VIRUS OU NON ?
lucas01 -  
Bonjour,
en cherchant des choses sur internet (truc banal programme tv, comment avoir qlq chose...) sur certains site il y a des beugs provenant de mon ordi.
Car quand je réactualise certaines foie sa remarche. Ou d'autre foie sa change de thème. Regardez, sur google, le même lien reactualiser 4fois, 4adresses diferente.

64.111.196.126
:
http://globalwarmingvase.info/monsterzzzzzz/index.php?ID=18254&fb=WVRveU9udHpPamc2SW5WelpYSmtZWFJoSWp0aE9qTTZlM002TWpvaWFXUWlPM002TnpvaU5UUTNOVFk1TlNJN2N6b3hNam9pWVdSMlpYSjBhWE5sWDJsa0lqdHpPalU2SWprNU1qY3dJanR6T2pRNkltdHdjR2tpTzNNNk5qb2lNemMwT1RjM0lqdDljem96T2lKdFpEVWlPM002TXpJNklqVXdPREZrTlRNek9XTmxaalExWmpBMFl6VTNZVEJrTnpGa1lXSmxNRGMySWp0OQ%3D%3D

Celle la:
http://24agony.com/results.php?aff=18254&subaff=200&q=comment%20avoir%20un%20https&ipr=&rej=1&data=12sfe345g
et celle ci:
http://inhabitant-filter.com/results.php?aff=18254&subaff=200&q=comment%20avoir%20un%20https&ipr=&rej=1&data=12sfe345g
affichent la même chose "NOT FOUND"
puis aussi:
http://partleykirschwasser.com/results.php?q=comment+avoir+un+https

Je voudrais savoir si c'est normal. Et puis il y a aussi, quand je passe la souris sur un lien (le même) l'adresse dans la barre grise qui montre tout les chargements, affiche "http://64.111.196.126..." puis la suite. Quand je clic, sa affiche les pages situer au dessus.

AIDEZ MOI SVP, car c'est très embêtant!
Configuration: Wind. Vista

33 réponses

Résumé de la discussion

Plusieurs utilisateurs décrivent des dysfonctionnements de navigation et des chargements de liens qui varient d'une actualisation à l'autre, avec des adresses affichées différemment et des messages NOT FOUND. Des interventions de sécurité, comme SmitfraudFix et Avast, reviennent fréquemment, avec des guides décrivant le nettoyage, le mode recovery et la réinstallation des navigateurs pour neutraliser l’infection. En pratique, les discussions convergent vers des symptômes persistants malgré le nettoyage, avec des liens affichant l’adresse IP suspecte et des rapports techniques générés par les outils mentionnés. Des échanges mettent en évidence que le problème peut être lié à un système infecté plutôt qu’à un simple chargement récurrent, nécessitant une vérification approfondie du PC et des navigateurs.

Bobot (l’IA à votre service)
  1. totobetourne
    a priori je vois pas d infection mais je peux me tromper aussi , je suppose que c est ton ordi qui a des problemes par rapport a mozilla ,la la cause je ne la connais pas.

    sinon va voir dans outils puis option de mozilla et regarde si il n y aurait pas quelquechose a modifier.autre possibilite.
    1. lucas01 Auteur
      Yes, toujours les mêmes avec firfox. En plus il vient de faire la mise à jour.

      Avec safarie, opera, ie8, sa ne le fait pas...

      Mais je pense que je vais devoir me séparer de firefox...
      1. totobetourne
        toujours rien avec smitfraud.as tu toujours les memes problemes?
        1.  lucas01 Auteur
          Nen c'est bon :)

          SmitFraudFix v2.424

          Scan done at 11:17:56,75, 18/02/2010
          Run from C:\Windows\system32\SmitfraudFix
          OS: Microsoft Windows [version 6.0.6002] - Windows_NT
          The filesystem type is NTFS
          Fix run in normal mode

          »»»»»»»»»»»»»»»»»»»»»»»» Process

          C:\Windows\system32\csrss.exe
          C:\Windows\system32\wininit.exe
          C:\Windows\system32\csrss.exe
          C:\Windows\system32\winlogon.exe
          C:\Windows\system32\services.exe
          C:\Windows\system32\lsass.exe
          C:\Windows\system32\lsm.exe
          C:\Windows\system32\svchost.exe
          C:\Windows\system32\svchost.exe
          C:\Windows\System32\svchost.exe
          C:\Windows\System32\svchost.exe
          C:\Windows\System32\svchost.exe
          C:\Windows\system32\svchost.exe
          C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_fa807195\STacSV.exe
          C:\Windows\system32\svchost.exe
          C:\Windows\system32\SLsvc.exe
          C:\Windows\system32\svchost.exe
          C:\Windows\system32\svchost.exe
          C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
          C:\Program Files\Alwil Software\Avast4\ashServ.exe
          C:\Windows\System32\spoolsv.exe
          C:\Windows\system32\svchost.exe
          C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_fa807195\aestsrv.exe
          C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
          C:\Program Files\Bonjour\mDNSResponder.exe
          C:\Windows\system32\svchost.exe
          C:\Windows\system32\svchost.exe
          C:\Program Files\Common Files\LightScribe\LSSrvc.exe
          c:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\sqlservr.exe
          C:\Program Files\NetLimiter 2 Monitor\nlsvc.exe
          C:\Program Files\OO Software\Defrag\oodag.exe
          C:\Windows\system32\svchost.exe
          C:\Program Files\SMINST\BLService.exe
          C:\Windows\system32\Dwm.exe
          C:\Windows\Explorer.EXE
          C:\Program Files\CyberLink\Shared files\RichVideo.exe
          C:\Windows\system32\taskeng.exe
          C:\Windows\System32\igfxtray.exe
          C:\Windows\System32\hkcmd.exe
          C:\Windows\System32\igfxpers.exe
          C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
          C:\Program Files\HP\QuickPlay\QPService.exe
          c:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
          C:\Windows\system32\svchost.exe
          C:\Program Files\TeamViewer\Version4\TeamViewer_Service.exe
          C:\Program Files\Windows Defender\MSASCui.exe
          C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QLBCTRL.exe
          C:\Program Files\IDT\WDM\sttray.exe
          C:\Program Files\Alwil Software\Avast4\ashDisp.exe
          C:\Program Files\Java\jre6\bin\jusched.exe
          C:\Program Files\HP\HP Software Update\hpwuSchd2.exe
          C:\Windows\System32\wpcumi.exe
          C:\Program Files\iTunes\iTunesHelper.exe
          C:\Program Files\WeFi\WeFi.exe
          C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
          C:\Program Files\TeamViewer\Version5\TeamViewer_Service.exe
          C:\Program Files\TomTom HOME 2\TomTomHOMEService.exe
          C:\Windows\System32\svchost.exe
          C:\Windows\system32\SearchIndexer.exe
          C:\Program Files\NetLimiter 2 Monitor\NLClient.exe
          C:\Windows\system32\taskeng.exe
          C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
          C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
          C:\Windows\system32\igfxsrvc.exe
          C:\Windows\system32\wbem\unsecapp.exe
          C:\Windows\system32\wbem\wmiprvse.exe
          C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
          C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe
          C:\Program Files\iPod\bin\iPodService.exe
          C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
          C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
          c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe
          C:\Windows\system32\svchost.exe
          C:\Windows\system32\conime.exe
          C:\Program Files\iTunes\iTunes.exe
          C:\Windows\System32\svchost.exe
          C:\Program Files\Opera\Opera.exe
          C:\Program Files\Common Files\Adobe\Updater6\Adobe_Updater.exe
          C:\Windows\system32\cmd.exe
          C:\Program Files\Windows Mail\WinMail.exe
          C:\Windows\system32\taskeng.exe
          C:\Windows\system32\cmd.exe
          C:\Windows\system32\wbem\wmiprvse.exe

          »»»»»»»»»»»»»»»»»»»»»»»» hosts

          »»»»»»»»»»»»»»»»»»»»»»»» C:\

          »»»»»»»»»»»»»»»»»»»»»»»» C:\Windows

          »»»»»»»»»»»»»»»»»»»»»»»» C:\Windows\system

          »»»»»»»»»»»»»»»»»»»»»»»» C:\Windows\Web

          »»»»»»»»»»»»»»»»»»»»»»»» C:\Windows\system32

          »»»»»»»»»»»»»»»»»»»»»»»» C:\Windows\system32\LogFiles

          »»»»»»»»»»»»»»»»»»»»»»»» C:\Users\Lucas

          »»»»»»»»»»»»»»»»»»»»»»»» C:\Users\Lucas\AppData\Local\Temp

          »»»»»»»»»»»»»»»»»»»»»»»» C:\Users\Lucas\Application Data

          »»»»»»»»»»»»»»»»»»»»»»»» Start Menu

          »»»»»»»»»»»»»»»»»»»»»»»» C:\Users\Lucas\FAVORI~1

          »»»»»»»»»»»»»»»»»»»»»»»» Desktop

          »»»»»»»»»»»»»»»»»»»»»»»» C:\Program Files

          »»»»»»»»»»»»»»»»»»»»»»»» Corrupted keys

          »»»»»»»»»»»»»»»»»»»»»»»» Desktop Components

          »»»»»»»»»»»»»»»»»»»»»»»» o4Patch
          !!!Attention, following keys are not inevitably infected!!!

          o4Patch
          Credits: Malware Analysis & Diagnostic
          Code: S!Ri

          »»»»»»»»»»»»»»»»»»»»»»»» IEDFix
          !!!Attention, following keys are not inevitably infected!!!

