Comment supprimer easy search ?
Résolu/Fermé
Bonjour,
En page d'accueil, je n'ai plus google mais easysearch qui s'affiche. Même en changeant la page d'accueil via outils .... au bout de quelques minutes elle revient. Pourriez vous m'aider à l'éradiquer? merci d'avance à toutes les bonnes âmes.
SURFY 40
En page d'accueil, je n'ai plus google mais easysearch qui s'affiche. Même en changeant la page d'accueil via outils .... au bout de quelques minutes elle revient. Pourriez vous m'aider à l'éradiquer? merci d'avance à toutes les bonnes âmes.
SURFY 40
27 réponses
-
bonjour,
* Télécharge de AD-Remover sur ton Bureau. (Merci à C_XX)
http://www.teamxscript.org/adremoverTelechargement.html ( Lien officiel )
https://www.androidworld.fr/ ( Miroir )
/!\ Ferme toutes applications en cours /!\
- Double-clique sur l'icône Ad-remover située sur ton Bureau.
- Sur la page, clique sur le bouton « Nettoyer »
- Confirme lancement du scan
- Laisse travailler l'outil.
- Poste le rapport qui apparaît à la fin.
(Le rapport est sauvegardé aussi sous C:\Ad-report(Scan/clean).Txt)
(CTRL+A pour tout sélectionner, CTRL+C pour copier et CTRL+V pour coller)
-
======BONJOUR Electricien 69 voilà le rapport adremover =
RAPPORT D'AD-REMOVER 2.0.0.1,F | UNIQUEMENT XP/VISTA/7 =======
Mis à jour par C_XX le 16/09/10 à 13:30
Contact: AdRemover.contact[AT]gmail.com
Site web: http://www.teamxscript.org
C:\Program Files\Ad-Remover\main.exe (SCAN [2]) -> Lancé à 11:22:42 le 31/10/2010, Mode normal
Microsoft® Windows Vista(TM) Édition Familiale Premium Service Pack 2 (X86)
VALOU@PC-DE-VALOU (Sony Corporation VGN-NW11S_T)
============== RECHERCHE ==============
Service: "Application Updater" Présent
Service: "IP netservices" Présent
0,Dossier trouvé: C:\Windows\Installer\{86D4B82A-ABED-442A-BE86-96357B70F4FE}
0,Dossier trouvé: C:\Program Files\InstallPedia
0,Fichier trouvé: C:\Program Files\Mozilla FireFox\extensions\pdfforge@mybrowserbar.com
0,Fichier trouvé: C:\Program Files\Mozilla Firefox\extensions\searchsettings@spigot.com
0,Fichier trouvé: C:\Windows\system32\Tasks\Scheduled Update for Ask Toolbar
0,Dossier trouvé: C:\Users\VALOU\AppData\Roaming\Mozilla\FireFox\Profiles\3vh62ciw.default\extensions\toolbar@ask.com
0,Fichier trouvé: C:\Users\VALOU\AppData\Roaming\Mozilla\FireFox\Profiles\3vh62ciw.default\searchplugins\askcom.xml
0,Fichier trouvé: C:\Users\VALOU\AppData\Roaming\Mozilla\FireFox\Profiles\3vh62ciw.default\searchplugins\conduit.xml
0,Dossier trouvé: C:\Program Files\Application Updater
0,Dossier trouvé: C:\Program Files\Ask.com
0,Dossier trouvé: C:\Users\VALOU\AppData\Local\AskToolbar
0,Dossier trouvé: C:\Users\VALOU\AppData\LocalLow\AskToolbar
0,Dossier trouvé: C:\Users\VALOU\AppData\LocalLow\pdfforge
0,Dossier trouvé: C:\Program Files\pdfforge Toolbar
0,Dossier trouvé: C:\Users\VALOU\AppData\LocalLow\Search Settings
3,Fichier trouvé: C:\Windows\Installer\4b5398.msi
3,Fichier trouvé: C:\Windows\Installer\75fe62.msi
-- Fichier ouvert: C:\Users\VALOU\AppData\Roaming\Mozilla\FireFox\Profiles\3vh62ciw.default\Prefs.js --
Ligne trouvée: user_pref("CT2504091.SearchEngine", "Search||hxxp://search.conduit.com/Results.aspx?q=UCM_SEARCH_TER...
Ligne trouvée: user_pref("CT2504091.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT250...
Ligne trouvée: user_pref("browser.search.defaultengine", "Ask.com");
Ligne trouvée: user_pref("browser.search.defaultenginename", "Ask.com");
Ligne trouvée: user_pref("browser.search.defaulturl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2504091&Sea...
Ligne trouvée: user_pref("browser.search.order.1", "Ask.com");
Ligne trouvée: user_pref("extensions.asktb.cbid", "OF");
Ligne trouvée: user_pref("extensions.asktb.default-channel-url-mask", "hxxp://fr.ask.com/web?q={query}&o={o}&l={l}&...
Ligne trouvée: user_pref("extensions.asktb.fresh-install", false);
Ligne trouvée: user_pref("extensions.asktb.l", "dis");
Ligne trouvée: user_pref("extensions.asktb.last-config-req", "1288518005547");
Ligne trouvée: user_pref("extensions.asktb.locale", "fr_FR");
Ligne trouvée: user_pref("extensions.asktb.o", "16050");
Ligne trouvée: user_pref("extensions.asktb.overlay-reloaded-using-restart", true);
Ligne trouvée: user_pref("extensions.asktb.qsrc", "2871");
Ligne trouvée: user_pref("extensions.asktb.r", "4");
Ligne trouvée: user_pref("extensions.asktb.to", "16105");
Ligne trouvée: user_pref("extensions.enabledItems", "{CAFEEFAC-0016-0000-0016-ABCDEFFEDCBA}:6.0.16,{20a82645-c095-4...
-- Fichier Fermé --
1,Clé trouvée: HKLM\Software\Classes\CLSID\{00000000-6E41-4FD3-8538-502F5495E5FC}
1,Clé trouvée: HKLM\Software\Classes\CLSID\{B922D405-6D13-4A2B-AE89-08A030DA4402}
1,Clé trouvée: HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B922D405-6D13-4A2B-AE89-08A030DA4402}
1,Clé trouvée: HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B922D405-6D13-4A2B-AE89-08A030DA4402}
1,Clé trouvée: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{B922D405-6D13-4A2B-AE89-08A030DA4402}
1,Clé trouvée: HKLM\Software\Classes\CLSID\{D4027C7F-154A-4066-A1AD-4243D8127440}
1,Clé trouvée: HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}
1,Clé trouvée: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D4027C7F-154A-4066-A1AD-4243D8127440}
1,Clé trouvée: HKLM\Software\Classes\CLSID\{E312764E-7706-43F1-8DAB-FCDD2B1E416D}
1,Clé trouvée: HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E312764E-7706-43F1-8DAB-FCDD2B1E416D}
1,Clé trouvée: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{E312764E-7706-43F1-8DAB-FCDD2B1E416D}
1,Clé trouvée: HKLM\Software\Classes\Interface\{6C434537-053E-486D-B62A-160059D9D456}
1,Clé trouvée: HKLM\Software\Classes\Interface\{91CF619A-4686-4CA4-9232-3B2E6B63AA92}
1,Clé trouvée: HKLM\Software\Classes\Interface\{AC71B60E-94C9-4EDE-BA46-E146747BB67E}
1,Clé trouvée: HKLM\Software\Classes\TypeLib\{2996F0E7-292B-4CAE-893F-47B8B1C05B56}
0,Clé trouvée: HKLM\Software\Classes\GenericAskToolbar.ToolbarWnd
0,Clé trouvée: HKLM\Software\Classes\GenericAskToolbar.ToolbarWnd.1
0,Clé trouvée: HKLM\Software\Classes\Toolbar.CT2504091
0,Clé trouvée: HKLM\Software\Classes\AppID\GenericAskToolbar.DLL
1,Clé trouvée: HKLM\Software\Classes\AppID\{9B0CB95C-933A-4B8C-B6D4-EDCD19A43874}
0,Clé trouvée: HKLM\Software\Application Updater
0,Clé trouvée: HKLM\Software\Conduit
0,Clé trouvée: HKLM\Software\pdfforge
0,Clé trouvée: HKLM\Software\Search Settings
0,Clé trouvée: HKCU\Software\Ask.com
0,Clé trouvée: HKCU\Software\AskToolbar
0,Clé trouvée: HKCU\Software\Conduit
0,Clé trouvée: HKCU\Software\Search Settings
0,Clé trouvée: HKCU\Software\AppDataLow\AskToolbarInfo
0,Clé trouvée: HKCU\Software\AppDataLow\Software\AskToolbar
0,Clé trouvée: HKCU\Software\AppDataLow\Software\pdfforge
3,Clé trouvée: HKLM\Software\Classes\Installer\Products\3D7B197543B881247905A6E8540DDA23
3,Clé trouvée: HKLM\Software\Classes\Installer\Products\A28B4D68DEBAA244EB686953B7074FEF
3,Clé trouvée: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Products\3D7B197543B881247905A6E8540DDA23
3,Clé trouvée: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Products\A28B4D68DEBAA244EB686953B7074FEF
3,Clé trouvée: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{171DEBEB-C3D4-40b7-AC73-056A5EBA4A7E}
3,Clé trouvée: HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A5AA24EA-11B8-4113-95AE-9ED71DEAF12A}
3,Clé trouvée: HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A5AA24EA-11B8-4113-95AE-9ED71DEAF12A}
3,Clé trouvée: HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B922D405-6D13-4A2B-AE89-08A030DA4402}
0,Clé trouvée: HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{5791B7D3-8B34-4218-9750-6A8E45D0AD32}
0,Clé trouvée: HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{86D4B82A-ABED-442A-BE86-96357B70F4FE}
0,Clé trouvée: HKCU\Software\Microsoft\Internet Explorer\LowRegistry\Search Settings
0,Clé trouvée: HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Scheduled Update for Ask Toolbar
0,Valeur trouvée: HKLM\Software\Microsoft\Windows\CurrentVersion\Run|IP Network
0,Valeur trouvée: HKLM\Software\Microsoft\Windows\CurrentVersion\Run|SearchSettings
0,Valeur trouvée: HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks|{00000000-6E41-4FD3-8538-502F5495E5FC}
0,Valeur trouvée: HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks|{E312764E-7706-43F1-8DAB-FCDD2B1E416D}
0,Valeur trouvée: HKLM\Software\Microsoft\Internet Explorer\Toolbar|{B922D405-6D13-4A2B-AE89-08A030DA4402}
0,Valeur trouvée: HKLM\Software\Microsoft\Internet Explorer\Toolbar|{D4027C7F-154A-4066-A1AD-4243D8127440}
0,Valeur trouvée: HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser|{D4027C7F-154A-4066-A1AD-4243D8127440}
============== SCAN ADDITIONNEL ==============
** Mozilla Firefox Version [3.6.12 (fr)] **
-- C:\Users\VALOU\AppData\Roaming\Mozilla\FireFox\Profiles\3vh62ciw.default\User.js --
keyword.URL, hxxp://redirecterror.sfr.fr/?q=
-- C:\Users\VALOU\AppData\Roaming\Mozilla\FireFox\Profiles\3vh62ciw.default\Prefs.js --
browser.download.lastDir, C:\\Users\\VALOU\\Desktop\\Travail Thibault\\Travail Thibault
browser.search.defaultenginename, Ask.com
browser.search.defaulturl, hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2504091&SearchSource=3&q={searchTerms}
browser.search.selectedEngine, Google Powered Search
browser.startup.homepage, hxxp://www.google.fr/
browser.startup.homepage_override.mstone, rv:1.9.2.12
keyword.URL, hxxp://redirecterror.sfr.fr/?q=
========================================
** Internet Explorer Version [7.0.6002.18005] **
[HKCU\Software\Microsoft\Internet Explorer\Main]
Default_Page_URL: hxxp://www.google.com/ig/redirectdomain?brand=SNYT&bmod=EU01
Do404Search: 0x01000000
Enable Browser Extensions: yes
Local Page: C:\Windows\system32\blank.htm
Search Page: hxxp://go.microsoft.com/fwlink/?LinkId=54896
Show_ToolBar: yes
Start Page: hxxp://www.orange.fr/
Use Search Asst: no
[HKLM\Software\Microsoft\Internet Explorer\Main]
AutoHide: yes
Default_Page_URL: hxxp://www.google.com/ig/redirectdomain?brand=SNYT&bmod=EU01
Default_Search_URL: hxxp://go.microsoft.com/fwlink/?LinkId=54896
Delete_Temp_Files_On_Exit: yes
Enable Browser Extensions: yes
Local Page: C:\Windows\system32\blank.htm
Search Page: hxxp://go.microsoft.com/fwlink/?LinkId=54896
Start Page: hxxp://www.google.com/ig/redirectdomain?brand=SNYT&bmod=SNYT
Use Search Asst: no
[HKLM\Software\Microsoft\Internet Explorer\ABOUTURLS]
Tabs: res://ieframe.dll/tabswelcome.htm
Blank: res://mshtml.dll/blank.htm
========================================
C:\Program Files\Ad-Remover\Quarantine: 0 Fichier(s)
C:\Program Files\Ad-Remover\Backup: 2 Fichier(s)
C:\Ad-Report-SCAN[1].txt - 01/10/2010 (546 Octet(s))
C:\Ad-Report-SCAN[2].txt - 31/10/2010 (9934 Octet(s))
Fin à: 11:27:39, 31/10/2010
============== E.O.F ============== -
======= RAPPORT D'AD-REMOVER 2.0.0.2,D | UNIQUEMENT XP/VISTA/7 =======
Mis à jour par TeamXscript le 03/01/11 à 14:20
Contact: AdRemover[DOT]contact[AT]gmail[DOT]com
Site web: http://www.teamxscript.org
C:\Program Files\Ad-Remover\main.exe (CLEAN [2]) -> Lancé à 14:24:25 le 05/01/2011, Mode normal
Microsoft Windows 7 Édition Intégrale (X86)
Ordi@GRANDPC ( GeForce 8000 series)
============== ACTION(S) ==============
Dossier supprimé: C:\Users\Ordi\AppData\Roaming\Mozilla\FireFox\Profiles\jq1licke.default\extensions\toolbar@ask.com
(!) -- Fichiers temporaires supprimés.
