et clic "Oui" et ensuite sur "S"
        0
  9. jfkpresident Messages postés 13877 Statut Contributeur sécurité 1 175
     
    Bonsoir ,

    Option "scanner" et "nettoyer" pour AD-R

    L'interface a changé ...
    0
  10. chipie-68
     
    merci à tous pour votre aide !
    0

Discussions similaires

Cheval de Troie- e.tre456.worm.windows
Ninou037 -
Ninou037 -

13 réponses
Virus potentiel
Ramon1 -
bazfile -

29 réponses
virus et ou cheval de troie
FLORE+60 -
bazfile -

1 réponse
supprimer un cheval de troie
Blandine1964 -
bazfile -

10 réponses
virus: comment supprimer ccxprocess (virus cheval de troie)
grrlesang -
bazfile -

1 réponse