          IEDFix
          Credits: Malware Analysis & Diagnostic
          Code: S!Ri

          »»»»»»»»»»»»»»»»»»»»»»»» Agent.OMZ.Fix
          !!!Attention, following keys are not inevitably infected!!!

          Agent.OMZ.Fix
          Credits: Malware Analysis & Diagnostic
          Code: S!Ri

          »»»»»»»»»»»»»»»»»»»»»»»» VACFix
          !!!Attention, following keys are not inevitably infected!!!

          VACFix
          Credits: Malware Analysis & Diagnostic
          Code: S!Ri

          »»»»»»»»»»»»»»»»»»»»»»»» 404Fix
          !!!Attention, following keys are not inevitably infected!!!

          404Fix
          Credits: Malware Analysis & Diagnostic
          Code: S!Ri

          »»»»»»»»»»»»»»»»»»»»»»»» Sharedtaskscheduler
          !!!Attention, following keys are not inevitably infected!!!

          SrchSTS.exe by S!Ri
          Search SharedTaskScheduler's .dll

          »»»»»»»»»»»»»»»»»»»»»»»» AppInit_DLLs
          !!!Attention, following keys are not inevitably infected!!!

          [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
          "AppInit_DLLs"=""
          "LoadAppInit_DLLs"=dword:00000001

          »»»»»»»»»»»»»»»»»»»»»»»» Winlogon
          !!!Attention, following keys are not inevitably infected!!!

          [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
          "Userinit"="C:\\Windows\\system32\\userinit.exe,"

          »»»»»»»»»»»»»»»»»»»»»»»» RK

          [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]

          »»»»»»»»»»»»»»»»»»»»»»»» DNS

          Description: Atheros AR9285 802.11b/g WiFi Adapter
          DNS Server Search Order: 192.168.1.1
          DNS Server Search Order: 192.168.1.1

          HKLM\SYSTEM\CCS\Services\Tcpip\..\{D5969906-15DE-4845-B23C-B368031E5FC8}: DhcpNameServer=212.27.40.241 212.27.40.240
          HKLM\SYSTEM\CCS\Services\Tcpip\..\{E7372125-DD2B-437B-ADD7-D3083FA469E8}: DhcpNameServer=192.168.1.1 192.168.1.1
          HKLM\SYSTEM\CS1\Services\Tcpip\..\{D5969906-15DE-4845-B23C-B368031E5FC8}: DhcpNameServer=212.27.40.241 212.27.40.240
          HKLM\SYSTEM\CS1\Services\Tcpip\..\{E7372125-DD2B-437B-ADD7-D3083FA469E8}: DhcpNameServer=192.168.1.1 192.168.1.1
          HKLM\SYSTEM\CS2\Services\Tcpip\..\{D5969906-15DE-4845-B23C-B368031E5FC8}: DhcpNameServer=212.27.40.241 212.27.40.240
          HKLM\SYSTEM\CS2\Services\Tcpip\..\{E7372125-DD2B-437B-ADD7-D3083FA469E8}: DhcpNameServer=192.168.1.1 192.168.1.1
          HKLM\SYSTEM\CCS\Services\Tcpip\Parameters: DhcpNameServer=192.168.1.1 192.168.1.1
          HKLM\SYSTEM\CS1\Services\Tcpip\Parameters: DhcpNameServer=192.168.1.1 192.168.1.1
          HKLM\SYSTEM\CS2\Services\Tcpip\Parameters: DhcpNameServer=192.168.1.1 192.168.1.1

          »»»»»»»»»»»»»»»»»»»»»»»» Scanning for wininet.dll infection

          »»»»»»»»»»»»»»»»»»»»»»»» End

          MErci d'avance!
          2. lucas01 Auteur
            Heu oui merci mais le logiciel:
            accès refusé
            accès refusé
            accès refusé
            accès refusé
            accès refusé
            accès refusé
            accès refusé
            accès refusé
            ...
            1. totobetourne
              essaye alors cela, on va voir ce que cela donne.
              Télécharge SmitfraudFix
              Utilitaire de S!Ri: Moe et balltrap34
              http://telechargement.zebulon.fr/smitfraudfix.html
              et télécharge SmitfraudFix.exe.

              Exécute le en choisissant l’option 1,
              il va générer un rapport
              Copie/colle le sur le poste stp.
              3. lucas01 Auteur
                Même avec le nettoyage, les réparations, firefox continue toujours, j'ai Opera ainsi que Explorer, mais c'est toujours firefox qui mer** ...
                1. totobetourne
                  je ne crois pas qu il y ait d autres signes d infections passe cela c est un nettoyeur.il va peut etre t aider.

                  pour enlever les fichiers temporaires

                  a passer tout les 15 jours a peu pres.

                  • Télécharger CCLeaner et l'installer sur le bureau en refusant l'installation de la barre Yahoo.
                  https://www.commentcamarche.net/telecharger/utilitaires/5647-ccleaner/

                  • Fermer toutes les applications
                  • Lancer CCLeaner
                  S'il n'est pas en Français cliquer sur Options, Setting, Language
                  et sélectionner Français
                  • cocher dans le menu Nettoyeur - onglet Windows :
                  Internet Explorer: Fichiers Internet Temporaires, Cookies
                  • Système: Vider la Poubelle, Fichiers Temporaires, Presse-papiers
                  • Avancé: Vieilles données du Prefetch
                  • Décocher dans le menu Options - sous-menu Avancé :
                  Effacer uniquement les fichiers, du dossier temp de Windows, plus vieux que 48 heures
                  • Cocher dans le menu Nettoyeur - onglet Applications : Internet: Sun Java
                  • Cocher , si cela est possible, dans le menu Nettoyeur - onglet Applications :
                  Firefox/Mozilla: Cache Internet, Cookies
                  • Click sur Analyse
                  • Click sur le bouton Lancer le nettoyage dans le menu Nettoyeur.
                  • Click sur Registre
                  • Sélectionner tout
                  • Click sur Chercher des erreurs (En bas)

                  Une fois le scan terminé sélectionner tout
                  • Click sur Réparer les erreurs sélectionnées
                  1. lucas01 Auteur
                    Option L

                    .
                    ======= LOGFILE OF AD-REMOVER 1.1.4.6_J | ONLY XP/VISTA/7 =======
                    .
                    Updated by C_XX on 05.02.2010 at 17:34
                    Contact: AdRemover.contact@gmail.com
                    Website: http://pagesperso-orange.fr/NosTools/ad_remover.html
                    .
                    Launch at: 16:42:24, 16/02/2010 | Normal Boot | Option: CLEAN
                    Executed from: C:\Ad-Remover\
                    Operating system: Microsoft® Windows Vista™ HomeBasic Service Pack 2 v6.0.6002
                    Computer Name: PC-DE-LUCAS | Current user: Lucas
                    .
                    ============== NEUTRALIZED ELEMENT(S) ==============
                    .

                    C:\Users\Lucas\AppData\Roaming\Mozilla\FireFox\Profiles\kx402x0g.default\extensions\toolbar@ask.com
                    C:\Users\Lucas\AppData\Roaming\Mozilla\FireFox\Profiles\kx402x0g.default\searchplugins\askcom.xml
                    C:\Windows\Installer\{86D4B82A-ABED-442A-BE86-96357B70F4FE}
                    C:\Program Files\Mozilla FireFox\Components\AskHPRFF.js
                    C:\Program Files\Mozilla FireFox\extensions\{01398B87-61AF-4FFB-9AB5-1A1C5FB39A9C}
                    C:\Program Files\Mozilla FireFox\extensions\{B922D405-6D13-4A2B-AE89-08A030DA4402}
                    C:\Windows\System32\Tasks\Scheduled Update for Ask Toolbar
                    C:\Users\Lucas\AppData\Roaming\MICROS~1\Windows\STARTM~1\Programs\Ask Search Assistant
                    C:\Program Files\Ask Search Assistant
                    C:\Program Files\Ask.com
                    C:\Program Files\Dealio Toolbar
                    C:\Program Files\pdfforge Toolbar
                    C:\Users\Lucas\AppData\LocalLow\AskToolbar
                    C:\Users\Lucas\AppData\LocalLow\Dealio
                    C:\Users\Lucas\AppData\LocalLow\pdfforge
                    C:\Users\Lucas\AppData\LocalLow\Search Settings
                    C:\Windows\Installer\15402f01.msi
                    C:\Windows\Installer\ba7759.msi
                    C:\Windows\Installer\ba776d.msi

                    (!) -- Temp files deleted.