============== SCAN ADDITIONNEL ==============
** Mozilla Firefox Version [3.6.13 (fr)] **
-- C:\Users\Ordi\AppData\Roaming\Mozilla\FireFox\Profiles\jq1licke.default\Prefs.js --
browser.download.dir, C:\\Users\\Ordi\\Desktop
browser.download.lastDir, C:\\Users\\Ordi\\Desktop
browser.search.selectedEngine, Google
browser.startup.homepage, www.easysear.ch/
browser.startup.homepage_override.mstone, rv:1.9.2.13
keyword.URL, hxxp://search.live.com/results.aspx?mkt=fr-FR&FORM=MIMWA5&q=
========================================
** Internet Explorer Version [8.0.7600.16385] **
[HKCU\Software\Microsoft\Internet Explorer\Main]
Default_Page_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Do404Search: 0x01000000
Enable Browser Extensions: yes
Local Page: C:\Windows\system32\blank.htm
Search bar: hxxp://go.microsoft.com/fwlink/?linkid=54896
Show_ToolBar: yes
Start Page: hxxp://fr.msn.com/
[HKLM\Software\Microsoft\Internet Explorer\Main]
AutoHide: yes
Default_Page_URL: hxxp://go.microsoft.com/fwlink/?LinkId=54896
Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Delete_Temp_Files_On_Exit: yes
Local Page: C:\Windows\System32\blank.htm
Search bar: hxxp://search.msn.com/spbasic.htm
Search Page: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Start Page: hxxp://fr.msn.com/
[HKLM\Software\Microsoft\Internet Explorer\ABOUTURLS]
Tabs: res://ieframe.dll/tabswelcome.htm
Blank: res://mshtml.dll/blank.htm
========================================
C:\Program Files\Ad-Remover\Quarantine: 22 Fichier(s)
C:\Program Files\Ad-Remover\Backup: 17 Fichier(s)
C:\Ad-Report-CLEAN[1].txt - 05/01/2011 (4878 Octet(s))
C:\Ad-Report-CLEAN[2].txt - 05/01/2011 (2420 Octet(s))
Fin à: 14:25:28, 05/01/2011
============== E.O.F ============== -
-
-
vu l'évolution constante d'ADR au niveau des infections, il vaut mieux le désinstaller.
si necessaire, tu peux le retélécharger :-)
sur ce, bon surf et bonne journée ;()
O.o°*??? Membre, Contributeur Sécurité CCM o°.Oø¤º°'°º¤ø -
pour répondre,
merci d'utiliser le bouton vert sous mon message :-)
relance ADR, clique sur Nettoyer
poste son rapport-
Bonjour,
J'ai le même problème easysearch sur mozilla, j'ai installé adremover, voici le rapport merci de me dire ce qu'il faut faire
.
======= RAPPORT D'AD-REMOVER 2.0.0.0,D | UNIQUEMENT XP/VISTA/7 =======
.
Mis à jour par C_XX le 19/05/10 à 19:20
Contact: AdRemover.contact@gmail.com
Site web: http://pagesperso-orange.fr/NosTools/ad_remover.html
.
Lancé à: 13:06:35 le 27/12/2010 | Mode normal | Option: CLEAN
Exécuté de: C:\Ad-Remover\ADR.exe
SE: Microsoft Windows 7 Édition Familiale Premium ( - X64)
Nom du PC: ZONELIBRE-PC (eMachines eMachines G630)
Utilisateur actuel: zone libre
.
============== ÉLÉMENT(S) NEUTRALISÉ(S) ==============
.
.
C:\Users\zone libre\AppData\Roaming\Mozilla\FireFox\Profiles\cmykb8um.default\searchplugins\askcom.xml
(!) -- Fichiers temporaires supprimés.
.
HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{171DEBEB-C3D4-40b7-AC73-056A5EBA4A7E}
.
.
============== SCAN ADDITIONNEL ==============
.
* Mozilla FireFox Version 3.6.13 (fr) *
.
C:\Users\zone libre\..\cmykb8um.default\prefs.js - browser.search.defaultenginename: Ask.com
C:\Users\zone libre\..\cmykb8um.default\prefs.js - browser.search.selectedEngine: Google
C:\Users\zone libre\..\cmykb8um.default\prefs.js - browser.startup.homepage: hxxp://fr.start3.mozilla.com/firefox?client=firefox-a&rls=org.mozilla:fr:official
C:\Users\zone libre\..\cmykb8um.default\prefs.js - browser.startup.homepage_override.mstone: rv:1.9.2.13
.
EFFACÉ: C:\Users\zone libre\..\cmykb8um.default\prefs.js - user_pref("browser.search.defaultengine", "Ask.com");
EFFACÉ: C:\Users\zone libre\..\cmykb8um.default\prefs.js - user_pref("browser.search.defaultenginename", "Ask.com");
EFFACÉ: C:\Users\zone libre\..\cmykb8um.default\prefs.js - user_pref("browser.search.order.1", "Ask.com");
.
* Internet Explorer Version 8.0.7600.16385 *
.
[HKCU\Software\Microsoft\Internet Explorer\Main]
.
Default_Page_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Do404Search: 0x01000000
Enable Browser Extensions: yes
Local Page: C:\Windows\system32\blank.htm
Search bar: hxxp://go.microsoft.com/fwlink/?linkid=54896
Show_ToolBar: yes
Start Page: hxxp://fr.msn.com/
.
[HKLM\Software\Microsoft\Internet Explorer\Main]
.
AutoHide: yes
Default_Page_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Delete_Temp_Files_On_Exit: yes
Local Page: C:\Windows\SysWOW64\blank.htm
Search bar: hxxp://search.msn.com/spbasic.htm
Search Page: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Start Page: hxxp://fr.msn.com/
.
[HKLM\Software\Microsoft\Internet Explorer\ABOUTURLS]
.
Tabs: res://ieframe.dll/tabswelcome.htm
Blank: res://mshtml.dll/blank.htm
.
========================================
.
C:\Ad-Remover\Quarantine: 1 Fichier(s)
C:\Ad-Remover\Backup: 14 Fichier(s)
.
C:\Ad-Report-CLEAN[1].txt - 2880 Octet(s)
.
Fin à: 13:08:20, 27/12/2010
.
============== E.O.F - CLEAN[1] ============== -
Bonjour Electricien69!
J'ai un problème avec easysearch aussi, j'ai donc suivi tes conseils et voici le rapport d'Ad-R
======= REPORT FROM AD-REMOVER 2.0.0.2,D | ONLY XP/VISTA/7 =======
Updated by TeamXscript on 29/01/11 at 16:00
Contact: AdRemover[DOT]contact[AT]gmail[DOT]com
website: http://www.teamxscript.org
C:\Program Files\Ad-Remover\main.exe (CLEAN [1]) -> Launched at 16:34:03 on 06/02/2011, Normal boot
Microsoft® Windows Vista(TM) Home Premium Service Pack 2 (X86)
user@USER-PC (TOSHIBA Satellite L350)
============== ACTION(S) ==============
Service: "ResultBar Service" Service stopped and deleted
Service: "sdmBackupIP" Service stopped and deleted
Folder deleted: C:\Program Files\Mozilla FireFox\extensions\{34EFA911-B536-4C08-BECE-CD5E55C875B0}
Folder deleted: C:\Program Files\Installer
File deleted: C:\Windows\system32\Utils.dll
Folder deleted: C:\Windows\BackupIP
File deleted: C:\Users\user\AppData\Roaming\Mozilla\FireFox\Profiles\x2b6wp7a.default\searchplugins\askcom.xml
Folder deleted: C:\Users\user\AppData\Roaming\Mozilla\FireFox\Profiles\x2b6wp7a.default\conduit
Folder deleted: C:\Users\user\AppData\Roaming\Mozilla\FireFox\Profiles\x2b6wp7a.default\ConduitEngine
Folder deleted: C:\Users\user\AppData\Roaming\Mozilla\FireFox\Profiles\x2b6wp7a.default\extensions\engine@conduit.com
File deleted: C:\Users\user\AppData\Roaming\Mozilla\FireFox\Profiles\x2b6wp7a.default\searchplugins\conduit.xml
Folder deleted: C:\Users\user\AppData\LocalLow\Conduit
Folder deleted: C:\Program Files\Conduit
Folder deleted: C:\Users\user\AppData\LocalLow\ConduitEngine
Folder deleted: C:\Program Files\ConduitEngine
Folder deleted: C:\Program Files\AutocompletePro
Folder deleted: C:\Users\user\AppData\LocalLow\PriceGong
Folder deleted: C:\ProgramData\ResultBar
Folder deleted: C:\Program Files\ResultBar
Folder deleted: C:\Users\user\AppData\LocalLow\ShoppingReport2
Folder deleted: C:\Program Files\ShoppingReport2
Folder deleted: C:\Users\user\AppData\Local\networker
(!) -- Temporary files deleted.
