Chevals de troie

Résolu
chipie-68 -  
Bonsoir,

Voilà, g été victime de trois chevals de troie (MyWay = 192 fois + FunWeb = 85 fois + Trojans MyWeb = 21 fois)

C grâce au logiciel que je viens d'installer Anti Keylogger Shield.

G besoin d votre aide pour identifier la source.

G le détail des fichiers que je viens d récupérer du logiciel après l'avoir fait tourné.
Comment dois-je faire pour édentifier la source.
Je ne pas faire malheureusement de copier/coller.

Merci encore pour votre aide !
Configuration: Windows Vista

9 réponses

  • Votes
  • Date
  • Date décroissante
  1. fabul Modérateur
    Salut,

    Télécharge et installe RegRun Reanimator.

    Clic sur scan for viruses / scan windows startup.

    Coche la case "Use deep level scanning once".

    Clic sur "Make scan now".

    Clic sur la flèche verte "Fix problems".

    Il te proposera Regguard,répond "non",(on n'en a pas besoin).

    Clic-droit dans le milieu de la fenètre vis a vis le nom du fichier et choisit "Save to file" (Par défaut dans "Mes Documents") dans un fichier nommé 1 (.txt sera ajouté automatiquement).

    Clic sur la flèche verte en haut a droite pour voir le suivant et fait la mème chose a l'exception qu'il faudra le nommer 2 et ainsi de suite pour les suivants.

    Ensuite,quand une fenètre s'ouvre,choisit "Exit".

    Poste les résultats contenus dans tous les fichiers 1.txt 2.txt 3.txt...
    1. chipie-68
      Slt,

      J t remercie !

      J viens tout juste de trouver sur Anti Keylogger Shield où s trouve l rapport.

      Mais, j n sais pas le lire pour identifier la source.
      1. fabul Modérateur
        Ce n'est ni Anti Keylogger ni analyser ses raports qui vont aider a régler le problème,il a fait ce qu'il a pu et il ne peut plus...

        Si tu veut prendre quelques minutes pour faire une analyse plus efficace,je t'ai donné un moyen.
        1. chipie-68
          Slt,

          j t remercie pour ton aide.

          Quand tu dis "Poste les résultats contenus dans tous les fichiers 1.txt 2.txt 3.txt..."

          Je dois les sélectionner et les envoyer où ?

          Merci pour ta réponse !
          2. fabul Modérateur
            Sauvegardés dans le dossier "Mes documents"

            Tu peux les coller ici.
            1. chipie-68
              Salut,

              G installé RegRun Reanimator.
              Peux-tu m'expliquer à quoi ils servent et qu'est'ce qu'ils ont pu faire sur mon ordi.
              Et comment puis-je identifier la source avec ces données pour porter plainte.

              Je te remercie pour ton aide !

              Voilà le rapport sur les 3 chevales de Troie et du Trojean :

              M3SRCHMN.EXE
              Default location: C:\PROGRA~1\MYWEBS~1\BAR\2.BIN\M3SRCHMN.EXE
              MD5: 12D29863ADBFC002386B63CDD9BB0FB9
              SHA1: A16A4273 08EA5996 DB667DE4 71CF18CF D4E23419
              File Size: 24 688
              Version Info:
              OriginalFilename: m3SrchMn.exe
              FileDescription: MyWebSearch SearchScope Monitor
              InternalName: m3SrchMn
              CompanyName: MyWebSearch.com
              FileVersion: 1, 0, 0, 4
              LegalCopyright: Copyright ¸ 2006, 2007
              ProductName: My Web Search Bar for Internet Explorer and FireFox
              ProductVersion: 2, 3, 0, 0

              PE Info of the C:\PROGRA~1\MYWEBS~1\BAR\2.BIN\M3SRCHMN.EXE:

              Type is Windows GUI.
              DOS-stub: 208 bytes
              built for machine: Intel 80386 processor
              (32-bit-word machine)
              Bytes of machine word are not reversed
              Relocation info stripped
              Local symbols stripped
              Debugging info not stripped
              executable file
              0 entries in symbol table
              4 sections
              created (GMT): Fri Dec 04 09:11:09 2009
              Linker version: 6.0
              .text start: 0x1000, length: 8192 bytes
              .data start: 0x3000, length: 12288 bytes
              .bss start: -/-, length: 0 bytes
              execution starts at 0x1006
              Preferred load base is 0x400000
              Image size in RAM: 24 KB
              Sections aligned to 4096 bytes in RAM, 4096 bytes in file
              Versions: NT 4.0, Win32 4.0, App 0.0
              Checksum: 0x00000000
              uses Win32 graphical subsystem
              Stack: 1024 KB reserved, 4 KB committed
              Heap: 1024 KB reserved, 4 KB committed
              Size of headers / offset to sections in file: 0x1000

              ".text" (virt. Size/Address: 0x1e0a)
              8192 bytes at offset 0x1000 in RAM, 0x1000 in file
              contains code
              default alignment (16 bytes)
              is executable
              is readable
              at offset 0x6: execution start
              Section entropy 4.20528

              ".rdata" (virt. Size/Address: 0x79c)
              4096 bytes at offset 0x3000 in RAM, 0x3000 in file
              contains initialized data
              default alignment (16 bytes)
              is readable
              Section entropy 0.607003

              at offset 0x250 (80 bytes): Import Directory

              from "KERNEL32.dll":
              not bound
              name table at 0x32d0, address table at 0x3030
              hint name

              449
              LeaveCriticalSection
              102
              EnterCriticalSection
              460
              LocalFree
              318
              GetProcAddress
              761
              lstrcatA
              770
              lstrcpyA
              773
              lstrcpynA
              269
              GetFileAttributesA
              260
              GetDriveTypeA
              27
              CloseHandle
              68
              CreateProcessA
              180
              FreeLibrary
              555
              ResetEvent
              776
              lstrlenA
              292
              GetModuleFileNameA
              718
              WaitForSingleObject
              282
              GetLastError
              49
              CreateEventA
              625
              SetLastError
              32
              CompareFileTime
              351
              GetSystemTimeAsFileTime
              365
              GetTickCount
              667
              SystemTimeToFileTime
              349
              GetSystemTime
              767
              lstrcmpiA
              373
              GetVersionExA
              415
              HeapFree
              418
              HeapReAlloc
              320
              GetProcessHeap
              409
              HeapAlloc
              81
              DebugBreak
              85
              DeleteCriticalSection
              426
              InitializeCriticalSection
              294
              GetModuleHandleA
              202
              GetCommandLineA
              125
              ExitProcess
              450
              LoadLibraryA
              336
              GetStartupInfoA
              from "USER32.dll":
              not bound
              name table at 0x336c, address table at 0x30cc
              hint name

              684
              wsprintfA
              610
              SetWindowsHookExA
              458
              MsgWaitForMultipleObjects
              298
              GetMessageA
              642
              TranslateMessage
              149
              DispatchMessageA
              646
              UnhookWindowsHookEx
              37
              CharNextA
              from "ADVAPI32.dll":
              not bound
              name table at 0x32a0, address table at 0x3000
              hint name

              370
              RegOpenKeyExA
              379
              RegQueryValueExA
              364
              RegFlushKey
              390
              RegSetValueExA
              351
              RegCreateKeyExA
              356
              RegDeleteValueA
              354
              RegDeleteKeyA
              374
              RegQueryInfoKeyA
              359
              RegEnumKeyExA
              368
              RegNotifyChangeKeyValue
              347
              RegCloseKey
              at offset 0xf0 (28 bytes): Debug Directory

              at offset 0x0 (240 bytes): Import Address Table

              ".data" (virt. Size/Address: 0x37e)
              4096 bytes at offset 0x4000 in RAM, 0x4000 in file
              contains initialized data
              default alignment (16 bytes)
              is readable
              is writeable
              Section entropy 0.607003

              ".rsrc" (virt. Size/Address: 0x3b0)
              4096 bytes at offset 0x5000 in RAM, 0x5000 in file
              contains initialized data
              default alignment (16 bytes)
              is readable
              Section entropy 0.607003

              at offset 0x0 (944 bytes): Resource Directory
              version: 0.0, created (GMT): Thu Jan 01 00:00:00 1970
              version info, , broken resource.
              Entropy: 4.20528

              MWSOEMON.EXE
              Default location: C:\PROGRA~1\MYWEBS~1\BAR\2.BIN\MWSOEMON.EXE
              MD5: 9ABBE6F791C0B599A7128C9ACA27C094
              SHA1: AB86ADA4 FC136255 EDF950B9 ADF3D380 C60EBD8D
              File Size: 32 838
              Version Info:
              OriginalFilename: mwsoemon.exe
              FileDescription: My Web Search Plugin Loader
              InternalName: mwsoemon
              CompanyName: MyWebSearch.com
              FileVersion: 1,2,2,5
              LegalCopyright: Copyright ¸ 2003-2007 MyWebSearch.com
              ProductName: My Web Search Bar for Internet Explorer, email clients, and messenger clients
              ProductVersion: 2,3,0,0

              PE Info of the C:\PROGRA~1\MYWEBS~1\BAR\2.BIN\MWSOEMON.EXE:

              Type is Windows GUI.
              DOS-stub: 200 bytes
              built for machine: Intel 80386 processor
              (32-bit-word machine)
              Bytes of machine word are not reversed
              Relocation info stripped
              Local symbols stripped
              Debugging info not stripped
              executable file
              0 entries in symbol table
              4 sections
              created (GMT): Mon Apr 23 16:48:48 2007
              Linker version: 6.0
              .text start: 0x1000, length: 16384 bytes
              .data start: 0x5000, length: 12288 bytes
              .bss start: -/-, length: 0 bytes
              execution starts at 0x2398
              Preferred load base is 0x400000
              Image size in RAM: 32 KB
              Sections aligned to 4096 bytes in RAM, 4096 bytes in file
              Versions: NT 4.0, Win32 4.0, App 0.0
              Checksum: 0x00000000
              uses Win32 graphical subsystem
              Stack: 1024 KB reserved, 4 KB committed
              Heap: 1024 KB reserved, 4 KB committed
              Size of headers / offset to sections in file: 0x1000

              ".text" (virt. Size/Address: 0x36be)
              16384 bytes at offset 0x1000 in RAM, 0x1000 in file
              contains code
              default alignment (16 bytes)
              is executable
              is readable
              at offset 0x1398: execution start
              Section entropy 5.48576

              ".rdata" (virt. Size/Address: 0x9d6)
              4096 bytes at offset 0x5000 in RAM, 0x5000 in file
              contains initialized data
              default alignment (16 bytes)
              is readable
              Section entropy 0.610149

              at offset 0x1d8 (140 bytes): Import Directory

              from "KERNEL32.dll":
              not bound
              name table at 0x5284, address table at 0x5020
              hint name

              549
              ReleaseMutex
              426
              InitializeCriticalSection
              102
              EnterCriticalSection
              449
              LeaveCriticalSection
              85
              DeleteCriticalSection
              49
              CreateEventA
              764
              lstrcmpA
              52
              CreateFileA
              770
              lstrcpyA
              45
              CreateDirectoryA
              761
              lstrcatA
              716
              WaitForMultipleObjects
              365
              GetTickCount
              351
              GetSystemTimeAsFileTime
              170
              FlushFileBuffers
              735
              WriteFile
              336
              GetStartupInfoA
              125
              ExitProcess
              202
              GetCommandLineA
              294
              GetModuleHandleA
              81
              DebugBreak
              409
              HeapAlloc
              320
              GetProcessHeap
              418
              HeapReAlloc
              63
              CreateMutexA
              484
              MultiByteToWideChar
              722
              WideCharToMultiByte
              777
              lstrlenW
              74
              CreateThread
              662
              Sleep
              180
              FreeLibrary
              318
              GetProcAddress
              450
              LoadLibraryA
              647
              SetThreadPriority
              249
              GetCurrentThread
              269
              GetFileAttributesA
              248
              GetCurrentProcessId
              495
              OpenProcess
              460
              LocalFree
              373
              GetVersionExA
              260
              GetDriveTypeA
              773
              lstrcpynA
              53
              CreateFileMappingA
              625
              SetLastError
              99
              DuplicateHandle
              247
              GetCurrentProcess
              489
              OpenFileMappingA
              470
              MapViewOfFile
              688
              UnmapViewOfFile
              613
              SetEvent
              718
              WaitForSingleObject
              555
              ResetEvent
              292
              GetModuleFileNameA
              776
              lstrlenA
              282
              GetLastError
              415
              HeapFree
              27
              CloseHandle
              from "USER32.dll":
              not bound
              name table at 0x537c, address table at 0x5118
              hint name

              458
              MsgWaitForMultipleObjects
              298
              GetMessageA
              642
              TranslateMessage
              280
              GetKeyboardType
              399
              IsWindow
              142
              DestroyWindow
              646
              UnhookWindowsHookEx
              37
              CharNextA
              684
              wsprintfA
              610
              SetWindowsHookExA
              149
              DispatchMessageA
              76
              CreateDialogIndirectParamA
              from "ADVAPI32.dll":
              not bound
              name table at 0x5264, address table at 0x5000
              hint name

              370
              RegOpenKeyExA
              379
              RegQueryValueExA
              364
              RegFlushKey
              390
              RegSetValueExA
              351
              RegCreateKeyExA
              356
              RegDeleteValueA
              347
              RegCloseKey
              from "SHELL32.dll":
              not bound
              name table at 0x536c, address table at 0x5108
              hint name

              80
              SHGetPathFromIDListA
              75
              SHGetMalloc
              83
              SHGetSpecialFolderLocation
              from "ole32.dll":
              not bound
              name table at 0x53c0, address table at 0x515c
              hint name

              269
              StringFromGUID2
              from "VERSION.dll":
              not bound
              name table at 0x53b0, address table at 0x514c
              hint name

              1
              GetFileVersionInfoSizeA
              10
              VerQueryValueA
              0
              GetFileVersionInfoA
              at offset 0x170 (28 bytes): Debug Directory

              at offset 0x0 (356 bytes): Import Address Table

              ".data" (virt. Size/Address: 0x926)
              4096 bytes at offset 0x6000 in RAM, 0x6000 in file
              contains initialized data
              default alignment (16 bytes)
              is readable
              is writeable
              Section entropy 0.610149

              ".rsrc" (virt. Size/Address: 0x410)
              4096 bytes at offset 0x7000 in RAM, 0x7000 in file
              contains initialized data
              default alignment (16 bytes)
              is readable
              Section entropy 0.610149

              at offset 0x0 (1040 bytes): Resource Directory
              version: 0.0, created (GMT): Thu Jan 01 00:00:00 1970
              version info, , broken resource.
              Entropy: 5.48576

              MWSSVC.EXE
              Default location: C:\PROGRA~1\MYWEBS~1\BAR\2.BIN\MWSSVC.EXE
              MD5: 319F6520EEACE462C0FBFEB6AB400332
              SHA1: F562A0EF F8F7D554 0EFAE723 A3A33CF3 271B1EAB
              File Size: 28 762
              Version Info:
              OriginalFilename: mwssvc.exe
              FileDescription: My Web Search Bar
              InternalName: mwssvc
              CompanyName: MyWebSearch.com
              FileVersion: 1, 0, 0, 4
              LegalCopyright: Copyright ¸ 2007, 2008
              ProductName: My Web Search Bar
              ProductVersion: 2, 3, 0, 0

              PE Info of the C:\PROGRA~1\MYWEBS~1\BAR\2.BIN\MWSSVC.EXE:

              Type is Windows GUI.
              DOS-stub: 200 bytes
              built for machine: Intel 80386 processor
              (32-bit-word machine)
              Bytes of machine word are not reversed
              Relocation info stripped
              Local symbols stripped
              Debugging info not stripped
              executable file
              0 entries in symbol table
              4 sections
              created (GMT): Wed Nov 19 18:10:56 2008
              Linker version: 6.0
              .text start: 0x1000, length: 12288 bytes
              .data start: 0x4000, length: 12288 bytes
              .bss start: -/-, length: 0 bytes
              execution starts at 0x14ac
              Preferred load base is 0x400000
              Image size in RAM: 28 KB
              Sections aligned to 4096 bytes in RAM, 4096 bytes in file
              Versions: NT 4.0, Win32 4.0, App 0.0
              Checksum: 0x00000000
              uses Win32 graphical subsystem
              Stack: 1024 KB reserved, 4 KB committed
              Heap: 1024 KB reserved, 4 KB committed
              Size of headers / offset to sections in file: 0x1000

              ".text" (virt. Size/Address: 0x2fc4)
              12288 bytes at offset 0x1000 in RAM, 0x1000 in file
              contains code
              default alignment (16 bytes)
              is executable
              is readable
              at offset 0x4ac: execution start
              Section entropy 5.07075

              ".rdata" (virt. Size/Address: 0x9ea)
              4096 bytes at offset 0x4000 in RAM, 0x4000 in file
              contains initialized data
              default alignment (16 bytes)
              is readable
              Section entropy 0.630209

              at offset 0x250 (100 bytes): Import Directory

              from "KERNEL32.dll":
              not bound
              name table at 0x4310, address table at 0x405c
              hint name

              456
              LocalAlloc
              662
              Sleep
              292
              GetModuleFileNameA
              175
              FormatMessageA
              45
              CreateDirectoryA
              40
              CopyFileA
              87
              DeleteFileA
              477
              MoveFileA
              754
              _lclose
              759
              _lwrite
              756
              _llseek
              755
              _lcreat
              757
              _lopen
              283
              GetLocalTime
              249
              GetCurrentThread
              250
              GetCurrentThreadId
              716
              WaitForMultipleObjects
              770
              lstrcpyA
              94
              DisconnectNamedPipe
              735
              WriteFile
              306
              GetOverlappedResult
              536
              ReadFile
              35
              ConnectNamedPipe
              625
              SetLastError
              555
              ResetEvent
              65
              CreateNamedPipeA
              49
              CreateEventA
              613
              SetEvent
              182
              FreeResource
              128
              ExpandEnvironmentStringsA
              469
              LockResource
              455
              LoadResource
              163
              FindResourceA
              373
              GetVersionExA
              767
              lstrcmpiA
              460
              LocalFree
              68
              CreateProcessA
              282
              GetLastError
              718
              WaitForSingleObject
              27
              CloseHandle
              102
              EnterCriticalSection
              449
              LeaveCriticalSection
              74
              CreateThread
              776
              lstrlenA
              415
              HeapFree
              418
              HeapReAlloc
              320
              GetProcessHeap
              409
              HeapAlloc
              81
              DebugBreak
              85
              DeleteCriticalSection
              426
              InitializeCriticalSection
              294
              GetModuleHandleA
              202
              GetCommandLineA
              125
              ExitProcess
              336
              GetStartupInfoA
              318
              GetProcAddress
              773
              lstrcpynA
              from "USER32.dll":
              not bound
              name table at 0x4404, address table at 0x4150
              hint name

