Enlever zango

Bonjour,
je ne sais pas comment est arriver ce truc
ZANGO
g essayer de l enlever via le panneau de config mais rien pouvez vous m aider merci
Configuration: Windows Vista
Firefox 3.0.11

15 réponses

  1. desinstalle AD-R puis :

    Télécharge OTL de OLDTimer

    et enregistre le sur ton Bureau.

    Double clic sur OTL.exe pour le lancer.

    Coche les 2 cases Lop et Purity

    Coche la case devant scan all users

    Clic sur Run Scan.

    A la fin du scan, le Bloc-Notes va s'ouvrir avec le rapport (OTL.txt).

    Ce fichier est sur ton Bureau (en général C:\Documents and settings\le_nom_de_ta_session\OTL.txt)

    NE LE POSTE PAS SUR LE FORUM

    Pour me le transmettre clique sur ce lien : http://www.cijoint.fr/

    Clique sur Parcourir et cherche le fichier ci-dessus.

    Clique sur Ouvrir.

    Clique sur "Cliquez ici pour déposer le fichier".

    Un lien de cette forme :

    http://www.cijoint.fr/cjlink.php?file=cjge368/cijSKAP5fU.txt

    est ajouté dans la page.

    Copie ce lien dans ta réponse.

    Tu feras la meme chose avec le "Extra.txt" s'il t'est demandé
    1. bonjour voila le rapport
      .
      ======= RAPPORT D'AD-REMOVER 1.1.4.5_O | UNIQUEMENT XP/VISTA/SEVEN =======
      .
      Mit à jour par C_XX le 24/06/2009 à 7:10 PM
      Contact: AdRemover.contact@gmail.com
      Site web: http://pagesperso-orange.fr/NosTools/ad_remover.html
      .
      Lancé à: 23:04:39, 29/06/2009 | Mode Normal | Option: CLEAN
      Exécuté de: C:\Program Files\Ad-remover\
      Système d'exploitation: Microsoft® Windows Vista™ Home Premium Service Pack 1 v6.0.6001
      Nom du PC: PC-DE-YZA | Utilisateur actuel: Yza
      .
      Administrateur: Administrateur *Desactive*
      N'est pas administrateur: Invité
      Administrateur: Yza
      .
      ============== ÉLÉMENT(S) NEUTRALISÉ(S) ==============
      .
      .
      HKCR\AppID\{362A53B2-2913-4F8A-82F5-7E0A23FDC6F9}
      HKCR\AppID\EoRezoBHO.DLL
      HKCR\EoRezoBHO.EoBho
      HKCR\EoRezoBHO.EoBho.1
      HKCR\Typelib\{B6ACB3F1-6A83-432C-B854-3E1056F87F4E}
      HKCR\Typelib\{C7403C30-3644-43D8-A82F-4BD84B9682D9}
      HKCU\Software\EoRezo
      HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0BC6E3FA-78EF-4886-842C-5A1258C4455A}
      HKLM\Software\EoRezo
      HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\eoEngine_is1
      HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\SoftwareUpdate_is1
      HKU\S-1-5-21-1594124780-1527316666-3675824102-1000\Software\Binary Noise\mPlayer\kiwee_toolbar_installer.exe
      HKU\.DEFAULT\Software\AGI
      HKCU\Software\AGI
      HKLM\Software\AGI
      HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\Eoengine
      HKLM\Software\Microsoft\Windows\CurrentVersion\RunOnce\\Softwarehelper
