PC trés lent - Page 4

--------- Logfile of AD-Remover 1.0.5.9 by C_XX ---------

*** Limited to ***

Boonty/BoontyGames
Eorezo
Everest Poker
Funwebproduct/MyWay/MyWebsearch
Messenger Skinner
Sweetim

******************

# START at: 17:01:20 | 04/12/2008 ON Microsoft® Windows XP ™ v5.1.2600
# BOOT MODE: Normal

# OPTION: Scan
# EXECUTED FROM: C:\Program Files\Ad-remover\AD-Remover.bat

# PC: MONIQUE-0CF3FX3 | USER: Momo ( Current user is an administrator )

# DRIVE(S): A:\
# Systemdrive: C:\ (NTFS)
# Internet Explorer v6.0.2900.2180

--------- [ RUNNING PROCESSES: 41 ] ---------

\SystemRoot\System32\smss.exe
\??\C:\WINDOWS\system32\csrss.exe
\??\C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\Program Files\Tall Emu\Online Armor\oasrv.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\System32\brsvc01a.exe
C:\WINDOWS\System32\brss01a.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Windows Media Player\WMPNetwk.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\LVCOMSX.EXE
C:\Program Files\Scansoft\PaperPort\pptd40nt.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\Program Files\Tall Emu\Online Armor\oaui.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\EoRezo\EoEngine.exe
C:\Program Files\Nikon\NkView6\NkvMon.exe
C:\Program Files\Scansoft\PaperPort\SmartUI\SmartUI.exe
C:\Program Files\SAGEM WiFi manager\WLANUTL.exe
G:\VolumeWatcher\SPUVolumeWatcher.exe
C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\WkCalRem.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\Mozilla Firefox\firefox.exe

-----------------------------------

(!) ---- IE start pages reset

+---------------------------------------------------------------------------+
+------------------------------- SERVICES DELETED ..
+---------------------------------------------------------------------------+

Deleted successfully ! - "Boonty Games"

+---------------------------------------------------------------------------+
+------------------------------- REGISTRY ELEMENTS DELETED ..
+---------------------------------------------------------------------------+

"HKEY_CLASSES_ROOT\boontybox"
"HKEY_CLASSES_ROOT\CLSID\{aa760512-9bd8-4b1b-9e7a-dd9bbe3cf119}"
"HKEY_CLASSES_ROOT\PandoraBoxCtrl.PandoraBoxCtrl"
"HKEY_CLASSES_ROOT\PandoraBoxCtrl.PandoraBoxCtrl.1"
"HKEY_CLASSES_ROOT\Typelib\{BB8AC401-701B-4ED1-96BB-B84A0FCF5874}"
"HKEY_CURRENT_USER\SOFTWARE\Boonty"
"HKEY_LOCAL_MACHINE\Software\Boonty"
"HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\Boonty Games"
"HKEY_CLASSES_ROOT\EoRezoBHO.EoBho"
"HKEY_CLASSES_ROOT\EoRezoBHO.EoBho.1"
"HKEY_CLASSES_ROOT\Interface\{B0D071A1-36B3-4757-A126-14C89C56013A}"
"HKEY_CLASSES_ROOT\Typelib\{B4C656C9-F2E9-4E77-B3F4-443DF2BD778F}"
"HKEY_CURRENT_USER\SOFTWARE\EoRezo"
"HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{64F56FC1-1272-44CD-BA6E-39723696E350}"
"HKEY_LOCAL_MACHINE\SOFTWARE\EoRezo"
"HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{64F56FC1-1272-44CD-BA6E-39723696E350}"
"HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{64F56FC1-1272-44CD-BA6E-39723696E350}"
"HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\eoEngine_is1"
"HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\run" /v "EoEngine"
"HKEY_CURRENT_USER\SOFTWARE\MessengerSkinner"

+---------------------------------------------------------------------------+
+------------------------------- FILES\FOLDERS DELETED ..
+---------------------------------------------------------------------------+

[11/03/2005 17:06|--a------] C:\WINDOWS\system32\PandoraCtrl.dll
[01/11/2008 11:36|d--------] C:\Program Files\EoRezo
[04/12/2008 15:51|d--------] C:\Documents and Settings\Momo\Application Data\EoRezo
/!\ NOT DELETED - [04/12/2008 13:36|--a------] C:\WINDOWS\Prefetch\EOENGINE.EXE-020B3EA2.pf

(!) ---- Temp files deleted.
(!) ---- Recycle bin emptied in all drives.

