Connection impossible
Résolu
lambulanciere
-
lambulanciere -
lambulanciere -
Bonjour,
voici mon problème j'ai avast sur mon PC mais pour une raison que je ne connais pas je n'arrive plus a l'ouvrir donc impossible de scanner mon PC, je suis donc aller sur secuser pour faire un scan et la impossible de me connecter apparemment il met trop de temps a répondre donc il ne se passe rien que dois je faire merci de votre réponse
voici mon problème j'ai avast sur mon PC mais pour une raison que je ne connais pas je n'arrive plus a l'ouvrir donc impossible de scanner mon PC, je suis donc aller sur secuser pour faire un scan et la impossible de me connecter apparemment il met trop de temps a répondre donc il ne se passe rien que dois je faire merci de votre réponse
A voir également:
- Connection impossible
- Gmail connection - Guide
- Facebook connection - Guide
- Connection chromecast - Guide
- Code de connection internet gratuit pdf ✓ - Forum Sony
- Meetic connection automatique - Forum Réseaux sociaux
155 réponses
/!\ Déconnecte-toi et ferme toutes applications en cours /!\
tu peux faire l option 2 :
Double-clique sur AD-Remover pour le lancer : au menu principal, choisis l'option B.
Choisis A
Puis choisis S, le programme va travailler.
Poste le rapport qui apparaît à la fin.
(Le rapport est sauvegardé aussi sous C:\Ad-report.log)
/!\ Si le Bureau ne réapparaît pas, presse Ctrl + Alt + Suppr, Onglet "Fichier", "Nouvelle tâche", tape explorer.exe et valide) /!\
Note :
"Process.exe", une composante de l'outil, est détecté par certains antivirus (AntiVir, Dr.Web, Kaspersky Anti-Virus) comme étant un RiskTool.
Il ne s'agit pas d'un virus, mais d'un utilitaire destiné à mettre fin à des processus.
Mis entre de mauvaises mains, cet utilitaire pourrait arrêter des logiciels de sécurité (Antivirus, Firewall...)
tu peux faire l option 2 :
Double-clique sur AD-Remover pour le lancer : au menu principal, choisis l'option B.
Choisis A
Puis choisis S, le programme va travailler.
Poste le rapport qui apparaît à la fin.
(Le rapport est sauvegardé aussi sous C:\Ad-report.log)
/!\ Si le Bureau ne réapparaît pas, presse Ctrl + Alt + Suppr, Onglet "Fichier", "Nouvelle tâche", tape explorer.exe et valide) /!\
Note :
"Process.exe", une composante de l'outil, est détecté par certains antivirus (AntiVir, Dr.Web, Kaspersky Anti-Virus) comme étant un RiskTool.
Il ne s'agit pas d'un virus, mais d'un utilitaire destiné à mettre fin à des processus.
Mis entre de mauvaises mains, cet utilitaire pourrait arrêter des logiciels de sécurité (Antivirus, Firewall...)
------- LOGFILE OF AD-REMOVER 1.1.3.9 | ONLY XP/VISTA -------
Updated by C_XX on 16/05/2009 at 21:15
Contact: AdRemover.contact@gmail.com
Website: http://pagesperso-orange.fr/NosTools/ad_remover.html
**** LIMITED TO ****
Known Adwares
Eorezo
It's TV
Sweetim
********************
Start at: 17:18:59, 17/05/2009 | Boot mode: Normal Boot
Option: Clean | Executed from: C:\Program Files\Ad-remover\
Operating System: Microsoft® Windows XP™ Service Pack 3 v5.1.2600
Computer Name: Cecile
Current User: C‚cile - Administrator
Drive(s):
- C:\ (File System: NTFS)
- D:\ (File System: NTFS)
(!) -- D:\Documents and Settings\Administrateur\Ntuser.dat Loaded as: 'HKU\Administrateur'
(!) -- D:\Documents and Settings\Invit‚\Ntuser.dat Loaded as: 'HKU\Invit‚'
(!) -- D:\Documents and Settings\LocalService.AUTORITE NT.000\Ntuser.dat Loaded as: 'HKU\LocalService.AUTORITE NT.000'
(!) -- D:\Documents and Settings\LocalService.AUTORITE NT.001\Ntuser.dat Loaded as: 'HKU\LocalService.AUTORITE NT.001'
(!) -- D:\Documents and Settings\LocalService.AUTORITE NT.002\Ntuser.dat Loaded as: 'HKU\LocalService.AUTORITE NT.002'
(!) -- D:\Documents and Settings\LocalService.AUTORITE NT.003\Ntuser.dat Loaded as: 'HKU\LocalService.AUTORITE NT.003'
(!) -- D:\Documents and Settings\LocalService.AUTORITE NT.004\Ntuser.dat Loaded as: 'HKU\LocalService.AUTORITE NT.004'
(!) -- D:\Documents and Settings\LocalService.AUTORITE NT.006\Ntuser.dat Loaded as: 'HKU\LocalService.AUTORITE NT.006'
(!) -- D:\Documents and Settings\LocalService.AUTORITE NT.007\Ntuser.dat Loaded as: 'HKU\LocalService.AUTORITE NT.007'
(!) -- D:\Documents and Settings\Moi\Ntuser.dat Loaded as: 'HKU\Moi'
(!) -- D:\Documents and Settings\NetworkService.AUTORITE NT.000\Ntuser.dat Loaded as: 'HKU\NetworkService.AUTORITE NT.000'
(!) -- D:\Documents and Settings\NetworkService.AUTORITE NT.001\Ntuser.dat Loaded as: 'HKU\NetworkService.AUTORITE NT.001'
(!) -- D:\Documents and Settings\NetworkService.AUTORITE NT.002\Ntuser.dat Loaded as: 'HKU\NetworkService.AUTORITE NT.002'
(!) -- D:\Documents and Settings\NetworkService.AUTORITE NT.003\Ntuser.dat Loaded as: 'HKU\NetworkService.AUTORITE NT.003'
(!) -- D:\Documents and Settings\NetworkService.AUTORITE NT.004\Ntuser.dat Loaded as: 'HKU\NetworkService.AUTORITE NT.004'
(!) -- D:\Documents and Settings\NetworkService.AUTORITE NT.010\Ntuser.dat Loaded as: 'HKU\NetworkService.AUTORITE NT.010'
(!) -- D:\Documents and Settings\NetworkService.AUTORITE NT.011\Ntuser.dat Loaded as: 'HKU\NetworkService.AUTORITE NT.011'
(!) -- D:\Documents and Settings\richard\Ntuser.dat Loaded as: 'HKU\richard'
(!) -- IE start pages/Tabs reset
============ Known Adwares Deleted ============
.
HKLM\Software\Trymedia Systems
HKCU\Software\AppDataLow\software\{A90F6FDE-90A5-7C09-0E11-65FD0E109511}
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\f07e8262-d31b-cd8e-2d10-881fafc69c8c
.
D:\Documents and Settings\C‚cile\Application Data\Mozilla\Firefox\Profiles\9wup1kzf.default\searchplugins\Yoog Search.xml
D:\Documents and Settings\C‚cile\Application Data\Mozilla\Firefox\Profiles\9wup1kzf.default\searchplugins\ask.xml
C:\WINDOWS\System32\f07e8262-d31b-cd8e-2d10-881fafc69c8c.exe
D:\Documents and Settings\C‚cile\Application Data\Microsoft\Internet Explorer\Quick Launch\Windows Live Messenger .lnk
D:\Documents and Settings\C‚cile\Cookies\c‚cile@atdmt[1].txt
D:\Documents and Settings\C‚cile\Cookies\c‚cile@bs.serving-sys[2].txt
+-----------------| Eorezo Elements Deleted :
HKCR\Interface\{B0D071A1-36B3-4757-A126-14C89C56013A}
HKCR\Typelib\{B4C656C9-F2E9-4E77-B3F4-443DF2BD778F}
HKCU\Software\EoRezo
HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{64F56FC1-1272-44CD-BA6E-39723696E350}
HKLM\Software\EoRezo
HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\SoftwareUpdate_is1
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\Eoengine
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\Softwarehelper
.
C:\Program Files\EoRezo
D:\Documents and Settings\C‚cile\Application Data\EoRezo
D:\Documents and Settings\C‚cile\Cookies\c‚cile@ads.eorezo[2].txt
D:\Documents and Settings\C‚cile\Cookies\c‚cile@dl.eorezo[1].txt
D:\Documents and Settings\C‚cile\Cookies\c‚cile@eorezo[1].txt
D:\Documents and Settings\C‚cile\Cookies\c‚cile@mir0.eorezo[1].txt
C:\WINDOWS\Prefetch\SOFTWAREUPDATEHP.EXE-0530D7EB.pf
+-----------------| It's TV Elements Deleted :
HKCU\Software\ItsLabel
.
D:\Documents and Settings\C‚cile\Application Data\ItsLabel
C:\WINDOWS\Prefetch\ITSTV.EXE-1D7C04F8.pf
C:\WINDOWS\Prefetch\ITSTV.EXE-2B03540A.pf
+-----------------| Sweetim Elements Deleted :
.
(!) -- Temp files deleted.
(!) -- Recycle bin emptied in all drives.
+-----------------| Added Scan:
---- Mozilla FireFox Version 3.0.10 ----
ProfilePath: 9wup1kzf.default (C‚cile)
.
(Prefs.js) user_pref("browser.search.defaultenginename", "Yoog Search");
(Prefs.js) user_pref("browser.search.selectedEngine", "Yoog Search");
(Prefs.js) user_pref("browser.search.defaulturl", "hxxp://www15.yoog.com/search.php?q=");
(Prefs.js) user_pref("browser.startup.homepage", "hxxp://www.google.fr/");
(Prefs.js) user_pref("browser.startup.homepage_override.mstone", "rv:1.9.0.10");
(Invalidprefs.js) user_pref("browser.search.defaultenginename", "Yoog Search");
(Invalidprefs.js) user_pref("browser.search.selectedEngine", "Yoog Search");
(Invalidprefs.js) user_pref("browser.search.defaulturl", "hxxp://www15.yoog.com/search.php?q=");
(Invalidprefs.js) user_pref("browser.startup.homepage", "hxxp://y.lo.st");
(Invalidprefs.js) user_pref("browser.startup.homepage_override.mstone", "rv:1.9.0.8");
(User.js) user_pref("browser.search.defaultenginename", "Yoog Search");
(User.js) user_pref("browser.search.selectedEngine", "Yoog Search");
(User.js) user_pref("browser.search.defaulturl", "hxxp://www15.yoog.com/search.php?q=");
.
(Prefs.js) Removed: user_pref("browser.search.defaultenginename", "Yoog Search");
(Prefs.js) Removed: user_pref("browser.search.defaulturl", "hxxp://www15.yoog.com/search.php?q=");
(Prefs.js) Removed: user_pref("browser.search.selectedEngine", "Yoog Search");
(Prefs.js) Removed: user_pref("keyword.URL", "hxxp://www15.yoog.com/search.php?q=");
(Invalidprefs.js) Removed: user_pref("browser.search.defaultenginename", "Yoog Search");
(Invalidprefs.js) Removed: user_pref("browser.search.defaulturl", "hxxp://www15.yoog.com/search.php?q=");
(Invalidprefs.js) Removed: user_pref("browser.search.selectedEngine", "Yoog Search");
(Invalidprefs.js) Removed: user_pref("keyword.URL", "hxxp://www15.yoog.com/search.php?q=");
(Invalidprefs.js) Removed: user_pref("browser.startup.homepage", "hxxp://y.lo.st");
(User.js) Removed: user_pref("browser.search.defaultenginename", "Yoog Search");
(User.js) Removed: user_pref("browser.search.defaulturl", "hxxp://www15.yoog.com/search.php?q=");
(User.js) Removed: user_pref("browser.search.selectedEngine", "Yoog Search");
(User.js) Removed: user_pref("keyword.URL", "hxxp://www15.yoog.com/search.php?q=");
---- Internet Explorer Version 7.0.5730.13 ----
[HKEY_CURRENT_USER\..\Internet Explorer\Main]
Default_Page_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Search bar: hxxp://go.microsoft.com/fwlink/?linkid=54896
Search Page: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Start Page: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\Internet Explorer\Main]
Default_Page_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Search bar: hxxp://go.microsoft.com/fwlink/?linkid=54896
Search Page: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Start Page: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
[HKEY_LOCAL_MACHINE\..\Internet Explorer\Main]
Default_Page_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
SearchAssistant: hxxp://www.crawler.com/search/ie.aspx?tb_id=61005
Search bar: hxxp://search.msn.com/spbasic.htm
Search Page: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Start Page: hxxp://fr.msn.com/
[HKEY_LOCAL_MACHINE\..\Internet Explorer\ABOUTURLS]
Tabs: hxxp://ieframe.dll/tabswelcome.htm
=========== Suspicious ==========
D:\Documents and Settings\Cécile\Mes documents\Programmes\Tune-up\Tune-up 2008\keygen.exe
[252416 Byte(s)|--a------|20/06/2008 17:57|HashMD5: dd6b659dab20e1d326dd080116de6c89 |CRC32: b78e62ea]
D:\Documents and Settings\richard\Bureau\special RICHARD\instal\Sauvegarde context d'exécution\patch.exe
[7921 Byte(s)|--a--c---|14/11/1999 12:32|HashMD5: f0a004d680a754b8e08716578ed37eda |CRC32: ff923fa9]
+---------------------------------------------------------------------------+
9116 Byte(s) - C:\Ad-Report-Clean-17.05.2009.log
9568 Byte(s) - C:\Ad-Report-Scan-17.05.2009.log
20 File(s) - C:\Program Files\Ad-remover\BACKUP
13 File(s) - C:\Program Files\Ad-remover\QUARANTINE
End at: 17:39:13 | 17/05/2009
.
+-----------------| E.O.F
.
Updated by C_XX on 16/05/2009 at 21:15
Contact: AdRemover.contact@gmail.com
Website: http://pagesperso-orange.fr/NosTools/ad_remover.html
**** LIMITED TO ****
Known Adwares
Eorezo
It's TV
Sweetim
********************
Start at: 17:18:59, 17/05/2009 | Boot mode: Normal Boot
Option: Clean | Executed from: C:\Program Files\Ad-remover\
Operating System: Microsoft® Windows XP™ Service Pack 3 v5.1.2600
Computer Name: Cecile
Current User: C‚cile - Administrator
Drive(s):
- C:\ (File System: NTFS)
- D:\ (File System: NTFS)
(!) -- D:\Documents and Settings\Administrateur\Ntuser.dat Loaded as: 'HKU\Administrateur'
(!) -- D:\Documents and Settings\Invit‚\Ntuser.dat Loaded as: 'HKU\Invit‚'
(!) -- D:\Documents and Settings\LocalService.AUTORITE NT.000\Ntuser.dat Loaded as: 'HKU\LocalService.AUTORITE NT.000'
(!) -- D:\Documents and Settings\LocalService.AUTORITE NT.001\Ntuser.dat Loaded as: 'HKU\LocalService.AUTORITE NT.001'
(!) -- D:\Documents and Settings\LocalService.AUTORITE NT.002\Ntuser.dat Loaded as: 'HKU\LocalService.AUTORITE NT.002'
(!) -- D:\Documents and Settings\LocalService.AUTORITE NT.003\Ntuser.dat Loaded as: 'HKU\LocalService.AUTORITE NT.003'
(!) -- D:\Documents and Settings\LocalService.AUTORITE NT.004\Ntuser.dat Loaded as: 'HKU\LocalService.AUTORITE NT.004'
(!) -- D:\Documents and Settings\LocalService.AUTORITE NT.006\Ntuser.dat Loaded as: 'HKU\LocalService.AUTORITE NT.006'
(!) -- D:\Documents and Settings\LocalService.AUTORITE NT.007\Ntuser.dat Loaded as: 'HKU\LocalService.AUTORITE NT.007'
(!) -- D:\Documents and Settings\Moi\Ntuser.dat Loaded as: 'HKU\Moi'
(!) -- D:\Documents and Settings\NetworkService.AUTORITE NT.000\Ntuser.dat Loaded as: 'HKU\NetworkService.AUTORITE NT.000'
(!) -- D:\Documents and Settings\NetworkService.AUTORITE NT.001\Ntuser.dat Loaded as: 'HKU\NetworkService.AUTORITE NT.001'
(!) -- D:\Documents and Settings\NetworkService.AUTORITE NT.002\Ntuser.dat Loaded as: 'HKU\NetworkService.AUTORITE NT.002'
(!) -- D:\Documents and Settings\NetworkService.AUTORITE NT.003\Ntuser.dat Loaded as: 'HKU\NetworkService.AUTORITE NT.003'
(!) -- D:\Documents and Settings\NetworkService.AUTORITE NT.004\Ntuser.dat Loaded as: 'HKU\NetworkService.AUTORITE NT.004'
(!) -- D:\Documents and Settings\NetworkService.AUTORITE NT.010\Ntuser.dat Loaded as: 'HKU\NetworkService.AUTORITE NT.010'
(!) -- D:\Documents and Settings\NetworkService.AUTORITE NT.011\Ntuser.dat Loaded as: 'HKU\NetworkService.AUTORITE NT.011'
(!) -- D:\Documents and Settings\richard\Ntuser.dat Loaded as: 'HKU\richard'
(!) -- IE start pages/Tabs reset
============ Known Adwares Deleted ============
.