              37
              CharNextA
              684
              wsprintfA
              from "ADVAPI32.dll":
              not bound
              name table at 0x42b4, address table at 0x4000
              hint name

              329
              OpenThreadToken
              403
              RevertToSelf
              351
              RegCreateKeyExA
              390
              RegSetValueExA
              347
              RegCloseKey
              327
              OpenServiceA
              53
              ControlService
              120
              DeleteService
              325
              OpenSCManagerA
              76
              CreateServiceA
              434
              StartServiceA
              341
              QueryServiceStatus
              52
              CloseServiceHandle
              396
              RegisterEventSourceA
              401
              ReportEventA
              121
              DeregisterEventSource
              430
              SetServiceStatus
              398
              RegisterServiceCtrlHandlerA
              435
              StartServiceCtrlDispatcherA
              220
              ImpersonateNamedPipeClient
              223
              InitializeSecurityDescriptor
              124
              DuplicateTokenEx
              from "SHLWAPI.dll":
              not bound
              name table at 0x43f8, address table at 0x4144
              hint name

              112
              SHDeleteValueA
              108
              SHDeleteKeyA
              at offset 0x160 (28 bytes): Debug Directory

              at offset 0x0 (348 bytes): Import Address Table

              ".data" (virt. Size/Address: 0x506)
              4096 bytes at offset 0x5000 in RAM, 0x5000 in file
              contains initialized data
              default alignment (16 bytes)
              is readable
              is writeable
              Section entropy 0.630209

              ".rsrc" (virt. Size/Address: 0x818)
              4096 bytes at offset 0x6000 in RAM, 0x6000 in file
              contains initialized data
              default alignment (16 bytes)
              is readable
              Section entropy 0.630209

              at offset 0x0 (2072 bytes): Resource Directory
              version: 0.0, created (GMT): Thu Jan 01 00:00:00 1970
              name: "TXTBLOCK", , broken resource. version info, , broken resource.
              Entropy: 5.07075

              Et voici également le rapport Anti Keylogger Shield :

              --- Report generated: 2010-03-17 00:12 ---

              EverestPoker: [SBI $03A31629] Réglages (Clé du registre, nothing done)
              HKEY_USERS\S-1-5-21-2442878764-3048672224-3850667282-1000\Software\Grand Virtual

              EverestPoker: [SBI $C42AAFB3] Réglages utilisateur (Valeur du registre, nothing done)
              HKEY_USERS\S-1-5-21-2442878764-3048672224-3850667282-1000\Software\Grand Virtual\XD3C

              FunWebProducts: [SBI $561F0D2E] Réglages utilisateur (Valeur du registre, nothing done)
              HKEY_USERS\S-1-5-21-2442878764-3048672224-3850667282-1000\Software\Microsoft\Internet Explorer\MenuExt\&Search\=...http://edits.mywebsearch.com/toolbaredits/menusearch.jhtml...

              FunWebProducts: [SBI $FE95534B] Class ID (Clé du registre, nothing done)
              HKEY_CLASSES_ROOT\CLSID\{8E6F1832-9607-4440-8530-13BE7C4B1D14}

              FunWebProducts: [SBI $E56CA373] Class ID (Clé du registre, nothing done)
              HKEY_CLASSES_ROOT\CLSID\{25560540-9571-4D7B-9389-0F166788785A}

              FunWebProducts: [SBI $F021587E] Root class (Clé du registre, nothing done)
              HKEY_LOCAL_MACHINE\SOFTWARE\Classes\FunWebProducts.DataControl

              FunWebProducts: [SBI $F021587E] Root class (Clé du registre, nothing done)
              HKEY_LOCAL_MACHINE\SOFTWARE\Classes\FunWebProducts.DataControl.1

              FunWebProducts: [SBI $F021587E] Class ID (Clé du registre, nothing done)
              HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{25560540-9571-4D7B-9389-0F166788785A}

              FunWebProducts: [SBI $F021587E] Root class (Clé du registre, nothing done)
              HKEY_LOCAL_MACHINE\SOFTWARE\Classes\FunWebProducts.DataControl.1

              FunWebProducts: [SBI $F021587E] Class ID (Clé du registre, nothing done)
              HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{25560540-9571-4D7B-9389-0F166788785A}

              FunWebProducts: [SBI $F021587E] Root class (Clé du registre, nothing done)
              HKEY_LOCAL_MACHINE\SOFTWARE\Classes\FunWebProducts.DataControl

              FunWebProducts: [SBI $8C4358AC] Interface (Clé du registre, nothing done)
              HKEY_CLASSES_ROOT\Interface\{17DE5E5E-BFE3-4E83-8E1F-8755795359EC}

              FunWebProducts: [SBI $E3AF827A] Interface (Clé du registre, nothing done)
              HKEY_CLASSES_ROOT\Interface\{1F52A5FA-A705-4415-B975-88503B291728}

              FunWebProducts: [SBI $036600C0] Interface (Clé du registre, nothing done)
              HKEY_CLASSES_ROOT\Interface\{A626CDBD-3D13-4F78-B819-440A28D7E8FC}

              FunWebProducts: [SBI $F146DAB4] Type library (Clé du registre, nothing done)
              HKEY_CLASSES_ROOT\TypeLib\{C8CECDE3-1AE1-4C4A-AD82-6D5B00212144}

              FunWebProducts: [SBI $A3D08315] Class ID (Clé du registre, nothing done)
              HKEY_CLASSES_ROOT\CLSID\{3DC201FB-E9C9-499C-A11F-23C360D7C3F8}

              FunWebProducts: [SBI $3C959564] Class ID (Clé du registre, nothing done)
              HKEY_CLASSES_ROOT\CLSID\{98D9753D-D73B-42D5-8C85-4469CDA897AB}

              FunWebProducts: [SBI $04BB720B] Class ID (Clé du registre, nothing done)
              HKEY_CLASSES_ROOT\CLSID\{D9FFFB27-D62A-4D64-8CEC-1FF006528805}

              FunWebProducts: [SBI $2AEC0692] Interface (Clé du registre, nothing done)
              HKEY_CLASSES_ROOT\Interface\{E342AF55-B78A-4CD0-A2BB-DA7F52D9D25E}

              FunWebProducts: [SBI $28AAB8CB] Interface (Clé du registre, nothing done)
              HKEY_CLASSES_ROOT\Interface\{E342AF55-B78A-4CD0-A2BB-DA7F52D9D25F}

              FunWebProducts: [SBI $9BCB8D2F] Type library (Clé du registre, nothing done)
              HKEY_CLASSES_ROOT\TypeLib\{0D26BC71-A633-4E71-AD31-EADC3A1B6A3A}

              FunWebProducts: [SBI $61479453] Class ID (Clé du registre, nothing done)
              HKEY_CLASSES_ROOT\CLSID\{63D0ED2C-B45B-4458-8B3B-60C69BBBD83C}

              FunWebProducts: [SBI $724750D4] Dossier Programme (Répertoire, nothing done)
              C:\Program Files\FunWebProducts\ScreenSaver\

              FunWebProducts: [SBI $A4654040] Dossier Programme (Répertoire, nothing done)
              C:\Program Files\FunWebProducts\ScreenSaver\Images\

              FunWebProducts: [SBI $E3B8EA3A] Class ID (Clé du registre, nothing done)
              HKEY_CLASSES_ROOT\CLSID\{84DA4FDF-A1CF-4195-8688-3E961F505983}

              FunWebProducts: [SBI $BA1E7AA1] Class ID (Clé du registre, nothing done)
              HKEY_CLASSES_ROOT\CLSID\{0F8ECF4F-3646-4C3A-8881-8E138FFCAF70}

              FunWebProducts: [SBI $7AEE25A5] Class ID (Clé du registre, nothing done)
              HKEY_CLASSES_ROOT\CLSID\{147A976F-EEE1-4377-8EA7-4716E4CDD239}

              FunWebProducts: [SBI $782F6C08] Class ID (Clé du registre, nothing done)
              HKEY_CLASSES_ROOT\CLSID\{B813095C-81C0-4E40-AA14-67520372B987}

              FunWebProducts: [SBI $4ED0CA01] Class ID (Clé du registre, nothing done)
              HKEY_CLASSES_ROOT\CLSID\{C9D7BE3E-141A-4C85-8CD6-32461F3DF2C7}

              FunWebProducts: [SBI $D4B80C31] Class ID (Clé du registre, nothing done)
              HKEY_CLASSES_ROOT\CLSID\{CFF4CE82-3AA2-451F-9B77-7165605FB835}

              FunWebProducts: [SBI $8CC75C5A] Réglages (Valeur du registre, nothing done)
              HKEY_USERS\S-1-5-21-2442878764-3048672224-3850667282-1000\Software\Microsoft\Internet Explorer\URLSearchHooks\{00A6FAF6-072E-44cf-8957-5838F569A31D}

              FunWebProducts: [SBI $F3554FE5] Root class (Clé du registre, nothing done)
              HKEY_LOCAL_MACHINE\SOFTWARE\Classes\FunWebProducts.HistoryKillerScheduler

              FunWebProducts: [SBI $F3554FE5] Root class (Clé du registre, nothing done)
              HKEY_LOCAL_MACHINE\SOFTWARE\Classes\FunWebProducts.HistoryKillerScheduler.1

              FunWebProducts: [SBI $F3554FE5] Class ID (Clé du registre, nothing done)
              HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{C9D7BE3E-141A-4C85-8CD6-32461F3DF2C7}