************* /!\ File(s)/Folder(s) Not Deleted /!\ *************

"C:\WINDOWS\Prefetch\EOENGINE.EXE-020B3EA2.pf"

Second run ...

"C:\WINDOWS\Prefetch\EOENGINE.EXE-020B3EA2.pf" - RESIST !

+---------------------------------------------------------------------------+
+------------------------------- ADDED SCAN ..
+---------------------------------------------------------------------------+

+---------- Scanning prefs.js ... ( # Mozilla User Preferences )

...\gftzl64b.default\prefs.js :

~~~~ Mozilla FireFox version 3.0.4 ~~~~

Start Page : "http://www.lo.st"

+----------+

+--[HKEY_CURRENT_USER\...\Run]

+--[HKEY_LOCAL_MACHINE\...\Run]

LVCOMSX REG_SZ C:\WINDOWS\system32\LVCOMSX.EXE
PaperPort PTD REG_SZ C:\Program Files\Scansoft\PaperPort\pptd40nt.exe
IndexSearch REG_SZ C:\Program Files\Scansoft\PaperPort\IndexSearch.exe
SoundMan REG_SZ SOUNDMAN.EXE
ItsTV REG_SZ "C:\Program Files\ItsLabel\ItsTV.exe"
UnlockerAssistant REG_SZ "C:\Program Files\Unlocker\UnlockerAssistant.exe"
SunJavaUpdateSched REG_SZ "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
ZoneAlarm Client REG_SZ "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
OnlineArmor GUI REG_SZ "C:\Program Files\Tall Emu\Online Armor\oaui.exe"
avast! REG_SZ C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
SetDefPrt REG_SZ C:\Program Files\Brother\BRMFLPRO\BrDefPrt.exe

+--[HKEY_USERS\.DEFAULT\...\Run]

+--[HKEY_CURRENT_USER\...\Internet Explorer\MAIN]

Start Page : hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome

+--[HKEY_LOCAL_MACHINE\...\Internet Explorer\MAIN]

Start Page : hxxp://fr.msn.com/

+---------------------------------------------------------------------------+
+------------------------------- [ E.O.F - 154 lines ]
+---------------------------------------------------------------------------+

- "C:\AD-report-04.12.2008.log" (6602 octets)

[ END at: 17:04:22 | 04/12/2008 ] - [ Time elapsed: 3 minutes, 1 seconds ]

la date ne correspond pas

c'est le premier qu'on a fait celui la

suprime le et regarde si tu on a un autre qui traine

en haut du rapport tu a la date

Par Manque De Curiosité On Risque De Mourir Ignorant;Tu es libre de penser que tu es C..,
Mais C.. de penser que ­tu es libre...Merci a australe13

excuse-moi j'ai pas fait attention à la date

--------- Logfile of AD-Remover 1.0.7.7 by C_XX ---------

# START at: 17:16:56 | Mar 16/12/2008 | Microsoft® Windows XP™ (v5.1.2600)
# BOOT MODE: Normal

# OPTION: Scan | EXECUTED FROM: C:\Program Files\Ad-remover\AD-Remover.bat

# PC: MONIQUE-0CF3FX3 | USER: Momo ( Current user is an administrator)

# DRIVE(S):
- C:\ (File System: NTFS)
- G:\ (File System: NTFS)
- H:\ (File System: NTFS)

# Internet Explorer v6.0.2900.2180

--------- [ RUNNING PROCESSES: 42 ] ---------

C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Tall Emu\Online Armor\oasrv.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\System32\brsvc01a.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\brss01a.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\explorer.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\LVCOMSX.EXE
C:\Program Files\Scansoft\PaperPort\pptd40nt.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\Tall Emu\Online Armor\oaui.exe
C:\Program Files\EoRezo\EoEngine.exe
C:\Documents and Settings\Momo\Application Data\eoRezo\SoftwareUpdate\SoftwareUpdateHP.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\WINDOWS\system32\BRMFRSMG.EXE
C:\Program Files\Windows Media Player\WMPNetwk.exe
C:\Program Files\Nikon\NkView6\NkvMon.exe
C:\Program Files\Scansoft\PaperPort\SmartUI\SmartUI.exe
C:\Program Files\SAGEM WiFi manager\WLANUTL.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
G:\VolumeWatcher\SPUVolumeWatcher.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\WkCalRem.exe
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\system32\ntvdm.exe

-----------------------------------

+-----------------------| Boonty/Boonty Games Elements found :

.
[10/11/2006 10:55|--a------] C:\WINDOWS\system32\PANDOR~2.DLL

+-----------------------| Eorezo Elements found :

"HKEY_CLASSES_ROOT\EoRezoBHO.EoBho"
"HKEY_CLASSES_ROOT\EoRezoBHO.EoBho.1"
"HKEY_CURRENT_USER\SOFTWARE\EoRezo"
"HKEY_LOCAL_MACHINE\SOFTWARE\EoRezo"
"HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{362A53B2-2913-4F8A-82F5-7E0A23FDC6F9}"
"HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\EoRezoBHO.DLL"
"HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{B6ACB3F1-6A83-432C-B854-3E1056F87F4E}"
"HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C7B76B90-3455-4AE6-A752-EAC4D19689E5}"
"HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\eoEngine_is1"
"HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\run" /v "EoEngine"
.
[15/12/2008 11:02|d--------] C:\PROGRA~1\EoRezo
[27/06/2007 13:56|--a------] C:\PROGRA~1\EoRezo\CONFME~1.CYP
[15/12/2008 11:02|d--------] C:\PROGRA~1\EoRezo\EoAdv
[25/11/2008 15:56|--a------] C:\PROGRA~1\EoRezo\EoEngine.exe
[15/12/2008 11:02|--a------] C:\PROGRA~1\EoRezo\eoEngine.url
[24/10/2008 15:42|--a------] C:\PROGRA~1\EoRezo\EOMULT~1.DLL
[25/11/2008 15:57|--a------] C:\PROGRA~1\EoRezo\EOREZO~1.DLL
[24/10/2008 16:08|--a------] C:\PROGRA~1\EoRezo\EOREZO~4.DLL
[24/10/2008 16:08|--a------] C:\PROGRA~1\EoRezo\EO6115~1.DLL
[24/10/2008 16:09|--a------] C:\PROGRA~1\EoRezo\EO4511~1.DLL
[24/10/2008 16:09|--a------] C:\PROGRA~1\EoRezo\EO4515~1.DLL
[24/10/2008 16:10|--a------] C:\PROGRA~1\EoRezo\EO5519~1.DLL
[24/10/2008 15:43|--a------] C:\PROGRA~1\EoRezo\EO551D~1.DLL
[24/10/2008 16:10|--a------] C:\PROGRA~1\EoRezo\EOREZO~2.DLL
[24/10/2008 16:11|--a------] C:\PROGRA~1\EoRezo\EOREZO~3.DLL
[24/10/2008 16:22|--a------] C:\PROGRA~1\EoRezo\EO6CF9~1.DLL
[24/10/2008 16:23|--a------] C:\PROGRA~1\EoRezo\EO400A~1.DLL
[24/10/2008 16:23|--a------] C:\PROGRA~1\EoRezo\EO400E~1.DLL
[24/10/2008 16:25|--a------] C:\PROGRA~1\EoRezo\EO5002~1.DLL
[24/10/2008 16:25|--a------] C:\PROGRA~1\EoRezo\EO5006~1.DLL
[01/11/2008 15:56|--a------] C:\PROGRA~1\EoRezo\EO600A~1.DLL
[25/11/2008 15:58|--a------] C:\PROGRA~1\EoRezo\EO600E~1.DLL
[26/06/2007 14:33|--a------] C:\PROGRA~1\EoRezo\FREEIM~1.DLL
[26/06/2007 14:33|--a------] C:\PROGRA~1\EoRezo\Host.cyp
[15/12/2008 11:02|d--------] C:\PROGRA~1\EoRezo\lang
[12/11/2008 12:53|--a------] C:\PROGRA~1\EoRezo\MNGINS~1.DLL
[15/12/2008 11:02|--a------] C:\PROGRA~1\EoRezo\unins000.dat
[15/12/2008 11:02|--a------] C:\PROGRA~1\EoRezo\unins000.exe
[21/12/2007 10:23|--a------] C:\PROGRA~1\EoRezo\user.cyp
