Win 32 n'est pas une entrée valide

Résolu
antho60430 Messages postés 80 Statut Membre -  
moment de grace Messages postés 29099 Date d'inscription   Statut Contributeur sécurité Dernière intervention   -
Bonjour, depuis 3 jours je n'arrive plus a lancer d'exe telecharger depuis internet(il me marque exe n'est pas une application Win 32 valide) ;par contre jarrive a les lancer si je les telecharge via un autre ordinateur et les mets sur cle usb.
Ceci depuis que jai lancer un patch pour nod 32 , ce patch ma aussi desactiver mon nod 32 precedent donc je pense que ca vient de la.
Jai besoin de votre aide merci. car je pense que c'est le virus bagle merci de me répondre

77 réponses

  • 1
  • 2
  • 3
  • 4
Résumé de la discussion

Un problème persiste pour lancer des exécutables EXE téléchargés sur Internet, avec le message 'EXE n'est pas une application Win32 valide' après un patch de NOD32 et la désactivation d'un antivirus. Plusieurs hypothèses évoquent une incompatibilité due au patch ou une contamination par un cheval de Troie comme Bagle, expliquant l'impossibilité d'exécuter des EXE et les risques pour l'ordinateur. Pour diagnostiquer, il est recommandé de démarrer en mode sans échec, lancer une désinfection complète et vérifier les mises à jour Windows Update, afin de rétablir un environnement Windows sain. En cas de persistance, d'autres indicateurs utiles incluent la vérification des associations des fichiers .exe et l'évaluation de l'état du disque, afin d'identifier une éventuelle corruption ou une défaillance système.

Bobot (l'IA à votre service)
  1. moment de grace Messages postés 29099 Date d'inscription   Statut Contributeur sécurité Dernière intervention   2 274
     
    bonjour

    * Téléchargez FindyKill sur le Bureau.

    http://www.teamxscript.org/findykillTelechargement.html

    ou

    http://teamxscript.changelog.fr/FindyKill.html

    * Double-cliquez sur FindyKill présent sur le Bureau.

    * Choisissez l'option 1 (Recherche).

    * Laissez travailler l'outil.

    * Ensuite postez le rapport FindyKill.txt qui apparaîtra (si vous avez créé un sujet sur un forum pour vous faire aider).

    * Note : Le rapport FindyKill.txt est sauvegardé à la racine du disque (C:\FindyKill.txt).

    (CTRL+A pour tout sélectionner , CTRL+C pour copier et CTRL+V pour coller)

    * Note : "Process.exe", une composante de l'outil, est détecté par certains antivirus (AntiVir, Dr.Web, Kaspersky Anti-Virus) comme étant un RiskTool.
    Il ne s'agit pas d'un virus, mais d'un utilitaire destiné à mettre fin à des processus.
    Mis entre de mauvaises mains, cet utilitaire pourrait arrêter des logiciels de sécurité (Antivirus, Firewall...) d'où l'alerte émise par ces antivirus.

    * Tuto : http://pagesperso-orange.fr/NosTools/index.html

    0
  2. antho60430 Messages postés 80 Statut Membre
     
    je narrive pas a executer findyKill sur les 2 liens telecharger ,est ce que je peut le telecharger a partir d'un otre ordinateur
    0
  3. moment de grace Messages postés 29099 Date d'inscription   Statut Contributeur sécurité Dernière intervention   2 274
     
    oui bien sûr

    et tu le remets ensuite sur le bureau de l'autre pc
    0
  4. antho60430 Messages postés 80 Statut Membre
     
    ############################## | FindyKill V5.052 |

    # User : julie (Administrateurs) # PC-DE-JULIE
    # Update on 23/10/2010 by El Desaparecido
    # Start at: 13:41:55 | 04/03/2011
    # Website : http://www.teamxscript.org/
    # Contact : eldesaparecido@teamxscript.org

    # Intel(R) Pentium(R) Dual CPU T2370 @ 1.73GHz
    # Microsoft® Windows Vista(TM) Édition Familiale Premium (6.0.6002 32-bit) # Service Pack 2
    # Internet Explorer 8.0.6001.19019
    # Windows Firewall Status : Enabled

    # C:\ # Disque fixe local # 69,65 Go (4,62 Go free) [ACER] # NTFS
    # D:\ # Disque fixe local # 69,64 Go (69,46 Go free) [DATA] # NTFS
    # E:\ # Disque CD-ROM
    # F:\ # Disque amovible
    # G:\ # Disque amovible # 1,88 Go (465,39 Mo free) [ANTHONY] # FAT32

    ################## | Eléments infectieux |

    C:\Windows\prefetch\WINUPGRO.EXE-C12B80B5.pf

    ################## | Registre |

    [HKCU\Software\Classes\ed2k]
    [HKCR\ed2k]