              FunWebProducts: [SBI $F3554FE5] Root class (Clé du registre, nothing done)
              HKEY_LOCAL_MACHINE\SOFTWARE\Classes\FunWebProducts.HistoryKillerScheduler.1

              FunWebProducts: [SBI $F3554FE5] Class ID (Clé du registre, nothing done)
              HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{C9D7BE3E-141A-4C85-8CD6-32461F3DF2C7}

              FunWebProducts: [SBI $F3554FE5] Root class (Clé du registre, nothing done)
              HKEY_LOCAL_MACHINE\SOFTWARE\Classes\FunWebProducts.HistoryKillerScheduler

              FunWebProducts: [SBI $46DB56C2] Root class (Clé du registre, nothing done)
              HKEY_LOCAL_MACHINE\SOFTWARE\Classes\FunWebProducts.HistorySwatterControlBar

              FunWebProducts: [SBI $46DB56C2] Root class (Clé du registre, nothing done)
              HKEY_LOCAL_MACHINE\SOFTWARE\Classes\FunWebProducts.HistorySwatterControlBar.1

              FunWebProducts: [SBI $46DB56C2] Class ID (Clé du registre, nothing done)
              HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CFF4CE82-3AA2-451F-9B77-7165605FB835}

              FunWebProducts: [SBI $46DB56C2] Root class (Clé du registre, nothing done)
              HKEY_LOCAL_MACHINE\SOFTWARE\Classes\FunWebProducts.HistorySwatterControlBar.1

              FunWebProducts: [SBI $46DB56C2] Class ID (Clé du registre, nothing done)
              HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CFF4CE82-3AA2-451F-9B77-7165605FB835}

              FunWebProducts: [SBI $46DB56C2] Root class (Clé du registre, nothing done)
              HKEY_LOCAL_MACHINE\SOFTWARE\Classes\FunWebProducts.HistorySwatterControlBar

              FunWebProducts: [SBI $14E102B0] Root class (Clé du registre, nothing done)
              HKEY_LOCAL_MACHINE\SOFTWARE\Classes\FunWebProducts.IECookiesManager

              FunWebProducts: [SBI $14E102B0] Root class (Clé du registre, nothing done)
              HKEY_LOCAL_MACHINE\SOFTWARE\Classes\FunWebProducts.IECookiesManager.1

              FunWebProducts: [SBI $14E102B0] Class ID (Clé du registre, nothing done)
              HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0F8ECF4F-3646-4C3A-8881-8E138FFCAF70}

              FunWebProducts: [SBI $14E102B0] Root class (Clé du registre, nothing done)
              HKEY_LOCAL_MACHINE\SOFTWARE\Classes\FunWebProducts.IECookiesManager.1

              FunWebProducts: [SBI $14E102B0] Class ID (Clé du registre, nothing done)
              HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0F8ECF4F-3646-4C3A-8881-8E138FFCAF70}

              FunWebProducts: [SBI $14E102B0] Root class (Clé du registre, nothing done)
              HKEY_LOCAL_MACHINE\SOFTWARE\Classes\FunWebProducts.IECookiesManager

              FunWebProducts: [SBI $F794F996] Root class (Clé du registre, nothing done)
              HKEY_LOCAL_MACHINE\SOFTWARE\Classes\FunWebProducts.KillerObjManager

              FunWebProducts: [SBI $F794F996] Root class (Clé du registre, nothing done)
              HKEY_LOCAL_MACHINE\SOFTWARE\Classes\FunWebProducts.KillerObjManager.1

              FunWebProducts: [SBI $F794F996] Class ID (Clé du registre, nothing done)
              HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B813095C-81C0-4E40-AA14-67520372B987}

              FunWebProducts: [SBI $F794F996] Root class (Clé du registre, nothing done)
              HKEY_LOCAL_MACHINE\SOFTWARE\Classes\FunWebProducts.KillerObjManager.1

              FunWebProducts: [SBI $F794F996] Class ID (Clé du registre, nothing done)
              HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B813095C-81C0-4E40-AA14-67520372B987}

              FunWebProducts: [SBI $F794F996] Root class (Clé du registre, nothing done)
              HKEY_LOCAL_MACHINE\SOFTWARE\Classes\FunWebProducts.KillerObjManager

              FunWebProducts: [SBI $B71E4FFD] Dossier Programme (Répertoire, nothing done)
              C:\Program Files\FunWebProducts\

              MyWay.MyWebSearch: [SBI $17F9DD99] Réglages Autorun (MyWebSearch Email Plugin) (Valeur du registre, nothing done)
              HKEY_USERS\S-1-5-21-2442878764-3048672224-3850667282-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\MyWebSearch Email Plugin

              MyWay.MyWebSearch: [SBI $17F9DD99] Fichier de programme (Fichier, nothing done)
              C:\PROGRA~1\MYWEBS~1\bar\2.bin\mwsoemon.exe
              Properties.size=32838
              Properties.md5=9ABBE6F791C0B599A7128C9ACA27C094
              Properties.filedate=1261677399
              Properties.filedatetext=2009-12-24 18:56:39

              MyWay.MyWebSearch: [SBI $17F9DD99] Réglages Autorun (MyWebSearch Email Plugin) (Valeur du registre, nothing done)
              HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\MyWebSearch Email Plugin

              MyWay.MyWebSearch: [SBI $17F9DD99] Réglages Autorun (MyWebSearch Email Plugin) (Valeur du registre, nothing done)
              HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\MyWebSearch Email Plugin

              MyWay.MyWebSearch: [SBI $A4CB4D37] Réglages Autorun (My Web Search Bar Search Scope Monitor) (Valeur du registre, nothing done)
              HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\My Web Search Bar Search Scope Monitor

              MyWay.MyWebSearch: [SBI $A4CB4D37] Fichier de programme (Fichier, nothing done)
              C:\PROGRA~1\MYWEBS~1\bar\2.bin\m3SrchMn.exe
              Properties.size=24688
              Properties.md5=12D29863ADBFC002386B63CDD9BB0FB9
              Properties.filedate=1261677399
              Properties.filedatetext=2009-12-24 18:56:38

              MyWay.MyWebSearch: [SBI $A4CB4D37] Réglages Autorun (My Web Search Bar Search Scope Monitor) (Valeur du registre, nothing done)
              HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\My Web Search Bar Search Scope Monitor

              MyWay.MyWebSearch: [SBI $31A33FBC] Interface (Clé du registre, nothing done)
              HKEY_CLASSES_ROOT\Interface\{72EE7F04-15BD-4845-A005-D6711144D86A}

              MyWay.MyWebSearch: [SBI $45492A3B] Interface (Clé du registre, nothing done)
              HKEY_CLASSES_ROOT\Interface\{E79DFBC9-5697-4FBD-94E5-5B2A9C7C1612}

              MyWay.MyWebSearch: [SBI $C7B4FC73] Interface (Clé du registre, nothing done)
              HKEY_CLASSES_ROOT\Interface\{E79DFBCB-5697-4FBD-94E5-5B2A9C7C1612}

              MyWay.MyWebSearch: [SBI $A7E0CDDB] Root class (Clé du registre, nothing done)
              HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MyWebSearch.ChatSessionPlugin

              MyWay.MyWebSearch: [SBI $A7E0CDDB] Root class (Clé du registre, nothing done)
              HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MyWebSearch.ChatSessionPlugin.1

              MyWay.MyWebSearch: [SBI $A7E0CDDB] Class ID (Clé du registre, nothing done)
              HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E79DFBCA-5697-4fbd-94E5-5B2A9C7C1612}

              MyWay.MyWebSearch: [SBI $A7E0CDDB] Root class (Clé du registre, nothing done)
              HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MyWebSearch.ChatSessionPlugin.1

              MyWay.MyWebSearch: [SBI $A7E0CDDB] Class ID (Clé du registre, nothing done)
              HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E79DFBCA-5697-4fbd-94E5-5B2A9C7C1612}

              MyWay.MyWebSearch: [SBI $A7E0CDDB] Root class (Clé du registre, nothing done)
              HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MyWebSearch.ChatSessionPlugin

              MyWay.MyWebSearch: [SBI $1EFB65ED] Type library (Clé du registre, nothing done)
              HKEY_CLASSES_ROOT\TypeLib\{E79DFBC0-5697-4FBD-94E5-5B2A9C7C1612}

              MyWay.MyWebSearch: [SBI $A9DBD3A1] Interface (Clé du registre, nothing done)
              HKEY_CLASSES_ROOT\Interface\{3E720451-B472-4954-B7AA-33069EB53906}

              MyWay.MyWebSearch: [SBI $B4140203] Interface (Clé du registre, nothing done)
              HKEY_CLASSES_ROOT\Interface\{3E720453-B472-4954-B7AA-33069EB53906}

              MyWay.MyWebSearch: [SBI $F1C75F59] Root class (Clé du registre, nothing done)
              HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MyWebSearch.HTMLPanel

              MyWay.MyWebSearch: [SBI $F1C75F59] Root class (Clé du registre, nothing done)
              HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MyWebSearch.HTMLPanel.1

              MyWay.MyWebSearch: [SBI $F1C75F59] Class ID (Clé du registre, nothing done)
              HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{3E720452-B472-4954-B7AA-33069EB53906}

              MyWay.MyWebSearch: [SBI $F1C75F59] Root class (Clé du registre, nothing done)
              HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MyWebSearch.HTMLPanel.1

              MyWay.MyWebSearch: [SBI $F1C75F59] Class ID (Clé du registre, nothing done)
              HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{3E720452-B472-4954-B7AA-33069EB53906}