[07/11/2007 01:19|--a------] C:\PROGRA~1\EoRezo\EoAdv\atl90.dll
[24/10/2008 15:37|--a------] C:\PROGRA~1\EoRezo\EoAdv\EoAdv.dll
[18/11/2008 15:15|--a------] C:\PROGRA~1\EoRezo\EoAdv\EOREZO~1.DLL
[07/11/2007 01:19|--a------] C:\PROGRA~1\EoRezo\EoAdv\mfc90.dll
[06/11/2007 20:24|--a------] C:\PROGRA~1\EoRezo\EoAdv\MICROS~1.MAN
[06/11/2007 20:24|--a------] C:\PROGRA~1\EoRezo\EoAdv\MICROS~2.MAN
[06/11/2007 22:51|--a------] C:\PROGRA~1\EoRezo\EoAdv\MICROS~3.MAN
[07/11/2007 01:19|--a------] C:\PROGRA~1\EoRezo\EoAdv\msvcr90.dll
[26/06/2007 14:33|--a------] C:\PROGRA~1\EoRezo\lang\IHM_EO~3.XML
[26/06/2007 14:33|--a------] C:\PROGRA~1\EoRezo\lang\IH935B~1.XML
[26/06/2007 14:33|--a------] C:\PROGRA~1\EoRezo\lang\IHM_EO~1.XML
[26/06/2007 14:33|--a------] C:\PROGRA~1\EoRezo\lang\IH0447~1.XML
[26/06/2007 14:33|--a------] C:\PROGRA~1\EoRezo\lang\IHM_EO~2.XML
[26/06/2007 14:33|--a------] C:\PROGRA~1\EoRezo\lang\IHM_EO~4.XML
[26/06/2007 14:33|--a------] C:\PROGRA~1\EoRezo\lang\lang_en.xml
[26/06/2007 14:33|--a------] C:\PROGRA~1\EoRezo\lang\lang_es.xml
[26/06/2007 14:33|--a------] C:\PROGRA~1\EoRezo\lang\lang_fr.xml
[26/06/2007 14:33|--a------] C:\PROGRA~1\EoRezo\lang\lang_it.xml
[16/12/2008 16:01|d--------] C:\DOCUME~1\Momo\APPLIC~1\EoRezo
[15/12/2008 11:03|--a------] C:\DOCUME~1\Momo\APPLIC~1\EoRezo\cmhost.cyp
[16/12/2008 15:11|--a------] C:\DOCUME~1\Momo\APPLIC~1\EoRezo\CONFME~1.CYP
[16/12/2008 12:01|d--------] C:\DOCUME~1\Momo\APPLIC~1\EoRezo\db
[16/12/2008 15:11|d--------] C:\DOCUME~1\Momo\APPLIC~1\EoRezo\EODESK~1
[15/12/2008 15:15|d--------] C:\DOCUME~1\Momo\APPLIC~1\EoRezo\eoStats
[15/12/2008 11:03|--a------] C:\DOCUME~1\Momo\APPLIC~1\EoRezo\host.cyp
[16/12/2008 17:02|d--------] C:\DOCUME~1\Momo\APPLIC~1\EoRezo\SOFTWA~1
[16/12/2008 15:11|--a------] C:\DOCUME~1\Momo\APPLIC~1\EoRezo\user.cyp
[16/12/2008 12:01|--a------] C:\DOCUME~1\Momo\APPLIC~1\EoRezo\db\cat.cyp
[16/12/2008 15:11|--a------] C:\DOCUME~1\Momo\APPLIC~1\EoRezo\EODESK~1\config.xml
[16/12/2008 15:11|--a------] C:\DOCUME~1\Momo\APPLIC~1\EoRezo\EODESK~1\EODESK~1.HTM
[16/12/2008 15:11|--a------] C:\DOCUME~1\Momo\APPLIC~1\EoRezo\EODESK~1\USERCO~1.XML
[16/12/2008 15:01|--a------] C:\DOCUME~1\Momo\APPLIC~1\EoRezo\eoStats\eoStats.txt
[09/12/2008 10:12|--a------] C:\DOCUME~1\Momo\APPLIC~1\EoRezo\SOFTWA~1\SOFTWA~1.EXE
[09/12/2008 10:13|--a------] C:\DOCUME~1\Momo\APPLIC~1\EoRezo\SOFTWA~1\SOFTWA~2.EXE
[15/12/2008 11:02|--a------] C:\DOCUME~1\Momo\APPLIC~1\EoRezo\SOFTWA~1\unins000.dat
[15/12/2008 11:02|--a------] C:\DOCUME~1\Momo\APPLIC~1\EoRezo\SOFTWA~1\unins000.exe
[16/12/2008 17:02|--a------] C:\DOCUME~1\Momo\APPLIC~1\EoRezo\SOFTWA~1\USER_C~1.CYP
[15/12/2008 11:05|--a------] C:\DOCUME~1\Momo\APPLIC~1\EoRezo\SOFTWA~1\USER_P~1.CYP
[16/12/2008 17:02|--a------] C:\DOCUME~1\Momo\Cookies\MOMO@E~1.TXT

+-----------------------| Everest Poker Elements found :

.

+-----------------------| FunWebProducts/MyWay/MyWebSearch/MyGlobalSearch Elements found :

.

+-----------------------| Messenger Skinner Elements found :

.

+-----------------------| Sweetim Elements found :

.

+-----------------------| ADDED SCAN :

+---------- Scanning prefs.js ... ( # Mozilla User Preferences )

...\gftzl64b.default\prefs.js :