-- File opened: C:\Users\user\AppData\Roaming\Mozilla\FireFox\Profiles\x2b6wp7a.default\Prefs.js --
Line deleted: user_pref("CT2269050.SavedHomepage", "hxxp://fr.ask.com?o=14772&l=dis");
Line deleted: user_pref("CT2269050.SearchEngine", "Search||hxxp://search.conduit.com/Results.aspx?q=UCM_SEARCH_TER...
Line deleted: user_pref("CT2269050.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT226...
Line deleted: user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/799768/795587/FR", "\"0\"")...
Line deleted: user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/909619/905414/FR", "\"0\"")...
Line deleted: user_pref("CommunityToolbar.ETag.hxxp://appsmetadata.toolbar.conduit-services.com/?ctid=CT2405280", ...
Line deleted: user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=GottenApps&lo...
Line deleted: user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=OtherApps&loc...
Line deleted: user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=SharedApps&lo...
Line deleted: user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=Toolbar&local...
Line deleted: user_pref("CommunityToolbar.ETag.hxxp://servicemap.conduit-services.com/toolbar/", "\"63427934310393...
Line deleted: user_pref("CommunityToolbar.ETag.hxxp://settings.engine.conduit-services.com/?browser=FF&lut=0", "63...
Line deleted: user_pref("CommunityToolbar.ETag.hxxp://settings.engine.conduit-services.com/?browser=FF&lut=11/8/20...
Line deleted: user_pref("CommunityToolbar.ETag.hxxp://settings.toolbar.search.conduit.com/root/CT2405280/CT2405280...
Line deleted: user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/StarFleet/equalize...
Line deleted: user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/StarFleet/minimize...
Line deleted: user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/StarFleet/play.gif...
Line deleted: user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/StarFleet/stop.gif...
Line deleted: user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/StarFleet/vol.gif"...
Line deleted: user_pref("CommunityToolbar.ETag.hxxp://translation.toolbar.conduit-services.com/?locale=EB_LOCALE",...
Line deleted: user_pref("CommunityToolbar.ETag.hxxp://translation.toolbar.conduit-services.com/?locale=en-us", "\"...
Line deleted: user_pref("CommunityToolbar.EngineOwner", "ConduitEngine");
Line deleted: user_pref("CommunityToolbar.EngineOwnerGuid", "engine@conduit.com");
Line deleted: user_pref("CommunityToolbar.EngineOwnerToolbarId", "conduitengine");
Line deleted: user_pref("CommunityToolbar.IsMyStuffImportedToEngine", true);
Line deleted: user_pref("CommunityToolbar.OriginalEngineOwner", "CT2405280");
Line deleted: user_pref("CommunityToolbar.OriginalEngineOwnerGuid", "{414b6d9d-4a95-4e8d-b5b1-149dd2d93bb3}");
Line deleted: user_pref("CommunityToolbar.OriginalEngineOwnerToolbarId", "softonic-eng7");
Line deleted: user_pref("CommunityToolbar.SearchFromAddressBarSavedUrl", "hxxp://mp3tubetoolbarsearch.com/?prt=pin...
Line deleted: user_pref("CommunityToolbar.ToolbarsList", "CT2269050,ConduitEngine");
Line deleted: user_pref("CommunityToolbar.ToolbarsList2", "CT2269050");
Line deleted: user_pref("CommunityToolbar.alert.alertInfoInterval", 1440);
Line deleted: user_pref("CommunityToolbar.alert.alertInfoLastCheckTime", "Sun Feb 06 2011 12:56:12 GMT+0100 (Roman...
Line deleted: user_pref("CommunityToolbar.alert.clientsServerUrl", "hxxp://alert.client.conduit.com");
Line deleted: user_pref("CommunityToolbar.alert.locale", "en");
Line deleted: user_pref("CommunityToolbar.alert.loginIntervalMin", 1440);
Line deleted: user_pref("CommunityToolbar.alert.loginLastCheckTime", "Sat Feb 05 2011 23:14:29 GMT+0100 (Romance S...
Line deleted: user_pref("CommunityToolbar.alert.loginLastUpdateTime", "1291052234");
Line deleted: user_pref("CommunityToolbar.alert.messageShowTimeSec", 20);
Line deleted: user_pref("CommunityToolbar.alert.servicesServerUrl", "hxxp://alert.services.conduit.com");
Line deleted: user_pref("CommunityToolbar.alert.showTrayIcon", false);
Line deleted: user_pref("CommunityToolbar.alert.userCloseIntervalMin", 300);
Line deleted: user_pref("CommunityToolbar.alert.userId", "90fc0fb7-d86f-4dee-b47d-252861afa88e");
Line deleted: user_pref("CommunityToolbar.facebook.settingsLastCheckTime", "Wed Dec 15 2010 13:39:55 GMT+0100 (Rom...
Line deleted: user_pref("CommunityToolbar.keywordURLSelectedCTID", "CT2405280");
Line deleted: user_pref("ConduitEngine.FirstTime", true);
Line deleted: user_pref("ConduitEngine.FirstTimeFF3", true);
Line deleted: user_pref("ConduitEngine.HasUserGlobalKeys", true);
Line deleted: user_pref("ConduitEngine.HideEngineAfterRestart", false);
Line deleted: user_pref("ConduitEngine.Initialize", true);
Line deleted: user_pref("ConduitEngine.InitializeCommonPrefs", true);
Line deleted: user_pref("ConduitEngine.InstalledDate", "Thu Dec 09 2010 23:46:15 GMT+0100 (Romance Standard Time)"...
Line deleted: user_pref("ConduitEngine.IsMulticommunity", false);
Line deleted: user_pref("ConduitEngine.IsOpenThankYouPage", false);
Line deleted: user_pref("ConduitEngine.IsOpenUninstallPage", true);
Line deleted: user_pref("ConduitEngine.LanguagePackLastCheckTime", "Wed Dec 15 2010 13:39:53 GMT+0100 (Romance Sta...
Line deleted: user_pref("ConduitEngine.LastLogin_3.2.1.3", "Wed Dec 15 2010 17:48:21 GMT+0100 (Romance Standard Ti...
Line deleted: user_pref("ConduitEngine.PublisherContainerWidth", 0);
Line deleted: user_pref("ConduitEngine.SearchFromAddressBarIsInit", true);
Line deleted: user_pref("ConduitEngine.SettingsLastCheckTime", "Wed Dec 15 2010 17:07:16 GMT+0100 (Romance Standar...
Line deleted: user_pref("ConduitEngine.UserID", "UN16572820148490341");
Line deleted: user_pref("ConduitEngine.engineLocale", "en-US");
Line deleted: user_pref("ConduitEngine.enngineContextMenuLastCheckTime", "Wed Dec 15 2010 13:39:53 GMT+0100 (Roman...
Line deleted: user_pref("ConduitEngine.initDone", true);
Line deleted: user_pref("ConduitEngine.usagesFlag", 1);
Line deleted: user_pref("browser.search.defaultengine", "Ask.com");
Line deleted: user_pref("browser.search.defaultenginename", "Ask.com");
Line deleted: user_pref("browser.search.defaulturl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2405280&Sea...
Line deleted: user_pref("browser.search.order.1", "Ask.com");
Line deleted: user_pref("browser.search.selectedEngine", "Ask.com");
-- File closed --
Key deleted: HKLM\Software\Classes\CLSID\{0FB6A909-6086-458F-BD92-1F8EE10042A0}
Key deleted: HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0FB6A909-6086-458F-BD92-1F8EE10042A0}
Key deleted: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{0FB6A909-6086-458F-BD92-1F8EE10042A0}
Key deleted: HKLM\Software\Classes\CLSID\{242617C7-6DE1-440F-BEDC-E2D926B55C1F}
Key deleted: HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{242617C7-6DE1-440F-BEDC-E2D926B55C1F}
Key deleted: HKLM\Software\Classes\CLSID\{30F9B915-B755-4826-820B-08FBA6BD249D}
Key deleted: HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{30F9B915-B755-4826-820B-08FBA6BD249D}
Key deleted: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{30F9B915-B755-4826-820B-08FBA6BD249D}
Key deleted: HKLM\Software\Classes\CLSID\{42166E31-A016-4609-8DF8-AB99DD9EF2BC}
Key deleted: HKLM\Software\Classes\Interface\{030C9927-10FC-4169-97A2-55BECD5D88D8}
Key deleted: HKLM\Software\Classes\Interface\{0EB3F101-224A-4B2B-9E5B-DF720857529C}
Key deleted: HKLM\Software\Classes\Interface\{A1F1ECD3-4806-44C6-A869-F0DADF11C57C}
Key deleted: HKLM\Software\Classes\Interface\{C9AE652B-8C99-4AC2-B556-8B501182874E}
Key deleted: HKLM\Software\Classes\TypeLib\{01BCB858-2F62-4F06-A8F4-48F927C15333}
Key deleted: HKLM\Software\Classes\TypeLib\{B035BA6B-57CD-4F72-B545-65BE465FCAF6}
Key deleted: HKLM\Software\Classes\TypeLib\{D44FD6F0-9746-484E-B5C4-C66688393872}
Key deleted: HKLM\Software\Classes\TypeLib\{F244A744-534D-4A46-855F-C0C7E9F27DAA}
Key deleted: HKLM\Software\Classes\Conduit.Engine
Key deleted: HKLM\Software\Classes\ShoppingReport2.HbAx
Key deleted: HKLM\Software\Classes\ShoppingReport2.HbAx.1
Key deleted: HKLM\Software\Classes\ShoppingReport2.HbInfoBand
Key deleted: HKLM\Software\Classes\ShoppingReport2.HbInfoBand.1
Key deleted: HKLM\Software\Classes\ShoppingReport2.IEButton
Key deleted: HKLM\Software\Classes\ShoppingReport2.IEButton.1
Key deleted: HKLM\Software\Classes\ShoppingReport2.IEButtonA
Key deleted: HKLM\Software\Classes\ShoppingReport2.IEButtonA.1
Key deleted: HKLM\Software\Classes\ShoppingReport2.RprtCtrl
Key deleted: HKLM\Software\Classes\ShoppingReport2.RprtCtrl.1
Key deleted: HKLM\Software\Classes\SuggestMeYes.SuggestMeYesBHO
Key deleted: HKLM\Software\Classes\SuggestMeYes.SuggestMeYesBHO.1
Key deleted: HKLM\Software\Classes\Toolbar.CT2269050
Key deleted: HKLM\Software\Classes\Toolbar.CT2405280
Key deleted: HKLM\Software\Classes\AppID\AutocompletePro.DLL
Key deleted: HKLM\Software\Classes\AppID\{442F13BC-2031-42D5-9520-437F65271153}
Key deleted: HKLM\Software\Install Pedia Limited
Key deleted: HKLM\Software\ResultBar
Key deleted: HKLM\Software\Conduit
Key deleted: HKLM\Software\conduitEngine
Key deleted: HKLM\Software\ShoppingReport2
Key deleted: HKCU\Software\AutocompletePro
Key deleted: HKCU\Software\Conduit
Key deleted: HKCU\Software\ShoppingReport2
Key deleted: HKCU\Software\AppDataLow\Toolbar
Key deleted: HKCU\Software\AppDataLow\Software\Conduit
Key deleted: HKCU\Software\AppDataLow\Software\conduitEngine
Key deleted: HKCU\Software\AppDataLow\Software\PriceGong
Key deleted: HKCU\Software\AppDataLow\Software\ShoppingReport2
Key deleted: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{171DEBEB-C3D4-40b7-AC73-056A5EBA4A7E}
Key deleted: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}
Key deleted: HKLM\Software\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}
Key deleted: HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E231BC7D-3F0C-43DB-8927-08EDE52BE8BB}
Key deleted: HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\AutocompletePro3_is1
Key deleted: HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\conduitEngine
Key deleted: HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\ShoppingReport2
Key deleted: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{DB38E21A-0133-419D-92AD-ECDFD5244D6D}
Key deleted: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EB620C54-E229-4942-87CE-E717109FC8C6}
Key deleted: HKLM\Software\Microsoft\Internet Explorer\Extensions\{DB38E21A-0133-419D-92AD-ECDFD5244D6D}
Key deleted: HKLM\Software\Microsoft\Internet Explorer\Extensions\{EB620C54-E229-4942-87CE-E717109FC8C6}
Value deleted: HKLM\Software\Microsoft\Windows\CurrentVersion\Run|installer
Value deleted: HKLM\Software\Microsoft\Internet Explorer\Toolbar|{30F9B915-B755-4826-820B-08FBA6BD249D}
Value deleted: HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser|{D4027C7F-154A-4066-A1AD-4243D8127440}
Value deleted: HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser|{30F9B915-B755-4826-820B-08FBA6BD249D}
============== ADDITIONNAL SCAN ==============
** Mozilla Firefox Version [3.6.13 (fr)] **
-- C:\Users\user\AppData\Roaming\Mozilla\FireFox\Profiles\x2b6wp7a.default\User.js --
keyword.URL, hxxp://mp3tubetoolbarsearch.com/?prt=pinballtb02ff&Keywords=
-- C:\Users\user\AppData\Roaming\Mozilla\FireFox\Profiles\x2b6wp7a.default\Prefs.js --
browser.download.lastDir, C:\\Users\\user\\Pictures
browser.search.selectedEngineURL, hxxp://mp3tubetoolbarsearch.com/?tmp=toolbar_Mp3Tube_results&prt=pinballtb01ff&clid=3c...
