bon ça a marché
======= RAPPORT D'AD-REMOVER 2.0.0.2,G | UNIQUEMENT XP/VISTA/7 =======
Mis à jour par TeamXscript le 12/04/11
Contact: AdRemover[DOT]contact[AT]gmail[DOT]com
Site web:
http://www.teamxscript.orgC:\Program Files (x86)\Ad-Remover\main.exe (CLEAN [1]) -> Lancé à 15:42:29 le 07/05/2012, Mode normal
Microsoft Windows 7 Édition Familiale Premium (X64)
vodka@VODKA-PC (Acer Aspire 5742G)
============== ACTION(S) ==============
Fichier supprimé: C:\Windows\SysWOW64\ConduitEngine.tmp
Fichier supprimé: C:\Users\vodka\Downloads\iMeshV11fr.exe
(!) -- Fichiers temporaires supprimés.
Clé supprimée: HKLM\Software\Classes\CLSID\{0722A2AC-4CF8-4310-AFEE-F87AA9BE10AA}
Clé supprimée: HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0722A2AC-4CF8-4310-AFEE-F87AA9BE10AA}
Clé supprimée: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{0722A2AC-4CF8-4310-AFEE-F87AA9BE10AA}
Clé supprimée: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{0722A2AC-4CF8-4310-AFEE-F87AA9BE10AA}
Clé supprimée: HKLM\Software\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}
Clé supprimée: HKLM\Software\Classes\TypeLib\{8640C08A-5D22-4529-A8AD-0436026188F2}
Clé supprimée: HKLM\Software\Classes\Applications\iMeshV11fr.exe
Clé supprimée: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{34F2994E-6EBF-4AAB-92D5-667DB07AA1E8}
Clé supprimée: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2414}
Clé supprimée: HKLM\Software\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2414}
============== SCAN ADDITIONNEL ==============
**** Internet Explorer Version [9.0.8112.16421] ****
HKCU_Main|Default_Page_URL -
hxxp://www.microsoft.com/isapi/redir.dl ... ar=msnhomeHKCU_Main|Default_Search_URL -
hxxp://www.microsoft.com/isapi/redir.dl ... r=iesearchHKCU_Main|Search bar -
hxxp://go.microsoft.com/fwlink/?linkid=54896HKCU_Main|Start Page -
hxxp://fr.msn.com/HKLM_Main|Default_Page_URL -
hxxp://go.microsoft.com/fwlink/?LinkId=54896HKLM_Main|Default_Search_URL -
hxxp://www.microsoft.com/isapi/redir.dl ... r=iesearchHKLM_Main|Search bar -
hxxp://search.msn.com/spbasic.htmHKLM_Main|Search Page -
hxxp://www.microsoft.com/isapi/redir.dl ... r=iesearchHKLM_Main|Start Page -
hxxp://fr.msn.com/HKCU_URLSearchHooks|{4daac69c-cba7-45e2-9bc8-1044483d3352} - "Softonic_France Toolbar" (C:\Program Files (x86)\Softonic_France\prxtbSof0.dll)
HKCU_URLSearchHooks|{b905bc9d-6059-4517-a6b4-950d26299a2b} (x)
HKLM_URLSearchHooks|{4daac69c-cba7-45e2-9bc8-1044483d3352} - "Softonic_France Toolbar" (C:\Program Files (x86)\Softonic_France\prxtbSof0.dll)
HKCU_SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233} - "AVG Secure Search" (
hxxp://isearch.avg.com/search?cid={AA0262AF-F074-4340-899C-6D399F60A594}&mid=c8c...)
HKCU_Toolbar\WebBrowser|{4DAAC69C-CBA7-45E2-9BC8-1044483D3352} (C:\Program Files (x86)\Softonic_France\prxtbSof0.dll)
HKCU_Toolbar\WebBrowser|{B905BC9D-6059-4517-A6B4-950D26299A2B} (x)
HKCU_Toolbar\WebBrowser|{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39} (x)
HKLM_Toolbar|{4daac69c-cba7-45e2-9bc8-1044483d3352} (C:\Program Files (x86)\Softonic_France\prxtbSof0.dll)
HKLM_Toolbar|{95B7759C-8C7F-4BF1-B163-73684A933233} (C:\Program Files (x86)\AVG Secure Search\11.0.0.9\AVG Secure Search_toolbar.dll)
HKLM_Toolbar|{26c9e18c-3717-4be1-a225-04e4471f5b6e} (C:\Program Files (x86)\blekkotb\blekkoDx.dll)
HKCU_ElevationPolicy\{1024F1BE-76DC-40d5-AB98-664A4185E5FA} - C:\Users\vodka\AppData\Local\Facebook\Video\Skype\FacebookVideoCalling.exe (Skype Limited)
HKLM_ElevationPolicy\{00f12770-e60e-4dc6-9105-425bface7c73} - C:\Program Files (x86)\blekkotb\uninstall.exe (Visicom Media Inc.)
HKLM_ElevationPolicy\{57806A32-D937-4D70-A97C-559B01C5CEFC} - C:\Users\vodka\AppData\Local\Conduit\CT2542115\Softonic_FranceAutoUpdaterHelper.exe (x)
HKLM_ElevationPolicy\{620477B7-3945-48E4-9A3F-B4F3618DAA8D} - C:\PROGRA~2\WIA6EB~1\Datamngr\ToolBar\dtUser.exe (x)
HKLM_ElevationPolicy\{70f641fd-9ffc-4d5b-a4dc-962af4ed7999} - C:\Program Files (x86)\Internet Explorer\iedw.exe (x)
HKLM_ElevationPolicy\{74C36554-31F0-49DD-8857-ED6A64DF45BE} - C:\Program Files (x86)\Incredibar.com\incredibar\1.5.3.27\incredibarsrv.exe (x)
HKLM_ElevationPolicy\{7555B87D-D711-48B2-B97D-04DF700652BA} - C:\Program Files (x86)\Software\Update\SoftwareUpdate.exe (Boxore OU.)
HKLM_ElevationPolicy\{7BD9A644-9DC6-42be-8872-CBF5524276BD} - C:\Program Files (x86)\Common Files\Software Update Utility\dnu.exe (x)
HKLM_ElevationPolicy\{7E55C22E-0B8D-458C-B395-5544D4255E93} - C:\PROGRA~2\WI3C8A~1\Datamngr\ToolBar\dtUser.exe (x)
HKLM_ElevationPolicy\{A6E2003F-95C5-4591-BA9A-0093080FDB5C} - C:\Program Files (x86)\Common Files\Oberon Media\OberonBroker\1.0.0.63\OberonBroker.exe (?)
HKLM_ElevationPolicy\{B43A0C1E-B63F-4691-B68F-CD807A45DA01} - C:\Windows\system32\TSWbPrxy.exe (x)
HKLM_ElevationPolicy\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39} - C:\Program Files (x86)\AVG Secure Search\lip.exe (?)
HKLM_ElevationPolicy\{EE60BB44-6E83-4F95-8FC5-7239FCBB7819} - C:\PROGRA~2\WIA6EB~1\Datamngr\ToolBar\dtUser.exe (x)
HKLM_ElevationPolicy\{F25AF245-4A81-40DC-92F9-E9021F207706} - C:\Program Files (x86)\Common Files\AVG Secure Search\ScriptHelperInstaller\11.0.2\ScriptHelper.exe (?)
BHO\{20a0be68-8fd9-4539-8712-ce3d1c1fdfc6} - "Updater For Spam Free Search Bar" (C:\Program Files (x86)\blekkotb\auxi\blekkoAu.dll)
BHO\{26c9e18c-3717-4be1-a225-04e4471f5b6e} - "Spam Free Search Bar" (C:\Program Files (x86)\blekkotb\blekkoDx.dll)
BHO\{4daac69c-cba7-45e2-9bc8-1044483d3352} - "Softonic_France Toolbar" (C:\Program Files (x86)\Softonic_France\prxtbSof0.dll)
BHO\{95B7759C-8C7F-4BF1-B163-73684A933233} - "AVG Security Toolbar" (C:\Program Files (x86)\AVG Secure Search\11.0.0.9\AVG Secure Search_toolbar.dll)
BHO\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - "Skype Browser Helper" (C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll)
========================================
C:\Program Files (x86)\Ad-Remover\Quarantine: 2 Fichier(s)
C:\Program Files (x86)\Ad-Remover\Backup: 15 Fichier(s)
C:\Ad-Report-CLEAN[1].txt - 07/05/2012 15:42:40 (6187 Octet(s))
C:\Ad-Report-CLEAN[2].txt - 07/05/2012 15:44:20 (447 Octet(s))
Fin à : 15:44:33, 07/05/2012
============== E.O.F ==============
adwcleaner
***** [Fichiers / Dossiers] *****
***** [Registre] *****
***** [Registre - GUID] *****
***** [Navigateurs] *****
-\\ Internet Explorer v9.0.8112.16421
[OK] Le registre ne contient aucune entrée illégitime.
-\\ Mozilla Firefox v [Impossible d'obtenir la version]
-\\ Google Chrome v18.0.1025.168
Fichier : C:\Users\vodka\AppData\Local\Google\Chrome\User Data\Default\Preferences
Supprimée : "icon_url": "hxxp://search.conduit.com/fav.ico",
Supprimée : "keyword": "search.conduit.com",
Supprimée : "name": "Conduit",
Supprimée : "search_url": "hxxp://search.conduit.com/Results.aspx?q={searchTerms}&SearchSource=49&ctid=CT3[...]
Supprimée : "suggest_url": "hxxp://search.conduit.com/"
*************************
AdwCleaner[S1].txt - [1122 octets] - [07/05/2012 15:49:44]
########## EOF - C:\AdwCleaner[S1].txt - [1250 octets] ##########