Page intempestives

Résolu
parcimonie1 -  
Bonjour,

depuis quelques jours des pages intempestives s'ouvrent l'orsque je vais sur le net.. quelqu'un peut me donner le lien pour télécharger hijactis pour analyser mon ordi ?
Merci d'avance

parci
--

parci  "Suis ton coeur, pour que ton visage brille durant le temps de ta vie"
Configuration: Windows XP
Internet Explorer 7.0

33 réponses

Résumé de la discussion

Des pages intempestives apparaissent lors de la navigation, suscitant une demande d’un lien pour télécharger HijackThis et d’un outil d’analyse afin de déterminer l’origine d’une infection potentielle. Plusieurs réponses préconisent des solutions de sécurité et de nettoyage telles que Malwarebytes' Anti-Malware, CCleaner et l’analyse de rapports, afin d’identifier et supprimer les éléments malveillants présents sur le système. En pratique, il est recommandé de lancer une mise à jour des outils, puis d’effectuer un examen rapide avec MBAM et d’interroger les journaux, avant de procéder à des nettoyages et à des rapports. Par ailleurs, la suppression des extensions problématiques et la vérification des paramètres de sécurité du navigateur apparaissent comme des étapes utiles pour éviter les réinfections et les redirections.

Bobot (l’IA à votre service)
  1. Destrio5 Modérateur
    J'ai cherché mais rien de très probant.
    1. parcimonie1
      ok merci pour ton aide. plus de fenêtres qui s'ouvre ça fait du bien. bon courage à toi.
  2. Destrio5 Modérateur
    C'est un XP modifié ?
    1. parcimonie1 Auteur
      je ne sais pas ce n'est pas mon ordi ... désolée...
  3.  Destrio5 Modérateur
    Bonne soirée ;)
    1. parcimonie1 Auteur
      [ Rapport ToolsCleaner version 2.2.6 (par A.Rothstein & dj QUIOU) ]

      -->- Recherche:

      C:\fixnavi.txt: trouvé !
      C:\cleannavi.txt: trouvé !
      C:\TB.txt: trouvé !
      C:\_OtMoveIt: trouvé !
      C:\Toolbar SD: trouvé !
      C:\Rsit: trouvé !
      C:\Documents and Settings\A D E L I N E\Bureau\ToolBarSD.exe: trouvé !
      C:\Documents and Settings\A D E L I N E\Bureau\OTMoveIt3.exe: trouvé !
      C:\Documents and Settings\A D E L I N E\Bureau\Rsit.exe: trouvé !
      C:\Downloads\Navilog1.exe: trouvé !
      C:\Downloads\ToolBarSD.exe: trouvé !
      C:\Downloads\Rsit.exe: trouvé !
      C:\Program Files\Navilog1: trouvé !
      C:\Program Files\trend micro\HijackThis.exe: trouvé !
      C:\Program Files\trend micro\hijackthis.log: trouvé !

      ---------------------------------
      -->- Suppression:

      C:\Documents and Settings\A D E L I N E\Bureau\ToolBarSD.exe: supprimé !
      C:\Downloads\Navilog1.exe: supprimé !
      C:\Downloads\ToolBarSD.exe: supprimé !
      C:\Program Files\trend micro\HijackThis.exe: supprimé !
      C:\fixnavi.txt: supprimé !
      C:\cleannavi.txt: supprimé !
      C:\TB.txt: supprimé !
      C:\Documents and Settings\A D E L I N E\Bureau\OTMoveIt3.exe: supprimé !
      C:\Documents and Settings\A D E L I N E\Bureau\Rsit.exe: supprimé !
      C:\Downloads\Rsit.exe: supprimé !
      C:\Program Files\trend micro\hijackthis.log: supprimé !
      C:\_OtMoveIt: supprimé !
      C:\Toolbar SD: supprimé !
      C:\Rsit: supprimé !
      C:\Program Files\Navilog1: supprimé !
  4. Destrio5 Modérateur
    1/

    ---> Télécharge ToolsCleaner2 sur ton Bureau.
    * Double-clique sur ToolsCleaner2.exe pour le lancer.
    * Clique sur Recherche et laisse le scan agir.
    * Clique sur Suppression pour finaliser.
    * Tu peux, si tu le souhaites, te servir des Options Facultatives.
    * Clique sur Quitter pour obtenir le rapport.
    * Poste le rapport (TCleaner.txt) qui se trouve à la racine de ton disque dur (C:\).

    2/

    ---> Télécharge et installe CCleaner (N'installe pas la Yahoo Toolbar) :
    * Lance-le. Va dans Options puis Avancé et décoche la case Effacer uniquement les fichiers etc....
    * Va dans Nettoyeur, choisis Analyse. Une fois terminé, lance le nettoyage.
    * Ensuite, choisis Registre, puis Chercher des erreurs. Une fois terminé, répare toutes les erreurs (Sauvegarde la base de registre).

    3/

    ---> Il est nécessaire de désactiver puis réactiver la restauration système pour la purger :
    http://www.infos-du-net.com/forum/272480-11-desactiver-activer-restauration-systeme

    ---> Je te conseille de créer un point de restauration que tu pourras utiliser plus tard si tu as un problème :
    https://www.vulgarisation-informatique.com/creer-point-restauration.php

    4/

    ---> Par rapport au P2P :
    http://www.libellules.ch/...

    ---> Si tu veux faire un scan en ligne :
    https://www.malekal.com/scan-antivirus-ligne-nod32/#mozTocId291566

    ---> Tiens à jour Windows et tes logiciels.

    Sois plus viligant sur Internet ;)
    1. parcimonie1 Auteur
      --je te remerci, je ferai tout ça demain car je vais partir
      je te tiens au courant bonne soirée à toi

      parci  "Suis ton coeur, pour que ton visage brille durant le temps de ta vie"
  6. Destrio5 Modérateur
    Ton PC va comment ?
    1. parcimonie1 Auteur
      mon pc va beaucoup mieux, depuis ce matin pas de fenêtres intempestives merci
  7.  Destrio5 Modérateur
    ---> Relance ToolBar S&D, fais l'option 2 et poste le rapport.
    1. parcimonie1 Auteur
      -----------\\ ToolBar S&D 1.2.4 XP/Vista

      Microsoft Windows XP Professionnel ( v5.1.2600 ) Service Pack 2
      X86-based PC ( Uniprocessor Free : AMD Athlon(tm) 64 Processor 3200+ )
      BIOS : Phoenix - AwardBIOS v6.00PG
      USER : A D E L I N E ( Administrator )
      BOOT : Normal boot
      C:\ (Local Disk) - NTFS - Total:25 Go (Free:0 Go)
      D:\ (Local Disk) - NTFS - Total:115 Go (Free:42 Go)
      E:\ (Local Disk) - NTFS - Total:87 Go (Free:8 Go)
      F:\ (CD or DVD) - CDFS - Total:4 Go (Free:0 Go)
      G:\ (USB)
      H:\ (USB)
      I:\ (USB)
      J:\ (USB)

      "C:\ToolBar SD" ( MAJ : 27-10-2008|09:25 )
      Option : [2] ( 15/11/2008|23:03 )

      -----------\\ SUPPRESSION

      Supprime! - C:\Program Files\GamesBar\Localization2-French.ini
      Supprime! - C:\Program Files\GamesBar

      -----------\\ Recherche de Fichiers / Dossiers ...

      -----------\\ [..\Internet Explorer\Main]

      [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
      "Start Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome"
      "Search Bar"="https://actus.sfr.fr"
      "Local Page"="C:\\WINDOWS\\system32\\blank.htm"
      "Search Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"

      [HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
      "Default_Page_URL"="https://www.msn.com/fr-fr/?ocid=iehp"
      "Search Page"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
      "Start Page"="https://www.msn.com/fr-fr/"
      "Default_Search_URL"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"

      --------------------\\ Recherche d'autres infections

      --------------------\\ Cracks & Keygens ..

      C:\DOCUME~1\ADELIN~1\Bureau\2M.Arcade.Bubbles.v1.9.French.Incl.Keymaker-iNFECTED\keygen.jar
      C:\DOCUME~1\ADELIN~1\Favoris\CRACK.MS - All CRACKs and SERIALs on ONE Site.url

      1 - "C:\ToolBar SD\TB_1.txt" - 14/11/2008|14:42 - Option : [1]
      2 - "C:\ToolBar SD\TB_2.txt" - 14/11/2008|14:53 - Option : [2]
      3 - "C:\ToolBar SD\TB_3.txt" - 15/11/2008|22:59 - Option : [1]
      4 - "C:\ToolBar SD\TB_4.txt" - 15/11/2008|23:04 - Option : [2]

      -----------\\ Fin du rapport a 23:04:50,59

  8. Destrio5 Modérateur
    ---> Télécharge Toolbar S&D (Team IDN) sur ton Bureau.
    * Lance l'installation du programme en exécutant le fichier téléchargé.
    * Double-clique maintenant sur le raccourci de Toolbar S&D.
    * Sélectionne la langue souhaitée en tapant la lettre de ton choix puis en validant avec la touche Entrée.
    * Choisis maintenant l'option 1 (Recherche). Patiente jusqu'à la fin de la recherche.
    * Poste le rapport généré. (C:\TB.txt)
    1. parcimonie1 Auteur
      -----------\\ ToolBar S&D 1.2.4 XP/Vista

      Microsoft Windows XP Professionnel ( v5.1.2600 ) Service Pack 2
      X86-based PC ( Uniprocessor Free : AMD Athlon(tm) 64 Processor 3200+ )
      BIOS : Phoenix - AwardBIOS v6.00PG
      USER : A D E L I N E ( Administrator )
      BOOT : Normal boot
      C:\ (Local Disk) - NTFS - Total:25 Go (Free:0 Go)
      D:\ (Local Disk) - NTFS - Total:115 Go (Free:42 Go)
      E:\ (Local Disk) - NTFS - Total:87 Go (Free:8 Go)
      F:\ (CD or DVD) - CDFS - Total:4 Go (Free:0 Go)
      G:\ (USB)
      H:\ (USB)
      I:\ (USB)
      J:\ (USB)

      "C:\ToolBar SD" ( MAJ : 27-10-2008|09:25 )
      Option : [1] ( 15/11/2008|22:58 )

      -----------\\ Recherche de Fichiers / Dossiers ...

      C:\Program Files\GamesBar
      C:\Program Files\GamesBar\Localization2-French.ini

      -----------\\ [..\Internet Explorer\Main]

      [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
      "Start Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome"
      "Search Bar"="https://actus.sfr.fr"
      "Local Page"="C:\\WINDOWS\\system32\\blank.htm"
      "Search Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"

      [HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
      "Default_Page_URL"="https://www.msn.com/fr-fr/?ocid=iehp"
      "Search Page"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
      "Start Page"="https://www.msn.com/fr-fr"
      "Default_Search_URL"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"

      --------------------\\ Recherche d'autres infections

      --------------------\\ Cracks & Keygens ..

      C:\DOCUME~1\ADELIN~1\Bureau\2M.Arcade.Bubbles.v1.9.French.Incl.Keymaker-iNFECTED\keygen.jar
      C:\DOCUME~1\ADELIN~1\Favoris\CRACK.MS - All CRACKs and SERIALs on ONE Site.url

      1 - "C:\ToolBar SD\TB_1.txt" - 14/11/2008|14:42 - Option : [1]
      2 - "C:\ToolBar SD\TB_2.txt" - 14/11/2008|14:53 - Option : [2]
      3 - "C:\ToolBar SD\TB_3.txt" - 15/11/2008|22:59 - Option : [1]

      -----------\\ Fin du rapport a 22:59:32,57

  9. Destrio5 Modérateur
    ---> Relance MBAM, va dans Quarantaine et supprime tout.

    ---> Supprime le dossier RSIT situé dans C:\

    ---> Refais un scan RSIT et poste les deux rapports.
    1. parcimonie1 Auteur
      info.txt logfile of random's system information tool 1.04 2008-11-15 22:37:54