~~~~ Mozilla FireFox version 3.0.4 ~~~~

Start Page : "http://lo.st#home"

+----------+

+---------------------------------------------------------------------------+

+--[HKEY_CURRENT_USER\..\Run]

ccleaner REG_SZ "C:\Program Files\CCleaner\CCleaner.exe" /AUTO

+--[HKEY_LOCAL_MACHINE\..\Run]

LVCOMSX REG_SZ C:\WINDOWS\system32\LVCOMSX.EXE
PaperPort PTD REG_SZ C:\Program Files\Scansoft\PaperPort\pptd40nt.exe
IndexSearch REG_SZ C:\Program Files\Scansoft\PaperPort\IndexSearch.exe
SoundMan REG_SZ SOUNDMAN.EXE
ItsTV REG_SZ "C:\Program Files\ItsLabel\ItsTV.exe"
OnlineArmor GUI REG_SZ "C:\Program Files\Tall Emu\Online Armor\oaui.exe"
EoEngine REG_SZ "C:\Program Files\EoRezo\EoEngine.exe"
SoftwareHelper REG_SZ C:\Documents and Settings\Momo\Application Data\eoRezo\SoftwareUpdate\SoftwareUpdateHP.exe
avast! REG_SZ C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
SunJavaUpdateSched REG_SZ "C:\Program Files\Java\jre6\bin\jusched.exe"