                    .
                    HKCU\software\appdatalow\AskBarDis
                    HKCU\software\appdatalow\software\AskToolbar
                    HKCU\software\appdatalow\software\Dealio
                    HKCU\software\appdatalow\software\pdfforge
                    HKCU\software\Ask.com
                    HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{86CC03E7-A2FA-4F36-B3C9-2EC0B9A6E2CE}
                    HKCU\Software\Microsoft\Internet Explorer\LowRegistry\Search Settings
                    HKCU\software\microsoft\internet explorer\searchscopes\{171DEBEB-C3D4-40b7-AC73-056A5EBA4A7E}
                    HKCU\software\microsoft\internet explorer\searchscopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}
                    HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{D4027C7F-154A-4066-A1AD-4243D8127440}
                    HKLM\Software\Classes\AppID\{9B0CB95C-933A-4B8C-B6D4-EDCD19A43874}
                    HKLM\software\classes\appid\GenericAskToolbar.DLL
                    HKLM\Software\Classes\CLSID\{01398B87-61AF-4FFB-9AB5-1A1C5FB39A9C}
                    HKLM\Software\Classes\CLSID\{B922D405-6D13-4A2B-AE89-08A030DA4402}
                    HKLM\Software\Classes\CLSID\{D4027C7F-154A-4066-A1AD-4243D8127440}
                    HKLM\Software\Classes\CLSID\{E312764E-7706-43F1-8DAB-FCDD2B1E416D}
                    HKLM\software\classes\GenericAskToolbar.ToolbarWnd
                    HKLM\software\classes\GenericAskToolbar.ToolbarWnd.1
                    HKLM\software\classes\installer\Features\A3BB3C491A65ED342A24B8144FE679FE
                    HKLM\software\classes\installer\Products\79CAA1B036589D14EA74856E2A220F1E
                    HKLM\software\classes\installer\Products\A28B4D68DEBAA244EB686953B7074FEF
                    HKLM\software\classes\installer\Products\A3BB3C491A65ED342A24B8144FE679FE
                    HKLM\software\classes\installer\Products\A6EB8FE4C9986914497E92C7F5A702E3
                    HKLM\Software\Classes\Interface\{91CF619A-4686-4CA4-9232-3B2E6B63AA92}
                    HKLM\Software\Classes\Interface\{AC71B60E-94C9-4EDE-BA46-E146747BB67E}
                    HKLM\Software\Classes\Interface\{D5A1EF9A-7948-435D-8B87-D6A598317288}
                    HKLM\software\classes\SearchSettings.BHO
                    HKLM\software\classes\SearchSettings.BHO.1
                    HKLM\Software\Classes\TypeLib\{2996F0E7-292B-4CAE-893F-47B8B1C05B56}
                    HKLM\Software\Classes\TypeLib\{CD082CCA-086F-4FD8-8FD7-247A0DBBD1CC}
                    HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{01398B87-61AF-4FFB-9AB5-1A1C5FB39A9C}
                    HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B922D405-6D13-4A2B-AE89-08A030DA4402}
                    HKLM\software\microsoft\internet explorer\searchscopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}
                    HKLM\Software\Microsoft\Internet Explorer\Toolbar\\{01398B87-61AF-4FFB-9AB5-1A1C5FB39A9C}
                    HKLM\Software\Microsoft\Internet Explorer\Toolbar\\{66886C4D-B307-4ECA-A228-52CA9B9851A4}
                    HKLM\Software\Microsoft\Internet Explorer\Toolbar\\{B922D405-6D13-4A2B-AE89-08A030DA4402}
                    HKLM\Software\Microsoft\Internet Explorer\Toolbar\\{D4027C7F-154A-4066-A1AD-4243D8127440}
                    HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Scheduled Update for Ask Toolbar
                    HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\AskSearchAsst.exe
                    HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{01398B87-61AF-4FFB-9AB5-1A1C5FB39A9C}
                    HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B922D405-6D13-4A2B-AE89-08A030DA4402}
                    HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}
                    HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\0292226F570267D459357AF78015E534
                    HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\03285961954D5824C85975D955031EE8
                    HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\0E12F736682067FDE4D1158D5940A82E
                    HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\1A24B5BB8521B03E0C8D908F5ABC0AE6
                    HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\23A03A6765D10864EB278629A2DF32C3
                    HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\2B0D56C4F4C46D844A57FFED6F0D2852
                    HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\323D2420527EA994FB326F15D333660E
                    HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\33E6E75CE56376F40AF9234753739ADB
                    HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\377026901A2D8744A8423A983B50E0D1
                    HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\3A4FCCE032CA50340A6975C92410AE30
                    HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\49D4375FE41653242AEA4C969E4E65E0
                    HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\588DFA161592E9747948BFFE475476F4
                    HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\6AA0923513360135B272E8289C5F13FA
                    HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\6AC3985F4D64C2245A96D31569D1BF40
                    HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\6E00D9B24354FBA44AE2CA0FA86EF2E2
                    HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\6F7467AF8F29C134CBBAB394ECCFDE96
                    HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\76DA9915C36F3D742951F63351CF5C97
                    HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\7C13F41728A69EF41AA1A3372FB86FA6
                    HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\7DE196B10195F5647A2B21B761F3DE01
                    HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\855847FA0E25FBA46B8516389DFDD4B3
                    HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\8A01D85165E7CD5448C71263ADB6A2E2
                    HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\8ED411B7A244E0E4C82C46284CA65B81
                    HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\922525DCC5199162F8935747CA3D8E59
                    HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\94E65EF7E080DDA4AA2F1DEDCE74AC5B
                    HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\9B0B0584E80456A4FB98DA3973B1EB3F
                    HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\9D4F5849367142E4685ED8C25E44C5ED
                    HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\9DC2844D0E3E8924C8973C3B3BAE1F58
                    HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\A5875B04372C19545BEB90D4D606C472
                    HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\A876D9E80B896EC44A8620248CC79296
                    HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\A89F1E0FE544529429C8BF82FE74CE39
                    HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\AFEB575AA30ACB243B748619F62F0782
                    HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\B072F84D5AF1BB34C980E01F5689D864
                    HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\B278DBFACA5AB424DA79915F3A109F9A
                    HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\B3B348F18694F1949B4D6BD9507F2886
                    HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\B66FFAB725B92594C986DE826A867888
                    HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\B92A2929968AED344BD6B34AD60E6604
                    HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\BB1E992117B1B0B42BD2CDAEB8E749C4
                    HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\BCDA179D619B91648538E3394CAC94CC
                    HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\C7D9132F42224AC49BD8C06A0F8E39C4
                    HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\C9667115F6A9CE340B31B63B680FF26F
                    HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\D677B1A9671D4D4004F6F2A4469E86EA
                    HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\DA6F069968D91A540A1363E997581959
                    HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\DBC7F2B5594E08A4C87EF4C22971C615
                    HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\DD1402A9DD4215A43ABDE169A41AFA0E
                    HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\E36E114A0EAD2AD46B381D23AD69CDDF
                    HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\E48E3A6D380B2EC4ABCEB3BA048D767F
                    HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\EF8E618DB3AEDFBB384561B5C548F65E
                    HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\EFB70E89C3D6D354596520DE424F89D6
                    HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\F461B8DD96FF5AA41A52D14E1D7B69C7
                    HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\F49A213B5069AC348994D03F81B56C19
                    HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\F715D253BF28D554C9C0F60ABA8585CF
                    HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Products\79CAA1B036589D14EA74856E2A220F1E
                    HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Products\A28B4D68DEBAA244EB686953B7074FEF
                    HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Products\A3BB3C491A65ED342A24B8144FE679FE
                    HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Products\A6EB8FE4C9986914497E92C7F5A702E3
                    HKLM\software\microsoft\windows\currentversion\uninstall\{0B1AAC97-8563-41D9-AE47-58E6A222F0E1}
                    HKLM\software\microsoft\windows\currentversion\uninstall\{4EF8BE6A-899C-4196-94E7-297C5F7A203E}
                    HKLM\software\microsoft\windows\currentversion\uninstall\{86D4B82A-ABED-442A-BE86-96357B70F4FE}
                    HKLM\software\microsoft\windows\currentversion\uninstall\{94C3BB3A-56A1-43DE-A242-8B41F46E97EF}
                    HKLM\software\microsoft\windows\currentversion\uninstall\Ask.com Search Assistant
                    HKLM\software\pdfforge
                    .
                    ============== Added scan ==============
                    .
                    .
                    * Mozilla FireFox Version 3.5.7 [fr] *
                    .
                    ProfilePath: kx402x0g.default (Lucas)
                    .
                    (Lucas, prefs.js) Browser.download.lastDir, C:\Users\Lucas\Pictures
                    (Lucas, prefs.js) Browser.search.defaultenginename, Yahoo
                    (Lucas, prefs.js) Browser.search.defaulturl, hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2269050&SearchSource=3&q={searchTerms}
                    (Lucas, prefs.js) Browser.search.selectedEngine, Google
                    (Lucas, prefs.js) Browser.startup.homepage, hxxp://www.ibyscus.com/?ac=all&widg=sms
                    (Lucas, prefs.js) Extensions.enabledItems, {e9911ec6-1bcc-40b0-9993-e0eea7f6953f}:2.4.0.4,{01398B87-61AF-4FFB-9AB5-1A1C5FB39A9C}:4.0.1,{b9db16a4-6edc-47ec-a1f4-b86292ed211d}:4.7,{CAFEEFAC-0016-0000-0016-ABCDEFFEDCBA}:6.0.16,{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA}:6.0.17,{20a82645-c095-46ed-80e3-08825760534b}:1.1,{3dd3b747-2b4d-476b-8a5b-9c771d447834}:1.0,{B922D405-6D13-4A2B-AE89-08A030DA4402}:1.1.1,{972ce4c6-7e08-4474-a285-3208198ce6fd}:3.5.7
                    (Lucas, prefs.js) Keyword.URL, hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2269050&SearchSource=2&q=
                    (Lucas, prefs.js) Privacy.popups.showBrowserMessage, false
                    .
                    (Lucas, prefs.js) ERASED - Browser.search.defaultengine, Ask.com
                    (Lucas, prefs.js) ERASED - Browser.search.order.1, Ask.com
                    (Lucas, prefs.js) ERASED - Extensions.asktb.cbid, NL
                    (Lucas, prefs.js) ERASED - Extensions.asktb.clear-searches-on-exit, true
                    (Lucas, prefs.js) ERASED - Extensions.asktb.default-channel-url-mask, hxxp://www.ask.com/web?q={query}&o={o}&l={l}&qsrc={qsrc}
                    (Lucas, prefs.js) ERASED - Extensions.asktb.fresh-install, false
                    (Lucas, prefs.js) ERASED - Extensions.asktb.l, dis
                    (Lucas, prefs.js) ERASED - Extensions.asktb.last-config-req, 1257645000360
                    (Lucas, prefs.js) ERASED - Extensions.asktb.locale, en_US
                    (Lucas, prefs.js) ERASED - Extensions.asktb.o, 14300
                    (Lucas, prefs.js) ERASED - Extensions.asktb.overlay-reloaded-using-restart, true
                    (Lucas, prefs.js) ERASED - Extensions.asktb.qsrc, 2871
                    (Lucas, prefs.js) ERASED - Extensions.asktb.r, 5
                    .
                    .
                    * Internet Explorer Version 8.0.6001.18882 *
                    .
                    [HKEY_CURRENT_USER\..\Internet Explorer\Main]
                    .
                    Start Page: hxxp://fr.msn.com/
                    Default_Page_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
                    Do404Search: 01000000
                    Local Page: C:\Windows\system32\blank.htm
                    Show_ToolBar: yes
                    Enable Browser Extensions: yes
                    Search Bar: hxxp://go.microsoft.com/fwlink/?linkid=54896
                    Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
                    Use Search Asst: no
                    .
                    [HKEY_LOCAL_MACHINE\..\Internet Explorer\Main]
                    .
                    Start Page: hxxp://fr.msn.com/
                    Default_Page_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
                    Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
                    Search Page: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
                    Delete_Temp_Files_On_Exit: yes
                    Local Page: C:\Windows\System32\blank.htm
                    Enable Browser Extensions: yes
                    Use Search Asst: no
                    Search bar: hxxp://search.msn.com/spbasic.htm
                    .
                    [HKEY_LOCAL_MACHINE\..\Internet Explorer\ABOUTURLS]
                    .
                    Tabs: res://ieframe.dll/tabswelcome.htm
                    .
                    ============== Suspect (Cracks, Serials, ...) ==============
                    .
                    C:\Users\Lucas\Documents\LimeWire\Incomplete\CORRUPT-0-PC - Swat 4 The Stetchkov Syndicate [English] [WwW GamesTorrents CoM] crack keygen.zip
                    .
                    ===================================
                    .
                    15283 Byte(s) - C:\Ad-Report-CLEAN[1].log
                    16125 Byte(s) - C:\Ad-Report-SCAN[1].log
                    16167 Byte(s) - C:\Ad-Report-SCAN[2].log
                    .
                    827 File(s) - C:\Users\Lucas\AppData\Local\Temp
                    380 File(s) - C:\Windows\Temp
                    11 File(s) - C:\Windows\Prefetch
                    .
                    21 File(s) - C:\Ad-Remover\BACKUP
                    206 File(s) - C:\Ad-Remover\QUARANTINE
                    .
                    End at: 16:54:13 | 16/02/2010 - CLEAN[1]
                    .
                    ============== E.O.F ==============
                    .
                    Voila, mais en naviguant, toujours cette espece d'adresse IP...