HKLM\Software\Trymedia Systems
HKCU\Software\AppDataLow\software\{A90F6FDE-90A5-7C09-0E11-65FD0E109511}
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\f07e8262-d31b-cd8e-2d10-881fafc69c8c
.
D:\Documents and Settings\C‚cile\Application Data\Mozilla\Firefox\Profiles\9wup1kzf.default\searchplugins\Yoog Search.xml
D:\Documents and Settings\C‚cile\Application Data\Mozilla\Firefox\Profiles\9wup1kzf.default\searchplugins\ask.xml
C:\WINDOWS\System32\f07e8262-d31b-cd8e-2d10-881fafc69c8c.exe
D:\Documents and Settings\C‚cile\Application Data\Microsoft\Internet Explorer\Quick Launch\Windows Live Messenger .lnk
D:\Documents and Settings\C‚cile\Cookies\c‚cile@atdmt[1].txt
D:\Documents and Settings\C‚cile\Cookies\c‚cile@bs.serving-sys[2].txt
+-----------------| Eorezo Elements Deleted :
HKCR\Interface\{B0D071A1-36B3-4757-A126-14C89C56013A}
HKCR\Typelib\{B4C656C9-F2E9-4E77-B3F4-443DF2BD778F}
HKCU\Software\EoRezo
HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{64F56FC1-1272-44CD-BA6E-39723696E350}
HKLM\Software\EoRezo
HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\SoftwareUpdate_is1
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\Eoengine
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\Softwarehelper
.
C:\Program Files\EoRezo
D:\Documents and Settings\C‚cile\Application Data\EoRezo
D:\Documents and Settings\C‚cile\Cookies\c‚cile@ads.eorezo[2].txt
D:\Documents and Settings\C‚cile\Cookies\c‚cile@dl.eorezo[1].txt
D:\Documents and Settings\C‚cile\Cookies\c‚cile@eorezo[1].txt
D:\Documents and Settings\C‚cile\Cookies\c‚cile@mir0.eorezo[1].txt
C:\WINDOWS\Prefetch\SOFTWAREUPDATEHP.EXE-0530D7EB.pf
+-----------------| It's TV Elements Deleted :
HKCU\Software\ItsLabel
.
D:\Documents and Settings\C‚cile\Application Data\ItsLabel
C:\WINDOWS\Prefetch\ITSTV.EXE-1D7C04F8.pf
C:\WINDOWS\Prefetch\ITSTV.EXE-2B03540A.pf
+-----------------| Sweetim Elements Deleted :
.
(!) -- Temp files deleted.
(!) -- Recycle bin emptied in all drives.
+-----------------| Added Scan:
---- Mozilla FireFox Version 3.0.10 ----
ProfilePath: 9wup1kzf.default (C‚cile)
.
(Prefs.js) user_pref("browser.search.defaultenginename", "Yoog Search");
(Prefs.js) user_pref("browser.search.selectedEngine", "Yoog Search");
(Prefs.js) user_pref("browser.search.defaulturl", "hxxp://www15.yoog.com/search.php?q=");
(Prefs.js) user_pref("browser.startup.homepage", "hxxp://www.google.fr/");
(Prefs.js) user_pref("browser.startup.homepage_override.mstone", "rv:1.9.0.10");
(Invalidprefs.js) user_pref("browser.search.defaultenginename", "Yoog Search");
(Invalidprefs.js) user_pref("browser.search.selectedEngine", "Yoog Search");
(Invalidprefs.js) user_pref("browser.search.defaulturl", "hxxp://www15.yoog.com/search.php?q=");
(Invalidprefs.js) user_pref("browser.startup.homepage", "hxxp://y.lo.st");
(Invalidprefs.js) user_pref("browser.startup.homepage_override.mstone", "rv:1.9.0.8");
(User.js) user_pref("browser.search.defaultenginename", "Yoog Search");
(User.js) user_pref("browser.search.selectedEngine", "Yoog Search");
(User.js) user_pref("browser.search.defaulturl", "hxxp://www15.yoog.com/search.php?q=");
.
(Prefs.js) Removed: user_pref("browser.search.defaultenginename", "Yoog Search");
(Prefs.js) Removed: user_pref("browser.search.defaulturl", "hxxp://www15.yoog.com/search.php?q=");
(Prefs.js) Removed: user_pref("browser.search.selectedEngine", "Yoog Search");
(Prefs.js) Removed: user_pref("keyword.URL", "hxxp://www15.yoog.com/search.php?q=");
(Invalidprefs.js) Removed: user_pref("browser.search.defaultenginename", "Yoog Search");
(Invalidprefs.js) Removed: user_pref("browser.search.defaulturl", "hxxp://www15.yoog.com/search.php?q=");
(Invalidprefs.js) Removed: user_pref("browser.search.selectedEngine", "Yoog Search");
(Invalidprefs.js) Removed: user_pref("keyword.URL", "hxxp://www15.yoog.com/search.php?q=");
(Invalidprefs.js) Removed: user_pref("browser.startup.homepage", "hxxp://y.lo.st");
(User.js) Removed: user_pref("browser.search.defaultenginename", "Yoog Search");
(User.js) Removed: user_pref("browser.search.defaulturl", "hxxp://www15.yoog.com/search.php?q=");
(User.js) Removed: user_pref("browser.search.selectedEngine", "Yoog Search");
(User.js) Removed: user_pref("keyword.URL", "hxxp://www15.yoog.com/search.php?q=");
---- Internet Explorer Version 7.0.5730.13 ----
[HKEY_CURRENT_USER\..\Internet Explorer\Main]
Default_Page_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Search bar: hxxp://go.microsoft.com/fwlink/?linkid=54896
Search Page: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Start Page: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\Internet Explorer\Main]
Default_Page_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Search bar: hxxp://go.microsoft.com/fwlink/?linkid=54896
Search Page: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Start Page: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
[HKEY_LOCAL_MACHINE\..\Internet Explorer\Main]
Default_Page_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
SearchAssistant: hxxp://www.crawler.com/search/ie.aspx?tb_id=61005
Search bar: hxxp://search.msn.com/spbasic.htm
Search Page: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Start Page: hxxp://fr.msn.com/
[HKEY_LOCAL_MACHINE\..\Internet Explorer\ABOUTURLS]
Tabs: hxxp://ieframe.dll/tabswelcome.htm
=========== Suspicious ==========
D:\Documents and Settings\Cécile\Mes documents\Programmes\Tune-up\Tune-up 2008\keygen.exe
[252416 Byte(s)|--a------|20/06/2008 17:57|HashMD5: dd6b659dab20e1d326dd080116de6c89 |CRC32: b78e62ea]
D:\Documents and Settings\richard\Bureau\special RICHARD\instal\Sauvegarde context d'exécution\patch.exe
[7921 Byte(s)|--a--c---|14/11/1999 12:32|HashMD5: f0a004d680a754b8e08716578ed37eda |CRC32: ff923fa9]
+---------------------------------------------------------------------------+
9116 Byte(s) - C:\Ad-Report-Clean-17.05.2009.log
9568 Byte(s) - C:\Ad-Report-Scan-17.05.2009.log
20 File(s) - C:\Program Files\Ad-remover\BACKUP
13 File(s) - C:\Program Files\Ad-remover\QUARANTINE
End at: 17:39:13 | 17/05/2009
.
+-----------------| E.O.F
.
Vous n’avez pas trouvé la réponse que vous recherchez ?
Posez votre question
ok ; bizarre
-----\\ Option 1
Télécharge Yoog_Fix de Batch_Man sur ton Bureau.
http://batchdhelus.open-web.fr/programme/Yoog_Fix.exe
Double-clique dessus et choisis l'option 1 ( Recherche )
Attend que le scan se fasse, un rapport va s'ouvrir.
Poste le dans ta prochaine réponse.
PS: S'il ne s'ouvre pas le rapport est à la racine de ton disque sous le nom de Yoog_Fix.txt
Par Manque De Curiosité On Risque De Mourir Ignorant;Tu es libre de penser que tu es C..,
Mais C.. de penser que tu es libre...Merci a australe13
-----\\ Option 1
Télécharge Yoog_Fix de Batch_Man sur ton Bureau.
http://batchdhelus.open-web.fr/programme/Yoog_Fix.exe
Double-clique dessus et choisis l'option 1 ( Recherche )
Attend que le scan se fasse, un rapport va s'ouvrir.
Poste le dans ta prochaine réponse.
PS: S'il ne s'ouvre pas le rapport est à la racine de ton disque sous le nom de Yoog_Fix.txt
Par Manque De Curiosité On Risque De Mourir Ignorant;Tu es libre de penser que tu es C..,
Mais C.. de penser que tu es libre...Merci a australe13
Yoog_Fix 2.02 de Batch_Man
Debut a 18:17 le 17/05/2009
Microsoft Windows XP Home Edition (5.1.2600) Service Pack 3
Internet Explorer 7.0.5730.13
Mozilla Firefox 3.0.10 (fr)
Symantec Corporation 2005 (Not activated)
ALWIL Software 4.7.1098 (Activated)
Symantec Corporation 2005 (Activated)
A:\ [Removable] (Total:0 Mo/Free:0 Mo)
C:\ [Fixed] - NTFS - (Total:30710 Mo/Free:1925 Mo)
D:\ [Fixed] - NTFS - (Total:152068 Mo/Free:1114 Mo)
E:\ [CD-Rom] (Total:0 Mo/Free:0 Mo)
F:\ [Removable] (Total:0 Mo/Free:0 Mo)
G:\ [Removable] (Total:0 Mo/Free:0 Mo)
H:\ [Removable] (Total:0 Mo/Free:0 Mo)
I:\ [Removable] (Total:0 Mo/Free:0 Mo)
J:\ [Removable] (Total:0 Mo/Free:0 Mo)
Option [1] 2 Recherche
+---------------\\ Processus cachés/bloqués
+---------------\\ Recherche
----------\\ Recherche de fichiers
----------\\ Recherche dans prefs.js
----------\\ Recherche dans le registre
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{C09EB1ED-00FD-4177-B134-94AEBE2ECED9}] @DisplayName=Yoog Search
[HKCU\..\SearchScopes\{C09EB1ED-00FD-4177-B134-94AEBE2ECED9}] @DisplayName=Yoog Search
----------\\ Infections associées possibles
----------\\ Suspects ( PAS FORCEMENT INFECTIEUX )
+---> Registre
+---> Fichiers
[--------- + 10/04/2009 08:30 + 312847] C:\WINDOWS\system32\bdbcaacebddb.dll
[--------- + 10/04/2009 08:30 + 312847] C:\WINDOWS\system32\bdbcaacebddb.dll
+---------------\\Analyse complémentaire
+---------\\ Tâches planifiées
C:\WINDOWS\Tasks\Ad-Aware Update (Weekly).job
C:\WINDOWS\Tasks\AppleSoftwareUpdate.job
C:\WINDOWS\Tasks\Google Software Updater.job
C:\WINDOWS\Tasks\Maintenance en 1 clic.job
----------\\ Analyse de Firefox
----------\\ Extensions Firefox
----------\\ Plugins de recherche
[07/03/2009 13:05|1516] - C:\Program Files\Mozilla Firefox\searchplugins\amazon-france.xml: Amazon.fr - Recherche Amazon.fr: https://www.amazon.fr/
[07/03/2009 13:05|757] - C:\Program Files\Mozilla Firefox\searchplugins\eBay-france.xml: eBay France - eBay - Enchères en ligne: http://search.ebay.fr/
[07/03/2009 13:05|1706] - C:\Program Files\Mozilla Firefox\searchplugins\google.xml: Google - Google Search: https://www.google.com/
[07/03/2009 13:05|748] - C:\Program Files\Mozilla Firefox\searchplugins\MediaDICO-fr.xml: MediaDICO - Les Dictionnaires Mediadico: http://www.dictionnaire-mediadico.com/dictionnaires.asp
[07/03/2009 13:05|1426] - C:\Program Files\Mozilla Firefox\searchplugins\wikipedia-fr.xml: Wikipédia (fr) - Wikipédia, l'encyclopédie libre: https://fr.wikipedia.org/wiki/Sp%C3%A9cial:Recherche
[07/03/2009 13:05|652] - C:\Program Files\Mozilla Firefox\searchplugins\yahoo-france.xml: Yahoo - Recherche Yahoo: https://fr.search.yahoo.com/
----------\\ Listing de dossiers
[16/05/2009 14:07 | --a------ | 67088 bytes] C:\Program Files\Mozilla Firefox\Components\bdbcaacebddb.dll
[23/04/2009 16:01 | --a------ | 348547 bytes] C:\Program Files\Mozilla Firefox\Components\browser.xpt
[29/04/2009 20:20 | --a------ | 23032 bytes] C:\Program Files\Mozilla Firefox\Components\browserdirprovider.dll
[29/04/2009 20:20 | --a------ | 134648 bytes] C:\Program Files\Mozilla Firefox\Components\brwsrcmp.dll
[17/05/2009 11:02 | --a------ | 143829 bytes] C:\Program Files\Mozilla Firefox\Components\compreg.dat
[24/01/2009 12:25 | --a------ | 2394 bytes] C:\Program Files\Mozilla Firefox\Components\nsIQTScriptablePlugin.xpt
[17/05/2009 11:02 | --a------ | 96403 bytes] C:\Program Files\Mozilla Firefox\Components\xpti.dat
[19/03/2008 19:23 | --a------ | 114688 bytes] C:\Program Files\Mozilla Firefox\plugins\np32dsw.dll
[29/04/2009 20:20 | --a------ | 65528 bytes] C:\Program Files\Mozilla Firefox\plugins\npnul32.dll
[27/02/2009 12:13 | --a------ | 103792 bytes] C:\Program Files\Mozilla Firefox\plugins\nppdf32.dll
[27/02/2009 16:36 | --a------ | 7168 bytes] C:\Program Files\Mozilla Firefox\plugins\nppdf32.FRA
[24/01/2009 12:25 | --a------ | 143360 bytes] C:\Program Files\Mozilla Firefox\plugins\npqtplugin.dll
[24/01/2009 12:25 | --a------ | 143360 bytes] C:\Program Files\Mozilla Firefox\plugins\npqtplugin2.dll
[24/01/2009 12:25 | --a------ | 143360 bytes] C:\Program Files\Mozilla Firefox\plugins\npqtplugin3.dll
[24/01/2009 12:25 | --a------ | 143360 bytes] C:\Program Files\Mozilla Firefox\plugins\npqtplugin4.dll
[24/01/2009 12:25 | --a------ | 143360 bytes] C:\Program Files\Mozilla Firefox\plugins\npqtplugin5.dll
[24/01/2009 12:25 | --a------ | 143360 bytes] C:\Program Files\Mozilla Firefox\plugins\npqtplugin6.dll
[24/01/2009 12:25 | --a------ | 143360 bytes] C:\Program Files\Mozilla Firefox\plugins\npqtplugin7.dll
[24/01/2009 12:25 | --a------ | 143360 bytes] C:\Program Files\Mozilla Firefox\plugins\npqtplugin8.dll
[19/01/2008 11:21 | --a------ | 2394 bytes] C:\Program Files\Mozilla Firefox\plugins\nsIQTScriptablePlugin.xpt
[24/01/2009 12:25 | --a------ | 4208 bytes] C:\Program Files\Mozilla Firefox\plugins\QuickTimePlugin.class
[19/03/2008 18:33 | --a------ | 1144 bytes] C:\Program Files\Mozilla Firefox\plugins\ShockwavePlugin.class
----------\\ Analyse d'Internet Explorer
HKEY_CURRENT_USER\..\Internet Explorer,Start Page: http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
HKEY_CURRENT_USER\..\Internet Explorer,Search Page: http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKEY_CURRENT_USER\..\Internet Explorer,Default_Search_URL: http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKEY_LOCAL_MACHINE\..\Internet Explorer,Search Page: http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKEY_LOCAL_MACHINE\..\Internet Explorer,Start Page: https://www.msn.com/fr-fr
HKEY_LOCAL_MACHINE\..\Internet Explorer,Default_Search_URL: http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKEY_LOCAL_MACHINE\..\Internet Explorer,CustomizeSearch: https://www.bing.com/?toHttps=1&redig=8F3F334EA60E4B1CB4D040DCFE393A89{SUB_RFC1766}/srchasst/srchcust.htm
HKEY_LOCAL_MACHINE\..\Internet Explorer,SearchAssistant: https://www.bing.com/?toHttps=1&redig=8F3F334EA60E4B1CB4D040DCFE393A89{SUB_RFC1766}/srchasst/srchasst.htm
----------\\ Browser Helper Object
BHO: {18DF081C-E8AD-4283-A596-FA578C2EBDC3},@SANS NOM=AcroIEHelperStub
BHO: {6EBF7485-159F-4bff-A14F-B9E3AAC4465B},@SANS NOM=Search Helper
----------\\ SearchScopes
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes],@DefaultScope={E36D07D7-7B4C-47C7-877D-6884A690DD95}
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\${searchCLSID}],@DisplayName=@ieframe.dll,-12512
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{002BDC20-67FB-4341-8CA6-79CE932F1F89}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{0046D14F-A35D-44C4-B96C-B64BA57833E4}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{010B3045-F8B0-4956-A168-33FE4AFF2B4A}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{01151F17-403D-43E8-8C57-2C9C29D09232}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{01184852-B413-49A4-A7E4-9458D7EEC982}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{013E0CC0-6CED-4BD5-9569-F6B237BFD2B0}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{0150A648-6385-4E89-8198-83D7138CD487}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{0173D52B-2A32-4E4B-BEC4-1AB5265E1E18}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{01EAD152-589F-4F84-BACA-49162D5CCD75}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{022977F7-F4EA-4A06-896F-040A5946CD9A}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{02D19942-6B3B-4F4C-9B2C-DC988C275201}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{030A0DD4-DF5D-43F3-AA23-06EF9C13738C}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{034AFFD5-9F8F-4DC6-A7EE-EE4FFFFA5D45}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{03588BBA-2833-4E3A-BCAC-49DAE561E137}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{039A2A3C-5EB4-4FC1-9CCC-55731892F049}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{0403275D-0D8E-44A2-BACB-25CABD63205A}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{044F9EB3-E04F-491D-B0F3-07CC000CD2F3}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{047A44B0-546F-4783-8585-442B40784265}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{05E40660-C6B1-4E02-A2B3-A0AE297155F9}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{06BA4A1F-ED24-4E27-8C19-989C521CFB12}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{070C6C4A-F2ED-49A7-8263-5F774F813EFF}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{084D458F-F104-420A-8917-0827CD4BEEC0}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{0938A622-45D6-439F-9062-B89A86AC1B41}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{09A58C37-D50F-4B8C-892E-5159264EE4FB}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{0A01CBDD-7C89-4C87-B960-F3FDFC110D08}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{0A697B08-424B-4DA2-86F0-0EA1FE63225A}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{0B6D4808-6154-4D31-8170-BBE7EB95226B}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{0C366D66-F554-4CAC-BDE0-80B5DC3EE6CB}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{0D3005BC-33BB-430E-9E87-7E7281F71DCA}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{0DC4EEA3-6ADE-4C3A-8660-C5BFC376F012}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{0E01BB0C-A680-4A88-9964-1CC6FC229ECE}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{0E5268A6-EA60-4E39-9C46-0009CCCCCFC6}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{0ECCA14C-1305-45DE-A184-8034E764FCB3}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{0F0E091F-7BCD-4DA9-AD16-C9724419EC04}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{0F1E4010-7A9C-47FC-80FF-FE5EED275616}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{0F34B202-14CD-4820-98B0-4CC58C29721D}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{0FD5AA17-D0C2-4145-9C41-339F0B3A478F}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{0FF9D9B3-9A43-4579-ACC3-C81C788E6D6A}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{10043174-1693-491D-9C22-844C2CF8368C}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{102D3512-B866-4B2F-968A-C3DBEA9F3A4E}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{104664D2-B087-4CA8-AF0F-AF208708E0EC}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{10D3213C-60BA-4AB6-A4D5-AC1C60E813BF}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{10E966E2-EE34-40F2-81ED-FC62BC6F9285}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{1283F2BA-6FDA-4DD9-933A-678AEB57C7E6}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{14356222-93E9-436C-9C6A-95D42DF75756}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{14FFBB78-B136-4991-8944-C6C9DB27A71A}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{15FE8441-2D48-4006-879F-B7DC13904F0F}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{166E5954-13C9-4235-96BC-9B4C28A4D9C8}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{17ACA3A8-19BE-4901-9CD0-89305664EC85}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{17D3E7DD-045A-49A6-BBAD-254A46B3BDE7}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{183131C7-388B-467D-A165-0F2F6876C07F}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{18457C21-FC2B-42BC-96F2-F66717896591}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{18852F6A-78AC-404A-B3CA-626D87D86866}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{18972CAA-ED5D-45FA-8D8A-587F08F7050E}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