Pages intrusive

Résolu
mghirin -  
Bonjour,
petit problème en surfant sur la toile j ai des fenêtres intrusive sens rien demander qui apparaisse je ne comprend pas pourquoi et comment faire pour me debaraser de ca a savoir j ai telecharger ccleaner et depuis le problème et t ariver j aurait besoin de votre aide SVP
Configuration: Windows XP
Internet Explorer 6.0

43 réponses

Résumé de la discussion

Plusieurs utilisateurs rencontrent des fenêtres intrusives après l'installation de CCleaner sur Windows XP et IE6, liées à des barres d'outils et à des composants indésirables. Des réponses évoquent des éléments comme AskTBar, Google Toolbar et SweetIM détectés dans les rapports et listes de démarrage, suggérant un nettoyage des barres d'outils et des programmes associées. La procédure recommandée consiste à lancer l'outil ToolBar S&D et à partager le rapport en évitant la section Cracks & Keygens, afin d'identifier les entrées à supprimer et de rétablir les paramètres. En parallèle, des journaux techniques et des éléments de sécurité, comme HijackThis et des rapports d'antivirus, sont mentionnés pour évaluer les risques et guider le nettoyage sans conclusion sur l'état final.

Bobot (l’IA à votre service)
  1. Destrio5 Modérateur
    Je ne savais pas que tu avais essayé de poster le rapport puisqu'il n'apparaissait pas à cause des jeux piratés que tu as.

    J'ai demandé à un modo de débloquer le rapport ;)

    ---> Relance ToolBar S&D, fais l'option 2 et poste le rapport.

    Ne poste pas la partie Cracks & Keygens du rapport.
    1. mghirin Auteur
      Destrio5 je voulait te dire merci pour t' on aide , a bientôt peut être
      1. mghirin Auteur
        -----------\\ ToolBar S&D 1.2.6 XP/Vista

        Microsoft Windows XP Professionnel ( v5.1.2600 ) Service Pack 2
        X86-based PC ( Uniprocessor Free : AMD Athlon(tm) XP 2600+ )
        BIOS : Phoenix - AwardBIOS v6.00PG
        USER : mikl ( Administrator )
        BOOT : Normal boot
        Antivirus : Kaspersky Anti-Virus 7.0.0.125 (Activated)
        A:\ (USB)
        C:\ (Local Disk) - NTFS - Total:34 Go (Free:4 Go)
        D:\ (Local Disk) - NTFS - Total:40 Go (Free:28 Go)
        E:\ (CD or DVD) - CDFS - Total:0 Go (Free:0 Go)
        F:\ (CD or DVD) - CDFS - Total:0 Go (Free:0 Go)
        G:\ (CD or DVD) - UDF - Total:5 Go (Free:0 Go)

        "C:\ToolBar SD" ( MAJ : 04-12-2008|20:40 )
        Option : [1] ( 07/12/2008|23:45 )

        -----------\\ Recherche de Fichiers / Dossiers ...

        C:\Program Files\AskTBar
        C:\Program Files\AskTBar\bar
        C:\Program Files\AskTBar\SrchAstt
        C:\Program Files\AskTBar\bar\1.bin
        C:\Program Files\AskTBar\bar\Cache
        C:\Program Files\AskTBar\bar\History
        C:\Program Files\AskTBar\bar\Settings
        C:\Program Files\AskTBar\bar\1.bin\A5POPSWT.DLL
        C:\Program Files\AskTBar\bar\1.bin\ASKTBAR.DLL
        C:\Program Files\AskTBar\bar\Cache\01662FCD
        C:\Program Files\AskTBar\bar\Cache\01664577
        C:\Program Files\AskTBar\bar\Cache\01664F2C.bin
        C:\Program Files\AskTBar\bar\Cache\01665D07.bin
        C:\Program Files\AskTBar\bar\Cache\0166732F.bin
        C:\Program Files\AskTBar\bar\Cache\files.ini
        C:\Program Files\AskTBar\bar\History\search2
        C:\Program Files\AskTBar\bar\Settings\prevcfg2.htm
        C:\Program Files\AskTBar\SrchAstt\1.bin
        C:\Program Files\AskTBar\SrchAstt\1.bin\A5SRCHAS.DLL
        C:\DOCUME~1\mikl\Cookies\mikl@mysearch[1].txt
        C:\WINDOWS\iun6002.exe

        -----------\\ [..\Internet Explorer\Main]

        [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
        "Start Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome"
        "Search Page"="https://www.google.com/?gws_rd=ssl"
        "Search Bar"="http://www.google.com/toolbar/ie8/sidebar.html"
        "Local Page"="C:\\WINDOWS\\system32\\blank.htm"

        [HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
        "Default_Page_URL"="http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome"
        "Default_Search_URL"="http://www.google.com/toolbar/ie8/sidebar.html"
        "Search Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
        "Start Page"="https://www.msn.com/fr-fr"
        "Search Bar"="https://www.bing.com/?toHttps=1&redig=8F3F334EA60E4B1CB4D040DCFE393A89{SUB_RFC1766}/srchasst/srchasst.htm"

        --------------------\\ Recherche d'autres infections

        --------------------\\ Cracks & Keygens ..

        C:\DOCUME~1\mikl\Application Data\uTorrent\FIFA 09 [PC-GAME][MULTi5][Crack + serial][TNTvillage org].torrent
        C:\DOCUME~1\mikl\Application Data\uTorrent\FIFA.09.Crackfix-RELOADED.torrent
        C:\DOCUME~1\mikl\Application Data\uTorrent\FIFA_08_No_DVD_Crack-FLTSUX.torrent
        C:\DOCUME~1\mikl\Recent\FIFA 09 [PC-GAME][MULTi5][Crack + serial][TNTvillage org] [mininova].torrent.lnk
        C:\DOCUME~1\mikl\Recent\FIFA.09.Crackfix-RELOADED.lnk
        C:\DOCUME~1\mikl\Recent\FIFA[1].09.Crackfix-RELOADED [mininova].torrent.lnk
        C:\DOCUME~1\mikl\Recent\[FIFA????2009].FIFA.09.Crackfix-RELOADED.rar.lnk

        1 - "C:\ToolBar SD\TB_1.txt" - 07/12/2008|23:46 - Option : [1]

        -----------\\ Fin du rapport a 23:46:20,53
        1. Destrio5 Modérateur
          Bien.