              MyWay.MyWebSearch: [SBI $F1C75F59] Root class (Clé du registre, nothing done)
              HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MyWebSearch.HTMLPanel

              MyWay.MyWebSearch: [SBI $8556DAFF] Type library (Clé du registre, nothing done)
              HKEY_CLASSES_ROOT\TypeLib\{3E720450-B472-4954-B7AA-33069EB53906}

              MyWay.MyWebSearch: [SBI $FE001122] Class ID (Clé du registre, nothing done)
              HKEY_CLASSES_ROOT\CLSID\{7473D296-B7BB-4f24-AE82-7E2CE94BB6A9}

              MyWay.MyWebSearch: [SBI $74CCF0A1] Root class (Clé du registre, nothing done)
              HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MyWebSearch.PseudoTransparentPlugin

              MyWay.MyWebSearch: [SBI $74CCF0A1] Root class (Clé du registre, nothing done)
              HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MyWebSearch.PseudoTransparentPlugin.1

              MyWay.MyWebSearch: [SBI $74CCF0A1] Class ID (Clé du registre, nothing done)
              HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7473D294-B7BB-4f24-AE82-7E2CE94BB6A9}

              MyWay.MyWebSearch: [SBI $74CCF0A1] Root class (Clé du registre, nothing done)
              HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MyWebSearch.PseudoTransparentPlugin.1

              MyWay.MyWebSearch: [SBI $74CCF0A1] Class ID (Clé du registre, nothing done)
              HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7473D294-B7BB-4f24-AE82-7E2CE94BB6A9}

              MyWay.MyWebSearch: [SBI $74CCF0A1] Root class (Clé du registre, nothing done)
              HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MyWebSearch.PseudoTransparentPlugin

              MyWay.MyWebSearch: [SBI $7D166358] Interface (Clé du registre, nothing done)
              HKEY_CLASSES_ROOT\Interface\{7473D293-B7BB-4F24-AE82-7E2CE94BB6A9}

              MyWay.MyWebSearch: [SBI $5B4611BE] Interface (Clé du registre, nothing done)
              HKEY_CLASSES_ROOT\Interface\{7473D295-B7BB-4F24-AE82-7E2CE94BB6A9}

              MyWay.MyWebSearch: [SBI $4689C01C] Interface (Clé du registre, nothing done)
              HKEY_CLASSES_ROOT\Interface\{7473D297-B7BB-4F24-AE82-7E2CE94BB6A9}

              MyWay.MyWebSearch: [SBI $39BC590A] Réglages (Clé du registre, nothing done)
              HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{3E720452-B472-4954-B7AA-33069EB53906}

              MyWay.MyWebSearch: [SBI $D40B462F] Réglages (Clé du registre, nothing done)
              HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{7473D294-B7BB-4f24-AE82-7E2CE94BB6A9}

              MyWay.MyWebSearch: [SBI $4A61CD5B] Réglages (Clé du registre, nothing done)
              HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{E79DFBCA-5697-4fbd-94E5-5B2A9C7C1612}

              MyWay.MyWebSearch: [SBI $6404C538] Réglages (Clé du registre, nothing done)
              HKEY_USERS\S-1-5-21-2442878764-3048672224-3850667282-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{07B18EA1-A523-4961-B6BB-170DE4475CCA}

              MyWay.MyWebSearch: [SBI $3EAEA461] Class ID (Clé du registre, nothing done)
              HKEY_CLASSES_ROOT\CLSID\{07B18EA9-A523-4961-B6BB-170DE4475CCA}

              MyWay.MyWebSearch: [SBI $9FB1BDFC] Class ID (Clé du registre, nothing done)
              HKEY_CLASSES_ROOT\CLSID\{00A6FAF6-072E-44cf-8957-5838F569A31D}

              MyWay.MyWebSearch: [SBI $359D9C97] Class ID (Clé du registre, nothing done)
              HKEY_CLASSES_ROOT\CLSID\{53CED2D0-5E9A-4761-9005-648404E6F7E5}

              MyWay.MyWebSearch: [SBI $7390AC55] Interface (Clé du registre, nothing done)
              HKEY_CLASSES_ROOT\Interface\{F87D7FB5-9DC5-4C8C-B998-D8DFE02E2978}

              MyWay.MyWebSearch: [SBI $7B038A85] Root class (Clé du registre, nothing done)
              HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MyWebSearchToolBar.ToolbarPlugin

              MyWay.MyWebSearch: [SBI $7B038A85] Root class (Clé du registre, nothing done)
              HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MyWebSearchToolBar.ToolbarPlugin.1

              MyWay.MyWebSearch: [SBI $7B038A85] Class ID (Clé du registre, nothing done)
              HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{53CED2D0-5E9A-4761-9005-648404E6F7E5}

              MyWay.MyWebSearch: [SBI $7B038A85] Root class (Clé du registre, nothing done)
              HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MyWebSearchToolBar.ToolbarPlugin.1

              MyWay.MyWebSearch: [SBI $7B038A85] Class ID (Clé du registre, nothing done)
              HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{53CED2D0-5E9A-4761-9005-648404E6F7E5}

              MyWay.MyWebSearch: [SBI $7B038A85] Root class (Clé du registre, nothing done)
              HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MyWebSearchToolBar.ToolbarPlugin

              MyWay.MyWebSearch: [SBI $39E631BB] Réglages (Clé du registre, nothing done)
              HKEY_USERS\S-1-5-21-2442878764-3048672224-3850667282-1000\Software\Microsoft\Internet Explorer\SearchScopes\{56256A51-B582-467e-B8D4-7786EDA79AE0}

              MyWay.MyWebSearch: [SBI $1D729FD1] Réglages (Clé du registre, nothing done)
              HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{56256A51-B582-467e-B8D4-7786EDA79AE0}

              MyWay.MyWebSearch: [SBI $8B97F486] Réglages (Clé du registre, nothing done)
              HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{07B18EAB-A523-4961-B6BB-170DE4475CCA}

              MyWay.MyWebSearch: [SBI $B1C70274] Browser helper object (Clé du registre, nothing done)
              HKEY_USERS\S-1-5-21-2442878764-3048672224-3850667282-1000\Software\MyWebSearch

              MyWay.MyWebSearch: [SBI $B70627CB] Class ID (Clé du registre, nothing done)
              HKEY_CLASSES_ROOT\CLSID\{00A6FAF1-072E-44cf-8957-5838F569A31D}

              MyWay.MyWebSearch: [SBI $4991E2E9] Class ID (Clé du registre, nothing done)
              HKEY_CLASSES_ROOT\CLSID\{07B18EA1-A523-4961-B6BB-170DE4475CCA}

              MyWay.MyWebSearch: [SBI $BC537229] Class ID (Clé du registre, nothing done)
              HKEY_CLASSES_ROOT\CLSID\{07B18EAB-A523-4961-B6BB-170DE4475CCA}

              MyWay.MyWebSearch: [SBI $91B56C2A] Class ID (Clé du registre, nothing done)
              HKEY_CLASSES_ROOT\CLSID\{1E0DE227-5CE4-4ea3-AB0C-8B03E1AA76BC}

              MyWay.MyWebSearch: [SBI $C59FB266] Class ID (Clé du registre, nothing done)
              HKEY_CLASSES_ROOT\CLSID\{7473D292-B7BB-4f24-AE82-7E2CE94BB6A9}

              MyWay.MyWebSearch: [SBI $5EE91522] Class ID (Clé du registre, nothing done)
              HKEY_CLASSES_ROOT\CLSID\{938AA51A-996C-4884-98CE-80DD16A5C9DA}

              MyWay.MyWebSearch: [SBI $8B1EDE10] Class ID (Clé du registre, nothing done)
              HKEY_CLASSES_ROOT\CLSID\{9FF05104-B030-46FC-94B8-81276E4E27DF}

              MyWay.MyWebSearch: [SBI $80863035] Class ID (Clé du registre, nothing done)
              HKEY_CLASSES_ROOT\CLSID\{A9571378-68A1-443d-B082-284F960C6D17}

              MyWay.MyWebSearch: [SBI $39556604] Class ID (Clé du registre, nothing done)
              HKEY_CLASSES_ROOT\CLSID\{ADB01E81-3C79-4272-A0F1-7B2BE7A782DC}

              MyWay.MyWebSearch: [SBI $8B82F326] Root class (Clé du registre, nothing done)
              HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MyWebSearch.OutlookAddin

              MyWay.MyWebSearch: [SBI $8B82F326] Root class (Clé du registre, nothing done)
              HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MyWebSearch.OutlookAddin.1

              MyWay.MyWebSearch: [SBI $8B82F326] Class ID (Clé du registre, nothing done)
              HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{ADB01E81-3C79-4272-A0F1-7B2BE7A782DC}

              MyWay.MyWebSearch: [SBI $8B82F326] Root class (Clé du registre, nothing done)
              HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MyWebSearch.OutlookAddin.1

              MyWay.MyWebSearch: [SBI $8B82F326] Class ID (Clé du registre, nothing done)
              HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{ADB01E81-3C79-4272-A0F1-7B2BE7A782DC}

              MyWay.MyWebSearch: [SBI $8B82F326] Root class (Clé du registre, nothing done)
              HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MyWebSearch.OutlookAddin

              MyWay.MyWebSearch: [SBI $21C50ADC] Root class (Clé du registre, nothing done)
              HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MyWebSearchToolBar.SettingsPlugin

