Check-up pour PC + 1-2 Problèmes

Tourjours pas de réponse?

 Mon problème a changé:

 - IE n'embête plus
 - Gbr et Gbq non plus

 J'ai testé moi même... Et apparemment ça a marché.

 Maintenant, mon ordi bug dès que je le laisse inactif quelques minutes: l'écran est noir (normal) mais quand je veux réutiliser l'ordi, pas moyen, l'écran se remet en marche, mais il est noir (pas de signal de l'ordi?).

 Mon router bug aussi, ou l'ordi je ne sais pas... une fois sur deux quand j'allume mon PC, pas moyen de se connecter à internet, accès local seulement. Je dois redémarrer l'ordi.

 Il y a un programme au démarrage, qui me demande de finir une mise à jour, enfin je comprend pas tout, et cette mise à jour je ne l'aie pas et ne la trouve pas sur internet... Je pense que c'est mon imprimante qui fait ça, enfin un de ses programmes...

 Le démarrage de mon PC est beaucoup plus lent que avant, enfin c est mon impression. Vous sauriez d'où ça peut venir?

 Merci. Dans l'attente de réponse, je vous salue.
 Xondro

J'ai besoin de réponse... Je galère... Merci

Salut Xondro


 On va vérifier cela, télécharge RSIT (de random/random) sur le bureau ici :
 http://images.malwareremoval.com/random/RSIT.exe

 - Double clique sur RSIT.exe qui est sur le bureau
 - Clique sur Continue dans la fenêtre
 - RSIT téléchargera HijackThis si il n’est pas présent où détecté, alors il faudra accepter la licence
 - Poste le contenue des deux rapports, log.txt et info.txt(réduit dans la barre des tâches) à la fin de l’analyse

 Utilise cjoint.com pour poster en lien ton rapport :
 http://cjoint.com/

 - Clique sur Parcourir pour aller chercher le rapport   C:\rsit\log.txt
 - Clique sur Ouvrir ensuite sur Créer le lien Cjoint

 - Fais un copier/coller du lien qui est devant Le lien a été créé: dans ta prochaine réponse.

 Faire la même chose avec l'autre rapport C:\rsit\info.txt

 Si ton rapport plus grand que 500Ko ici :  http://www.sendspace.com/


 @++     

Voilà =)


 http://cjoint.com/?erwMgFasfx

 http://cjoint.com/?erwM0Q5Y83

 Merci BEAUCOUP de m'aider =D

 Xondro

Salut Xondro


 

• Télécharge AD-Remover (de Cyrildu17 / C_XX) sur ton Bureau.

  Déconnecte-toi et ferme toutes applications en cours  

 

• Double-clique sur le programme d'installation, installe-le dans son emplacement par défaut (C:\Program files).

• Double-clique sur l'icône AD-Remover située sur ton Bureau.

• Au menu principal, choisis l'option Scanner.

• Poste le rapport qui apparaît à la fin.

 (Le rapport est sauvegardé aussi sous C:\Ad-report(Scan/clean).Txt

 (CTRL+A pour tout sélectionner, CTRL+C pour copier et CTRL+V pour coller)

 Note : "Process.exe", une composante de l'outil, est détecté par certains antivirus comme une infection, ne pas en tenir compte, il s'agit d'un faux positif, continue la procédure

 Aide : http://commentcestfait.forumac [...] r-t775.htm


 @++  

Voilà le rapport de AD-Remover:

 .
 ======= RAPPORT D'AD-REMOVER 2.0.0.0,B | UNIQUEMENT XP/VISTA/7 =======
 .
 Mis à jour par C_XX le 31/03/10 à 21:30
 Contact: AdRemover.contact@gmail.com
 Site web: http://pagesperso-orange.fr/No [...] mover.html
 .
 Lancé à: 23:14:05 le 17/04/2010 | Mode normal | Option: SCAN
 Exécuté de: C:\Ad-Remover\ADR.exe
 SE: Microsoft® Windows Vista™ HomePremium Service Pack 2 - X86
 Nom du PC: PC-DE-MAXIME | Utilisateur actuel: Maxime Valdemarin (Administrateur)
 .
 ============== ÉLÉMENT(S) TROUVÉ(S) ==============
 .
 .
 C:\Program Files\Ask.com
 C:\Program Files\live-player
 C:\Program Files\Mozilla FireFox\Components\AskHPRFF.js
 C:\ProgramData\Microsoft\Windo​ws\Start Menu\Programs\live-player
 C:\Users\Famille Valdemarin\AppData\LocalLow\As​kToolbar
 C:\Users\Maxime Valdemarin\AppData\Local\hcdeq​zmg.bat
 C:\Users\Maxime Valdemarin\AppData\Local\kowsw​gw.bat
 C:\Users\Maxime Valdemarin\AppData\LocalLow\As​kToolbar
 C:\Users\Maxime Valdemarin\AppData\Roaming\Moz​illa\FireFox\Profiles\vxx5y5xh​.default\extensions\toolbar@as​k.com
 C:\Users\Maxime Valdemarin\AppData\Roaming\Moz​illa\FireFox\Profiles\vxx5y5xh​.default\searchplugins\askcom.​xml
 C:\Windows\Installer\{86D4B82A​-ABED-442A-BE86-96357B70F4FE}
 C:\Windows\system32\Tasks\Sche​duled Update for Ask Toolbar
 .
 HKCU\Software\AppDataLow\AskBa​rDis
 HKCU\Software\AppDataLow\AskHo​mePage
 HKCU\Software\AppDataLow\AskTo​olbarInfo
 HKCU\Software\AppDataLow\Softw​are\AskToolbar
 HKCU\Software\Ask.com
 HKCU\Software\Lanconfig
 HKCU\Software\Live-Player
 HKCU\Software\Microsoft\Intern​et Explorer\Low Rights\ElevationPolicy\{A5AA24​EA-11B8-4113-95AE-9ED71DEAF12A​}
 HKCU\Software\Microsoft\Intern​et Explorer\SearchScopes\{171DEBE​B-C3D4-40b7-AC73-056A5EBA4A7E}
 HKCU\Software\Microsoft\Intern​et Explorer\SearchScopes\{afdbdda​a-5d3f-42ee-b79c-185a7020515b}
 HKCU\Software\Microsoft\System​Certificates\TrustedPublisher\​Certificates\62119EF862C6B3A0D​853419B87EB3E2F6C78640A
 HKCU\Software\Microsoft\System​Certificates\TrustedPublisher\​Certificates\7EE743314C844C7F4​45B8B1D7617612DF1FDD50F
 HKCU\Software\Microsoft\System​Certificates\TrustedPublisher\​Certificates\E6A6A4A475FCE37F8​B5AC2F1244DEB2BFCA5615A
 HKCU\Software\Microsoft\Window​s\CurrentVersion\Ext\Settings\​{D4027C7F-154A-4066-A1AD-4243D​8127440}
 HKCU\Software\Microsoft\Window​s\CurrentVersion\Ext\Stats\{D4​027C7F-154A-4066-A1AD-4243D812​7440}
 HKLM\Software\Classes\AppID\{9​B0CB95C-933A-4B8C-B6D4-EDCD19A​43874}
 HKLM\Software\Classes\AppID\Ge​nericAskToolbar.DLL
 HKLM\Software\Classes\CLSID\{D​4027C7F-154A-4066-A1AD-4243D81​27440}
 HKLM\Software\Classes\GenericA​skToolbar.ToolbarWnd
 HKLM\Software\Classes\GenericA​skToolbar.ToolbarWnd.1
 HKLM\Software\Classes\Installe​r\Products\A28B4D68DEBAA244EB6​86953B7074FEF
 HKLM\Software\Classes\Interfac​e\{6C434537-053E-486D-B62A-160​059D9D456}
 HKLM\Software\Classes\Interfac​e\{91CF619A-4686-4CA4-9232-3B2​E6B63AA92}
 HKLM\Software\Classes\Interfac​e\{AC71B60E-94C9-4EDE-BA46-E14​6747BB67E}
 HKLM\Software\Classes\Interfac​e\{DB885111-F39F-4D88-9EE5-C88​460B6DF7B}
 HKLM\Software\Classes\TypeLib\​{2996F0E7-292B-4CAE-893F-47B8B​1C05B56}
 HKLM\Software\Live-Player
 HKLM\Software\Microsoft\Intern​et Explorer\Low Rights\ElevationPolicy\{A5AA24​EA-11B8-4113-95AE-9ED71DEAF12A​}
 HKLM\Software\Microsoft\Window​s NT\CurrentVersion\Schedule\Tas​kCache\Tree\Scheduled Update for Ask Toolbar
 HKLM\Software\Microsoft\Window​s\CurrentVersion\Explorer\Brow​ser Helper Objects\{D4027C7F-154A-4066-A1​AD-4243D8127440}
 HKLM\Software\Microsoft\Window​s\CurrentVersion\Installer\Use​rdata\S-1-5-18\Products\A28B4D​68DEBAA244EB686953B7074FEF
 HKLM\SOFTWARE\Microsoft\Window​s\CurrentVersion\Uninstall\{86​D4B82A-ABED-442A-BE86-96357B70​F4FE}
 HKLM\Software\Microsoft\Window​s\CurrentVersion\Uninstall\hcd​eqzmg
 HKCU\Software\Microsoft\Intern​et Explorer\Toolbar\WebBrowser|{D​4027C7F-154A-4066-A1AD-4243D81​27440}
 HKLM\Software\Microsoft\Intern​et Explorer\Toolbar|{D4027C7F-154​A-4066-A1AD-4243D8127440}
 HKLM\Software\Microsoft\Window​s\CurrentVersion\SharedDLLs|C:​\Program Files\Ask.com\GenericAskToolba​r.dll
 HKLM\Software\Microsoft\Window​s\CurrentVersion\SharedDLLs|C:​\Program Files\Ask.com\TaskScheduler.ex​e
 HKLM\Software\Microsoft\Window​s\CurrentVersion\SharedDLLs|C:​\Program Files\Ask.com\UpdateTask.exe
 .
 .
 ============== SCAN ADDITIONNEL ==============
 .
 * Mozilla FireFox Version 3.5.7 (fr) *
 .
 C:\Users\Maxime Valdemarin\..\vxx5y5xh.default​\prefs.js - browser.download.dir: C:\\Users\\Maxime Valdemarin\\Downloads
 C:\Users\Maxime Valdemarin\..\vxx5y5xh.default​\prefs.js - browser.search.defaultenginena​me: Search Solver
 C:\Users\Maxime Valdemarin\..\vxx5y5xh.default​\prefs.js - browser.search.defaulturl: hxxp://www.google.com/search?l​r=&ie=UTF-8&oe=UTF-8&q=
 C:\Users\Maxime Valdemarin\..\vxx5y5xh.default​\prefs.js - browser.search.selectedEngine: Search Solver
 C:\Users\Maxime Valdemarin\..\vxx5y5xh.default​\prefs.js - browser.startup.homepage: hxxp://www.search-solver.com/?​t=Q0912021537&s=h
 C:\Users\Maxime Valdemarin\..\vxx5y5xh.default​\prefs.js - browser.startup.homepage_overr​ide.mstone: rv:1.9.1.2
 C:\Users\Maxime Valdemarin\..\vxx5y5xh.default​\prefs.js - keyword.URL: hxxp://supertoolbar.ask.com/re​direct?client=ff&src=kw&tb=BT3​&o=14979&locale=fr_EU&q=
 C:\Users\Maxime Valdemarin\..\vxx5y5xh.default​\prefs.js - browser.search.selectedEngine: DAEMON Search
 C:\Users\Famille Valdemarin\..\q546ltwg.default​\prefs.js - browser.download.dir: C:\\Users\\Famille Valdemarin\\Downloads
 C:\Users\Famille Valdemarin\..\q546ltwg.default​\prefs.js - browser.download.lastDir: C:\\Users\\Famille Valdemarin\\Desktop
 C:\Users\Famille Valdemarin\..\q546ltwg.default​\prefs.js - browser.search.defaultenginena​me: Google
 C:\Users\Famille Valdemarin\..\q546ltwg.default​\prefs.js - browser.search.defaulturl: hxxp://www.google.com/search?l​r=&ie=UTF-8&oe=UTF-8&q=
 C:\Users\Famille Valdemarin\..\q546ltwg.default​\prefs.js - browser.startup.homepage: hxxp://www.google.ch
 C:\Users\Famille Valdemarin\..\q546ltwg.default​\prefs.js - browser.startup.homepage_overr​ide.mstone: rv:1.9.1.7
 C:\Users\Marielle Valdemarin\..\jmd1ppi2.default​\prefs.js - browser.download.dir: C:\\Users\\Marielle Valdemarin\\Downloads
 C:\Users\Marielle Valdemarin\..\jmd1ppi2.default​\prefs.js - browser.search.defaultenginena​me: Google
 C:\Users\Marielle Valdemarin\..\jmd1ppi2.default​\prefs.js - browser.search.defaulturl: hxxp://www.google.com/search?l​r=&ie=UTF-8&oe=UTF-8&q=
 C:\Users\Marielle Valdemarin\..\jmd1ppi2.default​\prefs.js - browser.search.selectedEngine: Google
 C:\Users\Marielle Valdemarin\..\jmd1ppi2.default​\prefs.js - browser.startup.homepage: hxxp://google.ch
 C:\Users\Marielle Valdemarin\..\jmd1ppi2.default​\prefs.js - browser.startup.homepage_overr​ide.mstone: rv:1.9.1.7
 .
 TROUVÉ: C:\Users\Maxime Valdemarin\..\vxx5y5xh.default​\prefs.js - user_pref("browser.search.defa​ultengine", "Ask.com" );
 TROUVÉ: C:\Users\Maxime Valdemarin\..\vxx5y5xh.default​\prefs.js - user_pref("browser.search.orde​r.1", "Ask.com" );
 TROUVÉ: C:\Users\Maxime Valdemarin\..\vxx5y5xh.default​\prefs.js - user_pref("extensions.asktb.cb​id", "J7" );
 TROUVÉ: C:\Users\Maxime Valdemarin\..\vxx5y5xh.default​\prefs.js - user_pref("extensions.asktb.de​fault-channel-url-mask", "hxxp://eu.ask.com/web?qsrc={q​src}&o={o}&l={l}&q={query}&dm=​all" );
 TROUVÉ: C:\Users\Maxime Valdemarin\..\vxx5y5xh.default​\prefs.js - user_pref("extensions.asktb.l"​, "dis" );
 TROUVÉ: C:\Users\Maxime Valdemarin\..\vxx5y5xh.default​\prefs.js - user_pref("extensions.asktb.lo​cale", "fr_EU" );
 TROUVÉ: C:\Users\Maxime Valdemarin\..\vxx5y5xh.default​\prefs.js - user_pref("extensions.asktb.o"​, "14979" );
 TROUVÉ: C:\Users\Maxime Valdemarin\..\vxx5y5xh.default​\prefs.js - user_pref("extensions.asktb.qs​rc", "2871" );
 TROUVÉ: C:\Users\Maxime Valdemarin\..\vxx5y5xh.default​\prefs.js - user_pref("extensions.enabledI​tems", "{3112ca9c-de6d-4884-a869-9855​de68056c}:3.1.20081127W,{CAFEE​FAC-0016-0000-0011-ABCDEFFEDCB​A}:6.0.11,{CAFEEFAC-0016-0000-​0013-ABCDEFFEDCBA}:6.0.13,{20a​82645-c095-46ed-80e3-088257605​34b}:1.1,{CAFEEFAC-0016-0000-0​015-ABCDEFFEDCBA}:6.0.15,{CAFE​EFAC-0016-0000-0016-ABCDEFFEDC​BA}:6.0.16,toolbar@ask.com:3.5​.0.145,{972ce4c6-7e08-4474-a28​5-3208198ce6fd}:3.5.2" );
 TROUVÉ: C:\Users\Maxime Valdemarin\..\vxx5y5xh.default​\prefs.js - user_pref("keyword.URL", "hxxp://supertoolbar.ask.com/r​edirect?client=ff&src=kw&tb=BT​3&o=14979&locale=fr_EU&q=" );
 .
 * Internet Explorer Version 8.0.6001.18904 *
 .
 [HKCU\Software\Microsoft\Intern​et Explorer\Main]
 .
 Do404Search: 0x01000000
 Enable Browser Extensions: yes
 Local Page: C:\Windows\system32\blank.htm
 Search Page: hxxp://go.microsoft.com/fwlink​/?LinkId=54896
 Show_ToolBar: yes
 Start Page: hxxp://search.conduit.com?Sear​chSource=10&ctid=CT1098640
 Use Search Asst: no
 .
 [HKLM\Software\Microsoft\Intern​et Explorer\Main]
 .
 AutoHide: yes
 Default_Page_URL: hxxp://ie.redirect.hp.com/svs/​rdr?TYPE=3&tp=iehome&locale=fr​_ch&c=81&bd=Pavilion&pf=deskto​p
 Default_Search_URL: hxxp://go.microsoft.com/fwlink​/?LinkId=54896
 Delete_Temp_Files_On_Exit: yes
 Local Page: C:\Windows\System32\blank.htm
 Search Page: hxxp://go.microsoft.com/fwlink​/?LinkId=54896
 Start Page: hxxp://ie.redirect.hp.com/svs/​rdr?TYPE=3&tp=iehome&locale=fr​_ch&c=81&bd=Pavilion&pf=deskto​p
 .
 [HKLM\Software\Microsoft\Intern​et Explorer\ABOUTURLS]
 .
 Tabs: res://ieframe.dll/tabswelcome.​htm
 Blank: res://mshtml.dll/blank.htm
 .
 ============== SUSPECT(S) ==============
 .
 C:\Users\Maxime Valdemarin\AppData\Roaming\uTo​rrent\Assassins Creed 2 [Multi9] [PCDVD9][WITH CRACK] [www.soloestreno.com].torrent
 C:\Users\Maxime Valdemarin\AppData\Roaming\uTo​rrent\Assassins Creed PC FIXED Keygen - Serial Works ONLINE.torrent
 C:\Users\Maxime Valdemarin\AppData\Roaming\uTo​rrent\Far Cry 2 (Ubisoft Games) (CRACKED) (DIRECT PLAY) [blaze69].torrent
 C:\Users\Maxime Valdemarin\AppData\Roaming\uTo​rrent\Supreme_Commander_2_Crac​kfix-Razor1911.torrent
 C:\Users\Maxime Valdemarin\AppData\Roaming\uTo​rrent\The witcher FR + Patch 1.2.rar.torrent
 C:\Users\Maxime Valdemarin\AppData\Roaming\uTo​rrent\[PC] DRAGON AGE ORIGINS-KEYGEN-[ESPACONSOLAS.com].rar.torrent
 C:\Users\Maxime Valdemarin\Downloads\Assassins Creed 2 [Multi9] [PCDVD9][WITH CRACK] [www.soloestreno.com]\ac.nfo
 C:\Users\Maxime Valdemarin\Downloads\Assassins Creed 2 [Multi9] [PCDVD9][WITH CRACK] [www.soloestreno.com]\Assassins​.Creed.2.Multi.9.Clo​neDVD.PC.​DVD9\autorun.exe
 C:\Users\Maxime Valdemarin\Downloads\Assassins Creed 2 [Multi9] [PCDVD9][WITH CRACK] [www.soloestreno.com]\Assassins​.Creed.2.Multi.9.Clo​neDVD.PC.​DVD9\setup.exe
 C:\Users\Maxime Valdemarin\Downloads\Assassins Creed 2 [Multi9] [PCDVD9][WITH CRACK] [www.soloestreno.com]\Assassins​.Creed.2.Multi.9.Clo​neDVD.PC.​DVD9\Support\DirectX\​DXSETUP.​exe
 C:\Users\Maxime Valdemarin\Downloads\Assassins Creed 2 [Multi9] [PCDVD9][WITH CRACK] [www.soloestreno.com]\Assassins​.Creed.2.Multi.9.Clo​neDVD.PC.​DVD9\Support\GameLaun​cher\Ubi​softGameLauncherInstal​ler.exe
 C:\Users\Maxime Valdemarin\Downloads\Assassins Creed 2 [Multi9] [PCDVD9][WITH CRACK] [www.soloestreno.com]\Assassins​.Creed.2.Multi.9.Clo​neDVD.PC.​DVD9\Support\VCRedist​\vcredis​t_x86.exe
 C:\Users\Maxime Valdemarin\Downloads\Assassins Creed 2 [Multi9] [PCDVD9][WITH CRACK] [www.soloestreno.com]\Crack\Ass​assinsCreedII.exe
 C:\Users\Maxime Valdemarin\Downloads\Assassins Creed 2 [Multi9] [PCDVD9][WITH CRACK] [www.soloestreno.com]\Crack\Ass​assinsCreedIIGame.ex​e
 C:\Users\Maxime Valdemarin\Downloads\Assassins Creed 2 [Multi9] [PCDVD9][WITH CRACK] [www.soloestreno.com]\Crack\tor​rentleech.nfo
 C:\Users\Maxime Valdemarin\Downloads\Assassins Creed 2 [Multi9] [PCDVD9][WITH CRACK] [www.soloestreno.com]\Crack\Ubi​softGameLauncher.exe
 C:\Users\Maxime Valdemarin\Downloads\Assassins Creed PC FIXED Keygen - Serial Works ONLINE.torrent
 C:\Users\Maxime Valdemarin\Downloads\Battlefie​ld.Bad.Company.2-RELOADED\rld-​bbc2\Crack\BFBC2Game.exe
 C:\Users\Maxime Valdemarin\Downloads\Battlefie​ld.Bad.Company.2-RELOADED\rld-​bbc2\Crack\rld-bbc2.exe
 .
 ==============================​==========
 .
 C:\Users\MAXIME~1\AppData\Loca​l\Temp: 51780 Fichier(s), 64 Dossier(s)
 C:\Windows\temp: 397 Fichier(s), 15 Dossier(s)
 C:\Users\Maxime Valdemarin\AppData\Roaming\Mic​rosoft\Windows\Cookies: 373 Fichier(s), 2 Dossier(s)
 Temporary Internet Files: 298 Fichier(s), 60 Dossier(s)
 .
 C:\Ad-Remover\Quarantine: 0 Fichier(s)
 C:\Ad-Remover\Backup: 0 Fichier(s)
 .
 C:\Ad-Report-SCAN[1].txt - 12295 Octet(s)
 .
 Fin à: 23:50:42, 17/04/2010
 .
 ============== E.O.F - SCAN[1] ==============