{19320BBA-59A6-4402-8FAD-16A2C3E1396F}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{195B3859-BCB8-4A5B-97BF-4CA0D69CF1DE}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{196FD15F-1B27-4FF8-9A27-C2B06D85365D}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{1A65550B-6B70-4989-8C6D-388B1B5ADDA9}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{1AED80A3-6276-4B4F-85A2-B3E23C067FBA}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{1B08ADCC-4FF2-420F-A475-AA8F7B9AFDAD}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{1D6FF650-5D2C-4C1F-AEAB-634F271A0DEB}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{1E14BBB0-8EF8-41A7-AA8E-4F9F46C6CE8E}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{1E1D6616-994D-4AF1-B2DB-E856F02911E5}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{1E50DBDC-11BD-4ED0-84A5-F6DCF6F6197E}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{1E9A4BB3-E2F6-446F-B1D0-6E50C1DA5E24}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{1EF373E3-577B-4B09-BB28-CD24535770E6}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{1F26ABC4-CB23-4444-A6B0-C2A15D4E5A2E}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{1F46527C-F6F3-4F4B-95BC-F7D97A2A0342}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{20026B33-093A-40AC-B157-8EF2C4065D1F}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{2002A35B-29A3-4775-90D6-2AFED549750B}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{2077C382-5242-419D-AD9A-8CF44B08D05A}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{2166FB5B-EDB1-4638-A82B-A62DE1B50A49}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{21A71247-86D4-45D4-B6BC-7D2BCDA5C6BD}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{21B283FA-727B-4138-97D7-3ED0DBF5921E}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{228E6353-C634-4300-A5BE-003D2F9FA7A5}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{22A09EF5-15B1-4227-B076-6FE9022D4667}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{22C72F8D-B18F-4DA5-A1AA-9E7C0A5F440E}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{23390666-4526-4E1D-BB19-6CCE9221C662}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{23D41047-FDC1-48B2-8989-CDBD9BEA620B}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{2432FD69-15AA-42A5-8004-D469EC80D318}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{2436B0C8-6681-4E9E-897D-A9D52011BFDC}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{2512C62B-62B5-4723-A15E-31C112A66DA1}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{262324AC-DCE2-4022-B067-1A3E366C3E9D}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{267841D7-2F01-4A03-A458-03E0A86055A2}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{26F5BD25-D003-4C4C-B028-D0D16C01F320}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{286D0C9F-305A-4651-97E4-E64363A9083D}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{28D07B60-D621-481A-A29D-B307CD6273CD}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{294BCECB-F796-4648-978A-053238C3F998}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{2959D83C-58CD-40AD-83F5-92D877A1D9F5}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{2960DB39-55B7-4A83-B38C-16A4A76F4436}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{2A996BBA-C791-44EE-9613-741F9F107F7A}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{2AA60EB5-FBA9-4627-B12D-6048950E16C0}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{2AE9ACE9-3408-46D8-938C-0216D074A477}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{2B6053FB-3F67-489B-9091-67447F8E20CB}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{2B61FC30-C471-4050-BCF6-A8F773BA6F86}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{2B7F82BB-48DA-4F88-A786-2207153DFE74}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{2C06D277-7705-4031-B826-AD98394FA666}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{2CAD7EF2-6155-4382-9851-FD7570C089B6}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{2CE07B86-DDBF-4A93-89C8-AB087CBF3C2E}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{2D1362D1-18CB-4D7E-807B-28A360C9C09B}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{2D7A698C-193A-4820-8F03-89CB0DCC3AF0}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{2DCCCAB9-5DE9-42C7-9AC0-DAC36AAFBB23}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{2E24F691-F0D3-460E-B03D-1B36A7E0B477}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{2EBA14BE-9D2B-4500-AC88-7CD7F2782545}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{2FE26AB4-8ED8-467F-9DC6-1020CC7DE7F0}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{30C26ACA-EBC3-445D-AB57-35CE1625EBE3}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{310FD5C1-3CDA-434E-B075-DB9AD0D5C630}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{3142A479-585C-4D39-A7FC-028F11EB27B4}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{314C5629-6DF6-4BD8-A9A7-3793759C860B}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{315F78CA-91D6-4EBF-8D50-ECC26E5F0A46}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{318ECC7F-AF43-45EC-98D6-F166A3F7F520}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{32A34CBE-4ACE-441C-8B2C-19EAD7C7348F}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{32F26708-1713-4195-A79B-F1252C7708A7}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{34DDBD2E-5FD1-4658-BBB6-6599AB81A753}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{34FB00CC-530D-4588-8338-7577035A219E}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{3512DB17-9357-484C-8B32-B049938DF8B7}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{35F88BDC-CCFF-46F7-A027-FF915A32FCA9}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{36A46F27-B2DF-406C-8269-B2F5D19EB0D9}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{36AE171E-EF74-4EEA-BF23-078B1CE78C0F}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{36C77328-9BA3-4AE1-AEA4-50BBD25407EA}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{3703EE33-23CC-4F12-9820-1A58DC94D846}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{3717C39A-77E0-492A-8829-3E2B9E8A5515}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{38439C07-EF48-483B-A744-884A2CBDE2B8}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{39892428-280B-42F5-BCEC-38A497E59F17}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{3A60DCCD-773A-41FB-8C43-9B7D5B8F3D84}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{3AD5EC25-C439-4FF4-BF3B-3C97CAF1DBF6}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{3BEDD761-A6AB-42F2-A010-BDED04CB0C32}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{3C535E5A-929B-405D-835F-C4007B8E905F}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{3C91CC51-45A0-4CFE-98C3-049CC2DBE210}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{3CF39BF4-71A5-44AB-8711-454B1F041131}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{3D1BA4BD-698E-43D5-955D-BF73AC6E33B5}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{3E74B1DF-36FA-4D2C-B939-C942DC75D77F}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{3E8C3304-A825-445D-8832-133966B3BF2B}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{3F63A495-DC39-4A7C-9E35-673BA0B53EC0}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{3FB3836C-5866-4CB8-B80C-A89D0B5E5B09}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{3FDC7EA1-53C9-421C-BA8C-04EEE2530CFF}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{40223BF0-93E2-4125-BA33-D23AA8D77AD0}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{4094A373-2BBE-4616-8D90-570CE24636AF}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{409EDB0D-6EDD-4B4A-8E70-981C79E90F82}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{414D03E4-DE2F-4ADA-94B1-5BF5CF74E9F4}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{4154A900-4570-4D93-9BE7-0689A65A8616}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{41E710A3-72B0-492B-BBA6-54F297D7CCFF}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{42CEAAD4-168D-4E3C-A69D-92D1EA7FD1C8}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{430C9DE9-8AAA-43D0-822D-0374B6C7FE65}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{436B646E-54C4-4D71-BA71-8DDB8D88A5BD}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{451B80CE-A6B7-49EE-A495-9E286929591B}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{4536E87C-F07B-4891-A625-81839CC56557}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{4685623A-5874-40D5-9781-9F828D6C1B50}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{469302E7-3552-42A8-AC1B-013580256EC9}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{46ACE809-82AF-45F7-B66D-9318C37F3A33}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{4800C004-7DBB-445B-8598-C9FF892D3699}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{48493491-2362-4F55-8955-BC20064F555C}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{48CC4D79-F376-46E0-A1B2-01125D24AB4E}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{4922CB5C-3109-4927-AF0C-5FA61B59EDF3}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{4AB22725-533A-4E6C-8FE6-7CF9968185A2}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{4AC2A999-B6A8-487C-AF06-CDF3BDAFCFCF}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{4B75F06F-960C-4DE6-993B-A2F83C3AA08C}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{4B7F91F1-8927-46B4-8B07-848D60B55E9E}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{4D1B8B58-F7DE-4431-8706-D2B051751F0F}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{4D8709D3-67CC-45F0-90E9-F39FC028CB8A}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{4D998C1B-23AF-4339-A823-9F45350DB3A1}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{4DEDC2FE-A98E-4DBA-A006-B397B2816979}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{4E670F0A-9761-41F0-B4F0-8ACDF6EABE62}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{4E92EC4A-3650-41D0-8C62-2407A3237118}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{4ED51342-7C40-4A00-AB49-E6006E96F00C}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{4EF57366-8927-4A90-A199-71B84803315E}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{4F8CB324-9888-4B57-A441-FB8C5271C506}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{4F984890-071A-4388-9150-697D8C92F0D5}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{500DDA9D-1892-4127-83AD-2207DEBA795B}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{507BD5C9-D6A1-4622-B821-F52753F8EA27}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{50A34ADE-C996-4334-9106-7BED605CF9B5}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{52981564-939D-430C-B4F7-4C79D8E0F304}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{52E59A27-FE4C-4B36-8AFD-FDD6C94FE175}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{5453F877-134C-456B-B5ED-23A3BF576248}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{54636FDB-E185-4902-8662-1337AEF22788}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{549BB795-62D7-4B2C-97AC-20817B20410A}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{555662EE-4553-45F2-BD31-40C8BAB02275}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{55627D4C-57B4-4C1D-85F0-74BB60F99F98}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{55B4D88D-5DE8-4D5F-BF3A-E40665CF8F81}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{55BA235D-9616-4A36-8774-6BCD41570E61}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{55CFD236-C022-4259-8F4E-0AEE4799C89C}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{560BDC8F-194E-4029-A9D5-769EFC50C9CB}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{562316F1-622E-4405-B934-EE6CA9D13115}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{5628D06C-875E-419D-845E-E43E7571BE9A}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{5634D176-BE09-4D97-A90F-14739B9FD1E6}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{567A3697-FEE1-44D8-A86B-49067C99AB52}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{56B3F437-8112-457B-B2AC-E85E5C2F5282}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{582AF1BC-BD29-4694-84A6-015B3EB24208}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{583525A6-478F-4E32-9930-9FCD2413B34B}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{5841A742-0634-4CED-9637-4CF108BF54F3}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{584517C4-ED3A-4ED0-8FF1-8CEE13B6FD88}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{58662A6A-9961-4163-B2E4-687687B597F2}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{58B1017F-2155-43D6-80DD-BA7FB271E582}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{59012FE0-5A78-47E0-BE9F-79D3BB829754}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{59075D3E-F782-4BAB-9041-B13797F7B293}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{5C62956F-A0B3-400C-A39A-B2C6D1126009}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{5CAB9CBF-7820-43BB-A5AC-64A828C73183}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{5D1D8108-ACC3-49F3-B0BC-C16CC30F1A6B}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{5D5CDEA3-0826-44AD-A62B-2DE2D9EB1E79}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{5D892D2D-209E-4B65-9991-1A1401472D57}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{5EA61096-042F-4E93-A7F5-093562D48DB4}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{5F2534E2-F43C-4D52-9C42-407732334431}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{5F5E66D8-CFA1-4344-A0CF-45E6ED42FB64}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{5FC01E1B-1F96-4583-B614-0253653A846A}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{60500490-015D-47F0-B899-8C048E223EA0}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{606A1B3A-CA87-425F-B9E6-C621833BFA14}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{60942B6E-965F-476A-BEB8-52243CD8CC64}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{6174315C-69E3-4F87-ACE1-FD69DFDAEC0C}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{61D531E2-6CFB-435F-814B-8E1CA3193C36}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{61F167D8-20A3-46BA-880F-66D9E7D36F91}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{624065EE-E010-4EFD-9567-A3A616B4AFF3}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{62864766-5725-4B12-B240-F24463F1B8AB}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{62C2FFF2-5891-472A-8855-035A1E593022}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{6302A36E-3B0B-4B3A-9470-6DE41EDCBF96}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{642C2F23-5932-44FC-879E-D29456EB6B3A}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{6448782C-20D0-4FBA-BD5C-4FE2BF5EAE54}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{64CDD309-1378-49A6-B102-47919A0A2563}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{64E1462B-1AEA-4F41-A5F4-3A7E8C704FDA}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{65045FB2-9C22-49A3-AF21-3E830C4F70EB}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{650EC783-78CA-4C90-A6FE-AF665EC98BA5}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{651337A5-FA34-414E-B930-47CF194BCB9E}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{6528AD2A-19AA-4857-8C23-34AA50FA18B3}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{652CAF4C-5D84-4AD1-99AB-799518616033}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{6531DADC-0289-4A1C-8053-564F95F0F2DC}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{66189097-6034-42E8-B187-860A9A962C3D}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{66303D89-CC92-4441-B6CD-F6DEA06DDBE1}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{66D17371-F89E-449C-A714-F88A14032E5A}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{67284BD0-852C-49A5-9B99-0110F01EAB08}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{677C3B5D-880B-4D4E-A8E8-1F783D6DBDD5}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{6A7973CF-593F-476F-9E68-2072D282A610}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{6A809CBD-970B-4BAA-99EA-21E22A4A9665}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{6A8642D1-491A-4F0B-A878-38C393D58B0E}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{6DBD91D2-B813-4C55-A68B-AF515FB2A4C5}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{6DE3F768-D298-4D00-8932-4D347AD9EDB6}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{6DFF6EDC-A0A0-4778-BBDE-1AED315E5FFA}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{6E37E589-54DB-49E5-AB48-2C4C4AFF45E5}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{706FC47B-26FC-4DB8-B6A5-3EEBDD25A8FC}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{70FC75ED-8AD3-4620-8B15-D90A4C9589FB}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{71CBFB27-758B-494D-ABEF-4FF8966AF249}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{71FB185C-FFA1-4999-8AE2-7898FD3432F0}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{72B06A73-AC62-4195-9A11-F66F9DB54EF0}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{72E2F8C6-CD9C-40AE-8DB7-032D40664CBE}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{72E59503-BADE-4987-8C7B-E3F135AAE3B9}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{72EA3553-396F-4E91-B338-34C0B5574843}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{73638392-9C4D-48C9-B0AA-1561D43ECBD1}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{738114A0-8F0D-43AA-921C-DED8F6DC1C73}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{73ABD958-744C-4589-BEE1-6CF724382896}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{741AD472-3F88-484A-9202-B607A94D7CD8}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{747EA1B2-402A-4022-98B8-A6BA906FE5EC}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{74ECF4D3-B9EF-43F8-AA59-95FAF2E81A3A}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{74F67CD0-8083-4165-A5D8-E09967F5AFD9}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{7529E457-6856-4896-8DEB-047E1E7AB0A1}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{75BDECA2-5F43-410B-B474-0FF4792F732B}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{75E34473-36C0-442B-888D-1F7EB8F05E57}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{7637BB7A-2858-4777-B5E4-9335E80B0575}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{783633F7-F4FC-465B-9103-44D76FBB81B1}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{784B3934-E0AC-43F5-95A8-63C8CF8433A4}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{785362CF-3