Se connecter avec
S'enregistrer | Connectez-vous

Potentially unwanted tool:application/mywebsearch

Dernière réponse : dans Sécurité

bonjour les gars j'ai fait un scan panda et voila le résultat;


Incident Status Location

Adware:adware/cws.searchmeup Not disinfected c:\windows\uniq
Potentially unwanted tool:application/mywebsearch Not disinfected hkey_classes_root\clsid\{9AFB8248-617F-460d-9366-D71CDEDA3179}
Adware:adware/dollarrevenue Not disinfected Windows Registry
Adware:adware/oemji Not disinfected Windows Registry
Potentially unwanted tool:application/myway Not disinfected HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{014DA6C9-189F-421A-88CD-07CFE51CFF10}
Possible Virus. Not disinfected C:\Documents and Settings\Zouiter amira\Mes documents\Downloads\Programs\WengoPhone-2.0-windows.exe[qtwengophone.exe]
Possible Virus. Not disinfected C:\Program Files\WengoPhone\qtwengophone.exe

et voici le log hijackthis;


Logfile of HijackThis v1.99.1
Scan saved at 23:57:11, on 12/10/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.5346.0005)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\PROGRA~1\Nokia\NOKIAP~1\LAUNCH~1.EXE
C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe
C:\PROGRA~1\FICHIE~1\Nokia\MPAPI\MPAPI3s.exe
C:\Program Files\Fichiers communs\EPSON\EBAPI\eEBSVC.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
C:\Program Files\Fichiers communs\EPSON\EBAPI\SAgent2.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\Program Files\Fichiers communs\PCSuite\Services\ServiceLayer.exe
C:\PROGRA~1\FICHIE~1\PCSuite\DATALA~1\DATALA~1.EXE
C:\Program Files\Nokia\Nokia PC Suite 6\SeUpdateDb.exe
C:\Program Files\ewido anti-spyware 4.0\guard.exe
C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe
C:\WINDOWS\system32\NOTEPAD.EXE
C:\Documents and Settings\Zouiter amira\Bureau\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=55245&clcid={SUB_CLCID}
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = :
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn1\yt.dll
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn1\yt.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: IE 4.x-6.x BHO for Internet Download Accelerator - {2A646672-9C3A-4C28-9A7A-1FB0F63F28B6} - C:\PROGRA~1\IDA\idaiehlp.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\dla\tfswshx.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn1\yt.dll
O3 - Toolbar: IDA Bar - {C70E30C7-140A-4166-A2E8-43557E62B41A} - C:\Program Files\IDA\idabar.dll
O3 - Toolbar: Easy-WebPrint - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - C:\Program Files\Canon\Easy-WebPrint\Toolband.dll
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [Zone Labs Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\PROGRA~1\Nokia\NOKIAP~1\LAUNCH~1.EXE -startup
O4 - HKCU\..\Run: [PcSync] C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog
O8 - Extra context menu item: &Google Search - res://C:\Program Files\Google\GoogleToolbar1.dll/cmsearch.html
O8 - Extra context menu item: &Search - http://edits.mywebsearch.com/toolbaredits/menusearch.jh...
O8 - Extra context menu item: Backward &Links - res://C:\Program Files\Google\GoogleToolbar1.dll/cmbacklinks.html
O8 - Extra context menu item: Cac&hed Snapshot of Page - res://C:\Program Files\Google\GoogleToolbar1.dll/cmcache.html
O8 - Extra context menu item: Download ALL with IDA - C:\Program Files\IDA\idaieall.htm
O8 - Extra context menu item: Download with IDA - C:\Program Files\IDA\idaie.htm
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Easy-WebPrint Ajouter à la liste d'impressions - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_AddToList.html
O8 - Extra context menu item: Easy-WebPrint Impression rapide - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_HSPrint.html
O8 - Extra context menu item: Easy-WebPrint Imprimer - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_Print.html
O8 - Extra context menu item: Easy-WebPrint Prévisualiser - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_Preview.html
O8 - Extra context menu item: Si&milar Pages - res://C:\Program Files\Google\GoogleToolbar1.dll/cmsimilar.html
O8 - Extra context menu item: Télécharger avec &BitSpirit - C:\Program Files\BitSpirit\bsurl.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_01\bin\npjpi150_01.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_01\bin\npjpi150_01.dll
O9 - Extra button: Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\PROGRA~1\Yahoo!\Common\yhexbmesfr.dll
O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\PROGRA~1\Yahoo!\Common\yhexbmesfr.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [INTERNATIONAL] International*
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.kaspersky.com/kos/eng/partner/default/kavweb...
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls...
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Contro...
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst....
O16 - DPF: {FD0B6769-6490-4A91-AA0A-B5AE0DC75AC9} (Performance Viewer Activex Control) - https://secure.logmein.com/activex/RACtrl.cab
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: ms-help - {314111C7-A502-11D2-BBCA-00C04F8EC294} - C:\Program Files\Fichiers communs\Microsoft Shared\Help\hxds.dll
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Filter hijack: text/xml - {807563E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Fichiers communs\Microsoft Shared\OFFICE12\MSOXMLMF.DLL
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
O20 - Winlogon Notify: LMIinit - C:\WINDOWS\SYSTEM32\LMIinit.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
O23 - Service: EpsonBidirectionalService - Unknown owner - C:\Program Files\Fichiers communs\EPSON\EBAPI\eEBSVC.exe
O23 - Service: EPSON Printer Status Agent2 (EPSONStatusAgent2) - SEIKO EPSON CORPORATION - C:\Program Files\Fichiers communs\EPSON\EBAPI\SAgent2.exe
O23 - Service: ewido anti-spyware 4.0 guard - Anti-Malware Development a.s. - C:\Program Files\ewido anti-spyware 4.0\guard.exe
O23 - Service: HP WMI Interface (hpqwmi) - Hewlett-Packard Development Company, L.P. - C:\Program Files\HPQ\SHARED\HPQWMI.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\Fichiers communs\PCSuite\Services\ServiceLayer.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe

PRIERE DE M'AIDER
Lassé par la pub ? Créez un compte

Bonjour,

Tu n'as pas un registre tres propre.