+--[HKEY_USERS\.DEFAULT\..\Run]

+--[HKEY_CURRENT_USER\..\Internet Explorer\MAIN]

Start Page : hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome

+--[HKEY_LOCAL_MACHINE\..\Internet Explorer\MAIN]

Start Page : hxxp://www.microsoft.com/isapi/redir.dll?prd={SUB_PRD}&clcid={SUB_CLSID}&pver={SUB_PVER}&ar=home

+---------------------------------------------------------------------------+

- "C:\AD-report-Scan-16.12.2008.log" (~9529 bytes)

# END at: 17:18:30 | 16/12/2008 - Time elapsed: 94.3 seconds

+---------------------------------------------------------------------------+
+------------------------------- [ E.O.F - 171 lines ]
+---------------------------------------------------------------------------+

lol

tu relance Ad-remover

tu choisie l'option B (suppression ; nettoyage)

dans la fenêtre qui s'ouvre tu coche tout et tu supprime tout

poste le rapport générer après suppression

--------- Logfile of AD-Remover 1.0.7.7 by C_XX ---------

*** Limited to ***

Boonty/BoontyGames
Eorezo
Everest Poker
Funwebproduct/MyWay/MyWebsearch
Messenger Skinner
Sweetim

******************

# START at: 17:52:17 | Mar 16/12/2008 | Microsoft® Windows XP™ (v5.1.2600)
# BOOT MODE: Normal

# OPTION: Clean | EXECUTED FROM: C:\Program Files\Ad-remover\AD-Remover.bat

# PC: MONIQUE-0CF3FX3 | USER: Momo ( Current user is an administrator)

# DRIVE(S):
- C:\ (File System: NTFS)
- G:\ (File System: NTFS)
- H:\ (File System: NTFS)

# Internet Explorer v6.0.2900.2180

--------- [ RUNNING PROCESSES: 43 ] ---------

C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Tall Emu\Online Armor\oasrv.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\System32\brsvc01a.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\brss01a.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\explorer.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\LVCOMSX.EXE
C:\Program Files\Scansoft\PaperPort\pptd40nt.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\Tall Emu\Online Armor\oaui.exe
C:\Program Files\EoRezo\EoEngine.exe
C:\Documents and Settings\Momo\Application Data\eoRezo\SoftwareUpdate\SoftwareUpdateHP.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\WINDOWS\system32\BRMFRSMG.EXE
C:\Program Files\Windows Media Player\WMPNetwk.exe
C:\Program Files\Nikon\NkView6\NkvMon.exe
C:\Program Files\Scansoft\PaperPort\SmartUI\SmartUI.exe
C:\Program Files\SAGEM WiFi manager\WLANUTL.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
G:\VolumeWatcher\SPUVolumeWatcher.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\WkCalRem.exe
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\system32\ntvdm.exe

-----------------------------------

(!) ---- IE start pages reset

+-----------------------| Boonty/Boonty Games Elements Deleted :

.
[10/11/2006 10:55|--a------] C:\WINDOWS\system32\PANDOR~2.DLL

+-----------------------| Eorezo Elements Deleted :

"HKEY_CURRENT_USER\SOFTWARE\EoRezo"
"HKEY_LOCAL_MACHINE\SOFTWARE\EoRezo"
"HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\run" /v "EoEngine"
.
[16/12/2008 17:27|d--------] C:\Program Files\EoRezo
/!\ NOT DELETED - [16/12/2008 17:26|d--------] C:\DOCUME~1\Momo\APPLIC~1\EoRezo
/!\ NOT DELETED - [16/12/2008 17:52|d--------] C:\DOCUME~1\Momo\APPLIC~1\EoRezo\SOFTWA~1
/!\ NOT DELETED - [09/12/2008 10:13|--a------] C:\DOCUME~1\Momo\APPLIC~1\EoRezo\SOFTWA~1\SOFTWA~2.EXE
[16/12/2008 17:02|--a------] C:\DOCUME~1\Momo\Cookies\MOMO@E~1.TXT

+-----------------------| Everest Poker Elements Deleted :

.

