Logfile created: 03/08/2011 12:46:38 Ad-Aware version: 9.0.7 Extended engine: 3 Extended engine version: 3.1.

2770 User performing scan: Administrateur *********************** Definitions database information *********************** Lavasoft definition file: 1.0 Genotype definition file version: Unknown ******************************** Scan results: ********************************* Scan profile name: Analyse complte (ID: full) Objects scanned: 38738 Objects detected: 1 Type Detected ========================== Processes.......: 0 Registry entries: 0 Hostfile entries: 0 Files...........: 1 Folders.........: 0 LSPs............: 0 Cookies.........: 0 Browser hijacks.: 0 MRU objects.....: 0

Quarantined items: Description: c:\documents and settings\administrateur\mes documents\freetvradiosetup.exe Family Name: Win32.Adware.OfferBox[1433] Engine: 1 Clean status: Succe ss Item ID: 0 Family ID: 0 MD5: 0b96d68d37636de809c9e0462e8c4071 Scan and cleaning complete: Stopped by request after 1370 seconds *********************************** Settings *********************************** Scan profile: ID: full, enabled:1, value: Analyse complte ID: folderstoscan, enabled:1, value: C:\,D:\,E:\,F:\ ID: useantivirus, enabled:1, value: true ID: sections, enabled:1 ID: scancriticalareas, enabled:1, value: true ID: scanrunningapps, enabled:1, value: true ID: scanregistry, enabled:1, value: true ID: scanlsp, enabled:1, value: true ID: scanads, enabled:1, value: true ID: scanhostsfile, enabled:1, value: true ID: scanmru, enabled:1, value: true ID: scanbrowserhijacks, enabled:1, value: true ID: scantrackingcookies, enabled:1, value: true ID: closebrowsers, enabled:1, value: false ID: filescanningoptions, enabled:1 ID: archives, enabled:1, value: true ID: onlyexecutables, enabled:1, value: false ID: skiplargerthan, enabled:1, value: 20480 ID: scanrootkits, enabled:1, value: true ID: rootkitlevel, enabled:1, value: mild, domain: medium,mild,strict

ID: usespywareheuristics, enabled:1, value: true Scan global: ID: global, enabled:1 ID: addtocontextmenu, enabled:1, value: true ID: playsoundoninfection, enabled:1, value: false ID: soundfile, enabled:0, value: N/A Scheduled scan settings: <Empty> Update settings: ID: updates, enabled:1 ID: launchthreatworksafterscan, enabled:1, value: off, domain: normal,off,sile ntly ID: deffiles, enabled:1, value: downloadandinstall, domain: dontcheck,download andinstall ID: licenseandinfo, enabled:1, value: downloadandinstall, domain: dontcheck,do wnloadandinstall ID: schedules, enabled:1, value: true ID: updatedaily1, enabled:1, value: Daily 1 ID: time, enabled:1, value: Wed Aug 03 12:40:00 2011 ID: frequency, enabled:1, value: daily, domain: daily,monthly,once,systems tart,weekly ID: weekdays, enabled:1 ID: monday, enabled:1, value: false ID: tuesday, enabled:1, value: false ID: wednesday, enabled:1, value: false ID: thursday, enabled:1, value: false ID: friday, enabled:1, value: false ID: saturday, enabled:1, value: false ID: sunday, enabled:1, value: false ID: monthly, enabled:1, value: 1, minvalue: 1, maxvalue: 31 ID: scanprofile, enabled:1, value: ID: auto_deal_with_infections, enabled:1, value: false ID: updatedaily2, enabled:1, value: Daily 2 ID: time, enabled:1, value: Wed Aug 03 18:40:00 2011 ID: frequency, enabled:1, value: daily, domain: daily,monthly,once,systems tart,weekly ID: weekdays, enabled:1 ID: monday, enabled:1, value: false ID: tuesday, enabled:1, value: false ID: wednesday, enabled:1, value: false ID: thursday, enabled:1, value: false ID: friday, enabled:1, value: false ID: saturday, enabled:1, value: false ID: sunday, enabled:1, value: false ID: monthly, enabled:1, value: 1, minvalue: 1, maxvalue: 31 ID: scanprofile, enabled:1, value: ID: auto_deal_with_infections, enabled:1, value: false ID: updatedaily3, enabled:1, value: Daily 3 ID: time, enabled:1, value: Wed Aug 03 00:40:00 2011 ID: frequency, enabled:1, value: daily, domain: daily,monthly,once,systems tart,weekly ID: weekdays, enabled:1 ID: monday, enabled:1, value: false ID: tuesday, enabled:1, value: false ID: wednesday, enabled:1, value: false ID: thursday, enabled:1, value: false ID: friday, enabled:1, value: false

