======= RAPPORT D'AD-REMOVER 2.0.0.2,G | UNIQUEMENT XP/VISTA/7 ======= Mis à jour par TeamXscript le 12/04/11 Contact: AdRemover[DOT]contact[AT]gmail[DOT]com Site web: http://www.teamxscript.org C:\Program Files (x86)\Ad-Remover\main.exe (SCAN [1]) -> Lancé à 10:05:01 le 12/10/2011, Mode normal Microsoft Windows 7 Édition Familiale Premium Service Pack 1 (X64) Jo@JONATHAN (Acer Aspire 7738) ============== RECHERCHE ============== Fichier trouvé: C:\Users\Jo\AppData\Roaming\Mozilla\FireFox\Profiles\o4dxr9f2.default\prefs.js.ask.bak Dossier trouvé: C:\Users\Jo\AppData\LocalLow\Conduit Dossier trouvé: C:\Program Files (x86)\Conduit Dossier trouvé: C:\Users\Jo\AppData\LocalLow\PriceGong -- Fichier ouvert: C:\Users\Jo\AppData\Roaming\Mozilla\FireFox\Profiles\o4dxr9f2.default\Prefs.js -- Ligne trouvée: user_pref("extensions.toolbar@ask.com.install-event-fired", true); -- Fichier Fermé -- Clé trouvée: HKLM\Software\Classes\CLSID\{78F3A323-798E-4AEA-9A57-88F4B05FD5DD} Clé trouvée: HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{78F3A323-798E-4AEA-9A57-88F4B05FD5DD} Clé trouvée: HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{78F3A323-798E-4AEA-9A57-88F4B05FD5DD} Clé trouvée: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{78F3A323-798E-4AEA-9A57-88F4B05FD5DD} Clé trouvée: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{78F3A323-798E-4AEA-9A57-88F4B05FD5DD} Clé trouvée: HKLM\Software\Classes\CLSID\{7AC3E13B-3BCA-4158-B330-F66DBB03C1B5} Clé trouvée: HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{7AC3E13B-3BCA-4158-B330-F66DBB03C1B5} Clé trouvée: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{7AC3E13B-3BCA-4158-B330-F66DBB03C1B5} Clé trouvée: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{7AC3E13B-3BCA-4158-B330-F66DBB03C1B5} Clé trouvée: HKLM\Software\Classes\CLSID\{8F97BFF8-488B-4107-BCEE-B161AB4E4183} Clé trouvée: HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{8F97BFF8-488B-4107-BCEE-B161AB4E4183} Clé trouvée: HKLM\Software\Classes\CLSID\{A1B48071-416D-474E-A13B-BE5456E7FC31} Clé trouvée: HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{A1B48071-416D-474E-A13B-BE5456E7FC31} Clé trouvée: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{A1B48071-416D-474E-A13B-BE5456E7FC31} Clé trouvée: HKLM\Software\Classes\Interface\{79FB5FC8-44B9-4AF5-BADD-CCE547F953E5} Clé trouvée: HKLM\Software\Classes\TypeLib\{79D60450-56C5-4A8C-9321-6D5BC2A81E5A} Clé trouvée: HKLM\Software\Classes\TypeLib\{99C22A61-21BA-4F81-85FF-CDC9EB5DB10B} Clé trouvée: HKLM\Software\Classes\TypeLib\{BB7256DD-EBA9-480B-8441-A00388C2BEC3} Clé trouvée: HKLM\Software\Classes\Toolbar.CT2542115 Clé trouvée: HKLM\Software\Classes\Toolbar.CT2643111 Clé trouvée: HKLM\Software\Conduit Clé trouvée: HKLM\Software\OpenCandy NSIS SDK Clé trouvée: HKCU\Software\Conduit Clé trouvée: HKCU\Software\Zugo Clé trouvée: HKCU\Software\AppDataLow\Software\Conduit Clé trouvée: HKCU\Software\AppDataLow\Software\PriceGong Valeur trouvée: HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser|{D4027C7F-154A-4066-A1AD-4243D8127440} ============== SCAN ADDITIONNEL ============== **** Mozilla Firefox Version [7.0.1 (fr)] **** Plugins\npFoxitReaderPlugin.dll (Foxit Software Company) Plugins\npvsharetvplg.dll (vShare.tv ) Searchplugins\bing.xml ( hxxp://www.bing.com/search) Components\browsercomps.dll (Mozilla Foundation) Extensions\quickstores@quickstores.de (QuickStores-Toolbar) HKLM_Extensions|siteranker@siteranker.com - C:\Program Files (x86)\SiteRanker\firefox\ HKCU_Extensions|mozilla_cc@internetdownloadmanager.com - C:\Users\Jo\AppData\Roaming\IDM\idmmzcc5 -- C:\Users\Jo\AppData\Roaming\Mozilla\FireFox\Profiles\o4dxr9f2.default -- Extensions\{5384767E-00D9-40E9-B72F-9CC39D655D6F} (EPUBReader) Extensions\{81BF1D23-5F17-408D-AC6B-BD6DF7CAF670} (iMacros for Firefox) Extensions\{D4DD63FA-01E4-46a7-B6B1-EDAB7D6AD389} (Download Statusbar) Extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781} (Greasemonkey) Searchplugins\firefox-modules.xml (?) Prefs.js - browser.download.dir, C:\\Users\\Jo\\Desktop Prefs.js - browser.download.lastDir, C:\\Users\\Jo\\Desktop Prefs.js - browser.search.defaultenginename, Web Search Prefs.js - browser.startup.homepage, hxxp://www.google.fr/ Prefs.js - browser.startup.homepage_override.buildID, 20110928134238 Prefs.js - browser.startup.homepage_override.mstone, rv:7.0.1 Prefs.js - keyword.URL, hxxp://startsear.ch/?aff=1&q= Prefs.js - privacy.popups.showBrowserMessage, false ======================================== **** Internet Explorer Version [9.0.8112.16421] **** HKCU_Main|Default_Page_URL - hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=040c&m=aspire_7738&r=27360710z206l03c8z125t6801w406 HKCU_Main|Search Page - hxxp://go.microsoft.com/fwlink/?LinkId=54896 HKCU_Main|Start Page - hxxp://www.google.fr/ HKCU_Main|Start Page Restore - hxxp://www.google.fr/ HKLM_Main|Default_Page_URL - hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=040c&m=aspire_7738&r=27360710z206l03c8z125t6801w406 HKLM_Main|Default_Search_URL - hxxp://go.microsoft.com/fwlink/?LinkId=54896 HKLM_Main|Search Page - hxxp://go.microsoft.com/fwlink/?LinkId=54896 HKLM_Main|Start Page - hxxp://startsear.ch/?aff=1 HKCU_SearchScopes\{171DEBEB-C3D4-40b7-AC73-056A5EBA4A7E} - "?" (?) HKCU_Toolbar\WebBrowser|{D4027C7F-154A-4066-A1AD-4243D8127440} (x) HKCU_Toolbar\WebBrowser|{7AC3E13B-3BCA-4158-B330-F66DBB03C1B5} (C:\Program Files (x86)\vShare.tv plugin\BarLcher.dll) HKLM_Toolbar|{10EDB994-47F8-43F7-AE96-F2EA63E9F90F} (x) HKLM_Toolbar|{7AC3E13B-3BCA-4158-B330-F66DBB03C1B5} (C:\Program Files (x86)\vShare.tv