              MyWay.MyWebSearch: [SBI $21C50ADC] Root class (Clé du registre, nothing done)
              HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MyWebSearchToolBar.SettingsPlugin.1

              MyWay.MyWebSearch: [SBI $21C50ADC] Class ID (Clé du registre, nothing done)
              HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{07B18EAB-A523-4961-B6BB-170DE4475CCA}

              MyWay.MyWebSearch: [SBI $21C50ADC] Root class (Clé du registre, nothing done)
              HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MyWebSearchToolBar.SettingsPlugin.1

              MyWay.MyWebSearch: [SBI $21C50ADC] Class ID (Clé du registre, nothing done)
              HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{07B18EAB-A523-4961-B6BB-170DE4475CCA}

              MyWay.MyWebSearch: [SBI $21C50ADC] Root class (Clé du registre, nothing done)
              HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MyWebSearchToolBar.SettingsPlugin

              MyWay.MyWebSearch: [SBI $6D6DC0D4] Root class (Clé du registre, nothing done)
              HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ScreenSaverControl.ScreenSaverInstaller

              MyWay.MyWebSearch: [SBI $6D6DC0D4] Root class (Clé du registre, nothing done)
              HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ScreenSaverControl.ScreenSaverInstaller.1

              MyWay.MyWebSearch: [SBI $6D6DC0D4] Class ID (Clé du registre, nothing done)
              HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{9FF05104-B030-46FC-94B8-81276E4E27DF}

              MyWay.MyWebSearch: [SBI $6D6DC0D4] Root class (Clé du registre, nothing done)
              HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ScreenSaverControl.ScreenSaverInstaller.1

              MyWay.MyWebSearch: [SBI $6D6DC0D4] Class ID (Clé du registre, nothing done)
              HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{9FF05104-B030-46FC-94B8-81276E4E27DF}

              MyWay.MyWebSearch: [SBI $6D6DC0D4] Root class (Clé du registre, nothing done)
              HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ScreenSaverControl.ScreenSaverInstaller

              MyWay.MyWebSearch: [SBI $8B993408] Type library (Clé du registre, nothing done)
              HKEY_CLASSES_ROOT\TypeLib\{29D67D3C-509A-4544-903F-C8C1B8236554}

              MyWay.MyWebSearch: [SBI $4C54BBA4] Type library (Clé du registre, nothing done)
              HKEY_CLASSES_ROOT\TypeLib\{7473D290-B7BB-4F24-AE82-7E2CE94BB6A9}

              MyWay.MyWebSearch: [SBI $75BB5611] Type library (Clé du registre, nothing done)
              HKEY_CLASSES_ROOT\TypeLib\{8E6F1830-9607-4440-8530-13BE7C4B1D14}

              MyWay.MyWebSearch: [SBI $EABEA47E] Type library (Clé du registre, nothing done)
              HKEY_CLASSES_ROOT\TypeLib\{E47CAEE0-DEEA-464A-9326-3F2801535A4D}

              MyWay.MyWebSearch: [SBI $95E7D650] Type library (Clé du registre, nothing done)
              HKEY_CLASSES_ROOT\TypeLib\{F42228FB-E84E-479E-B922-FBBD096E792C}

              MyWay.MyWebSearch: [SBI $DBE9DC78] Browser helper object (Clé du registre, nothing done)
              HKEY_LOCAL_MACHINE\Software\FocusInteractive

              MyWay.MyWebSearch: [SBI $0AB712F8] Réglages (Clé du registre, nothing done)
              HKEY_LOCAL_MACHINE\Software\Microsoft\Office\Outlook\Addins\MyWebSearch.OutlookAddin

              MyWay.MyWebSearch: [SBI $6CDD369B] Réglages (Clé du registre, nothing done)
              HKEY_LOCAL_MACHINE\Software\Microsoft\Office\Word\Addins\MyWebSearch.OutlookAddin

              MyWay.MyWebSearch: [SBI $BDD40B52] Réglages (Clé du registre, nothing done)
              HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{00A6FAF1-072E-44cf-8957-5838F569A31D}

              MyWay.MyWebSearch: [SBI $5A6A799D] Réglages désinstallation (Clé du registre, nothing done)
              HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\MyWebSearch bar Uninstall

              MyWay.MyWebSearch: [SBI $5A6A799D] Réglages désinstallation (Clé du registre, nothing done)
              HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\MyWebSearch bar Uninstall

              MyWay.MyWebSearch: [SBI $AC7657F9] Réglages (Clé du registre, nothing done)
              HKEY_LOCAL_MACHINE\Software\MyWebSearch

              MyWay.MyWebSearch: [SBI $BF485355] Barre d'outils IE (Valeur du registre, nothing done)
              HKEY_USERS\S-1-5-21-2442878764-3048672224-3850667282-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\{07B18EA9-A523-4961-B6BB-170DE4475CCA}

              MyWay.MyWebSearch: [SBI $63E2271D] Barre d'outils IE (Valeur du registre, nothing done)
              HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\{07B18EA9-A523-4961-B6BB-170DE4475CCA}

              MyWay.MyWebSearch: [SBI $51E6ABA2] Dossier Programme (Répertoire, nothing done)
              C:\Program Files\MyWebSearch\

              MyWay.MyWebSearch: [SBI $43FCC3D4] Browser helper object (Clé du registre, nothing done)
              HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{07B18EA1-A523-4961-B6BB-170DE4475CCA}

              FunWebProducts: [SBI $934664E3] Exécutable (Fichier, nothing done)
              C:\Windows\System32\f3PSSavr.scr
              Properties.size=28672
              Properties.md5=4CD346697529EFC743A608B2F5D0CC94
              Properties.filedate=1261677399
              Properties.filedatetext=2009-12-24 18:56:38

              FunWebProducts: [SBI $51F213BA] Dossier Programme (Répertoire, nothing done)
              C:\Program Files\MyWebSearch\bar\

              FunWebProducts: [SBI $9975C0B8] Dossier Programme (Répertoire, nothing done)
              C:\Program Files\MyWebSearch\bar\1.bin\

              FunWebProducts: [SBI $9AC0555D] Dossier Programme (Répertoire, nothing done)
              C:\Program Files\MyWebSearch\bar\Avatar\

              FunWebProducts: [SBI $87976B73] Dossier Programme (Répertoire, nothing done)
              C:\Program Files\funwebproducts\ScreenSaver

              MyWay.MyWebSearch: [SBI $91166FCC] Class ID (Clé du registre, nothing done)
              HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{00A6FAF1-072E-44cf-8957-5838F569A31D}

              MyWay.MyWebSearch: [SBI $91166FCC] Browser helper object (Clé du registre, nothing done)
              HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{00A6FAF1-072E-44cf-8957-5838F569A31D}

              MyWay.MyWebSearch: [SBI $91166FCC] Class ID (Clé du registre, nothing done)
              HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{00A6FAF1-072E-44cf-8957-5838F569A31D}

              MyWay.MyWebSearch: [SBI $E8826233] Class ID (Clé du registre, nothing done)
              HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{07B18EA1-A523-4961-B6BB-170DE4475CCA}

              MyWay.MyWebSearch: [SBI $E8826233] Browser helper object (Clé du registre, nothing done)
              HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{07B18EA1-A523-4961-B6BB-170DE4475CCA}

              MyWay.MyWebSearch: [SBI $E8826233] Class ID (Clé du registre, nothing done)
              HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{07B18EA1-A523-4961-B6BB-170DE4475CCA}

              MyWay.MyWebSearch: [SBI $72D40B69] Class ID (Clé du registre, nothing done)
              HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{07B18EA9-A523-4961-B6BB-170DE4475CCA}

              MyWay.MyWebSearch: [SBI $72D40B69] Barre d'outils IE (Valeur du registre, nothing done)
              HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar\{07B18EA9-A523-4961-B6BB-170DE4475CCA}

              MyWay.MyWebSearch: [SBI $72D40B69] Class ID (Clé du registre, nothing done)
              HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{07B18EA9-A523-4961-B6BB-170DE4475CCA}

              MyWay.MyWebSearch: [SBI $B836F058] Interface (Clé du registre, nothing done)
              HKEY_CLASSES_ROOT\Interface\{CF54BE1C-9359-4395-8533-1657CF209CFE}

              MyWay.MyWebSearch: [SBI $4A8ED495] Type library (Clé du registre, nothing done)
              HKEY_CLASSES_ROOT\TypeLib\{D518921A-4A03-425E-9873-B9A71756821E}

              MyWay.MyWebSearch: [SBI $0ACED923] Donnée (Fichier, nothing done)
              C:\Program Files\MyWebSearch\bar\Avatar\COMMON.F3S
              Properties.size=89655
              Properties.md5=140AB62FFB5E3991894AEAD1E105393D
              Properties.filedate=1261677401
              Properties.filedatetext=2009-12-24 18:56:40

              MyWay.MyWebSearch: [SBI $0ACED923] Donnée (Fichier, nothing done)
              C:\Program Files\MyWebSearch\bar\Game\CHECKERS.F3S
              Properties.size=56438
              Properties.md5=87B6FB1125216E8D7B293400B715FB8D
              Properties.filedate=1261677401
              Properties.filedatetext=2009-12-24 18:56:40

              MyWay.MyWebSearch: [SBI $0ACED923] Donnée (Fichier, nothing done)
              C:\Program Files\MyWebSearch\bar\Game\CHESS.F3S
              Properties.size=66726
              Properties.md5=E660C15170591EBE447F601DDC6163C1
              Properties.filedate=1261677401
              Properties.filedatetext=2009-12-24 18:56:40