 Merci Dédétraqué!!!

Salut Xondro


 Désactive provisoirement et seulement le temps de l'utilisation de AD-Remover, la protection en temps réel de ton Antivirus et de tes Antispywares, qui peuvent gêner fortement la procédure de recherche et de nettoyage de l'outil.
 Déconnecte-toi et ferme toutes applications en cours  

 

• Double-clique sur le programme d'installation, installe-le dans son emplacement par défaut (C:\Program files).

• Double-clique sur l'icône AD-Remover située sur ton Bureau.

• Au menu principal, choisis l'option Nettoyer.

• Poste le rapport qui apparaît à la fin.

 (Le rapport est sauvegardé aussi sous C:\Ad-report(Scan/clean).Txt

 (CTRL+A pour tout sélectionner, CTRL+C pour copier et CTRL+V pour coller)

 Note : "Process.exe", une composante de l'outil, est détecté par certains antivirus comme une infection, ne pas en tenir compte, il s'agit d'un faux positif, continue la procédure

 Aide : http://commentcestfait.forumac [...] r-t775.htm


 -----


 Mettre MalwareByte's Anti-Malware à jour

 ---

 - Redémarre en mode sans échec :

 Au redémarrage de ton PC tapote sur la touche F8 ou F5, sur l'écran suivant déplace toi avec les flèches de direction et choisis Mode sans échec. Choisis ta session habituelle et non la session Administrateur

 ---

 - Double clique sur le raccourci de MalwareByte's Anti-Malware qui est sur le bureau.
 - Sélectionne Exécuter un examen complet si ce n'est pas déjà fait
 - clique sur Rechercher

 - Une fois le scan terminé, une fenêtre s'ouvre, clique sur  sur Ok

 - Si MalwareByte's n'a rien détecté, clique sur Ok  Un rapport va apparaître ferme-le.

 - Si MalwareByte's a détecté des infections, clique sur Afficher les résultats  ensuite sur Supprimer la sélection

 - Enregistre le rapport sur ton Bureau comme cela il sera plus facile à retrouver, poste ensuite ce rapport.

 Note : Si MalwareByte's  a besoin de redémarrer pour terminer la suppression, accepte en cliquant sur Ok

 Tutoriel pour MalwareByte's ici :
 http://www.malekal.com/tutoria [...] alware.php


 @++  
 

Désolé de la réponse tardive, j'ai pas eu beaucoup de temps pour m'occuper de ça... =(

 Ad-Report-SCAN:

 .
 ======= RAPPORT D'AD-REMOVER 2.0.0.0,B | UNIQUEMENT XP/VISTA/7 =======
 .
 Mis à jour par C_XX le 31/03/10 à 21:30
 Contact: AdRemover.contact@gmail.com
 Site web: http://pagesperso-orange.fr/No [...] mover.html
 .
 Lancé à: 23:14:05 le 17/04/2010 | Mode normal | Option: SCAN
 Exécuté de: C:\Ad-Remover\ADR.exe
 SE: Microsoft® Windows Vista™ HomePremium Service Pack 2 - X86
 Nom du PC: PC-DE-MAXIME | Utilisateur actuel: Maxime Valdemarin (Administrateur)
 .
 ============== ÉLÉMENT(S) TROUVÉ(S) ==============
 .
 .
 C:\Program Files\Ask.com
 C:\Program Files\live-player
 C:\Program Files\Mozilla FireFox\Components\AskHPRFF.js
 C:\ProgramData\Microsoft\Windo​ws\Start Menu\Programs\live-player
 C:\Users\Famille Valdemarin\AppData\LocalLow\As​kToolbar
 C:\Users\Maxime Valdemarin\AppData\Local\hcdeq​zmg.bat
 C:\Users\Maxime Valdemarin\AppData\Local\kowsw​gw.bat
 C:\Users\Maxime Valdemarin\AppData\LocalLow\As​kToolbar
 C:\Users\Maxime Valdemarin\AppData\Roaming\Moz​illa\FireFox\Profiles\vxx5y5xh​.default\extensions\toolbar@as​k.com
 C:\Users\Maxime Valdemarin\AppData\Roaming\Moz​illa\FireFox\Profiles\vxx5y5xh​.default\searchplugins\askcom.​xml
 C:\Windows\Installer\{86D4B82A​-ABED-442A-BE86-96357B70F4FE}
 C:\Windows\system32\Tasks\Sche​duled Update for Ask Toolbar
 .
 HKCU\Software\AppDataLow\AskBa​rDis
 HKCU\Software\AppDataLow\AskHo​mePage
 HKCU\Software\AppDataLow\AskTo​olbarInfo
 HKCU\Software\AppDataLow\Softw​are\AskToolbar
 HKCU\Software\Ask.com
 HKCU\Software\Lanconfig
 HKCU\Software\Live-Player
 HKCU\Software\Microsoft\Intern​et Explorer\Low Rights\ElevationPolicy\{A5AA24​EA-11B8-4113-95AE-9ED71DEAF12A​}
 HKCU\Software\Microsoft\Intern​et Explorer\SearchScopes\{171DEBE​B-C3D4-40b7-AC73-056A5EBA4A7E}
 HKCU\Software\Microsoft\Intern​et Explorer\SearchScopes\{afdbdda​a-5d3f-42ee-b79c-185a7020515b}
 HKCU\Software\Microsoft\System​Certificates\TrustedPublisher\​Certificates\62119EF862C6B3A0D​853419B87EB3E2F6C78640A
 HKCU\Software\Microsoft\System​Certificates\TrustedPublisher\​Certificates\7EE743314C844C7F4​45B8B1D7617612DF1FDD50F
 HKCU\Software\Microsoft\System​Certificates\TrustedPublisher\​Certificates\E6A6A4A475FCE37F8​B5AC2F1244DEB2BFCA5615A
 HKCU\Software\Microsoft\Window​s\CurrentVersion\Ext\Settings\​{D4027C7F-154A-4066-A1AD-4243D​8127440}
 HKCU\Software\Microsoft\Window​s\CurrentVersion\Ext\Stats\{D4​027C7F-154A-4066-A1AD-4243D812​7440}
 HKLM\Software\Classes\AppID\{9​B0CB95C-933A-4B8C-B6D4-EDCD19A​43874}
 HKLM\Software\Classes\AppID\Ge​nericAskToolbar.DLL
 HKLM\Software\Classes\CLSID\{D​4027C7F-154A-4066-A1AD-4243D81​27440}
 HKLM\Software\Classes\GenericA​skToolbar.ToolbarWnd
 HKLM\Software\Classes\GenericA​skToolbar.ToolbarWnd.1
 HKLM\Software\Classes\Installe​r\Products\A28B4D68DEBAA244EB6​86953B7074FEF
 HKLM\Software\Classes\Interfac​e\{6C434537-053E-486D-B62A-160​059D9D456}
 HKLM\Software\Classes\Interfac​e\{91CF619A-4686-4CA4-9232-3B2​E6B63AA92}
 HKLM\Software\Classes\Interfac​e\{AC71B60E-94C9-4EDE-BA46-E14​6747BB67E}
 HKLM\Software\Classes\Interfac​e\{DB885111-F39F-4D88-9EE5-C88​460B6DF7B}
 HKLM\Software\Classes\TypeLib\​{2996F0E7-292B-4CAE-893F-47B8B​1C05B56}
 HKLM\Software\Live-Player
 HKLM\Software\Microsoft\Intern​et Explorer\Low Rights\ElevationPolicy\{A5AA24​EA-11B8-4113-95AE-9ED71DEAF12A​}
 HKLM\Software\Microsoft\Window​s NT\CurrentVersion\Schedule\Tas​kCache\Tree\Scheduled Update for Ask Toolbar
 HKLM\Software\Microsoft\Window​s\CurrentVersion\Explorer\Brow​ser Helper Objects\{D4027C7F-154A-4066-A1​AD-4243D8127440}
 HKLM\Software\Microsoft\Window​s\CurrentVersion\Installer\Use​rdata\S-1-5-18\Products\A28B4D​68DEBAA244EB686953B7074FEF
 HKLM\SOFTWARE\Microsoft\Window​s\CurrentVersion\Uninstall\{86​D4B82A-ABED-442A-BE86-96357B70​F4FE}
 HKLM\Software\Microsoft\Window​s\CurrentVersion\Uninstall\hcd​eqzmg
 HKCU\Software\Microsoft\Intern​et Explorer\Toolbar\WebBrowser|{D​4027C7F-154A-4066-A1AD-4243D81​27440}
 HKLM\Software\Microsoft\Intern​et Explorer\Toolbar|{D4027C7F-154​A-4066-A1AD-4243D8127440}
 HKLM\Software\Microsoft\Window​s\CurrentVersion\SharedDLLs|C:​\Program Files\Ask.com\GenericAskToolba​r.dll
 HKLM\Software\Microsoft\Window​s\CurrentVersion\SharedDLLs|C:​\Program Files\Ask.com\TaskScheduler.ex​e
 HKLM\Software\Microsoft\Window​s\CurrentVersion\SharedDLLs|C:​\Program Files\Ask.com\UpdateTask.exe
 .
 .
 ============== SCAN ADDITIONNEL ==============
 .
 * Mozilla FireFox Version 3.5.7 (fr) *
 .
 C:\Users\Maxime Valdemarin\..\vxx5y5xh.default​\prefs.js - browser.download.dir: C:\\Users\\Maxime Valdemarin\\Downloads
 C:\Users\Maxime Valdemarin\..\vxx5y5xh.default​\prefs.js - browser.search.defaultenginena​me: Search Solver
 C:\Users\Maxime Valdemarin\..\vxx5y5xh.default​\prefs.js - browser.search.defaulturl: hxxp://www.google.com/search?l​r=&ie=UTF-8&oe=UTF-8&q=
 C:\Users\Maxime Valdemarin\..\vxx5y5xh.default​\prefs.js - browser.search.selectedEngine: Search Solver
 C:\Users\Maxime Valdemarin\..\vxx5y5xh.default​\prefs.js - browser.startup.homepage: hxxp://www.search-solver.com/?​t=Q0912021537&s=h
 C:\Users\Maxime Valdemarin\..\vxx5y5xh.default​\prefs.js - browser.startup.homepage_overr​ide.mstone: rv:1.9.1.2
 C:\Users\Maxime Valdemarin\..\vxx5y5xh.default​\prefs.js - keyword.URL: hxxp://supertoolbar.ask.com/re​direct?client=ff&src=kw&tb=BT3​&o=14979&locale=fr_EU&q=
 C:\Users\Maxime Valdemarin\..\vxx5y5xh.default​\prefs.js - browser.search.selectedEngine: DAEMON Search
 C:\Users\Famille Valdemarin\..\q546ltwg.default​\prefs.js - browser.download.dir: C:\\Users\\Famille Valdemarin\\Downloads
 C:\Users\Famille Valdemarin\..\q546ltwg.default​\prefs.js - browser.download.lastDir: C:\\Users\\Famille Valdemarin\\Desktop
 C:\Users\Famille Valdemarin\..\q546ltwg.default​\prefs.js - browser.search.defaultenginena​me: Google
 C:\Users\Famille Valdemarin\..\q546ltwg.default​\prefs.js - browser.search.defaulturl: hxxp://www.google.com/search?l​r=&ie=UTF-8&oe=UTF-8&q=
 C:\Users\Famille Valdemarin\..\q546ltwg.default​\prefs.js - browser.startup.homepage: hxxp://www.google.ch
 C:\Users\Famille Valdemarin\..\q546ltwg.default​\prefs.js - browser.startup.homepage_overr​ide.mstone: rv:1.9.1.7
 C:\Users\Marielle Valdemarin\..\jmd1ppi2.default​\prefs.js - browser.download.dir: C:\\Users\\Marielle Valdemarin\\Downloads
 C:\Users\Marielle Valdemarin\..\jmd1ppi2.default​\prefs.js - browser.search.defaultenginena​me: Google
 C:\Users\Marielle Valdemarin\..\jmd1ppi2.default​\prefs.js - browser.search.defaulturl: hxxp://www.google.com/search?l​r=&ie=UTF-8&oe=UTF-8&q=
 C:\Users\Marielle Valdemarin\..\jmd1ppi2.default​\prefs.js - browser.search.selectedEngine: Google
 C:\Users\Marielle Valdemarin\..\jmd1ppi2.default​\prefs.js - browser.startup.homepage: hxxp://google.ch
 C:\Users\Marielle Valdemarin\..\jmd1ppi2.default​\prefs.js - browser.startup.homepage_overr​ide.mstone: rv:1.9.1.7
 .
 TROUVÉ: C:\Users\Maxime Valdemarin\..\vxx5y5xh.default​\prefs.js - user_pref("browser.search.defa​ultengine", "Ask.com" );
 TROUVÉ: C:\Users\Maxime Valdemarin\..\vxx5y5xh.default​\prefs.js - user_pref("browser.search.orde​r.1", "Ask.com" );
 TROUVÉ: C:\Users\Maxime Valdemarin\..\vxx5y5xh.default​\prefs.js - user_pref("extensions.asktb.cb​id", "J7" );
 TROUVÉ: C:\Users\Maxime Valdemarin\..\vxx5y5xh.default​\prefs.js - user_pref("extensions.asktb.de​fault-channel-url-mask", "hxxp://eu.ask.com/web?qsrc={q​src}&o={o}&l={l}&q={query}&dm=​all" );
 TROUVÉ: C:\Users\Maxime Valdemarin\..\vxx5y5xh.default​\prefs.js - user_pref("extensions.asktb.l"​, "dis" );
 TROUVÉ: C:\Users\Maxime Valdemarin\..\vxx5y5xh.default​\prefs.js - user_pref("extensions.asktb.lo​cale", "fr_EU" );
 TROUVÉ: C:\Users\Maxime Valdemarin\..\vxx5y5xh.default​\prefs.js - user_pref("extensions.asktb.o"​, "14979" );
 TROUVÉ: C:\Users\Maxime Valdemarin\..\vxx5y5xh.default​\prefs.js - user_pref("extensions.asktb.qs​rc", "2871" );
 TROUVÉ: C:\Users\Maxime Valdemarin\..\vxx5y5xh.default​\prefs.js - user_pref("extensions.enabledI​tems", "{3112ca9c-de6d-4884-a869-9855​de68056c}:3.1.20081127W,{CAFEE​FAC-0016-0000-0011-ABCDEFFEDCB​A}:6.0.11,{CAFEEFAC-0016-0000-​0013-ABCDEFFEDCBA}:6.0.13,{20a​82645-c095-46ed-80e3-088257605​34b}:1.1,{CAFEEFAC-0016-0000-0​015-ABCDEFFEDCBA}:6.0.15,{CAFE​EFAC-0016-0000-0016-ABCDEFFEDC​BA}:6.0.16,toolbar@ask.com:3.5​.0.145,{972ce4c6-7e08-4474-a28​5-3208198ce6fd}:3.5.2" );
 TROUVÉ: C:\Users\Maxime Valdemarin\..\vxx5y5xh.default​\prefs.js - user_pref("keyword.URL", "hxxp://supertoolbar.ask.com/r​edirect?client=ff&src=kw&tb=BT​3&o=14979&locale=fr_EU&q=" );
 .
 * Internet Explorer Version 8.0.6001.18904 *
 .
 [HKCU\Software\Microsoft\Intern​et Explorer\Main]
 .
 Do404Search: 0x01000000
 Enable Browser Extensions: yes
 Local Page: C:\Windows\system32\blank.htm
 Search Page: hxxp://go.microsoft.com/fwlink​/?LinkId=54896
 Show_ToolBar: yes
 Start Page: hxxp://search.conduit.com?Sear​chSource=10&ctid=CT1098640
 Use Search Asst: no
 .
 [HKLM\Software\Microsoft\Intern​et Explorer\Main]
 .
 AutoHide: yes
 Default_Page_URL: hxxp://ie.redirect.hp.com/svs/​rdr?TYPE=3&tp=iehome&locale=fr​_ch&c=81&bd=Pavilion&pf=deskto​p
 Default_Search_URL: hxxp://go.microsoft.com/fwlink​/?LinkId=54896
 Delete_Temp_Files_On_Exit: yes
 Local Page: C:\Windows\System32\blank.htm
 Search Page: hxxp://go.microsoft.com/fwlink​/?LinkId=54896
 Start Page: hxxp://ie.redirect.hp.com/svs/​rdr?TYPE=3&tp=iehome&locale=fr​_ch&c=81&bd=Pavilion&pf=deskto​p
 .
 [HKLM\Software\Microsoft\Intern​et Explorer\ABOUTURLS]
 .
 Tabs: res://ieframe.dll/tabswelcome.​htm
 Blank: res://mshtml.dll/blank.htm
 .
 ============== SUSPECT(S) ==============
 .
 C:\Users\Maxime Valdemarin\AppData\Roaming\uTo​rrent\Assassins Creed 2 [Multi9] [PCDVD9][WITH CRACK] [www.soloestreno.com].torrent
 C:\Users\Maxime Valdemarin\AppData\Roaming\uTo​rrent\Assassins Creed PC FIXED Keygen - Serial Works ONLINE.torrent
 C:\Users\Maxime Valdemarin\AppData\Roaming\uTo​rrent\Far Cry 2 (Ubisoft Games) (CRACKED) (DIRECT PLAY) [blaze69].torrent
 C:\Users\Maxime Valdemarin\AppData\Roaming\uTo​rrent\Supreme_Commander_2_Crac​kfix-Razor1911.torrent
 C:\Users\Maxime Valdemarin\AppData\Roaming\uTo​rrent\The witcher FR + Patch 1.2.rar.torrent
 C:\Users\Maxime Valdemarin\AppData\Roaming\uTo​rrent\[PC] DRAGON AGE ORIGINS-KEYGEN-[ESPACONSOLAS.com].rar.torrent
 C:\Users\Maxime Valdemarin\Downloads\Assassins Creed 2 [Multi9] [PCDVD9][WITH CRACK] [www.soloestreno.com]\ac.nfo
 C:\Users\Maxime Valdemarin\Downloads\Assassins Creed 2 [Multi9] [PCDVD9][WITH CRACK] [www.soloestreno.com]\Assassins​.Creed.2.Multi.9.Clo​neDVD.PC.​DVD9\autorun.exe
 C:\Users\Maxime Valdemarin\Downloads\Assassins Creed 2 [Multi9] [PCDVD9][WITH CRACK] [www.soloestreno.com]\Assassins​.Creed.2.Multi.9.Clo​neDVD.PC.​DVD9\setup.exe
 C:\Users\Maxime Valdemarin\Downloads\Assassins Creed 2 [Multi9] [PCDVD9][WITH CRACK] [www.soloestreno.com]\Assassins​.Creed.2.Multi.9.Clo​neDVD.PC.​DVD9\Support\DirectX\​DXSETUP.​exe
 C:\Users\Maxime Valdemarin\Downloads\Assassins Creed 2 [Multi9] [PCDVD9][WITH CRACK] [www.soloestreno.com]\Assassins​.Creed.2.Multi.9.Clo​neDVD.PC.​DVD9\Support\GameLaun​cher\Ubi​softGameLauncherInstal​ler.exe
 C:\Users\Maxime Valdemarin\Downloads\Assassins Creed 2 [Multi9] [PCDVD9][WITH CRACK] [www.soloestreno.com]\Assassins​.Creed.2.Multi.9.Clo​neDVD.PC.​DVD9\Support\VCRedist​\vcredis​t_x86.exe
 C:\Users\Maxime Valdemarin\Downloads\Assassins Creed 2 [Multi9] [PCDVD9][WITH CRACK] [www.soloestreno.com]\Crack\Ass​assinsCreedII.exe
 C:\Users\Maxime Valdemarin\Downloads\Assassins Creed 2 [Multi9] [PCDVD9][WITH CRACK] [www.soloestreno.com]\Crack\Ass​assinsCreedIIGame.ex​e
 C:\Users\Maxime Valdemarin\Downloads\Assassins Creed 2 [Multi9] [PCDVD9][WITH CRACK] [www.soloestreno.com]\Crack\tor​rentleech.nfo
 C:\Users\Maxime Valdemarin\Downloads\Assassins Creed 2 [Multi9] [PCDVD9][WITH CRACK] [www.soloestreno.com]\Crack\Ubi​softGameLauncher.exe
 C:\Users\Maxime Valdemarin\Downloads\Assassins Creed PC FIXED Keygen - Serial Works ONLINE.torrent
 C:\Users\Maxime Valdemarin\Downloads\Battlefie​ld.Bad.Company.2-RELOADED\rld-​bbc2\Crack\BFBC2Game.exe
 C:\Users\Maxime Valdemarin\Downloads\Battlefie​ld.Bad.Company.2-RELOADED\rld-​bbc2\Crack\rld-bbc2.exe
 .
 ==============================​==========
 .
 C:\Users\MAXIME~1\AppData\Loca​l\Temp: 51780 Fichier(s), 64 Dossier(s)
 C:\Windows\temp: 397 Fichier(s), 15 Dossier(s)
 C:\Users\Maxime Valdemarin\AppData\Roaming\Mic​rosoft\Windows\Cookies: 373 Fichier(s), 2 Dossier(s)
 Temporary Internet Files: 298 Fichier(s), 60 Dossier(s)
 .
 C:\Ad-Remover\Quarantine: 0 Fichier(s)
 C:\Ad-Remover\Backup: 0 Fichier(s)
 .
 C:\Ad-Report-SCAN[1].txt - 12295 Octet(s)
 .
 Fin à: 23:50:42, 17/04/2010
 .
 ============== E.O.F - SCAN[1] ==============




 Ad-Report-CLEAN

 .
 ======= RAPPORT D'AD-REMOVER 2.0.0.0,B | UNIQUEMENT XP/VISTA/7 =======
 .
 Mis à jour par C_XX le 31/03/10 à 21:30
 Contact: AdRemover.contact@gmail.com
 Site web: http://pagesperso-orange.fr/No [...] mover.html
 .
 Lancé à: 23:36:07 le 18/04/2010 | Mode normal | Option: CLEAN
 Exécuté de: C:\Ad-Remover\ADR.exe
 SE: Microsoft® Windows Vista™ HomePremium Service Pack 2 - X86
 Nom du PC: PC-DE-MAXIME | Utilisateur actuel: Maxime Valdemarin (Administrateur)
 .
 ============== ÉLÉMENT(S) NEUTRALISÉ(S) ==============
 .
 .
 C:\Program Files\Ask.com
 C:\Program Files\live-player
 C:\Program Files\Mozilla FireFox\Components\AskHPRFF.js
 C:\ProgramData\Microsoft\Windo​ws\Start Menu\Programs\live-player
 C:\Users\Famille Valdemarin\AppData\LocalLow\As​kToolbar
 C:\Users\Maxime Valdemarin\AppData\Local\hcdeq​zmg.bat
 C:\Users\Maxime Valdemarin\AppData\Local\kowsw​gw.bat
 C:\Users\Maxime Valdemarin\AppData\LocalLow\As​kToolbar
 C:\Users\Maxime Valdemarin\AppData\Roaming\Moz​illa\FireFox\Profiles\vxx5y5xh​.default\extensions\toolbar@as​k.com
 C:\Users\Maxime Valdemarin\AppData\Roaming\Moz​illa\FireFox\Profiles\vxx5y5xh​.default\searchplugins\askcom.​xml
 C:\Windows\Installer\{86D4B82A​-ABED-442A-BE86-96357B70F4FE}
 C:\Windows\system32\Tasks\Sche​duled Update for Ask Toolbar