E2A-47FA-80FB-1BD8A237C894}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{78AF0686-3953-4B07-B8E7-D198C260FCD8}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{792892CC-4E08-44E1-9C9C-5A2D4302F21C}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{799D6A4D-5B4F-4248-A774-7B3B4A56C46F}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{79D6C6A5-36B5-4C46-8529-B89A80E63BC8}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{7A09C607-DC72-46B8-B34F-B0F26642A308}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{7AD58C01-633F-4366-95C2-C50A45683855}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{7B9DAEAA-A0FC-4FF6-9EA3-28C1C0FAD43D}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{7C2ADC77-12A6-4467-8F65-2120BD54EA03}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{7D2FEFFB-D267-4505-A514-FE1708D86594}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{7DB0536E-5ABA-4D45-950B-46A53D497CCA}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{7DFF8F1B-7C31-4E20-B90E-A2C36004CD4E}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{7E0795B4-6C6D-421B-94F6-72F7E200A671}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{7E2EEECF-6C14-416F-A92E-6A96C6EC5B7C}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{8047F205-2603-4102-8396-A3D908E83E52}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{81259FFC-14E1-4806-99C7-C551EEC27128}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{812B4E74-1105-42A8-A6F2-9797952C1861}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{817114A3-E332-4B7C-A64F-504C9B11F274}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{81E7C028-C06E-4FC9-949A-13C4257E2005}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{820E39AD-AF11-4D19-B82B-8E34912C0A7A}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{83789F90-2808-4218-8020-1A18D40D9592}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{83A0C9D4-6A21-4222-9595-D74A76ADA054}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{846BF57F-AABD-4C83-9D14-CE8B289E8212}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{849C92DF-3C9F-4767-8BAF-36522A0FDFEB}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{86049AAB-5BB9-4C29-BC7E-7F29F7500B2B}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{865C53FA-B392-472A-A2DE-4E383BF21349}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{86BECC13-7863-41D3-A682-2BFE864AD43D}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{86DB0039-351B-4E66-BC5F-217258293E3A}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{87DC5EFA-9A73-4C2D-BB92-3DF7476B7B4A}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{8817A17D-3AB6-4581-9A1D-8FCC34148FBD}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{8A3EA5E7-9E25-430B-AB91-44ABA6717B90}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{8AAD1A12-E861-41F1-96C8-07E59FEA942B}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{8C235CDB-24C4-4196-A451-EB58FC7B2228}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{8C271EC5-B39F-41C8-BF61-0FD6D7757029}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{8CA135CE-BD03-45D0-8762-5591E57B601C}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{8FAA512B-B3F8-474E-BD51-9A9B561E02BF}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{949A618A-9DE8-47D2-86ED-4C65F6E3AC03}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{96A32B1D-3D5E-46C0-A0CE-E34F98ED0B73}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{97236518-877F-4422-99F5-4E854D324317}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{9BCCE00D-78F3-4661-825F-667A8416D7E5}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{9C2F3010-1701-4878-971F-212BCB1D8D3A}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{9E935A68-1A75-47AD-BA35-082DFD336D21}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{9F41B33B-2C3C-4CD3-8EFC-9DF4347E3782}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{A0B271A9-D8AA-8E74-7392-2164D6A1C03C}],@DisplayName=Ask
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{A2C09AEB-59F5-4088-9422-77A2A281305F}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{A2E62ECD-983B-47B4-8D35-4BB989F17596}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{A37BAF72-7610-4A62-BEA0-7D565182A96C}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{A37C6E2B-454F-424E-8440-C771407832C5}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{A4788680-EB26-4503-AFF1-FC876E207701}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{A4B52113-BB31-4C6D-BD7A-B6050DD347C9}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{A51C500B-5F1A-489E-A424-A1913CC29AC5}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{A532150E-6F47-4A2C-A6CE-0D62C2C57B7E}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{A540D69B-1CD5-44FA-9B2A-DFEA5EBD97F1}],@DisplayName=uStart
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{A6C98AAE-F258-4CDC-823F-C9A6A279EFB3}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{A8957BCE-0DEF-4969-BB08-7BE53501F8F9}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{A8E649EC-790D-46F9-9F99-DAE6A0411F84}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{A9A4601E-04AA-43FE-819D-2CA82DB3A538}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{AA31041D-AAAE-4B10-8180-74CDDEA3F8FD}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{AAF41099-1662-4CD4-8CDE-8E2DECCFA4CD}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{ABAA1233-CA9A-4984-B7E3-820FDD232D9B}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{AD09197F-B947-4C79-85D5-A9E537C0FDCD}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{AD5D987D-64CB-425D-BCE7-9F8ACA04E97A}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{AD8FE823-DA01-4D71-B270-515DA8A0AF28}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{AF8ABA83-38D1-4F53-9AA3-E02F9FDBA549}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{B1007A43-1FA6-4054-BB1D-CA61A3C6CED0}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{B1D10439-7154-4694-B098-8C14A66644B1}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{B26D182D-F72A-4F8F-B262-015AB072DE60}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{B29D49EA-7302-4779-AE07-FF0A72B13D1E}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{B5AA7A04-FC44-4EEA-8902-F7666F8BF0B4}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{B6FCF191-C97B-4DDA-8532-6AA19A85242D}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{B7D50CB8-5EEF-4C6D-BE6D-2E7558CAFAF7}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{BA1FEB18-9033-4670-A8F1-89EAF1ED6C56}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{BA72C0A3-2956-44B3-9320-64CA43FE449E}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{BD0A50F2-6B7D-4024-A735-6D419F645763}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{BFB1515F-A705-4577-95AA-1F584C5D8396}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{BFB52611-65FC-4D41-9623-D192B457B3C3}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{BFCFE0FE-CA72-4FEC-ABC9-37F9E86DA59A}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{C0005FD9-2B47-4B3C-9DFA-27881411A6F9}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{C09EB1ED-00FD-4177-B134-94AEBE2ECED9}],@DisplayName=Yoog Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{C1B02E49-A7B4-464D-A3F7-8472B4D36345}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{C4000D64-E7F8-47AD-A52F-626216AB7722}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{C4FFDDD5-1116-46A5-8810-208A3F8DBA17}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{C7329A9E-F02C-4099-883E-4F59AAA6E618}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{C8026A3A-EA11-43E1-BB79-D4E9776D8690}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{C8C8FDD9-802C-4E47-8FAE-328B7832EBF4}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{C91A47ED-9DDA-4D78-85C5-A93605728862}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{CA574B06-8A0C-400D-9810-F3C65B610CBC}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{CCCB7ECC-B935-4C87-BF97-D546C469722D}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{D0195D36-84D9-4C7E-96DE-A4DDC2AA578C}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{D0CC04F3-DB7E-4C93-9D8A-87F76F570563}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{D1383224-115C-4115-99F3-D36A91F00695}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{D27A5783-E31D-4258-9EAE-91444941FC8C}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{D34A0175-0038-494B-8416-70EE72CAC390}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{D3C162D7-F006-47D1-B2A7-9EF2CD8A2D35}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{D3CC7117-13C1-4EB2-9A60-92F2C6CD4E06}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{D54B3851-D1F6-42F8-9B72-2719FBA41D38}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{D56836AC-A22F-41C4-A718-E4953E39BD13}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{D5ACF6B0-A16B-4F0C-A7E9-F71A909D77B7}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{D60068E1-1BB4-40FE-A16C-DBD9D2002E3D}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{D972CC05-F52A-42AB-94B7-6BA52E34DEE9}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{D97EA581-4658-46F9-95D2-D0DA7D710E05}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{D9806A0B-75DA-4490-9A44-511BE290FDB5}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{D98C54BD-0F1A-4D1D-90D5-23880F423DE3}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{DA5F207B-C034-409A-8518-0A2D2B0118BD}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{DBC1EEA8-40FB-4E65-A75B-DF0CF7CA5E6B}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{DCB4FFC8-4B54-4EC6-9BBE-73D054CB721D}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{DD718F2E-090C-4707-B816-489454B5522E}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{DFD5DEC7-DEDC-43B9-BAFD-2C767F33944D}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{E14C1245-D9D3-437D-B3D6-6AB840FFED59}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{E36D07D7-7B4C-47C7-877D-6884A690DD95}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{E4283766-E014-4C84-9C3D-1BB155DBCE20}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{E7D68B61-B680-4BB4-996D-888F605C7F35}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{E88C36C3-304F-47F2-A82C-A66F3387F9D9}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{E904A88C-646C-4A28-AC72-EC6AE18249BB}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{E9A549BA-3C82-4AE1-89AF-7F941B46C3EB}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{EE22A2DB-470D-43D7-9133-A7AA80E6D699}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{EF8BB798-338C-435B-B8EA-15A1E368B16D}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{EF93768D-5B9C-45DF-B1D1-3591AA9617B7}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{F0969F3F-1EAD-45A8-9B4D-D098EB2924F5}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{F1AE81FB-2EF1-4442-A987-53B4D5B07601}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{F544651D-A8FD-4AA8-88CE-CEB73D3D93CF}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{F680CFC6-BF77-4F17-8B23-1ACF9A43764D}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{F6DC5CEF-B8C9-46F4-A2AE-60CCE591A44E}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{F7591E29-5A26-4CD8-A9C5-9420B6F3B0F5}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{F86C70DF-8272-423C-980F-2203D4DC645A}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{F9E64242-3509-4B67-81C0-94B61C482EF3}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{FBA5D847-4E0B-41EB-B9C2-914FF0A3C2D8}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{FC14E538-E1D2-415E-B716-7185DF26016E}],@DisplayName=Live Search
[HKCU\..\SearchScopes],@DefaultScope={E36D07D7-7B4C-47C7-877D-6884A690DD95}
[HKCU\..\SearchScopes\${searchCLSID}],@DisplayName=@ieframe.dll,-12512
[HKCU\..\SearchScopes\{002BDC20-67FB-4341-8CA6-79CE932F1F89}],@DisplayName=Live Search
[HKCU\..\SearchScopes\{0046D14F-A35D-44C4-B96C-B64BA57833E4}],@DisplayName=Live Search
[HKCU\..\SearchScopes\{010B3045-F8B0-4956-A168-33FE4AFF2B4A}],@DisplayName=Google
[HKCU\..\SearchScopes\{01151F17-403D-43E8-8C57-2C9C29D09232}],@DisplayName=Google
[HKCU\..\SearchScopes\{01184852-B413-49A4-A7E4-9458D7EEC982}],@DisplayName=Google
[HKCU\..\SearchScopes\{013E0CC0-6CED-4BD5-9569-F6B237BFD2B0}],@DisplayName=Live Search
[HKCU\..\SearchScopes\{0150A648-6385-4E89-8198-83D7138CD487}],@DisplayName=Live Search
[HKCU\..\SearchScopes\{0173D52B-2A32-4E4B-BEC4-1AB5265E1E18}],@DisplayName=Live Search
[HKCU\..\SearchScopes\{01EAD152-589F-4F84-BACA-
Debut a 18:17 le 17/05/2009
Microsoft Windows XP Home Edition (5.1.2600) Service Pack 3
Internet Explorer 7.0.5730.13
Mozilla Firefox 3.0.10 (fr)
Symantec Corporation 2005 (Not activated)
ALWIL Software 4.7.1098 (Activated)
Symantec Corporation 2005 (Activated)
A:\ [Removable] (Total:0 Mo/Free:0 Mo)
C:\ [Fixed] - NTFS - (Total:30710 Mo/Free:1925 Mo)
D:\ [Fixed] - NTFS - (Total:152068 Mo/Free:1114 Mo)
E:\ [CD-Rom] (Total:0 Mo/Free:0 Mo)
F:\ [Removable] (Total:0 Mo/Free:0 Mo)
G:\ [Removable] (Total:0 Mo/Free:0 Mo)
H:\ [Removable] (Total:0 Mo/Free:0 Mo)
I:\ [Removable] (Total:0 Mo/Free:0 Mo)
J:\ [Removable] (Total:0 Mo/Free:0 Mo)
Option [1] 2 Recherche
+---------------\\ Processus cachés/bloqués
+---------------\\ Recherche
----------\\ Recherche de fichiers
----------\\ Recherche dans prefs.js
----------\\ Recherche dans le registre
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{C09EB1ED-00FD-4177-B134-94AEBE2ECED9}] @DisplayName=Yoog Search
[HKCU\..\SearchScopes\{C09EB1ED-00FD-4177-B134-94AEBE2ECED9}] @DisplayName=Yoog Search
----------\\ Infections associées possibles
----------\\ Suspects ( PAS FORCEMENT INFECTIEUX )
+---> Registre
+---> Fichiers
[--------- + 10/04/2009 08:30 + 312847] C:\WINDOWS\system32\bdbcaacebddb.dll
[--------- + 10/04/2009 08:30 + 312847] C:\WINDOWS\system32\bdbcaacebddb.dll
+---------------\\Analyse complémentaire
+---------\\ Tâches planifiées
C:\WINDOWS\Tasks\Ad-Aware Update (Weekly).job
C:\WINDOWS\Tasks\AppleSoftwareUpdate.job
C:\WINDOWS\Tasks\Google Software Updater.job
C:\WINDOWS\Tasks\Maintenance en 1 clic.job
----------\\ Analyse de Firefox
----------\\ Extensions Firefox
----------\\ Plugins de recherche
[07/03/2009 13:05|1516] - C:\Program Files\Mozilla Firefox\searchplugins\amazon-france.xml: Amazon.fr - Recherche Amazon.fr: https://www.amazon.fr/
[07/03/2009 13:05|757] - C:\Program Files\Mozilla Firefox\searchplugins\eBay-france.xml: eBay France - eBay - Enchères en ligne: http://search.ebay.fr/
[07/03/2009 13:05|1706] - C:\Program Files\Mozilla Firefox\searchplugins\google.xml: Google - Google Search: https://www.google.com/
[07/03/2009 13:05|748] - C:\Program Files\Mozilla Firefox\searchplugins\MediaDICO-fr.xml: MediaDICO - Les Dictionnaires Mediadico: http://www.dictionnaire-mediadico.com/dictionnaires.asp
[07/03/2009 13:05|1426] - C:\Program Files\Mozilla Firefox\searchplugins\wikipedia-fr.xml: Wikipédia (fr) - Wikipédia, l'encyclopédie libre: https://fr.wikipedia.org/wiki/Sp%C3%A9cial:Recherche
[07/03/2009 13:05|652] - C:\Program Files\Mozilla Firefox\searchplugins\yahoo-france.xml: Yahoo - Recherche Yahoo: https://fr.search.yahoo.com/
----------\\ Listing de dossiers
[16/05/2009 14:07 | --a------ | 67088 bytes] C:\Program Files\Mozilla Firefox\Components\bdbcaacebddb.dll
[23/04/2009 16:01 | --a------ | 348547 bytes] C:\Program Files\Mozilla Firefox\Components\browser.xpt
[29/04/2009 20:20 | --a------ | 23032 bytes] C:\Program Files\Mozilla Firefox\Components\browserdirprovider.dll
[29/04/2009 20:20 | --a------ | 134648 bytes] C:\Program Files\Mozilla Firefox\Components\brwsrcmp.dll
[17/05/2009 11:02 | --a------ | 143829 bytes] C:\Program Files\Mozilla Firefox\Components\compreg.dat
[24/01/2009 12:25 | --a------ | 2394 bytes] C:\Program Files\Mozilla Firefox\Components\nsIQTScriptablePlugin.xpt
[17/05/2009 11:02 | --a------ | 96403 bytes] C:\Program Files\Mozilla Firefox\Components\xpti.dat
[19/03/2008 19:23 | --a------ | 114688 bytes] C:\Program Files\Mozilla Firefox\plugins\np32dsw.dll
[29/04/2009 20:20 | --a------ | 65528 bytes] C:\Program Files\Mozilla Firefox\plugins\npnul32.dll
[27/02/2009 12:13 | --a------ | 103792 bytes] C:\Program Files\Mozilla Firefox\plugins\nppdf32.dll
[27/02/2009 16:36 | --a------ | 7168 bytes] C:\Program Files\Mozilla Firefox\plugins\nppdf32.FRA
[24/01/2009 12:25 | --a------ | 143360 bytes] C:\Program Files\Mozilla Firefox\plugins\npqtplugin.dll
[24/01/2009 12:25 | --a------ | 143360 bytes] C:\Program Files\Mozilla Firefox\plugins\npqtplugin2.dll
[24/01/2009 12:25 | --a------ | 143360 bytes] C:\Program Files\Mozilla Firefox\plugins\npqtplugin3.dll
[24/01/2009 12:25 | --a------ | 143360 bytes] C:\Program Files\Mozilla Firefox\plugins\npqtplugin4.dll
[24/01/2009 12:25 | --a------ | 143360 bytes] C:\Program Files\Mozilla Firefox\plugins\npqtplugin5.dll
[24/01/2009 12:25 | --a------ | 143360 bytes] C:\Program Files\Mozilla Firefox\plugins\npqtplugin6.dll
[24/01/2009 12:25 | --a------ | 143360 bytes] C:\Program Files\Mozilla Firefox\plugins\npqtplugin7.dll
[24/01/2009 12:25 | --a------ | 143360 bytes] C:\Program Files\Mozilla Firefox\plugins\npqtplugin8.dll
[19/01/2008 11:21 | --a------ | 2394 bytes] C:\Program Files\Mozilla Firefox\plugins\nsIQTScriptablePlugin.xpt
[24/01/2009 12:25 | --a------ | 4208 bytes] C:\Program Files\Mozilla Firefox\plugins\QuickTimePlugin.class
[19/03/2008 18:33 | --a------ | 1144 bytes] C:\Program Files\Mozilla Firefox\plugins\ShockwavePlugin.class
----------\\ Analyse d'Internet Explorer
HKEY_CURRENT_USER\..\Internet Explorer,Start Page: http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
HKEY_CURRENT_USER\..\Internet Explorer,Search Page: http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKEY_CURRENT_USER\..\Internet Explorer,Default_Search_URL: http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKEY_LOCAL_MACHINE\..\Internet Explorer,Search Page: http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKEY_LOCAL_MACHINE\..\Internet Explorer,Start Page: https://www.msn.com/fr-fr
HKEY_LOCAL_MACHINE\..\Internet Explorer,Default_Search_URL: http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKEY_LOCAL_MACHINE\..\Internet Explorer,CustomizeSearch: https://www.bing.com/?toHttps=1&redig=8F3F334EA60E4B1CB4D040DCFE393A89{SUB_RFC1766}/srchasst/srchcust.htm
HKEY_LOCAL_MACHINE\..\Internet Explorer,SearchAssistant: https://www.bing.com/?toHttps=1&redig=8F3F334EA60E4B1CB4D040DCFE393A89{SUB_RFC1766}/srchasst/srchasst.htm