Desinstalle si possible AVG 7.5

  • Télécharge SpySweeper (de Webroot, version d'essai de 14 jours) :

    -Clique sur "Télécharger la version test".
    -Installe le programme en choississant "installation standard".
    -Accepte le redémarrage
    -L'option de le mettre à jour s'affichera, acceptes la mise à jour
    -Lorsque les mises à jour seront installées, dans colonne de gauche clique sur l'onglet Options puis analyse.
    -Sous Eléments à analyser et Autres options coche toutes les cases.
    -Ferme SpySweeper

    La suite étant faite en mode sans échec, imprime ou copie/colle dans un fichier texte les instructions suivantes

  • Redémarre en mode sans échec : au redémarrage, tapotes immédiatement la touche F8, tu verras un écran avec choix de démarrages apparaître. Utilisant les flèches du clavier, choisis "Mode Sans Échec" et valide avec "Entrée". Choisis ton compte usuel, et non Administrateur.

  • Démarre SpySweeper
    -Clique Analyser sur la gauche puis sur Démarrer l'analyse.
    -Quand le scan est terminé, clique sur Suivant.
    -Assure-toi que tous les éléments trouvés sont tous cochés, puis clic sur Suivant.
    -Tous les éléments cochés seront alors mis en quarantaine.
    -Dans "Récapitulatif", sélectionne en bas Afficher le journal de session puis Enregistrer dans un fichier afin de sauvegarder le rapport.

  • Redémarre normalement

  • Désinstalle SpySweeper à partir de ajout/suppression de programme sauf si tu veux continuer l'évaluation pendant 15 jours.

  • Copie/colle le rapport de SpySweeper ici

    bon mon ami merci pour votre aide, j'ai fait le scan avec spysweeper et j'ai enlevé tous les malwares qu'il a detecté mais aprés un scan pnda voila ce que j'ai trouvé;



    Incident Status Location

    Adware:adware/dollarrevenue Not disinfected Windows Registry
    Adware:adware/oemji Not disinfected Windows Registry
    Potentially unwanted tool:application/mywebsearch Not disinfected HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{07B18EA1-A523-4961-B6BB-170DE4475CCA}

    Merci pour votre aide

    C'est deja mieux.
    On va tenter d'avoir tout bien clean.

    Demarrer/Executer/Regedit, supprime :
    HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{07B18EA1-A523-4961-B6BB-170DE4475CCA}

    Désinstalle SpySweeper

    - Télécharge SpywareTerminator
    - Lors du step 2 du Crawler Spyware Terminator Setup Assistant, réponds non lorsqu'il te demande si tu veux activer la protection en temps réel
    - Ne scanne pas mais démarre Spyware Terminator puis clic sur le menu update à gauche pour effectuer la mise à jour.
    - Redémarre en mode sans échec, si tu sais pas comment on fait lis ceci

    -- Démarre Spyware Terminator puis clic sur le bouton scan à gauche.
    -- Dans "Scan Type Settings" clic sur Full Spyware Scan
    -- Clic en bas sur "Start Scan Now" pour démarrer le scan, ceci peut prendre plusieurs minutes.
    -- Clic sur remove en bas pour supprimer tous les spywares.
    -- Clic sur l'onglet scan report puis en bas à gauche sur "Copy Clipboard"
    -- Ouvre le bloc-note (Démarrer / Programmes / Accessoires / Bloc-note)
    -- Dans le Bloc-note, clic sur le menu Edition puis coller
    -- Enregistre le rapport du scan sur ton bureau sous le nom rapport.txt