              MyWay.MyWebSearch: [SBI $0ACED923] Donnée (Fichier, nothing done)
              C:\Program Files\MyWebSearch\bar\Game\REVERSI.F3S
              Properties.size=56688
              Properties.md5=C13224330D67C961D2E3E4279A5BC1A6
              Properties.filedate=1261677401
              Properties.filedatetext=2009-12-24 18:56:41

              MyWay.MyWebSearch: [SBI $0ACED923] Donnée (Fichier, nothing done)
              C:\Program Files\MyWebSearch\bar\Message\COMMON.F3S
              Properties.size=159525
              Properties.md5=8881A24974408D6611EFA9BE7AF37E31
              Properties.filedate=1261677401
              Properties.filedatetext=2009-12-24 18:56:40

              MyWay.MyWebSearch: [SBI $0ACED923] Donnée (Fichier, nothing done)
              C:\Program Files\MyWebSearch\bar\Notifier\COMMON.F3S
              Properties.size=301118
              Properties.md5=FD8A7DE5CE05EDA235B4D29C0E64FBFF
              Properties.filedate=1261677401
              Properties.filedatetext=2009-12-24 18:56:40

              MyWay.MyWebSearch: [SBI $0ACED923] Donnée (Fichier, nothing done)
              C:\Program Files\MyWebSearch\bar\Notifier\DOG.F3S
              Properties.size=71675
              Properties.md5=EAD44A1AC4FD80104D1B4814CE3582E1
              Properties.filedate=1261677401
              Properties.filedatetext=2009-12-24 18:56:40

              MyWay.MyWebSearch: [SBI $0ACED923] Donnée (Fichier, nothing done)
              C:\Program Files\MyWebSearch\bar\Notifier\FISH.F3S
              Properties.size=106998
              Properties.md5=43182F0E08638C0FFB08B33D7876B340
              Properties.filedate=1261677401
              Properties.filedatetext=2009-12-24 18:56:40

              MyWay.MyWebSearch: [SBI $0ACED923] Donnée (Fichier, nothing done)
              C:\Program Files\MyWebSearch\bar\Notifier\KUNGFU.F3S
              Properties.size=129559
              Properties.md5=1A47783E119A96A3597DA38717FB9E59
              Properties.filedate=1261677401
              Properties.filedatetext=2009-12-24 18:56:40

              MyWay.MyWebSearch: [SBI $0ACED923] Donnée (Fichier, nothing done)
              C:\Program Files\MyWebSearch\bar\Notifier\LIFEGARD.F3S
              Properties.size=272367
              Properties.md5=72876A9D1BA63B025CF73A5EB622569E
              Properties.filedate=1261677401
              Properties.filedatetext=2009-12-24 18:56:40

              MyWay.MyWebSearch: [SBI $0ACED923] Donnée (Fichier, nothing done)
              C:\Program Files\MyWebSearch\bar\Notifier\MAID.F3S
              Properties.size=122747
              Properties.md5=46DD0C9F0820FE10E0DB7D2DC5B18E2F
              Properties.filedate=1261677401
              Properties.filedatetext=2009-12-24 18:56:40

              MyWay.MyWebSearch: [SBI $0ACED923] Donnée (Fichier, nothing done)
              C:\Program Files\MyWebSearch\bar\Notifier\MAILBOX.F3S
              Properties.size=43287
              Properties.md5=4C64C9C48FAFB1CE394BAD985A1A1CA6
              Properties.filedate=1261677401
              Properties.filedatetext=2009-12-24 18:56:40

              MyWay.MyWebSearch: [SBI $0ACED923] Donnée (Fichier, nothing done)
              C:\Program Files\MyWebSearch\bar\Notifier\OPERA.F3S
              Properties.size=155471
              Properties.md5=256AC64A886E9E60E56CE07A0F5C6808
              Properties.filedate=1261677401
              Properties.filedatetext=2009-12-24 18:56:40

              MyWay.MyWebSearch: [SBI $0ACED923] Donnée (Fichier, nothing done)
              C:\Program Files\MyWebSearch\bar\Notifier\ROBOT.F3S
              Properties.size=149817
              Properties.md5=648274DCDAE169827E769628379D342A
              Properties.filedate=1261677401
              Properties.filedatetext=2009-12-24 18:56:40

              MyWay.MyWebSearch: [SBI $0ACED923] Donnée (Fichier, nothing done)
              C:\Program Files\MyWebSearch\bar\Notifier\SEDUCT.F3S
              Properties.size=243509
              Properties.md5=D9E3A3AEB53C0B0E1A4F6987D1995F0B
              Properties.filedate=1261677401
              Properties.filedatetext=2009-12-24 18:56:40

              MyWay.MyWebSearch: [SBI $0ACED923] Donnée (Fichier, nothing done)
              C:\Program Files\MyWebSearch\bar\Notifier\SURFER.F3S
              Properties.size=113081
              Properties.md5=14DF54094BF76DBE5D71DB552DFB2633
              Properties.filedate=1261677401
              Properties.filedatetext=2009-12-24 18:56:40

              MyWay.MyWebSearch: [SBI $2CFDFB02] Donnée (Fichier, nothing done)
              C:\Program Files\MyWebSearch\bar\2.bin\F3WALLPP.DAT
              Properties.size=305
              Properties.md5=BC3475B177749B81BFAB5D21091786B5
              Properties.filedate=1261677399
              Properties.filedatetext=2009-12-24 18:56:38

              MyWay.MyWebSearch: [SBI $2CFDFB02] Donnée (Fichier, nothing done)
              C:\Program Files\MyWebSearch\bar\Settings\s_pid.dat
              Properties.size=16
              Properties.md5=F9CFD0FE31F03C06126E4129A88481C1
              Properties.filedate=1261677401
              Properties.filedatetext=2009-12-24 18:56:41

              MyWay.MyWebSearch: [SBI $0888C8CD] Image (Fichier, nothing done)
              C:\Program Files\MyWebSearch\bar\icons\CM.ICO
              Properties.size=7406
              Properties.md5=089EFCEA98317E0D0DC0543BE2EDA81F
              Properties.filedate=1261677401
              Properties.filedatetext=2009-12-24 18:56:41

              MyWay.MyWebSearch: [SBI $0888C8CD] Image (Fichier, nothing done)
              C:\Program Files\MyWebSearch\bar\icons\MFC.ICO
              Properties.size=7406
              Properties.md5=141581A8DE0D46FB85F25A89DA38284C
              Properties.filedate=1261677401
              Properties.filedatetext=2009-12-24 18:56:41

              MyWay.MyWebSearch: [SBI $0888C8CD] Image (Fichier, nothing done)
              C:\Program Files\MyWebSearch\bar\icons\PSS.ICO
              Properties.size=10134
              Properties.md5=24E6DA5796608E7DAD1011EC432B1666
              Properties.filedate=1261677401
              Properties.filedatetext=2009-12-24 18:56:41

              MyWay.MyWebSearch: [SBI $0888C8CD] Image (Fichier, nothing done)
              C:\Program Files\MyWebSearch\bar\icons\SMILEY.ICO
              Properties.size=7406
              Properties.md5=2327AE7F0BAC7814F0870CED67420AAC
              Properties.filedate=1261677401
              Properties.filedatetext=2009-12-24 18:56:41

              MyWay.MyWebSearch: [SBI $0888C8CD] Image (Fichier, nothing done)
              C:\Program Files\MyWebSearch\bar\icons\WB.ICO
              Properties.size=7406
              Properties.md5=7429E321AC5058790EA073CD55F7328F
              Properties.filedate=1261677401
              Properties.filedatetext=2009-12-24 18:56:41

              MyWay.MyWebSearch: [SBI $0888C8CD] Image (Fichier, nothing done)
              C:\Program Files\MyWebSearch\bar\icons\ZWINKY.ICO
              Properties.size=12782
              Properties.md5=EC6393D63343AF0856E5DCBD16C182BC
              Properties.filedate=1261677401
              Properties.filedatetext=2009-12-24 18:56:41

              MyWay.MyWebSearch: [SBI $AA1369A1] Donnée (Fichier, nothing done)
              C:\Program Files\MyWebSearch\bar\1.bin\M3FFXTBR.JAR
              Properties.size=4466
              Properties.md5=24BF210F4B66401C73DF15656822CB3A
              Properties.filedate=1255287204
              Properties.filedatetext=2009-10-11 19:53:24

              MyWay.MyWebSearch: [SBI $AA1369A1] Donnée (Fichier, nothing done)
              C:\Program Files\MyWebSearch\bar\1.bin\M3NTSTBR.JAR
              Properties.size=6462
              Properties.md5=AB3215E9A56E91D45753D1BC56682B96
              Properties.filedate=1255287204
              Properties.filedatetext=2009-10-11 19:53:24

              MyWay.MyWebSearch: [SBI $E4947DDB] Bibliothèque (Fichier, nothing done)
              C:\Program Files\MyWebSearch\bar\1.bin\NPMYWEBS.DLL
              Properties.size=24684
              Properties.md5=7BDBC3B0462EC1D1774EC733F523EC95
              Properties.filedate=1255287205
              Properties.filedatetext=2009-10-11 19:53:24

              MyWay.MyWebSearch: [SBI $E4947DDB] Bibliothèque (Fichier, nothing done)
              C:\Program Files\MyWebSearch\bar\2.bin\F3HKSTUB.DLL
              Properties.size=24685
              Properties.md5=AD4A35A2F5068E3F8CFE22AA73370408
              Properties.filedate=1261677399
              Properties.filedatetext=2009-12-24 18:56:38