                    Merci d'avance
                    2. lucas01 Auteur
                      Voila, encore merci

                      .
                      ======= LOGFILE OF AD-REMOVER 1.1.4.6_J | ONLY XP/VISTA/7 =======
                      .
                      Updated by C_XX on 05.02.2010 at 17:34
                      Contact: AdRemover.contact@gmail.com
                      Website: http://pagesperso-orange.fr/NosTools/ad_remover.html
                      .
                      Launch at: 10:46:02, 16/02/2010 | Normal Boot | Option: SCAN
                      Executed from: C:\Ad-Remover\
                      Operating system: Microsoft® Windows Vista™ HomeBasic Service Pack 2 v6.0.6002
                      Computer Name: PC-DE-LUCAS | Current user: Lucas
                      .
                      ============== FOUND ELEMENT(S) ==============
                      .

                      C:\Users\Lucas\AppData\Roaming\Mozilla\FireFox\Profiles\kx402x0g.default\extensions\toolbar@ask.com
                      C:\Users\Lucas\AppData\Roaming\Mozilla\FireFox\Profiles\kx402x0g.default\searchplugins\askcom.xml
                      C:\Windows\Installer\{86D4B82A-ABED-442A-BE86-96357B70F4FE}
                      C:\Program Files\Mozilla FireFox\Components\AskHPRFF.js
                      C:\Program Files\Mozilla FireFox\extensions\{01398B87-61AF-4FFB-9AB5-1A1C5FB39A9C}
                      C:\Program Files\Mozilla FireFox\extensions\{B922D405-6D13-4A2B-AE89-08A030DA4402}
                      C:\Windows\System32\Tasks\Scheduled Update for Ask Toolbar
                      C:\Users\Lucas\AppData\Roaming\MICROS~1\Windows\STARTM~1\Programs\Ask Search Assistant
                      C:\Program Files\Ask Search Assistant
                      C:\Program Files\Ask.com
                      C:\Program Files\Dealio Toolbar
                      C:\Program Files\pdfforge Toolbar
                      C:\Users\Lucas\AppData\LocalLow\AskToolbar
                      C:\Users\Lucas\AppData\LocalLow\Dealio
                      C:\Users\Lucas\AppData\LocalLow\pdfforge
                      C:\Users\Lucas\AppData\LocalLow\Search Settings
                      C:\Windows\Installer\15402f01.msi
                      C:\Windows\Installer\ba7759.msi
                      C:\Windows\Installer\ba776d.msi
                      .
                      HKCU\software\appdatalow\AskBarDis
                      HKCU\software\appdatalow\software\AskToolbar
                      HKCU\software\appdatalow\software\Dealio
                      HKCU\software\appdatalow\software\pdfforge
                      HKCU\software\Ask.com
                      HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{86CC03E7-A2FA-4F36-B3C9-2EC0B9A6E2CE}
                      HKCU\Software\Microsoft\Internet Explorer\LowRegistry\Search Settings
                      HKCU\software\microsoft\internet explorer\searchscopes\{171DEBEB-C3D4-40b7-AC73-056A5EBA4A7E}
                      HKCU\software\microsoft\internet explorer\searchscopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}
                      HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{D4027C7F-154A-4066-A1AD-4243D8127440}
                      HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{D4027C7F-154A-4066-A1AD-4243D8127440}
                      HKLM\Software\Classes\AppID\{9B0CB95C-933A-4B8C-B6D4-EDCD19A43874}
                      HKLM\software\classes\appid\GenericAskToolbar.DLL
                      HKLM\Software\Classes\CLSID\{01398B87-61AF-4FFB-9AB5-1A1C5FB39A9C}
                      HKLM\Software\Classes\CLSID\{B922D405-6D13-4A2B-AE89-08A030DA4402}
                      HKLM\Software\Classes\CLSID\{D4027C7F-154A-4066-A1AD-4243D8127440}
                      HKLM\Software\Classes\CLSID\{E312764E-7706-43F1-8DAB-FCDD2B1E416D}
                      HKLM\software\classes\GenericAskToolbar.ToolbarWnd
                      HKLM\software\classes\GenericAskToolbar.ToolbarWnd.1
                      HKLM\software\classes\installer\Features\A3BB3C491A65ED342A24B8144FE679FE
                      HKLM\software\classes\installer\Products\79CAA1B036589D14EA74856E2A220F1E
                      HKLM\software\classes\installer\Products\A28B4D68DEBAA244EB686953B7074FEF
                      HKLM\software\classes\installer\Products\A3BB3C491A65ED342A24B8144FE679FE
                      HKLM\software\classes\installer\Products\A6EB8FE4C9986914497E92C7F5A702E3
                      HKLM\Software\Classes\Interface\{91CF619A-4686-4CA4-9232-3B2E6B63AA92}
                      HKLM\Software\Classes\Interface\{AC71B60E-94C9-4EDE-BA46-E146747BB67E}
                      HKLM\Software\Classes\Interface\{D5A1EF9A-7948-435D-8B87-D6A598317288}
                      HKLM\software\classes\SearchSettings.BHO
                      HKLM\software\classes\SearchSettings.BHO.1
                      HKLM\Software\Classes\TypeLib\{2996F0E7-292B-4CAE-893F-47B8B1C05B56}
                      HKLM\Software\Classes\TypeLib\{CD082CCA-086F-4FD8-8FD7-247A0DBBD1CC}
                      HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{01398B87-61AF-4FFB-9AB5-1A1C5FB39A9C}
                      HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B922D405-6D13-4A2B-AE89-08A030DA4402}
                      HKLM\software\microsoft\internet explorer\searchscopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}
                      HKLM\Software\Microsoft\Internet Explorer\Toolbar\\{01398B87-61AF-4FFB-9AB5-1A1C5FB39A9C}
                      HKLM\Software\Microsoft\Internet Explorer\Toolbar\\{66886C4D-B307-4ECA-A228-52CA9B9851A4}
                      HKLM\Software\Microsoft\Internet Explorer\Toolbar\\{B922D405-6D13-4A2B-AE89-08A030DA4402}
                      HKLM\Software\Microsoft\Internet Explorer\Toolbar\\{D4027C7F-154A-4066-A1AD-4243D8127440}
                      HKLM\Software\Microsoft\Internet Explorer\Toolbar\\{D4027C7F-154A-4066-A1AD-4243D8127440}
                      HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Scheduled Update for Ask Toolbar
                      HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\AskSearchAsst.exe
                      HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{01398B87-61AF-4FFB-9AB5-1A1C5FB39A9C}
                      HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B922D405-6D13-4A2B-AE89-08A030DA4402}
                      HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}
                      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\0292226F570267D459357AF78015E534
                      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\03285961954D5824C85975D955031EE8
                      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\0E12F736682067FDE4D1158D5940A82E
                      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\1A24B5BB8521B03E0C8D908F5ABC0AE6
                      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\23A03A6765D10864EB278629A2DF32C3
                      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\2B0D56C4F4C46D844A57FFED6F0D2852
                      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\323D2420527EA994FB326F15D333660E
                      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\33E6E75CE56376F40AF9234753739ADB
                      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\377026901A2D8744A8423A983B50E0D1
                      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\3A4FCCE032CA50340A6975C92410AE30
                      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\49D4375FE41653242AEA4C969E4E65E0
                      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\588DFA161592E9747948BFFE475476F4
                      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\6AA0923513360135B272E8289C5F13FA
                      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\6AC3985F4D64C2245A96D31569D1BF40
                      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\6E00D9B24354FBA44AE2CA0FA86EF2E2
                      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\6F7467AF8F29C134CBBAB394ECCFDE96
                      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\76DA9915C36F3D742951F63351CF5C97
                      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\7C13F41728A69EF41AA1A3372FB86FA6
                      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\7DE196B10195F5647A2B21B761F3DE01
                      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\855847FA0E25FBA46B8516389DFDD4B3
                      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\8A01D85165E7CD5448C71263ADB6A2E2
                      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\8ED411B7A244E0E4C82C46284CA65B81
                      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\922525DCC5199162F8935747CA3D8E59
                      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\94E65EF7E080DDA4AA2F1DEDCE74AC5B
                      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\9B0B0584E80456A4FB98DA3973B1EB3F
                      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\9D4F5849367142E4685ED8C25E44C5ED
                      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\9DC2844D0E3E8924C8973C3B3BAE1F58
                      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\A5875B04372C19545BEB90D4D606C472