          ---> Télécharge Toolbar S&D (Team IDN) sur ton Bureau.
          * Lance l'installation du programme en exécutant le fichier téléchargé.
          * Double-clique maintenant sur le raccourci de Toolbar S&D.
          * Sélectionne la langue souhaitée en tapant la lettre de ton choix puis en validant avec la touche Entrée.
          * Choisis maintenant l'option 1 (Recherche). Patiente jusqu'à la fin de la recherche.
          * Poste le rapport généré. (C:\TB.txt)
          2. mghirin Auteur
            me re voila

            --------- Logfile of AD-Remover 1.0.6.5 by C_XX ---------

            *** Limited to ***

            Boonty/BoontyGames
            Eorezo
            Everest Poker
            Funwebproduct/MyWay/MyWebsearch
            Messenger Skinner
            Sweetim

            ******************

            # START at: 23:23:10 | Dim 07/12/2008 ON Microsoft® Windows XP ™ v5.1.2600
            # BOOT MODE: Normal

            # OPTION: Scan
            # EXECUTED FROM: C:\Program Files\Ad-remover\AD-Remover.bat

            # PC: XPSP2-1EBC6E48E | USER: mikl ( Current user is an administrator )

            # DRIVE(S): A:\
            # Systemdrive: C:\ (NTFS)
            # Internet Explorer v6.0.2900.2180

            --------- [ RUNNING PROCESSES: 31 ] ---------

            C:\WINDOWS\System32\smss.exe
            C:\WINDOWS\system32\csrss.exe
            C:\WINDOWS\system32\winlogon.exe
            C:\WINDOWS\system32\services.exe
            C:\WINDOWS\system32\lsass.exe
            C:\WINDOWS\system32\svchost.exe
            C:\WINDOWS\system32\svchost.exe
            C:\WINDOWS\System32\svchost.exe
            C:\WINDOWS\system32\svchost.exe
            C:\WINDOWS\system32\spoolsv.exe
            C:\WINDOWS\Explorer.EXE
            C:\WINDOWS\system32\RUNDLL32.EXE
            C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 7.0\avp.exe
            C:\Program Files\Java\jre1.6.0_04\bin\jusched.exe
            C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
            C:\Program Files\Windows Live\Messenger\msnmsgr.exe
            C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I0D2.EXE
            C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
            C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 7.0\avp.exe
            C:\Program Files\Canal\Canal Widget\VOD\CanalPlus.VOD.exe
            C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
            C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
            C:\WINDOWS\system32\nvsvc32.exe
            C:\WINDOWS\system32\svchost.exe
            C:\WINDOWS\system32\svchost.exe
            C:\WINDOWS\System32\alg.exe
            C:\WINDOWS\System32\svchost.exe
            C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
            C:\Program Files\Windows Live\Messenger\usnsvc.exe
            C:\Program Files\Internet Explorer\iexplore.exe
            C:\WINDOWS\system32\ntvdm.exe

            -----------------------------------

            (!) ---- IE start pages reset

            +-----------------------| Boonty/Boonty Games Elements Deleted..

            .

            +-----------------------| Eorezo Elements Deleted..

            .

            +-----------------------| Everest Poker Elements Deleted..

            .

            +-----------------------| FunWebProducts/MyWay/MyWebSearch/MyGlobalSearch Elements Deleted..

            .

            +-----------------------| Messenger Skinner Elements Deleted..

            .

            +-----------------------| Sweetim Elements Deleted..

            .
            [07/12/2008 22:45|d--------] C:\Program Files\SweetIM
            /!\ NOT DELETED - [07/12/2008 20:29|--a------] C:\WINDOWS\Prefetch\SWEETIM.EXE-114201E6.pf

            (!) ---- Temp files deleted.
            (!) ---- Recycle bin emptied in all drives.

            ************* /!\ File(s)/Folder(s) Not Deleted /!\ *************

            "C:\WINDOWS\Prefetch\SWEETIM.EXE-114201E6.pf"

            Second run ...

            "C:\WINDOWS\Prefetch\SWEETIM.EXE-114201E6.pf" - RESIST !

            +---------------------------------------------------------------------------+
            +------------------------------- ADDED SCAN ..
            +---------------------------------------------------------------------------+

            +--[HKEY_CURRENT_USER\..\Run]

            MsnMsgr REG_SZ "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
            EPSON Stylus C84 Series REG_SZ C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I0D2.EXE /P23 "EPSON Stylus C84 Series" /M "Stylus C84" /EF "HKCU"
            BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA} REG_SZ "C:\Program Files\Fichiers communs\Nero\Lib\NMBgMonitor.exe"
            swg REG_SZ C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe

            +--[HKEY_LOCAL_MACHINE\..\Run]

            NvCplDaemon REG_SZ RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
            nwiz REG_SZ nwiz.exe /install
            NvMediaCenter REG_SZ RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
            AVP REG_SZ "C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 7.0\avp.exe"
            EPSON Stylus C84 Series REG_SZ C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I0D2.EXE /P23 "EPSON Stylus C84 Series" /O6 "USB001" /M "Stylus C84"
            SunJavaUpdateSched REG_SZ "C:\Program Files\Java\jre1.6.0_04\bin\jusched.exe"
            TkBellExe REG_SZ "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot

            +--[HKEY_USERS\.DEFAULT\..\Run]

            msnmsgr REG_SZ "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background

            +--[HKEY_CURRENT_USER\..\Internet Explorer\MAIN]

            Start Page : hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome

            +--[HKEY_LOCAL_MACHINE\..\Internet Explorer\MAIN]

            Start Page : hxxp://fr.msn.com/

            +---------------------------------------------------------------------------+

            - "C:\AD-report-07.12.2008.log" (4680 octets)

            [ END at: 23:25:54 | 07/12/2008 ] - [ Time elapsed: 2 minutes, 43 seconds ]

            +---------------------------------------------------------------------------+
            +------------------------------- [ E.O.F - 120 lines ]
            +---------------------------------------------------------------------------+
            1. Destrio5 Modérateur
              En mode sans échec, tu dois refaire l'option B d'AD-Remover et me poster le rapport.
              1. mghirin Auteur
                sayer c fait ca j ai redemarer mon pc en mode sans echec , je doit le refaire?
                1. Destrio5 Modérateur
                  "C'est mieux mais ça n'a pas totalement fonctionné.

                  Refais la manip' mais en mode sans échec.

                  ---> Pour redémarrer en mode sans échec :
                  - Redémarre ton PC.
                  - Au démarrage, tapote sur F8 (F5 sur certains PC) juste après l'affichage du BIOS et juste avant le chargement de Windows.
                  - Dans le menu d'options avancées, choisis Mode sans échec.
                  - Choisis ta session."
                  4. Destrio5 Modérateur
                    "pourquoi ma page d acceuil a changer?"
                    ---> C'est normal, ça a remis la page par défaut mais tu peux la rechanger ;)
                    1. Destrio5 Modérateur
                      C'est mieux mais ça n'a pas totalement fonctionné.