 (!) -- Fichiers temporaires supprimés.
 .
 HKCU\Software\AppDataLow\AskBa​rDis
 HKCU\Software\AppDataLow\AskHo​mePage
 HKCU\Software\AppDataLow\AskTo​olbarInfo
 HKCU\Software\AppDataLow\Softw​are\AskToolbar
 HKCU\Software\Ask.com
 HKCU\Software\Lanconfig
 HKCU\Software\Live-Player
 HKCU\Software\Microsoft\Intern​et Explorer\Low Rights\ElevationPolicy\{A5AA24​EA-11B8-4113-95AE-9ED71DEAF12A​}
 HKCU\Software\Microsoft\Intern​et Explorer\SearchScopes\{171DEBE​B-C3D4-40b7-AC73-056A5EBA4A7E}
 HKCU\Software\Microsoft\Intern​et Explorer\SearchScopes\{afdbdda​a-5d3f-42ee-b79c-185a7020515b}
 HKCU\Software\Microsoft\System​Certificates\TrustedPublisher\​Certificates\62119EF862C6B3A0D​853419B87EB3E2F6C78640A
 HKCU\Software\Microsoft\System​Certificates\TrustedPublisher\​Certificates\7EE743314C844C7F4​45B8B1D7617612DF1FDD50F
 HKCU\Software\Microsoft\System​Certificates\TrustedPublisher\​Certificates\E6A6A4A475FCE37F8​B5AC2F1244DEB2BFCA5615A
 HKCU\Software\Microsoft\Window​s\CurrentVersion\Ext\Settings\​{D4027C7F-154A-4066-A1AD-4243D​8127440}
 HKCU\Software\Microsoft\Window​s\CurrentVersion\Ext\Stats\{D4​027C7F-154A-4066-A1AD-4243D812​7440}
 HKLM\Software\Classes\AppID\{9​B0CB95C-933A-4B8C-B6D4-EDCD19A​43874}
 HKLM\Software\Classes\AppID\Ge​nericAskToolbar.DLL
 HKLM\Software\Classes\CLSID\{D​4027C7F-154A-4066-A1AD-4243D81​27440}
 HKLM\Software\Classes\GenericA​skToolbar.ToolbarWnd
 HKLM\Software\Classes\GenericA​skToolbar.ToolbarWnd.1
 HKLM\Software\Classes\Installe​r\Products\A28B4D68DEBAA244EB6​86953B7074FEF
 HKLM\Software\Classes\Interfac​e\{6C434537-053E-486D-B62A-160​059D9D456}
 HKLM\Software\Classes\Interfac​e\{91CF619A-4686-4CA4-9232-3B2​E6B63AA92}
 HKLM\Software\Classes\Interfac​e\{AC71B60E-94C9-4EDE-BA46-E14​6747BB67E}
 HKLM\Software\Classes\Interfac​e\{DB885111-F39F-4D88-9EE5-C88​460B6DF7B}
 HKLM\Software\Classes\TypeLib\​{2996F0E7-292B-4CAE-893F-47B8B​1C05B56}
 HKLM\Software\Live-Player
 HKLM\Software\Microsoft\Intern​et Explorer\Low Rights\ElevationPolicy\{A5AA24​EA-11B8-4113-95AE-9ED71DEAF12A​}
 HKLM\Software\Microsoft\Window​s NT\CurrentVersion\Schedule\Tas​kCache\Tree\Scheduled Update for Ask Toolbar
 HKLM\Software\Microsoft\Window​s\CurrentVersion\Explorer\Brow​ser Helper Objects\{D4027C7F-154A-4066-A1​AD-4243D8127440}
 HKLM\Software\Microsoft\Window​s\CurrentVersion\Installer\Use​rdata\S-1-5-18\Products\A28B4D​68DEBAA244EB686953B7074FEF
 HKLM\SOFTWARE\Microsoft\Window​s\CurrentVersion\Uninstall\{86​D4B82A-ABED-442A-BE86-96357B70​F4FE}
 HKLM\Software\Microsoft\Window​s\CurrentVersion\Uninstall\hcd​eqzmg
 HKCU\Software\Microsoft\Intern​et Explorer\Toolbar\WebBrowser|{D​4027C7F-154A-4066-A1AD-4243D81​27440}
 HKLM\Software\Microsoft\Intern​et Explorer\Toolbar|{D4027C7F-154​A-4066-A1AD-4243D8127440}
 HKLM\Software\Microsoft\Window​s\CurrentVersion\SharedDLLs|C:​\Program Files\Ask.com\GenericAskToolba​r.dll
 HKLM\Software\Microsoft\Window​s\CurrentVersion\SharedDLLs|C:​\Program Files\Ask.com\TaskScheduler.ex​e
 HKLM\Software\Microsoft\Window​s\CurrentVersion\SharedDLLs|C:​\Program Files\Ask.com\UpdateTask.exe
 .
 (Orpheline) BHO: {02478D38-C3F9-4efb-9B51-7695E​CA05670} (CLSID manquant)
 .
 ============== SCAN ADDITIONNEL ==============
 .
 * Mozilla FireFox Version 3.5.7 (fr) *
 .
 C:\Users\Maxime Valdemarin\..\vxx5y5xh.default​\prefs.js - browser.download.dir: C:\\Users\\Maxime Valdemarin\\Downloads
 C:\Users\Maxime Valdemarin\..\vxx5y5xh.default​\prefs.js - browser.search.defaultenginena​me: Search Solver
 C:\Users\Maxime Valdemarin\..\vxx5y5xh.default​\prefs.js - browser.search.defaulturl: hxxp://www.google.com/search?l​r=&ie=UTF-8&oe=UTF-8&q=
 C:\Users\Maxime Valdemarin\..\vxx5y5xh.default​\prefs.js - browser.search.selectedEngine: Search Solver
 C:\Users\Maxime Valdemarin\..\vxx5y5xh.default​\prefs.js - browser.startup.homepage: hxxp://www.search-solver.com/?​t=Q0912021537&s=h
 C:\Users\Maxime Valdemarin\..\vxx5y5xh.default​\prefs.js - browser.startup.homepage_overr​ide.mstone: rv:1.9.1.2
 C:\Users\Maxime Valdemarin\..\vxx5y5xh.default​\prefs.js - keyword.URL: hxxp://supertoolbar.ask.com/re​direct?client=ff&src=kw&tb=BT3​&o=14979&locale=fr_EU&q=
 C:\Users\Maxime Valdemarin\..\vxx5y5xh.default​\prefs.js - browser.search.selectedEngine: DAEMON Search
 C:\Users\Famille Valdemarin\..\q546ltwg.default​\prefs.js - browser.download.dir: C:\\Users\\Famille Valdemarin\\Downloads
 C:\Users\Famille Valdemarin\..\q546ltwg.default​\prefs.js - browser.download.lastDir: C:\\Users\\Famille Valdemarin\\Desktop
 C:\Users\Famille Valdemarin\..\q546ltwg.default​\prefs.js - browser.search.defaultenginena​me: Google
 C:\Users\Famille Valdemarin\..\q546ltwg.default​\prefs.js - browser.search.defaulturl: hxxp://www.google.com/search?l​r=&ie=UTF-8&oe=UTF-8&q=
 C:\Users\Famille Valdemarin\..\q546ltwg.default​\prefs.js - browser.startup.homepage: hxxp://www.google.ch
 C:\Users\Famille Valdemarin\..\q546ltwg.default​\prefs.js - browser.startup.homepage_overr​ide.mstone: rv:1.9.1.7
 C:\Users\Marielle Valdemarin\..\jmd1ppi2.default​\prefs.js - browser.download.dir: C:\\Users\\Marielle Valdemarin\\Downloads
 C:\Users\Marielle Valdemarin\..\jmd1ppi2.default​\prefs.js - browser.search.defaultenginena​me: Google
 C:\Users\Marielle Valdemarin\..\jmd1ppi2.default​\prefs.js - browser.search.defaulturl: hxxp://www.google.com/search?l​r=&ie=UTF-8&oe=UTF-8&q=
 C:\Users\Marielle Valdemarin\..\jmd1ppi2.default​\prefs.js - browser.search.selectedEngine: Google
 C:\Users\Marielle Valdemarin\..\jmd1ppi2.default​\prefs.js - browser.startup.homepage: hxxp://google.ch
 C:\Users\Marielle Valdemarin\..\jmd1ppi2.default​\prefs.js - browser.startup.homepage_overr​ide.mstone: rv:1.9.1.7
 .
 EFFACÉ: C:\Users\Maxime Valdemarin\..\vxx5y5xh.default​\prefs.js - user_pref("browser.search.defa​ultengine", "Ask.com" );
 EFFACÉ: C:\Users\Maxime Valdemarin\..\vxx5y5xh.default​\prefs.js - user_pref("browser.search.orde​r.1", "Ask.com" );
 EFFACÉ: C:\Users\Maxime Valdemarin\..\vxx5y5xh.default​\prefs.js - user_pref("extensions.asktb.cb​id", "J7" );
 EFFACÉ: C:\Users\Maxime Valdemarin\..\vxx5y5xh.default​\prefs.js - user_pref("extensions.asktb.de​fault-channel-url-mask", "hxxp://eu.ask.com/web?qsrc={q​src}&o={o}&l={l}&q={query}&dm=​all" );
 EFFACÉ: C:\Users\Maxime Valdemarin\..\vxx5y5xh.default​\prefs.js - user_pref("extensions.asktb.l"​, "dis" );
 EFFACÉ: C:\Users\Maxime Valdemarin\..\vxx5y5xh.default​\prefs.js - user_pref("extensions.asktb.lo​cale", "fr_EU" );
 EFFACÉ: C:\Users\Maxime Valdemarin\..\vxx5y5xh.default​\prefs.js - user_pref("extensions.asktb.o"​, "14979" );
 EFFACÉ: C:\Users\Maxime Valdemarin\..\vxx5y5xh.default​\prefs.js - user_pref("extensions.asktb.qs​rc", "2871" );
 EFFACÉ: C:\Users\Maxime Valdemarin\..\vxx5y5xh.default​\prefs.js - user_pref("extensions.enabledI​tems", "{3112ca9c-de6d-4884-a869-9855​de68056c}:3.1.20081127W,{CAFEE​FAC-0016-0000-0011-ABCDEFFEDCB​A}:6.0.11,{CAFEEFAC-0016-0000-​0013-ABCDEFFEDCBA}:6.0.13,{20a​82645-c095-46ed-80e3-088257605​34b}:1.1,{CAFEEFAC-0016-0000-0​015-ABCDEFFEDCBA}:6.0.15,{CAFE​EFAC-0016-0000-0016-ABCDEFFEDC​BA}:6.0.16,toolbar@ask.com:3.5​.0.145,{972ce4c6-7e08-4474-a28​5-3208198ce6fd}:3.5.2" );
 EFFACÉ: C:\Users\Maxime Valdemarin\..\vxx5y5xh.default​\prefs.js - user_pref("keyword.URL", "hxxp://supertoolbar.ask.com/r​edirect?client=ff&src=kw&tb=BT​3&o=14979&locale=fr_EU&q=" );
 .
 * Internet Explorer Version 8.0.6001.18904 *
 .
 [HKCU\Software\Microsoft\Intern​et Explorer\Main]
 .
 Default_Page_URL: hxxp://www.microsoft.com/isapi​/redir.dll?prd=ie&pver=6&ar=ms​nhome
 Default_Search_URL: hxxp://www.microsoft.com/isapi​/redir.dll?prd=ie&ar=iesearch
 Do404Search: 0x01000000
 Enable Browser Extensions: yes
 Local Page: C:\Windows\system32\blank.htm
 Search bar: hxxp://go.microsoft.com/fwlink​/?linkid=54896
 Show_ToolBar: yes
 Start Page: hxxp://fr.msn.com/
 Use Search Asst: no
 .
 [HKLM\Software\Microsoft\Intern​et Explorer\Main]
 .
 AutoHide: yes
 Default_Page_URL: hxxp://www.microsoft.com/isapi​/redir.dll?prd=ie&pver=6&ar=ms​nhome
 Default_Search_URL: hxxp://www.microsoft.com/isapi​/redir.dll?prd=ie&ar=iesearch
 Delete_Temp_Files_On_Exit: yes
 Local Page: C:\Windows\System32\blank.htm
 Search bar: hxxp://search.msn.com/spbasic.​htm
 Search Page: hxxp://www.microsoft.com/isapi​/redir.dll?prd=ie&ar=iesearch
 Start Page: hxxp://fr.msn.com/
 .
 [HKLM\Software\Microsoft\Intern​et Explorer\ABOUTURLS]
 .
 Tabs: res://ieframe.dll/tabswelcome.​htm
 Blank: res://mshtml.dll/blank.htm
 .
 ============== SUSPECT(S) ==============
 .
 C:\Users\Maxime Valdemarin\AppData\Roaming\uTo​rrent\Assassins Creed 2 [Multi9] [PCDVD9][WITH CRACK] [www.soloestreno.com].torrent
 C:\Users\Maxime Valdemarin\AppData\Roaming\uTo​rrent\Assassins Creed PC FIXED Keygen - Serial Works ONLINE.torrent
 C:\Users\Maxime Valdemarin\AppData\Roaming\uTo​rrent\Far Cry 2 (Ubisoft Games) (CRACKED) (DIRECT PLAY) [blaze69].torrent
 C:\Users\Maxime Valdemarin\AppData\Roaming\uTo​rrent\Supreme_Commander_2_Crac​kfix-Razor1911.torrent
 C:\Users\Maxime Valdemarin\AppData\Roaming\uTo​rrent\The witcher FR + Patch 1.2.rar.torrent
 C:\Users\Maxime Valdemarin\AppData\Roaming\uTo​rrent\[PC] DRAGON AGE ORIGINS-KEYGEN-[ESPACONSOLAS.com].rar.torrent
 C:\Users\Maxime Valdemarin\Downloads\Assassins Creed 2 [Multi9] [PCDVD9][WITH CRACK] [www.soloestreno.com]\ac.nfo
 C:\Users\Maxime Valdemarin\Downloads\Assassins Creed 2 [Multi9] [PCDVD9][WITH CRACK] [www.soloestreno.com]\Assassins​.Creed.2.Multi.9.Clo​neDVD.PC.​DVD9\autorun.exe
 C:\Users\Maxime Valdemarin\Downloads\Assassins Creed 2 [Multi9] [PCDVD9][WITH CRACK] [www.soloestreno.com]\Assassins​.Creed.2.Multi.9.Clo​neDVD.PC.​DVD9\setup.exe
 C:\Users\Maxime Valdemarin\Downloads\Assassins Creed 2 [Multi9] [PCDVD9][WITH CRACK] [www.soloestreno.com]\Assassins​.Creed.2.Multi.9.Clo​neDVD.PC.​DVD9\Support\DirectX\​DXSETUP.​exe
 C:\Users\Maxime Valdemarin\Downloads\Assassins Creed 2 [Multi9] [PCDVD9][WITH CRACK] [www.soloestreno.com]\Assassins​.Creed.2.Multi.9.Clo​neDVD.PC.​DVD9\Support\GameLaun​cher\Ubi​softGameLauncherInstal​ler.exe
 C:\Users\Maxime Valdemarin\Downloads\Assassins Creed 2 [Multi9] [PCDVD9][WITH CRACK] [www.soloestreno.com]\Assassins​.Creed.2.Multi.9.Clo​neDVD.PC.​DVD9\Support\VCRedist​\vcredis​t_x86.exe
 C:\Users\Maxime Valdemarin\Downloads\Assassins Creed 2 [Multi9] [PCDVD9][WITH CRACK] [www.soloestreno.com]\Crack\Ass​assinsCreedII.exe
 C:\Users\Maxime Valdemarin\Downloads\Assassins Creed 2 [Multi9] [PCDVD9][WITH CRACK] [www.soloestreno.com]\Crack\Ass​assinsCreedIIGame.ex​e
 C:\Users\Maxime Valdemarin\Downloads\Assassins Creed 2 [Multi9] [PCDVD9][WITH CRACK] [www.soloestreno.com]\Crack\tor​rentleech.nfo
 C:\Users\Maxime Valdemarin\Downloads\Assassins Creed 2 [Multi9] [PCDVD9][WITH CRACK] [www.soloestreno.com]\Crack\Ubi​softGameLauncher.exe
 C:\Users\Maxime Valdemarin\Downloads\Assassins Creed PC FIXED Keygen - Serial Works ONLINE.torrent
 C:\Users\Maxime Valdemarin\Downloads\Battlefie​ld.Bad.Company.2-RELOADED\rld-​bbc2\Crack\BFBC2Game.exe
 C:\Users\Maxime Valdemarin\Downloads\Battlefie​ld.Bad.Company.2-RELOADED\rld-​bbc2\Crack\rld-bbc2.exe
 .
 ==============================​==========
 .
 .
 ======= RAPPORT D'AD-REMOVER 2.0.0.0,B | UNIQUEMENT XP/VISTA/7 =======
 .
 Mis à jour par C_XX le 31/03/10 à 21:30
 Contact: AdRemover.contact@gmail.com
 Site web: http://pagesperso-orange.fr/No [...] mover.html
 .
 Lancé à: 15:46:50 le 19/04/2010 | Mode normal | Option: CLEAN
 Exécuté de: C:\Ad-Remover\ADR.exe
 SE: Microsoft® Windows Vista™ HomePremium Service Pack 2 - X86
 Nom du PC: PC-DE-MAXIME | Utilisateur actuel: Maxime Valdemarin (Administrateur)
 .
 ============== ÉLÉMENT(S) NEUTRALISÉ(S) ==============
 .
 .
 C:\Program Files\Ask.com
 C:\Program Files\live-player
 C:\Program Files\Mozilla FireFox\Components\AskHPRFF.js
 C:\ProgramData\Microsoft\Windo​ws\Start Menu\Programs\live-player
 C:\Users\Maxime Valdemarin\AppData\Local\hcdeq​zmg.bat
 C:\Users\Maxime Valdemarin\AppData\Local\kowsw​gw.bat
 C:\Users\Maxime Valdemarin\AppData\Roaming\Moz​illa\FireFox\Profiles\vxx5y5xh​.default\extensions\toolbar@as​k.com
 C:\Windows\Installer\{86D4B82A​-ABED-442A-BE86-96357B70F4FE}
 C:\Windows\system32\Tasks\Sche​duled Update for Ask Toolbar