      .
      C:\Users\Yza\AppData\Roaming\EoRezo\SoftwareUpdate
      C:\Users\Yza\AppData\Roaming\EoRezo\SoftwareUpdate\Download
      C:\Users\Yza\AppData\Roaming\EoRezo\SoftwareUpdate\help_config.cyp
      C:\Users\Yza\AppData\Roaming\EoRezo\SoftwareUpdate\Software
      C:\Users\Yza\AppData\Roaming\EoRezo\SoftwareUpdate\SoftwareUpdate.exe
      C:\Users\Yza\AppData\Roaming\EoRezo\SoftwareUpdate\SoftwareUpdateHP.exe
      C:\Users\Yza\AppData\Roaming\EoRezo\SoftwareUpdate\unins000.exe
      C:\Users\Yza\AppData\Roaming\EoRezo\SoftwareUpdate\user_config.cyp
      C:\Users\Yza\AppData\Roaming\EoRezo\SoftwareUpdate\user_profil.cyp
      C:\Users\Yza\AppData\Roaming\EoRezo
      C:\Users\Yza\AppData\LocalLow\Kiwee Toolbar\Logs
      C:\Users\Yza\AppData\LocalLow\Kiwee Toolbar\Logs\KiweeHook.log
      C:\Users\Yza\AppData\LocalLow\Kiwee Toolbar\Logs\KiweeIEToolbar.log
      C:\Users\Yza\AppData\LocalLow\Kiwee Toolbar
      C:\Program Files\EoRezo\EoAdv
      C:\Program Files\EoRezo\EoEngine.exe
      C:\Program Files\EoRezo\EoMultiLanguage.dll
      C:\Program Files\EoRezo\EoRezoComm.dll
      C:\Program Files\EoRezo\EoRezoImg_17.dll
      C:\Program Files\EoRezo\EoRezoImg_19.dll
      C:\Program Files\EoRezo\EoRezoImg_20.dll
      C:\Program Files\EoRezo\EoRezoImg_21.dll
      C:\Program Files\EoRezo\EoRezoImg_22.dll
      C:\Program Files\EoRezo\EoRezoImg_23.dll
      C:\Program Files\EoRezo\EoRezoTools_16.dll
      C:\Program Files\EoRezo\EoRezoTools_17.dll
      C:\Program Files\EoRezo\EoRezoTools_18.dll
      C:\Program Files\EoRezo\EoRezoTools_20.dll
      C:\Program Files\EoRezo\EoRezoTools_21.dll
      C:\Program Files\EoRezo\EoRezoTools_26.dll
      C:\Program Files\EoRezo\EoRezoTools_27.dll
      C:\Program Files\EoRezo\EoRezoTools_28.dll
      C:\Program Files\EoRezo\EoRezoTools_29.dll
      C:\Program Files\EoRezo\EoRezoTools_30.dll
      C:\Program Files\EoRezo\FreeImage.dll
      C:\Program Files\EoRezo\MngInstaller.dll
      C:\Program Files\EoRezo\unins000.exe
      C:\Program Files\EoRezo\EoAdv\atl90.dll
      C:\Program Files\EoRezo\EoAdv\EoAdv.dll
      C:\Program Files\EoRezo\EoAdv\mfc90.dll
      C:\Program Files\EoRezo\EoAdv\Microsoft.VC90.ATL.manifest
      C:\Program Files\EoRezo\EoAdv\Microsoft.VC90.CRT.manifest
      C:\Program Files\EoRezo\EoAdv\Microsoft.VC90.MFC.manifest
      C:\Program Files\EoRezo\EoAdv\msvcr90.dll
      C:\Program Files\EoRezo
      C:\Users\Yza\AppData\Roaming\Agi\config
      C:\Users\Yza\AppData\Roaming\Agi\KiweeToolbar
      C:\Users\Yza\AppData\Roaming\Agi\logs
      C:\Users\Yza\AppData\Roaming\Agi\config\userconfig.cfg
      C:\Users\Yza\AppData\Roaming\Agi\KiweeToolbar\config
      C:\Users\Yza\AppData\Roaming\Agi\KiweeToolbar\config\appuserconfig.cfg
      C:\Users\Yza\AppData\Roaming\Agi\logs\pyagcore.log
      C:\Users\Yza\AppData\Roaming\Agi
      C:\Users\Yza\AppData\Local\Temp\nsbC115.tmp\Install.dll
      C:\Users\Yza\AppData\Local\Temp\nsbC115.tmp\System.dll
      C:\Users\Yza\AppData\Local\Temp\nsbC115.tmp
      C:\Users\Yza\AppData\Local\Temp\nsdC789.tmp\Install.dll
      C:\Users\Yza\AppData\Local\Temp\nsdC789.tmp\System.dll
      C:\Users\Yza\AppData\Local\Temp\nsdC789.tmp
      C:\Users\Yza\AppData\Local\Temp\nseA080.tmp\Install.dll
      C:\Users\Yza\AppData\Local\Temp\nseA080.tmp\Resource.dll
      C:\Users\Yza\AppData\Local\Temp\nseA080.tmp\System.dll
      C:\Users\Yza\AppData\Local\Temp\nseA080.tmp
      C:\Users\Yza\AppData\Local\Temp\nsh1611.tmp\Install.dll
      C:\Users\Yza\AppData\Local\Temp\nsh1611.tmp\System.dll
      C:\Users\Yza\AppData\Local\Temp\nsh1611.tmp
      C:\Users\Yza\AppData\Local\Temp\nsh6681.tmp\Install.dll
      C:\Users\Yza\AppData\Local\Temp\nsh6681.tmp\System.dll
      C:\Users\Yza\AppData\Local\Temp\nsh6681.tmp
      C:\Users\Yza\AppData\Local\Temp\nsj8DBB.tmp\Install.dll
      C:\Users\Yza\AppData\Local\Temp\nsj8DBB.tmp\System.dll
      C:\Users\Yza\AppData\Local\Temp\nsj8DBB.tmp
      C:\Users\Yza\AppData\Local\Temp\nsmC8F2.tmp\Install.dll
      C:\Users\Yza\AppData\Local\Temp\nsmC8F2.tmp\Resource.dll
      C:\Users\Yza\AppData\Local\Temp\nsmC8F2.tmp\System.dll
      C:\Users\Yza\AppData\Local\Temp\nsmC8F2.tmp
      C:\Users\Yza\AppData\Local\Temp\nsq5BA8.tmp\Install.dll
      C:\Users\Yza\AppData\Local\Temp\nsq5BA8.tmp\LaunchHelp.dll
      C:\Users\Yza\AppData\Local\Temp\nsq5BA8.tmp\Resource.dll
      C:\Users\Yza\AppData\Local\Temp\nsq5BA8.tmp\System.dll
      C:\Users\Yza\AppData\Local\Temp\nsq5BA8.tmp
      C:\Users\Yza\AppData\Local\Temp\nsr2BA3.tmp\Install.dll
      C:\Users\Yza\AppData\Local\Temp\nsr2BA3.tmp\Resource.dll
      C:\Users\Yza\AppData\Local\Temp\nsr2BA3.tmp\System.dll
      C:\Users\Yza\AppData\Local\Temp\nsr2BA3.tmp
      C:\Users\Yza\AppData\Local\Temp\nssCEE8.tmp\Install.dll
      C:\Users\Yza\AppData\Local\Temp\nssCEE8.tmp\Resource.dll
      C:\Users\Yza\AppData\Local\Temp\nssCEE8.tmp\System.dll
      C:\Users\Yza\AppData\Local\Temp\nssCEE8.tmp
      C:\Users\Yza\AppData\Local\Temp\nsv516B.tmp\Install.dll
      C:\Users\Yza\AppData\Local\Temp\nsv516B.tmp\System.dll
      C:\Users\Yza\AppData\Local\Temp\nsv516B.tmp
      C:\Users\Yza\AppData\Local\Temp\nsx7B49.tmp\Install.dll
      C:\Users\Yza\AppData\Local\Temp\nsx7B49.tmp\Resource.dll
      C:\Users\Yza\AppData\Local\Temp\nsx7B49.tmp\System.dll
      C:\Users\Yza\AppData\Local\Temp\nsx7B49.tmp
      C:\Users\Yza\AppData\Roaming\MICROS~1\Windows\Cookies\yza@dl.eorezo[1].txt
      C:\Users\Yza\AppData\Roaming\MICROS~1\Windows\Cookies\yza@eorezo[2].txt

      (!) -- Fichiers temporaires supprimés.

      .
      ============== Scan additionnel ==============
      .

      * Mozilla FireFox Version 3.0.11 *

      Nom du profil: e21skii6.default (Yza)
      .
      (Prefs.js) user_pref("browser.startup.homepage", "hxxp://www.google.fr/ig?hl=fr");
      (Prefs.js) user_pref("browser.startup.homepage_override.mstone", "rv:1.9.0.11");
      .
      .

      * Internet Explorer Version 8.0.6001.18783 *

      [HKEY_CURRENT_USER\..\Internet Explorer\Main]

      Default_Page_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
      Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
      Search bar: hxxp://go.microsoft.com/fwlink/?linkid=54896
      Search Page: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
      Start Page: hxxp://www.google.fr/

      [HKEY_LOCAL_MACHINE\..\Internet Explorer\Main]

      Default_Page_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
      Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
      Search bar: hxxp://search.msn.com/spbasic.htm
      Search Page: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
      Start Page: hxxp://fr.msn.com/

      [HKEY_LOCAL_MACHINE\..\Internet Explorer\ABOUTURLS]

      Tabs: res://ieframe.dll/tabswelcome.htm

      .
      ============== Processus Caches/Bloque ==============
      .
      PID: 1188 [LOCKED] audiodg.exe
      .

      ============== Suspect (Cracks, Serials ... ) ==============

      .
      C:\Users\Yza\Downloads\eMule\Incoming\Atomix Virtual DJ 5.7 (2008) +crack +38 skins +109 effects +123 samples.rar
      C:\Users\Yza\Downloads\eMule\Incoming\Virtual Dj 4.2 Full Crack Skins Samples Plugins Effects Vdjtimecode.rar
      .
      ===================================
      .
      8302 Octet(s) - C:\Ad-Report-CLEAN.log
      4485 Octet(s) - C:\Ad-Report-SCAN.log
      .
      780 Fichier(s) - C:\Users\Yza\AppData\Local\Temp
      2 Fichier(s) - C:\Windows\Temp
      .
      39 Fichier(s) - C:\Program Files\Ad-remover\BACKUP
      80 Fichier(s) - C:\Program Files\Ad-remover\QUARANTINE
      .
      Fin à: 23:17:05 | 29/06/2009
      .
      ============== E.O.F ==============
      .
      1. up
        a votre avis c bon ou je dois passer un autre prog
        pour l instant plus de trace de zango
    2. tu peux faire le nettoyage avec , puis le desinstaller ensuite
      1. ca ne redemare pas il ne veut pas ce relancer
        il demande la langue et apres plus rien que faire
    3. .
      ======= RAPPORT D'AD-REMOVER 1.1.4.5_O | UNIQUEMENT XP/VISTA/SEVEN =======
      .
      Mit à jour par C_XX le 24/06/2009 à 7:10 PM
      Contact: AdRemover.contact@gmail.com
      Site web: http://pagesperso-orange.fr/NosTools/ad_remover.html
      .
      Lancé à: 18:09:14, 29/06/2009 | Mode Normal | Option: SCAN
      Exécuté de: C:\Program Files\Ad-remover\
      Système d'exploitation: Microsoft® Windows Vista™ Home Premium Service Pack 1 v6.0.6001
      Nom du PC: PC-DE-YZA | Utilisateur actuel: Yza
      .
      Administrateur: Administrateur *Desactive*
      N'est pas administrateur: Invité
      Administrateur: Yza
      .
      ============== ÉLÉMENT(S) TROUVÉ(S) ==============
      .
      .
      HKCR\AppID\{362A53B2-2913-4F8A-82F5-7E0A23FDC6F9}
      HKCR\AppID\EoRezoBHO.DLL
      HKCR\EoRezoBHO.EoBho
      HKCR\EoRezoBHO.EoBho.1
      HKCR\Typelib\{B6ACB3F1-6A83-432C-B854-3E1056F87F4E}
      HKCR\Typelib\{C7403C30-3644-43D8-A82F-4BD84B9682D9}
      HKCU\Software\EoRezo
      HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0BC6E3FA-78EF-4886-842C-5A1258C4455A}
      HKLM\Software\Classes\AppID\{362A53B2-2913-4F8A-82F5-7E0A23FDC6F9}
      HKLM\Software\Classes\AppID\EoRezoBHO.DLL
      HKLM\Software\Classes\EoRezoBHO.EoBho
      HKLM\Software\Classes\EoRezoBHO.EoBho.1
      HKLM\Software\Classes\Typelib\{B6ACB3F1-6A83-432C-B854-3E1056F87F4E}
      HKLM\Software\Classes\Typelib\{C7403C30-3644-43D8-A82F-4BD84B9682D9}
      HKLM\Software\EoRezo
      HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\eoEngine_is1
      HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\SoftwareUpdate_is1
      HKU\S-1-5-21-1594124780-1527316666-3675824102-1000\Software\Binary Noise\mPlayer\kiwee_toolbar_installer.exe
      HKU\S-1-5-21-1594124780-1527316666-3675824102-1000\Software\Eorezo
      HKU\.DEFAULT\Software\AGI
      HKCU\Software\AGI
      HKLM\Software\AGI
      HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\Eoengine
      HKLM\Software\Microsoft\Windows\CurrentVersion\RunOnce\\Softwarehelper
      .
      C:\Users\Yza\AppData\Roaming\EoRezo
      C:\Users\Yza\AppData\LocalLow\Kiwee Toolbar
      C:\Program Files\EoRezo
      C:\Users\Yza\AppData\Roaming\Agi
      C:\Users\Yza\AppData\Local\Temp\nsbC115.tmp
      C:\Users\Yza\AppData\Local\Temp\nsdC789.tmp
      C:\Users\Yza\AppData\Local\Temp\nseA080.tmp
      C:\Users\Yza\AppData\Local\Temp\nsh1611.tmp
      C:\Users\Yza\AppData\Local\Temp\nsh6681.tmp
      C:\Users\Yza\AppData\Local\Temp\nsj8DBB.tmp
      C:\Users\Yza\AppData\Local\Temp\nsmC8F2.tmp
      C:\Users\Yza\AppData\Local\Temp\nsq5BA8.tmp
      C:\Users\Yza\AppData\Local\Temp\nsr2BA3.tmp
      C:\Users\Yza\AppData\Local\Temp\nssCEE8.tmp
      C:\Users\Yza\AppData\Local\Temp\nsv516B.tmp
      C:\Users\Yza\AppData\Local\Temp\nsx7B49.tmp
      C:\Users\Yza\AppData\Roaming\MICROS~1\Windows\Cookies\yza@dl.eorezo[1].txt
      C:\Users\Yza\AppData\Roaming\MICROS~1\Windows\Cookies\yza@eorezo[2].txt
      .
      ============== Scan additionnel ==============
      .

      * Mozilla FireFox Version 3.0.11 *

      Nom du profil: e21skii6.default (Yza)
      .
      (Prefs.js) user_pref("browser.startup.homepage", "hxxp://www.google.fr/ig?hl=fr");
      (Prefs.js) user_pref("browser.startup.homepage_override.mstone", "rv:1.9.0.11");
      .
      .

      * Internet Explorer Version 8.0.6001.18783 *

      [HKEY_CURRENT_USER\..\Internet Explorer\Main]

      Default_Page_URL: hxxp://go.microsoft.com/fwlink/?LinkId=69157
      Search Page: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
      Start Page: hxxp://www.google.fr/
      First Home Page: hxxp://www.windows.fr/ie8/bienvenue

      [HKEY_LOCAL_MACHINE\..\Internet Explorer\Main]

      Default_Page_URL: hxxp://go.microsoft.com/fwlink/?LinkId=69157
      Default_Search_URL: hxxp://go.microsoft.com/fwlink/?LinkId=54896
      Search Page: hxxp://go.microsoft.com/fwlink/?LinkId=54896
      Start Page: hxxp://www.msn.com/

      [HKEY_LOCAL_MACHINE\..\Internet Explorer\ABOUTURLS]

      Tabs: hxxp://y.lo.st

      .
      ============== Processus Caches/Bloque ==============
      .
      PID: 1180 [LOCKED] audiodg.exe
      .

      ============== Suspect (Cracks, Serials ... ) ==============

      .
      C:\Users\Yza\Downloads\eMule\Incoming\Atomix Virtual DJ 5.7 (2008) +crack +38 skins +109 effects +123 samples.rar
      C:\Users\Yza\Downloads\eMule\Incoming\Virtual Dj 4.2 Full Crack Skins Samples Plugins Effects Vdjtimecode.rar
      .
      ===================================
      .
      4171 Octet(s) - C:\Ad-Report-SCAN.log
      .
      1391 Fichier(s) - C:\Users\Yza\AppData\Local\Temp
      3 Fichier(s) - C:\Windows\Temp
      .
      18 Fichier(s) - C:\Program Files\Ad-remover\BACKUP
      8 Fichier(s) - C:\Program Files\Ad-remover\QUARANTINE
      .
      Fin à: 18:34:56 | 29/06/2009
      .
      ============== E.O.F ==============
      .
      1. ------- LOGFILE OF AD-REMOVER 1.1.3.7 | ONLY XP/VISTA -------

        Updated by C_XX on 11/05/2009 at 16:00
        Contact: AdRemover.contact@gmail.com
        Website: http://pagesperso-orange.fr/NosTools/ad_remover.html

        **** LIMITED TO ****

        Known Adwares
        Eorezo
        It's TV
        Sweetim

        ********************

        Start at: 12:53:07, 15/05/2009 | Boot mode: Normal Boot
        Option: Clean | Executed from: C:\Program Files\Ad-remover\
        Operating System: Microsoft® Windows Vista™ Home Premium Service Pack 1 (version 6.0.6001)
        Computer Name: PC-DE-YZA
        Current User: Yza - Administrator
        Drive(s):
        - C:\ (File System: NTFS)
        - E:\ (File System: NTFS)

        (!) ---- IE start pages/Tabs reset

        ============ Known Adwares Deleted ============

        .
        .
        C:\Users\Yza\AppData\Local\Temp\nsa7767.tmp
        C:\Users\Yza\AppData\Local\Temp\nsa8E93.tmp
        C:\Users\Yza\AppData\Local\Temp\nsc592D.tmp
        C:\Users\Yza\AppData\Local\Temp\nsi2BF3.tmp
        C:\Users\Yza\AppData\Local\Temp\nslA04A.tmp
        C:\Users\Yza\AppData\Local\Temp\nslC3E0.tmp
        C:\Users\Yza\AppData\Local\Temp\nslE844.tmp
        C:\Users\Yza\AppData\Local\Temp\nsnEA16.tmp
        C:\Users\Yza\AppData\Local\Temp\nso1F29.tmp
        C:\Users\Yza\AppData\Local\Temp\nso3577.tmp
        C:\Users\Yza\AppData\Local\Temp\nsq1DD7.tmp
        C:\Users\Yza\AppData\Local\Temp\nsq5D4B.tmp
        C:\Users\Yza\AppData\Local\Temp\nss7563.tmp
        C:\Users\Yza\AppData\Local\Temp\nsvB5D2.tmp
        C:\Users\Yza\AppData\Local\Temp\nsw544D.tmp
        C:\Users\Yza\AppData\Local\Temp\nswC75F.tmp
        C:\Users\Yza\AppData\Local\Temp\nszBC14.tmp
        C:\Windows\Prefetch\AU_.EXE-94FE6029.pf
        C:\Windows\Prefetch\BU_.EXE-15FDEF5E.pf
        C:\Users\Yza\AppData\Roaming\Microsoft\Windows\Cookies\yza@atdmt[1].txt
        C:\Users\Yza\AppData\Roaming\Microsoft\Windows\Cookies\yza@bs.serving-sys[2].txt

        +-----------------| Eorezo Elements Deleted :

        HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\Eoengine
        HKLM\Software\Microsoft\Windows\CurrentVersion\RunOnce\\Softwarehelper
        HKCR\AppID\{362A53B2-2913-4F8A-82F5-7E0A23FDC6F9}
        HKCR\AppID\EoRezoBHO.DLL
        HKCR\EoRezoBHO.EoBho
        HKCR\EoRezoBHO.EoBho.1
        HKCR\Typelib\{B6ACB3F1-6A83-432C-B854-3E1056F87F4E}
        HKCU\Software\EoRezo
        HKLM\Software\EoRezo
        HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\eoEngine_is1
        HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\SoftwareUpdate_is1
        .
        C:\Program Files\EoRezo
        C:\Users\Yza\AppData\Roaming\EoRezo
        C:\Windows\Prefetch\SOFTWAREUPDATEHP.EXE-0EDC2FB5.pf
        C:\Users\Yza\AppData\Roaming\Microsoft\Windows\Cookies\yza@dl.eorezo[1].txt
        C:\Users\Yza\AppData\Roaming\Microsoft\Windows\Cookies\yza@eorezo[1].txt
        C:\Users\Yza\AppData\Roaming\Microsoft\Windows\Cookies\yza@eorezo[3].txt

        +-----------------| It's TV Elements Deleted :

        .

        +-----------------| Sweetim Elements Deleted :

        .

        (!) ---- Temp files deleted.
        (!) ---- Recycle bin emptied in all drives.

        +-----------------| Added Scan:

        ---- Mozilla FireFox Version 3.0.10 ----

        ProfilePath: e21skii6.default (Yza)
        .
        (Prefs.js) user_pref("browser.startup.homepage", "hxxp://www.google.fr/ig?hl=fr");
        (Prefs.js) user_pref("browser.startup.homepage_override.mstone", "rv:1.9.0.10");
        .

        ---- Internet Explorer Version 8.0.6001.18702 ----

        [HKEY_CURRENT_USER\..\Internet Explorer\Main]

        Default_Page_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
        Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
        Search bar: hxxp://go.microsoft.com/fwlink/?linkid=54896
        Search Page: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
        Start Page: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome

        [HKEY_USERS\S-1-5-21-1594124780-1527316666-3675824102-1000\..\Internet Explorer\Main]

        Default_Page_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
        Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
        Search bar: hxxp://go.microsoft.com/fwlink/?linkid=54896
        Search Page: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
        Start Page: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome

        [HKEY_LOCAL_MACHINE\..\Internet Explorer\Main]

        Default_Page_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
        Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
        Search bar: hxxp://search.msn.com/spbasic.htm
        Search Page: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
        Start Page: hxxp://fr.msn.com/

        [HKEY_LOCAL_MACHINE\..\Internet Explorer\ABOUTURLS]

        Tabs: hxxp://ieframe.dll/tabswelcome.htm

        =========== Suspicious ==========

        +---------------------------------------------------------------------------+

        4661 Byte(s) - C:\Ad-Report-Clean-15.05.2009.log
        4461 Byte(s) - C:\Ad-Report-Scan-12.05.2009.log

        21 File(s) - C:\Program Files\Ad-remover\BACKUP
        8 File(s) - C:\Program Files\Ad-remover\QUARANTINE

        End at: 13:11:21 | 15/05/2009
        .
        +-----------------| E.O.F
        .
        A
        1. je l ai enlever mais il revient une autre soluce j ai un rapport hijack si ca vous interesse