      ======Uninstall list======

      -->"C:\Program Files\Pack Securite\Uninstall\fsuninst.exe" /UninstRegKey:"F-Secure Anti-Spyware Scanner"
      -->"C:\Program Files\Pack Securite\Uninstall\fsuninst.exe" /UninstRegKey:"F-Secure Anti-Spyware"
      -->"C:\Program Files\Pack Securite\Uninstall\fsuninst.exe" /UninstRegKey:"F-Secure Anti-Virus Client Security Installer"
      -->"C:\Program Files\Pack Securite\Uninstall\fsuninst.exe" /UninstRegKey:"F-Secure Anti-Virus"
      -->"C:\Program Files\Pack Securite\Uninstall\fsuninst.exe" /UninstRegKey:"F-Secure Automatic Update Agent"
      -->"C:\Program Files\Pack Securite\Uninstall\fsuninst.exe" /UninstRegKey:"F-Secure DAAS"
      -->"C:\Program Files\Pack Securite\Uninstall\fsuninst.exe" /UninstRegKey:"F-Secure Diagnostics"
      -->"C:\Program Files\Pack Securite\Uninstall\fsuninst.exe" /UninstRegKey:"F-Secure E-mail Scanning"
      -->"C:\Program Files\Pack Securite\Uninstall\fsuninst.exe" /UninstRegKey:"F-Secure FWES"
      -->"C:\Program Files\Pack Securite\Uninstall\fsuninst.exe" /UninstRegKey:"F-Secure GateKeeper Interface"
      -->"C:\Program Files\Pack Securite\Uninstall\fsuninst.exe" /UninstRegKey:"F-Secure Gemini"
      -->"C:\Program Files\Pack Securite\Uninstall\fsuninst.exe" /UninstRegKey:"F-Secure GUI"
      -->"C:\Program Files\Pack Securite\Uninstall\fsuninst.exe" /UninstRegKey:"F-Secure Help"
      -->"C:\Program Files\Pack Securite\Uninstall\fsuninst.exe" /UninstRegKey:"F-Secure HIPS"
      -->"C:\Program Files\Pack Securite\Uninstall\fsuninst.exe" /UninstRegKey:"F-Secure Internet Shield"
      -->"C:\Program Files\Pack Securite\Uninstall\fsuninst.exe" /UninstRegKey:"F-Secure Localization API"
      -->"C:\Program Files\Pack Securite\Uninstall\fsuninst.exe" /UninstRegKey:"F-Secure Management Agent"
      -->"C:\Program Files\Pack Securite\Uninstall\fsuninst.exe" /UninstRegKey:"F-Secure Pegasus Engine"
      -->"C:\Program Files\Pack Securite\Uninstall\fsuninst.exe" /UninstRegKey:"F-Secure Protocol Scanner"
      -->"C:\Program Files\Pack Securite\Uninstall\fsuninst.exe" /UninstRegKey:"F-Secure Spam Control"
      -->"C:\Program Files\Pack Securite\Uninstall\fsuninst.exe" /UninstRegKey:"F-Secure Spam Scanner"
      -->"C:\Program Files\Pack Securite\Uninstall\fsuninst.exe" /UninstRegKey:"F-Secure TNB"
      -->"C:\Program Files\Pack Securite\Uninstall\fsuninst.exe" /UninstRegKey:"F-Secure Uninstall"
      -->"C:\Program Files\Pack Securite\Uninstall\fsuninst.exe" /UninstRegKey:"F-Secure Web Filter"
      -->C:\Program Files\Nero\Nero 7\nero\uninstall\UNNERO.exe /UNINSTALL
      -->C:\WINDOWS\UNRecode.exe /UNINSTALL
      -->rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf
      7000 Lettres et Courriers Types-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{1AB93ECB-2985-4CA8-807A-913AF340ABE8}\SETUP.EXE" -l0x40c
      Acronis True Image Home-->MsiExec.exe /X{419CF344-3D94-4DAD-99C8-EA7B00E5EA8B}
      Adobe Flash Player 9 Plugin-->MsiExec.exe /X{008F31A9-4B8E-4411-AA19-2CB3C8DD7507}
      Adobe Flash Player ActiveX-->C:\WINDOWS\system32\Macromed\Flash\uninstall_activeX.exe
      Adobe Reader 9 - Français-->MsiExec.exe /I{AC76BA86-7AD7-1036-7B44-A90000000001}
      Adobe Shockwave Player-->MsiExec.exe /X{A7DB362E-16DC-4E29-8A34-E74381E00B5B}
      Agatha Christie Death on the Nile-->"C:\Program Files\Gamenext\Agatha Christie Death on the Nile\Uninstall.exe" "C:\Program Files\Gamenext\Agatha Christie Death on the Nile\install.log"
      Agatha Christie Peril at End House-->"C:\Program Files\Gamenext\Agatha Christie Peril at End House\Uninstall.exe" "C:\Program Files\Gamenext\Agatha Christie Peril at End House\install.log"
      Analyseur MSXML 6.0-->MsiExec.exe /I{5903C48B-E953-47B8-A651-B9222C483057}
      AnyDVD-->"C:\Program Files\SlySoft\AnyDVD\AnyDVD-uninst.exe" /D="C:\Program Files\SlySoft\AnyDVD"
      Archiveur WinRAR-->C:\Program Files\WinRAR\uninstall.exe
      Arthur-->MsiExec.exe /X{B1A295B9-342B-482B-96F3-FD644B3C2963}
      ASUS Enhanced Display Driver-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\11\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{315ACD04-BCEB-478B-9B1D-5431D0E6CB11}\setup.exe" -l0x40c -removeonly
      ASUS nVIDIA Driver-->C:\PROGRA~1\FICHIE~1\INSTAL~1\Driver\9\INTEL3~1\IDriver.exe /M{3C3B2C97-0DAB-482F-9C95-6610827210E3} /l1036
      Bejeweled 2 Deluxe-->"C:\Program Files\Bejeweled 2 Deluxe\ReflexiveArcade\unins000.exe"
      BitComet 1.00-->C:\Program Files\BitComet\uninst.exe
      CCleaner (remove only)-->"C:\Program Files\CCleaner\uninst.exe"
      Chicken Shoot 2 (remove only)-->"D:\L E S J E U X\CHICKEN SHOOT 2\Uninstall.exe"
      Client Windows Rights Management avec Service Pack 2-->MsiExec.exe /X{1D13221B-42DE-4B3C-A43F-0F6AF3CF3DA2}
      Codec Pack de ELISOFT v14.0-->C:\Program Files\Codec Pack de ELISOFT\uninstal.exe
      Collection Microsoft Encarta 2006 DVD-->MsiExec.exe /I{06180081-3E21-46D6-9A91-D927BA08F41D}
      CueClub Patch-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{B3C9D983-55A2-11D4-9D68-0020781864F1}\setup.exe"
      CueClub-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\ctor.dll,LaunchSetup "D:\L E S J E U X\CUE CLUB\setup.exe"
      Dictionnaire des prénoms-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{3FBD76E5-E422-11D5-B8D1-000102A5FE5B}\SETUP.EXE"
      Diskeeper Professional Edition-->MsiExec.exe /X{DE4847A9-E86B-4BBB-B991-58C5ACA4FA04}
      Dream Pinball 3D-->D:\LESJEU~1\DREAMP~1\Unwise.exe /U D:\LESJEU~1\DREAMP~1\install.log
      DVD Shrink 3.2-->"C:\Program Files\DVD Shrink\unins000.exe"
      eMule-->"E:\FILMS\EMULE\Uninstall.exe"
      Eragon-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\11\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{322F75E0-71A3-4125-8EB3-761834EDC166}\setup.exe" -l0x40c -removeonly
      EVEREST Ultimate Edition v3.50-->"C:\Program Files\Lavalys\EVEREST Ultimate Edition\unins000.exe"
      Fable - The Lost Chapters-->C:\PROGRA~1\FICHIE~1\INSTAL~1\Driver\1050\INTEL3~1\IDriver.exe /M{C3C9EB3D-24FA-4462-B784-0EC6AAFCD2DD}
      Google Toolbar for Internet Explorer-->MsiExec.exe /I{DBEA1034-5882-4A88-8033-81C4EF0CFA29}
      Google Toolbar for Internet Explorer-->regsvr32 /u /s "c:\program files\google\googletoolbar1.dll"
      Harry Potter and the Order of the Phoenix™-->D:\L E S J E U X\HARRY POTTER\EAUninstall.exe
      HijackThis 2.0.2-->"C:\Program Files\trend micro\HijackThis.exe" /uninstall
      Hotfix for Windows Media Format 11 SDK (KB929399)-->"C:\WINDOWS\$NtUninstallKB929399$\spuninst\spuninst.exe"
      Infinite Patience v2.2-->"C:\WINDOWS\UNISTB32.EXE" /U "C:\Program Files\Games\Patience\UNINST0.000" "C:\Program Files\Games\Patience\UNINST1.000"
      Java(TM) 6 Update 10-->MsiExec.exe /X{26A24AE4-039D-4CA4-87B4-2F83216010FF}
      Kyodai Mahjongg 2006 v1.42-->"C:\Program Files\Kyodai Mahjongg 2006\unins000.exe"
      Kyodai Mahjongg fr-->"C:\Program Files\BoontyGames\Kyodai Mahjongg\unins000.exe"
      L&H TTS3000 Français-->RunDll32 advpack.dll,LaunchINFSection C:\WINDOWS\INF\LHTTSFRF.inf, Uninstall
      Logitech Desktop Messenger-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{900B1197-53F5-4F46-A882-2CFFFE2EEDCB}\Setup.exe" -l0x40c UNINSTALL
      Logitech Print Service-->C:\PROGRA~1\Logitech\PRINTS~1\UNWISE.EXE C:\PROGRA~1\Logitech\PRINTS~1\INSTALL.LOG
      Logitech QuickCam-->MsiExec.exe /I{A488D63E-B3DD-4423-892F-2F2EC8909518}
      Logitech SetPoint-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{2E8EAC71-BFE4-417A-88F0-5A1BDFBCF5D3}\setup.exe" -l0x40c
      Macromedia Shockwave Player-->C:\WINDOWS\system32\Macromed\SHOCKW~1\UNWISE.EXE C:\WINDOWS\system32\Macromed\SHOCKW~1\Install.log
      Malwarebytes' Anti-Malware-->"C:\Program Files\Malwarebytes' Anti-Malware\unins000.exe"
      MasterCook 5 : LGLC-->C:\WINDOWS\IsUn040c.exe -f"d:\a p p l i c a t i o n s\LAROUSSE CUISINE\SIERRA\MasterCook 5\Uninst.isu" -c"d:\a p p l i c a t i o n s\LAROUSSE CUISINE\SIERRA\MasterCook 5\uninst32.DLL"
      Media Player Classic fr-->"C:\Program Files\Media Player Classic\uninstall.exe"
      MediaLife -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{362BFFCD-8274-11D8-97C8-000129760CBE}\setup.exe" -uninstall
      Microsoft .NET Framework 1.1 Hotfix (KB928366)-->"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\hotfix.exe" "C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\M928366\M928366Uninstall.msp"
      Microsoft .NET Framework 1.1-->msiexec.exe /X {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
      Microsoft .NET Framework 1.1-->MsiExec.exe /X{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
      Microsoft .NET Framework 2.0-->C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.exe
      Microsoft .NET Framework 3.0 French Language Pack-->MsiExec.exe /X{E3C080B0-23F5-49AF-89F8-8E8DBC89E659}
      Microsoft .NET Framework 3.0-->C:\WINDOWS\Microsoft.NET\Framework\v3.0\Microsoft .NET Framework 3.0\setup.exe
      Microsoft .NET Framework 3.0-->MsiExec.exe /X{15095BF3-A3D7-4DDF-B193-3A496881E003}
      Microsoft AutoRoute 2006-->MsiExec.exe /I{83ED1E80-A1B7-4236-BCF1-AC4A88151A6B}
      Microsoft Office PowerPoint Viewer 2003-->MsiExec.exe /X{90AF040C-6000-11D3-8CFE-0150048383C9}
      Microsoft Office Professional Edition 2003-->MsiExec.exe /I{9011040C-6000-11D3-8CFE-0150048383C9}
      Microsoft RalliSport Challenge-->"D:\L E S J E U X\RALLISPORT CHALLENGE\UNINSTAL.EXE" /runtemp /addremove
      Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{A49F249F-0C91-497F-86DF-B2585E8E76B7}
      Microsoft Windows Media Video 9 VCM-->RunDll32 advpack.dll,LaunchINFSection C:\WINDOWS\INF\wmv9vcm.inf, Uninstall
      Mise à jour de sécurité pour Windows Internet Explorer 7 (KB929969)-->"C:\WINDOWS\ie7updates\KB929969\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows Internet Explorer 7 (KB933566)-->"C:\WINDOWS\ie7updates\KB933566-IE7\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB918118)-->"C:\WINDOWS\$NtUninstallKB918118$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB924667)-->"C:\WINDOWS\$NtUninstallKB924667$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB925902)-->"C:\WINDOWS\$NtUninstallKB925902$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB926436)-->"C:\WINDOWS\$NtUninstallKB926436$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB927779)-->"C:\WINDOWS\$NtUninstallKB927779$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB927802)-->"C:\WINDOWS\$NtUninstallKB927802$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB928255)-->"C:\WINDOWS\$NtUninstallKB928255$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB928843)-->"C:\WINDOWS\$NtUninstallKB928843$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB929123)-->"C:\WINDOWS\$NtUninstallKB929123$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB930178)-->"C:\WINDOWS\$NtUninstallKB930178$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB931261)-->"C:\WINDOWS\$NtUninstallKB931261$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB931784)-->"C:\WINDOWS\$NtUninstallKB931784$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB932168)-->"C:\WINDOWS\$NtUninstallKB932168$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB935839)-->"C:\WINDOWS\$NtUninstallKB935839$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB935840)-->"C:\WINDOWS\$NtUninstallKB935840$\spuninst\spuninst.exe"
      Mise à jour pour Windows XP (KB925720)-->"C:\WINDOWS\$NtUninstallKB925720$\spuninst\spuninst.exe"
      Mise à jour pour Windows XP (KB927891)-->"C:\WINDOWS\$NtUninstallKB927891$\spuninst\spuninst.exe"
      Mise à jour pour Windows XP (KB930916)-->"C:\WINDOWS\$NtUninstallKB930916$\spuninst\spuninst.exe"
      Mise à jour pour Windows XP (KB931836)-->"C:\WINDOWS\$NtUninstallKB931836$\spuninst\spuninst.exe"
      Module de prise en charge linguistique de Microsoft .NET Framework 2.0 - FRA-->C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0 Language Pack - FRA\install.exe
      Module de prise en charge linguistique du français de Microsoft .NET Framework 3.0-->C:\WINDOWS\Microsoft.NET\Framework\v3.0\Microsoft .NET Framework 3.0 French Language Pack\setup.exe
      MSXML 4.0 SP2 (KB927978)-->MsiExec.exe /I{37477865-A3F1-4772-AD43-AAFC6BCFF99F}
      Nero 7 Premium-->MsiExec.exe /I{4908C75E-E5E2-43F7-B1DF-023CBA831036}
      Neuf - Kit de connexion-->C:\Program Files\Neuf\Kit\uninstall.exe
      NVIDIA Drivers-->C:\WINDOWS\system32\nvudisp.exe UninstallGUI
      Oblivion-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\11\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{35CB6715-41F8-4F99-8881-6FC75BF054B0}\setup.exe" -l0x40c -removeonly
      Pack Securite Plus-->"C:\Program Files\Pack Securite\FSGUI\PostInstall.exe" /tUnInstall
      Paint Shop Pro 7 Anniversary Edition-->MsiExec.exe /I{D6DE02C7-1F47-11D4-9515-00105AE4B89A}
      PowerDVD-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{6811CAA0-BF12-11D4-9EA1-0050BAE317E1}\Setup.exe" -uninstall
      Programme de gestion Camera de Logitech®-->"C:\Program Files\Fichiers communs\Logitech\QCDRV\BIN\SETUP.EXE" UNINSTALL REMOVEPROMPT
      QuickTime-->MsiExec.exe /I{08094E03-AFE4-4853-9D31-6D0743DF5328}
      Realtek AC'97 Audio-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{FB08F381-6533-4108-B7DD-039E11FBC27E}\setup.exe" REMOVE
      SCRABBLE® 2005 EDITION-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{29031977-EF5E-446E-B3E1-E66B6FA3895E}\setup.exe" -l0x40c
      Security Update pour Microsoft .NET Framework 2.0 (KB928365)-->C:\WINDOWS\system32\msiexec.exe /promptrestart /uninstall {8056AC9E-49C5-4375-9ADE-B2F862C9DF51} /package {7131646D-CD3C-40F4-97B9-CD9E4E6262EF}
      Spybot - Search & Destroy 1.4-->"C:\Program Files\Spybot - Search & Destroy\unins000.exe"
      Sudoku-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{AB8D38CE-55A2-4EB8-8137-198D5C07D444}\SETUP.EXE" -l0x40c
      SystemControl-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{01A5670D-32F0-4F86-AB9B-C52984C99EF5}\setup.exe"
      Tests de QI-->C:\WINDOWS\ISUN040C.EXE -f"d:\a p p l i c a t i o n s\test de qi\Uninst.isu" -c"d:\a p p l i c a t i o n s\test de qi\Uninst.dll"
      Tux Racer-->C:\PROGRA~1\FICHIE~1\INSTAL~1\Driver\7\INTEL3~1\IDriver.exe /M{F49F7B74-71A2-44C2-AB2B-F02812B409BD} /l1036
      Wallpaper-->C:\Program Files\Wallpaper\uninst.exe
      Windows Communication Foundation-->MsiExec.exe /X{491DD792-AD81-429C-9EB4-86DD3D22E333}
      Windows Imaging Component-->"C:\WINDOWS\$NtUninstallWIC$\spuninst\spuninst.exe"
      Windows Live Messenger-->MsiExec.exe /I{F6326B60-1B1D-4ABF-BFCD-7B7404F44411}
      Windows Live Sign-in Assistant-->MsiExec.exe /I{49672EC2-171B-47B4-8CE7-50D7806360D7}
      Windows Presentation Foundation Language Pack (FRA)-->MsiExec.exe /X{6901DD22-527A-41EF-9059-E81FEDE9E494}
      Windows Presentation Foundation-->MsiExec.exe /X{BAF78226-3200-4DB4-BE33-4D922A799840}
      Windows Workflow Foundation FR Language Pack-->MsiExec.exe /I{B84C141C-9A13-44BE-9A69-301D7B11D836}
      Windows Workflow Foundation-->MsiExec.exe /I{7D1B85BD-AA07-48B8-808D-67A4067FC6BD}
      XML Paper Specification Shared Components Language Pack 1.0-->"C:\WINDOWS\$NtUninstallXPSEPSCLP$\spuninst\spuninst.exe"
      XP Codec Pack-->C:\Program Files\XP Codec Pack\Uninstall.exe
      xp-AntiSpy 3.96-2-->C:\Program Files\xp-AntiSpy\Uninstall.exe

