======= RAPPORT D'AD-REMOVER 2.0.0.2,E | UNIQUEMENT XP/VISTA/7 =======
Mis à jour par TeamXscript le 16/02/11
Contact: AdRemover[DOT]contact[AT]gmail[DOT]com
Site web: http://www.teamxscript.org
C:\Program Files\Ad-Remover\main.exe (CLEAN [2]) -> Lancé à 18:50:04 le 18/02/2011, Mode normal
Microsoft Windows XP Professionnel Service Pack 3 (X86)
Administrateur@PHILIPPE-E27D19 ( )
============== ACTION(S) ==============
Fichier supprimé: C:\Program Files\Mozilla FireFox\Components\AskHPRFF.js
Fichier supprimé: C:\Program Files\Mozilla FireFox\Components\AskSearch.js
Dossier supprimé: C:\Documents and Settings\Administrateur\Local Settings\Application Data\Conduit
Dossier supprimé: C:\Program Files\Conduit
Dossier supprimé: C:\Documents and Settings\Administrateur\Local Settings\Application Data\ConduitEngine
Dossier supprimé: C:\Program Files\ConduitEngine
Dossier supprimé: C:\Program Files\AutocompletePro
Dossier supprimé: C:\Program Files\GamesBar
Dossier supprimé: C:\Documents and Settings\Administrateur\Application Data\PriceGong
Dossier supprimé: C:\Documents and Settings\Administrateur\Application Data\vShare
Dossier supprimé: C:\Program Files\vShare
Dossier supprimé: C:\Documents and Settings\Administrateur\Application Data\EoRezo
Dossier supprimé: C:\Documents and Settings\Administrateur\Application Data\OfferBox
Dossier supprimé: C:\Program Files\OfferBox
(!) -- Fichiers temporaires supprimés.
-- Fichier ouvert: C:\Documents and Settings\Administrateur\Application Data\Mozilla\FireFox\Profiles\5hwn0l89.default\Prefs.js --
Ligne supprimée: user_pref("browser.startup.homepage", "hxxp://y.lo.st");
-- Fichier Fermé --
Clé supprimée: HKLM\Software\Classes\CLSID\{02793363-096C-4A55-A041-EA7FBB268CB4}
Clé supprimée: HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{02793363-096C-4A55-A041-EA7FBB268CB4}
Clé supprimée: HKLM\Software\Classes\CLSID\{043C5167-00BB-4324-AF7E-62013FAEDACF}
Clé supprimée: HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{043C5167-00BB-4324-AF7E-62013FAEDACF}
Clé supprimée: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{043C5167-00BB-4324-AF7E-62013FAEDACF}
Clé supprimée: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{043C5167-00BB-4324-AF7E-62013FAEDACF}
Clé supprimée: HKLM\Software\Classes\CLSID\{0FB6A909-6086-458F-BD92-1F8EE10042A0}
Clé supprimée: HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0FB6A909-6086-458F-BD92-1F8EE10042A0}
Clé supprimée: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{0FB6A909-6086-458F-BD92-1F8EE10042A0}
Clé supprimée: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{0FB6A909-6086-458F-BD92-1F8EE10042A0}
Clé supprimée: HKLM\Software\Classes\CLSID\{30F9B915-B755-4826-820B-08FBA6BD249D}
Clé supprimée: HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{30F9B915-B755-4826-820B-08FBA6BD249D}
Clé supprimée: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{30F9B915-B755-4826-820B-08FBA6BD249D}
Clé supprimée: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{30F9B915-B755-4826-820B-08FBA6BD249D}
Clé supprimée: HKLM\Software\Classes\CLSID\{3B7599DF-3D5D-4EF5-BF51-9C2EDA788E83}
Clé supprimée: HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{3B7599DF-3D5D-4EF5-BF51-9C2EDA788E83}
Clé supprimée: HKLM\Software\Classes\CLSID\{3F3A4B8A-86FC-43A4-BB00-6D7EBE9D4484}
Clé supprimée: HKLM\Software\Classes\CLSID\{b0de3308-5d5a-470d-81b9-634fc078393b}
Clé supprimée: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{b0de3308-5d5a-470d-81b9-634fc078393b}
Clé supprimée: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{b0de3308-5d5a-470d-81b9-634fc078393b}
Clé supprimée: HKLM\Software\Classes\Interface\{20ED5AF7-D9C4-409E-9EB3-D2A44A77FB6D}
Clé supprimée: HKLM\Software\Classes\Interface\{6E4C89CF-3061-4EE4-B22A-B7A8AAEA5CB3}
Clé supprimée: HKLM\Software\Classes\Interface\{C9AE652B-8C99-4AC2-B556-8B501182874E}
Clé supprimée: HKLM\Software\Classes\TypeLib\{01BCB858-2F62-4F06-A8F4-48F927C15333}
Clé supprimée: HKLM\Software\Classes\TypeLib\{3E315C81-442B-431C-AEC8-ED189699EC24}
Clé supprimée: HKLM\Software\Classes\AskIBar.PopSwatterBarButton
Clé supprimée: HKLM\Software\Classes\AskIBar.PopSwatterBarButton.1
Clé supprimée: HKLM\Software\Classes\AskIBar.PopSwatterSettingsControl
Clé supprimée: HKLM\Software\Classes\AskIBar.PopSwatterSettingsControl.1
Clé supprimée: HKLM\Software\Classes\AskToolBar.SettingsPlugin
Clé supprimée: HKLM\Software\Classes\AskToolBar.SettingsPlugin.1
Clé supprimée: HKLM\Software\Classes\BandooCore.BandooCore
Clé supprimée: HKLM\Software\Classes\BandooCore.BandooCore.1
Clé supprimée: HKLM\Software\Classes\BandooCore.ResourcesMngr
Clé supprimée: HKLM\Software\Classes\BandooCore.ResourcesMngr.1
Clé supprimée: HKLM\Software\Classes\BandooCore.SettingsMngr
Clé supprimée: HKLM\Software\Classes\BandooCore.SettingsMngr.1
Clé supprimée: HKLM\Software\Classes\BandooCore.StatisticMngr
Clé supprimée: HKLM\Software\Classes\BandooCore.StatisticMngr.1
Clé supprimée: HKLM\Software\Classes\Conduit.Engine
Clé supprimée: HKLM\Software\Classes\SuggestMeYes.SuggestMeYesBHO
Clé supprimée: HKLM\Software\Classes\SuggestMeYes.SuggestMeYesBHO.1
Clé supprimée: HKLM\Software\Classes\Toolbar.CT2297721
Clé supprimée: HKLM\Software\Classes\Toolbar.CT2542115
Clé supprimée: HKLM\Software\Classes\Toolbar.CT2653012
Clé supprimée: HKLM\Software\Classes\vShare.IMedixProtocol
Clé supprimée: HKLM\Software\Classes\vShare.IMedixProtocol.1
Clé supprimée: HKLM\Software\Classes\vShare.PugiObj
Clé supprimée: HKLM\Software\Classes\vShare.PugiObj.1
Clé supprimée: HKLM\Software\Classes\vShare.ScriptHelpers
Clé supprimée: HKLM\Software\Classes\vShare.ScriptHelpers.1
Clé supprimée: HKLM\Software\Classes\AppID\BandooCore.EXE
Clé supprimée: HKLM\Software\Classes\AppID\{1301A8A5-3DFB-4731-A162-B357D00C9644}
Clé supprimée: HKLM\Software\Classes\AppID\AutocompletePro.DLL
Clé supprimée: HKLM\Software\Classes\AppID\{442F13BC-2031-42D5-9520-437F65271153}
Clé supprimée: HKLM\Software\OfferBox
Clé supprimée: HKLM\Software\bandoo
Clé supprimée: HKLM\Software\AskBarDis
Clé supprimée: HKLM\Software\Conduit
Clé supprimée: HKLM\Software\conduitEngine
Clé supprimée: HKLM\Software\Freeze.com
Clé supprimée: HKCU\Software\OfferBox
Clé supprimée: HKCU\Software\AutocompletePro
Clé supprimée: HKCU\Software\vShare
Clé supprimée: HKCU\Software\Conduit
Clé supprimée: HKCU\Software\conduitEngine
Clé supprimée: HKCU\Software\Freeze.com
Clé supprimée: HKCU\Software\MGS\Thumper\Casino\RubyFortune
Clé supprimée: HKCU\Software\PopCap
Clé supprimée: HKCU\Software\PriceGong
Clé supprimée: HKCU\Software\AppDataLow\AskBarDis
Clé supprimée: HKU\.DEFAULT\Software\Conduit
Clé supprimée: HKU\.DEFAULT\Software\Dealio
Clé supprimée: HKU\.DEFAULT\Software\Search Settings
Clé supprimée: HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu\Programs\GamesBar
Clé supprimée: HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu\Programs\PlayMP3z
Clé supprimée: HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu2\Programs\EoRezo
Clé supprimée: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{1F096B29-E9DA-4D64-8D63-936BE7762CC5}
Clé supprimée: HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{551C5AA5-8053-4CEF-A568-683DEEF656FE}
Clé supprimée: HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\vShare
Clé supprimée: HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\SoftwareUpdate_is1
Clé supprimée: HKCU\Software\Microsoft\SystemCertificates\TrustedPublisher\Certificates\7EE743314C844C7F445B8B1D7617612DF1FDD50F
Clé supprimée: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{1A93C934-025B-4C3A-B38E-9654A7003239}
Clé supprimée: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{6F282B65-56BF-4BD1-A8B2-A4449A05863D}
Clé supprimée: HKLM\Software\Classes\PROTOCOLS\Handler\vsharechrome
Clé supprimée: HKLM\Software\Google\Chrome\Extensions\bjeikeheijdjdfjbmknpefojickbkmom
Valeur supprimée: HKCU\Software\Microsoft\Windows\CurrentVersion\WinTrust\Trust Providers\Software Publishing\Trust Database\0|goicfboogidikkejccmclpieicihhlpo jimddp
Valeur supprimée: HKCU\Software\Microsoft\Windows\CurrentVersion\WinTrust\Trust Providers\Software Publishing\Trust Database\0|goicfboogidikkejccmclpieicihhlpo hpfanicgkffmccehnpkikogcffaepkfp
Valeur supprimée: HKCU\Software\Microsoft\Windows\CurrentVersion\WinTrust\Trust Providers\Software Publishing\Trust Database\0|goicfboogidikkejccmclpieicihhlpo dgnckdmmolaijpbbakmplfhlfpdhglgc
Valeur supprimée: HKLM\Software\Microsoft\Internet Explorer\Toolbar|{043C5167-00BB-4324-AF7E-62013FAEDACF}
Valeur supprimée: HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser|{043C5167-00BB-4324-AF7E-62013FAEDACF}
============== SCAN ADDITIONNEL ==============
-- C:\Documents and Settings\Administrateur\Application Data\Mozilla\FireFox\Profiles\5hwn0l89.default --
Extensions\ffxtlbr@babylon.com (Babylon)
Extensions\{ef4e370e-d9f0-4e00-b93e-a4f274cfdd5a} (FoxTab)
Prefs.js - browser.startup.homepage, hxxp://www.pucuy.com
Prefs.js - browser.startup.homepage, hxxp://www.pucuy.com
Prefs.js - browser.startup.homepage, hxxp://www.pucuy.com
Prefs.js - browser.startup.homepage, hxxp://www.pucuy.com
Prefs.js - browser.startup.homepage, hxxp://www.pucuy.com
========================================
**** Internet Explorer Version [8.0.6001.18702] ****
HKCU_Main|Default_Page_URL - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
HKCU_Main|Default_Search_URL - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU_Main|Search bar - hxxp://go.microsoft.com/fwlink/?linkid=54896
HKCU_Main|Start Page - hxxp://fr.msn.com/
HKLM_Main|Default_Page_URL - hxxp://go.microsoft.com/fwlink/?LinkId=54896
HKLM_Main|Default_Search_URL - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKLM_Main|Search bar - hxxp://search.msn.com/spbasic.htm
HKLM_Main|Search Page - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKLM_Main|Start Page - hxxp://fr.msn.com/
HKCU_Toolbar\WebBrowser|{EE5D279F-081B-4404-994D-C6B60AAEBA6D} (C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll)
HKCU_Toolbar\WebBrowser|{D3028143-6145-4318-99D3-3EDCE54A95A9} (C:\Program Files\orange\ToolbarFR\ToolbarContainer101000315.dll)
HKCU_Toolbar\WebBrowser|{4DAAC69C-CBA7-45E2-9BC8-1044483D3352} (C:\Program Files\Softonic_France\tbSof2.dll)
HKCU_Toolbar\WebBrowser|{D5B75883-E809-4120-BFEB-8D707D5DFBE3} (C:\Program Files\Recherche_France\tbRec2.dll)
HKCU_Toolbar\WebBrowser|{CD90BF73-20F6-44EF-993D-BB920303BD2E} (C:\Program Files\Veoh_Web_Player\tbVeo2.dll)
HKLM_Toolbar|{EE5D279F-081B-4404-994D-C6B60AAEBA6D} (C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll)
HKLM_Toolbar|{EF99BD32-C1FB-11D2-892F-0090271D4F88} (C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll)
HKLM_Toolbar|{D3028143-6145-4318-99D3-3EDCE54A95A9} (C:\Program Files\orange\ToolbarFR\ToolbarContainer101000315.dll)
HKLM_Toolbar|{4daac69c-cba7-45e2-9bc8-1044483d3352} (C:\Program Files\Softonic_France\tbSof2.dll)
HKLM_Toolbar|{8dcb7100-df86-4384-8842-8fa844297b3f} (C:\Program Files\MSN Toolbar\Platform\5.0.1423.0\npwinext.dll)
HKLM_Toolbar|{d5b75883-e809-4120-bfeb-8d707d5dfbe3} (C:\Program Files\Recherche_France\tbRec2.dll)
HKLM_Toolbar|{cd90bf73-20f6-44ef-993d-bb920303bd2e} (C:\Program Files\Veoh_Web_Player\tbVeo2.dll)
HKLM_ElevationPolicy\098df7c8-f2c3-4e43-bd0d-af18ab2ac3fa - C:\Program Files\Veoh_Web_Player\Veoh_Web_PlayerToolbarHelper.exe (?)
HKLM_ElevationPolicy\244bf972-ae92-451d-97d5-a09008af6daa - C:\Program Files\Softonic_France\Softonic_FranceToolbarHelper.exe (?)
HKLM_ElevationPolicy\3b81f692-c6ea-404a-8b6e-1478c5995199 - C:\Program Files\Recherche_France\Recherche_FranceToolbarHelper.exe (?)
HKLM_ElevationPolicy\6d71fdb1-a764-4150-94bd-2121eba52b1f - C:\Program Files\Veoh_Web_Player\Veoh_Web_PlayerToolbarHelper.exe (?)
HKLM_ElevationPolicy\71fe083a-5a13-4094-a90d-4f046d766c96 - C:\Program Files\Softonic_France\Softonic_FranceToolbarHelper.exe (?)
HKLM_ElevationPolicy\86673164-35d5-49f9-b16a-ed71d4885af8 - C:\Program Files\Softonic_France\Softonic_FranceToolbarHelper.exe (?)
HKLM_ElevationPolicy\c5f962dc-9b80-4d55-82fc-786a2db7a643 - C:\Program Files\Recherche_France\Recherche_FranceToolbarHelper.exe (?)
HKLM_ElevationPolicy\d3507bd0-6f44-4fe9-b851-721f8eced851 - C:\Program Files\Recherche_France\Recherche_FranceToolbarHelper.exe (?)
HKLM_ElevationPolicy\d3c392cc-db7f-47d8-8f87-4943ed2f0635 - C:\Program Files\Softonic_France\Softonic_FranceToolbarHelper.exe (?)
HKLM_ElevationPolicy\{13CBC0AC-9A9B-45B2-AE36-64CAD67E9AE0} - C:\Program Files\Recherche_France\Recherche_FranceToolbarHelper1.exe (Conduit Ltd.)
HKLM_ElevationPolicy\{28C8F8F0-DA8C-4A24-B500-DF8D4CEF13D3} - C:\Program Files\Orange\ToolbarFR\ToolbarHelper.exe (Orange)
HKLM_ElevationPolicy\{4becf16c-74f0-429b-8d3e-4fba507ac661} - C:\Program Files\Adobe\Reader\AcroRd32.exe (x)
HKLM_ElevationPolicy\{803E07A7-F4C1-4b55-81C0-21D9F6D75F49} - C:\Program Files\Fichiers communs\Oberon Media\Parts\1.0.0.11\OberonParts.exe (Oberon Media)
HKLM_ElevationPolicy\{A6E2003F-95C5-4591-BA9A-0093080FDB5C} - C:\Program Files\Fichiers communs\Oberon Media\OberonBroker\1.0.0.76\OberonBroker.exe (?)
HKLM_ElevationPolicy\{A973A312-BED9-467A-9E89-F8578E4EADF7} - C:\Program Files\Softonic_France\Softonic_FranceToolbarHelper1.exe (Conduit Ltd.)
HKLM_ElevationPolicy\{AC76BA86-7AD7-1033-7B44-A70800000002} - C:\Program Files\Adobe\Reader\AcroRd32Info.exe (x)
HKLM_ElevationPolicy\{CF573E73-19B8-441A-AE7B-8E89AEDA9C9B} - C:\Program Files\Veoh_Web_Player\Veoh_Web_PlayerToolbarHelper1.exe (Conduit Ltd.)
HKLM_ElevationPolicy\{EFC0651C-B6D7-49CD-A6E0-B1CE9AB5FE46} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\ytbb.exe (Yahoo! Inc.)
HKLM_Extensions\{08B0E5C0-4FCB-11CF-AAA5-00401C608501} - "?" (?)
HKLM_Extensions\{2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - "Create Mobile Favorite" (C:\PROGRA~1\MI3AA1~1\INetRepl.dll,210)
HKLM_Extensions\{2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - "?" (?)
HKLM_Extensions\{53F6FCCD-9E22-4d71-86EA-6E43136192AB} - "?" (?)
HKLM_Extensions\{925DAB62-F9AC-4221-806A-057BFB1014AA} - "?" (?)
HKLM_Extensions\{e2e2dd38-d088-4134-82b7-f2ba38496583} - "?" (?)
BHO\{02478D38-C3F9-4EFB-9B51-7695ECA05670} - "&Yahoo! Toolbar Helper" (C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll)
BHO\{4daac69c-cba7-45e2-9bc8-1044483d3352} - "Softonic_France Toolbar" (C:\Program Files\Softonic_France\tbSof2.dll)
BHO\{6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - "Search Helper" (C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll)
BHO\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - "SSVHelper Class" (C:\Program Files\Java\jre6\bin\ssv.dll)
BHO\{CC59E0F9-7E43-44FA-9FAA-8377850BF205} - "FDMIECookiesBHO Class" (C:\Program Files\Free Download Manager\iefdm2.dll)
BHO\{cd90bf73-20f6-44ef-993d-bb920303bd2e} - "Veoh Web Player Toolbar" (C:\Program Files\Veoh_Web_Player\tbVeo2.dll)
BHO\{d2ce3e00-f94a-4740-988e-03dc2f38c34f} - "Bing Bar BHO" (C:\Program Files\MSN Toolbar\Platform\5.0.1423.0\npwinext.dll)
BHO\{d5b75883-e809-4120-bfeb-8d707d5dfbe3} - "Discover France Toolbar" (C:\Program Files\Recherche_France\tbRec2.dll)
BHO\{E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - "EpsonToolBandKicker Class" (C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll)
BHO\{FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} - "SingleInstance Class" (C:\Program Files\Yahoo!\Companion\Installs\cpn0\YTSingleInstance.dll)
========================================
C:\Program Files\Ad-Remover\Quarantine: 231 Fichier(s)
C:\Program Files\Ad-Remover\Backup: 15 Fichier(s)
C:\Ad-Report-CLEAN[1].txt - 18/02/2011 18:49:22 (443 Octet(s))
C:\Ad-Report-CLEAN[2].txt - 18/02/2011 18:50:09 (1700 Octet(s))
Fin à: 18:51:50, 18/02/2011
============== E.O.F ==============
Merci encore de ton aide