    Redémarre l'ordinateur

    -- Ouvre rapport.txt qui est sur ton bureau et copie/colle le contenu ici


    Scan Progress (Full Scan)
    Start time: 16/10/2006 13:10:49

    Processes Scanning
    PowerProfile : C:\WINDOWS\SYSTEM32\POWRPROF.DLL
    Shdocvw : C:\WINDOWS\SYSTEM32\SHDOCVW.DLL
    Startup Scanning
    PcSync : HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run PcSync
    PcSync : C:\PROGRAM FILES\NOKIA\NOKIA PC SUITE 6\PCSYNC2.EXE
    Invalid Startup Items : HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce SpySweeperUninstallSurvey=http://products.webroot.com/disp0201.php?pc=64011&rc=16...
    RealSched : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run TkBellExe
    RealSched : C:\PROGRAM FILES\FICHIERS COMMUNS\REAL\UPDATE_OB\REALSCHED.EXE
    ZoneLabsClient : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run Zone Labs Client
    ZoneLabsClient : C:\PROGRAM FILES\ZONE LABS\ZONEALARM\ZLCLIENT.EXE
    PCSuiteTrayApplication : C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe
    AVG7_Control Center : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run AVG7_CC
    AVG7_Control Center : C:\Program Files\Grisoft\AVG Free\avgcc.exe
    Spyware Terminator : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run SpywareTerminator
    Spyware Terminator : C:\PROGRAM FILES\SPYWARE TERMINATOR\SPYWARETERMINATORSHIELD.EXE
    Explorer : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon Shell
    Explorer : C:\WINDOWS\EXPLORER.EXE
    Toolbars Scanning
    Google Toolbar : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar\ {2318C2B1-4965-11d4-9B18-009027A5CD4F}
    Google Toolbar : C:\PROGRAM FILES\GOOGLE\GOOGLETOOLBAR1.DLL
    YahooToolbar : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar\ {EF99BD32-C1FB-11D2-892F-0090271D4F88}
    YahooToolbar : C:\PROGRAM FILES\YAHOO!\COMPANION\INSTALLS\CPN1\YT.DLL
    IDABar : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar\ {C70E30C7-140A-4166-A2E8-43557E62B41A}
    IDABar : C:\PROGRAM FILES\IDA\IDABAR.DLL
    Easy-WebPrint : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar\ {327C2873-E90D-4c37-AA9D-10AC9BABA46C}
    Easy-WebPrint : C:\PROGRAM FILES\CANON\EASY-WEBPRINT\TOOLBAND.DLL
    Shdocvw : HKLM\Software\Microsoft\Internet Explorer\Explorer Bars\{4D5C8C25-D075-11d0-B416-00C04FB90376}
    Shdocvw : C:\WINDOWS\SYSTEM32\SHDOCVW.DLL
    Shdocvw : explorer.exe PID: 884
    Shdocvw : HKCU\Software\Microsoft\Internet Explorer\Explorer Bars\{EFA24E62-B078-11D0-89E4-00C04FC9E26E}
    Shdocvw : HKCU\Software\Microsoft\Internet Explorer\Explorer Bars\{EFA24E64-B078-11D0-89E4-00C04FC9E26E}
    Browser Helper Objects Scanning
    YahooToolbar : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{02478D38-C3F9-4EFB-9B51-7695ECA05670}
    AcroIEHelper : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}
    AcroIEHelper : C:\PROGRAM FILES\ADOBE\ACROBAT 7.0\ACTIVEX\ACROIEHELPER.DLL
    IDA : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2A646672-9C3A-4C28-9A7A-1FB0F63F28B6}
    IDA : C:\Program Files\IDA\idaiehlp.dll
    Spybot S&D : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{53707962-6F74-2D53-2644-206D7942484F}
    Spybot S&D : C:\PROGRAM FILES\SPYBOT - SEARCH & DESTROY\SDHELPER.DLL
    DriveLetterAccess : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5CA3D70E-1895-11CF-8E15-001234567890}
    DriveLetterAccess : C:\WINDOWS\SYSTEM32\DLA\TFSWSHX.DLL
    Windows Live Sign-in Helper ( BHO ) : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}
    Windows Live Sign-in Helper ( BHO ) : C:\PROGRAM FILES\FICHIERS COMMUNS\MICROSOFT SHARED\WINDOWS LIVE\WINDOWSLIVELOGIN.DLL
    Google Toolbar : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}
    IE Explorer Bars
    IE Extensions
    Services Scanning
    AVG7_AMSVR : HKLM\SYSTEM\CurrentControlSet\Services\Avg7Alrt
    AVG7_EMC : HKLM\SYSTEM\CurrentControlSet\Services\AVGEMS
    Protocol filters Scanning
    Protocol handlers Scanning
    WinSock2 Scanning
    Uninstallers Scanning
    C:\Program Files\DIFX\D6ACC4BE676423A2B130B78A4B627FC457D98997\dpinst.exe
    C:\Program Files\DIFX\7AA84A78695B31A503D9537A76801D74E0FD14BD\DIFxAppA.dll
    C:\PROGRAM FILES\ELCOMSOFT\AOPR\UNINSTALL.EXE
    C:\PROGRAM FILES\GRISOFT\AVG FREE\SETUP.EXE
    C:\PROGRAM FILES\AVICODEC\UNINST.EXE
    C:\PROGRAM FILES\BATTERYMON\UNINS000.EXE
    C:\PROGRAM FILES\BITCOMET\UNINST.EXE
    C:\PROGRAM FILES\BITSPIRIT\UNINS000.EXE
    C:\WINDOWS\SYSTEM32\BCMWLU00.EXE
    C:\PROGRAM FILES\CCLEANER\UNINST.EXE
    C:\PROGRAM FILES\CONEXANT\CNXT_MODEM_PCI_VEN_8086&DEV_24C6&SUBSYS_3080103C\HXFSETUP.EXE
    C:\WINDOWS\CIAUNWDM.EXE
    C:\WINDOWS\SYSTEM32\SPOONUNINSTALL.EXE
    C:\PROGRAM FILES\DC++\UNINSTALL.EXE
    C:\WINDOWS\SYSTEM32\MSIEXEC.EXE
    C:\PROGRAM FILES\DRIVER-SOFT\DRIVER GENIUS PROFESSIONAL EDITION\UNINS000.EXE
    C:\WINDOWS\ISUN040C.EXE
    C:\PROGRAM FILES\EMULE\UNINSTALL.EXE
    C:\PROGRAM FILES\EMULE\UNINS000.EXE
    C:\WINDOWS\SYSTEM32\SPOOL\DRIVERS\W32X86\3\EPUPDATE.EXE
    C:\PROGRAM FILES\LAVALYS\EVEREST HOME EDITION\UNINS000.EXE
    C:\PROGRAM FILES\EWIDO ANTI-SPYWARE 4.0\UNINSTALL.EXE
    C:\Program Files\Eyeball\Eyeball Chat\UNWISE.EXE
    C:\DOCUMENTS AND SETTINGS\ZOUITER AMIRA\BUREAU\HIJACKTHIS.EXE
    C:\WINDOWS\$NTUNINSTALLIE7BETA2$\SPUNINST\SPUNINST.EXE
    C:\Program Files\Fichiers communs\InstallShield\Driver\9\Intel 32\IDriver.exe
    C:\PROGRAM FILES\IDA\UNINS000.EXE
    C:\WINDOWS\system32\Kaspersky Lab\Kaspersky Online Scanner\KAVUNINSTALL.EXE
    C:\WINDOWS\$NTUNINSTALLKB873339$\SPUNINST\SPUNINST.EXE
    C:\WINDOWS\$NTUNINSTALLKB885250$\SPUNINST\SPUNINST.EXE
    C:\WINDOWS\$NTUNINSTALLKB885835$\SPUNINST\SPUNINST.EXE
    C:\WINDOWS\$NTUNINSTALLKB885836$\SPUNINST\SPUNINST.EXE
    C:\WINDOWS\$NTUNINSTALLKB886185$\SPUNINST\SPUNINST.EXE
    C:\WINDOWS\$NTUNINSTALLKB887742$\SPUNINST\SPUNINST.EXE
    C:\WINDOWS\$NTUNINSTALLKB888113$\SPUNINST\SPUNINST.EXE
    C:\WINDOWS\$NTUNINSTALLKB888302$\SPUNINST\SPUNINST.EXE
    C:\WINDOWS\$NTUNINSTALLKB890046$\SPUNINST\SPUNINST.EXE
    C:\WINDOWS\$NTUNINSTALLKB890859$\SPUNINST\SPUNINST.EXE
    C:\WINDOWS\$NTUNINSTALLKB891781$\SPUNINST\SPUNINST.EXE
    C:\WINDOWS\$NTUNINSTALLKB893756$\SPUNINST\SPUNINST.EXE
    C:\WINDOWS\$MSI31UNINSTALL_KB893803V2$\SPUNINST\SPUNINST.EXE
    C:\WINDOWS\$NTUNINSTALLKB894391$\SPUNINST\SPUNINST.EXE
    C:\WINDOWS\$NTUNINSTALLKB896358$\SPUNINST\SPUNINST.EXE
    C:\WINDOWS\$NTUNINSTALLKB896422$\SPUNINST\SPUNINST.EXE
    C:\WINDOWS\$NTUNINSTALLKB896423$\SPUNINST\SPUNINST.EXE
    C:\WINDOWS\$NTUNINSTALLKB896424$\SPUNINST\SPUNINST.EXE
    C:\WINDOWS\$NTUNINSTALLKB896428$\SPUNINST\SPUNINST.EXE
    C:\WINDOWS\$NTUNINSTALLKB899587$\SPUNINST\SPUNINST.EXE
    C:\WINDOWS\$NTUNINSTALLKB899589$\SPUNINST\SPUNINST.EXE
    C:\WINDOWS\$NTUNINSTALLKB899591$\SPUNINST\SPUNINST.EXE
    C:\WINDOWS\$NTUNINSTALLKB900485$\SPUNINST\SPUNINST.EXE
    C:\WINDOWS\$NTUNINSTALLKB900725$\SPUNINST\SPUNINST.EXE
    C:\WINDOWS\$NTUNINSTALLKB901017$\SPUNINST\SPUNINST.EXE
    C:\WINDOWS\$NTUNINSTALLKB901190$\SPUNINST\SPUNINST.EXE
    C:\WINDOWS\$NTUNINSTALLKB901214$\SPUNINST\SPUNINST.EXE
    C:\WINDOWS\$NTUNINSTALLKB902400$\SPUNINST\SPUNINST.EXE
    C:\WINDOWS\$NTUNINSTALLKB904706$\SPUNINST\SPUNINST.EXE
    C:\WINDOWS\$NTUNINSTALLKB904942$\SPUNINST\SPUNINST.EXE
    C:\WINDOWS\$NTUNINSTALLKB905414$\SPUNINST\SPUNINST.EXE
    C:\WINDOWS\$NTUNINSTALLKB905749$\SPUNINST\SPUNINST.EXE
    C:\WINDOWS\$NTUNINSTALLKB908519$\SPUNINST\SPUNINST.EXE
    C:\WINDOWS\$NTUNINSTALLKB908531$\SPUNINST\SPUNINST.EXE
    C:\WINDOWS\$NTUNINSTALLKB910437$\SPUNINST\SPUNINST.EXE
    C:\WINDOWS\$NTUNINSTALLKB911280$\SPUNINST\SPUNINST.EXE
    C:\WINDOWS\$NTUNINSTALLKB911562$\SPUNINST\SPUNINST.EXE
    C:\WINDOWS\$NTUNINSTALLKB911567$\SPUNINST\SPUNINST.EXE
    C:\WINDOWS\$NTUNINSTALLKB911927$\SPUNINST\SPUNINST.EXE
    C:\WINDOWS\$NTUNINSTALLKB912812$\SPUNINST\SPUNINST.EXE
    C:\WINDOWS\$NTUNINSTALLKB912919$\SPUNINST\SPUNINST.EXE
    C:\WINDOWS\$NTUNINSTALLKB913446$\SPUNINST\SPUNINST.EXE
    C:\WINDOWS\$NTUNINSTALLKB913580$\SPUNINST\SPUNINST.EXE
    C:\WINDOWS\$NTUNINSTALLKB914388$\SPUNINST\SPUNINST.EXE
    C:\WINDOWS\$NTUNINSTALLKB914389$\SPUNINST\SPUNINST.EXE
    C:\WINDOWS\$NTUNINSTALLKB915865$\SPUNINST\SPUNINST.EXE
    C:\WINDOWS\$NTUNINSTALLKB916281$\SPUNINST\SPUNINST.EXE
    C:\WINDOWS\$NTUNINSTALLKB916595$\SPUNINST\SPUNINST.EXE
    C:\WINDOWS\$NTUNINSTALLKB917159$\SPUNINST\SPUNINST.EXE
    C:\WINDOWS\$NTUNINSTALLKB917344$\SPUNINST\SPUNINST.EXE
    C:\WINDOWS\$NTUNINSTALLKB917422$\SPUNINST\SPUNINST.EXE
    C:\WINDOWS\$NTUNINSTALLKB917734_WMP10$\SPUNINST\SPUNINST.EXE
    C:\WINDOWS\$NTUNINSTALLKB917953$\SPUNINST\SPUNINST.EXE
    C:\WINDOWS\$NTUNINSTALLKB918439$\SPUNINST\SPUNINST.EXE
    C:\WINDOWS\$NTUNINSTALLKB919007$\SPUNINST\SPUNINST.EXE
    C:\WINDOWS\$NTUNINSTALLKB920214$\SPUNINST\SPUNINST.EXE
    C:\WINDOWS\$NTUNINSTALLKB920670$\SPUNINST\SPUNINST.EXE
    C:\WINDOWS\$NTUNINSTALLKB920683$\SPUNINST\SPUNINST.EXE
    C:\WINDOWS\$NTUNINSTALLKB920685$\SPUNINST\SPUNINST.EXE
    C:\WINDOWS\$NTUNINSTALLKB920872$\SPUNINST\SPUNINST.EXE
    C:\WINDOWS\$NTUNINSTALLKB921398$\SPUNINST\SPUNINST.EXE
    C:\WINDOWS\$NTUNINSTALLKB921883$\SPUNINST\SPUNINST.EXE
    C:\WINDOWS\$NTUNINSTALLKB922582$\SPUNINST\SPUNINST.EXE
    C:\WINDOWS\$NTUNINSTALLKB922616$\SPUNINST\SPUNINST.EXE
    C:\WINDOWS\$NTUNINSTALLKB922819$\SPUNINST\SPUNINST.EXE
    C:\WINDOWS\$NTUNINSTALLKB923191$\SPUNINST\SPUNINST.EXE
    C:\WINDOWS\$NTUNINSTALLKB923414$\SPUNINST\SPUNINST.EXE
    C:\WINDOWS\$NTUNINSTALLKB924191$\SPUNINST\SPUNINST.EXE
    C:\WINDOWS\$NTUNINSTALLKB924496$\SPUNINST\SPUNINST.EXE
    C:\PROGRAM FILES\K-LITE CODEC PACK\UNINS000.EXE
    C:\PROGRAM FILES\LIMEWIRE\UNINSTALL.EXE
    C:\WINDOWS\MICROSOFT.NET\FRAMEWORK\V1.1.4322\UPDATES\HOTFIX.EXE
    C:\Program Files\Makayama Software\Mobile Media Maker (Nokia) DEMO\Setup.exe
    C:\PROGRAM FILES\MOBIOLA WEB CAMERA USB\UNINS000.EXE
    C:\PROGRAM FILES\MOZILLA FIREFOX\UNINSTALL\UNINST.EXE
    C:\WINDOWS\AKDEINSTALL.EXE
    C:\PROGRAM FILES\NERO\NERO 7\NERO\UNINSTALL\UNNERO.EXE
    C:\WINDOWS\UNNEROBACKITUP.EXE
    C:\WINDOWS\UNNEROMEDIAHOME.EXE
    C:\WINDOWS\UNRECODE.EXE
    C:\WINDOWS\UNNEROSHOWTIME.EXE
    C:\WINDOWS\UNNEROVISION.EXE
    C:\PROGRAM FILES\NETWORK STUMBLER\UNINST.EXE
    C:\PROGRAM FILES\ORB NETWORKS\ORB\UNINSTALL.EXE
    C:\WINDOWS\SYSTEM32\ASUNINST.EXE
    C:\WINDOWS\system32\SETUPAPI.DLL
    C:\PROGRAM FILES\POWERPOINT TO FLASH\UNINSTALL.EXE
    C:\PROGRAM FILES\FICHIERS COMMUNS\MICROSOFT SHARED\OFFICE12\OFFICE SETUP CONTROLLER\SETUP.EXE
    C:\Program Files\PacketVideo\PVAuthor\UNWISE.EXE
    C:\WINDOWS\RAINBOW TECHNOLOGIES\CLIENT ACTIVATOR\2.2\ENGLISH\AUNINST.EXE
    C:\PROGRAM FILES\FICHIERS COMMUNS\REAL\UPDATE_OB\R1PUNINST.EXE
    C:\PROGRAM FILES\REMOTE S60\UNINSTALL.EXE
    C:\PROGRAM FILES\RM CONVERTER\UNINS000.EXE
    C:\WINDOWS\INF\SWFLASH.INF
    C:\PROGRAM FILES\SKYPE\PHONE\UNINS000.EXE
    C:\PROGRAM FILES\SLD CODEC PACK\UNINSTALL.EXE
    C:\PROGRAM FILES\LONELY CAT GAMES\SMARTMOVIE CONVERTER\IIUNINST.EXE
    C:\PROGRAM FILES\LONELY CAT GAMES\SMARTMOVIE CONVERTER (FOR SYMBIAN PHONES)\IIUNINST.EXE
    C:\PROGRAM FILES\LUMINOSITI\SOFTCAM1.5\SCUNINSTALL.EXE
    C:\PROGRAM FILES\SOPCAST\UNINST.EXE
    C:\PROGRAM FILES\SPYBOT - SEARCH & DESTROY\UNINS000.EXE
    C:\PROGRAM FILES\SPYWARE TERMINATOR\UNINS000.EXE
    C:\PROGRAM FILES\SWIFT_LITE\UNINS000.EXE
    C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNISDLL.DLL
    C:\PROGRAM FILES\TVANTS\UNINSTAL.EXE
    C:\Program Files\Tvants\UNWISE.EXE
    C:\WINDOWS\VIDEO CLEANER UNINSTALLER.EXE
    C:\PROGRAM FILES\WEBCAMXP\WXP-UNINST.EXE
    C:\PROGRAM FILES\WINAMP\UNINSTWA.EXE
    C:\PROGRAM FILES\WINDOWS LIVE SAFETY CENTER\WLSCCORE.DLL
    C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WMSETSDK.EXE
    C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\SETUP_WM.EXE
    C:\PROGRAM FILES\WINRAR\UNINSTALL.EXE
    C:\PROGRAM FILES\WINZIP\WINZIP32.EXE
    C:\WINDOWS\$NTUNINSTALLWMFDIST11$\SPUNINST\SPUNINST.EXE
    C:\WINDOWS\$NTUNINSTALLWMP11$\SPUNINST\SPUNINST.EXE
    C:\Program Files\Yahoo!\Common\UNYCENTRAL.EXE
    C:\Program Files\Yahoo!\Common\unyt.exe
    C:\Program Files\Yahoo!\Common\unyext.exe
    C:\PROGRA~1\YAHOO!\COMMON\YMMAPI.DLL
    C:\Program Files\Yahoo!\Messenger\UNWISE.EXE
    C:\Program Files\Yahoo!\WidgetEngine\UNINSTALL.EXE
    C:\PROGRAM FILES\ZONE LABS\ZONEALARM\ZAUNINST.EXE
    C:\Program Files\Fichiers communs\InstallShield\engine\6\Intel 32\ctor.dll
    C:\PROGRAM FILES\GOOGLE\GOOGLETOOLBAR1.DLL
    Google Toolbar : HKLM\\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{2318C2B1-4965-11d4-9B18-009027A5CD4F}
    C:\Program Files\Fichiers communs\InstallShield\Professional\RunTime\11\50\Intel32\ctor.dll
    C:\PROGRAM FILES\DIVX\DRDIVXUNINSTALL.EXE
    C:\PROGRAM FILES\DIVX\CONVERTERUNINSTALL.EXE
    C:\WINDOWS\SYSTEM32\IALMREM.DLL
    C:\PROGRAM FILES\DIVX\DIVXPLAYERUNINSTALL.EXE
    C:\PROGRAM FILES\INSTALLSHIELD INSTALLATION INFORMATION\{98E8A2EF-4EAE-43B8-A172-74842B764777}\SETUP.EXE
    C:\Program Files\Fichiers communs\InstallShield\Professional\RunTime\0701\Intel32\ctor.dll
    Start Menu Scanning
    RealTray : C:\Documents and Settings\Zouiter amira\Menu Démarrer\Programmes\Accessoires\Divertissement\RealPlayer.lnk
    Explorer : C:\Documents and Settings\Zouiter amira\Menu Démarrer\Programmes\Accessoires\Explorateur Windows.lnk
    SynchronizationManager : C:\Documents and Settings\Zouiter amira\Menu Démarrer\Programmes\Accessoires\Synchroniser.lnk
    Explorer : C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Accessoires\Communications\Connexions réseau.lnk
    Explorer : C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Accessoires\Outils système\Tâches planifiées.lnk
    AVG7_Control Center : C:\Documents and Settings\All Users\Menu Démarrer\Programmes\AVG 7.5\AVG Free Control Center.lnk
    RealTray : C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Real\RealPlayer\RealPlayer.lnk
    RealTray : C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Real\RealPlayer\Vérifier les mises à jour RealPlayer.lnk
    RealTray : C:\Documents and Settings\All Users\Menu Démarrer\Programmes\RealPlayer.lnk
    Skype : C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Skype\Skype.lnk
    Spyware Terminator : C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Spyware Terminator\Spyware Terminator.lnk
    Windows Defender : C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Windows Defender.lnk
    MessengerService : C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Windows Messenger.lnk
    ZoneLabsClient : C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Zone Labs\Zone Labs Security.lnk
    Desktop Scanning
    BitComet : C:\Documents and Settings\Zouiter amira\Bureau\BitComet.lnk
    Ccleaner : C:\Documents and Settings\Zouiter amira\Bureau\CCleaner.lnk
    Skype : C:\Documents and Settings\Zouiter amira\Bureau\Skype.lnk
    Favorites Scanning
    Cookies Scanning
    Registry Scanning
    Google Toolbar : HKCR\\CLSID\{AA58ED58-01DD-4d91-8333-CF10577473F7}
    Google Toolbar : C:\PROGRAM FILES\GOOGLE\GOOGLETOOLBAR1.DLL
    Google Toolbar : HKCR\\CLSID\{2318C2B1-4965-11d4-9B18-009027A5CD4F}
    AcroIEHelper : HKCR\\CLSID\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}
    AcroIEHelper : C:\PROGRAM FILES\ADOBE\ACROBAT 7.0\ACTIVEX\ACROIEHELPER.DLL
    YahooToolbar : HKCR\\CLSID\{EF99BD32-C1FB-11D2-892F-0090271D4F88}
    YahooToolbar : C:\PROGRAM FILES\YAHOO!\COMPANION\INSTALLS\CPN1\YT.DLL
    YahooToolbar : HKCR\\CLSID\{02478D38-C3F9-4efb-9B51-7695ECA05670}
    MSDXM : HKCR\\CLSID\{8E718888-423F-11D2-876E-00A0C9082467}
    MSDXM : C:\WINDOWS\SYSTEM32\MSDXM.OCX
    Easy-WebPrint : HKCR\\CLSID\{327C2873-E90D-4c37-AA9D-10AC9BABA46C}
    Easy-WebPrint : C:\PROGRAM FILES\CANON\EASY-WEBPRINT\TOOLBAND.DLL
    DriveLetterAccess : HKCR\\CLSID\{5CA3D70E-1895-11CF-8E15-001234567890}
    DriveLetterAccess : C:\WINDOWS\SYSTEM32\DLA\TFSWSHX.DLL
    Spybot S&D : HKCR\\CLSID\{53707962-6F74-2D53-2644-206D7942484F}
    Spybot S&D : C:\PROGRAM FILES\SPYBOT - SEARCH & DESTROY\SDHELPER.DLL
    IDMIEHlprObj : HKCR\\CLSID\{0055C089-8582-441B-A0BF-17B458C2A3A8}
    IDABar : HKCR\\CLSID\{C70E30C7-140A-4166-A2E8-43557E62B41A}
    IDABar : C:\PROGRAM FILES\IDA\IDABAR.DLL
    SweetIM For Internet Explorer : HKCR\\CLSID\{BC4FFE41-DE9F-46fa-B455-AAD49B9F9938}
    IDA : HKCR\\CLSID\{2A646672-9C3A-4C28-9A7A-1FB0F63F28B6}
    IDA : C:\Program Files\IDA\idaiehlp.dll
    Files Scanning
    180searchAssistant : C:\stubInstaller.exe
    Spyware Terminator : C:\Program Files\Spyware Terminator\Spywareterminatorshield.exe
    Spyware Terminator : C:\Program Files\Spyware Terminator\Spywareterminator.exe
    WinampAgent : C:\Program Files\Winamp\winampa.exe
    PcSync : C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe
    MessengerService : C:\Program Files\MSN Messenger\msnmsgr.exe
    MessengerService : C:\Program Files\Messenger\msmsgs.exe
    Ctfmon : C:\WINDOWS\system32\ctfmon.exe
    IgfxTray : C:\WINDOWS\system32\igfxtray.exe
    SynTPLpr : C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
    SynTPLpr : C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
    PDVDServ : C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
    HotKeysCmds : C:\WINDOWS\system32\hkcmd.exe
    Skype : C:\Program Files\Skype\Phone\Skype.exe
    QuickTimeTask : C:\Program Files\QuickTime\qttask.exe
    NeroFilterCheck : C:\WINDOWS\system32\NeroCheck.exe
    CpqSet : C:\Program Files\HPQ\Default Settings\cpqset.exe
    RemoteControl : C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
    MSConfig : C:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.exe
    UpdateMgr : C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe
    ZoneLabsClient : C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
    SynchronizationManager : C:\WINDOWS\system32\mobsync.exe
    RealTray : C:\Program Files\Real\RealPlayer\RealPlay.exe
    MSDXM : C:\WINDOWS\system32\msdxm.ocx
    Easy-WebPrint : C:\Program Files\Canon\Easy-WebPrint\Toolband.dll
    RealSched : C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
    StillImageMonitor : C:\WINDOWS\system32\STIMON.EXE
    MSIMED : C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE
    MSIMED : C:\WINDOWS\ime\imkr6_1\IMEKRMIG.EXE
    GrpConv : C:\WINDOWS\system32\grpconv.exe
    DriveLetterAccess : C:\WINDOWS\system32\dla\tfswshx.dll
    DriveLetterAccess : C:\WINDOWS\system32\dla\tfswctrl.exe
    Wextract : C:\WINDOWS\system32\advpack.dll
    KernelFaultCheck : C:\WINDOWS\system32\dumprep.exe
    Explorer : C:\WINDOWS\explorer.exe
    PowerProfile : C:\WINDOWS\system32\powrprof.dll
    BluetoothControlPanel : C:\WINDOWS\system32\bthprops.cpl
    Shdocvw : C:\WINDOWS\system32\shdocvw.dll
    PHIME2002ASync : C:\WINDOWS\system32\dllcache\tintsetp.exe
    Ccleaner : C:\Program Files\CCleaner\ccleaner.exe
    MSPY2002 : C:\WINDOWS\system32\dllcache\imscinst.exe
    EabServr : C:\Program Files\HPQ\Quick Launch Buttons\EabServr.exe
    IDABar : C:\Program Files\IDA\idabar.dll
    PHIME2002A : C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE
    BitComet : C:\Program Files\BitComet\BitComet.exe
    Windows Defender : C:\Program Files\WINDOWS DEFENDER\MSASCui.exe
    IDA : C:\Program Files\IDA\idaiehlp.dll
    Verclsid : C:\WINDOWS\system32\verclsid.exe
    Systray : C:\WINDOWS\system32\systray.exe
    Preparing DeepFile Scan
    DeepFiles Scanning
    180searchAssistant : C:\StubInstaller.exe
    AcroIEHelper : C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
    UpdateMgr : C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe
    BitComet : C:\Program Files\BitComet\BitComet.exe
    Easy-WebPrint : C:\Program Files\Canon\Easy-WebPrint\Toolband.dll
    Ccleaner : C:\Program Files\CCleaner\ccleaner.exe
    PDVDServ : C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
    RemoteControl : C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
    RealSched : C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
    Google Toolbar : C:\Program Files\Google\GoogleToolbar1.dll
    AVG7_AMSVR : C:\Program Files\Grisoft\AVG Free\avgamsvr.exe
    AVG7_Control Center : C:\Program Files\Grisoft\AVG Free\avgcc.exe
    AVG7_EMC : C:\Program Files\Grisoft\AVG Free\avgemc.exe
    CpqSet : C:\Program Files\HPQ\Default Settings\Cpqset.exe
    EabServr : C:\Program Files\HPQ\Quick Launch Buttons\eabservr.exe
    IDABar : C:\Program Files\IDA\idabar.dll
    IDA : C:\Program Files\IDA\idaiehlp.dll
    SunJavaUpdateSched : C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe
    SunJavaUpdateSched : C:\Program Files\Java\jre1.5.0_01\bin\jusched.exe
    MessengerService : C:\Program Files\Messenger\msmsgs.exe
    MessengerService : C:\Program Files\MSN Messenger\msnmsgr.exe
    PcSync : C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe
    QuickTimeTask : C:\Program Files\QuickTime\qttask.exe
    RealTray : C:\Program Files\Real\RealPlayer\realplay.exe
    Skype : C:\Program Files\Skype\Phone\Skype.exe
    Spybot S&D : C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
    Spyware Terminator : C:\Program Files\Spyware Terminator\SpywareTerminator.exe
    Spyware Terminator : C:\Program Files\Spyware Terminator\Spywareterminatorshield.Exe
    SynTPLpr : C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
    SynTPLpr : C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
    WinampAgent : C:\Program Files\Winamp\winampa.exe
    Windows Defender : C:\Program Files\Windows Defender\MSASCui.exe
    YahooToolbar : C:\Program Files\Yahoo!\Companion\Installs\cpn1\yt.dll
    ZoneLabsClient : C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
    Explorer : C:\WINDOWS\explorer.exe
    MSIMED : C:\WINDOWS\ime\IMJP8_1\imjpmig.exe
    MSIMED : C:\WINDOWS\ime\IMKR6_1\imekrmig.exe
    MSConfig : C:\WINDOWS\pchealth\helpctr\binaries\msconfig.exe
    Wextract : C:\WINDOWS\system32\advpack.dll
    BluetoothControlPanel : C:\WINDOWS\system32\bthprops.cpl
    Ctfmon : C:\WINDOWS\system32\ctfmon.exe
    DriveLetterAccess : C:\WINDOWS\system32\dla\tfswctrl.exe
    DriveLetterAccess : C:\WINDOWS\system32\dla\tfswshx.dll
    MSPY2002 : C:\WINDOWS\system32\dllcache\imscinst.exe
    PHIME2002ASync : C:\WINDOWS\system32\dllcache\tintsetp.exe
    KernelFaultCheck : C:\WINDOWS\system32\dumprep.exe
    GrpConv : C:\WINDOWS\system32\grpconv.exe
    HotKeysCmds : C:\WINDOWS\system32\hkcmd.exe
    IgfxTray : C:\WINDOWS\system32\igfxtray.exe
    PHIME2002A : C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE
    SynchronizationManager : C:\WINDOWS\system32\mobsync.exe
    MSDXM : C:\WINDOWS\system32\msdxm.ocx
    NeroFilterCheck : C:\WINDOWS\system32\NeroCheck.exe
    PowerProfile : C:\WINDOWS\system32\powrprof.dll
    Shdocvw : C:\WINDOWS\system32\shdocvw.dll
    StillImageMonitor : C:\WINDOWS\system32\stimon.exe
    Verclsid : C:\WINDOWS\system32\verclsid.exe
    Done

    Scan Summary:

    Total Scanning Time : 2021,06 s
    Objects Scanned : 63 174
    Objects Identified : 111
    Objects Ignored : 0

    Critical Objects : 5

    Remove Process:

    Preparing structures
    Creating System Restore Point
    Hard File Remover Disabled
    Remove 180searchAssistant
    Deleted File: C:\stubInstaller.exe
    Remove IDABar
    Deleted Registry : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar\ {C70E30C7-140A-4166-A2E8-43557E62B41A}
    Deleted File: C:\PROGRAM FILES\IDA\IDABAR.DLL
    Deleted Registry : HKCR\\CLSID\{C70E30C7-140A-4166-A2E8-43557E62B41A}
    Remove Invalid Startup Items
    Deleted Registry : HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce SpySweeperUninstallSurvey=http://products.webroot.com/disp0201.php?pc=64011&rc=16...
    Closing System Restore Point

    bon mon ami les choses se sont améliorés mais il y a encore des malwares selon le scan panda aprés le scan spyware terminator;



    Incident Status Location

    Adware:adware/dollarrevenue Not disinfected Windows Registry
    Adware:adware/oemji Not disinfected Windows Registry


    et le scan est encore en cour............

    Voila le rapport final;



    Incident Status Location

    Adware:adware/dollarrevenue Not disinfected Windows Registry
    Adware:adware/oemji Not disinfected Windows Registry
    Spyware:Cookie/Weborama Not disinfected C:\Documents and Settings\Zouiter amira\Mes documents\cookies.txt[.weborama.fr/]
    Spyware:Cookie/Coremetrics Not disinfected C:\Documents and Settings\Zouiter amira\Mes documents\cookies.txt[data.coremetrics.com/]
    Lassé par la pub ? Créez un compte
    Tom's guide dans le monde