      Securitycenter WMI appears to be broken

      ======Environment variables======

      "ComSpec"=%SystemRoot%\system32\cmd.exe
      "Path"=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\system32\WindowsPowerShell\v1.0;C:\Program Files\Diskeeper Corporation\Diskeeper\;C:\Program Files\QuickTime\QTSystem\
      "windir"=%SystemRoot%
      "FP_NO_HOST_CHECK"=NO
      "OS"=Windows_NT
      "PROCESSOR_ARCHITECTURE"=x86
      "PROCESSOR_LEVEL"=15
      "PROCESSOR_IDENTIFIER"=x86 Family 15 Model 47 Stepping 2, AuthenticAMD
      "PROCESSOR_REVISION"=2f02
      "NUMBER_OF_PROCESSORS"=1
      "PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.PSC1
      "TEMP"=%SystemRoot%\TEMP
      "TMP"=%SystemRoot%\TEMP
      "DEVMGR_SHOW_DETAILS"=1
      "CLASSPATH"=.;C:\Program Files\Java\jre1.6.0\lib\ext\QTJava.zip
      "QTJAVA"=C:\Program Files\Java\jre1.6.0\lib\ext\QTJava.zip

      -----------------EOF-----------------

      Logfile of random's system information tool 1.04 (written by random/random)
      Run by A D E L I N E at 2008-11-15 22:37:48
      Microsoft Windows XP Professionnel Service Pack 2
      System drive C: has 343 MB (1%) free of 26 GB
      Total RAM: 1023 MB (41% free)

      Logfile of Trend Micro HijackThis v2.0.2
      Scan saved at 22:37:52, on 15/11/2008
      Platform: Windows XP SP2 (WinNT 5.01.2600)
      MSIE: Internet Explorer v7.00 (7.00.6000.16473)
      Boot mode: Normal

      Running processes:
      C:\WINDOWS\System32\smss.exe
      C:\WINDOWS\system32\winlogon.exe
      C:\WINDOWS\system32\services.exe
      C:\WINDOWS\system32\lsass.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\Explorer.EXE
      C:\WINDOWS\system32\spoolsv.exe
      C:\Program Files\Fichiers communs\Acronis\Schedule2\schedul2.exe
      C:\WINDOWS\ATKKBService.exe
      C:\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe
      C:\Program Files\Pack Securite\Anti-Virus\fsgk32st.exe
      C:\Program Files\Pack Securite\Common\FSMA32.EXE
      C:\Program Files\Pack Securite\Anti-Virus\FSGK32.EXE
      C:\Program Files\Pack Securite\Common\FSMB32.EXE
      C:\Program Files\Java\jre6\bin\jqs.exe
      C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
      C:\WINDOWS\system32\nvsvc32.exe
      C:\Program Files\CyberLink\Shared files\RichVideo.exe
      C:\WINDOWS\system32\svchost.exe
      C:\Program Files\Pack Securite\Common\FCH32.EXE
      C:\Program Files\Pack Securite\Anti-Virus\fssm32.exe
      C:\Program Files\Pack Securite\FSAUA\program\fsaua.exe
      C:\Program Files\Pack Securite\Anti-Virus\fsqh.exe
      C:\Program Files\Pack Securite\Common\FAMEH32.EXE
      C:\Program Files\Pack Securite\FWES\Program\fsdfwd.exe
      C:\Program Files\Pack Securite\FSPC\fspc.exe
      C:\Program Files\Pack Securite\FSAUA\program\fsus.exe
      C:\Program Files\Pack Securite\Anti-Virus\fsav32.exe
      C:\WINDOWS\System32\svchost.exe
      C:\Program Files\Acronis\TrueImageHome\TrueImageMonitor.exe
      C:\Program Files\Fichiers communs\Acronis\Schedule2\schedhlp.exe
      C:\Program Files\Acronis\TrueImageHome\TimounterMonitor.exe
      C:\Program Files\Pack Securite\Common\FSM32.EXE
      C:\Program Files\QuickTime\qttask.exe
      C:\WINDOWS\system32\wbem\wmiapsrv.exe
      C:\Program Files\Logitech\Video\LogiTray.exe
      C:\Program Files\Pack Securite\FSGUI\fsguidll.exe
      C:\WINDOWS\system32\LVComS.exe
      C:\Program Files\Java\jre6\bin\jusched.exe
      C:\WINDOWS\system32\ctfmon.exe
      C:\Program Files\Wallpaper\Wallpaper.exe
      C:\Program Files\SlySoft\AnyDVD\AnyDVD.exe
      C:\Program Files\MSN Messenger\msnmsgr.exe
      C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BackWeb-8876480.exe
      C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe
      C:\Program Files\Logitech\SetPoint\KEM.exe
      C:\Program Files\Logitech\SetPoint\KHALMNPR.EXE
      C:\Program Files\Internet Explorer\IEXPLORE.EXE
      C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
      C:\Program Files\BitComet\BitComet.exe
      C:\WINDOWS\explorer.exe
      C:\PROGRA~1\Logitech\Video\FxSvr2.exe
      C:\Documents and Settings\A D E L I N E\Bureau\RSIT.exe
      C:\Program Files\trend micro\A D E L I N E.exe

      R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://actus.sfr.fr
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
      R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr
      R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://www.google.fr/search?q=%s
      R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
      O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
      O2 - BHO: BitComet ClickCapture - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - C:\Program Files\BitComet\tools\BitCometBHO_1.2.2.28.dll
      O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
      O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
      O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
      O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
      O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
      O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
      O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
      O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
      O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
      O4 - HKLM\..\Run: [DiskeeperSystray] "C:\Program Files\Diskeeper Corporation\Diskeeper\DkIcon.exe"
      O4 - HKLM\..\Run: [TrueImageMonitor.exe] C:\Program Files\Acronis\TrueImageHome\TrueImageMonitor.exe
      O4 - HKLM\..\Run: [AcronisTimounterMonitor] C:\Program Files\Acronis\TrueImageHome\TimounterMonitor.exe
      O4 - HKLM\..\Run: [Acronis Scheduler2 Service] "C:\Program Files\Fichiers communs\Acronis\Schedule2\schedhlp.exe"
      O4 - HKLM\..\Run: [Logitech Hardware Abstraction Layer] KHALMNPR.EXE
      O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\Pack Securite\Common\FSM32.EXE" /splash
      O4 - HKLM\..\Run: [F-Secure TNB] "C:\Program Files\Pack Securite\FSGUI\TNBUtil.exe" /CHECKALL /WAITFORSW
      O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
      O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe
      O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe
      O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
      O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
      O4 - HKLM\..\RunOnce: [Malwarebytes' Anti-Malware] C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe /install /silent
      O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
      O4 - HKCU\..\Run: [Wallpaper] "C:\Program Files\Wallpaper\Wallpaper.exe" Starter
      O4 - HKCU\..\Run: [AnyDVD] C:\Program Files\SlySoft\AnyDVD\AnyDVD.exe
      O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
      O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BackWeb-8876480.exe
      O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe
      O4 - HKUS\S-1-5-19\..\RunOnce: [nltide1] cmd.exe /C move /Y "%SystemRoot%\System32\syssetub.dll" "%SystemRoot%\System32\syssetup.dll" (User 'SERVICE LOCAL')
      O4 - HKUS\S-1-5-19\..\RunOnce: [nltide2] cmd.exe /C rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,L,,4,N (User 'SERVICE LOCAL')
      O4 - HKUS\S-1-5-20\..\RunOnce: [nltide1] cmd.exe /C move /Y "%SystemRoot%\System32\syssetub.dll" "%SystemRoot%\System32\syssetup.dll" (User 'SERVICE RÉSEAU')
      O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
      O4 - Global Startup: Logitech SetPoint.lnk = C:\Program Files\Logitech\SetPoint\KEM.exe
      O8 - Extra context menu item: &D&ownload &with BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddLink.htm
      O8 - Extra context menu item: &D&ownload all video with BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddVideo.htm
      O8 - Extra context menu item: &D&ownload all with BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddAllLink.htm
      O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
      O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre6\bin\jp2iexp.dll
      O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre6\bin\jp2iexp.dll
      O9 - Extra button: Parental... - {200DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\Pack Securite\FSPC\fspcmsie.dll
      O9 - Extra button: (no name) - {200DB664-75B5-47c0-8B45-A44ACCF73F01} - C:\Program Files\Pack Securite\FSPC\fspcmsie.dll
      O9 - Extra 'Tools' menuitem: Parental... - {200DB664-75B5-47c0-8B45-A44ACCF73F01} - C:\Program Files\Pack Securite\FSPC\fspcmsie.dll
      O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
      O9 - Extra button: (no name) - {B205A35E-1FC4-4CE3-818B-899DBBB3388C} - C:\Program Files\Fichiers communs\Microsoft Shared\Encarta Search Bar\ENCSBAR.DLL
      O9 - Extra button: BitComet - {D18A0B52-D63C-4ed0-AFC6-C1E3DC1AF43A} - res://C:\Program Files\BitComet\tools\BitCometBHO_1.2.2.28.dll/206 (file missing)
      O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
      O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
      O9 - Extra button: (no name) - cmdmapping - (no file) (HKCU)
      O23 - Service: Acronis Scheduler2 Service (AcrSch2Svc) - Acronis - C:\Program Files\Fichiers communs\Acronis\Schedule2\schedul2.exe
      O23 - Service: ATK Keyboard Service (ATKKeyboardService) - ASUSTeK COMPUTER INC. - C:\WINDOWS\ATKKBService.exe
      O23 - Service: Diskeeper - Diskeeper Corporation - C:\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe
      O23 - Service: FSGKHS (F-Secure Gatekeeper Handler Starter) - F-Secure Corporation - C:\Program Files\Pack Securite\Anti-Virus\fsgk32st.exe
      O23 - Service: F-Secure Automatic Update Agent (FSAUA) - F-Secure Corporation - C:\Program Files\Pack Securite\FSAUA\program\fsaua.exe
      O23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - F-Secure Corporation - C:\Program Files\Pack Securite\FWES\Program\fsdfwd.exe
      O23 - Service: F-Secure Management Agent (FSMA) - F-Secure Corporation - C:\Program Files\Pack Securite\Common\FSMA32.EXE
      O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
      O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
      O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
      O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
      O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared files\RichVideo.exe
  10. Destrio5 Modérateur
    Le rapport n'est pas complet, peux-tu me l'envoyer sur destrio5@free.fr ?
    1. parcimonie1 Auteur
      --bonsoir
      le rapport est partis sur ton adresse mail
      merci

      parci  "Suis ton coeur, pour que ton visage brille durant le temps de ta vie"
  11. Destrio5 Modérateur
    ---> Télécharge Malwarebytes' Anti-Malware (MBAM) sur ton Bureau.
    ---> Double-clique sur le fichier téléchargé pour lancer le processus d'installation.
    ---> Dans l'onglet Mise à jour, clique sur le bouton Recherche de mise à jour : si le pare-feu demande l'autorisation à MBAM de se connecter à Internet, accepte.
    ---> Une fois la mise à jour terminée, rends-toi dans l'onglet Recherche.
    ---> Sélectionne Exécuter un examen rapide.
    ---> Clique sur Rechercher. L'analyse démarre.

