Rapport ad remover

Bonjour,

--------- Logfile of AD-Remover 1.0.7.8 by C_XX ---------

# START at: 19:36:26 | Ven 19/12/2008 | Microsoft® Windows XP™ SP2 (v5.1.2600)
# BOOT MODE: Normal

# OPTION: Scan | EXECUTED FROM: C:\Program Files\Ad-remover\AD-Remover.bat

# PC: XPSP2-2D6043890 | USER: alexandre ( Current user is an administrator)

# DRIVE(S):
- C:\ (File System: NTFS)
- D:\ (File System: NTFS)
- E:\ (File System: NTFS)
- F:\ (File System: NTFS)
- G:\ (File System: CDFS)
- H:\ (File System: CDFS)

# Internet Explorer v6.0.2900.2180

--------- [ RUNNING PROCESSES: 40 ] ---------

C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Fichiers communs\LogiShrd\LVMVFM\LVPrcSrv.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
C:\Program Files\Fichiers communs\LogiShrd\LComMgr\Communications_Helper.exe
C:\Program Files\Logitech\QuickCam\Quickcam.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\DAEMON Tools\daemon.exe
C:\Program Files\EoRezo\EoEngine.exe
C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe
C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\MSN Messenger\MsnMsgr.Exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexingService.exe
C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexStoreSvr.exe
C:\Program Files\Fichiers communs\Logishrd\LQCVFX\COCIManager.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\system32\ntvdm.exe

-----------------------------------

+-----------------------| Boonty/Boonty Games Elements found :

.

+-----------------------| Eorezo Elements found :

"HKEY_CLASSES_ROOT\EoRezoBHO.EoBho"
"HKEY_CLASSES_ROOT\EoRezoBHO.EoBho.1"
"HKEY_CLASSES_ROOT\Interface\{B0D071A1-36B3-4757-A126-14C89C56013A}"
"HKEY_CLASSES_ROOT\Typelib\{B4C656C9-F2E9-4E77-B3F4-443DF2BD778F}"
"HKEY_CURRENT_USER\SOFTWARE\EoRezo"
"HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{64F56FC1-1272-44CD-BA6E-39723696E350}"
"HKEY_LOCAL_MACHINE\SOFTWARE\EoRezo"
"HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{64F56FC1-1272-44CD-BA6E-39723696E350}"
"HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{64F56FC1-1272-44CD-BA6E-39723696E350}"
"HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\eoEngine_is1"
"HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\run" /v "EoEngine"
.
[05/10/2008 08:10|d--------] C:\PROGRA~1\EoRezo
[27/06/2007 13:56|--a------] C:\PROGRA~1\EoRezo\CONFME~1.CYP
[05/10/2008 08:10|d--------] C:\PROGRA~1\EoRezo\EoAdv
[23/09/2008 16:31|--a------] C:\PROGRA~1\EoRezo\EoEngine.exe
[05/10/2008 08:10|--a------] C:\PROGRA~1\EoRezo\eoEngine.url
[04/03/2008 15:13|--a------] C:\PROGRA~1\EoRezo\EOMULT~1.DLL
[08/08/2008 12:56|--a------] C:\PROGRA~1\EoRezo\EOREZO~1.DLL
[15/06/2007 13:49|--a------] C:\PROGRA~1\EoRezo\EOREZO~4.DLL
[14/08/2007 12:45|--a------] C:\PROGRA~1\EoRezo\EO6115~1.DLL
[03/09/2007 11:22|--a------] C:\PROGRA~1\EoRezo\EO4511~1.DLL
[20/09/2007 13:05|--a------] C:\PROGRA~1\EoRezo\EO4515~1.DLL
[21/11/2007 10:14|--a------] C:\PROGRA~1\EoRezo\EO5519~1.DLL
[07/02/2008 16:33|--a------] C:\PROGRA~1\EoRezo\EO551D~1.DLL
[09/05/2007 15:57|--a------] C:\PROGRA~1\EoRezo\EOREZO~2.DLL
[15/06/2007 13:49|--a------] C:\PROGRA~1\EoRezo\EOREZO~3.DLL
[06/07/2007 14:55|--a------] C:\PROGRA~1\EoRezo\EO6CF9~1.DLL
[24/08/2007 15:15|--a------] C:\PROGRA~1\EoRezo\EO400A~1.DLL
[22/11/2007 10:51|--a------] C:\PROGRA~1\EoRezo\EO400E~1.DLL
[08/07/2008 10:44|--a------] C:\PROGRA~1\EoRezo\EO5002~1.DLL
[08/08/2008 11:22|--a------] C:\PROGRA~1\EoRezo\EO5006~1.DLL
[26/06/2007 14:33|--a------] C:\PROGRA~1\EoRezo\FREEIM~1.DLL
[26/06/2007 14:33|--a------] C:\PROGRA~1\EoRezo\Host.cyp
[05/10/2008 08:10|d--------] C:\PROGRA~1\EoRezo\lang
[27/06/2008 11:23|--a------] C:\PROGRA~1\EoRezo\MNGINS~1.DLL
[05/10/2008 08:10|--a------] C:\PROGRA~1\EoRezo\unins000.dat
[05/10/2008 08:10|--a------] C:\PROGRA~1\EoRezo\unins000.exe
[21/12/2007 10:23|--a------] C:\PROGRA~1\EoRezo\user.cyp
[09/05/2007 15:57|--a------] C:\PROGRA~1\EoRezo\EoAdv\EoAdv.dll
[05/10/2008 08:10|--a------] C:\PROGRA~1\EoRezo\EoAdv\eoAdv.url
[24/09/2008 08:24|--a------] C:\PROGRA~1\EoRezo\EoAdv\EOREZO~1.DLL
[26/06/2007 14:33|--a------] C:\PROGRA~1\EoRezo\lang\IHM_EO~3.XML
[26/06/2007 14:33|--a------] C:\PROGRA~1\EoRezo\lang\IH935B~1.XML
[26/06/2007 14:33|--a------] C:\PROGRA~1\EoRezo\lang\IHM_EO~1.XML
[26/06/2007 14:33|--a------] C:\PROGRA~1\EoRezo\lang\IH0447~1.XML
[26/06/2007 14:33|--a------] C:\PROGRA~1\EoRezo\lang\IHM_EO~2.XML
[26/06/2007 14:33|--a------] C:\PROGRA~1\EoRezo\lang\IHM_EO~4.XML
[26/06/2007 14:33|--a------] C:\PROGRA~1\EoRezo\lang\lang_en.xml
[26/06/2007 14:33|--a------] C:\PROGRA~1\EoRezo\lang\lang_es.xml
[26/06/2007 14:33|--a------] C:\PROGRA~1\EoRezo\lang\lang_fr.xml
[26/06/2007 14:33|--a------] C:\PROGRA~1\EoRezo\lang\lang_it.xml
[19/12/2008 19:34|d--------] C:\DOCUME~1\ALEXAN~1.XPS\APPLIC~1\EoRezo
[19/12/2008 19:32|--a------] C:\DOCUME~1\ALEXAN~1.XPS\APPLIC~1\EoRezo\cmhost.cyp
[19/12/2008 19:34|--a------] C:\DOCUME~1\ALEXAN~1.XPS\APPLIC~1\EoRezo\CONFME~1.CYP
[05/12/2008 15:56|d--------] C:\DOCUME~1\ALEXAN~1.XPS\APPLIC~1\EoRezo\db
[19/12/2008 19:34|d--------] C:\DOCUME~1\ALEXAN~1.XPS\APPLIC~1\EoRezo\EODESK~1
[22/10/2008 13:25|d--------] C:\DOCUME~1\ALEXAN~1.XPS\APPLIC~1\EoRezo\eoStats
[19/12/2008 19:32|--a------] C:\DOCUME~1\ALEXAN~1.XPS\APPLIC~1\EoRezo\host.cyp
[19/12/2008 19:32|--a------] C:\DOCUME~1\ALEXAN~1.XPS\APPLIC~1\EoRezo\user.cyp
[05/12/2008 15:56|--a------] C:\DOCUME~1\ALEXAN~1.XPS\APPLIC~1\EoRezo\db\cat.cyp
[19/12/2008 19:34|--a------] C:\DOCUME~1\ALEXAN~1.XPS\APPLIC~1\EoRezo\EODESK~1\config.xml
[19/12/2008 19:34|--a------] C:\DOCUME~1\ALEXAN~1.XPS\APPLIC~1\EoRezo\EODESK~1\EODESK~1.HTM
[19/12/2008 19:34|--a------] C:\DOCUME~1\ALEXAN~1.XPS\APPLIC~1\EoRezo\EODESK~1\USERCO~1.XML
[22/10/2008 15:35|--a------] C:\DOCUME~1\ALEXAN~1.XPS\APPLIC~1\EoRezo\eoStats\eoStats.txt
[19/12/2008 17:52|--a------] C:\WINDOWS\Prefetch\EOENGI~1.PF
[18/12/2008 18:55|--a------] C:\DOCUME~1\ALEXAN~1.XPS\Cookies\AL64E5~1.TXT
[08/12/2008 18:39|--a------] C:\DOCUME~1\ALEXAN~1.XPS\Cookies\AL2C63~1.TXT
[17/11/2008 13:21|--a------] C:\DOCUME~1\ALEXAN~1.XPS\Cookies\AL66CC~2.TXT
[15/11/2008 10:25|--a------] C:\DOCUME~1\ALEXAN~1.XPS\Cookies\AL86CC~1.TXT
[09/09/2008 17:12|--a------] C:\DOCUME~1\ALEXAN~1.XPS\Cookies\ALA6CE~1.TXT