                      Refais la manip' mais en mode sans échec.

                      ---> Pour redémarrer en mode sans échec :
                      - Redémarre ton PC.
                      - Au démarrage, tapote sur F8 (F5 sur certains PC) juste après l'affichage du BIOS et juste avant le chargement de Windows.
                      - Dans le menu d'options avancées, choisis Mode sans échec.
                      - Choisis ta session.
                      2. mghirin Auteur
                        --------- Logfile of AD-Remover 1.0.6.5 by C_XX ---------

                        *** Limited to ***

                        Boonty/BoontyGames
                        Eorezo
                        Everest Poker
                        Funwebproduct/MyWay/MyWebsearch
                        Messenger Skinner
                        Sweetim

                        ******************

                        # START at: 22:43:53 | Dim 07/12/2008 ON Microsoft® Windows XP ™ v5.1.2600
                        # BOOT MODE: Normal

                        # OPTION: Scan
                        # EXECUTED FROM: C:\Program Files\Ad-remover\AD-Remover.bat

                        # PC: XPSP2-1EBC6E48E | USER: mikl ( Current user is an administrator )

                        # DRIVE(S): A:\
                        # Systemdrive: C:\ (NTFS)
                        # Internet Explorer v6.0.2900.2180

                        --------- [ RUNNING PROCESSES: 35 ] ---------

                        C:\WINDOWS\System32\smss.exe
                        C:\WINDOWS\system32\csrss.exe
                        C:\WINDOWS\system32\winlogon.exe
                        C:\WINDOWS\system32\services.exe
                        C:\WINDOWS\system32\lsass.exe
                        C:\WINDOWS\system32\svchost.exe
                        C:\WINDOWS\system32\svchost.exe
                        C:\WINDOWS\System32\svchost.exe
                        C:\WINDOWS\system32\svchost.exe
                        C:\WINDOWS\system32\spoolsv.exe
                        C:\WINDOWS\Explorer.EXE
                        C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 7.0\avp.exe
                        C:\Program Files\Canal\Canal Widget\VOD\CanalPlus.VOD.exe
                        C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
                        C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
                        C:\WINDOWS\system32\nvsvc32.exe
                        C:\WINDOWS\system32\svchost.exe
                        C:\WINDOWS\System32\alg.exe
                        C:\WINDOWS\System32\svchost.exe
                        C:\WINDOWS\system32\RUNDLL32.EXE
                        C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 7.0\avp.exe
                        C:\Program Files\SweetIM\Messenger\SweetIM.exe
                        C:\Program Files\Java\jre1.6.0_04\bin\jusched.exe
                        C:\WINDOWS\system32\svchost.exe
                        C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
                        C:\Program Files\Windows Live\Messenger\msnmsgr.exe
                        C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I0D2.EXE
                        C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
                        C:\Program Files\Windows Live\Messenger\usnsvc.exe
                        C:\WINDOWS\system32\notepad.exe
                        C:\Program Files\Internet Explorer\iexplore.exe
                        C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
                        C:\WINDOWS\system32\NOTEPAD.EXE
                        C:\Program Files\Internet Explorer\iexplore.exe
                        C:\WINDOWS\system32\ntvdm.exe

                        -----------------------------------

                        (!) ---- IE start pages reset

                        +-----------------------| Boonty/Boonty Games Elements Deleted..

                        .

                        +-----------------------| Eorezo Elements Deleted..

                        .

                        +-----------------------| Everest Poker Elements Deleted..

                        .

                        +-----------------------| FunWebProducts/MyWay/MyWebSearch/MyGlobalSearch Elements Deleted..

                        "HKEY_CLASSES_ROOT\CLSID\{147a976f-eee1-4377-8ea7-4716e4cdd239}"
                        "HKEY_CLASSES_ROOT\CLSID\{9afb8248-617f-460d-9366-d71cdeda3179}"
                        .

                        +-----------------------| Messenger Skinner Elements Deleted..

                        .

                        +-----------------------| Sweetim Elements Deleted..