    A la fin de l'analyse, un message s'affiche :

    L'examen s'est terminé normalement. Cliquez sur 'Afficher les résultats' pour afficher tous les objets trouvés.

    ---> Clique sur OK pour poursuivre. Si MBAM n'a rien trouvé, il te le dira aussi.
    ---> Ferme tes navigateurs.
    Si des malwares ont été détectés, clique sur Afficher les résultats.
    ---> Sélectionne tout (ou laisse coché) et clique sur Supprimer la sélection, MBAM va détruire les fichiers et clés de registre infectés et en mettre une copie dans la quarantaine.
    ---> MBAM va ouvrir le Bloc-notes et y copier le rapport d'analyse. Copie-colle ce rapport dans ta prochaine réponse.
    1. parcimonie1 Auteur
      Malwarebytes' Anti-Malware 1.30
      Version de la base de données: 1400
      Windows 5.1.2600 Service Pack 2

      15/11/2008 20:27:39
      mbam-log-2008-11-15 (20-27-39).txt

      Type de recherche: Examen rapide
      Eléments examinés: 52369
      Temps écoulé: 4 minute(s), 55 second(s)

      Processus mémoire infecté(s): 0
      Module(s) mémoire infecté(s): 0
      Clé(s) du Registre infectée(s): 3
      Valeur(s) du Registre infectée(s): 0
      Elément(s) de données du Registre infecté(s): 0
      Dossier(s) infecté(s): 34
      Fichier(s) infecté(s): 525

      Processus mémoire infecté(s):
      (Aucun élément nuisible détecté)

      Module(s) mémoire infecté(s):
      (Aucun élément nuisible détecté)

      Clé(s) du Registre infectée(s):
      HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{100eb1fd-d03e-47fd-81f3-ee91287f9465} (Adware.Shopping.Report) -> Quarantined and deleted successfully.
      HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{54a3f8b7-228e-4ed8-895b-de832b2c3959} (Adware.Zango) -> Quarantined and deleted successfully.
      HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\2m arcade bubbles (Adware.WebHancer) -> Quarantined and deleted successfully.

      Valeur(s) du Registre infectée(s):
      (Aucun élément nuisible détecté)

      Elément(s) de données du Registre infecté(s):
      (Aucun élément nuisible détecté)

      Dossier(s) infecté(s):
      C:\Program Files\2M Games (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\2M.Arcade.Bubbles.v1.9.French.Incl.Keymaker-iNFECTED (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\help (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\help\2M.Arcade.Bubbles.v1.9.French.Incl.Keymaker-iNFECTED (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\bin (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\bin\client (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\applet (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\audio (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\cmm (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\ext (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\fonts (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\i386 (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\images (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\images\cursors (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\security (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\Africa (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\America (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\America\Indiana (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\America\Kentucky (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\America\North_Dakota (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\Antarctica (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\Asia (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\Atlantic (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\Australia (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\Etc (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\Europe (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\Indian (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\Pacific (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\music (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\skins (Adware.WebHancer) -> Quarantined and deleted successfully.

      Fichier(s) infecté(s):
      C:\Program Files\2M Games\Arcade Bubbles\bubbles.jar (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\config.2mb (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\hs_err_pid1272.log (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\hs_err_pid1452.log (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\hs_err_pid1572.log (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\hs_err_pid1636.log (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\hs_err_pid1756.log (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\hs_err_pid1840.log (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\hs_err_pid1864.log (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\hs_err_pid2300.log (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\hs_err_pid2736.log (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\hs_err_pid2964.log (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\hs_err_pid3156.log (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\hs_err_pid3372.log (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\hs_err_pid3500.log (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\hs_err_pid3532.log (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\hs_err_pid3708.log (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\hs_err_pid3740.log (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\hs_err_pid3772.log (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\hs_err_pid3860.log (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\hs_err_pid3892.log (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\hs_err_pid3896.log (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\hs_err_pid3900.log (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\hs_err_pid3964.log (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\hs_err_pid4004.log (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\hs_err_pid4164.log (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\hs_err_pid512.log (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\hs_err_pid536.log (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\hs_err_pid956.log (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\LicenseFR.txt (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\ReadmeFR.txt (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\scores.2mb (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\uninstall.exe (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\uninstall.ini (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\2M.Arcade.Bubbles.v1.9.French.Incl.Keymaker-iNFECTED\File_id.diz (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\2M.Arcade.Bubbles.v1.9.French.Incl.Keymaker-iNFECTED\iNFECTED.nfo (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\2M.Arcade.Bubbles.v1.9.French.Incl.Keymaker-iNFECTED\keygen.jar (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\help\buttonEasy.gif (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\help\buttonExit.gif (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\help\buttonFullscreen.gif (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\help\buttonHard.gif (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\help\buttonHelp.gif (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\help\buttonHexagon.gif (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\help\buttonHint.gif (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\help\buttonMusic.gif (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\help\buttonNormal.gif (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\help\buttonPlay.gif (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\help\buttonRegister.gif (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\help\buttonSounds.gif (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\help\buttonSquare.gif (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\help\cd.gif (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\help\cdBubbles.gif (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\help\dotIcon.gif (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\help\help.htm (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\help\register.htm (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\help\2M.Arcade.Bubbles.v1.9.French.Incl.Keymaker-iNFECTED\File_id.diz (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\help\2M.Arcade.Bubbles.v1.9.French.Incl.Keymaker-iNFECTED\iNFECTED.nfo (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\help\2M.Arcade.Bubbles.v1.9.French.Incl.Keymaker-iNFECTED\keygen.jar (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\bin\awt.dll (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\bin\fontmanager.dll (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\bin\game.ico (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\bin\hpi.dll (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\bin\java.dll (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\bin\javaw.exe (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\bin\jpeg.dll (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\bin\jsound.dll (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\bin\msvcrt.dll (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\bin\verify.dll (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\bin\zip.dll (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\bin\client\jvm.dll (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\bin\client\Xusage.txt (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\content-types.properties (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\flavormap.properties (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\font.properties (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\font.properties.CP1250 (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\font.properties.CP1251 (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\font.properties.CP1253 (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\font.properties.CP1254 (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\font.properties.CP1256 (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\font.properties.CP1257 (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\font.properties.GB18030 (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\font.properties.hi (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\font.properties.iw (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\font.properties.ja (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\font.properties.ko (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\font.properties.ru (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\font.properties.th (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\font.properties.zh (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\font.properties.zh.NT (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\font.properties.zh_TW (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\font.properties.zh_TW.95 (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\jawt.lib (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\jvm.hprof.txt (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\jvm.jcov.txt (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\logging.properties (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\psfont.properties.ja (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\psfontj2d.properties (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\rt.jar (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\sunrsasign.jar (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\tzmappings (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\audio\soundbank.gm (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\cmm\CIEXYZ.pf (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\cmm\GRAY.pf (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\cmm\LINEAR_RGB.pf (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\cmm\sRGB.pf (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\fonts\LucidaSansRegular.ttf (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\i386\jvm.cfg (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\images\cursors\cursors.properties (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\images\cursors\invalid32x32.gif (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\images\cursors\win32_CopyDrop32x32.gif (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\images\cursors\win32_CopyNoDrop32x32.gif (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\images\cursors\win32_LinkDrop32x32.gif (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\images\cursors\win32_LinkNoDrop32x32.gif (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\images\cursors\win32_MoveDrop32x32.gif (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\images\cursors\win32_MoveNoDrop32x32.gif (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\security\cacerts (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\security\java.policy (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\security\java.security (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\security\local_policy.jar (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\security\US_export_policy.jar (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\CET (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\EET (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\GMT (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\MET (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\WET (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\ZoneInfoMappings (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\Africa\Abidjan (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\Africa\Accra (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\Africa\Addis_Ababa (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\Africa\Algiers (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\Africa\Asmera (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\Africa\Bamako (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\Africa\Bangui (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\Africa\Banjul (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\Africa\Bissau (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\Africa\Blantyre (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\Africa\Brazzaville (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\Africa\Bujumbura (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\Africa\Cairo (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\Africa\Casablanca (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\Africa\Ceuta (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\Africa\Conakry (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\Africa\Dakar (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\Africa\Dar_es_Salaam (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\Africa\Djibouti (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\Africa\Douala (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\Africa\El_Aaiun (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\Africa\Freetown (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\Africa\Gaborone (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\Africa\Harare (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\Africa\Johannesburg (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\Africa\Kampala (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\Africa\Khartoum (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\Africa\Kigali (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\Africa\Kinshasa (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\Africa\Lagos (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\Africa\Libreville (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\Africa\Lome (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\Africa\Luanda (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\Africa\Lubumbashi (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\Africa\Lusaka (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\Africa\Malabo (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\Africa\Maputo (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\Africa\Maseru (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\Africa\Mbabane (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\Africa\Mogadishu (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\Africa\Monrovia (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\Africa\Nairobi (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\Africa\Ndjamena (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\Africa\Niamey (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\Africa\Nouakchott (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\Africa\Ouagadougou (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\Africa\Porto-Novo (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\Africa\Sao_Tome (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\Africa\Timbuktu (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\Africa\Tripoli (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\Africa\Tunis (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\Africa\Windhoek (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\America\Adak (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\America\Anchorage (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\America\Anguilla (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\America\Antigua (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\America\Araguaina (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\America\Aruba (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\America\Asuncion (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\America\Barbados (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\America\Belem (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\America\Belize (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\America\Boa_Vista (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\America\Bogota (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\America\Boise (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\America\Buenos_Aires (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\America\Cambridge_Bay (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\America\Cancun (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\America\Caracas (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\America\Catamarca (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\America\Cayenne (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\America\Cayman (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\America\Chicago (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\America\Chihuahua (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\America\Cordoba (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\America\Costa_Rica (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\America\Cuiaba (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\America\Curacao (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\America\Danmarkshavn (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\America\Dawson (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\America\Dawson_Creek (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\America\Denver (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\America\Detroit (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\America\Dominica (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\America\Edmonton (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\America\Eirunepe (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\America\El_Salvador (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\America\Fortaleza (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\America\Glace_Bay (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\America\Godthab (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\America\Goose_Bay (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\America\Grand_Turk (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\America\Grenada (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\America\Guadeloupe (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\America\Guatemala (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\America\Guayaquil (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\America\Guyana (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\America\Halifax (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\America\Havana (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\America\Hermosillo (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\America\Indianapolis (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\America\Inuvik (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\America\Iqaluit (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\America\Jamaica (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\America\Jujuy (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\America\Juneau (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\America\La_Paz (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\America\Lima (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\America\Los_Angeles (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\America\Louisville (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\America\Maceio (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\America\Managua (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\America\Manaus (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\America\Martinique (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\America\Mazatlan (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\America\Mendoza (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\America\Menominee (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\America\Merida (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\America\Mexico_City (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\America\Miquelon (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\America\Monterrey (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\America\Montevideo (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\America\Montreal (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\America\Montserrat (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\America\Nassau (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\America\New_York (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\America\Nipigon (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\America\Nome (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\America\Noronha (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\America\Panama (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\America\Pangnirtung (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\America\Paramaribo (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\America\Phoenix (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\America\Port-au-Prince (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\America\Porto_Velho (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\America\Port_of_Spain (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\America\Puerto_Rico (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\America\Rainy_River (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\America\Rankin_Inlet (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\America\Recife (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\America\Regina (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\America\Rio_Branco (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\America\Rosario (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\America\Santiago (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\America\Santo_Domingo (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\America\Sao_Paulo (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\America\Scoresbysund (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\America\St_Johns (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\America\St_Kitts (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\America\St_Lucia (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\America\St_Thomas (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\America\St_Vincent (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\America\Swift_Current (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\America\Tegucigalpa (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\America\Thule (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\America\Thunder_Bay (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\America\Tijuana (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\America\Tortola (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\America\Vancouver (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\America\Whitehorse (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\America\Winnipeg (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\America\Yakutat (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\America\Yellowknife (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\America\Indiana\Knox (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\America\Indiana\Marengo (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\America\Indiana\Vevay (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\America\Kentucky\Monticello (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\America\North_Dakota\Center (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\Antarctica\Casey (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\Antarctica\Davis (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\Antarctica\DumontDUrville (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\Antarctica\Mawson (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\Antarctica\McMurdo (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\Antarctica\Palmer (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\Antarctica\Syowa (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\Antarctica\Vostok (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\Asia\Aden (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\Asia\Almaty (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\Asia\Amman (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\Asia\Anadyr (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\Asia\Aqtau (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\Asia\Aqtobe (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\Asia\Ashgabat (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\Asia\Baghdad (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\Asia\Bahrain (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\Asia\Baku (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\Asia\Bangkok (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\Asia\Beirut (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\Asia\Bishkek (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\Asia\Brunei (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\Asia\Calcutta (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\Asia\Choibalsan (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\Asia\Chongqing (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\Asia\Colombo (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\Asia\Damascus (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\Asia\Dhaka (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\Asia\Dili (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\Asia\Dubai (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\Asia\Dushanbe (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\Asia\Gaza (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\Asia\Harbin (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\Asia\Hong_Kong (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\Asia\Hovd (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\Asia\Irkutsk (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\Asia\Jakarta (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\Asia\Jayapura (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\Asia\Jerusalem (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\Asia\Kabul (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\Asia\Kamchatka (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\Asia\Karachi (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\Asia\Kashgar (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\Asia\Katmandu (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\Asia\Krasnoyarsk (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\Asia\Kuala_Lumpur (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\Asia\Kuching (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\Asia\Kuwait (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\Asia\Macao (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\Asia\Magadan (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\Asia\Manila (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\Asia\Muscat (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\Asia\Nicosia (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\Asia\Novosibirsk (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\Asia\Omsk (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\Asia\Phnom_Penh (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\Asia\Pontianak (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\Asia\Pyongyang (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\Asia\Qatar (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\Asia\Rangoon (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\Asia\Riyadh (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\Asia\Riyadh87 (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\Asia\Riyadh88 (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\Asia\Riyadh89 (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\Asia\Saigon (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\Asia\Sakhalin (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\Asia\Samarkand (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\Asia\Seoul (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\Asia\Shanghai (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\Asia\Singapore (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\Asia\Taipei (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\Asia\Tashkent (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\Asia\Tbilisi (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\Asia\Tehran (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\Asia\Thimphu (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\Asia\Tokyo (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\Asia\Ujung_Pandang (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\Asia\Ulaanbaatar (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\Asia\Urumqi (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\Asia\Vientiane (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\Asia\Vladivostok (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\Asia\Yakutsk (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\Asia\Yekaterinburg (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\Asia\Yerevan (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\Atlantic\Azores (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\Atlantic\Bermuda (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\Atlantic\Canary (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\Atlantic\Cape_Verde (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\Atlantic\Faeroe (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\Atlantic\Madeira (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\Atlantic\Reykjavik (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\Atlantic\South_Georgia (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\Atlantic\Stanley (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\Atlantic\St_Helena (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\Australia\Adelaide (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\Australia\Brisbane (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\Australia\Broken_Hill (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\Australia\Darwin (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\Australia\Hobart (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\Australia\Lindeman (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\Australia\Lord_Howe (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\Australia\Melbourne (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\Australia\Perth (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\Australia\Sydney (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\Etc\GMT (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\Etc\GMT+1 (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\Etc\GMT+10 (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\Etc\GMT+11 (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\Etc\GMT+12 (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\Etc\GMT+2 (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\Etc\GMT+3 (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\Etc\GMT+4 (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\Etc\GMT+5 (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\Etc\GMT+6 (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\Etc\GMT+7 (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\Etc\GMT+8 (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\Etc\GMT+9 (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\Etc\GMT-1 (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\Etc\GMT-10 (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\Etc\GMT-11 (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\Etc\GMT-12 (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\Etc\GMT-13 (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\Etc\GMT-14 (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\Etc\GMT-2 (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\Etc\GMT-3 (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\Etc\GMT-4 (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\Etc\GMT-5 (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\Etc\GMT-6 (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\Etc\GMT-7 (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\Etc\GMT-8 (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\Etc\GMT-9 (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\Etc\UCT (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\Etc\UTC (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\Europe\Amsterdam (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\Europe\Andorra (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\Europe\Athens (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\Europe\Belfast (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\Europe\Belgrade (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\Europe\Berlin (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles\jre\lib\zi\Europe\Brussels (Adware.WebHancer) -> Quarantined and deleted successfully.
      C:\Program Files\2M Games\Arcade Bubbles
  12. Destrio5 Modérateur
    ---> Télécharge OTMoveIt3 (OldTimer) sur ton Bureau :
    http://oldtimer.geekstogo.com/OTMoveIt3.exe