+-----------------------| Everest Poker Elements found :

.

+-----------------------| FunWebProducts/MyWay/MyWebSearch/MyGlobalSearch Elements found :

.

+-----------------------| It's TV Elements found :

.

+-----------------------| Sweetim Elements found :

.

+-----------------------| ADDED SCAN :

+--[HKEY_CURRENT_USER\..\Run]

BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA} REG_SZ "C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe"
swg REG_SZ C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
MsnMsgr REG_SZ "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
Steam REG_SZ "c:\program files\valve\steam\steam.exe" -silent

+--[HKEY_LOCAL_MACHINE\..\Run]

NvCplDaemon REG_SZ RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
nwiz REG_SZ nwiz.exe /install
NvMediaCenter REG_SZ RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
SoundMan REG_SZ SOUNDMAN.EXE
NeroFilterCheck REG_SZ C:\Program Files\Fichiers communs\Ahead\Lib\NeroCheck.exe
avgnt REG_SZ "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
LogitechVideoRepair REG_SZ C:\Program Files\Logitech\Video\ISStart.exe
LogitechCommunicationsManager REG_SZ "C:\Program Files\Fichiers communs\LogiShrd\LComMgr\Communications_Helper.exe"
LogitechQuickCamRibbon REG_SZ "C:\Program Files\Logitech\QuickCam\Quickcam.exe" /hide
SunJavaUpdateSched REG_SZ "C:\Program Files\Java\jre6\bin\jusched.exe"
Piolet REG_SZ C:\Program Files\Piolet\Piolet.exe SILENT
DAEMON Tools REG_SZ "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033
EoEngine REG_SZ "C:\Program Files\EoRezo\EoEngine.exe"
Adobe Reader Speed Launcher REG_SZ "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"

+--[HKEY_USERS\.DEFAULT\..\Run]

+--[HKEY_CURRENT_USER\..\Internet Explorer\MAIN]

Start Page : hxxp://lo.st#home
Start Page : hxxp://www.lo.st

+--[HKEY_LOCAL_MACHINE\..\Internet Explorer\MAIN]

Start Page : hxxp://www.microsoft.com/isapi/redir.dll?prd={SUB_PRD}&clcid={SUB_CLSID}&pver={SUB_PVER}&ar=home

+---------------------------------------------------------------------------+

- "C:\AD-report-Scan-19.12.2008.log" (~9569 bytes)

# END at: 19:36:45 | 19/12/2008 - Time elapsed: 18.3 seconds

+---------------------------------------------------------------------------+
+------------------------------- [ E.O.F - 165 lines ]
+---------------------------------------------------------------------------+