ID: saturday, enabled:1, value: false ID: sunday, enabled:1, value: false ID: monthly, enabled:1, value: 1, minvalue: 1, maxvalue: 31 ID: scanprofile, enabled:1, value: ID: auto_deal_with_infections, enabled:1, value: false ID: updatedaily4, enabled:1, value: Daily 4 ID: time, enabled:1, value: Wed Aug 03 06:40:00 2011 ID: frequency, enabled:1, value: daily, domain: daily,monthly,once,systems tart,weekly ID: weekdays, enabled:1 ID: monday, enabled:1, value: false ID: tuesday, enabled:1, value: false ID: wednesday, enabled:1, value: false ID: thursday, enabled:1, value: false ID: friday, enabled:1, value: false ID: saturday, enabled:1, value: false ID: sunday, enabled:1, value: false ID: monthly, enabled:1, value: 1, minvalue: 1, maxvalue: 31 ID: scanprofile, enabled:1, value: ID: auto_deal_with_infections, enabled:1, value: false ID: updateweekly1, enabled:1, value: Weekly ID: time, enabled:1, value: Wed Aug 03 12:40:00 2011 ID: frequency, enabled:1, value: weekly, domain: daily,monthly,once,system start,weekly ID: weekdays, enabled:1 ID: monday, enabled:1, value: false ID: tuesday, enabled:1, value: false ID: wednesday, enabled:1, value: true ID: thursday, enabled:1, value: false ID: friday, enabled:1, value: false ID: saturday, enabled:1, value: true ID: sunday, enabled:1, value: false ID: monthly, enabled:1, value: 1, minvalue: 1, maxvalue: 31 ID: scanprofile, enabled:1, value: ID: auto_deal_with_infections, enabled:1, value: false Appearance settings: ID: appearance, enabled:1 ID: skin, enabled:1, value: default.egl, reglocation: HKEY_LOCAL_MACHINE\SOFTW ARE\Lavasoft\Ad-Aware\Resource ID: showtrayicon, enabled:1, value: true ID: autoentertainmentmode, enabled:1, value: true ID: guimode, enabled:1, value: mode_simple, domain: mode_advanced,mode_simple ID: language, enabled:1, value: fr, reglocation: HKEY_LOCAL_MACHINE\SOFTWARE\L avasoft\Ad-Aware\Language Realtime protection settings: ID: realtime, enabled:1 ID: layers, enabled:1 ID: useantivirus, enabled:1, value: true ID: usespywareheuristics, enabled:1, value: true ID: maintainbackup, enabled:1, value: true ID: infomessages, enabled:1, value: onlyimportant, domain: display,dontnotify, onlyimportant ID: modules, enabled:1 ID: processprotection, enabled:1, value: true ID: onaccessprotection, enabled:1, value: true ID: registryprotection, enabled:1, value: true ID: networkprotection, enabled:1, value: true