browser.startup.homepage, hxxp://fr.start3.mozilla.com/firefox?client=firefox-a&rls=org.mozilla:fr:official
browser.startup.homepage_override.mstone, rv:1.9.2.13
keyword.URL, hxxp://mp3tubetoolbarsearch.com/?prt=pinballtb02ff&Keywords=
========================================
** Internet Explorer Version [7.0.6002.18005] **
[HKCU\Software\Microsoft\Internet Explorer\Main]
Default_Page_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Do404Search: 0x01000000
Enable Browser Extensions: yes
Local Page: C:\Windows\system32\blank.htm
Search bar: hxxp://go.microsoft.com/fwlink/?linkid=54896
Show_ToolBar: yes
Start Page: hxxp://fr.msn.com/
Use Search Asst: no
[HKLM\Software\Microsoft\Internet Explorer\Main]
AutoHide: yes
Default_Page_URL: hxxp://go.microsoft.com/fwlink/?LinkId=54896
Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Delete_Temp_Files_On_Exit: yes
Enable Browser Extensions: yes
Local Page: C:\Windows\system32\blank.htm
Search bar: hxxp://search.msn.com/spbasic.htm
Search Page: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Start Page: hxxp://fr.msn.com/
Use Search Asst: no
[HKLM\Software\Microsoft\Internet Explorer\ABOUTURLS]
Tabs: res://ieframe.dll/tabswelcome.htm
Blank: res://mshtml.dll/blank.htm
========================================
C:\Program Files\Ad-Remover\Quarantine: 146 File(s)
C:\Program Files\Ad-Remover\Backup: 16 File(s)
C:\Ad-Report-CLEAN[1].txt - 06/02/2011 (15674 Byte(s))
End at: 16:35:56, 06/02/2011
============== E.O.F ==============
-
-
tu l'as passé 2 fois,
mais toujours en mode recherche,
passe à nettoyage
-
Voici le rapporte après le nettoyage, merci
======= RAPPORT D'AD-REMOVER 2.0.0.1,F | UNIQUEMENT XP/VISTA/7 =======
Mis à jour par C_XX le 16/09/10 à 13:30
Contact: AdRemover.contact[AT]gmail.com
Site web: http://www.teamxscript.org
C:\Program Files\Ad-Remover\main.exe (SCAN [4]) -> Lancé à 12:26:13 le 31/10/2010, Mode normal
Microsoft® Windows Vista(TM) Édition Familiale Premium Service Pack 2 (X86)
VALOU@PC-DE-VALOU (Sony Corporation VGN-NW11S_T)
============== RECHERCHE ==============
0,Clé trouvée: HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Scheduled Update for Ask Toolbar
============== SCAN ADDITIONNEL ==============
** Mozilla Firefox Version [3.6.12 (fr)] **
-- C:\Users\VALOU\AppData\Roaming\Mozilla\FireFox\Profiles\3vh62ciw.default\User.js --
keyword.URL, hxxp://redirecterror.sfr.fr/?q=
-- C:\Users\VALOU\AppData\Roaming\Mozilla\FireFox\Profiles\3vh62ciw.default\Prefs.js --
browser.download.lastDir, C:\\Users\\VALOU\\Desktop\\Travail Thibault\\Travail Thibault
browser.search.selectedEngine, Google Powered Search
browser.startup.homepage, hxxp://www.google.fr/
browser.startup.homepage_override.mstone, rv:1.9.2.12
keyword.URL, hxxp://redirecterror.sfr.fr/?q=
========================================
** Internet Explorer Version [7.0.6002.18005] **
[HKCU\Software\Microsoft\Internet Explorer\Main]
Default_Page_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Do404Search: 0x01000000
Enable Browser Extensions: yes
Local Page: C:\Windows\system32\blank.htm
Search bar: hxxp://go.microsoft.com/fwlink/?linkid=54896
Show_ToolBar: yes
Start Page: hxxp://fr.msn.com/
Use Search Asst: no
[HKLM\Software\Microsoft\Internet Explorer\Main]
AutoHide: yes
Default_Page_URL: hxxp://go.microsoft.com/fwlink/?LinkId=54896
Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Delete_Temp_Files_On_Exit: yes
Enable Browser Extensions: yes
Local Page: C:\Windows\system32\blank.htm
Search bar: hxxp://search.msn.com/spbasic.htm
Search Page: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Start Page: hxxp://fr.msn.com/
Use Search Asst: no
[HKLM\Software\Microsoft\Internet Explorer\ABOUTURLS]
Tabs: res://ieframe.dll/tabswelcome.htm
Blank: res://mshtml.dll/blank.htm
========================================
C:\Program Files\Ad-Remover\Quarantine: 317 Fichier(s)
C:\Program Files\Ad-Remover\Backup: 20 Fichier(s)
C:\Ad-Report-CLEAN[1].txt - 31/10/2010 (10259 Octet(s))
C:\Ad-Report-SCAN[1].txt - 01/10/2010 (546 Octet(s))
C:\Ad-Report-SCAN[2].txt - 31/10/2010 (10063 Octet(s))
C:\Ad-Report-SCAN[3].txt - 31/10/2010 (10120 Octet(s))
C:\Ad-Report-SCAN[4].txt - 31/10/2010 (2768 Octet(s))
Fin à: 12:30:16, 31/10/2010
============== E.O.F ==============
-
-
Voilà le rapport , et merci
======= RAPPORT D'AD-REMOVER 2.0.0.1,F | UNIQUEMENT XP/VISTA/7 =======
Mis à jour par C_XX le 16/09/10 à 13:30
Contact: AdRemover.contact[AT]gmail.com
Site web: http://www.teamxscript.org
C:\Program Files\Ad-Remover\main.exe (SCAN [2]) -> Lancé à 11:22:42 le 31/10/2010, Mode normal
Microsoft® Windows Vista(TM) Édition Familiale Premium Service Pack 2 (X86)
VALOU@PC-DE-VALOU (Sony Corporation VGN-NW11S_T)
============== RECHERCHE ==============
Service: "Application Updater" Présent
Service: "IP netservices" Présent
0,Dossier trouvé: C:\Windows\Installer\{86D4B82A-ABED-442A-BE86-96357B70F4FE}
0,Dossier trouvé: C:\Program Files\InstallPedia
0,Fichier trouvé: C:\Program Files\Mozilla FireFox\extensions\pdfforge@mybrowserbar.com
0,Fichier trouvé: C:\Program Files\Mozilla Firefox\extensions\searchsettings@spigot.com
0,Fichier trouvé: C:\Windows\system32\Tasks\Scheduled Update for Ask Toolbar
0,Dossier trouvé: C:\Users\VALOU\AppData\Roaming\Mozilla\FireFox\Profiles\3vh62ciw.default\extensions\toolbar@ask.com
0,Fichier trouvé: C:\Users\VALOU\AppData\Roaming\Mozilla\FireFox\Profiles\3vh62ciw.default\searchplugins\askcom.xml
0,Fichier trouvé: C:\Users\VALOU\AppData\Roaming\Mozilla\FireFox\Profiles\3vh62ciw.default\searchplugins\conduit.xml
0,Dossier trouvé: C:\Program Files\Application Updater
0,Dossier trouvé: C:\Program Files\Ask.com
0,Dossier trouvé: C:\Users\VALOU\AppData\Local\AskToolbar
0,Dossier trouvé: C:\Users\VALOU\AppData\LocalLow\AskToolbar
0,Dossier trouvé: C:\Users\VALOU\AppData\LocalLow\pdfforge
0,Dossier trouvé: C:\Program Files\pdfforge Toolbar
0,Dossier trouvé: C:\Users\VALOU\AppData\LocalLow\Search Settings
3,Fichier trouvé: C:\Windows\Installer\4b5398.msi
3,Fichier trouvé: C:\Windows\Installer\75fe62.msi
-- Fichier ouvert: C:\Users\VALOU\AppData\Roaming\Mozilla\FireFox\Profiles\3vh62ciw.default\Prefs.js --
Ligne trouvée: user_pref("CT2504091.SearchEngine", "Search||hxxp://search.conduit.com/Results.aspx?q=UCM_SEARCH_TER...
Ligne trouvée: user_pref("CT2504091.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT250...
Ligne trouvée: user_pref("browser.search.defaultengine", "Ask.com");
Ligne trouvée: user_pref("browser.search.defaultenginename", "Ask.com");
Ligne trouvée: user_pref("browser.search.defaulturl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2504091&Sea...
Ligne trouvée: user_pref("browser.search.order.1", "Ask.com");
Ligne trouvée: user_pref("extensions.asktb.cbid", "OF");
Ligne trouvée: user_pref("extensions.asktb.default-channel-url-mask", "hxxp://fr.ask.com/web?q={query}&o={o}&l={l}&...