----------\\ Browser Helper Object
BHO: {18DF081C-E8AD-4283-A596-FA578C2EBDC3},@SANS NOM=AcroIEHelperStub
BHO: {6EBF7485-159F-4bff-A14F-B9E3AAC4465B},@SANS NOM=Search Helper
----------\\ SearchScopes
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes],@DefaultScope={E36D07D7-7B4C-47C7-877D-6884A690DD95}
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\${searchCLSID}],@DisplayName=@ieframe.dll,-12512
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{002BDC20-67FB-4341-8CA6-79CE932F1F89}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{0046D14F-A35D-44C4-B96C-B64BA57833E4}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{010B3045-F8B0-4956-A168-33FE4AFF2B4A}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{01151F17-403D-43E8-8C57-2C9C29D09232}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{01184852-B413-49A4-A7E4-9458D7EEC982}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{013E0CC0-6CED-4BD5-9569-F6B237BFD2B0}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{0150A648-6385-4E89-8198-83D7138CD487}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{0173D52B-2A32-4E4B-BEC4-1AB5265E1E18}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{01EAD152-589F-4F84-BACA-49162D5CCD75}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{022977F7-F4EA-4A06-896F-040A5946CD9A}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{02D19942-6B3B-4F4C-9B2C-DC988C275201}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{030A0DD4-DF5D-43F3-AA23-06EF9C13738C}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{034AFFD5-9F8F-4DC6-A7EE-EE4FFFFA5D45}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{03588BBA-2833-4E3A-BCAC-49DAE561E137}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{039A2A3C-5EB4-4FC1-9CCC-55731892F049}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{0403275D-0D8E-44A2-BACB-25CABD63205A}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{044F9EB3-E04F-491D-B0F3-07CC000CD2F3}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{047A44B0-546F-4783-8585-442B40784265}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{05E40660-C6B1-4E02-A2B3-A0AE297155F9}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{06BA4A1F-ED24-4E27-8C19-989C521CFB12}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{070C6C4A-F2ED-49A7-8263-5F774F813EFF}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{084D458F-F104-420A-8917-0827CD4BEEC0}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{0938A622-45D6-439F-9062-B89A86AC1B41}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{09A58C37-D50F-4B8C-892E-5159264EE4FB}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{0A01CBDD-7C89-4C87-B960-F3FDFC110D08}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{0A697B08-424B-4DA2-86F0-0EA1FE63225A}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{0B6D4808-6154-4D31-8170-BBE7EB95226B}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{0C366D66-F554-4CAC-BDE0-80B5DC3EE6CB}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{0D3005BC-33BB-430E-9E87-7E7281F71DCA}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{0DC4EEA3-6ADE-4C3A-8660-C5BFC376F012}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{0E01BB0C-A680-4A88-9964-1CC6FC229ECE}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{0E5268A6-EA60-4E39-9C46-0009CCCCCFC6}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{0ECCA14C-1305-45DE-A184-8034E764FCB3}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{0F0E091F-7BCD-4DA9-AD16-C9724419EC04}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{0F1E4010-7A9C-47FC-80FF-FE5EED275616}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{0F34B202-14CD-4820-98B0-4CC58C29721D}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{0FD5AA17-D0C2-4145-9C41-339F0B3A478F}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{0FF9D9B3-9A43-4579-ACC3-C81C788E6D6A}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{10043174-1693-491D-9C22-844C2CF8368C}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{102D3512-B866-4B2F-968A-C3DBEA9F3A4E}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{104664D2-B087-4CA8-AF0F-AF208708E0EC}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{10D3213C-60BA-4AB6-A4D5-AC1C60E813BF}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{10E966E2-EE34-40F2-81ED-FC62BC6F9285}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{1283F2BA-6FDA-4DD9-933A-678AEB57C7E6}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{14356222-93E9-436C-9C6A-95D42DF75756}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{14FFBB78-B136-4991-8944-C6C9DB27A71A}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{15FE8441-2D48-4006-879F-B7DC13904F0F}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{166E5954-13C9-4235-96BC-9B4C28A4D9C8}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{17ACA3A8-19BE-4901-9CD0-89305664EC85}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{17D3E7DD-045A-49A6-BBAD-254A46B3BDE7}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{183131C7-388B-467D-A165-0F2F6876C07F}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{18457C21-FC2B-42BC-96F2-F66717896591}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{18852F6A-78AC-404A-B3CA-626D87D86866}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{18972CAA-ED5D-45FA-8D8A-587F08F7050E}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{19320BBA-59A6-4402-8FAD-16A2C3E1396F}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{195B3859-BCB8-4A5B-97BF-4CA0D69CF1DE}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{196FD15F-1B27-4FF8-9A27-C2B06D85365D}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{1A65550B-6B70-4989-8C6D-388B1B5ADDA9}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{1AED80A3-6276-4B4F-85A2-B3E23C067FBA}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{1B08ADCC-4FF2-420F-A475-AA8F7B9AFDAD}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{1D6FF650-5D2C-4C1F-AEAB-634F271A0DEB}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{1E14BBB0-8EF8-41A7-AA8E-4F9F46C6CE8E}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{1E1D6616-994D-4AF1-B2DB-E856F02911E5}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{1E50DBDC-11BD-4ED0-84A5-F6DCF6F6197E}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{1E9A4BB3-E2F6-446F-B1D0-6E50C1DA5E24}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{1EF373E3-577B-4B09-BB28-CD24535770E6}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{1F26ABC4-CB23-4444-A6B0-C2A15D4E5A2E}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{1F46527C-F6F3-4F4B-95BC-F7D97A2A0342}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{20026B33-093A-40AC-B157-8EF2C4065D1F}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{2002A35B-29A3-4775-90D6-2AFED549750B}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{2077C382-5242-419D-AD9A-8CF44B08D05A}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{2166FB5B-EDB1-4638-A82B-A62DE1B50A49}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{21A71247-86D4-45D4-B6BC-7D2BCDA5C6BD}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{21B283FA-727B-4138-97D7-3ED0DBF5921E}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{228E6353-C634-4300-A5BE-003D2F9FA7A5}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{22A09EF5-15B1-4227-B076-6FE9022D4667}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{22C72F8D-B18F-4DA5-A1AA-9E7C0A5F440E}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{23390666-4526-4E1D-BB19-6CCE9221C662}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{23D41047-FDC1-48B2-8989-CDBD9BEA620B}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{2432FD69-15AA-42A5-8004-D469EC80D318}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{2436B0C8-6681-4E9E-897D-A9D52011BFDC}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{2512C62B-62B5-4723-A15E-31C112A66DA1}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{262324AC-DCE2-4022-B067-1A3E366C3E9D}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{267841D7-2F01-4A03-A458-03E0A86055A2}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{26F5BD25-D003-4C4C-B028-D0D16C01F320}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{286D0C9F-305A-4651-97E4-E64363A9083D}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{28D07B60-D621-481A-A29D-B307CD6273CD}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{294BCECB-F796-4648-978A-053238C3F998}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{2959D83C-58CD-40AD-83F5-92D877A1D9F5}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{2960DB39-55B7-4A83-B38C-16A4A76F4436}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{2A996BBA-C791-44EE-9613-741F9F107F7A}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{2AA60EB5-FBA9-4627-B12D-6048950E16C0}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{2AE9ACE9-3408-46D8-938C-0216D074A477}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{2B6053FB-3F67-489B-9091-67447F8E20CB}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{2B61FC30-C471-4050-BCF6-A8F773BA6F86}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{2B7F82BB-48DA-4F88-A786-2207153DFE74}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{2C06D277-7705-4031-B826-AD98394FA666}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{2CAD7EF2-6155-4382-9851-FD7570C089B6}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{2CE07B86-DDBF-4A93-89C8-AB087CBF3C2E}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{2D1362D1-18CB-4D7E-807B-28A360C9C09B}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{2D7A698C-193A-4820-8F03-89CB0DCC3AF0}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{2DCCCAB9-5DE9-42C7-9AC0-DAC36AAFBB23}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{2E24F691-F0D3-460E-B03D-1B36A7E0B477}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{2EBA14BE-9D2B-4500-AC88-7CD7F2782545}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{2FE26AB4-8ED8-467F-9DC6-1020CC7DE7F0}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{30C26ACA-EBC3-445D-AB57-35CE1625EBE3}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{310FD5C1-3CDA-434E-B075-DB9AD0D5C630}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{3142A479-585C-4D39-A7FC-028F11EB27B4}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{314C5629-6DF6-4BD8-A9A7-3793759C860B}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{315F78CA-91D6-4EBF-8D50-ECC26E5F0A46}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{318ECC7F-AF43-45EC-98D6-F166A3F7F520}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{32A34CBE-4ACE-441C-8B2C-19EAD7C7348F}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{32F26708-1713-4195-A79B-F1252C7708A7}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{34DDBD2E-5FD1-4658-BBB6-6599AB81A753}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{34FB00CC-530D-4588-8338-7577035A219E}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{3512DB17-9357-484C-8B32-B049938DF8B7}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{35F88BDC-CCFF-46F7-A027-FF915A32FCA9}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{36A46F27-B2DF-406C-8269-B2F5D19EB0D9}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{36AE171E-EF74-4EEA-BF23-078B1CE78C0F}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{36C77328-9BA3-4AE1-AEA4-50BBD25407EA}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{3703EE33-23CC-4F12-9820-1A58DC94D846}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{3717C39A-77E0-492A-8829-3E2B9E8A5515}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{38439C07-EF48-483B-A744-884A2CBDE2B8}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{39892428-280B-42F5-BCEC-38A497E59F17}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{3A60DCCD-773A-41FB-8C43-9B7D5B8F3D84}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{3AD5EC25-C439-4FF4-BF3B-3C97CAF1DBF6}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{3BEDD761-A6AB-42F2-A010-BDED04CB0C32}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{3C535E5A-929B-405D-835F-C4007B8E905F}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{3C91CC51-45A0-4CFE-98C3-049CC2DBE210}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{3CF39BF4-71A5-44AB-8711-454B1F041131}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{3D1BA4BD-698E-43D5-955D-BF73AC6E33B5}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{3E74B1DF-36FA-4D2C-B939-C942DC75D77F}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{3E8C3304-A825-445D-8832-133966B3BF2B}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{3F63A495-DC39-4A7C-9E35-673BA0B53EC0}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{3FB3836C-5866-4CB8-B80C-A89D0B5E5B09}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{3FDC7EA1-53C9-421C-BA8C-04EEE2530CFF}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{40223BF0-93E2-4125-BA33-D23AA8D77AD0}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{4094A373-2BBE-4616-8D90-570CE24636AF}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{409EDB0D-6EDD-4B4A-8E70-981C79E90F82}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{414D03E4-DE2F-4ADA-94B1-5BF5CF74E9F4}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{4154A900-4570-4D93-9BE7-0689A65A8616}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{41E710A3-72B0-492B-BBA6-54F297D7CCFF}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{42CEAAD4-168D-4E3C-A69D-92D1EA7FD1C8}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{430C9DE9-8AAA-43D0-822D-0374B6C7FE65}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{436B646E-54C4-4D71-BA71-8DDB8D88A5BD}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{451B80CE-A6B7-49EE-A495-9E286929591B}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{4536E87C-F07B-4891-A625-81839CC56557}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{4685623A-5874-40D5-9781-9F828D6C1B50}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{469302E7-3552-42A8-AC1B-013580256EC9}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{46ACE809-82AF-45F7-B66D-9318C37F3A33}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{4800C004-7DBB-445B-8598-C9FF892D3699}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{48493491-2362-4F55-8955-BC20064F555C}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{48CC4D79-F376-46E0-A1B2-01125D24AB4E}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{4922CB5C-3109-4927-AF0C-5FA61B59EDF3}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{4AB22725-533A-4E6C-8FE6-7CF9968185A2}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{4AC2A999-B6A8-487C-AF06-CDF3BDAFCFCF}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{4B75F06F-960C-4DE6-993B-A2F83C3AA08C}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{4B7F91F1-8927-46B4-8B07-848D60B55E9E}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{4D1B8B58-F7DE-4431-8706-D2B051751F0F}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{4D8709D3-67CC-45F0-90E9-F39FC028CB8A}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{4D998C1B-23AF-4339-A823-9F45350DB3A1}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{4DEDC2FE-A98E-4DBA-A006-B397B2816979}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{4E670F0A-9761-41F0-B4F0-8ACDF6EABE62}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{4E92EC4A-3650-41D0-8C62-2407A3237118}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{4ED51342-7C40-4A00-AB49-E6006E96F00C}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{4EF57366-8927-4A90-A199-71B84803315E}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{4F8CB324-9888-4B57-A441-FB8C5271C506}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{4F984890-071A-4388-9150-697D8C92F0D5}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{500DDA9D-1892-4127-83AD-2207DEBA795B}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{507BD5C9-D6A1-4622-B821-F52753F8EA27}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{50A34ADE-C996-4334-9106-7BED605CF9B5}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{52981564-939D-430C-B4F7-4C79D8E0F304}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{52E59A27-FE4C-4B36-8AFD-FDD6C94FE175}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{5453F877-134C-456B-B5ED-23A3BF576248}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{54636FDB-E185-4902-8662-1337AEF22788}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{549BB795-62D7-4B2C-97AC-20817B20410A}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{555662EE-4553-45F2-BD31-40C8BAB02275}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{55627D4C-57B4-4C1D-85F0-74BB60F99F98}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{55B4D88D-5DE8-4D5F-BF3A-E40665CF8F81}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{55BA235D-9616-4A36-8774-6BCD41570E61}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{55CFD236-C022-4259-8F4E-0AEE4799C89C}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{560BDC8F-194E-4029-A9D5-769EFC50C9CB}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{562316F1-622E-4405-B934-EE6CA9D13115}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{5628D06C-875E-419D-845E-E43E7571BE9A}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{5634D176-BE09-4D97-A90F-14739B9FD1E6}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{567A3697-FEE1-44D8-A86B-49067C99AB52}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{56B3F437-8112-457B-B2AC-E85E5C2F5282}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{582AF1BC-BD29-4694-84A6-015B3EB24208}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{583525A6-478F-4E32-9930-9FCD2413B34B}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{5841A742-0634-4CED-9637-4CF108BF54F3}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{584517C4-ED3A-4ED0-8FF1-8CEE13B6FD88}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{58662A6A-9961-4163-B2E4-687687B597F2}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{58B1017F-2155-43D6-80DD-BA7FB271E582}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{59012FE0-5A78-47E0-BE9F-79D3BB829754}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{59075D3E-F782-4BAB-9041-B13797F7B293}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{5C62956F-A0B3-400C-A39A-B2C6D1126009}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{5CAB9CBF-7820-43BB-A5AC-64A828C73183}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{5D1D8108-ACC3-49F3-B0BC-C16CC30F1A6B}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{5D5CDEA3-0826-44AD-A62B-2DE2D9EB1E79}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{5D892D2D-209E-4B65-9991-1A1401472D57}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{5EA61096-042F-4E93-A7F5-093562D48DB4}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{5F2534E2-F43C-4D52-9C42-407732334431}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{5F5E66D8-CFA1-4344-A0CF-45E6ED42FB64}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{5FC01E1B-1F96-4583-B614-0253653A846A}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{60500490-015D-47F0-B899-8C048E223EA0}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{606A1B3A-CA87-425F-B9E6-C621833BFA14}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{60942B6E-965F-476A-BEB8-52243CD8CC64}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{6174315C-69E3-4F87-ACE1-FD69DFDAEC0C}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{61D531E2-6CFB-435F-814B-8E1CA3193C36}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{61F167D8-20A3-46BA-880F-66D9E7D36F91}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{624065EE-E010-4EFD-9567-A3A616B4AFF3}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{62864766-5725-4B12-B240-F24463F1B8AB}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{62C2FFF2-5891-472A-8855-035A1E593022}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{6302A36E-3B0B-4B3A-9470-6DE41EDCBF96}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{642C2F23-5932-44FC-879E-D29456EB6B3A}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{6448782C-20D0-4FBA-BD5C-4FE2BF5EAE54}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{64CDD309-1378-49A6-B102-47919A0A2563}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{64E1462B-1AEA-4F41-A5F4-3A7E8C704FDA}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{65045FB2-9C22-49A3-AF21-3E830C4F70EB}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{650EC783-78CA-4C90-A6FE-AF665EC98BA5}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{651337A5-FA34-414E-B930-47CF194BCB9E}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{6528AD2A-19AA-4857-8C23-34AA50FA18B3}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{652CAF4C-5D84-4AD1-99AB-799518616033}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{6531DADC-0289-4A1C-8053-564F95F0F2DC}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{66189097-6034-42E8-B187-860A9A962C3D}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{66303D89-CC92-4441-B6CD-F6DEA06DDBE1}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{66D17371-F89E-449C-A714-F88A14032E5A}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{67284BD0-852C-49A5-9B99-0110F01EAB08}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{677C3B5D-880B-4D4E-A8E8-1F783D6DBDD5}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{6A7973CF-593F-476F-9E68-2072D282A610}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{6A809CBD-970B-4BAA-99EA-21E22A4A9665}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{6A8642D1-491A-4F0B-A878-38C393D58B0E}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{6DBD91D2-B813-4C55-A68B-AF515FB2A4C5}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{6DE3F768-D298-4D00-8932-4D347AD9EDB6}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{6DFF6EDC-A0A0-4778-BBDE-1AED315E5FFA}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{6E37E589-54DB-49E5-AB48-2C4C4AFF45E5}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{706FC47B-26FC-4DB8-B6A5-3EEBDD25A8FC}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{70FC75ED-8AD3-4620-8B15-D90A4C9589FB}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{71CBFB27-758B-494D-ABEF-4FF8966AF249}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{71FB185C-FFA1-4999-8AE2-7898FD3432F0}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{72B06A73-AC62-4195-9A11-F66F9DB54EF0}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{72E2F8C6-CD9C-40AE-8DB7-032D40664CBE}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{72E59503-BADE-4987-8C7B-E3F135AAE3B9}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{72EA3553-396F-4E91-B338-34C0B5574843}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{73638392-9C4D-48C9-B0AA-1561D43ECBD1}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{738114A0-8F0D-43AA-921C-DED8F6DC1C73}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{73ABD958-744C-4589-BEE1-6CF724382896}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{741AD472-3F88-484A-9202-B607A94D7CD8}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{747EA1B2-402A-4022-98B8-A6BA906FE5EC}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{74ECF4D3-B9EF-43F8-AA59-95FAF2E81A3A}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{74F67CD0-8083-4165-A5D8-E09967F5AFD9}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{7529E457-6856-4896-8DEB-047E1E7AB0A1}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{75BDECA2-5F43-410B-B474-0FF4792F732B}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{75E34473-36C0-442B-888D-1F7EB8F05E57}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{7637BB7A-2858-4777-B5E4-9335E80B0575}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{783633F7-F4FC-465B-9103-44D76FBB81B1}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{784B3934-E0AC-43F5-95A8-63C8CF8433A4}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{785362CF-3E2A-47FA-80FB-1BD8A237C894}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{78AF0686-3953-4B07-B8E7-D198C260FCD8}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{792892CC-4E08-44E1-9C9C-5A2D4302F21C}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{799D6A4D-5B4F-4248-A774-7B3B4A56C46F}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{79D6C6A5-36B5-4C46-8529-B89A80E63BC8}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{7A09C607-DC72-46B8-B34F-B0F26642A308}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{7AD58C01-633F-4366-95C2-C50A45683855}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{7B9DAEAA-A0FC-4FF6-9EA3-28C1C0FAD43D}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{7C2ADC77-12A6-4467-8F65-2120BD54EA03}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{7D2FEFFB-D267-4505-A514-FE1708D86594}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{7DB0536E-5ABA-4D45-950B-46A53D497CCA}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{7DFF8F1B-7C31-4E20-B90E-A2C36004CD4E}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{7E0795B4-6C6D-421B-94F6-72F7E200A671}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{7E2EEECF-6C14-416F-A92E-6A96C6EC5B7C}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{8047F205-2603-4102-8396-A3D908E83E52}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{81259FFC-14E1-4806-99C7-C551EEC27128}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{812B4E74-1105-42A8-A6F2-9797952C1861}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{817114A3-E332-4B7C-A64F-504C9B11F274}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{81E7C028-C06E-4FC9-949A-13C4257E2005}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{820E39AD-AF11-4D19-B82B-8E34912C0A7A}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{83789F90-2808-4218-8020-1A18D40D9592}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{83A0C9D4-6A21-4222-9595-D74A76ADA054}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{846BF57F-AABD-4C83-9D14-CE8B289E8212}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{849C92DF-3C9F-4767-8BAF-36522A0FDFEB}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{86049AAB-5BB9-4C29-BC7E-7F29F7500B2B}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{865C53FA-B392-472A-A2DE-4E383BF21349}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{86BECC13-7863-41D3-A682-2BFE864AD43D}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{86DB0039-351B-4E66-BC5F-217258293E3A}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{87DC5EFA-9A73-4C2D-BB92-3DF7476B7B4A}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{8817A17D-3AB6-4581-9A1D-8FCC34148FBD}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{8A3EA5E7-9E25-430B-AB91-44ABA6717B90}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{8AAD1A12-E861-41F1-96C8-07E59FEA942B}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{8C235CDB-24C4-4196-A451-EB58FC7B2228}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{8C271EC5-B39F-41C8-BF61-0FD6D7757029}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{8CA135CE-BD03-45D0-8762-5591E57B601C}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{8FAA512B-B3F8-474E-BD51-9A9B561E02BF}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{949A618A-9DE8-47D2-86ED-4C65F6E3AC03}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{96A32B1D-3D5E-46C0-A0CE-E34F98ED0B73}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{97236518-877F-4422-99F5-4E854D324317}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{9BCCE00D-78F3-4661-825F-667A8416D7E5}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{9C2F3010-1701-4878-971F-212BCB1D8D3A}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{9E935A68-1A75-47AD-BA35-082DFD336D21}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{9F41B33B-2C3C-4CD3-8EFC-9DF4347E3782}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{A0B271A9-D8AA-8E74-7392-2164D6A1C03C}],@DisplayName=Ask
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{A2C09AEB-59F5-4088-9422-77A2A281305F}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{A2E62ECD-983B-47B4-8D35-4BB989F17596}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{A37BAF72-7610-4A62-BEA0-7D565182A96C}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{A37C6E2B-454F-424E-8440-C771407832C5}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{A4788680-EB26-4503-AFF1-FC876E207701}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{A4B52113-BB31-4C6D-BD7A-B6050DD347C9}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{A51C500B-5F1A-489E-A424-A1913CC29AC5}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{A532150E-6F47-4A2C-A6CE-0D62C2C57B7E}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{A540D69B-1CD5-44FA-9B2A-DFEA5EBD97F1}],@DisplayName=uStart
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{A6C98AAE-F258-4CDC-823F-C9A6A279EFB3}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{A8957BCE-0DEF-4969-BB08-7BE53501F8F9}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{A8E649EC-790D-46F9-9F99-DAE6A0411F84}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{A9A4601E-04AA-43FE-819D-2CA82DB3A538}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{AA31041D-AAAE-4B10-8180-74CDDEA3F8FD}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{AAF41099-1662-4CD4-8CDE-8E2DECCFA4CD}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{ABAA1233-CA9A-4984-B7E3-820FDD232D9B}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{AD09197F-B947-4C79-85D5-A9E537C0FDCD}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{AD5D987D-64CB-425D-BCE7-9F8ACA04E97A}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{AD8FE823-DA01-4D71-B270-515DA8A0AF28}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{AF8ABA83-38D1-4F53-9AA3-E02F9FDBA549}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{B1007A43-1FA6-4054-BB1D-CA61A3C6CED0}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{B1D10439-7154-4694-B098-8C14A66644B1}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{B26D182D-F72A-4F8F-B262-015AB072DE60}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{B29D49EA-7302-4779-AE07-FF0A72B13D1E}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{B5AA7A04-FC44-4EEA-8902-F7666F8BF0B4}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{B6FCF191-C97B-4DDA-8532-6AA19A85242D}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{B7D50CB8-5EEF-4C6D-BE6D-2E7558CAFAF7}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{BA1FEB18-9033-4670-A8F1-89EAF1ED6C56}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{BA72C0A3-2956-44B3-9320-64CA43FE449E}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{BD0A50F2-6B7D-4024-A735-6D419F645763}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{BFB1515F-A705-4577-95AA-1F584C5D8396}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{BFB52611-65FC-4D41-9623-D192B457B3C3}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{BFCFE0FE-CA72-4FEC-ABC9-37F9E86DA59A}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{C0005FD9-2B47-4B3C-9DFA-27881411A6F9}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{C09EB1ED-00FD-4177-B134-94AEBE2ECED9}],@DisplayName=Yoog Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{C1B02E49-A7B4-464D-A3F7-8472B4D36345}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{C4000D64-E7F8-47AD-A52F-626216AB7722}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{C4FFDDD5-1116-46A5-8810-208A3F8DBA17}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{C7329A9E-F02C-4099-883E-4F59AAA6E618}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{C8026A3A-EA11-43E1-BB79-D4E9776D8690}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{C8C8FDD9-802C-4E47-8FAE-328B7832EBF4}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{C91A47ED-9DDA-4D78-85C5-A93605728862}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{CA574B06-8A0C-400D-9810-F3C65B610CBC}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{CCCB7ECC-B935-4C87-BF97-D546C469722D}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{D0195D36-84D9-4C7E-96DE-A4DDC2AA578C}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{D0CC04F3-DB7E-4C93-9D8A-87F76F570563}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{D1383224-115C-4115-99F3-D36A91F00695}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{D27A5783-E31D-4258-9EAE-91444941FC8C}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{D34A0175-0038-494B-8416-70EE72CAC390}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{D3C162D7-F006-47D1-B2A7-9EF2CD8A2D35}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{D3CC7117-13C1-4EB2-9A60-92F2C6CD4E06}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{D54B3851-D1F6-42F8-9B72-2719FBA41D38}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{D56836AC-A22F-41C4-A718-E4953E39BD13}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{D5ACF6B0-A16B-4F0C-A7E9-F71A909D77B7}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{D60068E1-1BB4-40FE-A16C-DBD9D2002E3D}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{D972CC05-F52A-42AB-94B7-6BA52E34DEE9}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{D97EA581-4658-46F9-95D2-D0DA7D710E05}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{D9806A0B-75DA-4490-9A44-511BE290FDB5}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{D98C54BD-0F1A-4D1D-90D5-23880F423DE3}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{DA5F207B-C034-409A-8518-0A2D2B0118BD}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{DBC1EEA8-40FB-4E65-A75B-DF0CF7CA5E6B}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{DCB4FFC8-4B54-4EC6-9BBE-73D054CB721D}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{DD718F2E-090C-4707-B816-489454B5522E}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{DFD5DEC7-DEDC-43B9-BAFD-2C767F33944D}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{E14C1245-D9D3-437D-B3D6-6AB840FFED59}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{E36D07D7-7B4C-47C7-877D-6884A690DD95}],@DisplayName=Google
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{E4283766-E014-4C84-9C3D-1BB155DBCE20}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{E7D68B61-B680-4BB4-996D-888F605C7F35}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{E88C36C3-304F-47F2-A82C-A66F3387F9D9}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{E904A88C-646C-4A28-AC72-EC6AE18249BB}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{E9A549BA-3C82-4AE1-89AF-7F941B46C3EB}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{EE22A2DB-470D-43D7-9133-A7AA80E6D699}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{EF8BB798-338C-435B-B8EA-15A1E368B16D}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{EF93768D-5B9C-45DF-B1D1-3591AA9617B7}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{F0969F3F-1EAD-45A8-9B4D-D098EB2924F5}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{F1AE81FB-2EF1-4442-A987-53B4D5B07601}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{F544651D-A8FD-4AA8-88CE-CEB73D3D93CF}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{F680CFC6-BF77-4F17-8B23-1ACF9A43764D}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{F6DC5CEF-B8C9-46F4-A2AE-60CCE591A44E}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{F7591E29-5A26-4CD8-A9C5-9420B6F3B0F5}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{F86C70DF-8272-423C-980F-2203D4DC645A}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{F9E64242-3509-4B67-81C0-94B61C482EF3}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{FBA5D847-4E0B-41EB-B9C2-914FF0A3C2D8}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-21-2874080176-798181569-1004335510-1011\..\SearchScopes\{FC14E538-E1D2-415E-B716-7185DF26016E}],@DisplayName=Live Search
[HKCU\..\SearchScopes],@DefaultScope={E36D07D7-7B4C-47C7-877D-6884A690DD95}
[HKCU\..\SearchScopes\${searchCLSID}],@DisplayName=@ieframe.dll,-12512
[HKCU\..\SearchScopes\{002BDC20-67FB-4341-8CA6-79CE932F1F89}],@DisplayName=Live Search
[HKCU\..\SearchScopes\{0046D14F-A35D-44C4-B96C-B64BA57833E4}],@DisplayName=Live Search
[HKCU\..\SearchScopes\{010B3045-F8B0-4956-A168-33FE4AFF2B4A}],@DisplayName=Google
[HKCU\..\SearchScopes\{01151F17-403D-43E8-8C57-2C9C29D09232}],@DisplayName=Google
[HKCU\..\SearchScopes\{01184852-B413-49A4-A7E4-9458D7EEC982}],@DisplayName=Google
[HKCU\..\SearchScopes\{013E0CC0-6CED-4BD5-9569-F6B237BFD2B0}],@DisplayName=Live Search
[HKCU\..\SearchScopes\{0150A648-6385-4E89-8198-83D7138CD487}],@DisplayName=Live Search
[HKCU\..\SearchScopes\{0173D52B-2A32-4E4B-BEC4-1AB5265E1E18}],@DisplayName=Live Search
[HKCU\..\SearchScopes\{01EAD152-589F-4F84-BACA-
oulala
-----\\ Option 2
Relance Yoog_Fix de Batch_Man et choisis l'option 2 ( Suppression )
Attend que la suppression se finisse.
Ensuite appuis sur une touche, un rapport s'ouvre.
Poste-le dans ta prochaine réponse.
PS-2: S'il ne s'ouvre pas le rapport est à la racine de ton disque sous le nom de Yoog_Fix.txt
-----\\ Option 2
Relance Yoog_Fix de Batch_Man et choisis l'option 2 ( Suppression )
Attend que la suppression se finisse.
Ensuite appuis sur une touche, un rapport s'ouvre.
Poste-le dans ta prochaine réponse.