****************************** System information ****************************** Computer name: SWEET-23 Processor name: Intel(R) Pentium(R) 4 CPU 3.20GHz Processor identifier: x86 Family 15 Model 4 Stepping 9 Processor speed: ~3200MHZ Raw info: processorarchitecture 0, processortype 586, processorlevel 15, process or revision 1033, number of processors 2, processor features: [MMX,SSE,SSE2] Physical memory available: 354766848 bytes Physical memory total: 1073000448 bytes Virtual memory available: 2000588800 bytes Virtual memory total: 2147352576 bytes Memory load: 66% Microsoft Windows XP Home Edition Service Pack 3 (build 2600) Windows startup mode: Running processes: PID: 948 name: \SystemRoot\System32\smss.exe owner: SYSTEM domain: AUTORITE NT PID: 1220 name: C:\WINDOWS\system32\csrss.exe owner: SYSTEM domain: AUTORITE NT PID: 1444 name: C:\WINDOWS\system32\winlogon.exe owner: SYSTEM domain: AUTORITE NT PID: 1664 name: C:\WINDOWS\system32\services.exe owner: SYSTEM domain: AUTORITE NT PID: 1700 name: C:\WINDOWS\system32\lsass.exe owner: SYSTEM domain: AUTORITE NT PID: 1976 name: C:\WINDOWS\system32\Ati2evxx.exe owner: SYSTEM domain: AUTORITE NT PID: 2036 name: C:\WINDOWS\system32\svchost.exe owner: SYSTEM domain: AUTORITE N T PID: 420 name: C:\WINDOWS\system32\svchost.exe owner: SERVICE RSEAU domain: AUTOR ITE NT PID: 516 name: C:\WINDOWS\System32\svchost.exe owner: SYSTEM domain: AUTORITE NT PID: 664 name: C:\WINDOWS\system32\Ati2evxx.exe owner: SYSTEM domain: AUTORITE N T PID: 700 name: C:\WINDOWS\system32\svchost.exe owner: SYSTEM domain: AUTORITE NT PID: 1500 name: C:\WINDOWS\system32\spoolsv.exe owner: SYSTEM domain: AUTORITE N T PID: 864 name: C:\WINDOWS\Explorer.EXE owner: Administrateur domain: SWEET-23 PID: 120 name: C:\WINDOWS\system32\svchost.exe owner: SYSTEM domain: AUTORITE NT PID: 724 name: C:\WINDOWS\system32\ctfmon.exe owner: Administrateur domain: SWEE T-23 PID: 2592 name: C:\Program Files\Fichiers communs\InfoWatch\CryptoStorage\Protec tedObjectsSrv.exe owner: SYSTEM domain: AUTORITE NT PID: 3224 name: C:\Program Files\Opera\opera.exe owner: Administrateur domain: S WEET-23 PID: 1060 name: C:\Program Files\Internet Download Manager\IDMan.exe owner: Admi nistrateur domain: SWEET-23 PID: 3316 name: C:\Program Files\Belkin\Belkin Wireless Network Utility\WLanCfgG .exe owner: SYSTEM domain: AUTORITE NT PID: 2588 name: C:\Program Files\Belkin\Belkin Wireless Network Utility\WLServic e.exe owner: SYSTEM domain: AUTORITE NT PID: 7332 name: C:\Program Files\Notepad++\notepad++.exe owner: Administrateur d omain: SWEET-23 PID: 11880 name: C:\Program Files\Kaspersky Lab\Kaspersky PURE\avp.exe owner: Ad ministrateur domain: SWEET-23 PID: 11908 name: C:\Program Files\Kaspersky Lab\Kaspersky PURE\avp.exe owner: SY STEM domain: AUTORITE NT PID: 17940 name: C:\WINDOWS\system32\msiexec.exe owner: SYSTEM domain: AUTORITE NT PID: 20216 name: C:\WINDOWS\system32\wbem\wmiprvse.exe owner: SYSTEM domain: AUT ORITE NT