Ligne trouvée: user_pref("extensions.asktb.fresh-install", false);
Ligne trouvée: user_pref("extensions.asktb.l", "dis");
Ligne trouvée: user_pref("extensions.asktb.last-config-req", "1288518005547");
Ligne trouvée: user_pref("extensions.asktb.locale", "fr_FR");
Ligne trouvée: user_pref("extensions.asktb.o", "16050");
Ligne trouvée: user_pref("extensions.asktb.overlay-reloaded-using-restart", true);
Ligne trouvée: user_pref("extensions.asktb.qsrc", "2871");
Ligne trouvée: user_pref("extensions.asktb.r", "4");
Ligne trouvée: user_pref("extensions.asktb.to", "16105");
Ligne trouvée: user_pref("extensions.enabledItems", "{CAFEEFAC-0016-0000-0016-ABCDEFFEDCBA}:6.0.16,{20a82645-c095-4...
-- Fichier Fermé --
1,Clé trouvée: HKLM\Software\Classes\CLSID\{00000000-6E41-4FD3-8538-502F5495E5FC}
1,Clé trouvée: HKLM\Software\Classes\CLSID\{B922D405-6D13-4A2B-AE89-08A030DA4402}
1,Clé trouvée: HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B922D405-6D13-4A2B-AE89-08A030DA4402}
1,Clé trouvée: HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B922D405-6D13-4A2B-AE89-08A030DA4402}
1,Clé trouvée: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{B922D405-6D13-4A2B-AE89-08A030DA4402}
1,Clé trouvée: HKLM\Software\Classes\CLSID\{D4027C7F-154A-4066-A1AD-4243D8127440}
1,Clé trouvée: HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}
1,Clé trouvée: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D4027C7F-154A-4066-A1AD-4243D8127440}
1,Clé trouvée: HKLM\Software\Classes\CLSID\{E312764E-7706-43F1-8DAB-FCDD2B1E416D}
1,Clé trouvée: HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E312764E-7706-43F1-8DAB-FCDD2B1E416D}
1,Clé trouvée: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{E312764E-7706-43F1-8DAB-FCDD2B1E416D}
1,Clé trouvée: HKLM\Software\Classes\Interface\{6C434537-053E-486D-B62A-160059D9D456}
1,Clé trouvée: HKLM\Software\Classes\Interface\{91CF619A-4686-4CA4-9232-3B2E6B63AA92}
1,Clé trouvée: HKLM\Software\Classes\Interface\{AC71B60E-94C9-4EDE-BA46-E146747BB67E}
1,Clé trouvée: HKLM\Software\Classes\TypeLib\{2996F0E7-292B-4CAE-893F-47B8B1C05B56}
0,Clé trouvée: HKLM\Software\Classes\GenericAskToolbar.ToolbarWnd
0,Clé trouvée: HKLM\Software\Classes\GenericAskToolbar.ToolbarWnd.1
0,Clé trouvée: HKLM\Software\Classes\Toolbar.CT2504091
0,Clé trouvée: HKLM\Software\Classes\AppID\GenericAskToolbar.DLL
1,Clé trouvée: HKLM\Software\Classes\AppID\{9B0CB95C-933A-4B8C-B6D4-EDCD19A43874}
0,Clé trouvée: HKLM\Software\Application Updater
0,Clé trouvée: HKLM\Software\Conduit
0,Clé trouvée: HKLM\Software\pdfforge
0,Clé trouvée: HKLM\Software\Search Settings
0,Clé trouvée: HKCU\Software\Ask.com
0,Clé trouvée: HKCU\Software\AskToolbar
0,Clé trouvée: HKCU\Software\Conduit
0,Clé trouvée: HKCU\Software\Search Settings
0,Clé trouvée: HKCU\Software\AppDataLow\AskToolbarInfo
0,Clé trouvée: HKCU\Software\AppDataLow\Software\AskToolbar
0,Clé trouvée: HKCU\Software\AppDataLow\Software\pdfforge
3,Clé trouvée: HKLM\Software\Classes\Installer\Products\3D7B197543B881247905A6E8540DDA23
3,Clé trouvée: HKLM\Software\Classes\Installer\Products\A28B4D68DEBAA244EB686953B7074FEF
3,Clé trouvée: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Products\3D7B197543B881247905A6E8540DDA23
3,Clé trouvée: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Products\A28B4D68DEBAA244EB686953B7074FEF
3,Clé trouvée: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{171DEBEB-C3D4-40b7-AC73-056A5EBA4A7E}
3,Clé trouvée: HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A5AA24EA-11B8-4113-95AE-9ED71DEAF12A}
3,Clé trouvée: HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A5AA24EA-11B8-4113-95AE-9ED71DEAF12A}
3,Clé trouvée: HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B922D405-6D13-4A2B-AE89-08A030DA4402}
0,Clé trouvée: HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{5791B7D3-8B34-4218-9750-6A8E45D0AD32}
0,Clé trouvée: HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{86D4B82A-ABED-442A-BE86-96357B70F4FE}
0,Clé trouvée: HKCU\Software\Microsoft\Internet Explorer\LowRegistry\Search Settings
0,Clé trouvée: HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Scheduled Update for Ask Toolbar
0,Valeur trouvée: HKLM\Software\Microsoft\Windows\CurrentVersion\Run|IP Network
0,Valeur trouvée: HKLM\Software\Microsoft\Windows\CurrentVersion\Run|SearchSettings
0,Valeur trouvée: HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks|{00000000-6E41-4FD3-8538-502F5495E5FC}
0,Valeur trouvée: HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks|{E312764E-7706-43F1-8DAB-FCDD2B1E416D}
0,Valeur trouvée: HKLM\Software\Microsoft\Internet Explorer\Toolbar|{B922D405-6D13-4A2B-AE89-08A030DA4402}
0,Valeur trouvée: HKLM\Software\Microsoft\Internet Explorer\Toolbar|{D4027C7F-154A-4066-A1AD-4243D8127440}
0,Valeur trouvée: HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser|{D4027C7F-154A-4066-A1AD-4243D8127440}
============== SCAN ADDITIONNEL ==============
** Mozilla Firefox Version [3.6.12 (fr)] **
-- C:\Users\VALOU\AppData\Roaming\Mozilla\FireFox\Profiles\3vh62ciw.default\User.js --
keyword.URL, hxxp://redirecterror.sfr.fr/?q=
-- C:\Users\VALOU\AppData\Roaming\Mozilla\FireFox\Profiles\3vh62ciw.default\Prefs.js --
browser.download.lastDir, C:\\Users\\VALOU\\Desktop\\Travail Thibault\\Travail Thibault
browser.search.defaultenginename, Ask.com
browser.search.defaulturl, hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2504091&SearchSource=3&q={searchTerms}
browser.search.selectedEngine, Google Powered Search
browser.startup.homepage, hxxp://www.google.fr/
browser.startup.homepage_override.mstone, rv:1.9.2.12
keyword.URL, hxxp://redirecterror.sfr.fr/?q=
========================================
** Internet Explorer Version [7.0.6002.18005] **
[HKCU\Software\Microsoft\Internet Explorer\Main]
Default_Page_URL: hxxp://www.google.com/ig/redirectdomain?brand=SNYT&bmod=EU01
Do404Search: 0x01000000
Enable Browser Extensions: yes
Local Page: C:\Windows\system32\blank.htm
Search Page: hxxp://go.microsoft.com/fwlink/?LinkId=54896
Show_ToolBar: yes
Start Page: hxxp://www.orange.fr/
Use Search Asst: no
[HKLM\Software\Microsoft\Internet Explorer\Main]
AutoHide: yes
Default_Page_URL: hxxp://www.google.com/ig/redirectdomain?brand=SNYT&bmod=EU01
Default_Search_URL: hxxp://go.microsoft.com/fwlink/?LinkId=54896
Delete_Temp_Files_On_Exit: yes
Enable Browser Extensions: yes
Local Page: C:\Windows\system32\blank.htm
Search Page: hxxp://go.microsoft.com/fwlink/?LinkId=54896
Start Page: hxxp://www.google.com/ig/redirectdomain?brand=SNYT&bmod=SNYT
Use Search Asst: no
[HKLM\Software\Microsoft\Internet Explorer\ABOUTURLS]
Tabs: res://ieframe.dll/tabswelcome.htm
Blank: res://mshtml.dll/blank.htm
========================================
C:\Program Files\Ad-Remover\Quarantine: 0 Fichier(s)
C:\Program Files\Ad-Remover\Backup: 2 Fichier(s)
C:\Ad-Report-SCAN[1].txt - 01/10/2010 (546 Octet(s))
C:\Ad-Report-SCAN[2].txt - 31/10/2010 (9934 Octet(s))
Fin à: 11:27:39, 31/10/2010
============== E.O.F ============== -
L'onglet n'est pas surligné et le logiciel ne me propose pas de nettoyer...