                      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\A876D9E80B896EC44A8620248CC79296
                      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\A89F1E0FE544529429C8BF82FE74CE39
                      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\AFEB575AA30ACB243B748619F62F0782
                      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\B072F84D5AF1BB34C980E01F5689D864
                      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\B278DBFACA5AB424DA79915F3A109F9A
                      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\B3B348F18694F1949B4D6BD9507F2886
                      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\B66FFAB725B92594C986DE826A867888
                      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\B92A2929968AED344BD6B34AD60E6604
                      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\BB1E992117B1B0B42BD2CDAEB8E749C4
                      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\BCDA179D619B91648538E3394CAC94CC
                      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\C7D9132F42224AC49BD8C06A0F8E39C4
                      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\C9667115F6A9CE340B31B63B680FF26F
                      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\D677B1A9671D4D4004F6F2A4469E86EA
                      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\DA6F069968D91A540A1363E997581959
                      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\DBC7F2B5594E08A4C87EF4C22971C615
                      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\DD1402A9DD4215A43ABDE169A41AFA0E
                      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\E36E114A0EAD2AD46B381D23AD69CDDF
                      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\E48E3A6D380B2EC4ABCEB3BA048D767F
                      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\EF8E618DB3AEDFBB384561B5C548F65E
                      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\EFB70E89C3D6D354596520DE424F89D6
                      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\F461B8DD96FF5AA41A52D14E1D7B69C7
                      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\F49A213B5069AC348994D03F81B56C19
                      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\F715D253BF28D554C9C0F60ABA8585CF
                      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Products\79CAA1B036589D14EA74856E2A220F1E
                      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Products\A28B4D68DEBAA244EB686953B7074FEF
                      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Products\A3BB3C491A65ED342A24B8144FE679FE
                      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Products\A6EB8FE4C9986914497E92C7F5A702E3
                      HKLM\software\microsoft\windows\currentversion\uninstall\{0B1AAC97-8563-41D9-AE47-58E6A222F0E1}
                      HKLM\software\microsoft\windows\currentversion\uninstall\{4EF8BE6A-899C-4196-94E7-297C5F7A203E}
                      HKLM\software\microsoft\windows\currentversion\uninstall\{86D4B82A-ABED-442A-BE86-96357B70F4FE}
                      HKLM\software\microsoft\windows\currentversion\uninstall\{94C3BB3A-56A1-43DE-A242-8B41F46E97EF}
                      HKLM\software\microsoft\windows\currentversion\uninstall\Ask.com Search Assistant
                      HKLM\software\pdfforge
                      HKU\s-1-5-21-3334241609-3845032673-259671266-1000\software\appdatalow\AskBarDis
                      HKU\s-1-5-21-3334241609-3845032673-259671266-1000\software\appdatalow\software\AskToolbar
                      HKU\s-1-5-21-3334241609-3845032673-259671266-1000\software\appdatalow\software\Dealio
                      HKU\s-1-5-21-3334241609-3845032673-259671266-1000\software\appdatalow\software\pdfforge
                      HKU\s-1-5-21-3334241609-3845032673-259671266-1000\software\Ask.com
                      .
                      ============== Added scan ==============
                      .
                      .
                      * Mozilla FireFox Version 3.5.7 [fr] *
                      .
                      ProfilePath: kx402x0g.default (Lucas)
                      .
                      (Lucas, prefs.js) Browser.download.lastDir, C:\Users\Lucas\Pictures
                      (Lucas, prefs.js) Browser.search.defaultenginename, Yahoo
                      (Lucas, prefs.js) Browser.search.defaulturl, hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2269050&SearchSource=3&q={searchTerms}
                      (Lucas, prefs.js) Browser.search.selectedEngine, Google
                      (Lucas, prefs.js) Browser.startup.homepage, hxxp://www.ibyscus.com/?ac=all&widg=sms
                      (Lucas, prefs.js) Extensions.enabledItems, {e9911ec6-1bcc-40b0-9993-e0eea7f6953f}:2.4.0.4,{01398B87-61AF-4FFB-9AB5-1A1C5FB39A9C}:4.0.1,{b9db16a4-6edc-47ec-a1f4-b86292ed211d}:4.7,{CAFEEFAC-0016-0000-0016-ABCDEFFEDCBA}:6.0.16,{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA}:6.0.17,{20a82645-c095-46ed-80e3-08825760534b}:1.1,{3dd3b747-2b4d-476b-8a5b-9c771d447834}:1.0,{B922D405-6D13-4A2B-AE89-08A030DA4402}:1.1.1,{972ce4c6-7e08-4474-a285-3208198ce6fd}:3.5.7
                      (Lucas, prefs.js) Keyword.URL, hxxp://fr.search.yahoo.com/search?fr=greentree_ff1&ei=utf-8&type=867034&p=
                      (Lucas, prefs.js) Privacy.popups.showBrowserMessage, false
                      .
                      (Lucas, prefs.js) FOUND - Browser.search.defaultengine, Ask.com
                      (Lucas, prefs.js) FOUND - Browser.search.order.1, Ask.com
                      (Lucas, prefs.js) FOUND - Extensions.asktb.cbid, NL
                      (Lucas, prefs.js) FOUND - Extensions.asktb.clear-searches-on-exit, true
                      (Lucas, prefs.js) FOUND - Extensions.asktb.default-channel-url-mask, hxxp://www.ask.com/web?q={query}&o={o}&l={l}&qsrc={qsrc}
                      (Lucas, prefs.js) FOUND - Extensions.asktb.fresh-install, false
                      (Lucas, prefs.js) FOUND - Extensions.asktb.l, dis
                      (Lucas, prefs.js) FOUND - Extensions.asktb.last-config-req, 1257645000360
                      (Lucas, prefs.js) FOUND - Extensions.asktb.locale, en_US
                      (Lucas, prefs.js) FOUND - Extensions.asktb.o, 14300
                      (Lucas, prefs.js) FOUND - Extensions.asktb.overlay-reloaded-using-restart, true
                      (Lucas, prefs.js) FOUND - Extensions.asktb.qsrc, 2871
                      (Lucas, prefs.js) FOUND - Extensions.asktb.r, 5
                      .
                      .
                      * Internet Explorer Version 8.0.6001.18882 *
                      .
                      [HKEY_CURRENT_USER\..\Internet Explorer\Main]
                      .
                      Start Page: hxxp://www.ibyscus.com/annuaire
                      Default_Page_URL: hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=fr_fr&c=91&bd=Presario&pf=cnnb
                      Do404Search: 01000000
                      Local Page: C:\Windows\system32\blank.htm
                      Show_ToolBar: yes
                      Search Page: hxxp://www.google.com
                      Enable Browser Extensions: yes
                      Search Bar: hxxp://www.google.com/ie
                      Default_Search_URL: hxxp://www.google.com/ie
                      Use Search Asst: no
                      .
                      [HKEY_LOCAL_MACHINE\..\Internet Explorer\Main]
                      .
                      Start Page: hxxp://www.msn.com/
                      Default_Page_URL: hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=fr_fr&c=91&bd=Presario&pf=cnnb
                      Default_Search_URL: hxxp://go.microsoft.com/fwlink/?LinkId=54896
                      Search Page: hxxp://go.microsoft.com/fwlink/?LinkId=54896
                      Delete_Temp_Files_On_Exit: yes
                      Local Page: C:\Windows\System32\blank.htm
                      Enable Browser Extensions: yes
                      Use Search Asst: no
                      .
                      [HKEY_LOCAL_MACHINE\..\Internet Explorer\ABOUTURLS]
                      .
                      Tabs: res://ieframe.dll/tabswelcome.htm
                      .
                      ============== Suspect (Cracks, Serials, ...) ==============
                      .
                      C:\Users\Lucas\Documents\LimeWire\Incomplete\CORRUPT-0-PC - Swat 4 The Stetchkov Syndicate [English] [WwW GamesTorrents CoM] crack keygen.zip
                      .
                      ===================================
                      .
                      16125 Byte(s) - C:\Ad-Report-SCAN[1].log
                      15841 Byte(s) - C:\Ad-Report-SCAN[2].log
                      .
                      1412 File(s) - C:\Users\Lucas\AppData\Local\Temp
                      382 File(s) - C:\Windows\Temp
                      70 File(s) - C:\Windows\Prefetch
                      .
                      2 File(s) - C:\Ad-Remover\BACKUP
                      0 File(s) - C:\Ad-Remover\QUARANTINE
                      .
                      End at: 11:22:34 | 16/02/2010 - SCAN[2]
                      .
                      ============== E.O.F ==============
                      .

                      merci de ton aide
                      1. lucas01 Auteur
                        L'option S n'est pas l'option suppression.
                        S : scan
                        L : Launch cleaning
                        D: Uninstall
                        Q: Exit

                        Bon je fait quand même l'option S de scan. . .
                        4. lucas01 Auteur
                          .
                          ======= LOGFILE OF AD-REMOVER 1.1.4.6_J | ONLY XP/VISTA/7 =======
                          .
                          Updated by C_XX on 05.02.2010 at 17:34
                          Contact: AdRemover.contact@gmail.com
                          Website: http://pagesperso-orange.fr/NosTools/ad_remover.html
                          .
                          Launch at: 10:35:07, 15/02/2010 | Normal Boot | Option: SCAN
                          Executed from: C:\Ad-Remover\
                          Operating system: Microsoft® Windows Vista™ HomeBasic Service Pack 2 v6.0.6002
                          Computer Name: PC-DE-LUCAS | Current user: Lucas
                          .
                          ============== FOUND ELEMENT(S) ==============
                          .

                          C:\Users\Lucas\AppData\Roaming\Mozilla\FireFox\Profiles\kx402x0g.default\extensions\toolbar@ask.com
                          C:\Users\Lucas\AppData\Roaming\Mozilla\FireFox\Profiles\kx402x0g.default\searchplugins\askcom.xml
                          C:\Windows\Installer\{86D4B82A-ABED-442A-BE86-96357B70F4FE}
                          C:\Program Files\Mozilla FireFox\Components\AskHPRFF.js
                          C:\Program Files\Mozilla FireFox\extensions\{01398B87-61AF-4FFB-9AB5-1A1C5FB39A9C}
                          C:\Program Files\Mozilla FireFox\extensions\{B922D405-6D13-4A2B-AE89-08A030DA4402}
                          C:\Windows\System32\Tasks\Scheduled Update for Ask Toolbar
                          C:\Users\Lucas\AppData\Roaming\MICROS~1\Windows\STARTM~1\Programs\Ask Search Assistant
                          C:\Program Files\Ask Search Assistant
                          C:\Program Files\Ask.com
                          C:\Program Files\Dealio Toolbar
                          C:\Program Files\pdfforge Toolbar
                          C:\Users\Lucas\AppData\LocalLow\AskToolbar
                          C:\Users\Lucas\AppData\LocalLow\Dealio
                          C:\Users\Lucas\AppData\LocalLow\pdfforge
                          C:\Users\Lucas\AppData\LocalLow\Search Settings
                          C:\Windows\Installer\15402f01.msi
                          C:\Windows\Installer\ba7759.msi
                          C:\Windows\Installer\ba776d.msi
                          .
                          HKCU\software\appdatalow\AskBarDis
                          HKCU\software\appdatalow\software\AskToolbar
                          HKCU\software\appdatalow\software\Dealio
                          HKCU\software\appdatalow\software\pdfforge
                          HKCU\software\Ask.com
                          HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{86CC03E7-A2FA-4F36-B3C9-2EC0B9A6E2CE}
                          HKCU\Software\Microsoft\Internet Explorer\LowRegistry\Search Settings
                          HKCU\software\microsoft\internet explorer\searchscopes\{171DEBEB-C3D4-40b7-AC73-056A5EBA4A7E}
                          HKCU\software\microsoft\internet explorer\searchscopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}
                          HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{D4027C7F-154A-4066-A1AD-4243D8127440}
                          HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{D4027C7F-154A-4066-A1AD-4243D8127440}
                          HKLM\Software\Classes\AppID\{9B0CB95C-933A-4B8C-B6D4-EDCD19A43874}
                          HKLM\software\classes\appid\GenericAskToolbar.DLL
                          HKLM\Software\Classes\CLSID\{01398B87-61AF-4FFB-9AB5-1A1C5FB39A9C}
                          HKLM\Software\Classes\CLSID\{B922D405-6D13-4A2B-AE89-08A030DA4402}
                          HKLM\Software\Classes\CLSID\{D4027C7F-154A-4066-A1AD-4243D8127440}
                          HKLM\Software\Classes\CLSID\{E312764E-7706-43F1-8DAB-FCDD2B1E416D}
                          HKLM\software\classes\GenericAskToolbar.ToolbarWnd
                          HKLM\software\classes\GenericAskToolbar.ToolbarWnd.1
                          HKLM\software\classes\installer\Features\A3BB3C491A65ED342A24B8144FE679FE
                          HKLM\software\classes\installer\Products\79CAA1B036589D14EA74856E2A220F1E
                          HKLM\software\classes\installer\Products\A28B4D68DEBAA244EB686953B7074FEF
                          HKLM\software\classes\installer\Products\A3BB3C491A65ED342A24B8144FE679FE
                          HKLM\software\classes\installer\Products\A6EB8FE4C9986914497E92C7F5A702E3
                          HKLM\Software\Classes\Interface\{91CF619A-4686-4CA4-9232-3B2E6B63AA92}
                          HKLM\Software\Classes\Interface\{AC71B60E-94C9-4EDE-BA46-E146747BB67E}
                          HKLM\Software\Classes\Interface\{D5A1EF9A-7948-435D-8B87-D6A598317288}
                          HKLM\software\classes\SearchSettings.BHO
                          HKLM\software\classes\SearchSettings.BHO.1
                          HKLM\Software\Classes\TypeLib\{2996F0E7-292B-4CAE-893F-47B8B1C05B56}
                          HKLM\Software\Classes\TypeLib\{CD082CCA-086F-4FD8-8FD7-247A0DBBD1CC}
                          HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{01398B87-61AF-4FFB-9AB5-1A1C5FB39A9C}
                          HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B922D405-6D13-4A2B-AE89-08A030DA4402}
                          HKLM\software\microsoft\internet explorer\searchscopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}
                          HKLM\Software\Microsoft\Internet Explorer\Toolbar\\{01398B87-61AF-4FFB-9AB5-1A1C5FB39A9C}
                          HKLM\Software\Microsoft\Internet Explorer\Toolbar\\{66886C4D-B307-4ECA-A228-52CA9B9851A4}
                          HKLM\Software\Microsoft\Internet Explorer\Toolbar\\{B922D405-6D13-4A2B-AE89-08A030DA4402}
                          HKLM\Software\Microsoft\Internet Explorer\Toolbar\\{D4027C7F-154A-4066-A1AD-4243D8127440}
                          HKLM\Software\Microsoft\Internet Explorer\Toolbar\\{D4027C7F-154A-4066-A1AD-4243D8127440}
                          HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Scheduled Update for Ask Toolbar
                          HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\AskSearchAsst.exe
                          HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{01398B87-61AF-4FFB-9AB5-1A1C5FB39A9C}
                          HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B922D405-6D13-4A2B-AE89-08A030DA4402}
                          HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}
                          HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\0292226F570267D459357AF78015E534
                          HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\03285961954D5824C85975D955031EE8
                          HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\0E12F736682067FDE4D1158D5940A82E
                          HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\1A24B5BB8521B03E0C8D908F5ABC0AE6
                          HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\23A03A6765D10864EB278629A2DF32C3
                          HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\2B0D56C4F4C46D844A57FFED6F0D2852
                          HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\323D2420527EA994FB326F15D333660E
                          HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\33E6E75CE56376F40AF9234753739ADB
                          HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\377026901A2D8744A8423A983B50E0D1
                          HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\3A4FCCE032CA50340A6975C92410AE30
                          HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\49D4375FE41653242AEA4C969E4E65E0
                          HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\588DFA161592E9747948BFFE475476F4
                          HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\6AA0923513360135B272E8289C5F13FA
                          HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\6AC3985F4D64C2245A96D31569D1BF40
                          HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\6E00D9B24354FBA44AE2CA0FA86EF2E2
                          HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\6F7467AF8F29C134CBBAB394ECCFDE96
                          HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\76DA9915C36F3D742951F63351CF5C97
                          HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\7C13F41728A69EF41AA1A3372FB86FA6
                          HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\7DE196B10195F5647A2B21B761F3DE01
                          HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\855847FA0E25FBA46B8516389DFDD4B3
                          HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\8A01D85165E7CD5448C71263ADB6A2E2
                          HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\8ED411B7A244E0E4C82C46284CA65B81
                          HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\922525DCC5199162F8935747CA3D8E59
                          HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\94E65EF7E080DDA4AA2F1DEDCE74AC5B
                          HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\9B0B0584E80456A4FB98DA3973B1EB3F
                          HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\9D4F5849367142E4685ED8C25E44C5ED
                          HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\9DC2844D0E3E8924C8973C3B3BAE1F58
                          HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\A5875B04372C19545BEB90D4D606C472
                          HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\A876D9E80B896EC44A8620248CC79296
                          HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\A89F1E0FE544529429C8BF82FE74CE39
                          HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\AFEB575AA30ACB243B748619F62F0782
                          HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\B072F84D5AF1BB34C980E01F5689D864
                          HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\B278DBFACA5AB424DA79915F3A109F9A
                          HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\B3B348F18694F1949B4D6BD9507F2886
                          HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\B66FFAB725B92594C986DE826A867888
                          HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\B92A2929968AED344BD6B34AD60E6604
                          HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\BB1E992117B1B0B42BD2CDAEB8E749C4
                          HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\BCDA179D619B91648538E3394CAC94CC
                          HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\C7D9132F42224AC49BD8C06A0F8E39C4
                          HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\C9667115F6A9CE340B31B63B680FF26F
                          HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\D677B1A9671D4D4004F6F2A4469E86EA
                          HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\DA6F069968D91A540A1363E997581959
                          HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\DBC7F2B5594E08A4C87EF4C22971C615
                          HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\DD1402A9DD4215A43ABDE169A41AFA0E
                          HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\E36E114A0EAD2AD46B381D23AD69CDDF
                          HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\E48E3A6D380B2EC4ABCEB3BA048D767F
                          HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\EF8E618DB3AEDFBB384561B5C548F65E
                          HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\EFB70E89C3D6D354596520DE424F89D6
                          HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\F461B8DD96FF5AA41A52D14E1D7B69C7
                          HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\F49A213B5069AC348994D03F81B56C19
                          HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\F715D253BF28D554C9C0F60ABA8585CF
                          HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Products\79CAA1B036589D14EA74856E2A220F1E
                          HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Products\A28B4D68DEBAA244EB686953B7074FEF
                          HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Products\A3BB3C491A65ED342A24B8144FE679FE
                          HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Products\A6EB8FE4C9986914497E92C7F5A702E3
                          HKLM\software\microsoft\windows\currentversion\uninstall\{0B1AAC97-8563-41D9-AE47-58E6A222F0E1}
                          HKLM\software\microsoft\windows\currentversion\uninstall\{4EF8BE6A-899C-4196-94E7-297C5F7A203E}
                          HKLM\software\microsoft\windows\currentversion\uninstall\{86D4B82A-ABED-442A-BE86-96357B70F4FE}
                          HKLM\software\microsoft\windows\currentversion\uninstall\{94C3BB3A-56A1-43DE-A242-8B41F46E97EF}
                          HKLM\software\microsoft\windows\currentversion\uninstall\Ask.com Search Assistant
                          HKLM\software\pdfforge
                          HKU\s-1-5-21-3334241609-3845032673-259671266-1000\software\appdatalow\AskBarDis
                          HKU\s-1-5-21-3334241609-3845032673-259671266-1000\software\appdatalow\software\AskToolbar
                          HKU\s-1-5-21-3334241609-3845032673-259671266-1000\software\appdatalow\software\Dealio
                          HKU\s-1-5-21-3334241609-3845032673-259671266-1000\software\appdatalow\software\pdfforge
                          HKU\s-1-5-21-3334241609-3845032673-259671266-1000\software\Ask.com
                          .
                          ============== Added scan ==============
                          .
                          .
                          * Mozilla FireFox Version 3.5.7 [fr] *
                          .
                          ProfilePath: kx402x0g.default (Lucas)
                          .
                          (Lucas, prefs.js) Browser.download.lastDir, C:\Users\Lucas\Pictures
                          (Lucas, prefs.js) Browser.search.defaultenginename, Yahoo
                          (Lucas, prefs.js) Browser.search.defaulturl, hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2269050&SearchSource=3&q={searchTerms}
                          (Lucas, prefs.js) Browser.search.selectedEngine, Google
                          (Lucas, prefs.js) Browser.startup.homepage, hxxp://www.ibyscus.com/?ac=all&widg=sms
                          (Lucas, prefs.js) Extensions.enabledItems, {e9911ec6-1bcc-40b0-9993-e0eea7f6953f}:2.4.0.4,{01398B87-61AF-4FFB-9AB5-1A1C5FB39A9C}:4.0.1,{b9db16a4-6edc-47ec-a1f4-b86292ed211d}:4.7,{CAFEEFAC-0016-0000-0016-ABCDEFFEDCBA}:6.0.16,{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA}:6.0.17,{20a82645-c095-46ed-80e3-08825760534b}:1.1,{3dd3b747-2b4d-476b-8a5b-9c771d447834}:1.0,{B922D405-6D13-4A2B-AE89-08A030DA4402}:1.1.1,{972ce4c6-7e08-4474-a285-3208198ce6fd}:3.5.7
                          (Lucas, prefs.js) Keyword.URL, hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2269050&SearchSource=2&q=
                          (Lucas, prefs.js) Privacy.popups.showBrowserMessage, false
                          .
                          (Lucas, prefs.js) FOUND - Browser.search.defaultengine, Ask.com
                          (Lucas, prefs.js) FOUND - Browser.search.order.1, Ask.com
                          (Lucas, prefs.js) FOUND - Extensions.asktb.cbid, NL
                          (Lucas, prefs.js) FOUND - Extensions.asktb.clear-searches-on-exit, true
                          (Lucas, prefs.js) FOUND - Extensions.asktb.default-channel-url-mask, hxxp://www.ask.com/web?q={query}&o={o}&l={l}&qsrc={qsrc}
                          (Lucas, prefs.js) FOUND - Extensions.asktb.fresh-install, false
                          (Lucas, prefs.js) FOUND - Extensions.asktb.l, dis
                          (Lucas, prefs.js) FOUND - Extensions.asktb.last-config-req, 1257645000360
                          (Lucas, prefs.js) FOUND - Extensions.asktb.locale, en_US
                          (Lucas, prefs.js) FOUND - Extensions.asktb.o, 14300
                          (Lucas, prefs.js) FOUND - Extensions.asktb.overlay-reloaded-using-restart, true
                          (Lucas, prefs.js) FOUND - Extensions.asktb.qsrc, 2871
                          (Lucas, prefs.js) FOUND - Extensions.asktb.r, 5
                          .
                          .
                          * Internet Explorer Version 8.0.6001.18882 *
                          .
                          [HKEY_CURRENT_USER\..\Internet Explorer\Main]
                          .
                          Start Page: hxxp://www.ibyscus.com/annuaire
                          Default_Page_URL: hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=fr_fr&c=91&bd=Presario&pf=cnnb
                          Do404Search: 01000000
                          Local Page: C:\Windows\system32\blank.htm
                          Show_ToolBar: yes
                          Search Page: hxxp://www.google.com
                          Enable Browser Extensions: yes
                          Search Bar: hxxp://www.google.com/ie
                          Default_Search_URL: hxxp://www.google.com/ie
                          Use Search Asst: no
                          .
                          [HKEY_LOCAL_MACHINE\..\Internet Explorer\Main]
                          .
                          Start Page: hxxp://www.msn.com/
                          Default_Page_URL: hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=fr_fr&c=91&bd=Presario&pf=cnnb
                          Default_Search_URL: hxxp://go.microsoft.com/fwlink/?LinkId=54896
                          Search Page: hxxp://go.microsoft.com/fwlink/?LinkId=54896
                          Delete_Temp_Files_On_Exit: yes
                          Local Page: C:\Windows\System32\blank.htm
                          Enable Browser Extensions: yes
                          Use Search Asst: no
                          .
                          [HKEY_LOCAL_MACHINE\..\Internet Explorer\ABOUTURLS]
                          .
                          Tabs: res://ieframe.dll/tabswelcome.htm
                          .
                          ============== Suspect (Cracks, Serials, ...) ==============
                          .
                          C:\Users\Lucas\Documents\LimeWire\Incomplete\CORRUPT-0-PC - Swat 4 The Stetchkov Syndicate [English] [WwW GamesTorrents CoM] crack keygen.zip
                          .
                          ===================================
                          .
                          15798 Byte(s) - C:\Ad-Report-SCAN[1].log
                          .
                          1395 File(s) - C:\Users\Lucas\AppData\Local\Temp
                          382 File(s) - C:\Windows\Temp
                          123 File(s) - C:\Windows\Prefetch
                          .
                          1 File(s) - C:\Ad-Remover\BACKUP
                          0 File(s) - C:\Ad-Remover\QUARANTINE
                          .
                          End at: 11:04:47 | 15/02/2010 - SCAN[1]
                          .
                          ============== E.O.F ==============
                          .
                          merci d'avance
                          1. totobetourne
                            etrange ta version de toolbar sd , la mise a jour a ete effectue le 22 8 2009 donc ancienne version.