 (!) -- Fichiers temporaires supprimés.
 .
 HKCU\Software\AppDataLow\AskBa​rDis
 HKCU\Software\AppDataLow\AskHo​mePage
 HKCU\Software\AppDataLow\AskTo​olbarInfo
 HKCU\Software\AppDataLow\Softw​are\AskToolbar
 HKCU\Software\Ask.com
 HKCU\Software\Lanconfig
 HKCU\Software\Live-Player
 HKCU\Software\Microsoft\Intern​et Explorer\Low Rights\ElevationPolicy\{A5AA24​EA-11B8-4113-95AE-9ED71DEAF12A​}
 HKCU\Software\Microsoft\Intern​et Explorer\SearchScopes\{171DEBE​B-C3D4-40b7-AC73-056A5EBA4A7E}
 HKCU\Software\Microsoft\Intern​et Explorer\SearchScopes\{afdbdda​a-5d3f-42ee-b79c-185a7020515b}
 HKCU\Software\Microsoft\System​Certificates\TrustedPublisher\​Certificates\62119EF862C6B3A0D​853419B87EB3E2F6C78640A
 HKCU\Software\Microsoft\System​Certificates\TrustedPublisher\​Certificates\7EE743314C844C7F4​45B8B1D7617612DF1FDD50F
 HKCU\Software\Microsoft\System​Certificates\TrustedPublisher\​Certificates\E6A6A4A475FCE37F8​B5AC2F1244DEB2BFCA5615A
 HKCU\Software\Microsoft\Window​s\CurrentVersion\Ext\Settings\​{D4027C7F-154A-4066-A1AD-4243D​8127440}
 HKCU\Software\Microsoft\Window​s\CurrentVersion\Ext\Stats\{D4​027C7F-154A-4066-A1AD-4243D812​7440}
 HKLM\Software\Classes\AppID\{9​B0CB95C-933A-4B8C-B6D4-EDCD19A​43874}
 HKLM\Software\Classes\AppID\Ge​nericAskToolbar.DLL
 HKLM\Software\Classes\CLSID\{D​4027C7F-154A-4066-A1AD-4243D81​27440}
 HKLM\Software\Classes\GenericA​skToolbar.ToolbarWnd
 HKLM\Software\Classes\GenericA​skToolbar.ToolbarWnd.1
 HKLM\Software\Classes\Installe​r\Products\A28B4D68DEBAA244EB6​86953B7074FEF
 HKLM\Software\Classes\Interfac​e\{6C434537-053E-486D-B62A-160​059D9D456}
 HKLM\Software\Classes\Interfac​e\{91CF619A-4686-4CA4-9232-3B2​E6B63AA92}
 HKLM\Software\Classes\Interfac​e\{AC71B60E-94C9-4EDE-BA46-E14​6747BB67E}
 HKLM\Software\Classes\Interfac​e\{DB885111-F39F-4D88-9EE5-C88​460B6DF7B}
 HKLM\Software\Classes\TypeLib\​{2996F0E7-292B-4CAE-893F-47B8B​1C05B56}
 HKLM\Software\Live-Player
 HKLM\Software\Microsoft\Intern​et Explorer\Low Rights\ElevationPolicy\{A5AA24​EA-11B8-4113-95AE-9ED71DEAF12A​}
 HKLM\Software\Microsoft\Window​s NT\CurrentVersion\Schedule\Tas​kCache\Tree\Scheduled Update for Ask Toolbar
 HKLM\Software\Microsoft\Window​s\CurrentVersion\Explorer\Brow​ser Helper Objects\{D4027C7F-154A-4066-A1​AD-4243D8127440}
 HKLM\Software\Microsoft\Window​s\CurrentVersion\Installer\Use​rdata\S-1-5-18\Products\A28B4D​68DEBAA244EB686953B7074FEF
 HKLM\SOFTWARE\Microsoft\Window​s\CurrentVersion\Uninstall\{86​D4B82A-ABED-442A-BE86-96357B70​F4FE}
 HKLM\Software\Microsoft\Window​s\CurrentVersion\Uninstall\hcd​eqzmg
 HKCU\Software\Microsoft\Intern​et Explorer\Toolbar\WebBrowser|{D​4027C7F-154A-4066-A1AD-4243D81​27440}
 HKLM\Software\Microsoft\Intern​et Explorer\Toolbar|{D4027C7F-154​A-4066-A1AD-4243D8127440}
 HKLM\Software\Microsoft\Window​s\CurrentVersion\SharedDLLs|C:​\Program Files\Ask.com\GenericAskToolba​r.dll
 HKLM\Software\Microsoft\Window​s\CurrentVersion\SharedDLLs|C:​\Program Files\Ask.com\TaskScheduler.ex​e
 HKLM\Software\Microsoft\Window​s\CurrentVersion\SharedDLLs|C:​\Program Files\Ask.com\UpdateTask.exe
 .
 (Orpheline) BHO: {02478D38-C3F9-4efb-9B51-7695E​CA05670} (CLSID manquant)
 .
 ============== SCAN ADDITIONNEL ==============
 .
 * Mozilla FireFox Version 3.5.7 (fr) *
 .
 C:\Users\Maxime Valdemarin\..\vxx5y5xh.default​\prefs.js - browser.download.dir: C:\\Users\\Maxime Valdemarin\\Downloads
 C:\Users\Maxime Valdemarin\..\vxx5y5xh.default​\prefs.js - browser.search.defaultenginena​me: Search Solver
 C:\Users\Maxime Valdemarin\..\vxx5y5xh.default​\prefs.js - browser.search.defaulturl: hxxp://www.google.com/search?l​r=&ie=UTF-8&oe=UTF-8&q=
 C:\Users\Maxime Valdemarin\..\vxx5y5xh.default​\prefs.js - browser.search.selectedEngine: Search Solver
 C:\Users\Maxime Valdemarin\..\vxx5y5xh.default​\prefs.js - browser.startup.homepage: hxxp://www.search-solver.com/?​t=Q0912021537&s=h
 C:\Users\Maxime Valdemarin\..\vxx5y5xh.default​\prefs.js - browser.startup.homepage_overr​ide.mstone: rv:1.9.1.2
 C:\Users\Maxime Valdemarin\..\vxx5y5xh.default​\prefs.js - keyword.URL: hxxp://supertoolbar.ask.com/re​direct?client=ff&src=kw&tb=BT3​&o=14979&locale=fr_EU&q=
 C:\Users\Maxime Valdemarin\..\vxx5y5xh.default​\prefs.js - browser.search.selectedEngine: DAEMON Search
 C:\Users\Famille Valdemarin\..\q546ltwg.default​\prefs.js - browser.download.dir: C:\\Users\\Famille Valdemarin\\Downloads
 C:\Users\Famille Valdemarin\..\q546ltwg.default​\prefs.js - browser.download.lastDir: C:\\Users\\Famille Valdemarin\\Desktop
 C:\Users\Famille Valdemarin\..\q546ltwg.default​\prefs.js - browser.search.defaultenginena​me: Google
 C:\Users\Famille Valdemarin\..\q546ltwg.default​\prefs.js - browser.search.defaulturl: hxxp://www.google.com/search?l​r=&ie=UTF-8&oe=UTF-8&q=
 C:\Users\Famille Valdemarin\..\q546ltwg.default​\prefs.js - browser.startup.homepage: hxxp://www.google.ch
 C:\Users\Famille Valdemarin\..\q546ltwg.default​\prefs.js - browser.startup.homepage_overr​ide.mstone: rv:1.9.1.7
 C:\Users\Marielle Valdemarin\..\jmd1ppi2.default​\prefs.js - browser.download.dir: C:\\Users\\Marielle Valdemarin\\Downloads
 C:\Users\Marielle Valdemarin\..\jmd1ppi2.default​\prefs.js - browser.search.defaultenginena​me: Google
 C:\Users\Marielle Valdemarin\..\jmd1ppi2.default​\prefs.js - browser.search.defaulturl: hxxp://www.google.com/search?l​r=&ie=UTF-8&oe=UTF-8&q=
 C:\Users\Marielle Valdemarin\..\jmd1ppi2.default​\prefs.js - browser.search.selectedEngine: Google
 C:\Users\Marielle Valdemarin\..\jmd1ppi2.default​\prefs.js - browser.startup.homepage: hxxp://google.ch
 C:\Users\Marielle Valdemarin\..\jmd1ppi2.default​\prefs.js - browser.startup.homepage_overr​ide.mstone: rv:1.9.1.7
 .
 EFFACÉ: C:\Users\Maxime Valdemarin\..\vxx5y5xh.default​\prefs.js - user_pref("browser.search.defa​ultengine", "Ask.com" );
 EFFACÉ: C:\Users\Maxime Valdemarin\..\vxx5y5xh.default​\prefs.js - user_pref("browser.search.orde​r.1", "Ask.com" );
 EFFACÉ: C:\Users\Maxime Valdemarin\..\vxx5y5xh.default​\prefs.js - user_pref("extensions.asktb.cb​id", "J7" );
 EFFACÉ: C:\Users\Maxime Valdemarin\..\vxx5y5xh.default​\prefs.js - user_pref("extensions.asktb.de​fault-channel-url-mask", "hxxp://eu.ask.com/web?qsrc={q​src}&o={o}&l={l}&q={query}&dm=​all" );
 EFFACÉ: C:\Users\Maxime Valdemarin\..\vxx5y5xh.default​\prefs.js - user_pref("extensions.asktb.l"​, "dis" );
 EFFACÉ: C:\Users\Maxime Valdemarin\..\vxx5y5xh.default​\prefs.js - user_pref("extensions.asktb.lo​cale", "fr_EU" );
 EFFACÉ: C:\Users\Maxime Valdemarin\..\vxx5y5xh.default​\prefs.js - user_pref("extensions.asktb.o"​, "14979" );
 EFFACÉ: C:\Users\Maxime Valdemarin\..\vxx5y5xh.default​\prefs.js - user_pref("extensions.asktb.qs​rc", "2871" );
 EFFACÉ: C:\Users\Maxime Valdemarin\..\vxx5y5xh.default​\prefs.js - user_pref("extensions.enabledI​tems", "{3112ca9c-de6d-4884-a869-9855​de68056c}:3.1.20081127W,{CAFEE​FAC-0016-0000-0011-ABCDEFFEDCB​A}:6.0.11,{CAFEEFAC-0016-0000-​0013-ABCDEFFEDCBA}:6.0.13,{20a​82645-c095-46ed-80e3-088257605​34b}:1.1,{CAFEEFAC-0016-0000-0​015-ABCDEFFEDCBA}:6.0.15,{CAFE​EFAC-0016-0000-0016-ABCDEFFEDC​BA}:6.0.16,toolbar@ask.com:3.5​.0.145,{972ce4c6-7e08-4474-a28​5-3208198ce6fd}:3.5.2" );
 EFFACÉ: C:\Users\Maxime Valdemarin\..\vxx5y5xh.default​\prefs.js - user_pref("keyword.URL", "hxxp://supertoolbar.ask.com/r​edirect?client=ff&src=kw&tb=BT​3&o=14979&locale=fr_EU&q=" );
 .
 * Internet Explorer Version 8.0.6001.18904 *
 .
 [HKCU\Software\Microsoft\Intern​et Explorer\Main]
 .
 Default_Page_URL: hxxp://www.microsoft.com/isapi​/redir.dll?prd=ie&pver=6&ar=ms​nhome
 Default_Search_URL: hxxp://www.microsoft.com/isapi​/redir.dll?prd=ie&ar=iesearch
 Do404Search: 0x01000000
 Enable Browser Extensions: yes
 Local Page: C:\Windows\system32\blank.htm
 Search bar: hxxp://go.microsoft.com/fwlink​/?linkid=54896
 Show_ToolBar: yes
 Start Page: hxxp://fr.msn.com/
 Use Search Asst: no
 .
 [HKLM\Software\Microsoft\Intern​et Explorer\Main]
 .
 AutoHide: yes
 Default_Page_URL: hxxp://www.microsoft.com/isapi​/redir.dll?prd=ie&pver=6&ar=ms​nhome
 Default_Search_URL: hxxp://www.microsoft.com/isapi​/redir.dll?prd=ie&ar=iesearch
 Delete_Temp_Files_On_Exit: yes
 Local Page: C:\Windows\System32\blank.htm
 Search bar: hxxp://search.msn.com/spbasic.​htm
 Search Page: hxxp://www.microsoft.com/isapi​/redir.dll?prd=ie&ar=iesearch
 Start Page: hxxp://fr.msn.com/
 .
 [HKLM\Software\Microsoft\Intern​et Explorer\ABOUTURLS]
 .
 Tabs: res://ieframe.dll/tabswelcome.​htm
 Blank: res://mshtml.dll/blank.htm
 .
 ============== SUSPECT(S) ==============
 .
 C:\Users\Maxime Valdemarin\AppData\Roaming\uTo​rrent\Assassins Creed 2 [Multi9] [PCDVD9][WITH CRACK] [www.soloestreno.com].torrent
 C:\Users\Maxime Valdemarin\AppData\Roaming\uTo​rrent\Assassins Creed PC FIXED Keygen - Serial Works ONLINE.torrent
 C:\Users\Maxime Valdemarin\AppData\Roaming\uTo​rrent\Far Cry 2 (Ubisoft Games) (CRACKED) (DIRECT PLAY) [blaze69].torrent
 C:\Users\Maxime Valdemarin\AppData\Roaming\uTo​rrent\Supreme_Commander_2_Crac​kfix-Razor1911.torrent
 C:\Users\Maxime Valdemarin\AppData\Roaming\uTo​rrent\The witcher FR + Patch 1.2.rar.torrent
 C:\Users\Maxime Valdemarin\AppData\Roaming\uTo​rrent\[PC] DRAGON AGE ORIGINS-KEYGEN-[ESPACONSOLAS.com].rar.torrent
 C:\Users\Maxime Valdemarin\Downloads\Assassins Creed 2 [Multi9] [PCDVD9][WITH CRACK] [www.soloestreno.com]\ac.nfo
 C:\Users\Maxime Valdemarin\Downloads\Assassins Creed 2 [Multi9] [PCDVD9][WITH CRACK] [www.soloestreno.com]\Assassins​.Creed.2.Multi.9.Clo​neDVD.PC.​DVD9\autorun.exe
 C:\Users\Maxime Valdemarin\Downloads\Assassins Creed 2 [Multi9] [PCDVD9][WITH CRACK] [www.soloestreno.com]\Assassins​.Creed.2.Multi.9.Clo​neDVD.PC.​DVD9\setup.exe
 C:\Users\Maxime Valdemarin\Downloads\Assassins Creed 2 [Multi9] [PCDVD9][WITH CRACK] [www.soloestreno.com]\Assassins​.Creed.2.Multi.9.Clo​neDVD.PC.​DVD9\Support\DirectX\​DXSETUP.​exe
 C:\Users\Maxime Valdemarin\Downloads\Assassins Creed 2 [Multi9] [PCDVD9][WITH CRACK] [www.soloestreno.com]\Assassins​.Creed.2.Multi.9.Clo​neDVD.PC.​DVD9\Support\GameLaun​cher\Ubi​softGameLauncherInstal​ler.exe
 C:\Users\Maxime Valdemarin\Downloads\Assassins Creed 2 [Multi9] [PCDVD9][WITH CRACK] [www.soloestreno.com]\Assassins​.Creed.2.Multi.9.Clo​neDVD.PC.​DVD9\Support\VCRedist​\vcredis​t_x86.exe
 C:\Users\Maxime Valdemarin\Downloads\Assassins Creed 2 [Multi9] [PCDVD9][WITH CRACK] [www.soloestreno.com]\Crack\Ass​assinsCreedII.exe
 C:\Users\Maxime Valdemarin\Downloads\Assassins Creed 2 [Multi9] [PCDVD9][WITH CRACK] [www.soloestreno.com]\Crack\Ass​assinsCreedIIGame.ex​e
 C:\Users\Maxime Valdemarin\Downloads\Assassins Creed 2 [Multi9] [PCDVD9][WITH CRACK] [www.soloestreno.com]\Crack\tor​rentleech.nfo
 C:\Users\Maxime Valdemarin\Downloads\Assassins Creed 2 [Multi9] [PCDVD9][WITH CRACK] [www.soloestreno.com]\Crack\Ubi​softGameLauncher.exe
 C:\Users\Maxime Valdemarin\Downloads\Assassins Creed PC FIXED Keygen - Serial Works ONLINE.torrent
 C:\Users\Maxime Valdemarin\Downloads\Battlefie​ld.Bad.Company.2-RELOADED\rld-​bbc2\Crack\BFBC2Game.exe
 C:\Users\Maxime Valdemarin\Downloads\Battlefie​ld.Bad.Company.2-RELOADED\rld-​bbc2\Crack\rld-bbc2.exe
 .
 ==============================​==========
 .
 C:\Users\MAXIME~1\AppData\Loca​l\Temp: 5 Fichier(s), 67 Dossier(s)
 C:\Windows\temp: 0 Fichier(s), 15 Dossier(s)
 C:\Users\Maxime Valdemarin\AppData\Roaming\Mic​rosoft\Windows\Cookies: 2 Fichier(s), 2 Dossier(s)
 Temporary Internet Files: 2 Fichier(s), 53 Dossier(s)
 .
 C:\Ad-Remover\Quarantine: 99 Fichier(s)
 C:\Ad-Remover\Backup: 27 Fichier(s)
 .
 C:\Ad-Report-CLEAN[1].txt - 24452 Octet(s)
 C:\Ad-Report-SCAN[1].txt - 12420 Octet(s)
 .
 Fin à: 16:39:36, 19/04/2010
 .
 ============== E.O.F - CLEAN[1] ==============



 mbam-log-2010-04-19 (22-45-25) :

 Malwarebytes' Anti-Malware 1.45
 www.malwarebytes.org

 Version de la base de données: 4007

 Windows 6.0.6002 Service Pack 2 (Safe Mode)
 Internet Explorer 8.0.6001.18904

 19.04.2010 22:45:25
 mbam-log-2010-04-19 (22-45-25).txt

 Type d'examen: Examen complet (C:\|D:\|E:\|F:\|G:\|J:\|K:\|M​:\|N:\|)
 Elément(s) analysé(s): 614623
 Temps écoulé: 1 heure(s), 16 minute(s), 15 seconde(s)

 Processus mémoire infecté(s): 0
 Module(s) mémoire infecté(s): 0
 Clé(s) du Registre infectée(s): 0
 Valeur(s) du Registre infectée(s): 0
 Elément(s) de données du Registre infecté(s): 0
 Dossier(s) infecté(s): 0
 Fichier(s) infecté(s): 0

 Processus mémoire infecté(s):
 (Aucun élément nuisible détecté)

 Module(s) mémoire infecté(s):
 (Aucun élément nuisible détecté)

 Clé(s) du Registre infectée(s):
 (Aucun élément nuisible détecté)

 Valeur(s) du Registre infectée(s):
 (Aucun élément nuisible détecté)

 Elément(s) de données du Registre infecté(s):
 (Aucun élément nuisible détecté)

 Dossier(s) infecté(s):
 (Aucun élément nuisible détecté)

 Fichier(s) infecté(s):
 (Aucun élément nuisible détecté)

 Merci (=

Salut  Xondro


 Refais un scan avec <gras>RSIT</gras> et poste le contenu du rapport <gras>log.txt</gras> à la fin de l’analyse

 Le rapport est dans le dossier ici C:\<gras>rsit</gras>


 @++  

Logfile of random's system information tool 1.06 (written by random/random)
 Run by Maxime Valdemarin at 2010-04-22 22:16:42
 Microsoft® Windows Vista™ Édition Familiale Premium  Service Pack 2
 System drive C: has 172 GB (37%) free of 469 GB
 Total RAM: 3326 MB (51% free)

 Logfile of Trend Micro HijackThis v2.0.2
 Scan saved at 22:16:55, on 22.04.2010
 Platform: Windows Vista SP2 (WinNT 6.00.1906)
 MSIE: Internet Explorer v8.00 (8.00.6001.18904)
 Boot mode: Normal

 Running processes:
 C:\Windows\system32\Dwm.exe
 C:\Windows\system32\taskeng.ex​e
 C:\Windows\Explorer.EXE
 C:\Program Files\Windows Defender\MSASCui.exe
 C:\hp\support\hpsysdrv.exe
 C:\Program Files\Hewlett-Packard\On-Scree​n OSD Indicator\OSD.exe
 C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe
 C:\Windows\RtHDVCpl.exe
 C:\Windows\system32\schtasks.e​xe
 C:\Windows\System32\rundll32.e​xe
 C:\Program Files\Alwil Software\Avast4\ashDisp.exe
 C:\Windows\System32\wpcumi.exe
 C:\Program Files\Common Files\Real\Update_OB\realsched​.exe
 C:\Program Files\Common Files\Java\Java Update\jusched.exe
 E:\Program Files\iTunes\iTunesHelper.exe
 C:\Program Files\Google\GoogleToolbarNoti​fier\GoogleToolbarNotifier.exe
 C:\Windows\ehome\ehtray.exe
 C:\Windows\ehome\ehmsas.exe
 C:\Program Files\Windows Media Player\wmpnscfg.exe
 C:\Program Files\MyWebSearch\bar\1.bin\MW​SOEMON.EXE
 C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
 C:\Users\Maxime Valdemarin\AppData\Local\Googl​e\Update\1.2.183.23\GoogleCras​hHandler.exe
 C:\Windows\system32\wbem\unsec​app.exe
 C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
 C:\Users\Maxime Valdemarin\AppData\Local\Googl​e\Chrome\Application\chrome.ex​e
 C:\Users\Maxime Valdemarin\AppData\Local\Googl​e\Chrome\Application\chrome.ex​e
 C:\Users\Maxime Valdemarin\AppData\Local\Googl​e\Chrome\Application\chrome.ex​e
 C:\Users\Maxime Valdemarin\AppData\Local\Googl​e\Chrome\Application\chrome.ex​e
 C:\Users\Maxime Valdemarin\AppData\Local\Googl​e\Chrome\Application\chrome.ex​e
 C:\Users\Maxime Valdemarin\AppData\Local\Googl​e\Chrome\Application\chrome.ex​e
 C:\Users\Maxime Valdemarin\AppData\Local\Googl​e\Chrome\Application\chrome.ex​e
 C:\Program Files\Windows Live\Messenger\msnmsgr.exe
 C:\hp\kbd\kbd.exe
 C:\Program Files\Internet Explorer\IELowutil.exe
 C:\Windows\system32\SearchProt​ocolHost.exe
 C:\Windows\system32\SearchFilt​erHost.exe
 C:\Users\Maxime Valdemarin\AppData\Local\Googl​e\Chrome\Application\chrome.ex​e
 C:\Users\Maxime Valdemarin\Downloads\RSIT.exe
 C:\Program Files\trend micro\Maxime Valdemarin.exe

 R1 - HKCU\Software\Microsoft\Intern​et Explorer\Main,Search Bar = http://go.microsoft.com/fwlink/?linkid=54896
 R0 - HKCU\Software\Microsoft\Intern​et Explorer\Main,Start Page = http://fr.msn.com/
 R0 - HKLM\Software\Microsoft\Intern​et Explorer\Main,Start Page = http://fr.msn.com/
 R0 - HKLM\Software\Microsoft\Intern​et Explorer\Search,SearchAssistan​t =
 R0 - HKLM\Software\Microsoft\Intern​et Explorer\Search,CustomizeSearc​h =
 R1 - HKCU\Software\Microsoft\Window​s\CurrentVersion\Internet Settings,ProxyOverride = *.local
 R0 - HKCU\Software\Microsoft\Intern​et Explorer\Toolbar,LinksFolderNa​me =
 R3 - URLSearchHook: free-downloads.net Toolbar - {ecdee021-0d17-467f-a1ff-c7a11​5230949} - C:\Program Files\free-downloads.net\tbfre​e.dll
 R3 - URLSearchHook: (no name) - {00A6FAF6-072E-44cf-8957-5838F​569A31D} - C:\Program Files\MyWebSearch\bar\1.bin\MW​SSRCAS.DLL
 O1 - Hosts: ::1 localhost
 O2 - BHO: MyWebSearch Search Assistant BHO - {00A6FAF1-072E-44cf-8957-5838F​569A31D} - C:\Program Files\MyWebSearch\bar\1.bin\MW​SSRCAS.DLL
 O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695E​CA05670} - (no file)
 O2 - BHO: HP Print Clips - {053F9267-DC04-4294-A72C-58F73​2D338C0} - C:\Program Files\HP\Smart Web Printing\hpswp_framework.dll
 O2 - BHO: mwsBar BHO - {07B18EA1-A523-4961-B6BB-170DE​4475CCA} - C:\Program Files\MyWebSearch\bar\1.bin\MW​SBAR.DLL
 O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578​C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\Ac​roIEHelperShim.dll
 O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C091​46192CA} - C:\Program Files\Real\RealPlayer\rpbrowse​rrecordplugin.dll
 O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988​571CECB} - (no file)
 O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3A​AC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
 O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live ID - {9030D464-4C02-4ABF-8ECC-51647​60863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
 O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B​5AD205D} - C:\Program Files\Google\GoogleToolbarNoti​fier\5.4.4525.1752\swg.dll
 O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C​1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
 O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94E​C1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
 O2 - BHO: free-downloads.net Toolbar - {ecdee021-0d17-467f-a1ff-c7a11​5230949} - C:\Program Files\free-downloads.net\tbfre​e.dll
 O2 - BHO: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E​116A856} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
 O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D​3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
 O3 - Toolbar: free-downloads.net Toolbar - {ecdee021-0d17-467f-a1ff-c7a11​5230949} - C:\Program Files\free-downloads.net\tbfre​e.dll
 O3 - Toolbar: DAEMON Tools Toolbar - {32099AAC-C132-4136-9E9A-4E364​A424E17} - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll
 O3 - Toolbar: My Web Search - {07B18EA9-A523-4961-B6BB-170DE​4475CCA} - C:\Program Files\MyWebSearch\bar\1.bin\MW​SBAR.DLL
 O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
 O4 - HKLM\..\Run: [hpsysdrv] c:\hp\support\hpsysdrv.exe
 O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KbdStub.EXE
 O4 - HKLM\..\Run: [OsdMaestro] "C:\Program Files\Hewlett-Packard\On-Scree​n OSD Indicator\OSD.exe"
 O4 - HKLM\..\Run: [IAAnotif] "C:\Program Files\Intel\Intel Matrix Storage Manager\Iaanotif.exe"
 O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
 O4 - HKLM\..\Run: [HP Health Check Scheduler] [ProgramFilesFolder]Hewlett-Pac​kard\HP Health Check\HPHC_Scheduler.exe
 O4 - HKLM\..\Run: [SunJavaUpdateReg] "C:\Windows\system32\jureg.exe​"
 O4 - HKLM\..\Run: [AppleSyncNotifier] C:\Program Files\Common Files\Apple\Mobile Device Support\AppleSyncNotifier.exe
 O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,​NvStartup
 O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.d​ll,NvTaskbarInit
 O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
 O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\as​hDisp.exe
 O4 - HKLM\..\Run: [WPCUMI] C:\Windows\system32\WpcUmi.exe
 O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched​.exe"  -osboot
 O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
 O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
 O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.e​xe"
 O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
 O4 - HKLM\..\Run: [iTunesHelper] "E:\Program Files\iTunes\iTunesHelper.exe"
 O4 - HKLM\..\Run: [My Web Search Bar Search Scope Monitor] "C:\PROGRA~1\MYWEBS~1\bar\1.bi​n\m3SrchMn.exe" /m=2 /w /h
 O4 - HKLM\..\Run: [MyWebSearch Email Plugin] C:\PROGRA~1\MYWEBS~1\bar\1.bin​\mwsoemon.exe
 O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNoti​fier\GoogleToolbarNotifier.exe​"
 O4 - HKCU\..\Run: [Google Update] "C:\Users\Maxime Valdemarin\AppData\Local\Googl​e\Update\GoogleUpdate.exe" /c
 O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
 O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
 O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
 O4 - HKCU\..\Run: [MyWebSearch Email Plugin] C:\PROGRA~1\MYWEBS~1\bar\1.bin​\mwsoemon.exe
 O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
 O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
 O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
 O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
 O8 - Extra context menu item: &Search - http://edits.mywebsearch.com/t [...] 2010042013
 O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Off​ice12\EXCEL.EXE/3000
 O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCD​DC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExten​sion.dll
 O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCD​DC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExten​sion.dll
 O9 - Extra button: Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663E​E0C6C49} - C:\PROGRA~1\MICROS~3\Office12\​ONBttnIE.dll
 O9 - Extra 'Tools' menuitem: &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663E​E0C6C49} - C:\PROGRA~1\MICROS~3\Office12\​ONBttnIE.dll
 O9 - Extra button: Livre de reliures HP - {58ECB495-38F0-49cb-A538-10282​ABF65E7} - C:\Program Files\HP\Smart Web Printing\hpswp_extensions.dll
 O9 - Extra button: Sélection intelligente HP - {700259D7-1666-479a-93B1-32504​10481E8} - C:\Program Files\HP\Smart Web Printing\hpswp_extensions.dll
 O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C5​71A8263} - C:\PROGRA~1\MICROS~3\Office12\​REFIEBAR.DLL
 O9 - Extra button: Sélection intelligente HP - {DDE87865-83C5-48c4-8357-2F5B1​AA84522} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
 O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll
 O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll
 O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll
 O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll
 O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll
 O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll
 O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll
 O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll
 O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll
 O13 - Gopher Prefix:
 O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceServi​ce.exe
 O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
 O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
 O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
 O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
 O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.ex​e
 O23 - Service: Dragon Age: Origins - Content Updater (DAUpdaterSvc) - BioWare - E:\Program Files\Dragon Age\bin_ship\DAUpdaterSvc.Serv​ice.exe
 O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.e​xe
 O23 - Service: HP Health Check Service - Hewlett-Packard - c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe
 O23 - Service: HP Chasis Button Service (HPBtnSrv) - Unknown owner - c:\hp\HPEZBTN\HPBtnSrv.exe
 O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Program Files\Intel\Intel Matrix Storage Manager\Iaantmon.exe
 O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\​Intel 32\IDriverT.exe
 O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
 O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - c:\Program Files\Common Files\LightScribe\LSSrvc.exe
 O23 - Service: Ma-Config Service (maconfservice) - CybelSoft - C:\Program Files\ma-config.com\maconfserv​ice.exe
 O23 - Service: McciCMService - Motive Communications, Inc. - C:\Program Files\Common Files\Motive\McciCMService.exe
 O23 - Service: My Web Search Service (MyWebSearchService) - MyWebSearch.com - C:\PROGRA~1\MYWEBS~1\bar\1.bin​\mwssvc.exe
 O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe
 O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.e​xe
 O23 - Service: StarWind AE Service (StarWindServiceAE) - Rocket Division Software - E:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE​.exe

 --
 End of file - 12988 bytes

 ======Scheduled tasks folder======

 C:\Windows\tasks\Google Software Updater.job
 C:\Windows\tasks\GoogleUpdateT​askUserS-1-5-21-2296935793-282​3878817-4276817257-1000Core.jo​b
 C:\Windows\tasks\GoogleUpdateT​askUserS-1-5-21-2296935793-282​3878817-4276817257-1000UA.job
 C:\Windows\tasks\GoogleUpdateT​askUserS-1-5-21-2296935793-282​3878817-4276817257-1005Core.jo​b
 C:\Windows\tasks\GoogleUpdateT​askUserS-1-5-21-2296935793-282​3878817-4276817257-1005UA.job
 C:\Windows\tasks\GoogleUpdateT​askUserS-1-5-21-2296935793-282​3878817-4276817257-1006Core.jo​b
 C:\Windows\tasks\GoogleUpdateT​askUserS-1-5-21-2296935793-282​3878817-4276817257-1006UA.job
 C:\Windows\tasks\HPCeeSchedule​ForMaxime Valdemarin.job
 C:\Windows\tasks\User_Feed_Syn​chronization-{2FBF7A4E-6A38-4D​62-A34C-C240AB7FC42A}.job
 C:\Windows\tasks\User_Feed_Syn​chronization-{546E7F62-3DDF-48​EC-81B1-B74A749AF7A9}.job
 C:\Windows\tasks\User_Feed_Syn​chronization-{EFC9EA6E-8997-4C​82-B6CE-D7376FB7DA03}.job

 ======Registry dump======

 [HKEY_LOCAL_MACHINE\SOFTWARE\Mi​crosoft\Windows\CurrentVersion​\Explorer\Browser Helper Objects\{00A6FAF1-072E-44cf-8957-5838F569A31D}]
 MyWebSearch Search Assistant BHO - C:\Program Files\MyWebSearch\bar\1.bin\MW​SSRCAS.DLL [2010-04-20 54680]

 [HKEY_LOCAL_MACHINE\SOFTWARE\Mi​crosoft\Windows\CurrentVersion​\Explorer\Browser Helper Objects\{02478D38-C3F9-4efb-9B51-7695ECA05670}]

 [HKEY_LOCAL_MACHINE\SOFTWARE\Mi​crosoft\Windows\CurrentVersion​\Explorer\Browser Helper Objects\{053F9267-DC04-4294-A72C-58F732D338C0}]
 HP Print Clips - C:\Program Files\HP\Smart Web Printing\hpswp_framework.dll [2007-03-02 177768]

 [HKEY_LOCAL_MACHINE\SOFTWARE\Mi​crosoft\Windows\CurrentVersion​\Explorer\Browser Helper Objects\{07B18EA1-A523-4961-B6BB-170DE4475CCA}]
 mwsBar BHO - C:\Program Files\MyWebSearch\bar\1.bin\MW​SBAR.DLL [2010-04-20 759288]

 [HKEY_LOCAL_MACHINE\SOFTWARE\Mi​crosoft\Windows\CurrentVersion​\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
 Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\Ac​roIEHelperShim.dll [2010-04-04 75200]

 [HKEY_LOCAL_MACHINE\SOFTWARE\Mi​crosoft\Windows\CurrentVersion​\Explorer\Browser Helper Objects\{3049C3E9-B461-4BC5-8870-4C09146192CA}]
 RealPlayer Download and Record Plugin for Internet Explorer - C:\Program Files\Real\RealPlayer\rpbrowse​rrecordplugin.dll [2009-12-03 329312]

 [HKEY_LOCAL_MACHINE\SOFTWARE\Mi​crosoft\Windows\CurrentVersion​\Explorer\Browser Helper Objects\{5C255C8A-E604-49b4-9D64-90988571CECB}]

 [HKEY_LOCAL_MACHINE\SOFTWARE\Mi​crosoft\Windows\CurrentVersion​\Explorer\Browser Helper Objects\{6EBF7485-159F-4bff-A14F-B9E3AAC4465B}]
 Search Helper - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll [2009-05-19 137600]

 [HKEY_LOCAL_MACHINE\SOFTWARE\Mi​crosoft\Windows\CurrentVersion​\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
 Programme d'aide de l'Assistant de connexion Windows Live ID - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-03-30 403824]

 [HKEY_LOCAL_MACHINE\SOFTWARE\Mi​crosoft\Windows\CurrentVersion​\Explorer\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]
 Google Toolbar Notifier BHO - C:\Program Files\Google\GoogleToolbarNoti​fier\5.4.4525.1752\swg.dll [2009-11-26 764912]

 [HKEY_LOCAL_MACHINE\SOFTWARE\Mi​crosoft\Windows\CurrentVersion​\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
 Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2010-03-09 41760]

 [HKEY_LOCAL_MACHINE\SOFTWARE\Mi​crosoft\Windows\CurrentVersion​\Explorer\Browser Helper Objects\{E15A8DC0-8516-42A1-81EA-DC94EC1ACF10}]
 Windows Live Toolbar Helper - C:\Program Files\Windows Live\Toolbar\wltcore.dll [2009-02-06 1068904]

 [HKEY_LOCAL_MACHINE\SOFTWARE\Mi​crosoft\Windows\CurrentVersion​\Explorer\Browser Helper Objects\{ecdee021-0d17-467f-a1ff-c7a115230949}]
 free-downloads.net Toolbar - C:\Program Files\free-downloads.net\tbfre​e.dll [2008-02-14 1555480]

 [HKEY_LOCAL_MACHINE\SOFTWARE\Mi​crosoft\Windows\CurrentVersion​\Explorer\Browser Helper Objects\{FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856}]
 HP Smart BHO Class - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll [2008-06-27 505136]

 [HKEY_LOCAL_MACHINE\SOFTWARE\Mi​crosoft\Internet Explorer\Toolbar]
 {21FA44EF-376D-4D53-9B0F-8A89D​3229068} - &Windows Live Toolbar - C:\Program Files\Windows Live\Toolbar\wltcore.dll [2009-02-06 1068904]
 {ecdee021-0d17-467f-a1ff-c7a11​5230949} - free-downloads.net Toolbar - C:\Program Files\free-downloads.net\tbfre​e.dll [2008-02-14 1555480]
 {32099AAC-C132-4136-9E9A-4E364​A424E17} - DAEMON Tools Toolbar - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll [2009-11-24 953800]
 {07B18EA9-A523-4961-B6BB-170DE​4475CCA} - My Web Search - C:\Program Files\MyWebSearch\bar\1.bin\MW​SBAR.DLL [2010-04-20 759288]

 [HKEY_LOCAL_MACHINE\Software\Mi​crosoft\Windows\CurrentVersion​\Run]
 "Windows Defender"=C:\Program Files\Windows Defender\MSASCui.exe [2008-01-19 1008184]
 "hpsysdrv"=c:\hp\support\hpsys​drv.exe [2007-04-18 65536]
 "KBD"=C:\HP\KBD\KbdStub.EXE [2006-12-08 65536]
 "OsdMaestro"=C:\Program Files\Hewlett-Packard\On-Scree​n OSD Indicator\OSD.exe [2007-02-15 118784]
 "IAAnotif"=C:\Program Files\Intel\Intel Matrix Storage Manager\Iaanotif.exe [2007-07-12 178712]
 "RtHDVCpl"=C:\Windows\RtHDVCpl​.exe [2008-01-15 4874240]
 "HP Health Check Scheduler"=[ProgramFilesFolder]Hewlett-Pac​kard\HP Health Check\HPHC_Scheduler.exe []
 "SunJavaUpdateReg"=C:\Windows\​system32\jureg.exe [2007-04-07 54936]
 ""= []
 "AppleSyncNotifier"=C:\Program Files\Common Files\Apple\Mobile Device Support\AppleSyncNotifier.exe [2010-03-16 47392]
 "NvCplDaemon"=C:\Windows\syste​m32\NvCpl.dll [2008-08-23 13535776]
 "NvMediaCenter"=C:\Windows\sys​tem32\NvMcTray.dll [2008-08-23 92704]
 "HP Software Update"=C:\Program Files\HP\HP Software Update\HPWuSchd2.exe []
 "avast!"=C:\PROGRA~1\ALWILS~1\​Avast4\ashDisp.exe [2009-11-25 81000]
 "WPCUMI"=C:\Windows\system32\W​pcUmi.exe [2006-11-02 176128]
 "TkBellExe"=C:\Program Files\Common Files\Real\Update_OB\realsched​.exe [2009-12-03 198160]
 "SunJavaUpdateSched"=C:\Progra​m Files\Common Files\Java\Java Update\jusched.exe [2010-02-18 248040]
 "Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2010-04-04 36272]
 "Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.e​xe [2010-03-24 952768]
 "QuickTime Task"=C:\Program Files\QuickTime\QTTask.exe [2010-03-17 421888]
 "iTunesHelper"=E:\Program Files\iTunes\iTunesHelper.exe [2010-03-26 142120]
 "My Web Search Bar Search Scope Monitor"=C:\PROGRA~1\MYWEBS~1\​bar\1.bin\m3SrchMn.exe [2010-04-20 28783]
 "MyWebSearch Email Plugin"=C:\PROGRA~1\MYWEBS~1\b​ar\1.bin\mwsoemon.exe [2010-04-20 32849]

 [HKEY_CURRENT_USER\Software\Mic​rosoft\Windows\CurrentVersion\​Run]
 "swg"=C:\Program Files\Google\GoogleToolbarNoti​fier\GoogleToolbarNotifier.exe [2008-07-15 68856]
 "Google Update"=C:\Users\Maxime Valdemarin\AppData\Local\Googl​e\Update\GoogleUpdate.exe [2009-04-24 133104]
 "ehTray.exe"=C:\Windows\ehome\​ehTray.exe [2008-01-19 125952]
 "msnmsgr"=C:\Program Files\Windows Live\Messenger\msnmsgr.exe [2009-07-26 3883856]
 "WMPNSCFG"=C:\Program Files\Windows Media Player\WMPNSCFG.exe [2008-01-19 202240]
 "MyWebSearch Email Plugin"=C:\PROGRA~1\MYWEBS~1\b​ar\1.bin\mwsoemon.exe [2010-04-20 32849]

 C:\ProgramData\Microsoft\Windo​ws\Start Menu\Programs\Startup
 HP Digital Imaging Monitor.lnk - C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe

 [HKEY_LOCAL_MACHINE\SYSTEM\Curr​entControlSet\Control\SafeBoot​\network\WudfPf]

 [HKEY_LOCAL_MACHINE\SYSTEM\Curr​entControlSet\Control\SafeBoot​\network\WudfRd]

 [HKEY_LOCAL_MACHINE\SYSTEM\Curr​entControlSet\Control\SafeBoot​\network\WudfSvc]

 [HKEY_LOCAL_MACHINE\SYSTEM\Curr​entControlSet\Control\SafeBoot​\network\WudfUsbccidDriver]

 [HKEY_CURRENT_USER\Software\Mic​rosoft\Windows\CurrentVersion\​Policies\System]
 "LogonHoursAction"=2
 "DontDisplayLogonHoursWarnings​"=1

 [HKEY_LOCAL_MACHINE\Software\Mi​crosoft\Windows\CurrentVersion​\Policies\System]
 "dontdisplaylastusername"=0
 "legalnoticecaption"=
 "legalnoticetext"=
 "shutdownwithoutlogon"=1
 "undockwithoutlogon"=1
 "EnableUIADesktopToggle"=0

 [HKEY_CURRENT_USER\Software\Mic​rosoft\Windows\CurrentVersion\​Policies\explorer]
 "NoDriveTypeAutoRun"=145

 [HKEY_LOCAL_MACHINE\Software\Mi​crosoft\Windows\CurrentVersion​\Policies\explorer]
 "BindDirectlyToPropertySetStor​age"=

 [HKEY_LOCAL_MACHINE\system\curr​entcontrolset\services\shareda​ccess\parameters\firewallpolic​y\standardprofile\authorizedap​plications\list]

 [HKEY_LOCAL_MACHINE\system\curr​entcontrolset\services\shareda​ccess\parameters\firewallpolic​y\domainprofile\authorizedappl​ications\list]

 [HKEY_CURRENT_USER\software\mic​rosoft\windows\currentversion\​explorer\mountpoints2\{0a6bc52​d-205f-11df-916b-001e8c35fe9b}​]
 shell\AutoRun\command - H:\autorun.exe -auto

 [HKEY_CURRENT_USER\software\mic​rosoft\windows\currentversion\​explorer\mountpoints2\{374247f​3-e309-11dd-9aa4-001e8c35fe9b}​]
 shell\AutoRun\command - C:\Windows\system32\RunDLL32.E​XE Shell32.DLL,ShellExec_RunDLL P:\index.html


 ======File associations======

 .js - edit - C:\Windows\System32\Notepad.ex​e %1
 .js - open - C:\Windows\System32\WScript.ex​e "%1" %*

 ======List of files/folders created in the last 1 months======

 2010-04-20 19:12:26 ----D---- C:\Program Files\FunWebProducts
 2010-04-20 19:12:25 ----D---- C:\Program Files\MyWebSearch
 2010-04-20 18:51:47 ----A---- C:\FINIS_IT.TXT
 2010-04-19 20:59:41 ----D---- C:\Program Files\NVIDIA Corporation
 2010-04-18 15:19:20 ----D---- C:\ProgramData\DivX
 2010-04-17 23:14:04 ----D---- C:\Ad-Remover
 2010-04-17 22:27:18 ----D---- C:\Program Files\trend micro
 2010-04-17 22:27:17 ----D---- C:\rsit
 2010-04-14 09:49:17 ----A---- C:\Windows\system32\vbscript.d​ll
 2010-04-14 09:48:24 ----A---- C:\Windows\system32\iphlpsvc.d​ll
 2010-04-14 09:47:29 ----A---- C:\Windows\system32\ntoskrnl.e​xe
 2010-04-14 09:47:29 ----A---- C:\Windows\system32\ntkrnlpa.e​xe
 2010-04-14 09:36:31 ----A---- C:\Windows\system32\cabview.dl​l
 2010-04-14 09:36:30 ----A---- C:\Windows\system32\wintrust.d​ll
 2010-04-10 10:24:26 ----D---- C:\Program Files\TrendMicro
 2010-04-10 10:19:12 ----D---- C:\Users\Maxime Valdemarin\AppData\Roaming\Mal​warebytes
 2010-04-10 10:18:58 ----D---- C:\ProgramData\Malwarebytes
 2010-04-10 10:18:58 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
 2010-04-09 15:27:28 ----D---- C:\Users\Maxime Valdemarin\AppData\Roaming\Com​mand and Conquer 4
 2010-04-09 15:21:26 ----D---- C:\Program Files\Ubisoft
 2010-04-05 21:36:04 ----D---- C:\Users\Maxime Valdemarin\AppData\Roaming\vlc
 2010-04-05 16:05:02 ----D---- C:\ProgramData\Sun
 2010-04-05 16:04:41 ----A---- C:\Windows\system32\javaws.exe
 2010-04-05 16:04:41 ----A---- C:\Windows\system32\javaw.exe
 2010-04-05 16:04:41 ----A---- C:\Windows\system32\java.exe
 2010-04-04 17:28:25 ----D---- C:\Program Files\iPod
 2010-04-04 17:28:23 ----D---- C:\ProgramData\{429CAD59-35B1-​4DBC-BB6D-1DB246563521}
 2010-04-04 17:26:30 ----D---- C:\Program Files\QuickTime
 2010-04-04 17:22:33 ----D---- C:\Program Files\Bonjour
 2010-04-03 22:55:32 ----A---- C:\Windows\system32\nvwgf2um.d​ll
 2010-04-03 22:55:32 ----A---- C:\Windows\system32\nvoglv32.d​ll
 2010-04-03 22:55:32 ----A---- C:\Windows\system32\nvcod.dll
 2010-04-03 18:27:00 ----A---- C:\Windows\system32\nvvsvc.exe
 2010-04-03 18:27:00 ----A---- C:\Windows\system32\nvsvc.dll
 2010-04-03 18:27:00 ----A---- C:\Windows\system32\nvmctray.d​ll
 2010-04-03 18:27:00 ----A---- C:\Windows\system32\nvcpl.dll
 2010-03-31 18:08:03 ----A---- C:\Windows\system32\mshtml.dll
 2010-03-31 18:08:02 ----A---- C:\Windows\system32\ieframe.dl​l
 2010-03-31 18:08:00 ----A---- C:\Windows\system32\wininet.dl​l
 2010-03-31 18:08:00 ----A---- C:\Windows\system32\urlmon.dll
 2010-03-31 18:08:00 ----A---- C:\Windows\system32\iertutil.d​ll
 2010-03-31 18:07:59 ----A---- C:\Windows\system32\occache.dl​l
 2010-03-31 18:07:59 ----A---- C:\Windows\system32\mstime.dll
 2010-03-31 18:07:59 ----A---- C:\Windows\system32\msfeeds.dl​l
 2010-03-31 18:07:59 ----A---- C:\Windows\system32\ieUnatt.ex​e
 2010-03-31 18:07:59 ----A---- C:\Windows\system32\ieui.dll
 2010-03-31 18:07:59 ----A---- C:\Windows\system32\iepeers.dl​l
 2010-03-31 18:07:59 ----A---- C:\Windows\system32\iedkcs32.d​ll
 2010-03-31 18:07:58 ----A---- C:\Windows\system32\msfeedssyn​c.exe
 2010-03-31 18:07:58 ----A---- C:\Windows\system32\msfeedsbs.​dll
 2010-03-31 18:07:58 ----A---- C:\Windows\system32\jsproxy.dl​l
 2010-03-31 18:07:58 ----A---- C:\Windows\system32\iesysprep.​dll
 2010-03-31 18:07:58 ----A---- C:\Windows\system32\iesetup.dl​l
 2010-03-31 18:07:58 ----A---- C:\Windows\system32\iernonce.d​ll
 2010-03-31 18:07:58 ----A---- C:\Windows\system32\ie4uinit.e​xe

 ======List of files/folders modified in the last 1 months======

 2010-04-22 22:16:55 ----D---- C:\Windows\Prefetch
 2010-04-22 22:16:50 ----D---- C:\Windows\Temp
 2010-04-22 22:16:36 ----SHD---- C:\System Volume Information
 2010-04-22 22:16:09 ----D---- C:\Windows\System32
 2010-04-22 22:16:09 ----D---- C:\Windows\inf
 2010-04-22 22:16:09 ----A---- C:\Windows\system32\PerfString​Backup.INI
 2010-04-22 22:12:13 ----D---- C:\Windows\Tasks
 2010-04-22 22:11:00 ----SHD---- C:\Windows\Installer
 2010-04-22 22:07:18 ----D---- C:\ProgramData\Google Updater
 2010-04-21 20:39:45 ----D---- C:\Users\Maxime Valdemarin\AppData\Roaming\uTo​rrent
 2010-04-21 08:19:32 ----D---- C:\ProgramData\NVIDIA
 2010-04-20 22:56:19 ----D---- C:\Users\Maxime Valdemarin\AppData\Roaming\EST​soft
 2010-04-20 19:12:26 ----RD---- C:\Program Files
 2010-04-20 19:12:25 ----D---- C:\Windows\system32\config
 2010-04-20 19:12:15 ----D---- C:\Windows\system32\Tasks
 2010-04-20 19:12:15 ----D---- C:\Windows\system32\Msdtc
 2010-04-20 19:12:15 ----D---- C:\Windows\system32\drivers
 2010-04-20 19:12:15 ----D---- C:\Windows
 2010-04-20 19:12:14 ----D---- C:\Windows\system32\wbem
 2010-04-20 19:12:14 ----D---- C:\Windows\registration
 2010-04-20 18:51:45 ----HD---- C:\hp
 2010-04-20 18:50:21 ----D---- C:\Windows\SMINST
 2010-04-20 18:20:31 ----D---- C:\Windows\system32\catroot2
 2010-04-19 21:11:04 ----HD---- C:\ProgramData
 2010-04-19 21:01:09 ----D---- C:\Windows\system32\catroot
 2010-04-19 09:51:49 ----D---- C:\Windows\system32\spool
 2010-04-19 09:51:49 ----D---- C:\Windows\system32\CodeIntegr​ity
 2010-04-19 09:51:47 ----D---- C:\ProgramData\HP Product Assistant
 2010-04-19 09:51:47 ----D---- C:\Program Files\DivX
 2010-04-19 09:51:47 ----D---- C:\Program Files\Common Files\PX Storage Engine
 2010-04-19 09:51:47 ----D---- C:\Program Files\Common Files\DivX Shared
 2010-04-19 08:54:14 ----D---- C:\Windows\Minidump
 2010-04-18 15:22:55 ----D---- C:\Users\Maxime Valdemarin\AppData\Roaming\Div​X
 2010-04-14 12:11:25 ----D---- C:\Windows\winsxs
 2010-04-14 11:58:01 ----D---- C:\Program Files\Windows Mail
 2010-04-14 11:20:36 ----D---- C:\ProgramData\Microsoft Help
 2010-04-11 12:27:58 ----D---- C:\Program Files\ESTsoft
 2010-04-11 12:27:56 ----D---- C:\ProgramData\Estsoft
 2010-04-10 15:30:11 ----D---- C:\Windows\ModemLogs
 2010-04-10 10:24:28 ----SD---- C:\Users\Maxime Valdemarin\AppData\Roaming\Mic​rosoft
 2010-04-09 15:30:30 ----D---- C:\Users\Maxime Valdemarin\AppData\Roaming\Ubi​soft
 2010-04-09 15:30:30 ----D---- C:\ProgramData\Ubisoft
 2010-04-09 15:21:24 ----HD---- C:\Program Files\InstallShield Installation Information
 2010-04-09 15:20:25 ----RSD---- C:\Windows\assembly
 2010-04-08 17:52:15 ----A---- C:\Windows\system32\PnkBstrB.e​xe
 2010-04-06 19:52:54 ----A---- C:\Windows\system32\mrt.exe
 2010-04-05 16:05:01 ----D---- C:\Program Files\Common Files\Java
 2010-04-05 16:04:34 ----D---- C:\Program Files\Java
 2010-04-04 17:28:24 ----D---- C:\Program Files\Common Files\Apple
 2010-03-31 20:15:51 ----D---- C:\Windows\system32\migration
 2010-03-31 20:15:51 ----D---- C:\Program Files\Internet Explorer

 ======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

 R1 aswRdr;aswRdr; C:\Windows\system32\drivers\as​wRdr.sys [2009-11-25 23120]
 R1 aswSP;avast! Self Protection; C:\Windows\system32\drivers\as​wSP.sys [2009-11-25 114768]
 R1 aswTdi;avast! Network Shield Support; C:\Windows\system32\drivers\as​wTdi.sys [2009-11-25 48560]
 R2 {22D78859-9CE9-4B77-BF18-AC83E​81A9263};{22D78859-9CE9-4B77-B​F18-AC83E81A9263}; \??\C:\Program Files\HP\DVDPlay\000.fcl [2007-12-18 39408]
 R2 aswFsBlk;aswFsBlk; C:\Windows\system32\DRIVERS\as​wFsBlk.sys [2009-11-25 20560]
 R2 aswMonFlt;aswMonFlt; C:\Windows\system32\DRIVERS\as​wMonFlt.sys [2009-11-25 53328]
 R2 atksgt;atksgt; C:\Windows\system32\DRIVERS\at​ksgt.sys [2009-10-14 281760]
 R2 lirsgt;lirsgt; C:\Windows\system32\DRIVERS\li​rsgt.sys [2009-10-14 25888]
 R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\Windows\System32\Drivers\GE​ARAspiWDM.sys [2009-05-18 26600]
 R3 HCW85BDA;Hauppauge WinTV 885 Video Capture; C:\Windows\system32\drivers\HC​W85BDA.sys [2007-10-01 1129344]
 R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RT​KVHDA.sys [2009-08-04 2744800]
 R3 netr73;USB Wireless 802.11 b/g Adaptor Driver for Vista; C:\Windows\system32\DRIVERS\ne​tr73.sys [2008-02-26 493568]
 R3 nvlddmkm;nvlddmkm; C:\Windows\system32\DRIVERS\nv​lddmkm.sys [2008-08-23 7475488]
 R3 RTL8169;Realtek 8169 NT Driver; C:\Windows\system32\DRIVERS\Rt​lh86.sys [2007-08-03 91648]
 R3 WUDFRd;WUDFRd; C:\Windows\system32\DRIVERS\WU​DFRd.sys [2008-01-19 83328]
 S3 aefwgfzg;aefwgfzg; C:\Windows\system32\drivers\ae​fwgfzg.sys []
 S3 al7340ov;al7340ov; C:\Windows\system32\drivers\al​7340ov.sys []
 S3 Dot4;Pilote MS IEEE-1284.4; C:\Windows\system32\DRIVERS\Do​t4.sys [2008-01-19 131584]
 S3 Dot4Print;Pilote de classe Imprimante pour IEEE-1284.4; C:\Windows\system32\DRIVERS\Do​t4Prt.sys [2008-01-19 16384]
 S3 dot4usb;MS Dot4USB Filter Dot4USB Filter; C:\Windows\system32\DRIVERS\do​t4usb.sys [2008-01-19 36864]
 S3 driverhardwarev2;driverhardwar​ev2; \??\C:\Program Files\ma-config.com\Drivers\dr​iverhardwarev2.sys [2009-01-24 14336]
 S3 drmkaud;Filtre de décodeur DRM (Noyau Microsoft); C:\Windows\system32\drivers\dr​mkaud.sys [2008-01-19 5632]
 S3 fssfltr;FssFltr; C:\Windows\system32\DRIVERS\fs​sfltr.sys [2009-08-05 54632]
 S3 HdAudAddService;Pilote de fonction UAA 1.1 Microsoft pour le service High Definition Audio; C:\Windows\system32\drivers\Hd​Audio.sys [2006-11-02 235520]
 S3 MREMP50;MREMP50 NDIS Protocol Driver; \??\C:\PROGRA~1\COMMON~1\Motiv​e\MREMP50.SYS [2008-02-07 19712]
 S3 MREMP50a64;MREMP50a64 NDIS Protocol Driver; \??\C:\PROGRA~1\COMMON~1\Motiv​e\MREMP50a64.SYS []
 S3 MREMPR5;MREMPR5 NDIS Protocol Driver; \??\C:\PROGRA~1\COMMON~1\Motiv​e\MREMPR5.SYS []
 S3 MRENDIS5;MRENDIS5 NDIS Protocol Driver; \??\C:\PROGRA~1\COMMON~1\Motiv​e\MRENDIS5.SYS []
 S3 MRESP50;MRESP50 NDIS Protocol Driver; \??\C:\PROGRA~1\COMMON~1\Motiv​e\MRESP50.SYS [2008-02-07 18304]
 S3 MRESP50a64;MRESP50a64 NDIS Protocol Driver; \??\C:\PROGRA~1\COMMON~1\Motiv​e\MRESP50a64.SYS []
 S3 MSKSSRV;Proxy de service de répartition Microsoft; C:\Windows\system32\drivers\MS​KSSRV.sys [2008-01-19 8192]
 S3 MSPCLOCK;Proxy d'horloge de répartition Microsoft; C:\Windows\system32\drivers\MS​PCLOCK.sys [2008-01-19 5888]
 S3 MSPQM;Proxy de gestion de qualité de répartition Microsoft; C:\Windows\system32\drivers\MS​PQM.sys [2008-01-19 5504]
 S3 MSTEE;Convertisseur en T/site-à-site de répartition Microsoft; C:\Windows\system32\drivers\MS​TEE.sys [2008-01-19 6016]
 S3 PcdrNdisuio;PCDRNDISUIO Usermode I/O Protocol; C:\Windows\system32\DRIVERS\pc​drndisuio.sys []
 S3 Ps2;PS2; C:\Windows\system32\DRIVERS\PS​2.sys [2005-12-12 19072]
 S3 USBAAPL;Apple Mobile USB Driver; C:\Windows\System32\Drivers\us​baapl.sys [2009-10-16 41472]
 S3 usbscan;Pilote de scanneur USB; C:\Windows\system32\DRIVERS\us​bscan.sys [2008-01-19 35328]
 S3 WpdUsb;WpdUsb; C:\Windows\system32\DRIVERS\wp​dusb.sys [2009-10-01 40448]
 S4 WmiAcpi;Microsoft Windows Management Interface for ACPI; C:\Windows\system32\drivers\wm​iacpi.sys [2006-11-02 11264]

 ======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

 R2 Apple Mobile Device;Apple Mobile Device; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceServi​ce.exe [2010-03-19 144672]
 R2 aswUpdSv;avast! iAVS4 Control Service; C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe [2009-11-25 18752]
 R2 avast! Antivirus;avast! Antivirus; C:\Program Files\Alwil Software\Avast4\ashServ.exe [2009-11-25 138680]
 R2 Bonjour Service;Service Bonjour; C:\Program Files\Bonjour\mDNSResponder.ex​e [2010-02-12 345376]
 R2 HP Health Check Service;HP Health Check Service; c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe [2007-09-19 65536]
 R2 HPBtnSrv;HP Chasis Button Service; c:\hp\HPEZBTN\HPBtnSrv.exe [2007-05-29 198240]
 R2 hpqddsvc;Service HP CUE DeviceDiscovery; C:\Windows\system32\svchost.ex​e [2008-01-19 21504]
 R2 IAANTMON;Intel(R) Matrix Storage Event Monitor; C:\Program Files\Intel\Intel Matrix Storage Manager\Iaantmon.exe [2007-07-12 354840]
 R2 LightScribeService;LightScribe​Service Direct Disc Labeling Service; c:\Program Files\Common Files\LightScribe\LSSrvc.exe [2007-09-25 79136]
 R2 McciCMService;McciCMService; C:\Program Files\Common Files\Motive\McciCMService.exe [2008-02-07 303104]
 R2 MyWebSearchService;My Web Search Service; C:\PROGRA~1\MYWEBS~1\bar\1.bin​\mwssvc.exe [2010-04-20 28762]
 R2 Net Driver HPZ12;Net Driver HPZ12; C:\Windows\System32\svchost.ex​e [2008-01-19 21504]
 R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2008-08-23 118784]
 R2 Pml Driver HPZ12;Pml Driver HPZ12; C:\Windows\System32\svchost.ex​e [2008-01-19 21504]
 R2 PnkBstrA;PnkBstrA; C:\Windows\system32\PnkBstrA.e​xe [2009-11-28 66872]
 R2 SeaPort;SeaPort; C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe [2009-05-19 240512]
 R2 StarWindServiceAE;StarWind AE Service; E:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE​.exe [2007-05-28 275968]
 R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2009-03-30 1533808]
 R3 avast! Mail Scanner;avast! Mail Scanner; C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe [2009-11-25 254040]
 R3 avast! Web Scanner;avast! Web Scanner; C:\Program Files\Alwil Software\Avast4\ashWebSv.exe [2009-11-25 352920]
 R3 hpqcxs08;hpqcxs08; C:\Windows\system32\svchost.ex​e [2008-01-19 21504]
 R3 iPod Service;Service de l’iPod; C:\Program Files\iPod\bin\iPodService.exe [2010-03-26 545576]
 S2 gusvc;Google Software Updater; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.e​xe [2009-03-24 183280]
 S3 aspnet_state;Service d'état ASP.NET; C:\Windows\Microsoft.NET\Frame​work\v2.0.50727\aspnet_state.e​xe [2009-03-30 31048]
 S3 DAUpdaterSvc;Dragon Age: Origins - Content Updater; E:\Program Files\Dragon Age\bin_ship\DAUpdaterSvc.Serv​ice.exe [2009-07-26 25832]
 S3 FontCache;@%systemroot%\system​32\FntCache.dll,-100; C:\Windows\system32\svchost.ex​e [2008-01-19 21504]
 S3 fsssvc;Service Windows Live Contrôle parental; C:\Program Files\Windows Live\Family Safety\fsssvc.exe [2009-08-05 704864]
 S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\11\​Intel 32\IDriverT.exe [2005-04-04 69632]
 S3 maconfservice;Ma-Config Service; C:\Program Files\ma-config.com\maconfserv​ice.exe [2009-01-24 216232]
 S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2008-11-04 441712]
 S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
 S3 usprserv;User Privilege Service; C:\Windows\System32\svchost.ex​e [2008-01-19 21504]

 -----------------EOF----------​-------

 Voilà =) merci

Salut Xondro


 Relance AD-Remover et choisi l'option Désinstaller, télécharge la dernière version ici :
 http://pagesperso-orange.fr/NosTools/C_XX/AD-R.exe

 Désactive provisoirement et seulement le temps de l'utilisation de AD-Remover, la protection en temps réel de ton Antivirus et de tes Antispywares, qui peuvent gêner fortement la procédure de recherche et de nettoyage de l'outil.
 Déconnecte-toi et ferme toutes applications en cours  

 

• Double-clique sur le programme d'installation, installe-le dans son emplacement par défaut (C:\Program files).

• Double-clique sur l'icône AD-Remover située sur ton Bureau.

• Au menu principal, choisis l'option Nettoyer.

• Poste le rapport qui apparaît à la fin.

 (Le rapport est sauvegardé aussi sous C:\Ad-report(Scan/clean).Txt

 (CTRL+A pour tout sélectionner, CTRL+C pour copier et CTRL+V pour coller)

 Note : "Process.exe", une composante de l'outil, est détecté par certains antivirus comme une infection, ne pas en tenir compte, il s'agit d'un faux positif, continue la procédure

 Aide : http://commentcestfait.forumac [...] r-t775.htm


 @++