PS-2: S'il ne s'ouvre pas le rapport est à la racine de ton disque sous le nom de Yoog_Fix.txt
Yoog_Fix 2.02 de Batch_Man
Debut a 18:42 le 17/05/2009
Microsoft Windows XP Home Edition (5.1.2600) Service Pack 3
Internet Explorer 7.0.5730.13
Mozilla Firefox 3.0.10 (fr)
Symantec Corporation 2005 (Not activated)
ALWIL Software 4.7.1098 (Activated)
Symantec Corporation 2005 (Activated)
A:\ [Removable] (Total:0 Mo/Free:0 Mo)
C:\ [Fixed] - NTFS - (Total:30710 Mo/Free:1925 Mo)
D:\ [Fixed] - NTFS - (Total:152068 Mo/Free:1112 Mo)
E:\ [CD-Rom] (Total:0 Mo/Free:0 Mo)
F:\ [Removable] (Total:0 Mo/Free:0 Mo)
G:\ [Removable] (Total:0 Mo/Free:0 Mo)
H:\ [Removable] (Total:0 Mo/Free:0 Mo)
I:\ [Removable] (Total:0 Mo/Free:0 Mo)
J:\ [Removable] (Total:0 Mo/Free:0 Mo)
Option 1 [2] Suppression
+---------------\\ Suppression
----------\\ Suppression dans de fichiers
----------\\ Suppression dans prefs.js et user.js
----------\\ Suppression dans le registre
----------\\ Fichiers temporaires
celui la il est plus court
Debut a 18:42 le 17/05/2009
Microsoft Windows XP Home Edition (5.1.2600) Service Pack 3
Internet Explorer 7.0.5730.13
Mozilla Firefox 3.0.10 (fr)
Symantec Corporation 2005 (Not activated)
ALWIL Software 4.7.1098 (Activated)
Symantec Corporation 2005 (Activated)
A:\ [Removable] (Total:0 Mo/Free:0 Mo)
C:\ [Fixed] - NTFS - (Total:30710 Mo/Free:1925 Mo)
D:\ [Fixed] - NTFS - (Total:152068 Mo/Free:1112 Mo)
E:\ [CD-Rom] (Total:0 Mo/Free:0 Mo)
F:\ [Removable] (Total:0 Mo/Free:0 Mo)
G:\ [Removable] (Total:0 Mo/Free:0 Mo)
H:\ [Removable] (Total:0 Mo/Free:0 Mo)
I:\ [Removable] (Total:0 Mo/Free:0 Mo)
J:\ [Removable] (Total:0 Mo/Free:0 Mo)
Option 1 [2] Suppression
+---------------\\ Suppression
----------\\ Suppression dans de fichiers
----------\\ Suppression dans prefs.js et user.js
----------\\ Suppression dans le registre
----------\\ Fichiers temporaires
celui la il est plus court
1) Télécharge SDFix d' AndyManchesta
http://downloads.andymanchesta.com/RemovalTools/SDFix.exe sur ton Bureau.
Double clique sur SDFix.exe et choisis Install. L'outil sera extrait à la racine du lecteur système (généralement le C:\)
N y touche pas pour l instant.
2) Redémarre en mode sans échec (Pour cela, tu tapotes la touche F8 dès le début de l’allumage du PC sans t’arrêter)
Ne jamais démarrer en mode sans échec via msconfig
3) SDFix
* Ouvre le dossier SDFix qui vient d'être créé dans le répertoire C:\ et double clique sur RunThis.bat pour lancer le script.
* Appuie sur Y pour commencer le processus de nettoyage.
* Il va supprimer les services et les entrées du Registre de certains trojans trouvés puis te demandera d'appuyer sur une touche pour redémarrer.
* Appuie sur une touche pour redémarrer le PC.
* Ton système sera plus long pour redémarrer qu'à l'accoutumée car l'outil va continuer à s'exécuter et supprimer des fichiers.
* Après le chargement du Bureau, l'outil terminera son travail et affichera Finished.
* Appuie sur une touche pour finir l'exécution du script et charger les icônes de ton Bureau.
· Les icônes du Bureau affichées, le rapport SDFix s'ouvrira à l'écran et s'enregistrera aussi dans le dossier SDFix sous le nom Report.txt.
http://downloads.andymanchesta.com/RemovalTools/SDFix.exe sur ton Bureau.
Double clique sur SDFix.exe et choisis Install. L'outil sera extrait à la racine du lecteur système (généralement le C:\)
N y touche pas pour l instant.
2) Redémarre en mode sans échec (Pour cela, tu tapotes la touche F8 dès le début de l’allumage du PC sans t’arrêter)
Ne jamais démarrer en mode sans échec via msconfig
3) SDFix
* Ouvre le dossier SDFix qui vient d'être créé dans le répertoire C:\ et double clique sur RunThis.bat pour lancer le script.
* Appuie sur Y pour commencer le processus de nettoyage.
* Il va supprimer les services et les entrées du Registre de certains trojans trouvés puis te demandera d'appuyer sur une touche pour redémarrer.
* Appuie sur une touche pour redémarrer le PC.
* Ton système sera plus long pour redémarrer qu'à l'accoutumée car l'outil va continuer à s'exécuter et supprimer des fichiers.
* Après le chargement du Bureau, l'outil terminera son travail et affichera Finished.
* Appuie sur une touche pour finir l'exécution du script et charger les icônes de ton Bureau.
· Les icônes du Bureau affichées, le rapport SDFix s'ouvrira à l'écran et s'enregistrera aussi dans le dossier SDFix sous le nom Report.txt.
[b]SDFix: Version 1.240 [/b]
Run by C‚cile on 17/05/2009 at 19:15
Microsoft Windows XP [version 5.1.2600]
Running From: C:\SDFix
[b]Checking Services [/b]:
Restoring Default Security Values
Restoring Default Hosts File
Rebooting
[b]Checking Files [/b]:
No Trojan Files Found
Removing Temp Files
[b]ADS Check [/b]:
[b]Final Check [/b]:
catchme 0.3.1361.2 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-05-17 19:25:10
Windows 5.1.2600 Service Pack 3 NTFS
scanning hidden processes ...
scanning hidden services & system hive ...
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_4F166E45E07A7E201BF9C46BFEF818C9]
"NextInstance"=dword:00000001
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_4F166E45E07A7E201BF9C46BFEF818C9\0000]
"Service"="4f166e45e07a7e201bf9c46bfef818c9"
"Legacy"=dword:00000001
"ConfigFlags"=dword:00000000
"Class"="LegacyDriver"
"ClassGUID"="{8ECC055D-047F-11D1-A537-0000F8753ED1}"
"DeviceDesc"="4f166e45e07a7e201bf9c46bfef818c9"
"Capabilities"=dword:00000000
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\4f166e45e07a7e201bf9c46bfef818c9]
"c"="®istry_path=\REGISTRY\MACHINE\SYSTEM\ControlSet002\Services\4f166e45e07a7e201bf9c46bfef818c9&download_period=846000&first_download_delay=180&version=2&ip_0=586742989&port_0=7000&max_fails_0=5&ip_1=704183501&port_1=8300&max_fails_1=5&ip_2=2241985741&port_2=9002&max_fails_2=2&ip_3=1512966353&port_3=11234&max_fails_3=2&ips_count=4&name=4f166e45e07a7e201bf9c46bfef818c9&path=system32\4f166e45e07a7e201bf9c46bfef818c9.sys&wmid=Dkx003&idate=2009-03-02 01:57:06:288&last_download_time=2009-5-13 7:40:28.248&first_skip=1&last_update_ip_pos=0"
"Type"=dword:00000001
"Start"=dword:00000000
"ErrorControl"=dword:00000000
"Tag"=dword:00000001
"ImagePath"=str(2):"system32\4f166e45e07a7e201bf9c46bfef818c9.sys"
"DisplayName"="4f166e45e07a7e201bf9c46bfef818c9"
"Group"="rnbpsjl"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\4f166e45e07a7e201bf9c46bfef818c9\Security]
"Security"=hex:01,00,14,80,90,00,00,00,9c,00,00,00,14,00,00,00,30,00,00,00,02,..
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet004\Enum\Root\LEGACY_4F166E45E07A7E201BF9C46BFEF818C9]
"NextInstance"=dword:00000001
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet004\Enum\Root\LEGACY_4F166E45E07A7E201BF9C46BFEF818C9\0000]
"Service"="4f166e45e07a7e201bf9c46bfef818c9"
"Legacy"=dword:00000001
"ConfigFlags"=dword:00000000
"Class"="LegacyDriver"
"ClassGUID"="{8ECC055D-047F-11D1-A537-0000F8753ED1}"
"DeviceDesc"="4f166e45e07a7e201bf9c46bfef818c9"
"Capabilities"=dword:00000000
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet004\Services\4f166e45e07a7e201bf9c46bfef818c9]
"c"="®istry_path=\REGISTRY\MACHINE\SYSTEM\ControlSet002\Services\4f166e45e07a7e201bf9c46bfef818c9&download_period=846000&first_download_delay=180&version=2&ip_0=586742989&port_0=7000&max_fails_0=5&ip_1=704183501&port_1=8300&max_fails_1=5&ip_2=2241985741&port_2=9002&max_fails_2=2&ip_3=1512966353&port_3=11234&max_fails_3=2&ips_count=4&name=4f166e45e07a7e201bf9c46bfef818c9&path=system32\4f166e45e07a7e201bf9c46bfef818c9.sys&wmid=Dkx003&idate=2009-03-02 01:57:06:288&last_download_time=2009-5-13 7:40:28.248&first_skip=1&last_update_ip_pos=0"
"Type"=dword:00000001
"Start"=dword:00000000
"ErrorControl"=dword:00000000
"Tag"=dword:00000001
"ImagePath"=str(2):"system32\4f166e45e07a7e201bf9c46bfef818c9.sys"
"DisplayName"="4f166e45e07a7e201bf9c46bfef818c9"
"Group"="rnbpsjl"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet004\Services\4f166e45e07a7e201bf9c46bfef818c9\Security]
"Security"=hex:01,00,14,80,90,00,00,00,9c,00,00,00,14,00,00,00,30,00,00,00,02,..
scanning hidden registry entries ...
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
"Blud"="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"
scanning hidden files ...
C:\WINDOWS\system32\4f166e45e07a7e201bf9c46bfef818c9.sys 39936 bytes executable
C:\WINDOWS\system32\_4f166e45e07a7e201bf9c46bfef818c9.sys_.vir 39936 bytes executable
folder error: D:\Documents and Settings\Cécile
[b]Remaining Services [/b]:
Authorized Application Key Export:
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%ProgramFiles%\\AOL 9.0\\aol.exe"="%ProgramFiles%\\AOL 9.0\\aol.exe:*:Enabled:AOL"
"%ProgramFiles%\\UBISOFT\\Splinter Cell Pandora Tomorrow\\logo_ubi.exe"="%ProgramFiles%\\UBISOFT\\Splinter Cell Pandora Tomorrow\\logo_ubi.exe:*:Enabled:SPLINTER CELL PANDORA"
"%ProgramFiles%\\UBISOFT\\Splinter Cell Pandora Tomorrow\\pandora.exe"="%ProgramFiles%\\UBISOFT\\Splinter Cell Pandora Tomorrow\\pandora.exe:*:Enabled:PANDORA"
"%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\\APPS\\Inventime\\my.exe"="C:\\APPS\\Inventime\\my.exe:*:Enabled:INVENTIME"
"C:\\Program Files\\Messenger\\msmsgs.exe"="C:\\Program Files\\Messenger\\msmsgs.exe:*:Enabled:Windows Messenger"
"C:\\Program Files\\LimeWire\\LimeWire.exe"="C:\\Program Files\\LimeWire\\LimeWire.exe:*:Enabled:LimeWire"
"%windir%\\Network Diagnostic\\xpnetdiag.exe"="%windir%\\Network Diagnostic\\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\\APPS\\skype\\phone\\Skype.exe"="C:\\APPS\\skype\\phone\\Skype.exe:*:Enabled:Skype"
"C:\\Program Files\\iTunes\\iTunes.exe"="C:\\Program Files\\iTunes\\iTunes.exe:*:Enabled:iTunes"
"C:\\Program Files\\Windows Live\\Messenger\\wlcsdk.exe"="C:\\Program Files\\Windows Live\\Messenger\\wlcsdk.exe:*:Enabled:Windows Live Call"
"C:\\Program Files\\Windows Live\\Sync\\WindowsLiveSync.exe"="C:\\Program Files\\Windows Live\\Sync\\WindowsLiveSync.exe:*:Enabled:Windows Live Sync"
"C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"="C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe:*:Enabled:Windows Live Messenger"
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\\Program Files\\AOL 9.0\\waol.exe"="C:\\Program Files\\AOL 9.0\\waol.exe:*:Enabled:AOL 9.0"
"%windir%\\Network Diagnostic\\xpnetdiag.exe"="%windir%\\Network Diagnostic\\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\\Program Files\\Windows Live\\Messenger\\wlcsdk.exe"="C:\\Program Files\\Windows Live\\Messenger\\wlcsdk.exe:*:Enabled:Windows Live Call"
"C:\\Program Files\\Windows Live\\Sync\\WindowsLiveSync.exe"="C:\\Program Files\\Windows Live\\Sync\\WindowsLiveSync.exe:*:Enabled:Windows Live Sync"
"C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"="C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe:*:Enabled:Windows Live Messenger"
[b]Remaining Files [/b]:
[b]Files with Hidden Attributes [/b]:
Wed 14 Dec 2005 215 ..SH. --- "C:\BOOT.BAK"
Mon 14 Apr 2008 1,695,232 ..SH. --- "C:\Program Files\Messenger\msmsgs.exe"
Mon 15 Sep 2008 1,562,960 A.SHR --- "C:\Program Files\Spybot - Search & Destroy\SDHelper.dll"
Wed 22 Oct 2008 962,896 A.SHR --- "C:\Program Files\Spybot - Search & Destroy\Tools.dll"
Tue 31 May 2005 106,496 A..H. --- "C:\Program Files\Fichiers communs\aolshare\shell\fr\shellext.dll"
[b]Finished![/b]
Run by C‚cile on 17/05/2009 at 19:15
Microsoft Windows XP [version 5.1.2600]
Running From: C:\SDFix
[b]Checking Services [/b]:
Restoring Default Security Values
Restoring Default Hosts File
Rebooting
[b]Checking Files [/b]:
No Trojan Files Found
Removing Temp Files
[b]ADS Check [/b]:
[b]Final Check [/b]:
catchme 0.3.1361.2 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-05-17 19:25:10
Windows 5.1.2600 Service Pack 3 NTFS
scanning hidden processes ...
scanning hidden services & system hive ...
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_4F166E45E07A7E201BF9C46BFEF818C9]
"NextInstance"=dword:00000001
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_4F166E45E07A7E201BF9C46BFEF818C9\0000]
"Service"="4f166e45e07a7e201bf9c46bfef818c9"
"Legacy"=dword:00000001
"ConfigFlags"=dword:00000000
"Class"="LegacyDriver"
"ClassGUID"="{8ECC055D-047F-11D1-A537-0000F8753ED1}"
"DeviceDesc"="4f166e45e07a7e201bf9c46bfef818c9"
"Capabilities"=dword:00000000
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\4f166e45e07a7e201bf9c46bfef818c9]
"c"="®istry_path=\REGISTRY\MACHINE\SYSTEM\ControlSet002\Services\4f166e45e07a7e201bf9c46bfef818c9&download_period=846000&first_download_delay=180&version=2&ip_0=586742989&port_0=7000&max_fails_0=5&ip_1=704183501&port_1=8300&max_fails_1=5&ip_2=2241985741&port_2=9002&max_fails_2=2&ip_3=1512966353&port_3=11234&max_fails_3=2&ips_count=4&name=4f166e45e07a7e201bf9c46bfef818c9&path=system32\4f166e45e07a7e201bf9c46bfef818c9.sys&wmid=Dkx003&idate=2009-03-02 01:57:06:288&last_download_time=2009-5-13 7:40:28.248&first_skip=1&last_update_ip_pos=0"
"Type"=dword:00000001
"Start"=dword:00000000
"ErrorControl"=dword:00000000
"Tag"=dword:00000001
"ImagePath"=str(2):"system32\4f166e45e07a7e201bf9c46bfef818c9.sys"
"DisplayName"="4f166e45e07a7e201bf9c46bfef818c9"
"Group"="rnbpsjl"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\4f166e45e07a7e201bf9c46bfef818c9\Security]
"Security"=hex:01,00,14,80,90,00,00,00,9c,00,00,00,14,00,00,00,30,00,00,00,02,..
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet004\Enum\Root\LEGACY_4F166E45E07A7E201BF9C46BFEF818C9]
"NextInstance"=dword:00000001
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet004\Enum\Root\LEGACY_4F166E45E07A7E201BF9C46BFEF818C9\0000]
"Service"="4f166e45e07a7e201bf9c46bfef818c9"
"Legacy"=dword:00000001
"ConfigFlags"=dword:00000000
"Class"="LegacyDriver"
"ClassGUID"="{8ECC055D-047F-11D1-A537-0000F8753ED1}"
"DeviceDesc"="4f166e45e07a7e201bf9c46bfef818c9"
"Capabilities"=dword:00000000
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet004\Services\4f166e45e07a7e201bf9c46bfef818c9]
"c"="®istry_path=\REGISTRY\MACHINE\SYSTEM\ControlSet002\Services\4f166e45e07a7e201bf9c46bfef818c9&download_period=846000&first_download_delay=180&version=2&ip_0=586742989&port_0=7000&max_fails_0=5&ip_1=704183501&port_1=8300&max_fails_1=5&ip_2=2241985741&port_2=9002&max_fails_2=2&ip_3=1512966353&port_3=11234&max_fails_3=2&ips_count=4&name=4f166e45e07a7e201bf9c46bfef818c9&path=system32\4f166e45e07a7e201bf9c46bfef818c9.sys&wmid=Dkx003&idate=2009-03-02 01:57:06:288&last_download_time=2009-5-13 7:40:28.248&first_skip=1&last_update_ip_pos=0"
"Type"=dword:00000001
"Start"=dword:00000000
"ErrorControl"=dword:00000000
"Tag"=dword:00000001
"ImagePath"=str(2):"system32\4f166e45e07a7e201bf9c46bfef818c9.sys"
"DisplayName"="4f166e45e07a7e201bf9c46bfef818c9"
"Group"="rnbpsjl"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet004\Services\4f166e45e07a7e201bf9c46bfef818c9\Security]
"Security"=hex:01,00,14,80,90,00,00,00,9c,00,00,00,14,00,00,00,30,00,00,00,02,..
scanning hidden registry entries ...