                        "HKEY_CLASSES_ROOT\CLSID\{EEE6C35C-6118-11DC-9C72-001320C79847}"
                        "HKEY_CLASSES_ROOT\CLSID\{EEE6C35B-6118-11DC-9C72-001320C79847}"
                        "HKEY_CLASSES_ROOT\CLSID\{EEE6C35D-6118-11DC-9C72-001320C79847}"
                        "HKEY_CLASSES_ROOT\CLSID\{82AC53B4-164C-4B07-A016-437A8388B81A}"
                        "HKEY_CLASSES_ROOT\CLSID\{A4A0CB15-8465-4F58-A7E5-73084EA2A064}"
                        "HKEY_CLASSES_ROOT\Installer\UpgradeCodes\A97CEC23332751B47BA4B95BAA50C9D0"
                        "HKEY_CLASSES_ROOT\Installer\UpgradeCodes\789034A89BAC50E4782F0A7BDBF75632"
                        "HKEY_CLASSES_ROOT\SWEETIE.IEToolbar"
                        "HKEY_CLASSES_ROOT\SWEETIE.IEToolbar.1"
                        "HKEY_CLASSES_ROOT\SWEETIE.SWEETIE"
                        "HKEY_CLASSES_ROOT\SWEETIE.SWEETIE.3"
                        "HKEY_CLASSES_ROOT\SweetIM_URLSearchHook.ToolbarURLSearchHook"
                        "HKEY_CLASSES_ROOT\SweetIM_URLSearchHook.ToolbarURLSearchHook.1"
                        "HKEY_CLASSES_ROOT\Toolbar3.SWEETIE"
                        "HKEY_CLASSES_ROOT\Toolbar3.SWEETIE.1"
                        "HKEY_CLASSES_ROOT\Typelib\{EEE6C35E-6118-11DC-9C72-001320C79847}"
                        "HKEY_CLASSES_ROOT\Typelib\{EEE6C35F-6118-11DC-9C72-001320C79847}"
                        "HKEY_CLASSES_ROOT\MgMediaPlayer.GifAnimator"
                        "HKEY_CLASSES_ROOT\MgMediaPlayer.GifAnimator.1"
                        "HKEY_CURRENT_USER\SOFTWARE\SweetIM"
                        "HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks" /v "{EEE6C35D-6118-11DC-9C72-001320C79847}"
                        "HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{EEE6C35B-6118-11DC-9C72-001320C79847}"
                        "HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{EEE6C35C-6118-11DC-9C72-001320C79847}"
                        "HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{4D3B167E-5FD8-4276-8FD7-9DF19C1E4D19}"
                        "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar" /v "{EEE6C35B-6118-11DC-9C72-001320C79847}"
                        "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\run" /v "SweetIM"
                        "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EEE6C35C-6118-11DC-9C72-001320C79847}"
                        "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\A97CEC23332751B47BA4B95BAA50C9D0"
                        "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\789034A89BAC50E4782F0A7BDBF75632"
                        "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\02F47BF73B948514FAACADD8CBBDF37D"
                        "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\080D9F5E1E95FEE4794CE438E635239E"
                        "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1E264E0A5959A1C46BA9175A878B12EA"
                        "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2E6768B6932D112438F047C54D180635"
                        "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\351716A953E21214898904032EAE2E81"
                        "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\397C771A7BCAC904697C3EC629ED33ED"
                        "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\98CC8BF5A4A6E6C4ABF7051DDAB8B058"
                        "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A189D17A469616C4688D23E192996267"
                        "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D15DAF33C220F91468A1D7D57C31ACD7"
                        "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D3BA76A44C779424889063D5098ED2D6"
                        "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D6D0EB9FDBD90C04D92A7E729058F10D"
                        "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E4748F9A4181FCE46A23C13B517B9420"
                        "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\07D5290CDBDAE4242926B8E6CA650501"
                        "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\08E33F7B61DEFF24BB9673ED7D467636"
                        "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0E3D8A5B48622A445A7DF73FEFF32C3F"
                        "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1AC67655DD68F8240B2860F2D511EBD8"
                        "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\34EDDB1BFB3A2D448845F3EFD0F15A43"
                        "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\4318DF19719275242801CBE292063A4C"
                        "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\45FC115D1FEAEF849A4E1610D6EC8BF0"
                        "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\46A5861A389ADB844AF89E31BC9DF0A1"
                        "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\49B0E1A6FF50BBE4289E4E23DE6EA0C7"
                        "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\4CCCAC049F34D0540AAC13011398BEDB"
                        "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\5C4389D0BFB302C479DE4178BD5D9EBA"
                        "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\5D19F074C042AD34BAB463D4175A062E"
                        "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\5D2B09BDEF4FE54418E6F3373CDBC7AC"
                        "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\61B65D3397A1FBF4CB1571B5E4F6B5B0"
                        "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\68E8A05C60DD9254591DBD16C94EDDBF"
                        "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\697E782CF574CC34CBB9566440BA12BC"
                        "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6AE27A8613CF7EA4782F2886F67295E5"
                        "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7CE172051F585E04187BCB97570BFA74"
                        "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\86A901BA5265452499DCBF719C378EE3"
                        "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\88ABD1CD5C40EC84789A7F6EF86DAC5E"
                        "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\980289C22F80A7C4BB9323DC61255E4E"
                        "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\9A4B7EF3789F871419D9302583B20C15"
                        "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A6C53B0F76C44004A8F36716213017DB"
                        "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B59F2D8189784CC46A4597F2842480B0"
                        "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BD746FB95FB8E5B45BF66BE54D5FD91F"
                        "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CCF399FCD6D2D3F46BF02A1378654FC9"
                        "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D149C1355C98DE24E82CEFBD996FE06A"
                        "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\DB59FDB786388EA4D897F3EE715683AC"
                        "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\DB8DAD19CFBCC2049A4477183787E8C5"
                        "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E337925F629CF4C4FB08F3D9674DD839"
                        "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\EC65F200D112357449C8B1BC3CFA03D0"
                        "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F327D0C73C0973644A21E8CC852267A0"
                        "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F754C503375A13344B22388E18DFE87E"
                        "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\FA96423FE2B98E248A3B23548D1E22D9"
                        "HKEY_LOCAL_MACHINE\SOFTWARE\SweetIM"
                        .
                        /!\ NOT DELETED - [07/12/2008 22:45|d--------] C:\Program Files\SweetIM
                        [05/05/2008 22:41|d--------] C:\Documents and Settings\All Users\Application Data\SweetIM
                        /!\ NOT DELETED - [07/12/2008 20:29|--a------] C:\WINDOWS\Prefetch\SWEETIM.EXE-114201E6.pf

                        (!) ---- Temp files deleted.
                        (!) ---- Recycle bin emptied in all drives.

                        ************* /!\ File(s)/Folder(s) Not Deleted /!\ *************

                        "C:\Program Files\SweetIM"
                        "C:\WINDOWS\Prefetch\SWEETIM.EXE-114201E6.pf"

                        Second run ...

                        "C:\Program Files\SweetIM" - RESIST !
                        "C:\WINDOWS\Prefetch\SWEETIM.EXE-114201E6.pf" - RESIST !

                        +---------------------------------------------------------------------------+
                        +------------------------------- ADDED SCAN ..
                        +---------------------------------------------------------------------------+

                        +--[HKEY_CURRENT_USER\..\Run]

                        MsnMsgr REG_SZ "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
                        EPSON Stylus C84 Series REG_SZ C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I0D2.EXE /P23 "EPSON Stylus C84 Series" /M "Stylus C84" /EF "HKCU"
                        BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA} REG_SZ "C:\Program Files\Fichiers communs\Nero\Lib\NMBgMonitor.exe"
                        swg REG_SZ C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe

                        +--[HKEY_LOCAL_MACHINE\..\Run]

                        NvCplDaemon REG_SZ RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
                        nwiz REG_SZ nwiz.exe /install
                        NvMediaCenter REG_SZ RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
                        AVP REG_SZ "C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 7.0\avp.exe"
                        EPSON Stylus C84 Series REG_SZ C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I0D2.EXE /P23 "EPSON Stylus C84 Series" /O6 "USB001" /M "Stylus C84"
                        SunJavaUpdateSched REG_SZ "C:\Program Files\Java\jre1.6.0_04\bin\jusched.exe"
                        TkBellExe REG_SZ "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot

                        +--[HKEY_USERS\.DEFAULT\..\Run]

                        msnmsgr REG_SZ "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background

                        +--[HKEY_CURRENT_USER\..\Internet Explorer\MAIN]

                        Start Page : hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome

                        +--[HKEY_LOCAL_MACHINE\..\Internet Explorer\MAIN]

                        Start Page : hxxp://fr.msn.com/

                        +---------------------------------------------------------------------------+

                        - "C:\AD-report-07.12.2008.log" (13559 octets)

                        [ END at: 22:59:53 | 07/12/2008 ] - [ Time elapsed: 15 minutes, 59 seconds ]