    ---> Double-clique sur OTMoveIt3.exe afin de le lancer.

    ---> Copie (Ctrl+C) le texte suivant ci-dessous :

    :processes
    explorer.exe

    :services
    ayefelpi

    :files
    C:\Program Files\Hotbar
    C:\WINDOWS\system32\gnc.exe
    C:\WINDOWS\_delis32.ini
    C:\WINDOWS\bwUnin-6.1.4.36-8876480L.exe

    :reg
    [-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
    [-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HotbarOE]
    [-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HotbarSA]
    [-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WeatherDPA]

    :commands
    [emptytemp]
    [start explorer]
    [reboot]

    ---> Colle (Ctrl+V) le texte précédemment copié dans le cadre Paste Instructions for Items to be Moved.

    ---> Clique maintenant sur le bouton MoveIt! puis ferme OTMoveIt3.

    Si un fichier ou dossier ne peut pas être supprimé immédiatement, le logiciel te demandera de redémarrer.
    Accepte en cliquant sur YES.

    ---> Poste le rapport situé dans ce dossier : C:\_OTMoveIt\MovedFiles\
    Le nom du rapport correspond au moment de sa création : date_heure.log
    1. parcimonie1 Auteur
      --========== PROCESSES ==========
      Process explorer.exe killed successfully.
      ========== SERVICES/DRIVERS ==========
      Unable to stop service ayefelpi .
      ========== FILES ==========
      File/Folder C:\Program Files\Hotbar not found.
      C:\WINDOWS\system32\gnc.exe moved successfully.
      C:\WINDOWS\_delis32.ini moved successfully.
      C:\WINDOWS\bwUnin-6.1.4.36-8876480L.exe moved successfully.
      ========== REGISTRY ==========
      Registry key HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher\\ deleted successfully.
      Registry key HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HotbarOE\\ deleted successfully.
      Registry key HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HotbarSA\\ deleted successfully.
      Registry key HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WeatherDPA\\ deleted successfully.
      ========== COMMANDS ==========
      File delete failed. C:\DOCUME~1\ADELIN~1\LOCALS~1\Temp\~DF6B1B.tmp scheduled to be deleted on reboot.
      File delete failed. C:\DOCUME~1\ADELIN~1\LOCALS~1\Temp\~DF6B33.tmp scheduled to be deleted on reboot.
      File delete failed. C:\DOCUME~1\ADELIN~1\LOCALS~1\Temp\~DF76AA.tmp scheduled to be deleted on reboot.
      File delete failed. C:\DOCUME~1\ADELIN~1\LOCALS~1\Temp\~DF76C2.tmp scheduled to be deleted on reboot.
      File delete failed. C:\DOCUME~1\ADELIN~1\LOCALS~1\Temp\~DF916C.tmp scheduled to be deleted on reboot.
      File delete failed. C:\DOCUME~1\ADELIN~1\LOCALS~1\Temp\~DF9D6E.tmp scheduled to be deleted on reboot.
      User's Temp folder emptied.
      User's Temporary Internet Files folder emptied.
      User's Internet Explorer cache folder emptied.
      Local Service Temp folder emptied.
      File delete failed. C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat scheduled to be deleted on reboot.
      Local Service Temporary Internet Files folder emptied.
      File delete failed. C:\WINDOWS\temp\Perflib_Perfdata_4d4.dat scheduled to be deleted on reboot.
      File delete failed. C:\WINDOWS\temp\Perflib_Perfdata_590.dat scheduled to be deleted on reboot.
      File delete failed. C:\WINDOWS\temp\Perflib_Perfdata_8fc.dat scheduled to be deleted on reboot.
      Windows Temp folder emptied.
      Java cache emptied.
      Temp folders emptied.
      Explorer started successfully

      OTMoveIt3 by OldTimer - Version 1.0.7.1 log created on 11152008_195503

      Files moved on Reboot...
      File C:\DOCUME~1\ADELIN~1\LOCALS~1\Temp\~DF6B1B.tmp not found!
      File C:\DOCUME~1\ADELIN~1\LOCALS~1\Temp\~DF6B33.tmp not found!
      File C:\DOCUME~1\ADELIN~1\LOCALS~1\Temp\~DF76AA.tmp not found!
      File C:\DOCUME~1\ADELIN~1\LOCALS~1\Temp\~DF76C2.tmp not found!
      C:\DOCUME~1\ADELIN~1\LOCALS~1\Temp\~DF916C.tmp moved successfully.
      C:\DOCUME~1\ADELIN~1\LOCALS~1\Temp\~DF9D6E.tmp moved successfully.
      File move failed. C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat scheduled to be moved on reboot.
      C:\WINDOWS\temp\Perflib_Perfdata_4d4.dat moved successfully.
      File C:\WINDOWS\temp\Perflib_Perfdata_590.dat not found!
      C:\WINDOWS\temp\Perflib_Perfdata_8fc.dat moved successfully.

      parci  "Suis ton coeur, pour que ton visage brille durant le temps de ta vie"
  13. Destrio5 Modérateur
    Je te réponds demain ;)
    1. parcimonie1 Auteur
      ok merci
      bonne soirée à toi et a demain
  14. parcimonie1 Auteur
    Logfile of random's system information tool 1.04 (written by random/random)
    Run by A D E L I N E at 2008-11-14 20:43:47
    Microsoft Windows XP Professionnel Service Pack 2
    System drive C: has 686 MB (3%) free of 26 GB
    Total RAM: 1023 MB (31% free)

    Logfile of Trend Micro HijackThis v2.0.2
    Scan saved at 20:43:50, on 14/11/2008
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v7.00 (7.00.6000.16473)
    Boot mode: Normal

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\Program Files\Fichiers communs\Acronis\Schedule2\schedul2.exe
    C:\WINDOWS\ATKKBService.exe
    C:\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe
    C:\Program Files\Pack Securite\Anti-Virus\fsgk32st.exe
    C:\Program Files\Pack Securite\Common\FSMA32.EXE
    C:\Program Files\Pack Securite\Anti-Virus\FSGK32.EXE
    C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
    C:\Program Files\Pack Securite\Common\FSMB32.EXE
    C:\WINDOWS\system32\nvsvc32.exe
    C:\Program Files\CyberLink\Shared files\RichVideo.exe
    C:\WINDOWS\system32\svchost.exe
    C:\Program Files\Pack Securite\Common\FCH32.EXE
    C:\Program Files\Pack Securite\Anti-Virus\fssm32.exe
    C:\Program Files\Pack Securite\Common\FAMEH32.EXE
    C:\Program Files\Pack Securite\Anti-Virus\fsqh.exe
    C:\Program Files\Pack Securite\FSAUA\program\fsaua.exe
    C:\Program Files\Pack Securite\FSPC\fspc.exe
    C:\Program Files\Pack Securite\FWES\Program\fsdfwd.exe
    C:\Program Files\Pack Securite\FSAUA\program\fsus.exe
    C:\Program Files\Pack Securite\Anti-Virus\fsav32.exe
    C:\WINDOWS\system32\wbem\wmiapsrv.exe
    C:\Program Files\Acronis\TrueImageHome\TrueImageMonitor.exe
    C:\Program Files\Fichiers communs\Acronis\Schedule2\schedhlp.exe
    C:\Program Files\Acronis\TrueImageHome\TimounterMonitor.exe
    C:\Program Files\Pack Securite\Common\FSM32.EXE
    C:\Program Files\Pack Securite\FSGUI\fsguidll.exe
    C:\Program Files\QuickTime\qttask.exe
    C:\Program Files\Logitech\Video\LogiTray.exe
    C:\WINDOWS\system32\ctfmon.exe
    C:\WINDOWS\system32\LVComS.exe
    C:\Program Files\Wallpaper\Wallpaper.exe
    C:\Program Files\SlySoft\AnyDVD\AnyDVD.exe
    C:\Program Files\BitComet\BitComet.exe
    C:\WINDOWS\System32\svchost.exe
    C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BackWeb-8876480.exe
    C:\Program Files\Logitech\SetPoint\KEM.exe
    C:\Program Files\Logitech\SetPoint\KHALMNPR.EXE
    C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe
    C:\Program Files\Java\jre6\bin\jqs.exe
    C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
    C:\Program Files\Internet Explorer\IEXPLORE.EXE
    C:\Program Files\Java\jre6\bin\java.exe
    C:\Program Files\Java\jre6\bin\java.exe
    C:\WINDOWS\explorer.exe
    C:\Program Files\Internet Explorer\IEXPLORE.EXE
    C:\WINDOWS\system32\wuauclt.exe
    C:\WINDOWS\explorer.exe
    C:\PROGRA~1\Logitech\Video\AlbumDB2.exe
    C:\PROGRA~1\Logitech\Video\FxSvr2.exe
    C:\Documents and Settings\A D E L I N E\Bureau\RSIT.exe
    C:\Program Files\trend micro\A D E L I N E.exe