-
voici mon rapport:
Clé trouvée: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Products\A28B4D68DEBAA244EB686953B7074FEF
Clé trouvée: HKLM\Software\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}
Clé trouvée: HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A5AA24EA-11B8-4113-95AE-9ED71DEAF12A}
Clé trouvée: HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A5AA24EA-11B8-4113-95AE-9ED71DEAF12A}
Clé trouvée: HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{86D4B82A-ABED-442A-BE86-96357B70F4FE}
Clé trouvée: HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Scheduled Update for Ask Toolbar
Valeur trouvée: HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks|{00000000-6E41-4FD3-8538-502F5495E5FC}
Valeur trouvée: HKLM\Software\Microsoft\Internet Explorer\Toolbar|{D4027C7F-154A-4066-A1AD-4243D8127440}
Valeur trouvée: HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser|{D4027C7F-154A-4066-A1AD-4243D8127440}
============== SCAN ADDITIONNEL ==============
** Internet Explorer Version [8.0.6001.18975] **
[HKCU\Software\Microsoft\Internet Explorer\Main]
AutoHide: yes
Default_Page_URL: hxxp://www.google.com/ig/redirectdomain?brand=SNYT&bmod=EU01
Do404Search: 0x01000000
Enable Browser Extensions: yes
Local Page: C:\Windows\system32\blank.htm
Search bar: hxxp://www.google.com/ie
Search Page: hxxp://www.google.com
Show_ToolBar: yes
Start Page: hxxp://www.google.com/
Use Search Asst: no
[HKLM\Software\Microsoft\Internet Explorer\Main]
AutoHide: yes
Default_Page_URL: hxxp://www.google.com/ig/redirectdomain?brand=SNYT&bmod=SNYT
Default_Search_URL: hxxp://go.microsoft.com/fwlink/?LinkId=54896
Delete_Temp_Files_On_Exit: yes
Enable Browser Extensions: yes
Local Page: C:\Windows\System32\blank.htm
Search Page: hxxp://go.microsoft.com/fwlink/?LinkId=54896
Start Page: hxxp://www.google.com/ig/redirectdomain?brand=SNYT&bmod=SNYT
Use Search Asst: no
[HKLM\Software\Microsoft\Internet Explorer\ABOUTURLS]
Tabs: res://ieframe.dll/tabswelcome.htm
Blank: res://mshtml.dll/blank.htm
========================================
C:\Program Files\Ad-Remover\Quarantine: 0 Fichier(s)
C:\Program Files\Ad-Remover\Backup: 1 Fichier(s)
C:\Ad-Report-SCAN[1].txt - 31/10/2010 (4990 Octet(s))
Fin à: 11:59:39, 31/10/2010
============== E.O.F ============== -
voici le rapport après nettoyage merci
======= RAPPORT D'AD-REMOVER 2.0.0.1,F | UNIQUEMENT XP/VISTA/7 =======
Mis à jour par C_XX le 16/09/10 à 13:30
Contact: AdRemover.contact[AT]gmail.com
Site web: http://www.teamxscript.org
C:\Program Files\Ad-Remover\main.exe (SCAN [4]) -> Lancé à 12:26:13 le 31/10/2010, Mode normal
Microsoft® Windows Vista(TM) Édition Familiale Premium Service Pack 2 (X86)
VALOU@PC-DE-VALOU (Sony Corporation VGN-NW11S_T)
============== RECHERCHE ==============
0,Clé trouvée: HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Scheduled Update for Ask Toolbar
============== SCAN ADDITIONNEL ==============
** Mozilla Firefox Version [3.6.12 (fr)] **
-- C:\Users\VALOU\AppData\Roaming\Mozilla\FireFox\Profiles\3vh62ciw.default\User.js --
keyword.URL, hxxp://redirecterror.sfr.fr/?q=
-- C:\Users\VALOU\AppData\Roaming\Mozilla\FireFox\Profiles\3vh62ciw.default\Prefs.js --
browser.download.lastDir, C:\\Users\\VALOU\\Desktop\\Travail Thibault\\Travail Thibault
browser.search.selectedEngine, Google Powered Search
browser.startup.homepage, hxxp://www.google.fr/
browser.startup.homepage_override.mstone, rv:1.9.2.12
keyword.URL, hxxp://redirecterror.sfr.fr/?q=
========================================
** Internet Explorer Version [7.0.6002.18005] **
[HKCU\Software\Microsoft\Internet Explorer\Main]
Default_Page_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Do404Search: 0x01000000
Enable Browser Extensions: yes
Local Page: C:\Windows\system32\blank.htm
Search bar: hxxp://go.microsoft.com/fwlink/?linkid=54896
Show_ToolBar: yes
Start Page: hxxp://fr.msn.com/
Use Search Asst: no
[HKLM\Software\Microsoft\Internet Explorer\Main]
AutoHide: yes
Default_Page_URL: hxxp://go.microsoft.com/fwlink/?LinkId=54896
Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Delete_Temp_Files_On_Exit: yes
Enable Browser Extensions: yes
Local Page: C:\Windows\system32\blank.htm
Search bar: hxxp://search.msn.com/spbasic.htm
Search Page: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Start Page: hxxp://fr.msn.com/
Use Search Asst: no
[HKLM\Software\Microsoft\Internet Explorer\ABOUTURLS]
Tabs: res://ieframe.dll/tabswelcome.htm
Blank: res://mshtml.dll/blank.htm
========================================
C:\Program Files\Ad-Remover\Quarantine: 317 Fichier(s)
C:\Program Files\Ad-Remover\Backup: 20 Fichier(s)
C:\Ad-Report-CLEAN[1].txt - 31/10/2010 (10259 Octet(s))
C:\Ad-Report-SCAN[1].txt - 01/10/2010 (546 Octet(s))
C:\Ad-Report-SCAN[2].txt - 31/10/2010 (10063 Octet(s))
C:\Ad-Report-SCAN[3].txt - 31/10/2010 (10120 Octet(s))
C:\Ad-Report-SCAN[4].txt - 31/10/2010 (2768 Octet(s))
Fin à: 12:30:16, 31/10/2010
============== E.O.F ============== -
ferme ADR, reclique sur son logo qui se trouve sur ton bureau pour le relancer
clique sur nettoyer,
poste son rapport
-
c'est en effet ce qu'il fallait faire
voilà le rapport
======= RAPPORT D'AD-REMOVER 2.0.0.1,F | UNIQUEMENT XP/VISTA/7 =======
Mis à jour par C_XX le 16/09/10 à 13:30
Contact: AdRemover.contact[AT]gmail.com
Site web: http://www.teamxscript.org
C:\Program Files\Ad-Remover\main.exe (SCAN [4]) -> Lancé à 12:26:13 le 31/10/2010, Mode normal
Microsoft® Windows Vista(TM) Édition Familiale Premium Service Pack 2 (X86)
VALOU@PC-DE-VALOU (Sony Corporation VGN-NW11S_T)
============== RECHERCHE ==============
0,Clé trouvée: HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Scheduled Update for Ask Toolbar
============== SCAN ADDITIONNEL ==============
** Mozilla Firefox Version [3.6.12 (fr)] **
-- C:\Users\VALOU\AppData\Roaming\Mozilla\FireFox\Profiles\3vh62ciw.default\User.js --
keyword.URL, hxxp://redirecterror.sfr.fr/?q=
-- C:\Users\VALOU\AppData\Roaming\Mozilla\FireFox\Profiles\3vh62ciw.default\Prefs.js --
browser.download.lastDir, C:\\Users\\VALOU\\Desktop\\Travail Thibault\\Travail Thibault
browser.search.selectedEngine, Google Powered Search
browser.startup.homepage, hxxp://www.google.fr/
browser.startup.homepage_override.mstone, rv:1.9.2.12
keyword.URL, hxxp://redirecterror.sfr.fr/?q=
========================================
** Internet Explorer Version [7.0.6002.18005] **
[HKCU\Software\Microsoft\Internet Explorer\Main]
Default_Page_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Do404Search: 0x01000000
Enable Browser Extensions: yes
Local Page: C:\Windows\system32\blank.htm
Search bar: hxxp://go.microsoft.com/fwlink/?linkid=54896
Show_ToolBar: yes
Start Page: hxxp://fr.msn.com/
Use Search Asst: no
[HKLM\Software\Microsoft\Internet Explorer\Main]
AutoHide: yes
Default_Page_URL: hxxp://go.microsoft.com/fwlink/?LinkId=54896
Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Delete_Temp_Files_On_Exit: yes
Enable Browser Extensions: yes
Local Page: C:\Windows\system32\blank.htm
Search bar: hxxp://search.msn.com/spbasic.htm
Search Page: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Start Page: hxxp://fr.msn.com/
Use Search Asst: no
[HKLM\Software\Microsoft\Internet Explorer\ABOUTURLS]
Tabs: res://ieframe.dll/tabswelcome.htm
Blank: res://mshtml.dll/blank.htm
========================================
C:\Program Files\Ad-Remover\Quarantine: 317 Fichier(s)
C:\Program Files\Ad-Remover\Backup: 20 Fichier(s)
C:\Ad-Report-CLEAN[1].txt - 31/10/2010 (10259 Octet(s))
C:\Ad-Report-SCAN[1].txt - 01/10/2010 (546 Octet(s))
C:\Ad-Report-SCAN[2].txt - 31/10/2010 (10063 Octet(s))
C:\Ad-Report-SCAN[3].txt - 31/10/2010 (10120 Octet(s))
C:\Ad-Report-SCAN[4].txt - 31/10/2010 (2768 Octet(s))
Fin à: 12:30:16, 31/10/2010
============== E.O.F ==============-
======= RAPPORT D'AD-REMOVER 2.0.0.2,E | UNIQUEMENT XP/VISTA/7 =======
Mis à jour par TeamXscript le 16/02/11
Contact: AdRemover[DOT]contact[AT]gmail[DOT]com
Site web: http://www.teamxscript.org
C:\Program Files\Ad-Remover\main.exe (SCAN [1]) -> Lancé à 07:09:59 le 20/02/2011, Mode normal
Microsoft® Windows Vista(TM) Édition Familiale Premium (X86)
ANNE MARIE@PC-DE-ANNEMARIE (HP-Pavilion RY916AA-ABF a6013.fr)
============== RECHERCHE ==============
Service: "sdmBackupIP" Présent
Dossier trouvé: C:\Program Files\Installer
Fichier trouvé: C:\Windows\system32\Utils.dll
Dossier trouvé: C:\Windows\BackupIP
Fichier trouvé: C:\Users\ANNE MARIE\AppData\Roaming\Mozilla\FireFox\Profiles\rwbfqmuy.default\searchplugins\askcom.xml
Dossier trouvé: C:\Users\ANNE MARIE\AppData\Roaming\Mozilla\FireFox\Profiles\rwbfqmuy.default\conduit
Fichier trouvé: C:\Users\ANNE MARIE\AppData\Roaming\Mozilla\FireFox\Profiles\rwbfqmuy.default\searchplugins\conduit.xml
Dossier trouvé: C:\Users\ANNE MARIE\AppData\Local\networker
-- Fichier ouvert: C:\Users\ANNE MARIE\AppData\Roaming\Mozilla\FireFox\Profiles\rwbfqmuy.default\Prefs.js --
Ligne trouvée: user_pref("CT2583879.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT258...
Ligne trouvée: user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/909619/905414/FR", "\"0\"")...
Ligne trouvée: user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/976699/972460/FR", "\"0\"")...
Ligne trouvée: user_pref("CommunityToolbar.ETag.hxxp://appsmetadata.toolbar.conduit-services.com/?ctid=CT2583879", ...
Ligne trouvée: user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=GottenApps&lo...
Ligne trouvée: user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=OtherApps&loc...
Ligne trouvée: user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=SharedApps&lo...
Ligne trouvée: user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=Toolbar&local...
Ligne trouvée: user_pref("CommunityToolbar.ETag.hxxp://servicemap.conduit-services.com/toolbar/", "\"63428984078257...
Ligne trouvée: user_pref("CommunityToolbar.ETag.hxxp://settings.engine.conduit-services.com/?browser=FF&lut=0", "63...
Ligne trouvée: user_pref("CommunityToolbar.ETag.hxxp://settings.toolbar.search.conduit.com/root/CT2583879/CT2583879...
Ligne trouvée: user_pref("CommunityToolbar.ETag.hxxp://translation.toolbar.conduit-services.com/?locale=fr", "\"634...
Ligne trouvée: user_pref("CommunityToolbar.ETag.hxxp://twitter.com/users/show/20229856.xml", "\"7f05ab4d2430079b9ea...
Ligne trouvée: user_pref("CommunityToolbar.EngineOwner", "CT2583879");
Ligne trouvée: user_pref("CommunityToolbar.EngineOwnerGuid", "{a65e491f-a436-4952-b49a-b24ed99a0f67}");
Ligne trouvée: user_pref("CommunityToolbar.EngineOwnerToolbarId", "tom_s_guide_france");
Ligne trouvée: user_pref("CommunityToolbar.IsMyStuffImportedToEngine", true);
Ligne trouvée: user_pref("CommunityToolbar.OriginalEngineOwner", "CT2583879");
Ligne trouvée: user_pref("CommunityToolbar.OriginalEngineOwnerGuid", "{a65e491f-a436-4952-b49a-b24ed99a0f67}");
Ligne trouvée: user_pref("CommunityToolbar.OriginalEngineOwnerToolbarId", "tom_s_guide_france");
Ligne trouvée: user_pref("CommunityToolbar.ToolbarsList", "CT2583879");
Ligne trouvée: user_pref("CommunityToolbar.ToolbarsList2", "CT2583879");
Ligne trouvée: user_pref("CommunityToolbar.alert.alertInfoInterval", 1440);
Ligne trouvée: user_pref("CommunityToolbar.alert.alertInfoLastCheckTime", "Tue Jan 18 2011 10:08:53 GMT+0100");
Ligne trouvée: user_pref("CommunityToolbar.alert.clientsServerUrl", "hxxp://alert.client.conduit.com");
Ligne trouvée: user_pref("CommunityToolbar.alert.locale", "en");
Ligne trouvée: user_pref("CommunityToolbar.alert.loginIntervalMin", 1440);
Ligne trouvée: user_pref("CommunityToolbar.alert.loginLastCheckTime", "Tue Jan 18 2011 10:08:53 GMT+0100");
Ligne trouvée: user_pref("CommunityToolbar.alert.loginLastUpdateTime", "1291052234");
Ligne trouvée: user_pref("CommunityToolbar.alert.messageShowTimeSec", 20);
Ligne trouvée: user_pref("CommunityToolbar.alert.servicesServerUrl", "hxxp://alert.services.conduit.com");
Ligne trouvée: user_pref("CommunityToolbar.alert.showTrayIcon", false);
Ligne trouvée: user_pref("CommunityToolbar.alert.userCloseIntervalMin", 300);
Ligne trouvée: user_pref("CommunityToolbar.alert.userId", "5f5c2caf-fb6d-4b21-a42c-2e413e72bd8a");
Ligne trouvée: user_pref("CommunityToolbar.facebook.settingsLastCheckTime", "Tue Jan 18 2011 10:08:53 GMT+0100");
Ligne trouvée: user_pref("CommunityToolbar.keywordURLSelectedCTID", "CT2583879");
Ligne trouvée: user_pref("CommunityToolbar.twitter.user_20229856.LastCheckTime", "Tue Jan 18 2011 15:28:45 GMT+0100...
Ligne trouvée: user_pref("browser.search.defaultengine", "Ask.com");
Ligne trouvée: user_pref("keyword.URL", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2583879&q=");
-- Fichier Fermé --
Clé trouvée: HKLM\Software\Classes\Conduit.Engine
Clé trouvée: HKLM\Software\Classes\Toolbar.CT2583879
Clé trouvée: HKLM\Software\Install Pedia Limited
Clé trouvée: HKLM\Software\Conduit
Clé trouvée: HKLM\Software\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}
Clé trouvée: HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\conduitEngine
Valeur trouvée: HKLM\Software\Microsoft\Windows\CurrentVersion\Run|installer
Valeur trouvée: HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser|{D4027C7F-154A-4066-A1AD-4243D8127440}
============== SCAN ADDITIONNEL ==============
-- C:\Users\ANNE MARIE\AppData\Roaming\Mozilla\FireFox\Profiles\rwbfqmuy.default --
Extensions\{a65e491f-a436-4952-b49a-b24ed99a0f67} (Tom's Guide France Community Toolbar)
Searchplugins\askcom.xml (?)
Searchplugins\conduit.xml (hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2583879&SearchSource=3&q={searchTerms} /)
Prefs.js - browser.search.defaultenginename, Search the web (Babylon)
Prefs.js - browser.search.defaulturl, hxxp://search.babylon.com/web/{searchTerms}?babsrc=browsersearch&AF=15627
Prefs.js - browser.search.selectedEngine, Search the web (Babylon)
Prefs.js - browser.startup.homepage, www.easysear.ch/
Prefs.js - browser.startup.homepage_override.mstone, rv:1.9.2.13
Prefs.js - keyword.URL, hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2583879&q=
Prefs.js - browser.startup.homepage, www.easysear.ch/
Prefs.js - browser.startup.homepage, www.easysear.ch/
Prefs.js - browser.startup.homepage, www.easysear.ch/
Prefs.js - browser.startup.homepage, www.easysear.ch/
Prefs.js - browser.startup.homepage, www.easysear.ch/
Prefs.js - browser.startup.homepage, www.easysear.ch/
Prefs.js - browser.startup.homepage, www.easysear.ch/
Prefs.js - browser.startup.homepage, www.easysear.ch/
Prefs.js - browser.startup.homepage, www.easysear.ch/
Prefs.js - browser.startup.homepage, www.easysear.ch/
Prefs.js - browser.startup.homepage, www.easysear.ch/
Prefs.js - browser.startup.homepage, www.easysear.ch/
Prefs.js - browser.startup.homepage, www.easysear.ch/
Prefs.js - browser.startup.homepage, www.easysear.ch/
Prefs.js - browser.startup.homepage, www.easysear.ch/
Prefs.js - browser.startup.homepage, www.easysear.ch/
Prefs.js - browser.startup.homepage, www.easysear.ch/
Prefs.js - browser.startup.homepage, www.easysear.ch/
Prefs.js - browser.startup.homepage, www.easysear.ch/
Prefs.js - browser.startup.homepage, www.easysear.ch/
Prefs.js - browser.startup.homepage, www.easysear.ch/
Prefs.js - browser.startup.homepage, www.easysear.ch/
Prefs.js - browser.startup.homepage, www.easysear.ch/
Prefs.js - browser.startup.homepage, www.easysear.ch/
Prefs.js - browser.startup.homepage, www.easysear.ch/
Prefs.js - browser.startup.homepage, www.easysear.ch/
Prefs.js - browser.startup.homepage, www.easysear.ch/
Prefs.js - browser.startup.homepage, www.easysear.ch/
Prefs.js - browser.startup.homepage, www.easysear.ch/
Prefs.js - browser.startup.homepage, www.easysear.ch/
Prefs.js - browser.startup.homepage, www.easysear.ch/
Prefs.js - browser.startup.homepage, www.easysear.ch/
Prefs.js - browser.startup.homepage, www.easysear.ch/
Prefs.js - browser.startup.homepage, www.easysear.ch/
Prefs.js - browser.startup.homepage, www.easysear.ch/
Prefs.js - browser.startup.homepage, www.easysear.ch/
Prefs.js - browser.startup.homepage, www.easysear.ch/
Prefs.js - browser.startup.homepage, www.easysear.ch/
Prefs.js - browser.startup.homepage, www.easysear.ch/
Prefs.js - browser.startup.homepage, www.easysear.ch/
Prefs.js - browser.startup.homepage, www.easysear.ch/
Prefs.js - browser.startup.homepage, www.easysear.ch/
Prefs.js - browser.startup.homepage, www.easysear.ch/
Prefs.js - browser.startup.homepage, www.easysear.ch/
Prefs.js - browser.startup.homepage, www.easysear.ch/
Prefs.js - browser.startup.homepage, www.easysear.ch/
Prefs.js - browser.startup.homepage, www.easysear.ch/
Prefs.js - browser.startup.homepage, www.easysear.ch/
Prefs.js - browser.startup.homepage, www.easysear.ch/
Prefs.js - browser.startup.homepage, www.easysear.ch/
Prefs.js - browser.startup.homepage, www.easysear.ch/
Prefs.js - browser.startup.homepage, www.easysear.ch/
Prefs.js - browser.startup.homepage, www.easysear.ch/
Prefs.js - browser.startup.homepage, www.easysear.ch/
Prefs.js - browser.startup.homepage, www.easysear.ch/
Prefs.js - browser.startup.homepage, www.easysear.ch/
Prefs.js - browser.startup.homepage, www.easysear.ch/
Prefs.js - browser.startup.homepage, www.easysear.ch/
Prefs.js - browser.startup.homepage, www.easysear.ch/
Prefs.js - browser.startup.homepage, www.easysear.ch/
Prefs.js - browser.startup.homepage, www.easysear.ch/
Prefs.js - browser.startup.homepage, www.easysear.ch/
Prefs.js - browser.startup.homepage, www.easysear.ch/
Prefs.js - browser.startup.homepage, www.easysear.ch/
Prefs.js - browser.startup.homepage, www.easysear.ch/
Prefs.js - browser.startup.homepage, www.easysear.ch/
Prefs.js - browser.startup.homepage, www.easysear.ch/
Prefs.js - browser.startup.homepage, www.easysear.ch/
Prefs.js - browser.startup.homepage, www.easysear.ch/
Prefs.js - browser.startup.homepage, www.easysear.ch/
Prefs.js - browser.startup.homepage, www.easysear.ch/
Prefs.js - browser.startup.homepage, www.easysear.ch/
Prefs.js - browser.startup.homepage, www.easysear.ch/
Prefs.js - browser.startup.homepage, www.easysear.ch/
Prefs.js - browser.startup.homepage, www.easysear.ch/
Prefs.js - browser.startup.homepage, www.easysear.ch/
Prefs.js - browser.startup.homepage, www.easysear.ch/
Prefs.js - browser.startup.homepage, www.easysear.ch/
Prefs.js - browser.startup.homepage, www.easysear.ch/
Prefs.js - browser.startup.homepage, www.easysear.ch/
Prefs.js - browser.startup.homepage, www.easysear.ch/
Prefs.js - browser.startup.homepage, www.easysear.ch/
Prefs.js - browser.startup.homepage, www.easysear.ch/
Prefs.js - browser.startup.homepage, www.easysear.ch/
Prefs.js - browser.startup.homepage, www.easysear.ch/
Prefs.js - browser.startup.homepage, www.easysear.ch/
Prefs.js - browser.startup.homepage, www.easysear.ch/
Prefs.js - browser.startup.homepage, www.easysear.ch/
========================================
**** Internet Explorer Version [7.0.6000.16982] ****
HKCU_Main|Search Page - hxxp://go.microsoft.com/fwlink/?LinkId=54896
HKLM_Main|Default_Page_URL - hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=FR_FR&c=71&bd=Pavilion&pf=desktop
HKLM_Main|Default_Search_URL - hxxp://go.microsoft.com/fwlink/?LinkId=54896
HKLM_Main|Search Page - hxxp://go.microsoft.com/fwlink/?LinkId=54896
HKLM_Main|Start Page - hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=FR_FR&c=71&bd=Pavilion&pf=desktop
HKCU_URLSearchHooks|{a65e491f-a436-4952-b49a-b24ed99a0f67} (x)
HKCU_SearchScopes\{8342F153-C0A3-4789-BF41-98E0636656CD} - "Google" (hxxp://www.google.fr/search?hl=fr&q={searchTerms}+&meta=)
HKLM_SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b} - "Tom's Guide France Customized Web Search" (hxxp://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT...)
HKCU_Toolbar\WebBrowser|{D4027C7F-154A-4066-A1AD-4243D8127440} (x)
HKLM_Toolbar|{90222687-F593-4738-B738-FBEE9C7B26DF} (c:\Program Files\Common Files\Symantec Shared\coShared\Browser\1.0\UIBHO.dll)
BHO\{1E8A6170-7264-4D0F-BEAE-D42A53123C75} - "?" (c:\Program Files\Common Files\Symantec Shared\coShared\Browser\1.0\NppBho.dll)
========================================
C:\Program Files\Ad-Remover\Quarantine: 0 Fichier(s)
C:\Program Files\Ad-Remover\Backup: 1 Fichier(s)
C:\Ad-Report-SCAN[1].txt - 20/02/2011 07:10:07 (12823 Octet(s))
Fin à: 07:11:08, 20/02/2011
============== E.O.F ==============
-
-
RECHERCHE
tu as encore cliqué sur rechercher !!!
désinstalle la vesion d'ADr que tu as sur ton pc,
retélécharge le directement depuis ce lien,
puis lance le directement en Nettoyage :
http://www.teamxscript.org/adremoverTelechargement.html ( Lien officiel )
https://www.androidworld.fr/ ( Miroir )
O.o°*??? Membre, Contributeur Sécurité CCM o°.Oø¤º°'°º¤ø -
Après avoir suivi les conseils , voilà le rapport après réinstallation de ADR et nettoyage : Celà donne ça :
RAPPORT D'AD-REMOVER 2.0.0.2,B | UNIQUEMENT XP/VISTA/7 =======
Mis à jour par TeamXscript le 25/10/10 à 11:40
Contact: AdRemover[DOT]contact[AT]gmail[DOT]com
Site web: http://www.teamxscript.org
C:\Program Files\Ad-Remover\main.exe (CLEAN [1]) -> Lancé à 13:21:41 le 31/10/2010, Mode normal
Microsoft® Windows Vista(TM) Édition Familiale Premium Service Pack 2 (X86)
VALOU@PC-DE-VALOU (Sony Corporation VGN-NW11S_T)
============== ACTION(S) ==============
Fichier supprimé: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Navigateur OfferBox.lnk
Dossier supprimé: C:\Users\VALOU\AppData\Roaming\OfferBox
Dossier supprimé: C:\Program Files\OfferBox
(!) -- Fichiers temporaires supprimés.