+-----------------------| FunWebProducts/MyWay/MyWebSearch/MyGlobalSearch Elements Deleted :

.

+-----------------------| Messenger Skinner Elements Deleted :

.

+-----------------------| Sweetim Elements Deleted :

.

(!) ---- Temp files deleted.
(!) ---- Recycle bin emptied in all drives.

************* /!\ File(s)/Folder(s) Not Deleted /!\ *************

"C:\Documents and Settings\Momo\Application Data\EoRezo\SoftwareUpdate"
"C:\Documents and Settings\Momo\Application Data\EoRezo\SoftwareUpdate\SoftwareUpdateHP.exe"

Second run ...

"C:\Documents and Settings\Momo\Application Data\EoRezo\SoftwareUpdate" - RESIST !
"C:\Documents and Settings\Momo\Application Data\EoRezo\SoftwareUpdate\SoftwareUpdateHP.exe" - RESIST !

+-----------------------| ADDED SCAN :

+---------- Scanning prefs.js ... ( # Mozilla User Preferences )

...\gftzl64b.default\prefs.js :

~~~~ Mozilla FireFox version 3.0.4 ~~~~

Start Page : "http://lo.st#home"

+----------+

+--[HKEY_CURRENT_USER\..\Run]

ccleaner REG_SZ "C:\Program Files\CCleaner\CCleaner.exe" /AUTO

+--[HKEY_LOCAL_MACHINE\..\Run]

LVCOMSX REG_SZ C:\WINDOWS\system32\LVCOMSX.EXE
PaperPort PTD REG_SZ C:\Program Files\Scansoft\PaperPort\pptd40nt.exe
IndexSearch REG_SZ C:\Program Files\Scansoft\PaperPort\IndexSearch.exe
SoundMan REG_SZ SOUNDMAN.EXE
ItsTV REG_SZ "C:\Program Files\ItsLabel\ItsTV.exe"
OnlineArmor GUI REG_SZ "C:\Program Files\Tall Emu\Online Armor\oaui.exe"
SoftwareHelper REG_SZ C:\Documents and Settings\Momo\Application Data\eoRezo\SoftwareUpdate\SoftwareUpdateHP.exe
avast! REG_SZ C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
SunJavaUpdateSched REG_SZ "C:\Program Files\Java\jre6\bin\jusched.exe"

+--[HKEY_USERS\.DEFAULT\..\Run]

+--[HKEY_CURRENT_USER\..\Internet Explorer\MAIN]

Start Page : hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome

+--[HKEY_LOCAL_MACHINE\..\Internet Explorer\MAIN]

Start Page : hxxp://fr.msn.com/

+---------------------------------------------------------------------------+

- "C:\AD-report-Clean-16.12.2008.log" (~5350 bytes)

- "C:\AD-report-Scan-16.12.2008.log" (~9864 bytes)

# END at: 17:54:30 | 16/12/2008 - Time elapsed: 2 minutes, 13 seconds

+---------------------------------------------------------------------------+
+------------------------------- [ E.O.F - 117 lines ]
+---------------------------------------------------------------------------+

c'est bon il leur a fait la fête

tu peut désinstaller ad-r

tu as l'air ravi que fait-on maintenant

c'est terminé donc.
D'abord encore merci pour ton aide et surtout ta grande patience envers moi.
question comment eorezo entre-t-il dans le PC ?

il est installer probablement en telechargeant des logiciel içi

http://ww17.eorezo.com/cgi-bin/index.cgi