PID: 21692 name: C:\Program Files\Lavasoft\Ad-Aware\Ad-Aware.exe owner: Administ rateur domain: SWEET-23 PID: 21212 name: C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe owner: SYSTEM domain: AUTORITE NT PID: 22420 name: C:\WINDOWS\system32\wbem\unsecapp.exe owner: SYSTEM domain: AUT ORITE NT PID: 22536 name: C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe owner: Administr ateur domain: SWEET-23 Startup items: Name: {438755C2-A8BA-11D1-B96B-00A0C90312E1} imagepath: Pr-chargeur Browseui Name: {8C7461EF-2B13-11d2-BE35-3078302C2030} imagepath: Dmon de cache des catgories de composant Name: Athan imagepath: C:\Program Files\Athan\Athan.exe Name: AVP imagepath: "C:\Program Files\Kaspersky Lab\Kaspersky PURE\avp.exe" Name: EEventManager imagepath: "C:\Program Files\Epson Software\Event Manager\EEventManage r.exe" Name: WebCheck imagepath: {E6FB5E20-DE35-11CF-9C87-00AA005127ED} Name: PostBootReminder imagepath: {7849596a-48ea-486e-8937-a2a3009f31a9} Name: SysTray imagepath: {35CEC8A3-2BE6-11D2-8773-92E220524153} Name: WPDShServiceObj imagepath: {AAA288BA-9A4C-45B0-95D7-94D524869DB5} Name: JkDefrag imagepath: rundll32 advpack.dll,LaunchINFSection JKDEFRAG.INF,RunOnce, 1,N Name: SweetRegistry imagepath: rundll32 advpack.dll,LaunchINFSection SweetReg.inf,PerUserS tub Name: imagepath: C:\Documents and Settings\All Users\Menu Dmarrer\Programmes\ Dmarrage\desktop.ini Bootexecute items: Name: imagepath: autocheck autochk * Running services: Name: Ati HotKey Poller displayname: Ati HotKey Poller Name: AudioSrv displayname: Audio Windows Name: AVP displayname: Kaspersky PURE Name: Belkin Wireless USB Network Adapter Service displayname: Belkin Wireless USB Network Adapter Name: BITS displayname: Service de transfert intelligent en arrire-plan Name: Browser displayname: Explorateur d'ordinateur Name: CryptSvc displayname: Services de cryptographie Name: CSObjectsSrv displayname: Service de gestion du systme CryproStorage

Name: DcomLaunch displayname: Lanceur de processus serveur DCOM Name: Dhcp displayname: Client DHCP Name: ERSvc displayname: Service de rapport d'erreurs Name: Eventlog displayname: Journal des vnements Name: EventSystem displayname: Systme d'vnements de COM+ Name: LanmanServer displayname: Serveur Name: lanmanworkstation displayname: Station de travail Name: MSIServer displayname: Windows Installer Name: Netman displayname: Connexions rseau Name: Nla displayname: NLA (Network Location Awareness) Name: PlugPlay displayname: Plug-and-Play Name: ProtectedStorage displayname: Emplacement protg Name: RasAuto displayname: Gestionnaire de connexion automatique d'accs distant Name: RasMan displayname: Gestionnaire de connexions d'accs distant Name: RpcSs displayname: Appel de procdure distante (RPC) Name: SENS displayname: Notification d'vnement systme Name: SharedAccess displayname: Pare-feu Windows / Partage de connexion Internet Name: ShellHWDetection displayname: Dtection matriel noyau Name: Spooler displayname: Spouleur d'impression Name: stisvc displayname: Acquisition d'image Windows (WIA) Name: TapiSrv displayname: Tlphonie Name: TermService displayname: Services Terminal Server Name: Themes displayname: Thmes Name: winmgmt displayname: Infrastructure de gestion Windows Name: wscsvc displayname: Centre de scurit Name: wuauserv displayname: Mises jour automatiques Name: WudfSvc displayname: Windows Driver Foundation - User-mode Driver Framework Name: Lavasoft Ad-Aware Service displayname: Lavasoft Ad-Aware Service