Clé supprimée: HKLM\Software\Classes\CLSID\{A7E8C343-7860-4A95-9AA8-AAF30D0F6D1E}
Clé supprimée: HKLM\Software\Classes\CLSID\{E49F0B41-3322-11D4-AEFE-00C04F61025C}
Clé supprimée: HKLM\Software\Classes\CLSID\{FC0D62C2-9640-4AEB-A5D5-CF25DF11FA8C}
Clé supprimée: HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FC0D62C2-9640-4AEB-A5D5-CF25DF11FA8C}
Clé supprimée: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{FC0D62C2-9640-4AEB-A5D5-CF25DF11FA8C}
Clé supprimée: HKLM\Software\Classes\Interface\{6612AFDD-34AD-4B89-A236-7E6D07C3FDCD}
Clé supprimée: HKLM\Software\Classes\TypeLib\{ED85AEBE-F834-4088-B5D3-97EB2478A6CD}
Clé supprimée: HKLM\Software\Classes\OfferBox.OfferBoxServer
Clé supprimée: HKLM\Software\Classes\OfferBox.OfferBoxServer.1
Clé supprimée: HKLM\Software\OfferBox
Clé supprimée: HKLM\Software\InstallPedia
Clé supprimée: HKCU\Software\OfferBox
Clé supprimée: HKLM\Software\Classes\Installer\Products\5B4758C25396ECF468E04F8E063287FF
Clé supprimée: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Products\5B4758C25396ECF468E04F8E063287FF
Clé supprimée: HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{37F4A335-D085-423e-A425-0370799166FB}
Clé supprimée: HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{2C8574B5-6935-4FCE-860E-F4E8602378FF}
Clé supprimée: HKLM\Software\Google\Chrome\Extensions\bjeikeheijdjdfjbmknpefojickbkmom
Erreur suppression clé: HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Scheduled Update for Ask Toolbar
Valeur supprimée: HKLM\Software\Mozilla\Firefox\Extensions|offerboxffx@offerbox.com
============== SCAN ADDITIONNEL ==============
** Mozilla Firefox Version [3.6.12 (fr)] **
-- C:\Users\VALOU\AppData\Roaming\Mozilla\FireFox\Profiles\3vh62ciw.default\User.js --
keyword.URL, hxxp://redirecterror.sfr.fr/?q=
-- C:\Users\VALOU\AppData\Roaming\Mozilla\FireFox\Profiles\3vh62ciw.default\Prefs.js --
browser.download.lastDir, C:\\Users\\VALOU\\Desktop\\Travail Thibault\\Travail Thibault
browser.search.selectedEngine, Google Powered Search
browser.startup.homepage, hxxp://www.google.fr/
browser.startup.homepage_override.mstone, rv:1.9.2.12
keyword.URL, hxxp://redirecterror.sfr.fr/?q=
========================================
** Internet Explorer Version [7.0.6002.18005] **
[HKCU\Software\Microsoft\Internet Explorer\Main]
Default_Page_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Do404Search: 0x01000000
Enable Browser Extensions: yes
Local Page: C:\Windows\system32\blank.htm
Search bar: hxxp://go.microsoft.com/fwlink/?linkid=54896
Show_ToolBar: yes
Start Page: hxxp://fr.msn.com/
Use Search Asst: no
[HKLM\Software\Microsoft\Internet Explorer\Main]
AutoHide: yes
Default_Page_URL: hxxp://go.microsoft.com/fwlink/?LinkId=54896
Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Delete_Temp_Files_On_Exit: yes
Enable Browser Extensions: yes
Local Page: C:\Windows\system32\blank.htm
Search bar: hxxp://search.msn.com/spbasic.htm
Search Page: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Start Page: hxxp://fr.msn.com/
Use Search Asst: no
[HKLM\Software\Microsoft\Internet Explorer\ABOUTURLS]
Tabs: res://ieframe.dll/tabswelcome.htm
Blank: res://mshtml.dll/blank.htm
========================================
C:\Program Files\Ad-Remover\Quarantine: 16 Fichier(s)
C:\Program Files\Ad-Remover\Backup: 15 Fichier(s)
C:\Ad-Report-CLEAN[1].txt - 31/10/2010 (4357 Octet(s))
Fin à: 13:23:53, 31/10/2010 -
relance ADR, clique sur désinstaller,
as tu encore des pub ?
-
Il semblerait que la page d'accueil de google se maintienne . Que easy search soit neutralisé (voir supprimé)
Vous me demandez de désinstaller ADR est ce nécessaire ? n'est il pas judicieux de la garder ...?
Encore Merci encore pour votre aide et votre patience.
surfy 40 -
MERCI Bonne soirée à toi aussi
SURFY 40 -
;-)
-
Bonjour,
Pour supprimer Easysearch ou autre page d'accueil, vous pouvez appliquer la solution proposée par Firefox.
Mettez à jour votre page d'accueil préférée dans options générales Firefox.
Fermez Firefox puis rouvrir. Votre page d'accueil préférée doit s'ouvrir.
Cliquez sur l'icône à gauche de votre barre de navigation
Faites glisser vers l'accueil. Confirmez par oui (le problème c'est qu'il n'y a pas de oui) Essayez tout de même, cela semble marcher. -
Bonsoir,
Mon PC = Vista et IE8
J'ai tout simplement effectué une restauration système et ce parasite d'easysearch a disparu -
======= RAPPORT D'AD-REMOVER 2.0.0.2,D | UNIQUEMENT XP/VISTA/7 =======
Mis à jour par TeamXscript le 03/01/11 à 14:20
Contact: AdRemover[DOT]contact[AT]gmail[DOT]com
Site web: http://www.teamxscript.org
C:\Program Files\Ad-Remover\main.exe (CLEAN [1]) -> Lancé à 20:15:16 le 08/01/2011, Mode normal
Microsoft Windows 7 Professionnel (X86)
yann@YANN-PC (Packard Bell BV EasyNote_MX67)
============== ACTION(S) ==============
Service: "sdmBackupIP" Stoppé et supprimé
Dossier supprimé: C:\Program Files\Installer
Dossier supprimé: C:\Windows\BackupIP
Dossier supprimé: C:\Users\yann\AppData\Local\networker
(!) -- Fichiers temporaires supprimés.
Clé supprimée: HKLM\Software\Install Pedia Limited
Valeur supprimée: HKLM\Software\Microsoft\Windows\CurrentVersion\Run|installer
============== SCAN ADDITIONNEL ==============
** Mozilla Firefox Version [Impossible d'obtenir la version] **
========================================
** Internet Explorer Version [8.0.7600.16385] **
[HKCU\Software\Microsoft\Internet Explorer\Main]
Default_Page_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Do404Search: 0x01000000
Enable Browser Extensions: yes
Local Page: C:\Windows\system32\blank.htm
Search bar: hxxp://go.microsoft.com/fwlink/?linkid=54896
Show_ToolBar: yes
Start Page: hxxp://fr.msn.com/
[HKLM\Software\Microsoft\Internet Explorer\Main]
AutoHide: yes
Default_Page_URL: hxxp://go.microsoft.com/fwlink/?LinkId=54896
Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Delete_Temp_Files_On_Exit: yes
Local Page: C:\Windows\System32\blank.htm
Search bar: hxxp://search.msn.com/spbasic.htm
Search Page: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Start Page: hxxp://fr.msn.com/
[HKLM\Software\Microsoft\Internet Explorer\ABOUTURLS]
Tabs: res://ieframe.dll/tabswelcome.htm
Blank: res://mshtml.dll/blank.htm
========================================
C:\Program Files\Ad-Remover\Quarantine: 12 Fichier(s)
C:\Program Files\Ad-Remover\Backup: 15 Fichier(s)
C:\Ad-Report-CLEAN[1].txt - 08/01/2011 (2187 Octet(s))
Fin à: 20:16:37, 08/01/2011
============== E.O.F ============== -
======= RAPPORT D'AD-REMOVER 2.0.0.2,D | UNIQUEMENT XP/VISTA/7 =======
Mis à jour par TeamXscript le 09/01/11 à 12:30
Contact: AdRemover[DOT]contact[AT]gmail[DOT]com
Site web: http://www.teamxscript.org
C:\Program Files (x86)\Ad-Remover\main.exe (CLEAN [1]) -> Lancé à 20:01:29 le 11/01/2011, Mode normal
Microsoft Windows 7 Édition Familiale Premium (X64)
hbn@HBN-VAIO (Sony Corporation VPCEA1S1E)
============== ACTION(S) ==============
Service: "sdmBackupIP" Stoppé et supprimé
Fichier supprimé: C:\Windows\SysWOW64\Utils.dll
Dossier supprimé: C:\Windows\BackupIP
Fichier supprimé: C:\Users\hbn\binternet.exe
Fichier supprimé: C:\Users\hbn\scriptjava.html
(!) -- Fichiers temporaires supprimés.
Clé supprimée: HKLM\Software\Install Pedia Limited
Valeur supprimée: HKLM\Software\Microsoft\Windows\CurrentVersion\Run|installer
Valeur supprimée: HKCU\Software\Microsoft\Windows\CurrentVersion\Run|binternet
============== SCAN ADDITIONNEL ==============
** Mozilla Firefox Version [3.6.13 (fr)] **
-- C:\Users\hbn\AppData\Roaming\Mozilla\FireFox\Profiles\72odbkkv.default\Prefs.js --
browser.startup.homepage, www.easysear.ch/
browser.startup.homepage_override.mstone, rv:1.9.2.13
browser.startup.homepage, www.easysear.ch/
browser.startup.homepage, www.easysear.ch/
========================================
** Internet Explorer Version [8.0.7600.16385] **
[HKCU\Software\Microsoft\Internet Explorer\Main]
AutoHide: yes
Default_Page_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Do404Search: 0x01000000
Enable Browser Extensions: yes
Local Page: C:\Windows\system32\blank.htm
Search bar: hxxp://go.microsoft.com/fwlink/?linkid=54896
Show_ToolBar: yes
Start Page: hxxp://fr.msn.com/
[HKLM\Software\Microsoft\Internet Explorer\Main]
AutoHide: yes
Default_Page_URL: hxxp://go.microsoft.com/fwlink/?LinkId=54896
Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Delete_Temp_Files_On_Exit: yes
Local Page: C:\Windows\SysWOW64\blank.htm
Search bar: hxxp://search.msn.com/spbasic.htm
Search Page: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Start Page: hxxp://fr.msn.com/
[HKLM\Software\Microsoft\Internet Explorer\ABOUTURLS]
Tabs: res://ieframe.dll/tabswelcome.htm
Blank: res://mshtml.dll/blank.htm
========================================
C:\Program Files (x86)\Ad-Remover\Quarantine: 7 Fichier(s)
C:\Program Files (x86)\Ad-Remover\Backup: 14 Fichier(s)
C:\Ad-Report-CLEAN[1].txt - 11/01/2011 (2604 Octet(s))
Fin à: 20:03:01, 11/01/2011
============== E.O.F ==============
- 1
- 2
Suivant