                        +---------------------------------------------------------------------------+
                        +------------------------------- [ E.O.F - 205 lines ]
                        +---------------------------------------------------------------------------+
                        2. mghirin Auteur
                          je ne c est pas ci je ne me suis pas tromper dit moi ci c est ce qu il te faut

                          --------- Logfile of AD-Remover 1.0.6.5 by C_XX ---------

                          # START at: 21:05:40 | Dim 07/12/2008 ON Microsoft® Windows XP ™ v5.1.2600
                          # BOOT MODE: Normal

                          # OPTION: Scan
                          # EXECUTED FROM: C:\Program Files\Ad-remover\AD-Remover.bat

                          # PC: XPSP2-1EBC6E48E | USER: mikl ( Current user is an administrator )

                          # DRIVE(S): A:\
                          # Systemdrive: C:\ (NTFS)
                          # Internet Explorer v6.0.2900.2180

                          --------- [ RUNNING PROCESSES: 30 ] ---------

                          C:\WINDOWS\System32\smss.exe
                          C:\WINDOWS\system32\csrss.exe
                          C:\WINDOWS\system32\winlogon.exe
                          C:\WINDOWS\system32\services.exe
                          C:\WINDOWS\system32\lsass.exe
                          C:\WINDOWS\system32\svchost.exe
                          C:\WINDOWS\system32\svchost.exe
                          C:\WINDOWS\System32\svchost.exe
                          C:\WINDOWS\system32\svchost.exe
                          C:\WINDOWS\system32\spoolsv.exe
                          C:\WINDOWS\Explorer.EXE
                          C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 7.0\avp.exe
                          C:\Program Files\Canal\Canal Widget\VOD\CanalPlus.VOD.exe
                          C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
                          C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
                          C:\WINDOWS\system32\nvsvc32.exe
                          C:\WINDOWS\system32\svchost.exe
                          C:\WINDOWS\System32\alg.exe
                          C:\WINDOWS\System32\svchost.exe
                          C:\WINDOWS\system32\RUNDLL32.EXE
                          C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 7.0\avp.exe
                          C:\Program Files\SweetIM\Messenger\SweetIM.exe
                          C:\Program Files\Java\jre1.6.0_04\bin\jusched.exe
                          C:\WINDOWS\system32\svchost.exe
                          C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
                          C:\Program Files\Windows Live\Messenger\msnmsgr.exe
                          C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I0D2.EXE
                          C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
                          C:\Program Files\Windows Live\Messenger\usnsvc.exe
                          C:\WINDOWS\system32\ntvdm.exe

                          -----------------------------------

                          +-----------------------| Boonty/Boonty Games Elements found..

                          .

                          +-----------------------| Eorezo Elements found..

                          .

                          +-----------------------| Everest Poker Elements found..

                          .

                          +-----------------------| FunWebProducts/MyWay/MyWebSearch/MyGlobalSearch Elements found..

                          "HKEY_CLASSES_ROOT\CLSID\{147a976f-eee1-4377-8ea7-4716e4cdd239}"
                          "HKEY_CLASSES_ROOT\CLSID\{9afb8248-617f-460d-9366-d71cdeda3179}"
                          .

                          +-----------------------| Messenger Skinner Elements found..

                          .

                          +-----------------------| Sweetim Elements found..

                          "HKEY_CLASSES_ROOT\CLSID\{EEE6C35C-6118-11DC-9C72-001320C79847}"
                          "HKEY_CLASSES_ROOT\CLSID\{EEE6C35B-6118-11DC-9C72-001320C79847}"
                          "HKEY_CLASSES_ROOT\CLSID\{EEE6C35D-6118-11DC-9C72-001320C79847}"
                          "HKEY_CLASSES_ROOT\CLSID\{82AC53B4-164C-4B07-A016-437A8388B81A}"
                          "HKEY_CLASSES_ROOT\CLSID\{A4A0CB15-8465-4F58-A7E5-73084EA2A064}"
                          "HKEY_CLASSES_ROOT\Installer\UpgradeCodes\A97CEC23332751B47BA4B95BAA50C9D0"
                          "HKEY_CLASSES_ROOT\Installer\UpgradeCodes\789034A89BAC50E4782F0A7BDBF75632"
                          "HKEY_CLASSES_ROOT\SWEETIE.IEToolbar"
                          "HKEY_CLASSES_ROOT\SWEETIE.IEToolbar.1"
                          "HKEY_CLASSES_ROOT\SWEETIE.SWEETIE"
                          "HKEY_CLASSES_ROOT\SWEETIE.SWEETIE.3"
                          "HKEY_CLASSES_ROOT\SweetIM_URLSearchHook.ToolbarURLSearchHook"
                          "HKEY_CLASSES_ROOT\SweetIM_URLSearchHook.ToolbarURLSearchHook.1"
                          "HKEY_CLASSES_ROOT\Toolbar3.SWEETIE"
                          "HKEY_CLASSES_ROOT\Toolbar3.SWEETIE.1"
                          "HKEY_CLASSES_ROOT\Typelib\{EEE6C35E-6118-11DC-9C72-001320C79847}"
                          "HKEY_CLASSES_ROOT\Typelib\{EEE6C35F-6118-11DC-9C72-001320C79847}"
                          "HKEY_CLASSES_ROOT\MgMediaPlayer.GifAnimator"
                          "HKEY_CLASSES_ROOT\MgMediaPlayer.GifAnimator.1"
                          "HKEY_CURRENT_USER\SOFTWARE\SweetIM"
                          "HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks" /v "{EEE6C35D-6118-11DC-9C72-001320C79847}"
                          "HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{EEE6C35B-6118-11DC-9C72-001320C79847}"
                          "HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{EEE6C35C-6118-11DC-9C72-001320C79847}"
                          "HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{4D3B167E-5FD8-4276-8FD7-9DF19C1E4D19}"
                          "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar" /v "{EEE6C35B-6118-11DC-9C72-001320C79847}"
                          "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\run" /v "SweetIM"
                          "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EEE6C35C-6118-11DC-9C72-001320C79847}"
                          "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\A97CEC23332751B47BA4B95BAA50C9D0"
                          "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\789034A89BAC50E4782F0A7BDBF75632"
                          "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\02F47BF73B948514FAACADD8CBBDF37D"
                          "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\080D9F5E1E95FEE4794CE438E635239E"
                          "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1E264E0A5959A1C46BA9175A878B12EA"
                          "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2E6768B6932D112438F047C54D180635"
                          "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\351716A953E21214898904032EAE2E81"
                          "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\397C771A7BCAC904697C3EC629ED33ED"
                          "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\98CC8BF5A4A6E6C4ABF7051DDAB8B058"
                          "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A189D17A469616C4688D23E192996267"
                          "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D15DAF33C220F91468A1D7D57C31ACD7"
                          "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D3BA76A44C779424889063D5098ED2D6"
                          "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D6D0EB9FDBD90C04D92A7E729058F10D"
                          "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E4748F9A4181FCE46A23C13B517B9420"
                          "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\07D5290CDBDAE4242926B8E6CA650501"
                          "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\08E33F7B61DEFF24BB9673ED7D467636"
                          "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0E3D8A5B48622A445A7DF73FEFF32C3F"
                          "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1AC67655DD68F8240B2860F2D511EBD8"
                          "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\34EDDB1BFB3A2D448845F3EFD0F15A43"
                          "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\4318DF19719275242801CBE292063A4C"
                          "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\45FC115D1FEAEF849A4E1610D6EC8BF0"
                          "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\46A5861A389ADB844AF89E31BC9DF0A1"
                          "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\49B0E1A6FF50BBE4289E4E23DE6EA0C7"
                          "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\4CCCAC049F34D0540AAC13011398BEDB"
                          "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\5C4389D0BFB302C479DE4178BD5D9EBA"
                          "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\5D19F074C042AD34BAB463D4175A062E"
                          "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\5D2B09BDEF4FE54418E6F3373CDBC7AC"
                          "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\61B65D3397A1FBF4CB1571B5E4F6B5B0"
                          "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\68E8A05C60DD9254591DBD16C94EDDBF"
                          "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\697E782CF574CC34CBB9566440BA12BC"
                          "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6AE27A8613CF7EA4782F2886F67295E5"
                          "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7CE172051F585E04187BCB97570BFA74"
                          "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\86A901BA5265452499DCBF719C378EE3"
                          "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\88ABD1CD5C40EC84789A7F6EF86DAC5E"
                          "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\980289C22F80A7C4BB9323DC61255E4E"
                          "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\9A4B7EF3789F871419D9302583B20C15"
                          "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A6C53B0F76C44004A8F36716213017DB"
                          "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B59F2D8189784CC46A4597F2842480B0"
                          "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BD746FB95FB8E5B45BF66BE54D5FD91F"
                          "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CCF399FCD6D2D3F46BF02A1378654FC9"
                          "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D149C1355C98DE24E82CEFBD996FE06A"
                          "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\DB59FDB786388EA4D897F3EE715683AC"
                          "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\DB8DAD19CFBCC2049A4477183787E8C5"
                          "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E337925F629CF4C4FB08F3D9674DD839"
                          "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\EC65F200D112357449C8B1BC3CFA03D0"
                          "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F327D0C73C0973644A21E8CC852267A0"
                          "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F754C503375A13344B22388E18DFE87E"
                          "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\FA96423FE2B98E248A3B23548D1E22D9"
                          "HKEY_LOCAL_MACHINE\SOFTWARE\SweetIM"
                          .
                          [05/05/2008 22:41|d--------] C:\Program Files\SweetIM
                          [05/05/2008 22:41|d--------] C:\Documents and Settings\All Users\Application Data\SweetIM
                          [07/12/2008 20:29|--a------] C:\WINDOWS\Prefetch\SWEETIM.EXE-114201E6.pf