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://actus.sfr.fr
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr
    R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://www.google.fr/search?q=%s
    R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
    O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
    O2 - BHO: BitComet ClickCapture - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - C:\Program Files\BitComet\tools\BitCometBHO_1.2.2.28.dll
    O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
    O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
    O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
    O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
    O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
    O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
    O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
    O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
    O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
    O4 - HKLM\..\Run: [DiskeeperSystray] "C:\Program Files\Diskeeper Corporation\Diskeeper\DkIcon.exe"
    O4 - HKLM\..\Run: [TrueImageMonitor.exe] C:\Program Files\Acronis\TrueImageHome\TrueImageMonitor.exe
    O4 - HKLM\..\Run: [AcronisTimounterMonitor] C:\Program Files\Acronis\TrueImageHome\TimounterMonitor.exe
    O4 - HKLM\..\Run: [Acronis Scheduler2 Service] "C:\Program Files\Fichiers communs\Acronis\Schedule2\schedhlp.exe"
    O4 - HKLM\..\Run: [Logitech Hardware Abstraction Layer] KHALMNPR.EXE
    O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\Pack Securite\Common\FSM32.EXE" /splash
    O4 - HKLM\..\Run: [F-Secure TNB] "C:\Program Files\Pack Securite\FSGUI\TNBUtil.exe" /CHECKALL /WAITFORSW
    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
    O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe
    O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe
    O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
    O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
    O4 - HKLM\..\RunOnce: [Uninstall getPlus(R) for Adobe] "C:\Program Files\NOS\bin\getPlus_HelperSvc.exe" /UninstallGet1noarp
    O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
    O4 - HKCU\..\Run: [Wallpaper] "C:\Program Files\Wallpaper\Wallpaper.exe" Starter
    O4 - HKCU\..\Run: [AnyDVD] C:\Program Files\SlySoft\AnyDVD\AnyDVD.exe
    O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
    O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BackWeb-8876480.exe
    O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe
    O4 - HKUS\S-1-5-19\..\RunOnce: [nltide1] cmd.exe /C move /Y "%SystemRoot%\System32\syssetub.dll" "%SystemRoot%\System32\syssetup.dll" (User 'SERVICE LOCAL')
    O4 - HKUS\S-1-5-19\..\RunOnce: [nltide2] cmd.exe /C rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,L,,4,N (User 'SERVICE LOCAL')
    O4 - HKUS\S-1-5-20\..\RunOnce: [nltide1] cmd.exe /C move /Y "%SystemRoot%\System32\syssetub.dll" "%SystemRoot%\System32\syssetup.dll" (User 'SERVICE RÉSEAU')
    O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
    O4 - Global Startup: Logitech SetPoint.lnk = C:\Program Files\Logitech\SetPoint\KEM.exe
    O8 - Extra context menu item: &D&ownload &with BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddLink.htm
    O8 - Extra context menu item: &D&ownload all video with BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddVideo.htm
    O8 - Extra context menu item: &D&ownload all with BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddAllLink.htm
    O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre6\bin\jp2iexp.dll
    O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre6\bin\jp2iexp.dll
    O9 - Extra button: Parental... - {200DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\Pack Securite\FSPC\fspcmsie.dll
    O9 - Extra button: (no name) - {200DB664-75B5-47c0-8B45-A44ACCF73F01} - C:\Program Files\Pack Securite\FSPC\fspcmsie.dll
    O9 - Extra 'Tools' menuitem: Parental... - {200DB664-75B5-47c0-8B45-A44ACCF73F01} - C:\Program Files\Pack Securite\FSPC\fspcmsie.dll
    O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
    O9 - Extra button: (no name) - {B205A35E-1FC4-4CE3-818B-899DBBB3388C} - C:\Program Files\Fichiers communs\Microsoft Shared\Encarta Search Bar\ENCSBAR.DLL
    O9 - Extra button: BitComet - {D18A0B52-D63C-4ed0-AFC6-C1E3DC1AF43A} - res://C:\Program Files\BitComet\tools\BitCometBHO_1.2.2.28.dll/206 (file missing)
    O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    O9 - Extra button: (no name) - cmdmapping - (no file) (HKCU)
    O16 - DPF: {CF40ACC5-E1BB-4AFF-AC72-04C2F616BCA7} (get_atlcom Class) - http://wwwimages.adobe.com/www.adobe.com/products/acrobat/nos/gp.cab
    O23 - Service: Acronis Scheduler2 Service (AcrSch2Svc) - Acronis - C:\Program Files\Fichiers communs\Acronis\Schedule2\schedul2.exe
    O23 - Service: ATK Keyboard Service (ATKKeyboardService) - ASUSTeK COMPUTER INC. - C:\WINDOWS\ATKKBService.exe
    O23 - Service: Diskeeper - Diskeeper Corporation - C:\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe
    O23 - Service: FSGKHS (F-Secure Gatekeeper Handler Starter) - F-Secure Corporation - C:\Program Files\Pack Securite\Anti-Virus\fsgk32st.exe
    O23 - Service: F-Secure Automatic Update Agent (FSAUA) - F-Secure Corporation - C:\Program Files\Pack Securite\FSAUA\program\fsaua.exe
    O23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - F-Secure Corporation - C:\Program Files\Pack Securite\FWES\Program\fsdfwd.exe
    O23 - Service: F-Secure Management Agent (FSMA) - F-Secure Corporation - C:\Program Files\Pack Securite\Common\FSMA32.EXE
    O23 - Service: getPlus(R) Helper - NOS Microsystems Ltd. - C:\Program Files\NOS\bin\getPlus_HelperSvc.exe
    O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
    O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
    O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
    O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared files\RichVideo.exe
    1. Destrio5 Modérateur
      ---> Désinstalle AD-Remover.

      ---> Supprime le dossier RSIT situé dans C:\

      ---> Fais un scan RSIT et poste les deux rapports.
      1. parcimonie1 Auteur
        F --------- Logfile of AD-Remover 1.0.3.3 by C_XX ---------

        START at: 19:55:20 | 14/11/2008
        ON: Microsoft Windows XP [version 5.1.2600] ( Windows XP )
        Internet Explorer: 7.0.5730.11
        OPTION: Clean
        EXECUTED FROM: C:\Program Files\Ad-remover\AD-Remover.bat
        USER: A D E L I N E | PC: ATHLON3200
        BOOT MODE: Normal
        DRIVE(S): C:\
        ~> Systemdrive: C:\

        --------- [ PROCESSES ] ---------

        \SystemRoot\System32\smss.exe [1080]
        \??\C:\WINDOWS\system32\csrss.exe [1312]
        \??\C:\WINDOWS\system32\winlogon.exe [1336]
        C:\WINDOWS\system32\services.exe [1464]
        C:\WINDOWS\system32\lsass.exe [1476]
        C:\WINDOWS\system32\svchost.exe [1648]
        C:\WINDOWS\system32\svchost.exe [1712]
        C:\WINDOWS\System32\svchost.exe [1888]
        C:\WINDOWS\system32\svchost.exe [1940]
        C:\WINDOWS\system32\svchost.exe [1980]
        C:\WINDOWS\Explorer.EXE [756]
        C:\WINDOWS\system32\spoolsv.exe [924]
        C:\Program Files\Fichiers communs\Acronis\Schedule2\schedul2.exe [1108]
        C:\WINDOWS\ATKKBService.exe [544]
        C:\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe [1120]
        C:\Program Files\Pack Securite\Anti-Virus\fsgk32st.exe [1260]
        C:\Program Files\Pack Securite\Common\FSMA32.EXE [1288]
        C:\Program Files\Pack Securite\Anti-Virus\FSGK32.EXE [1296]
        C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE [1352]
        C:\Program Files\Pack Securite\Common\FSMB32.EXE [1416]
        C:\WINDOWS\system32\nvsvc32.exe [1436]
        C:\Program Files\CyberLink\Shared files\RichVideo.exe [1700]
        C:\WINDOWS\system32\svchost.exe [1792]
        C:\Program Files\Pack Securite\Common\FCH32.EXE [580]
        C:\Program Files\Pack Securite\Anti-Virus\fssm32.exe [840]
        C:\Program Files\Pack Securite\Common\FAMEH32.EXE [2004]
        C:\Program Files\Pack Securite\Anti-Virus\fsqh.exe [1864]
        C:\Program Files\Pack Securite\FSAUA\program\fsaua.exe [2056]
        C:\Program Files\Pack Securite\FSPC\fspc.exe [2140]
        C:\Program Files\Pack Securite\FWES\Program\fsdfwd.exe [2220]
        C:\Program Files\Pack Securite\FSAUA\program\fsus.exe [2652]
        C:\Program Files\Pack Securite\Anti-Virus\fsav32.exe [2304]
        C:\WINDOWS\system32\wbem\wmiapsrv.exe [3900]
        C:\Program Files\Acronis\TrueImageHome\TrueImageMonitor.exe [3592]
        C:\Program Files\Fichiers communs\Acronis\Schedule2\schedhlp.exe [3680]
        C:\Program Files\Acronis\TrueImageHome\TimounterMonitor.exe [1708]
        C:\Program Files\Pack Securite\Common\FSM32.EXE [628]
        C:\Program Files\Pack Securite\FSGUI\fsguidll.exe [3804]
        C:\Program Files\QuickTime\qttask.exe [480]
        C:\Program Files\Logitech\Video\LogiTray.exe [2756]
        C:\WINDOWS\system32\ctfmon.exe [2684]
        C:\WINDOWS\system32\LVComS.exe [2792]
        C:\Program Files\Wallpaper\Wallpaper.exe [3064]
        C:\Program Files\SlySoft\AnyDVD\AnyDVD.exe [3460]
        C:\Program Files\BitComet\BitComet.exe [3540]
        C:\WINDOWS\System32\svchost.exe [3612]
        C:\Program Files\MSN Messenger\msnmsgr.exe [1456]
        C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BackWeb-8876480.exe [380]
        C:\Program Files\Logitech\SetPoint\KEM.exe [3400]
        C:\Program Files\Logitech\SetPoint\KHALMNPR.EXE [3512]
        C:\WINDOWS\explorer.exe [3416]
        C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe [5840]
        C:\Program Files\Java\jre6\bin\jqs.exe [6008]
        C:\Program Files\Internet Explorer\IEXPLORE.EXE [6036]
        C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe [5116]
        C:\Program Files\Internet Explorer\IEXPLORE.EXE [1676]
        C:\Program Files\Java\jre6\bin\java.exe [680]
        C:\Program Files\Java\jre6\bin\java.exe [5188]
        C:\Program Files\Internet Explorer\IEXPLORE.EXE [4600]
        C:\Documents and Settings\A D E L I N E\Bureau\AD-R.exe [5720]

        ---------------------------- [~> 60]

        +---------------------------------------------------------------------------+
        +------------------------------- SERVICES DELETED
        +---------------------------------------------------------------------------+

        Deleted successfully ! - "Boonty Games"

        +---------------------------------------------------------------------------+
        +------------------------------- REGISTRY ELEMENTS DELETED
        +---------------------------------------------------------------------------+

        "HKEY_LOCAL_MACHINE\Software\Boonty"
        "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{C23587D9-1415-4042-9B3D-43118A4334C7}_is1"
        "HKEY_LOCAL_MACHINE\Software\Classes\boontybox"
        "HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\Boonty Games"
        "HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_BOONTY_GAMES"
        "HKEY_CURRENT_USER\SOFTWARE\Boonty"

        +---------------------------------------------------------------------------+
        +------------------------------- FILES\FOLDERS DELETED
        +---------------------------------------------------------------------------+

        [11/03/2005 17:06|--a------] C:\WINDOWS\system32\PandoraCtrl.dll
        [07/11/2007 20:16|d--------] C:\Program Files\Boonty
        [28/10/2007 19:08|d--------] C:\Program Files\BoontyGames
        [28/10/2007 19:08|d--------] C:\Program Files\Fichiers communs\BOONTY Shared
        [28/10/2007 19:08|d--------] C:\Documents and Settings\All Users\Application Data\BOONTY

        (!) ---- Temp files deleted.

        (!) ---- Recycle bin emptied in all drives.

        +---------- Added scan ...

        +-----[HKLM\...\Run]

        nwiz REG_SZ nwiz.exe /install
        NvCplDaemon REG_SZ RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
        DiskeeperSystray REG_SZ "C:\Program Files\Diskeeper Corporation\Diskeeper\DkIcon.exe"
        TrueImageMonitor.exe REG_SZ C:\Program Files\Acronis\TrueImageHome\TrueImageMonitor.exe
        AcronisTimounterMonitor REG_SZ C:\Program Files\Acronis\TrueImageHome\TimounterMonitor.exe
        Acronis Scheduler2 Service REG_SZ "C:\Program Files\Fichiers communs\Acronis\Schedule2\schedhlp.exe"
        Logitech Hardware Abstraction Layer REG_SZ KHALMNPR.EXE
        F-Secure Manager REG_SZ "C:\Program Files\Pack Securite\Common\FSM32.EXE" /splash
        F-Secure TNB REG_SZ "C:\Program Files\Pack Securite\FSGUI\TNBUtil.exe" /CHECKALL /WAITFORSW
        QuickTime Task REG_SZ "C:\Program Files\QuickTime\qttask.exe" -atboottime
        LogitechVideoRepair REG_SZ C:\Program Files\Logitech\Video\ISStart.exe
        LogitechVideoTray REG_SZ C:\Program Files\Logitech\Video\LogiTray.exe
        Adobe Reader Speed Launcher REG_SZ "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
        SunJavaUpdateSched REG_SZ "C:\Program Files\Java\jre6\bin\jusched.exe"

        +-----[HKCU\...\Run]

        ctfmon.exe REG_SZ C:\WINDOWS\system32\ctfmon.exe
        Wallpaper REG_SZ "C:\Program Files\Wallpaper\Wallpaper.exe" Starter
        AnyDVD REG_SZ C:\Program Files\SlySoft\AnyDVD\AnyDVD.exe
        msnmsgr REG_SZ "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
        LDM REG_SZ C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BackWeb-8876480.exe
        swg REG_SZ C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe

        +-----[HKLM\...\Internet Explorer\MAIN]

        Start Page : hxxp://fr.msn.com/

        +-----[HKCU\...\Internet Explorer\MAIN]

        Start Page : hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome

        +---------------------------------------------------------------------------+
        +------------------------------- [ EOF - 125 lines ]
        +---------------------------------------------------------------------------+

        [ END at: 20:00:54 | 14/11/2008 ] - [ Time elapsed: 5 minutes, 33 seconds ]

        1. fgfdfdh
          installe NAVILOG1
      3. Destrio5 Modérateur
        /!\ Déconnecte-toi et ferme toutes applications en cours /!\

        - Clique droit sur AD-Remover et choisis Exécuter en tant qu'administrateur : au menu principal choisi l'option "B".

        --> Le programme va travailler...

        - Poste le rapport qui apparaît à la fin.

        (Le rapport est sauvegardé aussi sous C:\Ad-report.log)

        /!\ Si le Bureau ne réapparaît pas, presse Ctrl + Alt + Suppr, Onglet "Fichier", "Nouvelle tâche", tape explorer.exe et valide) /!\
        1. parcimonie1 Auteur
          F --------- Logfile of AD-Remover 1.0.3.3 by C_XX ---------

          START at: 18:29:43 | 14/11/2008
          ON: Microsoft Windows XP [version 5.1.2600] ( Windows XP )
          Internet Explorer: 7.0.5730.11
          OPTION: Scan
          EXECUTED FROM: C:\Program Files\Ad-remover\AD-Remover.bat
          USER: A D E L I N E | PC: ATHLON3200
          BOOT MODE: Normal
          DRIVE(S): C:\
          ~> Systemdrive: C:\

          --------- [ PROCESSES ] ---------

          \SystemRoot\System32\smss.exe [1080]
          \??\C:\WINDOWS\system32\csrss.exe [1312]
          \??\C:\WINDOWS\system32\winlogon.exe [1336]
          C:\WINDOWS\system32\services.exe [1464]
          C:\WINDOWS\system32\lsass.exe [1476]
          C:\WINDOWS\system32\svchost.exe [1648]
          C:\WINDOWS\system32\svchost.exe [1712]
          C:\WINDOWS\System32\svchost.exe [1888]
          C:\WINDOWS\system32\svchost.exe [1940]
          C:\WINDOWS\system32\svchost.exe [1980]
          C:\WINDOWS\Explorer.EXE [756]
          C:\WINDOWS\system32\spoolsv.exe [924]
          C:\Program Files\Fichiers communs\Acronis\Schedule2\schedul2.exe [1108]
          C:\WINDOWS\ATKKBService.exe [544]
          C:\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe [1120]
          C:\Program Files\Pack Securite\Anti-Virus\fsgk32st.exe [1260]
          C:\Program Files\Pack Securite\Common\FSMA32.EXE [1288]
          C:\Program Files\Pack Securite\Anti-Virus\FSGK32.EXE [1296]
          C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE [1352]
          C:\Program Files\Pack Securite\Common\FSMB32.EXE [1416]
          C:\WINDOWS\system32\nvsvc32.exe [1436]
          C:\Program Files\CyberLink\Shared files\RichVideo.exe [1700]
          C:\WINDOWS\system32\svchost.exe [1792]
          C:\Program Files\Pack Securite\Common\FCH32.EXE [580]
          C:\Program Files\Pack Securite\Anti-Virus\fssm32.exe [840]
          C:\Program Files\Pack Securite\Common\FAMEH32.EXE [2004]
          C:\Program Files\Pack Securite\Anti-Virus\fsqh.exe [1864]
          C:\Program Files\Pack Securite\FSAUA\program\fsaua.exe [2056]
          C:\Program Files\Pack Securite\FSPC\fspc.exe [2140]
          C:\Program Files\Pack Securite\FWES\Program\fsdfwd.exe [2220]
          C:\Program Files\Pack Securite\FSAUA\program\fsus.exe [2652]
          C:\Program Files\Pack Securite\Anti-Virus\fsav32.exe [2304]
          C:\WINDOWS\system32\wbem\wmiapsrv.exe [3900]
          C:\Program Files\Acronis\TrueImageHome\TrueImageMonitor.exe [3592]
          C:\Program Files\Fichiers communs\Acronis\Schedule2\schedhlp.exe [3680]
          C:\Program Files\Acronis\TrueImageHome\TimounterMonitor.exe [1708]
          C:\Program Files\Pack Securite\Common\FSM32.EXE [628]
          C:\Program Files\Pack Securite\FSGUI\fsguidll.exe [3804]
          C:\Program Files\QuickTime\qttask.exe [480]
          C:\Program Files\Logitech\Video\LogiTray.exe [2756]
          C:\WINDOWS\system32\ctfmon.exe [2684]
          C:\WINDOWS\system32\LVComS.exe [2792]
          C:\Program Files\Wallpaper\Wallpaper.exe [3064]
          C:\Program Files\SlySoft\AnyDVD\AnyDVD.exe [3460]
          C:\Program Files\BitComet\BitComet.exe [3540]
          C:\WINDOWS\System32\svchost.exe [3612]
          C:\Program Files\MSN Messenger\msnmsgr.exe [1456]
          C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BackWeb-8876480.exe [380]
          C:\Program Files\Logitech\SetPoint\KEM.exe [3400]
          C:\Program Files\Logitech\SetPoint\KHALMNPR.EXE [3512]
          C:\WINDOWS\explorer.exe [3416]
          C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe [5840]
          C:\Program Files\Java\jre6\bin\jqs.exe [6008]

          ---------------------------- [~> 53]

          +---------------------------------------------------------------------------+
          +------------------------------- SERVICES FOUND
          +---------------------------------------------------------------------------+

          Found ! - "Boonty Games"

          +---------------------------------------------------------------------------+
          +------------------------------- REGISTRY ELEMENTS FOUND
          +---------------------------------------------------------------------------+

          "HKEY_LOCAL_MACHINE\Software\Boonty"
          "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{C23587D9-1415-4042-9B3D-43118A4334C7}_is1"
          "HKEY_LOCAL_MACHINE\Software\Classes\boontybox"
          "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Boonty Games"
          "HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Boonty Games"
          "HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\Boonty Games"
          "HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_BOONTY_GAMES"
          "HKEY_CURRENT_USER\SOFTWARE\Boonty"
          "HKEY_CLASSES_ROOT\boontybox"

          +---------------------------------------------------------------------------+
          +------------------------------- FILES\FOLDERS FOUND
          +---------------------------------------------------------------------------+

          [11/03/2005 17:06|--a------] C:\WINDOWS\system32\PandoraCtrl.dll
          [07/11/2007 20:16|d--------] C:\Program Files\Boonty
          [28/10/2007 19:08|d--------] C:\Program Files\BoontyGames
          [28/10/2007 19:08|d--------] C:\Program Files\Fichiers communs\BOONTY Shared
          [28/10/2007 19:08|d--------] C:\Documents and Settings\All Users\Application Data\BOONTY

          +---------- Added scan ...

          +-----[HKLM\...\Run]

          nwiz REG_SZ nwiz.exe /install
          NvCplDaemon REG_SZ RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
          DiskeeperSystray REG_SZ "C:\Program Files\Diskeeper Corporation\Diskeeper\DkIcon.exe"
          TrueImageMonitor.exe REG_SZ C:\Program Files\Acronis\TrueImageHome\TrueImageMonitor.exe
          AcronisTimounterMonitor REG_SZ C:\Program Files\Acronis\TrueImageHome\TimounterMonitor.exe
          Acronis Scheduler2 Service REG_SZ "C:\Program Files\Fichiers communs\Acronis\Schedule2\schedhlp.exe"
          Logitech Hardware Abstraction Layer REG_SZ KHALMNPR.EXE
          F-Secure Manager REG_SZ "C:\Program Files\Pack Securite\Common\FSM32.EXE" /splash
          F-Secure TNB REG_SZ "C:\Program Files\Pack Securite\FSGUI\TNBUtil.exe" /CHECKALL /WAITFORSW
          QuickTime Task REG_SZ "C:\Program Files\QuickTime\qttask.exe" -atboottime
          LogitechVideoRepair REG_SZ C:\Program Files\Logitech\Video\ISStart.exe
          LogitechVideoTray REG_SZ C:\Program Files\Logitech\Video\LogiTray.exe
          Adobe Reader Speed Launcher REG_SZ "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
          SunJavaUpdateSched REG_SZ "C:\Program Files\Java\jre6\bin\jusched.exe"

          +-----[HKCU\...\Run]

          ctfmon.exe REG_SZ C:\WINDOWS\system32\ctfmon.exe
          Wallpaper REG_SZ "C:\Program Files\Wallpaper\Wallpaper.exe" Starter
          AnyDVD REG_SZ C:\Program Files\SlySoft\AnyDVD\AnyDVD.exe
          msnmsgr REG_SZ "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
          LDM REG_SZ C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BackWeb-8876480.exe
          swg REG_SZ C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe

          +-----[HKLM\...\Internet Explorer\MAIN]

          Start Page : hxxp://www.msn.com/

          +-----[HKCU\...\Internet Explorer\MAIN]

          Start Page : hxxp://go.microsoft.com/fwlink/?LinkId=69157

          +---------------------------------------------------------------------------+
          +------------------------------- [ EOF - 119 lines ]
          +---------------------------------------------------------------------------+

          [ END at: 18:30:31 | 14/11/2008 ] - [ Time elapsed: 47.5 seconds ]

      4. parcimonie1 Auteur
        F --------- Logfile of AD-Remover 1.0.3.3 by C_XX ---------

        START at: 16:19:34 | 14/11/2008
        ON: Microsoft Windows XP [version 5.1.2600] ( Windows XP )
        Internet Explorer: 7.0.5730.11
        OPTION: Scan
        EXECUTED FROM: C:\Program Files\Ad-remover\AD-Remover.bat
        USER: A D E L I N E | PC: ATHLON3200
        BOOT MODE: Normal
        DRIVE(S): C:\
        ~> Systemdrive: C:\

        --------- [ PROCESSES ] ---------

        \SystemRoot\System32\smss.exe [1080]
        \??\C:\WINDOWS\system32\csrss.exe [1312]
        \??\C:\WINDOWS\system32\winlogon.exe [1336]
        C:\WINDOWS\system32\services.exe [1464]
        C:\WINDOWS\system32\lsass.exe [1476]
        C:\WINDOWS\system32\svchost.exe [1648]
        C:\WINDOWS\system32\svchost.exe [1712]
        C:\WINDOWS\System32\svchost.exe [1888]
        C:\WINDOWS\system32\svchost.exe [1940]
        C:\WINDOWS\system32\svchost.exe [1980]
        C:\WINDOWS\Explorer.EXE [756]
        C:\WINDOWS\system32\spoolsv.exe [924]
        C:\Program Files\Fichiers communs\Acronis\Schedule2\schedul2.exe [1108]
        C:\WINDOWS\ATKKBService.exe [544]
        C:\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe [1120]
        C:\Program Files\Pack Securite\Anti-Virus\fsgk32st.exe [1260]
        C:\Program Files\Pack Securite\Common\FSMA32.EXE [1288]
        C:\Program Files\Pack Securite\Anti-Virus\FSGK32.EXE [1296]
        C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE [1352]
        C:\Program Files\Pack Securite\Common\FSMB32.EXE [1416]
        C:\WINDOWS\system32\nvsvc32.exe [1436]
        C:\Program Files\CyberLink\Shared files\RichVideo.exe [1700]
        C:\WINDOWS\system32\svchost.exe [1792]
        C:\Program Files\Pack Securite\Common\FCH32.EXE [580]
        C:\Program Files\Pack Securite\Anti-Virus\fssm32.exe [840]
        C:\Program Files\Pack Securite\Common\FAMEH32.EXE [2004]
        C:\Program Files\Pack Securite\Anti-Virus\fsqh.exe [1864]
        C:\Program Files\Pack Securite\FSAUA\program\fsaua.exe [2056]
        C:\Program Files\Pack Securite\FSPC\fspc.exe [2140]
        C:\Program Files\Pack Securite\FWES\Program\fsdfwd.exe [2220]
        C:\Program Files\Pack Securite\FSAUA\program\fsus.exe [2652]
        C:\Program Files\Pack Securite\Anti-Virus\fsav32.exe [2304]
        C:\WINDOWS\system32\wbem\wmiapsrv.exe [3900]
        C:\Program Files\Acronis\TrueImageHome\TrueImageMonitor.exe [3592]
        C:\Program Files\Fichiers communs\Acronis\Schedule2\schedhlp.exe [3680]
        C:\Program Files\Acronis\TrueImageHome\TimounterMonitor.exe [1708]
        C:\Program Files\Pack Securite\Common\FSM32.EXE [628]
        C:\Program Files\Pack Securite\FSGUI\fsguidll.exe [3804]
        C:\Program Files\QuickTime\qttask.exe [480]
        C:\Program Files\Logitech\Video\LogiTray.exe [2756]
        C:\WINDOWS\system32\ctfmon.exe [2684]
        C:\WINDOWS\system32\LVComS.exe [2792]
        C:\Program Files\Wallpaper\Wallpaper.exe [3064]
        C:\Program Files\SlySoft\AnyDVD\AnyDVD.exe [3460]
        C:\Program Files\BitComet\BitComet.exe [3540]
        C:\WINDOWS\System32\svchost.exe [3612]
        C:\Program Files\MSN Messenger\msnmsgr.exe [1456]
        C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BackWeb-8876480.exe [380]
        C:\Program Files\Logitech\SetPoint\KEM.exe [3400]
        C:\Program Files\Logitech\SetPoint\KHALMNPR.EXE [3512]
        C:\WINDOWS\explorer.exe [3416]
        C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe [5840]
        C:\Program Files\Java\jre6\bin\jqs.exe [6008]

        ---------------------------- [~> 53]

        +---------------------------------------------------------------------------+
        +------------------------------- SERVICES FOUND
        +---------------------------------------------------------------------------+

        Found ! - "Boonty Games"

        +---------------------------------------------------------------------------+
        +------------------------------- REGISTRY ELEMENTS FOUND
        +---------------------------------------------------------------------------+

        "HKEY_LOCAL_MACHINE\Software\Boonty"
        "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{C23587D9-1415-4042-9B3D-43118A4334C7}_is1"
        "HKEY_LOCAL_MACHINE\Software\Classes\boontybox"
        "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Boonty Games"
        "HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Boonty Games"
        "HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\Boonty Games"
        "HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_BOONTY_GAMES"
        "HKEY_CURRENT_USER\SOFTWARE\Boonty"
        "HKEY_CLASSES_ROOT\boontybox"

        +---------------------------------------------------------------------------+
        +------------------------------- FILES\FOLDERS FOUND
        +---------------------------------------------------------------------------+

        [11/03/2005 17:06|--a------] C:\WINDOWS\system32\PandoraCtrl.dll
        [07/11/2007 20:16|d--------] C:\Program Files\Boonty
        [28/10/2007 19:08|d--------] C:\Program Files\BoontyGames
        [28/10/2007 19:08|d--------] C:\Program Files\Fichiers communs\BOONTY Shared
        [28/10/2007 19:08|d--------] C:\Documents and Settings\All Users\Application Data\BOONTY

        +---------- Added scan ...