              MyWay.MyWebSearch: [SBI $E4947DDB] Bibliothèque (Fichier, nothing done)
              C:\Program Files\MyWebSearch\bar\2.bin\F3REGHK.DLL
              Properties.size=28776
              Properties.md5=F79220B730D91FBF4D8C94BA91C1A857
              Properties.filedate=1261677399
              Properties.filedatetext=2009-12-24 18:56:38

              MyWay.MyWebSearch: [SBI $E4947DDB] Bibliothèque (Fichier, nothing done)
              C:\Program Files\MyWebSearch\bar\2.bin\M3AUXSTB.DLL
              Properties.size=24681
              Properties.md5=8A30BDCA937CF837F3FD6B66CE905632
              Properties.filedate=1261677399
              Properties.filedatetext=2009-12-24 18:56:38

              MyWay.MyWebSearch: [SBI $E4947DDB] Bibliothèque (Fichier, nothing done)
              C:\Program Files\MyWebSearch\bar\2.bin\M3DLGHK.DLL
              Properties.size=28779
              Properties.md5=4956D50F1212650BBF8655976E18EE2B
              Properties.filedate=1261677399
              Properties.filedatetext=2009-12-24 18:56:38

              MyWay.MyWebSearch: [SBI $E4947DDB] Bibliothèque (Fichier, nothing done)
              C:\Program Files\MyWebSearch\bar\2.bin\M3HIGHIN.EXE
              Properties.size=16502
              Properties.md5=5129CC4F1B78FDDDFEC80F91E12311AC
              Properties.filedate=1261677399
              Properties.filedatetext=2009-12-24 18:56:38

              MyWay.MyWebSearch: [SBI $E4947DDB] Bibliothèque (Fichier, nothing done)
              C:\Program Files\MyWebSearch\bar\2.bin\M3HTML.DLL
              Properties.size=86078
              Properties.md5=D460ECA5D4574507FF4DABCC2CBC5F2E
              Properties.filedate=1261677399
              Properties.filedatetext=2009-12-24 18:56:38

              MyWay.MyWebSearch: [SBI $E4947DDB] Bibliothèque (Fichier, nothing done)
              C:\Program Files\MyWebSearch\bar\2.bin\M3IDLE.DLL
              Properties.size=28672
              Properties.md5=86445E5A1C4B02574D8BB1B49EBC1A73
              Properties.filedate=1261677399
              Properties.filedatetext=2009-12-24 18:56:38

              MyWay.MyWebSearch: [SBI $E4947DDB] Bibliothèque (Fichier, nothing done)
              C:\Program Files\MyWebSearch\bar\2.bin\M3IMPIPE.EXE
              Properties.size=16384
              Properties.md5=FFF6063F3245896A084068CD5D8250FE
              Properties.filedate=1261677399
              Properties.filedatetext=2009-12-24 18:56:38

              MyWay.MyWebSearch: [SBI $E4947DDB] Bibliothèque (Fichier, nothing done)
              C:\Program Files\MyWebSearch\bar\2.bin\M3MEDINT.EXE
              Properties.size=16501
              Properties.md5=2B63825777FF3587B6F8BD928614E4EE
              Properties.filedate=1261677399
              Properties.filedatetext=2009-12-24 18:56:38

              MyWay.MyWebSearch: [SBI $E4947DDB] Bibliothèque (Fichier, nothing done)
              C:\Program Files\MyWebSearch\bar\2.bin\M3MSG.DLL
              Properties.size=155738
              Properties.md5=445CA5E2DA8147D1C7BD7C6D5A8FAC4F
              Properties.filedate=1261677399
              Properties.filedatetext=2009-12-24 18:56:38

              MyWay.MyWebSearch: [SBI $E4947DDB] Bibliothèque (Fichier, nothing done)
              C:\Program Files\MyWebSearch\bar\2.bin\M3OUTLCN.DLL
              Properties.size=69717
              Properties.md5=26F833B7AD465A044A8DA50B619775B2
              Properties.filedate=1261677399
              Properties.filedatetext=2009-12-24 18:56:38

              MyWay.MyWebSearch: [SBI $E4947DDB] Bibliothèque (Fichier, nothing done)
              C:\Program Files\MyWebSearch\bar\2.bin\M3PLUGIN.DLL
              Properties.size=57448
              Properties.md5=CDB8CD8AE523D22AFE6CBCCDFCEC6E30
              Properties.filedate=1261677399
              Properties.filedatetext=2009-12-24 18:56:38

              MyWay.MyWebSearch: [SBI $E4947DDB] Bibliothèque (Fichier, nothing done)
              C:\Program Files\MyWebSearch\bar\2.bin\M3SKIN.DLL
              Properties.size=131141
              Properties.md5=D1A29FBD9263013A3AFD6BB24EE92604
              Properties.filedate=1261677399
              Properties.filedatetext=2009-12-24 18:56:38

              MyWay.MyWebSearch: [SBI $E4947DDB] Bibliothèque (Fichier, nothing done)
              C:\Program Files\MyWebSearch\bar\2.bin\M3SKPLAY.EXE
              Properties.size=28672
              Properties.md5=0606CBCDC54D2E5971F2B6AEC860FF6D
              Properties.filedate=1261677399
              Properties.filedatetext=2009-12-24 18:56:38

              MyWay.MyWebSearch: [SBI $E4947DDB] Bibliothèque (Fichier, nothing done)
              C:\Program Files\MyWebSearch\bar\2.bin\M3SLSRCH.EXE
              Properties.size=24686
              Properties.md5=A823C5911BC5BE53EE44A070D3B3FAE0
              Properties.filedate=1261677399
              Properties.filedatetext=2009-12-24 18:56:38

              MyWay.MyWebSearch: [SBI $E4947DDB] Bibliothèque (Fichier, nothing done)
              C:\Program Files\MyWebSearch\bar\2.bin\M3SRCHMN.EXE
              Properties.size=24688
              Properties.md5=12D29863ADBFC002386B63CDD9BB0FB9
              Properties.filedate=1261677399
              Properties.filedatetext=2009-12-24 18:56:38

              MyWay.MyWebSearch: [SBI $E4947DDB] Bibliothèque (Fichier, nothing done)
              C:\Program Files\MyWebSearch\bar\2.bin\MWSBAR.DLL
              Properties.size=456112
              Properties.md5=5AF5E16C19173C295C26C989FE98A6D5
              Properties.filedate=1261677399
              Properties.filedatetext=2009-12-24 18:56:38

              MyWay.MyWebSearch: [SBI $E4947DDB] Bibliothèque (Fichier, nothing done)
              C:\Program Files\MyWebSearch\bar\2.bin\MWSOEMON.EXE
              Properties.size=32838
              Properties.md5=9ABBE6F791C0B599A7128C9ACA27C094
              Properties.filedate=1261677399
              Properties.filedatetext=2009-12-24 18:56:39

              MyWay.MyWebSearch: [SBI $E4947DDB] Bibliothèque (Fichier, nothing done)
              C:\Program Files\MyWebSearch\bar\2.bin\MWSOEPLG.DLL
              Properties.size=389204
              Properties.md5=ED90588522210940832AFC8A51DC172B
              Properties.filedate=1261677399
              Properties.filedatetext=2009-12-24 18:56:39

              MyWay.MyWebSearch: [SBI $E4947DDB] Bibliothèque (Fichier, nothing done)
              C:\Program Files\MyWebSearch\bar\2.bin\MWSOESTB.DLL
              Properties.size=45134
              Properties.md5=DCE9724842497960E7148DCA20295E97
              Properties.filedate=1261677399
              Properties.filedatetext=2009-12-24 18:56:39

              MyWay.MyWebSearch: [SBI $E4947DDB] Bibliothèque (Fichier, nothing done)
              C:\Program Files\MyWebSearch\bar\2.bin\MWSSRCAS.DLL
              Properties.size=54608
              Properties.md5=A79779D6D331E1346D9569B17638F221
              Properties.filedate=1261677399
              Properties.filedatetext=2009-12-24 18:56:39

              MyWay.MyWebSearch: [SBI $E4947DDB] Bibliothèque (Fichier, nothing done)
              C:\Program Files\MyWebSearch\bar\2.bin\MWSSVC.EXE
              Properties.size=28762
              Properties.md5=319F6520EEACE462C0FBFEB6AB400332
              Properties.filedate=1261677399
              Properties.filedatetext=2009-12-24 18:56:39

              My
              1. fabul Modérateur
                La source,probablement ici:http://download.mywebsearch.com/

                Pour porter plainte,bonne chance.

                Pour supprimer MyWebSearch,c'est Ad-Remover,fait option L pour analyse, et poste le raport généré par Ad-Remover.
                1. chipie-68
                  Où dois-je aller pour l'option L ?

                  J ne suis pas une spécialiste ! lol
                2. fabul Modérateur
                  @chipie-68Désolé,c'est plutot "S" pour Scan et "L" pour Launch cleaning (Nettoyage).

                  Démarre le et clic "Oui" et ensuite sur "S"
              2. jfkpresident Contributeur sécurité
                Bonsoir ,

                Option "scanner" et "nettoyer" pour AD-R

                L'interface a changé ...

                Discussions similaires

                Cheval de Troie- e.tre456.worm.windows
                Ninou037

                13 réponses
                Virus potentiel
                Ramon1

                29 réponses
                virus et ou cheval de troie
                FLORE+60

                1 réponse
                supprimer un cheval de troie
                Blandine1964

                10 réponses
                Troie Le film
                keurdange

                3 réponses