                          +-----------------------| ADDED SCAN ..

                          +--[HKEY_CURRENT_USER\..\Run]

                          MsnMsgr REG_SZ "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
                          EPSON Stylus C84 Series REG_SZ C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I0D2.EXE /P23 "EPSON Stylus C84 Series" /M "Stylus C84" /EF "HKCU"
                          BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA} REG_SZ "C:\Program Files\Fichiers communs\Nero\Lib\NMBgMonitor.exe"
                          swg REG_SZ C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe

                          +--[HKEY_LOCAL_MACHINE\..\Run]

                          NvCplDaemon REG_SZ RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
                          nwiz REG_SZ nwiz.exe /install
                          NvMediaCenter REG_SZ RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
                          AVP REG_SZ "C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 7.0\avp.exe"
                          SweetIM REG_SZ C:\Program Files\SweetIM\Messenger\SweetIM.exe
                          EPSON Stylus C84 Series REG_SZ C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I0D2.EXE /P23 "EPSON Stylus C84 Series" /O6 "USB001" /M "Stylus C84"
                          SunJavaUpdateSched REG_SZ "C:\Program Files\Java\jre1.6.0_04\bin\jusched.exe"
                          TkBellExe REG_SZ "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot

                          +--[HKEY_USERS\.DEFAULT\..\Run]

                          msnmsgr REG_SZ "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background

                          +--[HKEY_CURRENT_USER\..\Internet Explorer\MAIN]

                          Start Page : hxxp://www.lfp.fr/

                          +--[HKEY_LOCAL_MACHINE\..\Internet Explorer\MAIN]

                          Start Page : hxxp://home.sweetim.com

                          +---------------------------------------------------------------------------+

                          - "C:\AD-report-07.12.2008.log" (12580 octets)

                          [ END at: 21:06:13 | 07/12/2008 ] - [ Time elapsed: 33.4 seconds ]

                          +---------------------------------------------------------------------------+
                          +------------------------------- [ E.O.F - 175 lines ]
                          +---------------------------------------------------------------------------+
                          1. Destrio5 Modérateur
                            /!\ Déconnecte-toi et ferme toutes applications en cours /!\

                            ● Double-clique sur AD-Remover pour le lancer : au menu principal, choisis l'option B.

                            ● Coche à l'écran de sélection :
                            http://sd-1.archive-host.com/membres/up/16506160323759868/Capturer-ADR.JPG

                            Suppression Boonty/BoontyGames (Si trouvé)
                            Suppression Eorezo (Si trouvé)
                            Suppression Everest Poker (Si trouvé)
                            Suppression Funwebproduct/MyWay/MyWebsearch (Si trouvé)
                            Suppression Messenger Skinner (Si trouvé)
                            Suppression Sweetim (Si trouvé)

                            ● Puis choisis S, le programme va travailler.

                            ● Poste le rapport qui apparaît à la fin.

                            (Le rapport est sauvegardé aussi sous C:\Ad-report.log)

                            /!\ Si le Bureau ne réapparaît pas, presse Ctrl + Alt + Suppr, Onglet "Fichier", "Nouvelle tâche", tape explorer.exe et valide) /!\
                            1. mghirin Auteur
                              --------- Logfile of AD-Remover 1.0.6.5 by C_XX ---------

                              # START at: 21:05:40 | Dim 07/12/2008 ON Microsoft® Windows XP ™ v5.1.2600
                              # BOOT MODE: Normal

                              # OPTION: Scan
                              # EXECUTED FROM: C:\Program Files\Ad-remover\AD-Remover.bat

                              # PC: XPSP2-1EBC6E48E | USER: mikl ( Current user is an administrator )

                              # DRIVE(S): A:\
                              # Systemdrive: C:\ (NTFS)
                              # Internet Explorer v6.0.2900.2180

                              --------- [ RUNNING PROCESSES: 30 ] ---------

                              C:\WINDOWS\System32\smss.exe
                              C:\WINDOWS\system32\csrss.exe
                              C:\WINDOWS\system32\winlogon.exe
                              C:\WINDOWS\system32\services.exe
                              C:\WINDOWS\system32\lsass.exe
                              C:\WINDOWS\system32\svchost.exe
                              C:\WINDOWS\system32\svchost.exe
                              C:\WINDOWS\System32\svchost.exe
                              C:\WINDOWS\system32\svchost.exe
                              C:\WINDOWS\system32\spoolsv.exe
                              C:\WINDOWS\Explorer.EXE
                              C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 7.0\avp.exe
                              C:\Program Files\Canal\Canal Widget\VOD\CanalPlus.VOD.exe
                              C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
                              C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
                              C:\WINDOWS\system32\nvsvc32.exe
                              C:\WINDOWS\system32\svchost.exe
                              C:\WINDOWS\System32\alg.exe
                              C:\WINDOWS\System32\svchost.exe
                              C:\WINDOWS\system32\RUNDLL32.EXE
                              C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 7.0\avp.exe
                              C:\Program Files\SweetIM\Messenger\SweetIM.exe
                              C:\Program Files\Java\jre1.6.0_04\bin\jusched.exe
                              C:\WINDOWS\system32\svchost.exe
                              C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
                              C:\Program Files\Windows Live\Messenger\msnmsgr.exe
                              C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I0D2.EXE
                              C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
                              C:\Program Files\Windows Live\Messenger\usnsvc.exe
                              C:\WINDOWS\system32\ntvdm.exe

                              -----------------------------------

                              +-----------------------| Boonty/Boonty Games Elements found..

                              .

                              +-----------------------| Eorezo Elements found..

                              .

                              +-----------------------| Everest Poker Elements found..

                              .

                              +-----------------------| FunWebProducts/MyWay/MyWebSearch/MyGlobalSearch Elements found..

                              "HKEY_CLASSES_ROOT\CLSID\{147a976f-eee1-4377-8ea7-4716e4cdd239}"
                              "HKEY_CLASSES_ROOT\CLSID\{9afb8248-617f-460d-9366-d71cdeda3179}"
                              .

                              +-----------------------| Messenger Skinner Elements found..

                              .

                              +-----------------------| Sweetim Elements found..

                              "HKEY_CLASSES_ROOT\CLSID\{EEE6C35C-6118-11DC-9C72-001320C79847}"
                              "HKEY_CLASSES_ROOT\CLSID\{EEE6C35B-6118-11DC-9C72-001320C79847}"
                              "HKEY_CLASSES_ROOT\CLSID\{EEE6C35D-6118-11DC-9C72-001320C79847}"
                              "HKEY_CLASSES_ROOT\CLSID\{82AC53B4-164C-4B07-A016-437A8388B81A}"
                              "HKEY_CLASSES_ROOT\CLSID\{A4A0CB15-8465-4F58-A7E5-73084EA2A064}"
                              "HKEY_CLASSES_ROOT\Installer\UpgradeCodes\A97CEC23332751B47BA4B95BAA50C9D0"
                              "HKEY_CLASSES_ROOT\Installer\UpgradeCodes\789034A89BAC50E4782F0A7BDBF75632"
                              "HKEY_CLASSES_ROOT\SWEETIE.IEToolbar"
                              "HKEY_CLASSES_ROOT\SWEETIE.IEToolbar.1"
                              "HKEY_CLASSES_ROOT\SWEETIE.SWEETIE"
                              "HKEY_CLASSES_ROOT\SWEETIE.SWEETIE.3"
                              "HKEY_CLASSES_ROOT\SweetIM_URLSearchHook.ToolbarURLSearchHook"
                              "HKEY_CLASSES_ROOT\SweetIM_URLSearchHook.ToolbarURLSearchHook.1"
                              "HKEY_CLASSES_ROOT\Toolbar3.SWEETIE"
                              "HKEY_CLASSES_ROOT\Toolbar3.SWEETIE.1"
                              "HKEY_CLASSES_ROOT\Typelib\{EEE6C35E-6118-11DC-9C72-001320C79847}"
                              "HKEY_CLASSES_ROOT\Typelib\{EEE6C35F-6118-11DC-9C72-001320C79847}"
                              "HKEY_CLASSES_ROOT\MgMediaPlayer.GifAnimator"
                              "HKEY_CLASSES_ROOT\MgMediaPlayer.GifAnimator.1"
                              "HKEY_CURRENT_USER\SOFTWARE\SweetIM"
                              "HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks" /v "{EEE6C35D-6118-11DC-9C72-001320C79847}"
                              "HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{EEE6C35B-6118-11DC-9C72-001320C79847}"
                              "HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{EEE6C35C-6118-11DC-9C72-001320C79847}"
                              "HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{4D3B167E-5FD8-4276-8FD7-9DF19C1E4D19}"
                              "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar" /v "{EEE6C35B-6118-11DC-9C72-001320C79847}"
                              "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\run" /v "SweetIM"
                              "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EEE6C35C-6118-11DC-9C72-001320C79847}"
                              "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\A97CEC23332751B47BA4B95BAA50C9D0"
                              "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\789034A89BAC50E4782F0A7BDBF75632"
                              "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\02F47BF73B948514FAACADD8CBBDF37D"
                              "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\080D9F5E1E95FEE4794CE438E635239E"
                              "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1E264E0A5959A1C46BA9175A878B12EA"
                              "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2E6768B6932D112438F047C54D180635"
                              "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\351716A953E21214898904032EAE2E81"
                              "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\397C771A7BCAC904697C3EC629ED33ED"
                              "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\98CC8BF5A4A6E6C4ABF7051DDAB8B058"
                              "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A189D17A469616C4688D23E192996267"
                              "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D15DAF33C220F91468A1D7D57C31ACD7"
                              "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D3BA76A44C779424889063D5098ED2D6"
                              "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D6D0EB9FDBD90C04D92A7E729058F10D"
                              "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E4748F9A4181FCE46A23C13B517B9420"
                              "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\07D5290CDBDAE4242926B8E6CA650501"
                              "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\08E33F7B61DEFF24BB9673ED7D467636"
                              "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0E3D8A5B48622A445A7DF73FEFF32C3F"
                              "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1AC67655DD68F8240B2860F2D511EBD8"
                              "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\34EDDB1BFB3A2D448845F3EFD0F15A43"
                              "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\4318DF19719275242801CBE292063A4C"
                              "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\45FC115D1FEAEF849A4E1610D6EC8BF0"
                              "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\46A5861A389ADB844AF89E31BC9DF0A1"
                              "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\49B0E1A6FF50BBE4289E4E23DE6EA0C7"
                              "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\4CCCAC049F34D0540AAC13011398BEDB"
                              "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\5C4389D0BFB302C479DE4178BD5D9EBA"
                              "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\5D19F074C042AD34BAB463D4175A062E"
                              "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\5D2B09BDEF4FE54418E6F3373CDBC7AC"
                              "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\61B65D3397A1FBF4CB1571B5E4F6B5B0"
                              "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\68E8A05C60DD9254591DBD16C94EDDBF"
                              "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\697E782CF574CC34CBB9566440BA12BC"
                              "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6AE27A8613CF7EA4782F2886F67295E5"
                              "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7CE172051F585E04187BCB97570BFA74"
                              "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\86A901BA5265452499DCBF719C378EE3"
                              "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\88ABD1CD5C40EC84789A7F6EF86DAC5E"
                              "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\980289C22F80A7C4BB9323DC61255E4E"
                              "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\9A4B7EF3789F871419D9302583B20C15"
                              "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A6C53B0F76C44004A8F36716213017DB"
                              "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B59F2D8189784CC46A4597F2842480B0"
                              "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BD746FB95FB8E5B45BF66BE54D5FD91F"
                              "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CCF399FCD6D2D3F46BF02A1378654FC9"
                              "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D149C1355C98DE24E82CEFBD996FE06A"
                              "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\DB59FDB786388EA4D897F3EE715683AC"
                              "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\DB8DAD19CFBCC2049A4477183787E8C5"
                              "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E337925F629CF4C4FB08F3D9674DD839"
                              "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\EC65F200D112357449C8B1BC3CFA03D0"
                              "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F327D0C73C0973644A21E8CC852267A0"
                              "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F754C503375A13344B22388E18DFE87E"
                              "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\FA96423FE2B98E248A3B23548D1E22D9"
                              "HKEY_LOCAL_MACHINE\SOFTWARE\SweetIM"
                              .
                              [05/05/2008 22:41|d--------] C:\Program Files\SweetIM
                              [05/05/2008 22:41|d--------] C:\Documents and Settings\All Users\Application Data\SweetIM
                              [07/12/2008 20:29|--a------] C:\WINDOWS\Prefetch\SWEETIM.EXE-114201E6.pf

                              +-----------------------| ADDED SCAN ..

                              +--[HKEY_CURRENT_USER\..\Run]

                              MsnMsgr REG_SZ "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
                              EPSON Stylus C84 Series REG_SZ C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I0D2.EXE /P23 "EPSON Stylus C84 Series" /M "Stylus C84" /EF "HKCU"
                              BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA} REG_SZ "C:\Program Files\Fichiers communs\Nero\Lib\NMBgMonitor.exe"
                              swg REG_SZ C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe

                              +--[HKEY_LOCAL_MACHINE\..\Run]

                              NvCplDaemon REG_SZ RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
                              nwiz REG_SZ nwiz.exe /install
                              NvMediaCenter REG_SZ RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
                              AVP REG_SZ "C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 7.0\avp.exe"
                              SweetIM REG_SZ C:\Program Files\SweetIM\Messenger\SweetIM.exe
                              EPSON Stylus C84 Series REG_SZ C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I0D2.EXE /P23 "EPSON Stylus C84 Series" /O6 "USB001" /M "Stylus C84"
                              SunJavaUpdateSched REG_SZ "C:\Program Files\Java\jre1.6.0_04\bin\jusched.exe"
                              TkBellExe REG_SZ "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot

                              +--[HKEY_USERS\.DEFAULT\..\Run]

                              msnmsgr REG_SZ "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background

                              +--[HKEY_CURRENT_USER\..\Internet Explorer\MAIN]

                              Start Page : hxxp://www.lfp.fr/

                              +--[HKEY_LOCAL_MACHINE\..\Internet Explorer\MAIN]

                              Start Page : hxxp://home.sweetim.com

                              +---------------------------------------------------------------------------+

                              - "C:\AD-report-07.12.2008.log" (12580 octets)

                              [ END at: 21:06:13 | 07/12/2008 ] - [ Time elapsed: 33.4 seconds ]

                              +---------------------------------------------------------------------------+
                              +------------------------------- [ E.O.F - 175 lines ]
                              +---------------------------------------------------------------------------+
                              1. Destrio5 Modérateur
                                ● Télécharge AD-Remover (de Cyrildu17 / C_XX) sur ton Bureau.

                                /!\ Déconnecte-toi et ferme toutes applications en cours /!\

                                ● Double-clique sur le programme d'installation, installe-le dans son emplacement par défaut (C:\Program files).
                                ● Double-clique sur l'icône Ad-remover située sur ton Bureau.
                                ● Au menu principal, choisis l'option "A".
                                ● Poste le rapport qui apparaît à la fin.

                                (Le rapport est sauvegardé aussi sous C:\Ad-report(date).log)

                                (CTRL+A pour tout sélectionner, CTRL+C pour copier et CTRL+V pour coller)

                                Note :

                                "Process.exe", une composante de l'outil, est détectée par certains antivirus (AntiVir, Dr.Web, Kaspersky Anti-Virus) comme étant un RiskTool.
                                Il ne s'agit pas d'un virus, mais d'un utilitaire destiné à mettre fin à des processus.
                                Mis entre de mauvaises mains, cet utilitaire pourrait arrêter des logiciels de sécurité (Antivirus, Firewall...) d'où l'alerte émise par ces antivirus.
                                • 1
                                • 2
                                • 3

                                Discussions similaires

                                comment changer la couleur du surlignage sur MacBook
                                tournicou

                                2 réponses
                                Retour en arrière avec Pages sur Mac ?
                                alex 2510

                                13 réponses
                                À combien de pages équivaut 25 000 caractères ?
                                -Romane-

                                16 réponses
                                6000 caractère espaces compris --> pages
                                Sasha

                                4 réponses
                                Convertir le nombre de signes en nombre de pages
                                lucy

                                5 réponses