        +-----[HKLM\...\Run]

        nwiz REG_SZ nwiz.exe /install
        NvCplDaemon REG_SZ RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
        DiskeeperSystray REG_SZ "C:\Program Files\Diskeeper Corporation\Diskeeper\DkIcon.exe"
        TrueImageMonitor.exe REG_SZ C:\Program Files\Acronis\TrueImageHome\TrueImageMonitor.exe
        AcronisTimounterMonitor REG_SZ C:\Program Files\Acronis\TrueImageHome\TimounterMonitor.exe
        Acronis Scheduler2 Service REG_SZ "C:\Program Files\Fichiers communs\Acronis\Schedule2\schedhlp.exe"
        Logitech Hardware Abstraction Layer REG_SZ KHALMNPR.EXE
        F-Secure Manager REG_SZ "C:\Program Files\Pack Securite\Common\FSM32.EXE" /splash
        F-Secure TNB REG_SZ "C:\Program Files\Pack Securite\FSGUI\TNBUtil.exe" /CHECKALL /WAITFORSW
        QuickTime Task REG_SZ "C:\Program Files\QuickTime\qttask.exe" -atboottime
        LogitechVideoRepair REG_SZ C:\Program Files\Logitech\Video\ISStart.exe
        LogitechVideoTray REG_SZ C:\Program Files\Logitech\Video\LogiTray.exe
        Adobe Reader Speed Launcher REG_SZ "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
        SunJavaUpdateSched REG_SZ "C:\Program Files\Java\jre6\bin\jusched.exe"

        +-----[HKCU\...\Run]

        ctfmon.exe REG_SZ C:\WINDOWS\system32\ctfmon.exe
        Wallpaper REG_SZ "C:\Program Files\Wallpaper\Wallpaper.exe" Starter
        AnyDVD REG_SZ C:\Program Files\SlySoft\AnyDVD\AnyDVD.exe
        msnmsgr REG_SZ "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
        LDM REG_SZ C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BackWeb-8876480.exe
        swg REG_SZ C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe

        +-----[HKLM\...\Internet Explorer\MAIN]

        Start Page : hxxp://www.msn.com/

        +-----[HKCU\...\Internet Explorer\MAIN]

        Start Page : hxxp://go.microsoft.com/fwlink/?LinkId=69157

        +---------------------------------------------------------------------------+
        +------------------------------- [ EOF - 119 lines ]
        +---------------------------------------------------------------------------+

        [ END at: 16:20:11 | 14/11/2008 ] - [ Time elapsed: 37.1 seconds ]

        1. Destrio5 Modérateur
          - Télécharge AD-Remover (de Cyrildu17 / C_XX) sur ton Bureau.

          /!\ Déconnecte-toi et ferme toutes applications en cours /!\

          - Double-clique sur le programme d'installation, installe-le dans son emplacement par défaut (C:\Program files).
          - Double-clique sur l'icône Ad-remover située sur ton Bureau.
          - Au menu principal, choisis l'option "A".
          - Poste le rapport qui apparaît à la fin.

          (Le rapport est sauvegardé aussi sous C:\Ad-report(date).log)

          (CTRL+A pour tout sélectionner, CTRL+C pour copier et CTRL+V pour coller)

          Note :

          "Process.exe", une composante de l'outil, est détectée par certains antivirus (AntiVir, Dr.Web, Kaspersky Anti-Virus) comme étant un RiskTool.
          Il ne s'agit pas d'un virus, mais d'un utilitaire destiné à mettre fin à des processus.
          Mis entre de mauvaises mains, cet utilitaire pourrait arrêter des logiciels de sécurité (Antivirus, Firewall...) d'où l'alerte émise par ces antivirus.
          1. Destrio5 Modérateur
            ---> Télécharge et installe CCleaner (N'installe pas la Yahoo Toolbar) :
            * Lance-le. Va dans Options puis Avancé et décoche la case Effacer uniquement les fichiers etc....
            * Va dans Nettoyeur, choisis Analyse. Une fois terminé, lance le nettoyage.
            * Ensuite, choisis Registre, puis Chercher des erreurs. Une fois terminé, répare toutes les erreurs (Sauvegarde la base de registre).

            ---> Supprime le dossier RSIT situé dans C:\

            ---> Fais un scan RSIT et poste les deux rapports.
            1. parcimonie1 Auteur
              Logfile of random's system information tool 1.04 (written by random/random)
              Run by A D E L I N E at 2008-11-14 15:11:54
              Microsoft Windows XP Professionnel Service Pack 2
              System drive C: has 613 MB (2%) free of 26 GB
              Total RAM: 1023 MB (46% free)

              Logfile of Trend Micro HijackThis v2.0.2
              Scan saved at 15:11:56, on 14/11/2008
              Platform: Windows XP SP2 (WinNT 5.01.2600)
              MSIE: Internet Explorer v7.00 (7.00.6000.16473)
              Boot mode: Normal

              Running processes:
              C:\WINDOWS\System32\smss.exe
              C:\WINDOWS\system32\winlogon.exe
              C:\WINDOWS\system32\services.exe
              C:\WINDOWS\system32\lsass.exe
              C:\WINDOWS\system32\svchost.exe
              C:\WINDOWS\System32\svchost.exe
              C:\WINDOWS\Explorer.EXE
              C:\WINDOWS\system32\spoolsv.exe
              C:\Program Files\Fichiers communs\Acronis\Schedule2\schedul2.exe
              C:\WINDOWS\ATKKBService.exe
              C:\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe
              C:\Program Files\Pack Securite\Anti-Virus\fsgk32st.exe
              C:\Program Files\Pack Securite\Common\FSMA32.EXE
              C:\Program Files\Pack Securite\Anti-Virus\FSGK32.EXE
              C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
              C:\Program Files\Pack Securite\Common\FSMB32.EXE
              C:\WINDOWS\system32\nvsvc32.exe
              C:\Program Files\CyberLink\Shared files\RichVideo.exe
              C:\WINDOWS\system32\svchost.exe
              C:\Program Files\Pack Securite\Common\FCH32.EXE
              C:\Program Files\Pack Securite\Anti-Virus\fssm32.exe
              C:\Program Files\Pack Securite\Common\FAMEH32.EXE
              C:\Program Files\Pack Securite\Anti-Virus\fsqh.exe
              C:\Program Files\Pack Securite\FSAUA\program\fsaua.exe
              C:\Program Files\Pack Securite\FSPC\fspc.exe
              C:\Program Files\Pack Securite\FWES\Program\fsdfwd.exe
              C:\Program Files\Pack Securite\FSAUA\program\fsus.exe
              C:\Program Files\Pack Securite\Anti-Virus\fsav32.exe
              C:\WINDOWS\system32\wbem\wmiapsrv.exe
              C:\Program Files\Acronis\TrueImageHome\TrueImageMonitor.exe
              C:\Program Files\Fichiers communs\Acronis\Schedule2\schedhlp.exe
              C:\Program Files\Acronis\TrueImageHome\TimounterMonitor.exe
              C:\Program Files\Pack Securite\Common\FSM32.EXE
              C:\Program Files\Pack Securite\FSGUI\fsguidll.exe
              C:\Program Files\QuickTime\qttask.exe
              C:\Program Files\Logitech\Video\LogiTray.exe
              C:\WINDOWS\system32\ctfmon.exe
              C:\WINDOWS\system32\LVComS.exe
              C:\Program Files\Wallpaper\Wallpaper.exe
              C:\Program Files\SlySoft\AnyDVD\AnyDVD.exe
              C:\Program Files\BitComet\BitComet.exe
              C:\WINDOWS\System32\svchost.exe
              C:\Program Files\MSN Messenger\msnmsgr.exe
              C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BackWeb-8876480.exe
              C:\Program Files\Logitech\SetPoint\KEM.exe
              C:\Program Files\Logitech\SetPoint\KHALMNPR.EXE
              C:\WINDOWS\explorer.exe
              C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe
              C:\Program Files\Java\jre6\bin\jqs.exe
              C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
              C:\Program Files\Internet Explorer\IEXPLORE.EXE
              C:\PROGRA~1\Logitech\Video\FxSvr2.exe
              C:\Documents and Settings\A D E L I N E\Bureau\RSIT.exe
              C:\Program Files\trend micro\A D E L I N E.exe

              R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://actus.sfr.fr
              R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
              R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
              R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
              R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://www.google.fr/search?q=%s
              R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
              R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
              O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
              O2 - BHO: BitComet ClickCapture - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - C:\Program Files\BitComet\tools\BitCometBHO_1.2.2.28.dll
              O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
              O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
              O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
              O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
              O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
              O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
              O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
              O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
              O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
              O4 - HKLM\..\Run: [DiskeeperSystray] "C:\Program Files\Diskeeper Corporation\Diskeeper\DkIcon.exe"
              O4 - HKLM\..\Run: [TrueImageMonitor.exe] C:\Program Files\Acronis\TrueImageHome\TrueImageMonitor.exe
              O4 - HKLM\..\Run: [AcronisTimounterMonitor] C:\Program Files\Acronis\TrueImageHome\TimounterMonitor.exe
              O4 - HKLM\..\Run: [Acronis Scheduler2 Service] "C:\Program Files\Fichiers communs\Acronis\Schedule2\schedhlp.exe"
              O4 - HKLM\..\Run: [Logitech Hardware Abstraction Layer] KHALMNPR.EXE
              O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\Pack Securite\Common\FSM32.EXE" /splash
              O4 - HKLM\..\Run: [F-Secure TNB] "C:\Program Files\Pack Securite\FSGUI\TNBUtil.exe" /CHECKALL /WAITFORSW
              O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
              O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe
              O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe
              O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
              O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
              O4 - HKLM\..\RunOnce: [Uninstall getPlus(R) for Adobe] "C:\Program Files\NOS\bin\getPlus_HelperSvc.exe" /UninstallGet1noarp
              O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
              O4 - HKCU\..\Run: [Wallpaper] "C:\Program Files\Wallpaper\Wallpaper.exe" Starter
              O4 - HKCU\..\Run: [AnyDVD] C:\Program Files\SlySoft\AnyDVD\AnyDVD.exe
              O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
              O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BackWeb-8876480.exe
              O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe
              O4 - HKUS\S-1-5-19\..\RunOnce: [nltide1] cmd.exe /C move /Y "%SystemRoot%\System32\syssetub.dll" "%SystemRoot%\System32\syssetup.dll" (User 'SERVICE LOCAL')
              O4 - HKUS\S-1-5-19\..\RunOnce: [nltide2] cmd.exe /C rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,L,,4,N (User 'SERVICE LOCAL')
              O4 - HKUS\S-1-5-20\..\RunOnce: [nltide1] cmd.exe /C move /Y "%SystemRoot%\System32\syssetub.dll" "%SystemRoot%\System32\syssetup.dll" (User 'SERVICE RÉSEAU')
              O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
              O4 - Global Startup: Logitech SetPoint.lnk = C:\Program Files\Logitech\SetPoint\KEM.exe
              O8 - Extra context menu item: &D&ownload &with BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddLink.htm
              O8 - Extra context menu item: &D&ownload all video with BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddVideo.htm
              O8 - Extra context menu item: &D&ownload all with BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddAllLink.htm
              O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
              O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre6\bin\jp2iexp.dll
              O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre6\bin\jp2iexp.dll
              O9 - Extra button: Parental... - {200DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\Pack Securite\FSPC\fspcmsie.dll
              O9 - Extra button: (no name) - {200DB664-75B5-47c0-8B45-A44ACCF73F01} - C:\Program Files\Pack Securite\FSPC\fspcmsie.dll
              O9 - Extra 'Tools' menuitem: Parental... - {200DB664-75B5-47c0-8B45-A44ACCF73F01} - C:\Program Files\Pack Securite\FSPC\fspcmsie.dll
              O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
              O9 - Extra button: (no name) - {B205A35E-1FC4-4CE3-818B-899DBBB3388C} - C:\Program Files\Fichiers communs\Microsoft Shared\Encarta Search Bar\ENCSBAR.DLL
              O9 - Extra button: BitComet - {D18A0B52-D63C-4ed0-AFC6-C1E3DC1AF43A} - res://C:\Program Files\BitComet\tools\BitCometBHO_1.2.2.28.dll/206 (file missing)
              O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
              O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
              O9 - Extra button: (no name) - cmdmapping - (no file) (HKCU)
              O16 - DPF: {CF40ACC5-E1BB-4AFF-AC72-04C2F616BCA7} (get_atlcom Class) - http://wwwimages.adobe.com/www.adobe.com/products/acrobat/nos/gp.cab
              O23 - Service: Acronis Scheduler2 Service (AcrSch2Svc) - Acronis - C:\Program Files\Fichiers communs\Acronis\Schedule2\schedul2.exe
              O23 - Service: ATK Keyboard Service (ATKKeyboardService) - ASUSTeK COMPUTER INC. - C:\WINDOWS\ATKKBService.exe
              O23 - Service: Boonty Games - BOONTY - C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe
              O23 - Service: Diskeeper - Diskeeper Corporation - C:\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe
              O23 - Service: FSGKHS (F-Secure Gatekeeper Handler Starter) - F-Secure Corporation - C:\Program Files\Pack Securite\Anti-Virus\fsgk32st.exe
              O23 - Service: F-Secure Automatic Update Agent (FSAUA) - F-Secure Corporation - C:\Program Files\Pack Securite\FSAUA\program\fsaua.exe
              O23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - F-Secure Corporation - C:\Program Files\Pack Securite\FWES\Program\fsdfwd.exe
              O23 - Service: F-Secure Management Agent (FSMA) - F-Secure Corporation - C:\Program Files\Pack Securite\Common\FSMA32.EXE
              O23 - Service: getPlus(R) Helper - NOS Microsystems Ltd. - C:\Program Files\NOS\bin\getPlus_HelperSvc.exe
              O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
              O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
              O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
              O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
              O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared files\RichVideo.exe
          • 1
          • 2

          Discussions similaires

          Connecté à internet mais rien ne charge
          gandounet

          10 réponses