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
"Blud"="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"
scanning hidden files ...
C:\WINDOWS\system32\4f166e45e07a7e201bf9c46bfef818c9.sys 39936 bytes executable
C:\WINDOWS\system32\_4f166e45e07a7e201bf9c46bfef818c9.sys_.vir 39936 bytes executable
folder error: D:\Documents and Settings\Cécile
[b]Remaining Services [/b]:
Authorized Application Key Export:
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%ProgramFiles%\\AOL 9.0\\aol.exe"="%ProgramFiles%\\AOL 9.0\\aol.exe:*:Enabled:AOL"
"%ProgramFiles%\\UBISOFT\\Splinter Cell Pandora Tomorrow\\logo_ubi.exe"="%ProgramFiles%\\UBISOFT\\Splinter Cell Pandora Tomorrow\\logo_ubi.exe:*:Enabled:SPLINTER CELL PANDORA"
"%ProgramFiles%\\UBISOFT\\Splinter Cell Pandora Tomorrow\\pandora.exe"="%ProgramFiles%\\UBISOFT\\Splinter Cell Pandora Tomorrow\\pandora.exe:*:Enabled:PANDORA"
"%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\\APPS\\Inventime\\my.exe"="C:\\APPS\\Inventime\\my.exe:*:Enabled:INVENTIME"
"C:\\Program Files\\Messenger\\msmsgs.exe"="C:\\Program Files\\Messenger\\msmsgs.exe:*:Enabled:Windows Messenger"
"C:\\Program Files\\LimeWire\\LimeWire.exe"="C:\\Program Files\\LimeWire\\LimeWire.exe:*:Enabled:LimeWire"
"%windir%\\Network Diagnostic\\xpnetdiag.exe"="%windir%\\Network Diagnostic\\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\\APPS\\skype\\phone\\Skype.exe"="C:\\APPS\\skype\\phone\\Skype.exe:*:Enabled:Skype"
"C:\\Program Files\\iTunes\\iTunes.exe"="C:\\Program Files\\iTunes\\iTunes.exe:*:Enabled:iTunes"
"C:\\Program Files\\Windows Live\\Messenger\\wlcsdk.exe"="C:\\Program Files\\Windows Live\\Messenger\\wlcsdk.exe:*:Enabled:Windows Live Call"
"C:\\Program Files\\Windows Live\\Sync\\WindowsLiveSync.exe"="C:\\Program Files\\Windows Live\\Sync\\WindowsLiveSync.exe:*:Enabled:Windows Live Sync"
"C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"="C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe:*:Enabled:Windows Live Messenger"
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\\Program Files\\AOL 9.0\\waol.exe"="C:\\Program Files\\AOL 9.0\\waol.exe:*:Enabled:AOL 9.0"
"%windir%\\Network Diagnostic\\xpnetdiag.exe"="%windir%\\Network Diagnostic\\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\\Program Files\\Windows Live\\Messenger\\wlcsdk.exe"="C:\\Program Files\\Windows Live\\Messenger\\wlcsdk.exe:*:Enabled:Windows Live Call"
"C:\\Program Files\\Windows Live\\Sync\\WindowsLiveSync.exe"="C:\\Program Files\\Windows Live\\Sync\\WindowsLiveSync.exe:*:Enabled:Windows Live Sync"
"C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"="C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe:*:Enabled:Windows Live Messenger"
[b]Remaining Files [/b]:
[b]Files with Hidden Attributes [/b]:
Wed 14 Dec 2005 215 ..SH. --- "C:\BOOT.BAK"
Mon 14 Apr 2008 1,695,232 ..SH. --- "C:\Program Files\Messenger\msmsgs.exe"
Mon 15 Sep 2008 1,562,960 A.SHR --- "C:\Program Files\Spybot - Search & Destroy\SDHelper.dll"
Wed 22 Oct 2008 962,896 A.SHR --- "C:\Program Files\Spybot - Search & Destroy\Tools.dll"
Tue 31 May 2005 106,496 A..H. --- "C:\Program Files\Fichiers communs\aolshare\shell\fr\shellext.dll"
[b]Finished![/b]
salut
télécharge OTMoveIt
http://oldtimer.geekstogo.com/OTMoveIt3.exe (de Old_Timer) sur ton Bureau.
double-clique sur OTMoveIt.exe pour le lancer.
copie la liste qui se trouve en citation ci-dessous,
et colle-la dans le cadre de gauche de OTMoveIt :Paste instruction for items to be moved.
:processes
explorer.exe
:services
TesSafe
Machnm32
Machnm32 Driver
MEMSWEEP2
:files
C:\WINDOWS\System32\TesSafe.sys
c:\windows\system32\TesSafe.sys
c:\program files\Oberon Media
c:\windows\system32\Machnm32.sys
c:\windows\system32\13.tmp
:reg
[-HKEY_LOCAL_MACHINE\System\ControlSet004\Services\MEMSWEEP2]
"ImagePath"="\??\c:\windows\system32\13.tmp"
[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_HOOKSYS]
[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_HOOKSYS]
[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet004\Enum\Root\LEGACY_HOOKSYS]
[-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_HOOKSYS]
:commands
[purity]
[emptytemp]
[start explorer]
clique sur MoveIt! pour lancer la suppression.
le résultat apparaitra dans le cadre "Results".
clique sur Exit pour fermer.
poste le rapport situé dans C:\_OTMoveIt\MovedFiles.
il te sera peut-être demander de redémarrer le pc pour achever la suppression.si c'est le cas accepte par Yes.
télécharge OTMoveIt
http://oldtimer.geekstogo.com/OTMoveIt3.exe (de Old_Timer) sur ton Bureau.
double-clique sur OTMoveIt.exe pour le lancer.
copie la liste qui se trouve en citation ci-dessous,
et colle-la dans le cadre de gauche de OTMoveIt :Paste instruction for items to be moved.
:processes
explorer.exe
:services
TesSafe
Machnm32
Machnm32 Driver
MEMSWEEP2
:files
C:\WINDOWS\System32\TesSafe.sys
c:\windows\system32\TesSafe.sys
c:\program files\Oberon Media
c:\windows\system32\Machnm32.sys
c:\windows\system32\13.tmp
:reg
[-HKEY_LOCAL_MACHINE\System\ControlSet004\Services\MEMSWEEP2]
"ImagePath"="\??\c:\windows\system32\13.tmp"
[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_HOOKSYS]
[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_HOOKSYS]
[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet004\Enum\Root\LEGACY_HOOKSYS]
[-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_HOOKSYS]
:commands
[purity]
[emptytemp]
[start explorer]
clique sur MoveIt! pour lancer la suppression.
le résultat apparaitra dans le cadre "Results".
clique sur Exit pour fermer.
poste le rapport situé dans C:\_OTMoveIt\MovedFiles.
il te sera peut-être demander de redémarrer le pc pour achever la suppression.si c'est le cas accepte par Yes.
****************************************************
/!\ Manip crée spécialement pour cet utilisateur , ne pas reproduire chez soi ... /!\
Ouvre le Bloc-Notes (Démarrer\Tous les programmes\Accessoires\Bloc notes.)
Copie ce texte ( en gras )d'une traite ( CTRL+C pour copier ) puis colle-le ( CTRL+V dans le bloc-note )
File::
c:\windows\system32\bbbeadce.dll
c:\windows\system32\bdbcaacebddb.dll
c:\windows\system32\f07e8262-d31b-cd8e-2d10-881fafc69c8c.exe
c:\windows\system32\88ee5dc43b600b4bfe4a4eb4b223400c.exe
c:\windows\system32\drivers\klbhmfvi.sys
Driver::
klbhmfvi.sys
Registry::
[HKEY_LOCAL_MACHINE\System\ControlSet002\Services\4f166e45e07a7e201bf9c46bfef818c9]
"ImagePath"=-
Sauvegarde ce fichier sur ton bureau sous le nom de CFScript.txt.
Glisse maintenant le fichier CFScript.txt dans Combofix.exe comme ci-dessous :
http://img.photobucket.com/albums/v666/sUBs/CFScriptB-4.gif
Cela va relancer Combofix,
Une fenêtre bleue va apparaître: au message qui apparaît ( Type 1 to continue, or 2 to abort) , tape 1 puis valide.
Patiente le temps du scan.Le bureau va disparaître à plusieurs reprises: c'est normal!
Ne touche à rien tant que le scan n'est pas terminé.
Après redémarrage, poste le contenu du rapport Combofix.txt accompagné d'un rapport Hijackthis.
S'il n'y a pas de redémarrage, poste quand même les rapports.
****************************************************
Par Manque De Curiosité On Risque De Mourir Ignorant;Tu es libre de penser que tu es C..,
Mais C.. de penser que tu es libre...Merci a australe13
/!\ Manip crée spécialement pour cet utilisateur , ne pas reproduire chez soi ... /!\
Ouvre le Bloc-Notes (Démarrer\Tous les programmes\Accessoires\Bloc notes.)
Copie ce texte ( en gras )d'une traite ( CTRL+C pour copier ) puis colle-le ( CTRL+V dans le bloc-note )
File::
c:\windows\system32\bbbeadce.dll
c:\windows\system32\bdbcaacebddb.dll
c:\windows\system32\f07e8262-d31b-cd8e-2d10-881fafc69c8c.exe
c:\windows\system32\88ee5dc43b600b4bfe4a4eb4b223400c.exe
c:\windows\system32\drivers\klbhmfvi.sys
Driver::
klbhmfvi.sys
Registry::
[HKEY_LOCAL_MACHINE\System\ControlSet002\Services\4f166e45e07a7e201bf9c46bfef818c9]
"ImagePath"=-
Sauvegarde ce fichier sur ton bureau sous le nom de CFScript.txt.
Glisse maintenant le fichier CFScript.txt dans Combofix.exe comme ci-dessous :
http://img.photobucket.com/albums/v666/sUBs/CFScriptB-4.gif
Cela va relancer Combofix,
Une fenêtre bleue va apparaître: au message qui apparaît ( Type 1 to continue, or 2 to abort) , tape 1 puis valide.
Patiente le temps du scan.Le bureau va disparaître à plusieurs reprises: c'est normal!
Ne touche à rien tant que le scan n'est pas terminé.
Après redémarrage, poste le contenu du rapport Combofix.txt accompagné d'un rapport Hijackthis.
S'il n'y a pas de redémarrage, poste quand même les rapports.
****************************************************
Par Manque De Curiosité On Risque De Mourir Ignorant;Tu es libre de penser que tu es C..,
Mais C.. de penser que tu es libre...Merci a australe13
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 22:06:46, on 18/05/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16827)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
c:\APPS\Powercinema\Kernel\TV\CLCapSvc.exe
C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLServer.exe
c:\APPS\HIDSERVICE\HIDSERVICE.exe
C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLService.exe
C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe
c:\APPS\Powercinema\Kernel\TV\CLSched.exe
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
C:\Program Files\ScanSoft\PaperPort\pptd40nt.exe
C:\Program Files\Brother\Brmfcmon\BrMfcWnd.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\WINDOWS\system32\ctfmon.exe
D:\Documents and Settings\Cécile\Application Data\Microsoft\Notification de cadeaux MSN\lsnfier.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Brother\Brmfcmon\BrMfcmon.exe
C:\WINDOWS\explorer.exe
C:\WINDOWS\system32\notepad.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Windows Live\Contacts\wlcomm.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Windows Live\Toolbar\wltuser.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,SearchAssistant = http://www.crawler.com/search/ie.aspx?tb_id=61005
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,CustomizeSearch = http://dnl.crawler.com/support/sa_customize.aspx?TbId=61005
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SearchHelper.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: (no name) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - (no file)
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.3572\swg.dll
O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O3 - Toolbar: (no name) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - (no file)
O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [PaperPort PTD] "C:\Program Files\ScanSoft\PaperPort\pptd40nt.exe"
O4 - HKLM\..\Run: [IndexSearch] "C:\Program Files\ScanSoft\PaperPort\IndexSearch.exe"
O4 - HKLM\..\Run: [PPort11reminder] "C:\Program Files\ScanSoft\PaperPort\Ereg\Ereg.exe" -r "D:\Documents and Settings\All Users\Application Data\ScanSoft\PaperPort\11\Config\Ereg\Ereg.ini
O4 - HKLM\..\Run: [BrMfcWnd] C:\Program Files\Brother\Brmfcmon\BrMfcWnd.exe /AUTORUN
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [Ad-Watch] C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [NBJ] "C:\Program Files\Ahead\Nero BackItUp\NBJ.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: Notification de cadeaux MSN.lnk = ?
O8 - Extra context menu item: Add to Windows &Live Favorites - https://onedrive.live.com/?id=favorites
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_02\bin\npjpi150_02.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_02\bin\npjpi150_02.dll
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.dll
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan_fr/scan8/oscan8.cab
O23 - Service: AOL Connectivity Service (AOL ACS) - America Online, Inc. - C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: Service Bonjour (Bonjour Service) - Unknown owner - C:\Program Files\Bonjour\mDNSResponder.exe (file missing)
O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - c:\APPS\Powercinema\Kernel\TV\CLCapSvc.exe
O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - c:\APPS\Powercinema\Kernel\TV\CLSched.exe
O23 - Service: CyberLink Media Library Service - Cyberlink - C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLServer.exe
O23 - Service: Generic Service for HID Keyboard Input Collections (GenericHidService) - Unknown owner - c:\APPS\HIDSERVICE\HIDSERVICE.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Lavasoft Ad-Aware Service - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe
O23 - Service: TuneUp Drive Defrag Service (TuneUp.Defrag) - TuneUp Software GmbH - C:\WINDOWS\System32\TuneUpDefragService.exe
O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe
Scan saved at 22:06:46, on 18/05/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16827)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
c:\APPS\Powercinema\Kernel\TV\CLCapSvc.exe
C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLServer.exe
c:\APPS\HIDSERVICE\HIDSERVICE.exe
C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLService.exe
C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe
c:\APPS\Powercinema\Kernel\TV\CLSched.exe
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
C:\Program Files\ScanSoft\PaperPort\pptd40nt.exe
C:\Program Files\Brother\Brmfcmon\BrMfcWnd.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\WINDOWS\system32\ctfmon.exe
D:\Documents and Settings\Cécile\Application Data\Microsoft\Notification de cadeaux MSN\lsnfier.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Brother\Brmfcmon\BrMfcmon.exe
C:\WINDOWS\explorer.exe
C:\WINDOWS\system32\notepad.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Windows Live\Contacts\wlcomm.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Windows Live\Toolbar\wltuser.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,SearchAssistant = http://www.crawler.com/search/ie.aspx?tb_id=61005
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,CustomizeSearch = http://dnl.crawler.com/support/sa_customize.aspx?TbId=61005
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SearchHelper.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: (no name) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - (no file)
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.3572\swg.dll
O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O3 - Toolbar: (no name) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - (no file)
O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [PaperPort PTD] "C:\Program Files\ScanSoft\PaperPort\pptd40nt.exe"
O4 - HKLM\..\Run: [IndexSearch] "C:\Program Files\ScanSoft\PaperPort\IndexSearch.exe"
O4 - HKLM\..\Run: [PPort11reminder] "C:\Program Files\ScanSoft\PaperPort\Ereg\Ereg.exe" -r "D:\Documents and Settings\All Users\Application Data\ScanSoft\PaperPort\11\Config\Ereg\Ereg.ini
O4 - HKLM\..\Run: [BrMfcWnd] C:\Program Files\Brother\Brmfcmon\BrMfcWnd.exe /AUTORUN
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [Ad-Watch] C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [NBJ] "C:\Program Files\Ahead\Nero BackItUp\NBJ.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: Notification de cadeaux MSN.lnk = ?
O8 - Extra context menu item: Add to Windows &Live Favorites - https://onedrive.live.com/?id=favorites
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_02\bin\npjpi150_02.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_02\bin\npjpi150_02.dll
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.dll
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan_fr/scan8/oscan8.cab
O23 - Service: AOL Connectivity Service (AOL ACS) - America Online, Inc. - C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: Service Bonjour (Bonjour Service) - Unknown owner - C:\Program Files\Bonjour\mDNSResponder.exe (file missing)
O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - c:\APPS\Powercinema\Kernel\TV\CLCapSvc.exe
O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - c:\APPS\Powercinema\Kernel\TV\CLSched.exe
O23 - Service: CyberLink Media Library Service - Cyberlink - C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLServer.exe
O23 - Service: Generic Service for HID Keyboard Input Collections (GenericHidService) - Unknown owner - c:\APPS\HIDSERVICE\HIDSERVICE.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Lavasoft Ad-Aware Service - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe
O23 - Service: TuneUp Drive Defrag Service (TuneUp.Defrag) - TuneUp Software GmbH - C:\WINDOWS\System32\TuneUpDefragService.exe
O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe