Pub intempestive mozilla

Bonjour,
depuis quelques jours je suis assommer de pub sur firefox mozilla ,c'est un truc de dingue ,quelle est la méthode pour faire disparaitre tout sa ? ,j'ai lu quelques trucs a ce sujet notamment un logiciel qui permet de voir ? hajkics (un truc du genre) merci de me repondre
Configuration: Windows XP
Firefox 3.5.7

16 réponses

  1. Contributeur sécurité
    Supprimes cette toolbar
    C:\Program Files\Freecorder

    1)
    Cherches et cliques sur C:\Program Files\trend micro\timéolia.exe
    Au menu principal, choisir do a scan only, puis cocher la case devant les lignes suivantes à corriger et cliquer en bas sur Fix Checked

    O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
    O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
    O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
    O4 - HKLM\..\Run: [Disc Detector] C:\Program Files\Creative\ShareDLL\CtNotify.exe
    O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
    O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE LOCAL')
    O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE RÉSEAU')
    O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
    O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
    O23 - Service: BrowserZinc Service - Unknown owner - C:\Documents and Settings\All Users\Application Data\BrowserZinc\browserzinc115.exe (file missing)

    ……………………..

    2)
    Mettre à jour XP
    https://www.commentcamarche.net/telecharger/systemes-d-exploitation/20759-sp3-windows-xp/

    ………….

    3)
    IMPORTANT

    Purger la restauration systeme XP

    http://www.bibou0007.com/windows-xp-f101/purger-la-restauration-du-systeme-sous-windows-xp-t151.htm

    ……………..

    4)
    Télécharge ToolsCleaner2sur ton Bureau.
    https://www.commentcamarche.net/telecharger/securite/22061-toolscleaner/

    * Double-clique (clic droit "en tant qu'administrateur" pour Vista) sur ToolsCleaner2.exe pour le lancer.
    * Clique sur Recherche et laisse le scan agir.
    * Clique sur Suppression pour finaliser.
    * Tu peux, si tu le souhaites, te servir des Options Facultatives.
    * Clique sur Quitter pour obtenir le rapport.
    * Poste le rapport (TCleaner.txt) qui se trouve à la racine de ton disque dur (C:\).

    Tu peux supprimer ToolCleaner ensuite

    0
    1. je vient d'essayer et c'est le jour et la nuit ,plus de pub et il est beaucoup plus fluide ,c'est vraiment agréable.

      Enfin sa vas redevenir agréable de gratter sur le net .

      merci beaucoup
      0
      1. Contributeur sécurité
        pour moi ca va

        de ton côte, comment va le pc ?
        0
        1. voila le rapport ,en esperant que tout vas bien :

          Logfile of random's system information tool 1.06 (written by random/random)
          Run by timéolia at 2010-01-13 22:06:36
          Microsoft Windows XP Professionnel Service Pack 2
          System drive C: has 15 GB (38%) free of 39 GB
          Total RAM: 1023 MB (66% free)

          Logfile of Trend Micro HijackThis v2.0.2
          Scan saved at 22:06:38, on 13/01/2010
          Platform: Windows XP SP2 (WinNT 5.01.2600)
          MSIE: Internet Explorer v8.00 (8.00.6001.18702)
          Boot mode: Normal

          Running processes:
          C:\WINDOWS\System32\smss.exe
          C:\WINDOWS\system32\winlogon.exe
          C:\WINDOWS\system32\services.exe
          C:\WINDOWS\system32\lsass.exe
          C:\WINDOWS\system32\svchost.exe
          C:\WINDOWS\System32\svchost.exe
          C:\WINDOWS\system32\spoolsv.exe
          C:\Program Files\Avira\AntiVir Desktop\sched.exe
          C:\WINDOWS\Explorer.EXE
          C:\Program Files\Avira\AntiVir Desktop\avguard.exe
          C:\WINDOWS\system32\CTsvcCDA.EXE
          C:\WINDOWS\System32\nvsvc32.exe
          C:\WINDOWS\System32\svchost.exe
          C:\WINDOWS\system32\MsPMSPSv.exe
          C:\Program Files\TechCity Solutions\AliceSAV\AliceAgent.exe
          C:\WINDOWS\system32\RUNDLL32.EXE
          C:\Program Files\Razer\razerhid.exe
          C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
          C:\WINDOWS\system32\rundll32.exe
          C:\Program Files\Creative\ShareDLL\CtNotify.exe
          C:\Program Files\Freecorder\FLVSrvc.exe
          C:\WINDOWS\system32\ctfmon.exe
          C:\Program Files\Razer\razerofa.exe
          C:\Program Files\Creative\ShareDLL\MediaDet.Exe
          C:\WINDOWS\system32\wuauclt.exe
          C:\Program Files\Mozilla Firefox\firefox.exe
          C:\Documents and Settings\timéolia\Mes documents\Téléchargements\RSIT.exe
          C:\Program Files\trend micro\timéolia.exe

          R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr/firefox?client=firefox-a&rls=org.mozilla:fr:official
          R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
          R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
          R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
          R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
          R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Alice ADSL
          R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
          R3 - URLSearchHook: Freecorder Toolbar - {1392b8d2-5c05-419f-a8f6-b9f15a596612} - C:\Program Files\Freecorder\tbFree.dll
          O2 - BHO: Freecorder Toolbar - {1392b8d2-5c05-419f-a8f6-b9f15a596612} - C:\Program Files\Freecorder\tbFree.dll
          O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
          O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
          O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
          O3 - Toolbar: Freecorder Toolbar - {1392b8d2-5c05-419f-a8f6-b9f15a596612} - C:\Program Files\Freecorder\tbFree.dll
          O4 - HKLM\..\Run: [AliceSAV] C:\Program Files\TechCity Solutions\AliceSAV\AliceAgent.exe
          O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
          O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
          O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\System32\NvMcTray.dll,NvTaskbarInit
          O4 - HKLM\..\Run: [razer] C:\Program Files\Razer\razerhid.exe
          O4 - HKLM\..\Run: [UpdReg] C:\WINDOWS\Updreg.exe
          O4 - HKLM\..\Run: [Jet Detection] C:\Program Files\Creative\SBAudigy\PROGRAM\ADGJDet.exe
          O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
          O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
          O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Fichiers communs\Adobe\ARM\1.0\AdobeARM.exe"
          O4 - HKLM\..\Run: [Disc Detector] C:\Program Files\Creative\ShareDLL\CtNotify.exe
          O4 - HKLM\..\Run: [CTStartup] C:\Program Files\Creative\SBAudigy\Program\CTEaxSpl.EXE /run
          O4 - HKLM\..\Run: [Freecorder FLV Service] "C:\Program Files\Freecorder\FLVSrvc.exe" /run
          O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
          O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE LOCAL')
          O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE RÉSEAU')
          O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
          O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
          O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
          O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
          O23 - Service: Avira AntiVir Planificateur (AntiVirSchedulerService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\sched.exe
          O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
          O23 - Service: BrowserZinc Service - Unknown owner - C:\Documents and Settings\All Users\Application Data\BrowserZinc\browserzinc115.exe (file missing)
          O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.EXE
          O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
          0
          1. Contributeur sécurité
            redémarres le pc pour que les suppressions soient effectives

            ensuite, vides la quarantaine

            puis

            relances rsit et postes juste le rapport log
            0
            1. voila le rapport de malwarebites :

              Malwarebytes' Anti-Malware 1.44
              Version de la base de données: 3556
              Windows 5.1.2600 Service Pack 2
              Internet Explorer 8.0.6001.18702

              13/01/2010 21:47:31
              mbam-log-2010-01-13 (21-47-31).txt

              Type de recherche: Examen complet (C:\|)
              Eléments examinés: 135952
              Temps écoulé: 1 hour(s), 15 minute(s), 19 second(s)

              Processus mémoire infecté(s): 0
              Module(s) mémoire infecté(s): 9
              Clé(s) du Registre infectée(s): 59
              Valeur(s) du Registre infectée(s): 4
              Elément(s) de données du Registre infecté(s): 0
              Dossier(s) infecté(s): 44
              Fichier(s) infecté(s): 248

              Processus mémoire infecté(s):
              (Aucun élément nuisible détecté)

              Module(s) mémoire infecté(s):
              C:\Program Files\Web Search Operator\4.2.0.2150\lri.dll (Adware.Agent) -> Delete on reboot.
              C:\Program Files\Web Search Operator\4.2.0.2150\WSOCommon.dll (Adware.Agent) -> Delete on reboot.
              C:\Program Files\Web Search Operator\4.2.0.2150\FF\components\WSOFFAddOn.dll (Adware.Agent) -> Delete on reboot.
              C:\Program Files\Automated Content Enhancer\4.2.0.5360\ACECommon.dll (Adware.Agent) -> Delete on reboot.
              C:\Program Files\Automated Content Enhancer\4.2.0.5360\lri.dll (Adware.Agent) -> Delete on reboot.
              C:\Program Files\Automated Content Enhancer\4.2.0.5360\FF\components\ACEFFAddOn.dll (Adware.Agent) -> Delete on reboot.
              C:\Program Files\Customized Platform Advancer\4.2.0.2050\CPACommon.dll (Adware.Agent) -> Delete on reboot.
              C:\Program Files\Customized Platform Advancer\4.2.0.2050\lri.dll (Adware.Agent) -> Delete on reboot.
              C:\Program Files\Customized Platform Advancer\4.2.0.2050\FF\components\CPAFFAddOn.dll (Adware.Agent) -> Delete on reboot.

              Clé(s) du Registre infectée(s):
              HKEY_CLASSES_ROOT\explorerbar.cmw (Adware.Agent) -> Quarantined and deleted successfully.
              HKEY_CLASSES_ROOT\TypeLib\{f5b8c69c-9b45-4a6a-9380-df225c546ae7} (Adware.Agent) -> Quarantined and deleted successfully.
              HKEY_CLASSES_ROOT\Interface\{629cd6c2-e4c5-4554-aeb8-12e4e2cd40ff} (Adware.Agent) -> Quarantined and deleted successfully.
              HKEY_CLASSES_ROOT\CLSID\{b72681c0-a222-4b21-a0e2-53a5a5ca3d41} (Adware.Agent) -> Quarantined and deleted successfully.
              HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{b72681c0-a222-4b21-a0e2-53a5a5ca3d41} (Adware.Agent) -> Quarantined and deleted successfully.
              HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{b72681c0-a222-4b21-a0e2-53a5a5ca3d41} (Adware.Agent) -> Quarantined and deleted successfully.
              HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{b72681c0-a222-4b21-a0e2-53a5a5ca3d41} (Adware.Agent) -> Quarantined and deleted successfully.
              HKEY_CLASSES_ROOT\explorerbar.cmw.1 (Adware.Agent) -> Quarantined and deleted successfully.
              HKEY_CLASSES_ROOT\explorerbar.funexplorer (Adware.Agent) -> Quarantined and deleted successfully.
              HKEY_CLASSES_ROOT\TypeLib\{ac5ab953-ed25-4f9c-87f0-b086b0178ffa} (Adware.Agent) -> Quarantined and deleted successfully.
              HKEY_CLASSES_ROOT\Interface\{6160f76a-1992-4b17-a32d-0c706d159105} (Adware.Agent) -> Quarantined and deleted successfully.
              HKEY_CLASSES_ROOT\CLSID\{42c7c39f-3128-4a17-bdb7-91c46032b5b9} (Adware.Agent) -> Quarantined and deleted successfully.
              HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{42c7c39f-3128-4a17-bdb7-91c46032b5b9} (Adware.Agent) -> Quarantined and deleted successfully.
              HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{42c7c39f-3128-4a17-bdb7-91c46032b5b9} (Adware.Agent) -> Quarantined and deleted successfully.
              HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{42c7c39f-3128-4a17-bdb7-91c46032b5b9} (Adware.Agent) -> Quarantined and deleted successfully.
              HKEY_CLASSES_ROOT\explorerbar.funexplorer.1 (Adware.Agent) -> Quarantined and deleted successfully.
              HKEY_CLASSES_ROOT\explorerbar.funredirector (Adware.Agent) -> Quarantined and deleted successfully.
              HKEY_CLASSES_ROOT\TypeLib\{883dfc00-8a21-411d-956c-73a4e4b7d16f} (Adware.Agent) -> Quarantined and deleted successfully.
              HKEY_CLASSES_ROOT\Interface\{480098c6-f6ad-4c61-9b5c-2bae228a34d1} (Adware.Agent) -> Quarantined and deleted successfully.
              HKEY_CLASSES_ROOT\CLSID\{eb4a577d-bcad-4b1c-8af2-9a74b8dd3431} (Adware.Agent) -> Quarantined and deleted successfully.
              HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{eb4a577d-bcad-4b1c-8af2-9a74b8dd3431} (Adware.Agent) -> Quarantined and deleted successfully.
              HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{eb4a577d-bcad-4b1c-8af2-9a74b8dd3431} (Adware.Agent) -> Quarantined and deleted successfully.
              HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{eb4a577d-bcad-4b1c-8af2-9a74b8dd3431} (Adware.Agent) -> Quarantined and deleted successfully.
              HKEY_CLASSES_ROOT\explorerbar.funredirector.1 (Adware.Agent) -> Quarantined and deleted successfully.
              HKEY_CLASSES_ROOT\explorerbar.tcp (Adware.Agent) -> Quarantined and deleted successfully.
              HKEY_CLASSES_ROOT\TypeLib\{2a743834-05f4-4ed4-8a1c-41332b10ac0c} (Adware.Agent) -> Quarantined and deleted successfully.
              HKEY_CLASSES_ROOT\Interface\{1081d532-7de4-40bd-b912-388fa6b27c78} (Adware.Agent) -> Quarantined and deleted successfully.
              HKEY_CLASSES_ROOT\CLSID\{cac89ff9-34a9-4431-8cfe-292a47f843bc} (Adware.Agent) -> Quarantined and deleted successfully.
              HKEY_CURRENT_USER\SOFTWARE\Microsoft\Explorer\Bars\{cac89ff9-34a9-4431-8cfe-292a47f843bc} (Adware.Agent) -> Quarantined and deleted successfully.
              HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{cac89ff9-34a9-4431-8cfe-292a47f843bc} (Adware.Agent) -> Quarantined and deleted successfully.
              HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{cac89ff9-34a9-4431-8cfe-292a47f843bc} (Adware.Agent) -> Quarantined and deleted successfully.
              HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{cac89ff9-34a9-4431-8cfe-292a47f843bc} (Adware.Agent) -> Quarantined and deleted successfully.
              HKEY_CLASSES_ROOT\explorerbar.tcp.1 (Adware.Agent) -> Quarantined and deleted successfully.
              HKEY_CLASSES_ROOT\CLSID\{1d74e9dd-8987-448b-b2cb-67fff2b8a932} (Adware.Agent) -> Quarantined and deleted successfully.
              HKEY_CLASSES_ROOT\TypeLib\{565dd573-549e-4da9-8cd7-6ae3df25339a} (Adware.Agent) -> Quarantined and deleted successfully.
              HKEY_CLASSES_ROOT\Interface\{877f3eab-4462-44df-8475-6064eafd7fbf} (Adware.Agent) -> Quarantined and deleted successfully.
              HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{1d74e9dd-8987-448b-b2cb-67fff2b8a932} (Adware.Agent) -> Quarantined and deleted successfully.
              HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{1d74e9dd-8987-448b-b2cb-67fff2b8a932} (Adware.Agent) -> Quarantined and deleted successfully.
              HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1d74e9dd-8987-448b-b2cb-67fff2b8a932} (Adware.Agent) -> Quarantined and deleted successfully.
              HKEY_CLASSES_ROOT\CLSID\{3de88beb-f271-484a-ba71-01d30f439f0c} (Adware.DoubleD) -> Quarantined and deleted successfully.
              HKEY_CLASSES_ROOT\CLSID\{50ad41d2-b1f0-47cc-9ea7-395355eaeebd} (Adware.DoubleD) -> Quarantined and deleted successfully.
              HKEY_CLASSES_ROOT\CLSID\{8ceb185e-81a5-46d3-bc20-c555d605afbd} (Adware.DoubleD) -> Quarantined and deleted successfully.
              HKEY_CLASSES_ROOT\CLSID\{a72522ba-9ff3-4c83-abc6-9b476728a396} (Adware.DoubleD) -> Quarantined and deleted successfully.
              HKEY_CLASSES_ROOT\CLSID\{c5762628-ae15-4ca6-96c4-b00dd17f3419} (Adware.DoubleD) -> Quarantined and deleted successfully.
              HKEY_CLASSES_ROOT\CLSID\{d062e03e-65ca-49e4-9b15-31938ba98922} (Adware.DoubleD) -> Quarantined and deleted successfully.
              HKEY_CURRENT_USER\SOFTWARE\Microsoft\Explorer\Bars\{b72681c0-a222-4b21-a0e2-53a5a5ca3d411} (Adware.DoubleD) -> Quarantined and deleted successfully.
              HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{d45817b8-3ead-4d1d-8fca-ec63a8e35de2} (Adware.DoubleD) -> Quarantined and deleted successfully.
              HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{d45817b8-3ead-4d1d-8fca-ec63a8e35de2} (Adware.DoubleD) -> Quarantined and deleted successfully.
              HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Setup.exe (Adware.DoubleD) -> Quarantined and deleted successfully.
              HKEY_CURRENT_USER\{D45817B8-3EAD-4d1d-8FCA-EC63A8E35DE2} (Adware.DoubleD) -> Quarantined and deleted successfully.
              HKEY_CURRENT_USER\SOFTWARE\Web Search Operator (Adware.DoubleD) -> Quarantined and deleted successfully.
              HKEY_LOCAL_MACHINE\SOFTWARE\AppDataLow\SOFTWARE\Internet Today (Adware.DoubleD) -> Quarantined and deleted successfully.
              HKEY_LOCAL_MACHINE\SOFTWARE\Automated Content Enhancer (Adware.DoubleD) -> Quarantined and deleted successfully.
              HKEY_LOCAL_MACHINE\SOFTWARE\Customized Platform Advancer (Adware.DoubleD) -> Delete on reboot.
              HKEY_LOCAL_MACHINE\SOFTWARE\Web Search Operator (Adware.DoubleD) -> Quarantined and deleted successfully.
              HKEY_CURRENT_USER\SOFTWARE\Automated Content Enhancer (Adware.DoubleD) -> Quarantined and deleted successfully.
              HKEY_CURRENT_USER\SOFTWARE\Customized Platform Advancer (Adware.DoubleD) -> Quarantined and deleted successfully.
              HKEY_CURRENT_USER\SOFTWARE\Media Access Startup (Adware.DoubleD) -> Quarantined and deleted successfully.
              HKEY_LOCAL_MACHINE\SOFTWARE\Media Access Startup (Adware.DoubleD) -> Quarantined and deleted successfully.

              Valeur(s) du Registre infectée(s):
              HKEY_LOCAL_MACHINE\SOFTWARE\Mozilla\Firefox\Extensions\{8141440e-08f0-4339-9959-5c31c6a69f23} (Adware.DoubleD) -> Quarantined and deleted successfully.
              HKEY_LOCAL_MACHINE\SOFTWARE\Mozilla\Firefox\Extensions\{e63605fc-d583-4c81-867f-9457bdb3ea1b} (Adware.DoubleD) -> Quarantined and deleted successfully.
              HKEY_LOCAL_MACHINE\SOFTWARE\Mozilla\Firefox\Extensions\{e889f097-b0be-471b-89ad-b86b6f04b506} (Adware.DoubleD) -> Quarantined and deleted successfully.
              HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\internet today task (Adware.Agent) -> Quarantined and deleted successfully.

              Elément(s) de données du Registre infecté(s):
              (Aucun élément nuisible détecté)

              Dossier(s) infecté(s):
              C:\Documents and Settings\timéolia\Local Settings\Temporary Internet Files\{D45817B8-3EAD-4d1d-8FCA-EC63A8E35DE2} (Adware.DoubleD) -> Quarantined and deleted successfully.
              C:\Documents and Settings\timéolia\Local Settings\Temporary Internet Files\{D45817B8-3EAD-4d1d-8FCA-EC63A8E35DE2}\Data (Adware.DoubleD) -> Quarantined and deleted successfully.
              C:\Documents and Settings\timéolia\Local Settings\Temporary Internet Files\{D45817B8-3EAD-4d1d-8FCA-EC63A8E35DE2}\TDF (Adware.DoubleD) -> Quarantined and deleted successfully.
              C:\Documents and Settings\timéolia\Local Settings\Temporary Internet Files\{D45817B8-3EAD-4d1d-8FCA-EC63A8E35DE2}\TDF\Data (Adware.DoubleD) -> Quarantined and deleted successfully.
              C:\Documents and Settings\timéolia\Local Settings\Temporary Internet Files\{D45817B8-3EAD-4d1d-8FCA-EC63A8E35DE2}\TDF\Icons (Adware.DoubleD) -> Quarantined and deleted successfully.
              C:\Documents and Settings\timéolia\Local Settings\Temporary Internet Files\{D45817B8-3EAD-4d1d-8FCA-EC63A8E35DE2}\TDF\Skins (Adware.DoubleD) -> Quarantined and deleted successfully.
              C:\Program Files\Internet Today (Adware.Agent) -> Quarantined and deleted successfully.
              C:\Program Files\Internet Today\1.2.0.1420 (Adware.Agent) -> Quarantined and deleted successfully.
              C:\Program Files\Web Search Operator (Adware.Agent) -> Delete on reboot.
              C:\Program Files\Web Search Operator\4.2.0.2150 (Adware.Agent) -> Delete on reboot.
              C:\Program Files\Web Search Operator\4.2.0.2150\Data (Adware.Agent) -> Quarantined and deleted successfully.
              C:\Program Files\Web Search Operator\4.2.0.2150\FF (Adware.Agent) -> Delete on reboot.
              C:\Program Files\Web Search Operator\4.2.0.2150\FF\chrome (Adware.Agent) -> Delete on reboot.
              C:\Program Files\Web Search Operator\4.2.0.2150\FF\chrome\content (Adware.Agent) -> Quarantined and deleted successfully.
              C:\Program Files\Web Search Operator\4.2.0.2150\FF\components (Adware.Agent) -> Delete on reboot.
              C:\Program Files\Textual Content Provider (Adware.Agent) -> Quarantined and deleted successfully.
              C:\Program Files\Textual Content Provider\1.2.0.2040 (Adware.Agent) -> Quarantined and deleted successfully.
              C:\Program Files\Textual Content Provider\1.2.0.2040\data (Adware.Agent) -> Quarantined and deleted successfully.
              C:\Program Files\Automated Content Enhancer (Adware.Agent) -> Delete on reboot.
              C:\Program Files\Automated Content Enhancer\4.2.0.5360 (Adware.Agent) -> Delete on reboot.
              C:\Program Files\Automated Content Enhancer\4.2.0.5360\Data (Adware.Agent) -> Quarantined and deleted successfully.
              C:\Program Files\Automated Content Enhancer\4.2.0.5360\FF (Adware.Agent) -> Delete on reboot.
              C:\Program Files\Automated Content Enhancer\4.2.0.5360\FF\chrome (Adware.Agent) -> Delete on reboot.
              C:\Program Files\Automated Content Enhancer\4.2.0.5360\FF\chrome\content (Adware.Agent) -> Quarantined and deleted successfully.
              C:\Program Files\Automated Content Enhancer\4.2.0.5360\FF\components (Adware.Agent) -> Delete on reboot.
              C:\Program Files\Customized Platform Advancer (Adware.Agent) -> Delete on reboot.
              C:\Program Files\Customized Platform Advancer\4.2.0.2050 (Adware.Agent) -> Delete on reboot.
              C:\Program Files\Customized Platform Advancer\4.2.0.2050\Data (Adware.Agent) -> Quarantined and deleted successfully.
              C:\Program Files\Customized Platform Advancer\4.2.0.2050\FF (Adware.Agent) -> Delete on reboot.
              C:\Program Files\Customized Platform Advancer\4.2.0.2050\FF\chrome (Adware.Agent) -> Delete on reboot.
              C:\Program Files\Customized Platform Advancer\4.2.0.2050\FF\chrome\content (Adware.Agent) -> Quarantined and deleted successfully.
              C:\Program Files\Customized Platform Advancer\4.2.0.2050\FF\components (Adware.Agent) -> Delete on reboot.
              C:\Program Files\Content Management Wizard (Adware.Agent) -> Quarantined and deleted successfully.
              C:\Program Files\Content Management Wizard\1.2.0.2080 (Adware.Agent) -> Quarantined and deleted successfully.
              C:\Documents and Settings\timéolia\Local Settings\Application Data\Automated Content Enhancer (Adware.DoubleD) -> Delete on reboot.
              C:\Documents and Settings\timéolia\Local Settings\Application Data\Automated Content Enhancer\4.2.0.5360 (Adware.DoubleD) -> Delete on reboot.
              C:\Documents and Settings\timéolia\Local Settings\Application Data\Customized Platform Advancer (Adware.DoubleD) -> Delete on reboot.
              C:\Documents and Settings\timéolia\Local Settings\Application Data\Customized Platform Advancer\4.2.0.2050 (Adware.DoubleD) -> Delete on reboot.
              C:\Documents and Settings\timéolia\Local Settings\Application Data\Internet Today (Adware.DoubleD) -> Quarantined and deleted successfully.
              C:\Documents and Settings\timéolia\Local Settings\Application Data\Textual Content Provider (Adware.DoubleD) -> Quarantined and deleted successfully.
              C:\Documents and Settings\timéolia\Local Settings\Application Data\Textual Content Provider\1.2.0.2040 (Adware.DoubleD) -> Quarantined and deleted successfully.
              C:\Documents and Settings\timéolia\Local Settings\Application Data\Textual Content Provider\1.2.0.2040\Data (Adware.DoubleD) -> Quarantined and deleted successfully.
              C:\Documents and Settings\timéolia\Local Settings\Application Data\Web Search Operator (Adware.DoubleD) -> Quarantined and deleted successfully.
              C:\Documents and Settings\timéolia\Local Settings\Application Data\Web Search Operator\4.2.0.2150 (Adware.DoubleD) -> Quarantined and deleted successfully.

              Fichier(s) infecté(s):
              C:\Program Files\Content Management Wizard\1.2.0.2080\CMWIE.dll (Adware.Agent) -> Quarantined and deleted successfully.
              C:\Program Files\Customized Platform Advancer\4.2.0.2050\CPAIEAddOn.dll (Adware.Agent) -> Quarantined and deleted successfully.
              C:\Program Files\Web Search Operator\4.2.0.2150\WSO.dll (Adware.Agent) -> Quarantined and deleted successfully.
              C:\Program Files\Textual Content Provider\1.2.0.2040\TCPIE.dll (Adware.Agent) -> Quarantined and deleted successfully.
              C:\Program Files\Automated Content Enhancer\4.2.0.5360\ACEIEAddOn.dll (Adware.Agent) -> Quarantined and deleted successfully.
              C:\Documents and Settings\timéolia\Local Settings\Temporary Internet Files\Content.IE5\030F0BKJ\tcpsetup[1].exe (Adware.DoubleD) -> Quarantined and deleted successfully.
              C:\Documents and Settings\timéolia\Local Settings\Temporary Internet Files\Content.IE5\030F0BKJ\acesetup[1].exe (Adware.DoubleD) -> Quarantined and deleted successfully.
              C:\Documents and Settings\timéolia\Local Settings\Temporary Internet Files\{D45817B8-3EAD-4d1d-8FCA-EC63A8E35DE2}\productinfo.dll (Adware.DoubleD) -> Quarantined and deleted successfully.
              C:\System Volume Information\_restore{8943EF6C-A0BE-41C5-B7E2-30A861D7E03A}\RP131\A0038888.exe (Adware.Agent) -> Quarantined and deleted successfully.
              C:\System Volume Information\_restore{8943EF6C-A0BE-41C5-B7E2-30A861D7E03A}\RP132\A0038909.exe (Adware.Agent) -> Quarantined and deleted successfully.
              C:\System Volume Information\_restore{8943EF6C-A0BE-41C5-B7E2-30A861D7E03A}\RP132\A0038913.exe (Adware.Agent) -> Quarantined and deleted successfully.
              C:\System Volume Information\_restore{8943EF6C-A0BE-41C5-B7E2-30A861D7E03A}\RP132\A0038920.exe (Adware.Agent) -> Quarantined and deleted successfully.
              C:\System Volume Information\_restore{8943EF6C-A0BE-41C5-B7E2-30A861D7E03A}\RP132\A0038994.rbf (Adware.DoubleD) -> Quarantined and deleted successfully.
              C:\System Volume Information\_restore{8943EF6C-A0BE-41C5-B7E2-30A861D7E03A}\RP132\A0039032.exe (Adware.DoubleD) -> Quarantined and deleted successfully.
              C:\System Volume Information\_restore{8943EF6C-A0BE-41C5-B7E2-30A861D7E03A}\RP132\A0039019.exe (Adware.DoubleD) -> Quarantined and deleted successfully.
              C:\System Volume Information\_restore{8943EF6C-A0BE-41C5-B7E2-30A861D7E03A}\RP132\A0039020.exe (Adware.DoubleD) -> Quarantined and deleted successfully.
              C:\System Volume Information\_restore{8943EF6C-A0BE-41C5-B7E2-30A861D7E03A}\RP132\A0039021.exe (Adware.DoubleD) -> Quarantined and deleted successfully.
              C:\System Volume Information\_restore{8943EF6C-A0BE-41C5-B7E2-30A861D7E03A}\RP132\A0039031.exe (Adware.DoubleD) -> Quarantined and deleted successfully.
              C:\System Volume Information\_restore{8943EF6C-A0BE-41C5-B7E2-30A861D7E03A}\RP132\A0039034.exe (Adware.DoubleD) -> Quarantined and deleted successfully.
              C:\Documents and Settings\timéolia\Local Settings\Temporary Internet Files\{D45817B8-3EAD-4d1d-8FCA-EC63A8E35DE2}\bg.jpg (Adware.DoubleD) -> Quarantined and deleted successfully.
              C:\Documents and Settings\timéolia\Local Settings\Temporary Internet Files\{D45817B8-3EAD-4d1d-8FCA-EC63A8E35DE2}\CurrentVersion.xml (Adware.DoubleD) -> Quarantined and deleted successfully.
              C:\Documents and Settings\timéolia\Local Settings\Temporary Internet Files\{D45817B8-3EAD-4d1d-8FCA-EC63A8E35DE2}\ExtractZipFile.zip (Adware.DoubleD) -> Quarantined and deleted successfully.
              C:\Documents and Settings\timéolia\Local Settings\Temporary Internet Files\{D45817B8-3EAD-4d1d-8FCA-EC63A8E35DE2}\icon.ico (Adware.DoubleD) -> Quarantined and deleted successfully.
              C:\Documents and Settings\timéolia\Local Settings\Temporary Internet Files\{D45817B8-3EAD-4d1d-8FCA-EC63A8E35DE2}\Setup.exe (Adware.DoubleD) -> Quarantined and deleted successfully.
              C:\Documents and Settings\timéolia\Local Settings\Temporary Internet Files\{D45817B8-3EAD-4d1d-8FCA-EC63A8E35DE2}\tdf.dat (Adware.DoubleD) -> Quarantined and deleted successfully.
              C:\Documents and Settings\timéolia\Local Settings\Temporary Internet Files\{D45817B8-3EAD-4d1d-8FCA-EC63A8E35DE2}\tdf.zip (Adware.DoubleD) -> Quarantined and deleted successfully.
              C:\Documents and Settings\timéolia\Local Settings\Temporary Internet Files\{D45817B8-3EAD-4d1d-8FCA-EC63A8E35DE2}\Data\ProductInfo.mx (Adware.DoubleD) -> Quarantined and deleted successfully.
              C:\Documents and Settings\timéolia\Local Settings\Temporary Internet Files\{D45817B8-3EAD-4d1d-8FCA-EC63A8E35DE2}\TDF\Data\Module_Logo.mx (Adware.DoubleD) -> Quarantined and deleted successfully.
              C:\Documents and Settings\timéolia\Local Settings\Temporary Internet Files\{D45817B8-3EAD-4d1d-8FCA-EC63A8E35DE2}\TDF\Data\Module_Option.mx (Adware.DoubleD) -> Quarantined and deleted successfully.
              C:\Documents and Settings\timéolia\Local Settings\Temporary Internet Files\{D45817B8-3EAD-4d1d-8FCA-EC63A8E35DE2}\TDF\Data\Module_RSS.mx (Adware.DoubleD) -> Quarantined and deleted successfully.
              C:\Documents and Settings\timéolia\Local Settings\Temporary Internet Files\{D45817B8-3EAD-4d1d-8FCA-EC63A8E35DE2}\TDF\Data\Module_Search.mx (Adware.DoubleD) -> Quarantined and deleted successfully.
              C:\Documents and Settings\timéolia\Local Settings\Temporary Internet Files\{D45817B8-3EAD-4d1d-8FCA-EC63A8E35DE2}\TDF\Data\Module_Smiley_Config.mx (Adware.DoubleD) -> Quarantined and deleted successfully.
              C:\Documents and Settings\timéolia\Local Settings\Temporary Internet Files\{D45817B8-3EAD-4d1d-8FCA-EC63A8E35DE2}\TDF\Data\Module_WebDropdown_01.mx (Adware.DoubleD) -> Quarantined and deleted successfully.
              C:\Documents and Settings\timéolia\Local Settings\Temporary Internet Files\{D45817B8-3EAD-4d1d-8FCA-EC63A8E35DE2}\TDF\Data\Module_WebDropdown_02.mx (Adware.DoubleD) -> Quarantined and deleted successfully.
              C:\Documents and Settings\timéolia\Local Settings\Temporary Internet Files\{D45817B8-3EAD-4d1d-8FCA-EC63A8E35DE2}\TDF\Data\Module_WebDropdown_03.mx (Adware.DoubleD) -> Quarantined and deleted successfully.
              C:\Documents and Settings\timéolia\Local Settings\Temporary Internet Files\{D45817B8-3EAD-4d1d-8FCA-EC63A8E35DE2}\TDF\Data\Module_WebDropdown_04.mx (Adware.DoubleD) -> Quarantined and deleted successfully.
              C:\Documents and Settings\timéolia\Local Settings\Temporary Internet Files\{D45817B8-3EAD-4d1d-8FCA-EC63A8E35DE2}\TDF\Data\Module_WebDropdown_05.mx (Adware.DoubleD) -> Quarantined and deleted successfully.
              C:\Documents and Settings\timéolia\Local Settings\Temporary Internet Files\{D45817B8-3EAD-4d1d-8FCA-EC63A8E35DE2}\TDF\Data\Module_WebDropdown_06.mx (Adware.DoubleD) -> Quarantined and deleted successfully.
              C:\Documents and Settings\timéolia\Local Settings\Temporary Internet Files\{D45817B8-3EAD-4d1d-8FCA-EC63A8E35DE2}\TDF\Data\pixel.mx (Adware.DoubleD) -> Quarantined and deleted successfully.
              C:\Documents and Settings\timéolia\Local Settings\Temporary Internet Files\{D45817B8-3EAD-4d1d-8FCA-EC63A8E35DE2}\TDF\Data\ProductInfo.mx (Adware.DoubleD) -> Quarantined and deleted successfully.
              C:\Documents and Settings\timéolia\Local Settings\Temporary Internet Files\{D45817B8-3EAD-4d1d-8FCA-EC63A8E35DE2}\TDF\Data\profile.mx (Adware.DoubleD) -> Quarantined and deleted successfully.
              C:\Documents and Settings\timéolia\Local Settings\Temporary Internet Files\{D45817B8-3EAD-4d1d-8FCA-EC63A8E35DE2}\TDF\Data\SearchEngineList.mx (Adware.DoubleD) -> Quarantined and deleted successfully.
              C:\Documents and Settings\timéolia\Local Settings\Temporary Internet Files\{D45817B8-3EAD-4d1d-8FCA-EC63A8E35DE2}\TDF\Data\tbcore.mx (Adware.DoubleD) -> Quarantined and deleted successfully.
              C:\Documents and Settings\timéolia\Local Settings\Temporary Internet Files\{D45817B8-3EAD-4d1d-8FCA-EC63A8E35DE2}\TDF\Data\ToolbarLayout.mx (Adware.DoubleD) -> Quarantined and deleted successfully.
              C:\Documents and Settings\timéolia\Local Settings\Temporary Internet Files\{D45817B8-3EAD-4d1d-8FCA-EC63A8E35DE2}\TDF\Data\UpdateCentre.mx (Adware.DoubleD) -> Quarantined and deleted successfully.
              C:\Documents and Settings\timéolia\Local Settings\Temporary Internet Files\{D45817B8-3EAD-4d1d-8FCA-EC63A8E35DE2}\TDF\Data\UpdateCentreBk.mx (Adware.DoubleD) -> Quarantined and deleted successfully.
              C:\Documents and Settings\timéolia\Local Settings\Temporary Internet Files\{D45817B8-3EAD-4d1d-8FCA-EC63A8E35DE2}\TDF\Icons\About.mg (Adware.DoubleD) -> Quarantined and deleted successfully.
              C:\Documents and Settings\timéolia\Local Settings\Temporary Internet Files\{D45817B8-3EAD-4d1d-8FCA-EC63A8E35DE2}\TDF\Icons\Component_ComboBox.mg (Adware.DoubleD) -> Quarantined and deleted successfully.
              C:\Documents and Settings\timéolia\Local Settings\Temporary Internet Files\{D45817B8-3EAD-4d1d-8FCA-EC63A8E35DE2}\TDF\Icons\Module_Logo.mg (Adware.DoubleD) -> Quarantined and deleted successfully.
              C:\Documents and Settings\timéolia\Local Settings\Temporary Internet Files\{D45817B8-3EAD-4d1d-8FCA-EC63A8E35DE2}\TDF\Icons\Module_Option.mg (Adware.DoubleD) -> Quarantined and deleted successfully.
              C:\Documents and Settings\timéolia\Local Settings\Temporary Internet Files\{D45817B8-3EAD-4d1d-8FCA-EC63A8E35DE2}\TDF\Icons\Module_Option_Menu.mg (Adware.DoubleD) -> Quarantined and deleted successfully.
              C:\Documents and Settings\timéolia\Local Settings\Temporary Internet Files\{D45817B8-3EAD-4d1d-8FCA-EC63A8E35DE2}\TDF\Icons\Module_RSS.mg (Adware.DoubleD) -> Quarantined and deleted successfully.
              C:\Documents and Settings\timéolia\Local Settings\Temporary Internet Files\{D45817B8-3EAD-4d1d-8FCA-EC63A8E35DE2}\TDF\Icons\Module_RSS.png (Adware.DoubleD) -> Quarantined and deleted successfully.
              C:\Documents and Settings\timéolia\Local Settings\Temporary Internet Files\{D45817B8-3EAD-4d1d-8FCA-EC63A8E35DE2}\TDF\Icons\Module_RSS_Menu.mg (Adware.DoubleD) -> Quarantined and deleted successfully.
              C:\Documents and Settings\timéolia\Local Settings\Temporary Internet Files\{D45817B8-3EAD-4d1d-8FCA-EC63A8E35DE2}\TDF\Icons\Module_RSS_Menu.png (Adware.DoubleD) -> Quarantined and deleted successfully.
              C:\Documents and Settings\timéolia\Local Settings\Temporary Internet Files\{D45817B8-3EAD-4d1d-8FCA-EC63A8E35DE2}\TDF\Icons\Module_Search.mg (Adware.DoubleD) -> Quarantined and deleted successfully.
              C:\Documents and Settings\timéolia\Local Settings\Temporary Internet Files\{D45817B8-3EAD-4d1d-8FCA-EC63A8E35DE2}\TDF\Icons\Module_WebDropdown_01.mg (Adware.DoubleD) -> Quarantined and deleted successfully.
              C:\Documents and Settings\timéolia\Local Settings\Temporary Internet Files\{D45817B8-3EAD-4d1d-8FCA-EC63A8E35DE2}\TDF\Icons\Module_WebDropdown_01.png (Adware.DoubleD) -> Quarantined and deleted successfully.
              C:\Documents and Settings\timéolia\Local Settings\Temporary Internet Files\{D45817B8-3EAD-4d1d-8FCA-EC63A8E35DE2}\TDF\Icons\Module_WebDropdown_02.mg (Adware.DoubleD) -> Quarantined and deleted successfully.
              C:\Documents and Settings\timéolia\Local Settings\Temporary Internet Files\{D45817B8-3EAD-4d1d-8FCA-EC63A8E35DE2}\TDF\Icons\Module_WebDropdown_02.png (Adware.DoubleD) -> Quarantined and deleted successfully.
              C:\Documents and Settings\timéolia\Local Settings\Temporary Internet Files\{D45817B8-3EAD-4d1d-8FCA-EC63A8E35DE2}\TDF\Icons\Module_WebDropdown_03.mg (Adware.DoubleD) -> Quarantined and deleted successfully.
              C:\Documents and Settings\timéolia\Local Settings\Temporary Internet Files\{D45817B8-3EAD-4d1d-8FCA-EC63A8E35DE2}\TDF\Icons\Module_WebDropdown_03.png (Adware.DoubleD) -> Quarantined and deleted successfully.
              C:\Documents and Settings\timéolia\Local Settings\Temporary Internet Files\{D45817B8-3EAD-4d1d-8FCA-EC63A8E35DE2}\TDF\Icons\Module_WebDropdown_04.mg (Adware.DoubleD) -> Quarantined and deleted successfully.
              C:\Documents and Settings\timéolia\Local Settings\Temporary Internet Files\{D45817B8-3EAD-4d1d-8FCA-EC63A8E35DE2}\TDF\Icons\Module_WebDropdown_04.png (Adware.DoubleD) -> Quarantined and deleted successfully.
              C:\Documents and Settings\timéolia\Local Settings\Temporary Internet Files\{D45817B8-3EAD-4d1d-8FCA-EC63A8E35DE2}\TDF\Icons\Module_WebDropdown_05.mg (Adware.DoubleD) -> Quarantined and deleted successfully.
              C:\Documents and Settings\timéolia\Local Settings\Temporary Internet Files\{D45817B8-3EAD-4d1d-8FCA-EC63A8E35DE2}\TDF\Icons\Module_WebDropdown_05.png (Adware.DoubleD) -> Quarantined and deleted successfully.
              C:\Documents and Settings\timéolia\Local Settings\Temporary Internet Files\{D45817B8-3EAD-4d1d-8FCA-EC63A8E35DE2}\TDF\Icons\Module_WebDropdown_06.mg (Adware.DoubleD) -> Quarantined and deleted successfully.
              C:\Documents and Settings\timéolia\Local Settings\Temporary Internet Files\{D45817B8-3EAD-4d1d-8FCA-EC63A8E35DE2}\TDF\Icons\Module_WebDropdown_06.png (Adware.DoubleD) -> Quarantined and deleted successfully.
              C:\Documents and Settings\timéolia\Local Settings\Temporary Internet Files\{D45817B8-3EAD-4d1d-8FCA-EC63A8E35DE2}\TDF\Skins\myskin1.skf (Adware.DoubleD) -> Quarantined and deleted successfully.
              C:\Documents and Settings\timéolia\Local Settings\Temporary Internet Files\{D45817B8-3EAD-4d1d-8FCA-EC63A8E35DE2}\TDF\Skins\myskin2.skf (Adware.DoubleD) -> Quarantined and deleted successfully.
              C:\Documents and Settings\timéolia\Local Settings\Temporary Internet Files\{D45817B8-3EAD-4d1d-8FCA-EC63A8E35DE2}\TDF\Skins\myskin3.skf (Adware.DoubleD) -> Quarantined and deleted successfully.
              C:\Documents and Settings\timéolia\Local Settings\Temporary Internet Files\{D45817B8-3EAD-4d1d-8FCA-EC63A8E35DE2}\TDF\Skins\myskin4.skf (Adware.DoubleD) -> Quarantined and deleted successfully.
              C:\Program Files\Internet Today\1.2.0.1420\InternetToday.ico (Adware.Agent) -> Quarantined and deleted successfully.
              C:\Program Files\Internet Today\1.2.0.1420\InternetToday.skf (Adware.Agent) -> Quarantined and deleted successfully.
              C:\Program Files\Internet Today\1.2.0.1420\mfc80.dll (Adware.Agent) -> Quarantined and deleted successfully.
              C:\Program Files\Internet Today\1.2.0.1420\Microsoft.VC80.MFC.manifest (Adware.Agent) -> Quarantined and deleted successfully.
              C:\Program Files\Internet Today\1.2.0.1420\SkinCrafterDll.dll (Adware.Agent) -> Quarantined and deleted successfully.
              C:\Program Files\Internet Today\1.2.0.1420\unins000.dat (Adware.Agent) -> Quarantined and deleted successfully.
              C:\Program Files\Internet Today\1.2.0.1420\unins000.exe (Adware.Agent) -> Quarantined and deleted successfully.
              C:\Program Files\Web Search Operator\4.2.0.2150\lri.dll (Adware.Agent) -> Delete on reboot.
              C:\Program Files\Web Search Operator\4.2.0.2150\unins000.dat (Adware.Agent) -> Quarantined and deleted successfully.
              C:\Program Files\Web Search Operator\4.2.0.2150\unins000.exe (Adware.Agent) -> Quarantined and deleted successfully.
              C:\Program Files\Web Search Operator\4.2.0.2150\WSOCommon.dll (Adware.Agent) -> Delete on reboot.
              C:\Program Files\Web Search Operator\4.2.0.2150\Data\config.md (Adware.Agent) -> Quarantined and deleted successfully.
              C:\Program Files\Web Search Operator\4.2.0.2150\FF\chrome.manifest (Adware.Agent) -> Quarantined and deleted successfully.
              C:\Program Files\Web Search Operator\4.2.0.2150\FF\install.rdf (Adware.Agent) -> Quarantined and deleted successfully.
              C:\Program Files\Web Search Operator\4.2.0.2150\FF\chrome\WSOAddOn.jar (Adware.Agent) -> Delete on reboot.
              C:\Program Files\Web Search Operator\4.2.0.2150\FF\chrome\content\WSOAddOn.js (Adware.Agent) -> Quarantined and deleted successfully.
              C:\Program Files\Web Search Operator\4.2.0.2150\FF\chrome\content\WSOAddOn.xul (Adware.Agent) -> Quarantined and deleted successfully.
              C:\Program Files\Web Search Operator\4.2.0.2150\FF\components\WSOFFAddOn.dll (Adware.Agent) -> Delete on reboot.
              C:\Program Files\Web Search Operator\4.2.0.2150\FF\components\WSOFFAddOn.xpt (Adware.Agent) -> Quarantined and deleted successfully.
              C:\Program Files\Web Search Operator\4.2.0.2150\FF\components\WSOFFHelperComponent.js (Adware.Agent) -> Quarantined and deleted successfully.
              C:\Program Files\Textual Content Provider\1.2.0.2040\LRI.dll (Adware.Agent) -> Quarantined and deleted successfully.
              C:\Program Files\Textual Content Provider\1.2.0.2040\unins000.dat (Adware.Agent) -> Quarantined and deleted successfully.
              C:\Program Files\Textual Content Provider\1.2.0.2040\unins000.exe (Adware.Agent) -> Quarantined and deleted successfully.
              C:\Program Files\Textual Content Provider\1.2.0.2040\data\pxtmpdata.mx (Adware.Agent) -> Quarantined and deleted successfully.
              C:\Program Files\Textual Content Provider\1.2.0.2040\data\TP_Config.mx (Adware.Agent) -> Quarantined and deleted successfully.
              C:\Program Files\Textual Content Provider\1.2.0.2040\data\TP_Data.mx (Adware.Agent) -> Quarantined and deleted successfully.
              C:\Program Files\Textual Content Provider\1.2.0.2040\data\TP_DomainExcludeList.mx (Adware.Agent) -> Quarantined and deleted successfully.
              C:\Program Files\Textual Content Provider\1.2.0.2040\data\TP_DomainInterval.mx (Adware.Agent) -> Quarantined and deleted successfully.
              C:\Program Files\Textual Content Provider\1.2.0.2040\data\TP_KeywordInterval.mx (Adware.Agent) -> Quarantined and deleted successfully.
              C:\Program Files\Automated Content Enhancer\4.2.0.5360\ACECommon.dll (Adware.Agent) -> Delete on reboot.
              C:\Program Files\Automated Content Enhancer\4.2.0.5360\lri.dll (Adware.Agent) -> Delete on reboot.
              C:\Program Files\Automated Content Enhancer\4.2.0.5360\unins000.dat (Adware.Agent) -> Quarantined and deleted successfully.
              C:\Program Files\Automated Content Enhancer\4.2.0.5360\unins000.exe (Adware.Agent) -> Quarantined and deleted successfully.
              C:\Program Files\Automated Content Enhancer\4.2.0.5360\Data\config.md (Adware.Agent) -> Quarantined and deleted successfully.
              C:\Program Files\Automated Content Enhancer\4.2.0.5360\FF\chrome.manifest (Adware.Agent) -> Quarantined and deleted successfully.
              C:\Program Files\Automated Content Enhancer\4.2.0.5360\FF\install.rdf (Adware.Agent) -> Quarantined and deleted successfully.
              C:\Program Files\Automated Content Enhancer\4.2.0.5360\FF\chrome\ACEAddOn.jar (Adware.Agent) -> Delete on reboot.
              C:\Program Files\Automated Content Enhancer\4.2.0.5360\FF\chrome\content\ACEAddOn.js (Adware.Agent) -> Quarantined and deleted successfully.
              C:\Program Files\Automated Content Enhancer\4.2.0.5360\FF\chrome\content\ACEAddOn.xul (Adware.Agent) -> Quarantined and deleted successfully.
              C:\Program Files\Automated Content Enhancer\4.2.0.5360\FF\components\ACEFFAddOn.dll (Adware.Agent) -> Delete on reboot.
              C:\Program Files\Automated Content Enhancer\4.2.0.5360\FF\components\ACEFFAddOn.xpt (Adware.Agent) -> Quarantined and deleted successfully.
              C:\Program Files\Automated Content Enhancer\4.2.0.5360\FF\components\ACEFFHelperComponent.js (Adware.Agent) -> Quarantined and deleted successfully.
              C:\Program Files\Customized Platform Advancer\4.2.0.2050\CPACommon.dll (Adware.Agent) -> Delete on reboot.
              C:\Program Files\Customized Platform Advancer\4.2.0.2050\lri.dll (Adware.Agent) -> Delete on reboot.
              C:\Program Files\Customized Platform Advancer\4.2.0.2050\unins000.dat (Adware.Agent) -> Quarantined and deleted successfully.
              C:\Program Files\Customized Platform Advancer\4.2.0.2050\unins000.exe (Adware.Agent) -> Quarantined and deleted successfully.
              C:\Program Files\Customized Platform Advancer\4.2.0.2050\Data\config.md (Adware.Agent) -> Quarantined and deleted successfully.
              C:\Program Files\Customized Platform Advancer\4.2.0.2050\FF\chrome.manifest (Adware.Agent) -> Quarantined and deleted successfully.
              C:\Program Files\Customized Platform Advancer\4.2.0.2050\FF\install.rdf (Adware.Agent) -> Quarantined and deleted successfully.
              C:\Program Files\Customized Platform Advancer\4.2.0.2050\FF\chrome\CPAAddOn.jar (Adware.Agent) -> Delete on reboot.
              C:\Program Files\Customized Platform Advancer\4.2.0.2050\FF\chrome\content\CPAAddOn.js (Adware.Agent) -> Quarantined and deleted successfully.
              C:\Program Files\Customized Platform Advancer\4.2.0.2050\FF\chrome\content\CPAAddOn.xul (Adware.Agent) -> Quarantined and deleted successfully.
              C:\Program Files\Customized Platform Advancer\4.2.0.2050\FF\components\CPAFFAddOn.dll (Adware.Agent) -> Delete on reboot.
              C:\Program Files\Customized Platform Advancer\4.2.0.2050\FF\components\CPAFFAddOn.xpt (Adware.Agent) -> Quarantined and deleted successfully.
              C:\Program Files\Customized Platform Advancer\4.2.0.2050\FF\components\CPAFFHelperComponent.js (Adware.Agent) -> Quarantined and deleted successfully.
              C:\Program Files\Content Management Wizard\1.2.0.2080\cmwsh.dll (Adware.Agent) -> Quarantined and deleted successfully.
              C:\Program Files\Content Management Wizard\1.2.0.2080\config.mx (Adware.Agent) -> Quarantined and deleted successfully.
              C:\Program Files\Content Management Wizard\1.2.0.2080\data.mx (Adware.Agent) -> Quarantined and deleted successfully.
              C:\Program Files\Content Management Wizard\1.2.0.2080\exclude.mx (Adware.Agent) -> Quarantined and deleted successfully.
              C:\Program Files\Content Management Wizard\1.2.0.2080\LRI.dll (Adware.Agent) -> Quarantined and deleted successfully.
              C:\Program Files\Content Management Wizard\1.2.0.2080\MatchingData.zd5 (Adware.Agent) -> Quarantined and deleted successfully.
              C:\Program Files\Content Management Wizard\1.2.0.2080\pxtmpdata.mx (Adware.Agent) -> Quarantined and deleted successfully.
              C:\Program Files\Content Management Wizard\1.2.0.2080\unins000.dat (Adware.Agent) -> Quarantined and deleted successfully.
              C:\Program Files\Content Management Wizard\1.2.0.2080\unins000.exe (Adware.Agent) -> Quarantined and deleted successfully.
              C:\Documents and Settings\timéolia\Local Settings\Application Data\Automated Content Enhancer\4.2.0.5360\config.md (Adware.DoubleD) -> Quarantined and deleted successfully.
              C:\Documents and Settings\timéolia\Local Settings\Application Data\Automated Content Enhancer\4.2.0.5360\ipdata.md (Adware.DoubleD) -> Quarantined and deleted successfully.
              C:\Documents and Settings\timéolia\Local Settings\Application Data\Automated Content Enhancer\4.2.0.5360\NP_20100108-190625.859.log (Adware.DoubleD) -> Quarantined and deleted successfully.
              C:\Documents and Settings\timéolia\Local Settings\Application Data\Automated Content Enhancer\4.2.0.5360\NP_20100108-191539.671.log (Adware.DoubleD) -> Quarantined and deleted successfully.
              C:\Documents and Settings\timéolia\Local Settings\Application Data\Automated Content Enhancer\4.2.0.5360\NP_20100109-084319.765.log (Adware.DoubleD) -> Quarantined and deleted successfully.
              C:\Documents and Settings\timéolia\Local Settings\Application Data\Automated Content Enhancer\4.2.0.5360\NP_20100109-095634.109.log (Adware.DoubleD) -> Quarantined and deleted successfully.
              C:\Documents and Settings\timéolia\Local Settings\Application Data\Automated Content Enhancer\4.2.0.5360\NP_20100109-095736.734.log (Adware.DoubleD) -> Quarantined and deleted successfully.
              C:\Documents and Settings\timéolia\Local Settings\Application Data\Automated Content Enhancer\4.2.0.5360\NP_20100109-095756.906.log (Adware.DoubleD) -> Quarantined and deleted successfully.
              C:\Documents and Settings\timéolia\Local Settings\Application Data\Automated Content Enhancer\4.2.0.5360\NP_20100109-095834.031.log (Adware.DoubleD) -> Quarantined and deleted successfully.
              C:\Documents and Settings\timéolia\Local Settings\Application Data\Automated Content Enhancer\4.2.0.5360\NP_20100109-095841.531.log (Adware.DoubleD) -> Quarantined and deleted successfully.
              C:\Documents and Settings\timéolia\Local Settings\Application Data\Automated Content Enhancer\4.2.0.5360\NP_20100109-104541.234.log (Adware.DoubleD) -> Quarantined and deleted successfully.
              C:\Documents and Settings\timéolia\Local Settings\Application Data\Automated Content Enhancer\4.2.0.5360\NP_20100109-111212.703.log (Adware.DoubleD) -> Quarantined and deleted successfully.
              C:\Documents and Settings\timéolia\Local Settings\Application Data\Automated Content Enhancer\4.2.0.5360\NP_20100109-115023.375.log (Adware.DoubleD) -> Quarantined and deleted successfully.
              C:\Documents and Settings\timéolia\Local Settings\Application Data\Automated Content Enhancer\4.2.0.5360\NP_20100109-115142.593.log (Adware.DoubleD) -> Quarantined and deleted successfully.
              C:\Documents and Settings\timéolia\Local Settings\Application Data\Automated Content Enhancer\4.2.0.5360\NP_20100109-120125.312.log (Adware.DoubleD) -> Quarantined and deleted successfully.
              C:\Documents and Settings\timéolia\Local Settings\Application Data\Automated Content Enhancer\4.2.0.5360\NP_20100109-120412.515.log (Adware.DoubleD) -> Quarantined and deleted successfully.
              C:\Documents and Settings\timéolia\Local Settings\Application Data\Automated Content Enhancer\4.2.0.5360\NP_20100109-143739.140.log (Adware.DoubleD) -> Quarantined and deleted successfully.
              C:\Documents and Settings\timéolia\Local Settings\Application Data\Automated Content Enhancer\4.2.0.5360\NP_20100109-161810.531.log (Adware.DoubleD) -> Quarantined and deleted successfully.
              C:\Documents and Settings\timéolia\Local Settings\Application Data\Automated Content Enhancer\4.2.0.5360\NP_20100109-162129.296.log (Adware.DoubleD) -> Quarantined and deleted successfully.
              C:\Documents and Settings\timéolia\Local Settings\Application Data\Automated Content Enhancer\4.2.0.5360\NP_20100109-162612.296.log (Adware.DoubleD) -> Quarantined and deleted successfully.
              C:\Documents and Settings\timéolia\Local Settings\Application Data\Automated Content Enhancer\4.2.0.5360\NP_20100109-170054.296.log (Adware.DoubleD) -> Quarantined and deleted successfully.
              C:\Documents and Settings\timéolia\Local Settings\Application Data\Automated Content Enhancer\4.2.0.5360\NP_20100109-204134.531.log (Adware.DoubleD) -> Quarantined and deleted successfully.
              C:\Documents and Settings\timéolia\Local Settings\Application Data\Automated Content Enhancer\4.2.0.5360\NP_20100110-110328.390.log (Adware.DoubleD) -> Quarantined and deleted successfully.
              C:\Documents and Settings\timéolia\Local Settings\Application Data\Automated Content Enhancer\4.2.0.5360\NP_20100110-122344.750.log (Adware.DoubleD) -> Quarantined and deleted successfully.
              C:\Documents and Settings\timéolia\Local Settings\Application Data\Automated Content Enhancer\4.2.0.5360\NP_20100110-175616.046.log (Adware.DoubleD) -> Quarantined and deleted successfully.
              C:\Documents and Settings\timéolia\Local Settings\Application Data\Automated Content Enhancer\4.2.0.5360\NP_20100110-200812.187.log (Adware.DoubleD) -> Quarantined and deleted successfully.
              C:\Documents and Settings\timéolia\Local Settings\Application Data\Automated Content Enhancer\4.2.0.5360\NP_20100110-201234.968.log (Adware.DoubleD) -> Quarantined and deleted successfully.
              C:\Documents and Settings\timéolia\Local Settings\Application Data\Automated Content Enhancer\4.2.0.5360\NP_20100110-214339.234.log (Adware.DoubleD) -> Quarantined and deleted successfully.
              C:\Documents and Settings\timéolia\Local Settings\Application Data\Automated Content Enhancer\4.2.0.5360\NP_20100111-085629.859.log (Adware.DoubleD) -> Quarantined and deleted successfully.
              C:\Documents and Settings\timéolia\Local Settings\Application Data\Automated Content Enhancer\4.2.0.5360\NP_20100111-085827.328.log (Adware.DoubleD) -> Quarantined and deleted successfully.
              C:\Documents and Settings\timéolia\Local Settings\Application Data\Automated Content Enhancer\4.2.0.5360\NP_20100111-090500.203.log (Adware.DoubleD) -> Quarantined and deleted successfully.
              C:\Documents and Settings\timéolia\Local Settings\Application Data\Automated Content Enhancer\4.2.0.5360\NP_20100111-090734.906.log (Adware.DoubleD) -> Quarantined and deleted successfully.
              C:\Documents and Settings\timéolia\Local Settings\Application Data\Automated Content Enhancer\4.2.0.5360\NP_20100111-184729.796.log (Adware.DoubleD) -> Quarantined and deleted successfully.
              C:\Documents and Settings\timéolia\Local Settings\Application Data\Automated Content Enhancer\4.2.0.5360\NP_20100111-185416.406.log (Adware.DoubleD) -> Quarantined and deleted successfully.
              C:\Documents and Settings\timéolia\Local Settings\Application Data\Automated Content Enhancer\4.2.0.5360\NP_20100111-185617.718.log (Adware.DoubleD) -> Quarantined and deleted successfully.
              C:\Documents and Settings\timéolia\Local Settings\Application Data\Automated Content Enhancer\4.2.0.5360\NP_20100111-210758.218.log (Adware.DoubleD) -> Quarantined and deleted successfully.
              C:\Documents and Settings\timéolia\Local Settings\Application Data\Automated Content Enhancer\4.2.0.5360\NP_20100111-210801.062.log (Adware.DoubleD) -> Quarantined and deleted successfully.
              C:\Documents and Settings\timéolia\Local Settings\Application Data\Automated Content Enhancer\4.2.0.5360\NP_20100111-212132.203.log (Adware.DoubleD) -> Quarantined and deleted successfully.
              C:\Documents and Settings\timéolia\Local Settings\Application Data\Automated Content Enhancer\4.2.0.5360\NP_20100112-183424.752.log (Adware.DoubleD) -> Quarantined and deleted successfully.
              C:\Documents and Settings\timéolia\Local Settings\Application Data\Automated Content Enhancer\4.2.0.5360\NP_20100112-194709.455.log (Adware.DoubleD) -> Quarantined and deleted successfully.
              C:\Documents and Settings\timéolia\Local Settings\Application Data\Automated Content Enhancer\4.2.0.5360\NP_20100112-201540.439.log (Adware.DoubleD) -> Quarantined and deleted successfully.
              C:\Documents and Settings\timéolia\Local Settings\Application Data\Automated Content Enhancer\4.2.0.5360\NP_20100112-203525.705.log (Adware.DoubleD) -> Quarantined and deleted successfully.
              C:\Documents and Settings\timéolia\Local Settings\Application Data\Automated Content Enhancer\4.2.0.5360\NP_20100112-203606.955.log (Adware.DoubleD) -> Quarantined and deleted successfully.
              C:\Documents and Settings\timéolia\Local Settings\Application Data\Automated Content Enhancer\4.2.0.5360\NP_20100113-100106.812.log (Adware.DoubleD) -> Quarantined and deleted successfully.
              C:\Documents and Settings\timéolia\Local Settings\Application Data\Automated Content Enhancer\4.2.0.5360\NP_20100113-100229.718.log (Adware.DoubleD) -> Quarantined and deleted successfully.
              C:\Documents and Settings\timéolia\Local Settings\Application Data\Automated Content Enhancer\4.2.0.5360\NP_20100113-110759.984.log (Adware.DoubleD) -> Quarantined and deleted successfully.
              C:\Documents and Settings\timéolia\Local Settings\Application Data\Automated Content Enhancer\4.2.0.5360\NP_20100113-112039.406.log (Adware.DoubleD) -> Quarantined and deleted successfully.
              C:\Documents and Settings\timéolia\Local Settings\Application Data\Automated Content Enhancer\4.2.0.5360\NP_20100113-181500.421.log (Adware.DoubleD) -> Quarantined and deleted successfully.
              C:\Documents and Settings\timéolia\Local Settings\Application Data\Automated Content Enhancer\4.2.0.5360\NP_20100113-181714.968.log (Adware.DoubleD) -> Quarantined and deleted successfully.
              C:\Documents and Settings\timéolia\Local Settings\Application Data\Automated Content Enhancer\4.2.0.5360\NP_20100113-184727.875.log (Adware.DoubleD) -> Quarantined and deleted successfully.
              C:\Documents and Settings\timéolia\Local Settings\Application Data\Automated Content Enhancer\4.2.0.5360\NP_20100113-192517.796.log (Adware.DoubleD) -> Quarantined and deleted successfully.
              C:\Documents and Settings\timéolia\Local Settings\Application Data\Automated Content Enhancer\4.2.0.5360\NP_20100113-193449.984.log (Adware.DoubleD) -> Delete on reboot.
              C:\Documents and Settings\timéolia\Local Settings\Application Data\Automated Content Enhancer\4.2.0.5360\rstatus.md (Adware.DoubleD) -> Quarantined and deleted successfully.
              C:\Documents and Settings\timéolia\Local Settings\Application Data\Customized Platform Advancer\4.2.0.2050\config.md (Adware.DoubleD) -> Quarantined and deleted successfully.
              C:\Documents and Settings\timéolia\Local Settings\Application Data\Customized Platform Advancer\4.2.0.2050\HJHP_20100108-190649.625.log (Adware.DoubleD) -> Quarantined and deleted successfully.
              C:\Documents and Settings\timéolia\Local Settings\Application Data\Customized Platform Advancer\4.2.0.2050\HJHP_20100108-191539.843.log (Adware.DoubleD) -> Quarantined and deleted successfully.
              C:\Documents and Settings\timéolia\Local Settings\Application Data\Customized Platform Advancer\4.2.0.2050\HJHP_20100109-084320.125.log (Adware.DoubleD) -> Quarantined and deleted successfully.
              C:\Documents and Settings\timéolia\Local Settings\Application Data\Customized Platform Advancer\4.2.0.2050\HJHP_20100109-095634.328.log (Adware.DoubleD) -> Quarantined and deleted successfully.
              C:\Documents and Settings\timéolia\Local Settings\Application Data\Customized Platform Advancer\4.2.0.2050\HJHP_20100109-095737.109.log (Adware.DoubleD) -> Quarantined and deleted successfully.
              C:\Documents and Settings\timéolia\Local Settings\Application Data\Customized Platform Advancer\4.2.0.2050\HJHP_20100109-095757.031.log (Adware.DoubleD) -> Quarantined and deleted successfully.
              C:\Documents and Settings\timéolia\Local Settings\Application Data\Customized Platform Advancer\4.2.0.2050\HJHP_20100109-095834.328.log (Adware.DoubleD) -> Quarantined and deleted successfully.
              C:\Documents and Settings\timéolia\Local Settings\Application Data\Customized Platform Advancer\4.2.0.2050\HJHP_20100109-095841.562.log (Adware.DoubleD) -> Quarantined and deleted successfully.
              C:\Documents and Settings\timéolia\Local Settings\Application Data\Customized Platform Advancer\4.2.0.2050\HJHP_20100109-104541.531.log (Adware.DoubleD) -> Quarantined and deleted successfully.
              C:\Documents and Settings\timéolia\Local Settings\Application Data\Customized Platform Advancer\4.2.0.2050\HJHP_20100109-111213.406.log (Adware.DoubleD) -> Quarantined and deleted successfully.
              C:\Documents and Settings\timéolia\Local Settings\Application Data\Customized Platform Advancer\4.2.0.2050\HJHP_20100109-115023.687.log (Adware.DoubleD) -> Quarantined and deleted successfully.
              C:\Documents and Settings\timéolia\Local Settings\Application Data\Customized Platform Advancer\4.2.0.2050\HJHP_20100109-115142.875.log (Adware.DoubleD) -> Quarantined and deleted successfully.
              C:\Documents and Settings\timéolia\Local Settings\Application Data\Customized Platform Advancer\4.2.0.2050\HJHP_20100109-120125.609.log (Adware.DoubleD) -> Quarantined and deleted successfully.
              C:\Documents and Settings\timéolia\Local Settings\Application Data\Customized Platform Advancer\4.2.0.2050\HJHP_20100109-120412.781.log (Adware.DoubleD) -> Quarantined and deleted successfully.
              C:\Documents and Settings\timéolia\Local Settings\Application Data\Customized Platform Advancer\4.2.0.2050\HJHP_20100109-143739.296.log (Adware.DoubleD) -> Quarantined and deleted successfully.
              C:\Documents and Settings\timéolia\Local Settings\Application Data\Customized Platform Advancer\4.2.0.2050\HJHP_20100109-161810.703.log (Adware.DoubleD) -> Quarantined and deleted successfully.
              C:\Documents and Settings\timéolia\Local Settings\Application Data\Customized Platform Advancer\4.2.0.2050\HJHP_20100109-162129.453.log (Adware.DoubleD) -> Quarantined and deleted successfully.
              C:\Documents and Settings\timéolia\Local Settings\Application Data\Customized Platform Advancer\4.2.0.2050\HJHP_20100109-162612.406.log (Adware.DoubleD) -> Quarantined and deleted successfully.
              C:\Documents and Settings\timéolia\Local Settings\Application Data\Customized Platform Advancer\4.2.0.2050\HJHP_20100109-170054.421.log (Adware.DoubleD) -> Quarantined and deleted successfully.
              C:\Documents and Settings\timéolia\Local Settings\Application Data\Customized Platform Advancer\4.2.0.2050\HJHP_20100109-204134.781.log (Adware.DoubleD) -> Quarantined and deleted successfully.
              C:\Documents and Settings\timéolia\Local Settings\Application Data\Customized Platform Advancer\4.2.0.2050\HJHP_20100110-110328.515.log (Adware.DoubleD) -> Quarantined and deleted successfully.
              C:\Documents and Settings\timéolia\Local Settings\Application Data\Customized Platform Advancer\4.2.0.2050\HJHP_20100110-122345.484.log (Adware.DoubleD) -> Quarantined and deleted successfully.
              C:\Documents and Settings\timéolia\Local Settings\Application Data\Customized Platform Advancer\4.2.0.2050\HJHP_20100110-175616.203.log (Adware.DoubleD) -> Quarantined and deleted successfully.
              C:\Documents and Settings\timéolia\Local Settings\Application Data\Customized Platform Advancer\4.2.0.2050\HJHP_20100110-200812.812.log (Adware.DoubleD) -> Quarantined and deleted successfully.
              C:\Documents and Settings\timéolia\Local Settings\Application Data\Customized Platform Advancer\4.2.0.2050\HJHP_20100110-201235.187.log (Adware.DoubleD) -> Quarantined and deleted successfully.
              C:\Documents and Settings\timéolia\Local Settings\Application Data\Customized Platform Advancer\4.2.0.2050\HJHP_20100110-214339.328.log (Adware.DoubleD) -> Quarantined and deleted successfully.
              C:\Documents and Settings\timéolia\Local Settings\Application Data\Customized Platform Advancer\4.2.0.2050\HJHP_20100111-085629.984.log (Adware.DoubleD) -> Quarantined and deleted successfully.
              C:\Documents and Settings\timéolia\Local Settings\Application Data\Customized Platform Advancer\4.2.0.2050\HJHP_20100111-085827.453.log (Adware.DoubleD) -> Quarantined and deleted successfully.
              C:\Documents and Settings\timéolia\Local Settings\Application Data\Customized Platform Advancer\4.2.0.2050\HJHP_20100111-090500.312.log (Adware.DoubleD) -> Quarantined and deleted successfully.
              C:\Documents and Settings\timéolia\Local Settings\Application Data\Customized Platform Advancer\4.2.0.2050\HJHP_20100111-090735.015.log (Adware.DoubleD) -> Quarantined and deleted successfully.
              C:\Documents and Settings\timéolia\Local Settings\Application Data\Customized Platform Advancer\4.2.0.2050\HJHP_20100111-184729.890.log (Adware.DoubleD) -> Quarantined and deleted successfully.
              C:\Documents and Settings\timéolia\Local Settings\Application Data\Customized Platform Advancer\4.2.0.2050\HJHP_20100111-185416.562.log (Adware.DoubleD) -> Quarantined and deleted successfully.
              C:\Documents and Settings\timéolia\Local Settings\Application Data\Customized Platform Advancer\4.2.0.2050\HJHP_20100111-185617.812.log (Adware.DoubleD) -> Quarantined and deleted successfully.
              C:\Documents and Settings\timéolia\Local Settings\Application Data\Customized Platform Advancer\4.2.0.2050\HJHP_20100111-210758.265.log (Adware.DoubleD) -> Quarantined and deleted successfully.
              C:\Documents and Settings\timéolia\Local Settings\Application Data\Customized Platform Advancer\4.2.0.2050\HJHP_20100111-210801.093.log (Adware.DoubleD) -> Quarantined and deleted successfully.
              C:\Documents and Settings\timéolia\Local Settings\Application Data\Customized Platform Advancer\4.2.0.2050\HJHP_20100111-212132.406.log (Adware.DoubleD) -> Quarantined and deleted successfully.
              C:\Documents and Settings\timéolia\Local Settings\Application Data\Customized Platform Advancer\4.2.0.2050\HJHP_20100112-183424.924.log (Adware.DoubleD) -> Quarantined and deleted successfully.
              C:\Documents and Settings\timéolia\Local Settings\Application Data\Customized Platform Advancer\4.2.0.2050\HJHP_20100112-194709.643.log (Adware.DoubleD) -> Quarantined and deleted successfully.
              C:\Documents and Settings\timéolia\Local Settings\Application Data\Customized Platform Advancer\4.2.0.2050\HJHP_20100112-201540.596.log (Adware.DoubleD) -> Quarantined and deleted successfully.
              C:\Documents and Settings\timéolia\Local Settings\Application Data\Customized Platform Advancer\4.2.0.2050\HJHP_20100112-203525.830.log (Adware.DoubleD) -> Quarantined and deleted successfully.
              C:\Documents and Settings\timéolia\Local Settings\Application Data\Customized Platform Advancer\4.2.0.2050\HJHP_20100112-203607.064.log (Adware.DoubleD) -> Quarantined and deleted successfully.
              C:\Documents and Settings\timéolia\Local Settings\Application Data\Customized Platform Advancer\4.2.0.2050\HJHP_20100113-100106.937.log (Adware.DoubleD) -> Quarantined and deleted successfully.
              C:\Documents and Settings\timéolia\Local Settings\Application Data\Customized Platform Advancer\4.2.0.2050\HJHP_20100113-100230.046.log (Adware.DoubleD) -> Quarantined and deleted successfully.
              C:\Documents and Settings\timéolia\Local Settings\Application Data\Customized Platform Advancer\4.2.0.2050\HJHP_20100113-110800.125.log (Adware.DoubleD) -> Quarantined and deleted successfully.
              C:\Documents and Settings\timéolia\Local Settings\Application Data\Customized Platform Advancer\4.2.0.2050\HJHP_20100113-112039.515.log (Adware.DoubleD) -> Quarantined and deleted successfully.
              C:\Documents and Settings\timéolia\Local Settings\Application Data\Customized Platform Advancer\4.2.0.2050\HJHP_20100113-181500.781.log (Adware.DoubleD) -> Quarantined and deleted successfully.
              C:\Documents and Settings\timéolia\Local Settings\Application Data\Customized Platform Advancer\4.2.0.2050\HJHP_20100113-181715.109.log (Adware.DoubleD) -> Quarantined and deleted successfully.
              C:\Documents and Settings\timéolia\Local Settings\Application Data\Customized Platform Advancer\4.2.0.2050\HJHP_20100113-184728.000.log (Adware.DoubleD) -> Quarantined and deleted successfully.
              C:\Documents and Settings\timéolia\Local Settings\Application Data\Customized Platform Advancer\4.2.0.2050\HJHP_20100113-192517.921.log (Adware.DoubleD) -> Quarantined and deleted successfully.
              C:\Documents and Settings\timéolia\Local Settings\Application Data\Customized Platform Advancer\4.2.0.2050\HJHP_20100113-193450.093.log (Adware.DoubleD) -> Delete on reboot.
              C:\Documents and Settings\timéolia\Local Settings\Application Data\Customized Platform Advancer\4.2.0.2050\ipdata.md (Adware.DoubleD) -> Quarantined and deleted successfully.
              C:\Documents and Settings\timéolia\Local Settings\Application Data\Customized Platform Advancer\4.2.0.2050\rstatus.md (Adware.DoubleD) -> Quarantined and deleted successfully.
              C:\Documents and Settings\timéolia\Local Settings\Application Data\Textual Content Provider\1.2.0.2040\Data\TP_Config.mx (Adware.DoubleD) -> Quarantined and deleted successfully.
              C:\Documents and Settings\timéolia\Local Settings\Application Data\Textual Content Provider\1.2.0.2040\Data\TP_Data.mx (Adware.DoubleD) -> Quarantined and deleted successfully.
              C:\Documents and Settings\timéolia\Local Settings\Application Data\Textual Content Provider\1.2.0.2040\Data\TP_DomainExcludeList.mx (Adware.DoubleD) -> Quarantined and deleted successfully.
              C:\Documents and Settings\timéolia\Local Settings\Application Data\Textual Content Provider\1.2.0.2040\Data\TP_DomainInterval.mx (Adware.DoubleD) -> Quarantined and deleted successfully.
              C:\Documents and Settings\timéolia\Local Settings\Application Data\Web Search Operator\4.2.0.2150\config.md (Adware.DoubleD) -> Quarantined and deleted successfully.
              C:\Documents and Settings\timéolia\Local Settings\Application Data\Web Search Operator\4.2.0.2150\rstatus.md (Adware.DoubleD) -> Quarantined and deleted successfully.
              0
              1. Contributeur sécurité
                c'est pas fini

                faire le post 8 en entier
                0
                1. un grand merci pour l'aide apporté ainsi que les conseils trés trés rapide !!!! je ne m'attendais pas a autent de rapidité de votre part , en esperant que tout cela fonctionne comme avant . cordialement
                  0
                  1. Contributeur sécurité
                    ok

                    supprimer manuellement
                    C:\Program Files\GameRaving Toolbar

                    ensuite

                    Téléchargez MalwareByte's Anti-Malware

                    http://www.malwarebytes.org/mbam/program/mbam-setup.exe

                    . Enregistres le sur le bureau
                    . Double cliques sur le fichier téléchargé pour lancer le processus d'installation.
                    . Dans l'onglet "mise à jour", cliques sur le bouton Recherche de mise à jour
                    . Si le pare-feu demande l'autorisation de se connecter pour malwarebytes, accepte
                    . Une fois la mise à jour terminé
                    . Rend-toi dans l'onglet, Recherche
                    . Sélectionnes Exécuter un examen complet
                    . Cliques sur Rechercher
                    . Le scan démarre.
                    . A la fin de l'analyse, un message s'affiche : L'examen s'est terminé normalement. Cliquez sur 'Afficher les résultats' pour afficher tous les objets trouvés.
                    . Cliques sur Ok pour poursuivre.
                    . Si des malwares ont été détectés, clique sur Afficher les résultats
                    . Sélectionnes tout (ou laisses cochés) et cliques sur Supprimer la sélection Malwarebytes va détruire les fichiers et clés de registre et en mettre une copie dans la quarantaine.
                    . Malwarebytes va ouvrir le bloc-notes et y copier le rapport d'analyse.
                    . Rends toi dans l'onglet rapport/log
                    . Tu cliques dessus pour l'afficher, une fois affiché
                    . Tu cliques sur edition en haut du boc notes, et puis sur sélectionner tous
                    . Tu recliques sur edition et puis sur copier et tu reviens sur le forum et dans ta réponse
                    . tu cliques droit dans le cadre de la reponse et coller

                    Si tu as besoin d'aide regarde ces tutoriels :
                    Aide: https://www.malekal.com/tutoriel-malwarebyte-anti-malware/
                    http://www.infos-du-net.com/forum/278396-11-tuto-malwarebytes-anti-malware-mbam
                    0
                    1. voila le rapport :

                      Yoog_Fix 3.0.1 de Batch_Man | tim‚olia (Administrateur)
                      Debut a 19:26 le 13/01/2010
                      Microsoft Windows XP Professionnel(5.1.2600)

                      Intel(R) Celeron(R) CPU 2.40GHz
                      Ram : 1022,8 Mo
                      Normal boot

                      Antivirus: AntiVir Desktop 9.0.1.32 (Activated)
                      Lancé de "C:\Documents and Settings\tim‚olia\Mes documents\T‚l‚chargements\Yoog_Fix.bat"

                      A:\ [Removable] (Total:0 Mo/Free:0 Mo)
                      C:\ [Fixed] - NTFS - (Total:39189 Mo/Free:2486 Mo)
                      D:\ [CD-Rom] (Total:0 Mo/Free:0 Mo)
                      E:\ [CD-Rom] (Total:0 Mo/Free:0 Mo)

                      Option [1] 2 3 Recherche / Suppression

                      »»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»

                      »»»»»»»»»»» [Suppression: Fichiers / Dossiers / Clés / Prefs Firefox]

                      ------------[Suspects]

                      Aucun fichier suspect trouvé

                      »»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»

                      »»»»»»»»»»» [Recherche: Analyse de Firefox]

                      ------------[Analyse de Firefox]

                      Mozilla Firefox 3.5.7 (fr)
                      Répertoire d'installation : C:\Program Files\Mozilla Firefox
                      Path: C:\Documents and Settings\tim‚olia\Application Data\Mozilla\Firefox\Profiles\9rlxnu3u.default

                      [tim‚olia\..\prefs.js] browser.startup.homepage: "http://www.theprizeday.com/today.php|https://start.mozilla.org/fr/\n"
                      [tim‚olia\..\prefs.js] browser.search.defaulturl: "http://search.conduit.com/ResultsExt.aspx?ctid=CT1060933&SearchSource=3&q={searchTerms}"
                      [tim‚olia\..\prefs.js] browser.search.selectedEngine: "Freecorder Customized Web Search"

                      ------------[Extensions Firefox]

                      [tim‚olia] {1392b8d2-5c05-419f-a8f6-b9f15a596612} = Freecorder Toolbar
                      [tim‚olia] {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d} = Adblock Plus

                      {E63605FC-D583-4C81-867F-9457BDB3EA1B} = C:\Program Files\Web Search Operator\4.2.0.2150\FF
                      {8141440E-08F0-4339-9959-5C31C6A69F23} = C:\Program Files\Automated Content Enhancer\4.2.0.5360\FF
                      {E889F097-B0BE-471B-89AD-B86B6F04B506} = C:\Program Files\Customized Platform Advancer\4.2.0.2050\FF

                      ------------[Mozilla Plugins]

                      Path = C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll
                      XPTPath = C:\WINDOWS\system32\Macromed\Flash\flashplayer.xpt
                      ProductName = Adobe® Flash® Player Plugin
                      Vendor = Adobe Systems Incorporated
                      Version = 10.0.32.18

                      GeckoVersion = 1.7.5
                      Path = c:\Program Files\Microsoft Silverlight\3.0.40818.0\npctrl.dll
                      ProductName = Ag Player
                      Vendor = Microsoft
                      Version = 3.0

                      Path = C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll
                      GeckoVersion = 1.0
                      ProductName = Windows Live Photo Gallery
                      Version = 14.0.8081.0709

                      Vendor = Microsoft
                      Path = C:\Program Files\VideoLAN\VLC\npvlc.dll
                      Vendor = VideoLAN
                      Version = 1.0.3

                      ------------[Plugins de recherche]

                      [Program Files] amazon-france.xml = https://www.amazon.fr/
                      [Program Files] browserzinc115.xml = moz:SearchForm
                      [Program Files] cnrtl-tlfi-fr.xml = https://www.cnrtl.fr/lexicographie/
                      [Program Files] eBay-france.xml = http://search.ebay.fr/
                      [Program Files] google.xml = https://www.google.com/
                      [Program Files] wikipedia-fr.xml = https://fr.wikipedia.org/wiki/Sp%C3%A9cial:Recherche
                      [Program Files] yahoo-france.xml = https://fr.search.yahoo.com/

                      ------------[Listing de dossiers]

                      [08/01/2010 08:34 | 23512 bytes] C:\Program Files\Mozilla Firefox\Components\browserdirprovider.dll
                      [08/01/2010 08:34 | 137176 bytes] C:\Program Files\Mozilla Firefox\Components\brwsrcmp.dll
                      [08/01/2010 08:34 | 64984 bytes] C:\Program Files\Mozilla Firefox\plugins\npnul32.dll
                      [27/02/2009 13:13 | 103792 bytes] C:\Program Files\Mozilla Firefox\plugins\nppdf32.dll

                      »»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»

                      »»»»»»»»»»» [Recherche: Analyse d'Internet explorer / Registre ]

                      Internet Explorer : 8.0.6001.18702

                      L1 = HKLM\..\Main.Start Page = https://www.msn.com/fr-fr/?ocid=iehp
                      L1 = HKLM\..\Main.Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
                      L1 = HKCU\..\Main.Start Page = http://www.theprizeday.com/today.php
                      L1 = HKCU\..\Main.Start Page = REG_MULTI_SZ http://search.conduit.com?SearchSource=10&ctid=CT1060933\0\0
                      L1 = HKCU\..\Main.Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
                      L1 = HKCU\..\Main.Window Title = Alice ADSL
                      L1 = HKU\S-1-5-21-1214440339-515967899-1801674531-1003\..\Main.Start Page = http://www.theprizeday.com/today.php
                      L1 = HKU\S-1-5-21-1214440339-515967899-1801674531-1003\..\Main.Start Page = REG_MULTI_SZ http://search.conduit.com?SearchSource=10&ctid=CT1060933\0\0
                      L1 = HKU\S-1-5-21-1214440339-515967899-1801674531-1003\..\Main.Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
                      L1 = HKU\S-1-5-21-1214440339-515967899-1801674531-1003\..\Main.Window Title = Alice ADSL
                      L1 = HKLM\..\Main.Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
                      L1 = HKLM\..\Main.Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
                      L1 = HKLM\..\Search.CustomizeSearch = https://www.bing.com/?toHttps=1&redig=8F3F334EA60E4B1CB4D040DCFE393A89{SUB_RFC1766}/srchasst/srchcust.htm
                      L1 = HKLM\..\Search.SearchAssistant = https://www.bing.com/?toHttps=1&redig=8F3F334EA60E4B1CB4D040DCFE393A89{SUB_RFC1766}/srchasst/srchasst.htm
                      L1 = HKLM\..\Search.SearchAssistant = https://www.bing.com/?toHttps=1&redig=8F3F334EA60E4B1CB4D040DCFE393A89{SUB_RFC1766}/srchasst/srchasst.htm
                      L1 = HKLM\..\Search.CustomizeSearch = https://www.bing.com/?toHttps=1&redig=8F3F334EA60E4B1CB4D040DCFE393A89{SUB_RFC1766}/srchasst/srchcust.htm
                      L1 = HKCU\..\Toolbar.LinksFolderName = Liens
                      L1 = HKU\S-1-5-21-1214440339-515967899-1801674531-1003\..\Toolbar.LinksFolderName = Liens

                      [HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURLs]
                      HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet =
                      NavigationFailure = res://ieframe.dll/navcancl.htm
                      DesktopItemNavigationFailure = res://ieframe.dll/navcancl.htm
                      NavigationCanceled = res://ieframe.dll/navcancl.htm
                      OfflineInformation = res://ieframe.dll/offcancl.htm
                      Home = 0x10e
                      blank = res://mshtml.dll/blank.htm
                      PostNotCached = res://ieframe.dll/repost.htm
                      InPrivate = res://ieframe.dll/inprivate.htm
                      NoAdd-ons = res://ieframe.dll/noaddon.htm
                      NoAdd-onsInfo = res://ieframe.dll/noaddoninfo.htm
                      SecurityRisk = res://ieframe.dll/securityatrisk.htm
                      Tabs = res://ieframe.dll/tabswelcome.htm

                      --------[Browser Helper Object]

                      BHO: {1392b8d2-5c05-419f-a8f6-b9f15a596612},@SANS NOM=3.0
                      BHO: {18DF081C-E8AD-4283-A596-FA578C2EBDC3},@SANS NOM=3.0
                      BHO: {18DF081C-E8AD-4283-A596-FA578C2EBDC3},@SANS NOM=AcroIEHelperStub
                      BHO: {1D74E9DD-8987-448b-B2CB-67FFF2B8A932},@SANS NOM=3.0
                      BHO: {1D74E9DD-8987-448b-B2CB-67FFF2B8A932},@SANS NOM=Automated Content Enhancer
                      BHO: {42C7C39F-3128-4a17-BDB7-91C46032B5B9},@SANS NOM=3.0
                      BHO: {42C7C39F-3128-4a17-BDB7-91C46032B5B9},@SANS NOM=Customized Platform Advancer
                      BHO: {5C255C8A-E604-49b4-9D64-90988571CECB},@SANS NOM=3.0
                      BHO: {9030D464-4C02-4ABF-8ECC-5164760863C6},@SANS NOM=3.0
                      BHO: {B72681C0-A222-4b21-A0E2-53A5A5CA3D41},@SANS NOM=3.0
                      BHO: {B72681C0-A222-4b21-A0E2-53A5A5CA3D41},@SANS NOM=Content Management Wizard
                      BHO: {CAC89FF9-34A9-4431-8CFE-292A47F843BC},@SANS NOM=3.0
                      BHO: {CAC89FF9-34A9-4431-8CFE-292A47F843BC},@SANS NOM=Textual Content Provider
                      BHO: {EB4A577D-BCAD-4b1c-8AF2-9A74B8DD3431},@SANS NOM=3.0
                      BHO: {EB4A577D-BCAD-4b1c-8AF2-9A74B8DD3431},@SANS NOM=Web Search Operator

                      --------[SearchScopes]

                      [HKEY_USERS\S-1-5-21-1214440339-515967899-1801674531-1003\..\SearchScopes],@DefaultScope={afdbddaa-5d3f-42ee-b79c-185a7020515b}
                      [HKEY_USERS\S-1-5-21-1214440339-515967899-1801674531-1003\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}],@DisplayName=Bing
                      [HKEY_USERS\S-1-5-21-1214440339-515967899-1801674531-1003\..\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}],@DisplayName=Freecorder Customized Web Search
                      [HKCU\Software\Microsoft\Internet Explorer\SearchScopes],@DefaultScope={afdbddaa-5d3f-42ee-b79c-185a7020515b}
                      [HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes],@DefaultScope={0633EE93-D776-472f-A0FF-E1416B8B2E3A}
                      [HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}],@DisplayName=@ieframe.dll,-12512
                      [HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}],@DisplayName=Bing
                      [HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}],@DisplayName=Freecorder Customized Web Search

                      --------[Extensions]

                      Windows Messenger: C:\Program Files\Messenger\msmsgs.exe - {1FBA04EE-3024-11D2-8F1F-0000F87ABD16}

                      --------[Clé Run]

                      ------------[Autres infections]

                      »»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»

                      »»»»»»»»»»» [Autres rapports]

                      [13/01/2010 19:33] C:\Yoog_Fix\Logs\Rapport_13_01_2010_n4.txt - (Choix 1 : Recherche / Suppression)

                      -------------------------->>

                      Veuillez uploader le fichier C:\Yoog_Fix\Backups\Backup_13_01_2010_3.zip à l'adresse suivante : http://batchdhelus.open-web.fr/upload
                      Aide en images : http://batchdhelus.open-web.fr/upload/procedure.html

                      Si la procédure échoue, veuillez l'envoyer à l'adresse email suivante : yoog.fix.sav@gmail.com

                      +--------------[Fin à 19h 33min]
                      0
                      1. Contributeur sécurité
                        ok

                        Télécharge Yoog_Fix sur ton Bureau : Yoog_Fix.exe
                        http://batchdhelus.open-web.fr/programme/Yoog_Fix.exe

                        Lance Yoog_Fix.exe qui est placé sur ton Bureau.
                        Si tu acceptes le disclamer tu cliques sur OK puis choisie l'option 1 Recherche / Suppression
                        Attends que le scan soit terminé, une fenêtre va t'en informer --> Cliquez sur OK.
                        Un rapport s'affiche, poste le dans ta prochaine réponse.
                        tutoriel: http://batchdhelus.open-web.fr/programme/tutoriels/tutoriel_option1.html
                        Note : Il se peut que Yoog_Fix soit détecté par ton antivirus comme dangereux. Cette alerte est un faux positif, Désactive tes protections résidentes !!!
                        0
                        1. voila le rapport :
                          Logfile of random's system information tool 1.06 (written by random/random)
                          Run by timéolia at 2010-01-13 18:50:57
                          Microsoft Windows XP Professionnel Service Pack 2
                          System drive C: has 14 GB (35%) free of 39 GB
                          Total RAM: 1023 MB (56% free)

                          Logfile of Trend Micro HijackThis v2.0.2
                          Scan saved at 18:51:07, on 13/01/2010
                          Platform: Windows XP SP2 (WinNT 5.01.2600)
                          MSIE: Internet Explorer v8.00 (8.00.6001.18702)
                          Boot mode: Normal

                          Running processes:
                          C:\WINDOWS\System32\smss.exe
                          C:\WINDOWS\system32\winlogon.exe
                          C:\WINDOWS\system32\services.exe
                          C:\WINDOWS\system32\lsass.exe
                          C:\WINDOWS\system32\svchost.exe
                          C:\WINDOWS\System32\svchost.exe
                          C:\WINDOWS\Explorer.EXE
                          C:\WINDOWS\system32\spoolsv.exe
                          C:\Program Files\Avira\AntiVir Desktop\sched.exe
                          C:\Program Files\Avira\AntiVir Desktop\avguard.exe
                          C:\WINDOWS\system32\CTsvcCDA.EXE
                          C:\WINDOWS\System32\nvsvc32.exe
                          C:\Program Files\TechCity Solutions\AliceSAV\AliceAgent.exe
                          C:\WINDOWS\system32\RUNDLL32.EXE
                          C:\Program Files\Razer\razerhid.exe
                          C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
                          C:\Program Files\Creative\ShareDLL\CtNotify.exe
                          C:\Program Files\Freecorder\FLVSrvc.exe
                          C:\WINDOWS\system32\ctfmon.exe
                          C:\WINDOWS\system32\rundll32.exe
                          C:\Program Files\Creative\ShareDLL\MediaDet.Exe
                          C:\WINDOWS\System32\svchost.exe
                          C:\WINDOWS\system32\MsPMSPSv.exe
                          C:\Program Files\Razer\razerofa.exe
                          C:\Program Files\Windows Live\Messenger\msnmsgr.exe
                          C:\WINDOWS\system32\wuauclt.exe
                          C:\Program Files\Windows Live\Contacts\wlcomm.exe
                          C:\Program Files\Mozilla Firefox\firefox.exe
                          C:\Documents and Settings\timéolia\Mes documents\Téléchargements\RSIT.exe
                          C:\Program Files\trend micro\timéolia.exe

                          R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.theprizeday.com/today.php
                          R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
                          R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
                          R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
                          R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
                          R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Alice ADSL
                          R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
                          R3 - URLSearchHook: Freecorder Toolbar - {1392b8d2-5c05-419f-a8f6-b9f15a596612} - C:\Program Files\Freecorder\tbFree.dll
                          O2 - BHO: Freecorder Toolbar - {1392b8d2-5c05-419f-a8f6-b9f15a596612} - C:\Program Files\Freecorder\tbFree.dll
                          O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
                          O2 - BHO: Automated Content Enhancer - {1D74E9DD-8987-448b-B2CB-67FFF2B8A932} - C:\Program Files\Automated Content Enhancer\4.2.0.5360\ACEIEAddOn.dll
                          O2 - BHO: Customized Platform Advancer - {42C7C39F-3128-4a17-BDB7-91C46032B5B9} - C:\Program Files\Customized Platform Advancer\4.2.0.2050\CPAIEAddOn.dll
                          O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
                          O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
                          O2 - BHO: Content Management Wizard - {B72681C0-A222-4b21-A0E2-53A5A5CA3D41} - C:\Program Files\Content Management Wizard\1.2.0.2080\CMWIE.dll
                          O2 - BHO: Textual Content Provider - {CAC89FF9-34A9-4431-8CFE-292A47F843BC} - C:\Program Files\Textual Content Provider\1.2.0.2040\TCPIE.dll
                          O2 - BHO: Web Search Operator - {EB4A577D-BCAD-4b1c-8AF2-9A74B8DD3431} - C:\Program Files\Web Search Operator\4.2.0.2150\wso.dll
                          O3 - Toolbar: Freecorder Toolbar - {1392b8d2-5c05-419f-a8f6-b9f15a596612} - C:\Program Files\Freecorder\tbFree.dll
                          O4 - HKLM\..\Run: [AliceSAV] C:\Program Files\TechCity Solutions\AliceSAV\AliceAgent.exe
                          O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
                          O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
                          O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\System32\NvMcTray.dll,NvTaskbarInit
                          O4 - HKLM\..\Run: [razer] C:\Program Files\Razer\razerhid.exe
                          O4 - HKLM\..\Run: [UpdReg] C:\WINDOWS\Updreg.exe
                          O4 - HKLM\..\Run: [Jet Detection] C:\Program Files\Creative\SBAudigy\PROGRAM\ADGJDet.exe
                          O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
                          O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
                          O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Fichiers communs\Adobe\ARM\1.0\AdobeARM.exe"
                          O4 - HKLM\..\Run: [Disc Detector] C:\Program Files\Creative\ShareDLL\CtNotify.exe
                          O4 - HKLM\..\Run: [CTStartup] C:\Program Files\Creative\SBAudigy\Program\CTEaxSpl.EXE /run
                          O4 - HKLM\..\Run: [Freecorder FLV Service] "C:\Program Files\Freecorder\FLVSrvc.exe" /run
                          O4 - HKLM\..\Run: [Internet Today Task] "C:\Program Files\Internet Today\1.2.0.1420\InternetToday.exe"
                          O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
                          O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE LOCAL')
                          O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE RÉSEAU')
                          O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
                          O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
                          O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
                          O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
                          O23 - Service: Avira AntiVir Planificateur (AntiVirSchedulerService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\sched.exe
                          O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
                          O23 - Service: BrowserZinc Service - Unknown owner - C:\Documents and Settings\All Users\Application Data\BrowserZinc\browserzinc115.exe (file missing)
                          O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.EXE
                          O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
                          0
                          1. Contributeur sécurité
                            il manque le rapport log qui se trouve ici et passe en un seul post...C:\rsit\log.txt
                            0
                            1. et voici le reste, en vous remerciant vivement de m'expliquer car pour moi c'est du charabia !!!!

                              =====Security center information======

                              AV: AntiVir Desktop

                              ======System event log======

                              Computer Name: MOI-PSOWBX60W2P
                              Event Code: 6161
                              Message:
                              Record Number: 3432
                              Source Name: Print
                              Time Written: 20091128150456.000000+060
                              Event Type: erreur
                              User: MOI-PSOWBX60W2P\timéolia

                              Computer Name: MOI-PSOWBX60W2P
                              Event Code: 7036
                              Message: Le service Service COM de gravage de CD IMAPI est entré dans l'état : arrêté.

                              Record Number: 3431
                              Source Name: Service Control Manager
                              Time Written: 20091128120413.000000+060
                              Event Type: Informations
                              User:

                              Computer Name: MOI-PSOWBX60W2P
                              Event Code: 7036
                              Message: Le service Explorateur d'ordinateur est entré dans l'état : arrêté.

                              Record Number: 3430
                              Source Name: Service Control Manager
                              Time Written: 20091128120408.000000+060
                              Event Type: Informations
                              User:

                              Computer Name: MOI-PSOWBX60W2P
                              Event Code: 7036
                              Message: Le service Service de la passerelle de la couche Application est entré dans l'état : en cours d'exécution.

                              Record Number: 3429
                              Source Name: Service Control Manager
                              Time Written: 20091128120407.000000+060
                              Event Type: Informations
                              User:

                              Computer Name: MOI-PSOWBX60W2P
                              Event Code: 7035
                              Message: Un contrôle Démarrer a correctement été envoyé au service Service de la passerelle de la couche Application.

                              Record Number: 3428
                              Source Name: Service Control Manager
                              Time Written: 20091128120407.000000+060
                              Event Type: Informations
                              User: AUTORITE NT\SYSTEM

                              =====Application event log=====

                              Computer Name: MOI-PSOWBX60W2P
                              Event Code: 105
                              Message: The service was started.

                              Record Number: 2379
                              Source Name: Creative Service for CDROM Access
                              Time Written: 20100113105959.000000+060
                              Event Type: Informations
                              User:

                              Computer Name: MOI-PSOWBX60W2P
                              Event Code: 1004
                              Message: L'utilisateur a accepté le CLUF.

                              Record Number: 2378
                              Source Name: WgaSetup
                              Time Written: 20100113105955.000000+060
                              Event Type: Informations
                              User:

                              Computer Name: MOI-PSOWBX60W2P
                              Event Code: 1002
                              Message: Starting interactive setup.

                              Record Number: 2377
                              Source Name: WgaSetup
                              Time Written: 20100113105955.000000+060
                              Event Type: Informations
                              User:

                              Computer Name: MOI-PSOWBX60W2P
                              Event Code: 1006
                              Message: Le CLUF a déjà été accepté.

                              Record Number: 2376
                              Source Name: WgaSetup
                              Time Written: 20100113105955.000000+060
                              Event Type: Informations
                              User:

                              Computer Name: MOI-PSOWBX60W2P
                              Event Code: 1000
                              Message: Application défaillante iexplore.exe, version 8.0.6001.18702, module défaillant unknown, version 0.0.0.0, adresse de défaillance 0x046c3536.

                              Record Number: 2375
                              Source Name: Application Error
                              Time Written: 20100113100330.000000+060
                              Event Type: erreur
                              User:

                              ======Environment variables======

                              "ComSpec"=%SystemRoot%\system32\cmd.exe
                              "Path"=%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem
                              "windir"=%SystemRoot%
                              "OS"=Windows_NT
                              "PROCESSOR_ARCHITECTURE"=x86
                              "PROCESSOR_LEVEL"=15
                              "PROCESSOR_IDENTIFIER"=x86 Family 15 Model 2 Stepping 9, GenuineIntel
                              "PROCESSOR_REVISION"=0209
                              "NUMBER_OF_PROCESSORS"=1
                              "PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
                              "TEMP"=%SystemRoot%\TEMP
                              "TMP"=%SystemRoot%\TEMP
                              "FP_NO_HOST_CHECK"=NO

                              -----------------EOF-----------------
                              0
                              1. bonjour et merci de m'aider , le rapport effectué et le suivant:
                                info.txt logfile of random's system information tool 1.06 2010-01-13 18:51:13

                                ======Uninstall list======

                                -->C:\Program Files\Creative\SBAudigy\Program\Ctzapxx.EXE
                                -->C:\WINDOWS\IsUn040c.exe -f"C:\Program Files\Creative\SBAudigy\AudioHQ\AudioHQU.isu"
                                -->C:\WINDOWS\IsUn040c.exe -f"C:\Program Files\Creative\SBAudigy\PlayCenter2\Player2.isu"
                                -->C:\WINDOWS\IsUn040c.exe -f"C:\Program Files\Creative\SBAudigy\Program\RDefault.isu"
                                -->C:\WINDOWS\IsUn040c.exe -f"C:\Program Files\Creative\SBAudigy\Recorder\Recorder.isu"
                                -->C:\WINDOWS\IsUn040c.exe -f"C:\Program Files\Creative\SBAudigy\SurMix2\SurMix2.isu"
                                -->C:\WINDOWS\IsUn040c.exe -f"C:\Program Files\Creative\Uninstall\Installer.isu"
                                -->C:\WINDOWS\IsUninst.exe -f"C:\Program Files\Creative\News\CTNews.isu"
                                -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{411A247C-5467-40C0-BFC0-DA08820A8513}\Setup.exe" -l0x40c
                                -->rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf
                                7-Zip 4.65-->"C:\Program Files\7-Zip\Uninstall.exe"
                                Adobe Acrobat 5.0-->C:\WINDOWS\ISUN040C.EXE -f"C:\Program Files\Fichiers communs\Adobe\Acrobat 5.0\NT\Uninst.isu" -c"C:\Program Files\Fichiers communs\Adobe\Acrobat 5.0\NT\Uninst.dll"
                                Adobe Flash Player 10 ActiveX-->C:\WINDOWS\System32\Macromed\Flash\uninstall_activeX.exe
                                Adobe Flash Player 10 Plugin-->C:\WINDOWS\system32\Macromed\Flash\uninstall_plugin.exe
                                Adobe Reader 9.2 - Français-->MsiExec.exe /I{AC76BA86-7AD7-1036-7B44-A92000000001}
                                Alice Auto-diagnostic-->C:\Program Files\TechCity Solutions\AliceSAV\uninstall.exe
                                ArcSoft PhotoImpression-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{E142615E-5ED8-4511-9BF0-0284BFA25766}\setup.exe" -l0x40c -uninst
                                Assistant de connexion Windows Live-->MsiExec.exe /I{DCE8CD14-FBF5-4464-B9A4-E18E473546C7}
                                Avira AntiVir Personal - Free Antivirus-->C:\Program Files\Avira\AntiVir Desktop\setup.exe /REMOVE
                                Canon i455-->C:\WINDOWS\system32\CNMCP5i.exe "-PRINTERNAMECanon i455" "-HELPERDLLC:\BJPrinter\CNMWINDOWS\Canon i455 Installer\Inst2\cnmis.dll" "-RCDLLC:\BJPrinter\CNMWINDOWS\Canon i455 Installer\Inst2\cnmi040c.dll"
                                CanoScan Toolbox 4.5-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{143FB15C-0C48-41E3-9C30-F56FB69BF3D7}\setup.exe" -l0x40c anything
                                Correctif pour Windows XP (KB952287)-->"C:\WINDOWS\$NtUninstallKB952287$\spuninst\spuninst.exe"
                                Correctif pour Windows XP (KB970653-v3)-->"C:\WINDOWS\$NtUninstallKB970653-v3$\spuninst\spuninst.exe"
                                Correctif pour Windows XP (KB976098-v2)-->"C:\WINDOWS\$NtUninstallKB976098-v2$\spuninst\spuninst.exe"
                                eMule-->"C:\Program Files\eMule\Uninstall.exe"
                                Free Audio CD Burner version 1.2-->"C:\Program Files\DVDVideoSoft\Free Audio CD Burner\unins000.exe"
                                Free Studio version 4.2-->"C:\Program Files\DVDVideoSoft\Free Studio\unins000.exe"
                                Free YouTube to MP3 Converter version 3.2-->"C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\unins000.exe"
                                Freecorder 4.0 Application-->"C:\WINDOWS\Freecorder\uninstall.exe" "/U:C:\Program Files\Freecorder\Uninstall\uninstall.xml"
                                Freecorder Toolbar-->C:\PROGRA~1\FREECO~1\UNWISE.EXE /U C:\PROGRA~1\FREECO~1\INSTALL.LOG
                                Galerie de photos Windows Live-->MsiExec.exe /X{B131E59D-202C-43C6-84C9-68F0C37541F1}
                                HijackThis 2.0.2-->"C:\Program Files\trend micro\HijackThis.exe" /uninstall
                                Installation Windows Live-->C:\Program Files\Windows Live\Installer\wlarp.exe
                                Installation Windows Live-->MsiExec.exe /I{46ABBC54-1872-4AA3-95E2-F2C063A63F31}
                                Kit de Connexion Alice ADSL-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{3A0221AD-D30B-4320-8F9B-1D0F0E6C6843}\setup.exe" -l0x40c ControlPanel
                                Logiciel d'archivage WinRAR-->C:\Program Files\WinRAR\uninstall.exe
                                Messenger Plus! Live-->"C:\Program Files\Messenger Plus! Live\Uninstall.exe"
                                Microsoft Choice Guard-->MsiExec.exe /X{F0E12BBA-AD66-4022-A453-A1C8A0C4D570}
                                Microsoft Silverlight-->MsiExec.exe /X{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}
                                Microsoft SQL Server 2005 Compact Edition [ENU]-->MsiExec.exe /I{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}
                                Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148-->MsiExec.exe /X{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}
                                Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17-->MsiExec.exe /X{9A25302D-30C0-39D9-BD6F-21E6EC160475}
                                Mise à jour de sécurité pour Lecteur Windows Media (KB952069)-->"C:\WINDOWS\$NtUninstallKB952069_WM9$\spuninst\spuninst.exe"
                                Mise à jour de sécurité pour Lecteur Windows Media (KB954155)-->"C:\WINDOWS\$NtUninstallKB954155_WM9$\spuninst\spuninst.exe"
                                Mise à jour de sécurité pour Lecteur Windows Media (KB968816)-->"C:\WINDOWS\$NtUninstallKB968816_WM9$\spuninst\spuninst.exe"
                                Mise à jour de sécurité pour Lecteur Windows Media (KB973540)-->"C:\WINDOWS\$NtUninstallKB973540_WM9L$\spuninst\spuninst.exe"
                                Mise à jour de sécurité pour Windows Internet Explorer 8 (KB971961)-->"C:\WINDOWS\ie8updates\KB971961-IE8\spuninst\spuninst.exe"
                                Mise à jour de sécurité pour Windows Internet Explorer 8 (KB976325)-->"C:\WINDOWS\ie8updates\KB976325-IE8\spuninst\spuninst.exe"
                                Mise à jour de sécurité pour Windows XP (KB923561)-->"C:\WINDOWS\$NtUninstallKB923561$\spuninst\spuninst.exe"
                                Mise à jour de sécurité pour Windows XP (KB938464-v2)-->"C:\WINDOWS\$NtUninstallKB938464-v2$\spuninst\spuninst.exe"
                                Mise à jour de sécurité pour Windows XP (KB944338-v2)-->"C:\WINDOWS\$NtUninstallKB944338-v2$\spuninst\spuninst.exe"
                                Mise à jour de sécurité pour Windows XP (KB946648)-->"C:\WINDOWS\$NtUninstallKB946648$\spuninst\spuninst.exe"
                                Mise à jour de sécurité pour Windows XP (KB950762)-->"C:\WINDOWS\$NtUninstallKB950762$\spuninst\spuninst.exe"
                                Mise à jour de sécurité pour Windows XP (KB950974)-->"C:\WINDOWS\$NtUninstallKB950974$\spuninst\spuninst.exe"
                                Mise à jour de sécurité pour Windows XP (KB951066)-->"C:\WINDOWS\$NtUninstallKB951066$\spuninst\spuninst.exe"
                                Mise à jour de sécurité pour Windows XP (KB951376-v2)-->"C:\WINDOWS\$NtUninstallKB951376-v2$\spuninst\spuninst.exe"
                                Mise à jour de sécurité pour Windows XP (KB951748)-->"C:\WINDOWS\$NtUninstallKB951748$\spuninst\spuninst.exe"
                                Mise à jour de sécurité pour Windows XP (KB952004)-->"C:\WINDOWS\$NtUninstallKB952004$\spuninst\spuninst.exe"
                                Mise à jour de sécurité pour Windows XP (KB952954)-->"C:\WINDOWS\$NtUninstallKB952954$\spuninst\spuninst.exe"
                                Mise à jour de sécurité pour Windows XP (KB954600)-->"C:\WINDOWS\$NtUninstallKB954600$\spuninst\spuninst.exe"
                                Mise à jour de sécurité pour Windows XP (KB955069)-->"C:\WINDOWS\$NtUninstallKB955069$\spuninst\spuninst.exe"
                                Mise à jour de sécurité pour Windows XP (KB956572)-->"C:\WINDOWS\$NtUninstallKB956572$\spuninst\spuninst.exe"
                                Mise à jour de sécurité pour Windows XP (KB956802)-->"C:\WINDOWS\$NtUninstallKB956802$\spuninst\spuninst.exe"
                                Mise à jour de sécurité pour Windows XP (KB956803)-->"C:\WINDOWS\$NtUninstallKB956803$\spuninst\spuninst.exe"
                                Mise à jour de sécurité pour Windows XP (KB956844)-->"C:\WINDOWS\$NtUninstallKB956844$\spuninst\spuninst.exe"
                                Mise à jour de sécurité pour Windows XP (KB957097)-->"C:\WINDOWS\$NtUninstallKB957097$\spuninst\spuninst.exe"
                                Mise à jour de sécurité pour Windows XP (KB958470)-->"C:\WINDOWS\$NtUninstallKB958470$\spuninst\spuninst.exe"
                                Mise à jour de sécurité pour Windows XP (KB958644)-->"C:\WINDOWS\$NtUninstallKB958644$\spuninst\spuninst.exe"
                                Mise à jour de sécurité pour Windows XP (KB958687)-->"C:\WINDOWS\$NtUninstallKB958687$\spuninst\spuninst.exe"
                                Mise à jour de sécurité pour Windows XP (KB958869)-->"C:\WINDOWS\$NtUninstallKB958869$\spuninst\spuninst.exe"
                                Mise à jour de sécurité pour Windows XP (KB959426)-->"C:\WINDOWS\$NtUninstallKB959426$\spuninst\spuninst.exe"
                                Mise à jour de sécurité pour Windows XP (KB960225)-->"C:\WINDOWS\$NtUninstallKB960225$\spuninst\spuninst.exe"
                                Mise à jour de sécurité pour Windows XP (KB960803)-->"C:\WINDOWS\$NtUninstallKB960803$\spuninst\spuninst.exe"
                                Mise à jour de sécurité pour Windows XP (KB960859)-->"C:\WINDOWS\$NtUninstallKB960859$\spuninst\spuninst.exe"
                                Mise à jour de sécurité pour Windows XP (KB961371-v2)-->"C:\WINDOWS\$NtUninstallKB961371-v2$\spuninst\spuninst.exe"
                                Mise à jour de sécurité pour Windows XP (KB961501)-->"C:\WINDOWS\$NtUninstallKB961501$\spuninst\spuninst.exe"
                                Mise à jour de sécurité pour Windows XP (KB968537)-->"C:\WINDOWS\$NtUninstallKB968537$\spuninst\spuninst.exe"
                                Mise à jour de sécurité pour Windows XP (KB969059)-->"C:\WINDOWS\$NtUninstallKB969059$\spuninst\spuninst.exe"
                                Mise à jour de sécurité pour Windows XP (KB969947)-->"C:\WINDOWS\$NtUninstallKB969947$\spuninst\spuninst.exe"
                                Mise à jour de sécurité pour Windows XP (KB970238)-->"C:\WINDOWS\$NtUninstallKB970238$\spuninst\spuninst.exe"
                                Mise à jour de sécurité pour Windows XP (KB970430)-->"C:\WINDOWS\$NtUninstallKB970430$\spuninst\spuninst.exe"
                                Mise à jour de sécurité pour Windows XP (KB971032)-->"C:\WINDOWS\$NtUninstallKB971032$\spuninst\spuninst.exe"
                                Mise à jour de sécurité pour Windows XP (KB971486)-->"C:\WINDOWS\$NtUninstallKB971486$\spuninst\spuninst.exe"
                                Mise à jour de sécurité pour Windows XP (KB971557)-->"C:\WINDOWS\$NtUninstallKB971557$\spuninst\spuninst.exe"
                                Mise à jour de sécurité pour Windows XP (KB971633)-->"C:\WINDOWS\$NtUninstallKB971633$\spuninst\spuninst.exe"
                                Mise à jour de sécurité pour Windows XP (KB971657)-->"C:\WINDOWS\$NtUninstallKB971657$\spuninst\spuninst.exe"
                                Mise à jour de sécurité pour Windows XP (KB971961)-->"C:\WINDOWS\$NtUninstallKB971961$\spuninst\spuninst.exe"
                                Mise à jour de sécurité pour Windows XP (KB972260)-->"C:\WINDOWS\$NtUninstallKB972260$\spuninst\spuninst.exe"
                                Mise à jour de sécurité pour Windows XP (KB973346)-->"C:\WINDOWS\$NtUninstallKB973346$\spuninst\spuninst.exe"
                                Mise à jour de sécurité pour Windows XP (KB973354)-->"C:\WINDOWS\$NtUninstallKB973354$\spuninst\spuninst.exe"
                                Mise à jour de sécurité pour Windows XP (KB973507)-->"C:\WINDOWS\$NtUninstallKB973507$\spuninst\spuninst.exe"
                                Mise à jour de sécurité pour Windows XP (KB973525)-->"C:\WINDOWS\$NtUninstallKB973525$\spuninst\spuninst.exe"
                                Mise à jour de sécurité pour Windows XP (KB973869)-->"C:\WINDOWS\$NtUninstallKB973869$\spuninst\spuninst.exe"
                                Mise à jour de sécurité pour Windows XP (KB973904)-->"C:\WINDOWS\$NtUninstallKB973904$\spuninst\spuninst.exe"
                                Mise à jour de sécurité pour Windows XP (KB974112)-->"C:\WINDOWS\$NtUninstallKB974112$\spuninst\spuninst.exe"
                                Mise à jour de sécurité pour Windows XP (KB974318)-->"C:\WINDOWS\$NtUninstallKB974318$\spuninst\spuninst.exe"
                                Mise à jour de sécurité pour Windows XP (KB974392)-->"C:\WINDOWS\$NtUninstallKB974392$\spuninst\spuninst.exe"
                                Mise à jour de sécurité pour Windows XP (KB974455)-->"C:\WINDOWS\$NtUninstallKB974455$\spuninst\spuninst.exe"
                                Mise à jour de sécurité pour Windows XP (KB974571)-->"C:\WINDOWS\$NtUninstallKB974571$\spuninst\spuninst.exe"
                                Mise à jour de sécurité pour Windows XP (KB975025)-->"C:\WINDOWS\$NtUninstallKB975025$\spuninst\spuninst.exe"
                                Mise à jour de sécurité pour Windows XP (KB975467)-->"C:\WINDOWS\$NtUninstallKB975467$\spuninst\spuninst.exe"
                                Mise à jour de sécurité pour Windows XP (KB976325)-->"C:\WINDOWS\$NtUninstallKB976325$\spuninst\spuninst.exe"
                                Mise à jour pour Windows Internet Explorer 8 (KB975364)-->"C:\WINDOWS\ie8updates\KB975364-IE8\spuninst\spuninst.exe"
                                Mise à jour pour Windows XP (KB898461)-->"C:\WINDOWS\$NtUninstallKB898461$\spuninst\spuninst.exe"
                                Mise à jour pour Windows XP (KB961503)-->"C:\WINDOWS\$NtUninstallKB961503$\spuninst\spuninst.exe"
                                Mise à jour pour Windows XP (KB967715)-->"C:\WINDOWS\$NtUninstallKB967715$\spuninst\spuninst.exe"
                                Mise à jour pour Windows XP (KB968389)-->"C:\WINDOWS\$NtUninstallKB968389$\spuninst\spuninst.exe"
                                Mise à jour pour Windows XP (KB971737)-->"C:\WINDOWS\$NtUninstallKB971737$\spuninst\spuninst.exe"
                                Mise à jour pour Windows XP (KB973687)-->"C:\WINDOWS\$NtUninstallKB973687$\spuninst\spuninst.exe"
                                Mise à jour pour Windows XP (KB973815)-->"C:\WINDOWS\$NtUninstallKB973815$\spuninst\spuninst.exe"
                                Mise à jour pour Windows XP (KB976749)-->"C:\WINDOWS\$NtUninstallKB976749$\spuninst\spuninst.exe"
                                Mozilla Firefox (3.5.7)-->C:\Program Files\Mozilla Firefox\uninstall\helper.exe
                                MSVCRT-->MsiExec.exe /I{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}
                                MSXML 4.0 SP2 (KB954430)-->MsiExec.exe /I{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
                                MSXML 4.0 SP2 (KB973688)-->MsiExec.exe /I{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}
                                NVIDIA Drivers-->C:\WINDOWS\System32\nvudisp.exe UninstallGUI
                                Outil de téléchargement Windows Live-->MsiExec.exe /I{205C6BDD-7B73-42DE-8505-9A093F35A238}
                                Razer-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{D6D5CFB3-7095-4073-B6B7-B7E909838C57}\Setup.exe"
                                REALTEK Gigabit and Fast Ethernet NIC Driver-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{94FB906A-CF42-4128-A509-D353026A607E}\Setup.exe" -l0x40c REMOVE
                                Segoe UI-->MsiExec.exe /I{A1F66FC9-11EE-4F2F-98C9-16F8D1E69FB7}
                                Sound Blaster Audigy-->C:\Program Files\Creative\Uninstall\CTUNINST.EXE /U:UNINST1.INI
                                Trust 320 SpaceCam-->C:\WINDOWS\CleanDev.exe C:\WINDOWS\ov519.TXT
                                Uninstall 1.0.0.1-->"C:\Program Files\Fichiers communs\DVDVideoSoft\unins000.exe"
                                VLC media player 1.0.3-->C:\Program Files\VideoLAN\VLC\uninstall.exe
                                Windows Imaging Component-->"C:\WINDOWS\$NtUninstallWIC$\spuninst\spuninst.exe"
                                Windows Installer 3.1 (KB893803)-->"C:\WINDOWS\$MSI31Uninstall_KB893803v2$\spuninst\spuninst.exe"
                                Windows Internet Explorer 8-->"C:\WINDOWS\ie8\spuninst\spuninst.exe"
                                Windows Live Call-->MsiExec.exe /I{82C7B308-0BDD-49D8-8EA5-9CD3A3F9DF41}
                                Windows Live Communications Platform-->MsiExec.exe /I{3B4E636E-9D65-4D67-BA61-189800823F52}
                                Windows Live FolderShare-->MsiExec.exe /X{2075CB0A-D26F-4DAA-B424-5079296B43BA}
                                Windows Live Messenger-->MsiExec.exe /X{770F1BEC-2871-4E70-B837-FB8525FFA3B1}
                                Windows Live OneCare safety scanner-->RunDll32.exe "C:\Program Files\Windows Live Safety Center\wlscCore.dll",UninstallFunction WLSC_SCANNER_PRODUCT
                                Windows XP Service Pack 2-->C:\WINDOWS\$NtServicePackUninstall$\spuninst\spuninst.exe
                                0
                                1. Contributeur sécurité
                                  bonjour

                                  • Télécharge Random's System Information Tool (RSIT) de Random/Random.

                                  http://images.malwareremoval.com/random/RSIT.exe

                                  • Enregistre le sur ton Bureau.

                                  • Double clique sur RSIT.exe pour lancer l'outil.

                                  • Clique sur "Continue" à l'écran Disclaimer.

                                  • Si l'outil HijackThis n'est pas présent ou non détecté sur l'ordinateur, RSIT le téléchargera (autorise l'accès dans ton pare-feu s'il te le demande)

                                  et tu devras accepter la licence.

                                  • Une fois le scan terminé, deux rapports vont apparaître : poste les dans deux messages séparés stp

                                  Les rapports se trouvent à cet endroit:
                                  C:\rsit\info.txt
                                  C:\rsit\log.txt

                                  0