                            passe alors cela.
                            telecharge cela et fait le fonctionner en option S.colle le rapport.

                            http://pagesperso-orange.fr/NosTools/C_XX/AD-R.exe

                            Déconnectes toi et fermes toutes applications en cours !

                            Relances "Ad-remover" : au menu principal choisi l'option "L" .
                            ? Ensuite coche: (le numero devant et entree)

                            Boonty/Boonty Games
                            eorezo
                            .......
                            Puis "S"

                            le programme va travailler ...

                            Postes le rapport qui apparait à la fin + un nouvel Hijackthis pour analyse ...

                            ( le rapport est sauvegardé aussi sous C:\Ad-report.log )

                            /!\ Si le Bureau ne réapparait pas presse Ctrl + Alt + Suppr , Onglet "Fichier" , "Nouvelle tâche" , tapes explorer.exe et valides) /!\
                            1. lucas01 Auteur
                              Désoler du retard.
                              PS: Petite note que j'ai surement oublier de préciser. Cela ne ce fait pas avec IE. Seulement avec firefox.
                              Merci d'avance.

                              -----------\\ ToolBar S&D 1.2.9 XP/Vista

                              Microsoft® Windows Vista™ Édition Familiale Basique ( v6.0.6002 ) Service Pack 2
                              X86-based PC ( Multiprocessor Free : Intel(R) Celeron(R) CPU 900 @ 2.20GHz )
                              BIOS : Default System BIOS
                              USER : Lucas ( Administrator )
                              BOOT : Normal boot
                              C:\ (Local Disk) - NTFS - Total:223 Go (Free:99 Go)
                              D:\ (Local Disk) - NTFS - Total:9 Go (Free:1 Go)
                              E:\ (CD or DVD) - UDF - Total:2 Go (Free:0 Go)

                              "C:\ToolBar SD" ( MAJ : 22-08-2009|18:42 )
                              Option : [1] ( 15/02/2010| 0:33 )

                              [ UAC => 1 ]

                              -----------\\ Recherche de Fichiers / Dossiers ...

                              -----------\\ [..\Internet Explorer\Main]

                              [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
                              "Start Page"="http://www.ibyscus.com/annuaire"
                              "Default_Page_URL"="http://ie.redirect.hp.com/..."
                              "Local Page"="C:\\Windows\\system32\\blank.htm"
                              "Search Page"="https://www.google.com/?gws_rd=ssl"
                              "Search Bar"="http://www.google.com/toolbar/ie8/sidebar.html"
                              "Default_Search_URL"="http://www.google.com/toolbar/ie8/sidebar.html"
                              "Url"="https://www.msn.com/fr-fr/actualite/"

                              [HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
                              "Start Page"="https://www.msn.com/fr-fr/"
                              "Default_Page_URL"="http://ie.redirect.hp.com/..."
                              "Default_Search_URL"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
                              "Search Page"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
                              "Local Page"="C:\\Windows\\System32\\blank.htm"

                              --------------------\\ Recherche d'autres infections

                              --------------------\\ Cracks & Keygens ..

                              C:\Users\Lucas\Documents\LimeWire\Incomplete\CORRUPT-0-PC - Swat 4 The Stetchkov Syndicate [English] [WwW GamesTorrents CoM] crack keygen.zip

                              [ UAC => 1 ]

                              1 - "C:\ToolBar SD\TB_1.txt" - 12/10/2009|21:40 - Option : [1]
                              2 - "C:\ToolBar SD\TB_2.txt" - 12/10/2009|21:43 - Option : [1]
                              3 - "C:\ToolBar SD\TB_3.txt" - 12/10/2009|22:43 - Option : [2]
                              4 - "C:\ToolBar SD\TB_4.txt" - 10/02/2010|17:56 - Option : [2]
                              5 - "C:\ToolBar SD\TB_5.txt" - 15/02/2010| 0:34 - Option : [1]

                              -----------\\ Fin du rapport a 0:34:32,56
                              • 1
                              • 2

                              Discussions similaires

                              Softonic,est-ce un virus ?
                              techmel1

                              6 réponses
                              Chrome://newtab
                              Nova

                              14 réponses
                              Désinstaller Softonic
                              Diguimette

                              5 réponses
                              Supprimer New Tab
                              tysaozon

                              8 réponses
                              Bouton pause/break
                              frans003

                              3 réponses