plugin\BarLcher.dll) HKLM_Toolbar|{EFEED92A-A33D-4873-BA8F-32BAA631E54D} (C:\Program Files (x86)\Astroburn Toolbar\ABToolbar.dll) HKCU_ElevationPolicy\{1902485B-CE75-42C1-BA2D-57E660793D9A} - C:\Program Files (x86)\Internet Download Manager\IEMonitor.exe (Tonec Inc.) HKCU_ElevationPolicy\{E0DACC63-037F-46EE-AC02-E4C7B0FBFEB4} - C:\Program Files (x86)\Internet Download Manager\IDMan.exe (Tonec Inc.) HKLM_ElevationPolicy\{02073B90-44EE-47B1-9633-732376A8A3C8} - C:\Program Files (x86)\Veetle\Player\VeetleNet.exe (?) HKLM_ElevationPolicy\{07d873dc-b9b9-44f5-af0b-fb59fa54fb7a} - C:\Windows\SysWOW64\wpcer.exe (x) HKLM_ElevationPolicy\{0a402d70-1f10-4ae7-bec9-286a98240695} - C:\Windows\SysWOW64\winfxdocobj.exe (x) HKLM_ElevationPolicy\{6052BF20-EA23-4A04-B3C1-A20EFE01A95A} - C:\Program Files (x86)\Veetle\Player\vtl_hfs.exe (?) HKLM_ElevationPolicy\{680FA47E-AB59-46BE-B594-7358726E108B} - C:\Program Files (x86)\Veetle\Player\player.exe (?) HKLM_ElevationPolicy\{70f641fd-9ffc-4d5b-a4dc-962af4ed7999} - C:\Program Files (x86)\Internet Explorer\iedw.exe (x) HKLM_ElevationPolicy\{A6E2003F-95C5-4591-BA9A-0093080FDB5C} - C:\Program Files (x86)\Common Files\Oberon Media\OberonBroker\1.0.0.63\OberonBroker.exe (?) HKLM_ElevationPolicy\{B43A0C1E-B63F-4691-B68F-CD807A45DA01} - C:\Windows\system32\TSWbPrxy.exe (x) HKLM_ElevationPolicy\{E0DACC63-037F-46EE-AC02-E4C7B0FBFEB4} - C:\Program Files (x86)\Internet Download Manager\IDMan.exe (Tonec Inc.) HKLM_ElevationPolicy\{E8BC6C2B-DD90-4397-96EB-2AAF0E48ABE6} - C:\Program Files (x86)\Veetle\Player\vtl_hfax.exe (?) HKLM_Extensions\{10954C80-4F0F-11d3-B17C-00C0DFE39736} - "Quick-Launch Area" (c:\Program Files (x86)\Acer Bio Protection\IETag.ico) HKLM_Extensions\{725EC34E-943C-4df6-B0B2-FBDE7F242276} - "PartyPoker.fr" (C:\Programs\PartyFrance\PartyPokerFr\images\ppicon.ico) BHO\{0055C089-8582-441B-A0BF-17B458C2A3A8} - "IDM integration (IDMIEHlprObj Class)" (C:\Program Files (x86)\Internet Download Manager\IDMIECC.dll) BHO\{11BF46C6-B3DE-48BD-BF70-3AD85CAB80B5} - "?" (C:\PROGRA~2\SITERA~1\SiteRank.dll) BHO\{28CF50DA-4A17-4442-BBF9-D916BFDE072C} - "Pageshots for Internet Explorer PRO" (C:\ProgramData\PageshotsPro\pageshots_x86.dll) (x) BHO\{5C255C8A-E604-49b4-9D64-90988571CECB} (?) BHO\{78F3A323-798E-4AEA-9A57-88F4B05FD5DD} - "IE5BarLauncherBHO Class" (C:\Program Files (x86)\vShare.tv plugin\BarLcher.dll) BHO\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - "Skype Browser Helper" (C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll) ======================================== C:\Program Files (x86)\Ad-Remover\Quarantine: 0 Fichier(s) C:\Program Files (x86)\Ad-Remover\Backup: 0 Fichier(s) C:\Ad-Report-SCAN[1].txt - 12/10/2011 10:05:05 (8478 Octet(s)) Fin à: 10:06:11, 12/10/2011 ============== E.O.F ==============