    ################## | Etat |

    # Affichage des fichiers cachés : OK

    # Mode sans echec : OK

    # Uac : OK

    # Ndisuio -> Start = 3 ( Good = 3 | Bad = 4 )
    # EapHost -> Start = 3 ( Good = 2 | Bad = 4 )
    # Wlansvc -> Start = 2 ( Good = 2 | Bad = 4 )
    # (!) SharedAccess -> Start = 4 ( Good = 2 | Bad = 4 )
    # windefend -> Start = 2 ( Good = 2 | Bad = 4 )
    # wuauserv -> Start = 2 ( Good = 2 | Bad = 4 )
    # wscsvc -> Start = 2 ( Good = 2 | Bad = 4 )

    ################## | ! Fin du rapport # FindyKill V5.052 ! |
    0
  5. Vous n’avez pas trouvé la réponse que vous recherchez ?

    Posez votre question
  6. moment de grace Messages postés 29099 Date d'inscription   Statut Contributeur sécurité Dernière intervention   2 274
     
    Télécharge ZHPDiag ( de Nicolas coolman ).
    https://www.zebulon.fr/telechargements/securite/systeme/zhpdiag.html

    ou

    https://www.commentcamarche.net/telecharger/utilitaires/24803-zhpdiag/


    (outil de diagnostic)


    Double clique sur le fichier d'installation, puis installe le avec les paramètres par défaut ( N'oublie pas de cocher " Créer une icône sur le bureau " )

    Lance ZHPDiag en double cliquant sur l'icône présente sur ton bureau (Clique droit -> Executer en tant qu'admin ( vista )

    Clique sur la loupe en haut à gauche, puis laisse l'outil scanner.

    Une fois le scan terminé, clique sur l'icône en forme de disquette et enregistre le fichier sur ton bureau.

    Rend toi sur http://pjjoint.malekal.com/

    Clique sur "Parcourir "

    Sélectionne le rapport ZHPdiag.txt qui se trouve sur ton bureau

    Clique ensuite sur "Envoyer le fichier " et copie/colle le lien dans ton prochain message

    0
  7. jlpjlp Messages postés 52399 Statut Contributeur sécurité 5 041
     
    slt un seul message merci pour les helpeurs
    http://www.commentcamarche.net/forum/affich-21072431-win-32-n-est-pas-une-entree-valide

    slt moment de grace!
    0
  8. fred08700 Messages postés 3633 Statut Contributeur sécurité 550
     
    salut

    idem pour celui-ci , même en changeant légèrement de pseudo

    http://www.commentcamarche.net/forum/affich-21072940-win-32-n-est-pas-une-application-valide
    0
  9. raph60430 Messages postés 8 Statut Membre
     
    oui mai je narrive pas a envoyer mes messges sur ce forum je ne comprend pas
    0
  10. fred08700 Messages postés 3633 Statut Contributeur sécurité 550
     
    moment de grace va revenir , soit patient -)

    je sais que ton problème est ennuyeux , mais ouvrir plusieurs sujets ne te feras pas avancer plus vite.

    on est bénévole , et tu es entre de bonnes mains -)
    0
  11. raph60430 Messages postés 8 Statut Membre
     
    oui mais je ne comprend j'ai envoyer mon rapport zhp diag mais il n'apparait pas en reponse sur le forum ce pour ca que je minquiete en plus il ma detecter un rogue fake
    0
    1. fred08700 Messages postés 3633 Statut Contributeur sécurité 550
       
      il faut envoyer le lien de l'hébergeur , car les rapports zhpdiag sont trop long pour CCM


      ● Rends toi sur http://www.cijoint.fr/

      ● Cliques sur " Parcourir " dans la partie " Joindre un fichier[...] "

      ● Sélectionnes le rapport ZHPdiag.txt qui se trouve sur ton bureau

      ● Clique ensuite sur "Cliquez ici pour déposer le fichier " et copie/colle le lien dans ton prochain message
      0
  12. raph60430 Messages postés 8 Statut Membre
     
    moment de grace m'a dit de l'envoyer ici sur http://pjjoint.malekal.com/
    j'ai envoyer le fichier txt ZHP diag txt , le site me dit upload reussi , et il me disent d'envoyer un lien a vos correspondants et il me donnent une adresse HHttp
    0
    1. fred08700 Messages postés 3633 Statut Contributeur sécurité 550
       
      tu dois faire un copié/collé du lien qui ressemble à ceci

      http://images.imagehotel.net/?13w1kl2mpj.png
      0
  13. antho60430 Messages postés 80 Statut Membre
     
    ok jattends la reponse du rapport sur le compte antho60430
    0
  14. fred08700 Messages postés 3633 Statut Contributeur sécurité 550
     
    pour avancer MDG

    pc très infecté

    ● Rends-toi à cette adresse afin de télécharger AD-Remover (créé par C_XX)

    Déconnecte toi et ferme toutes les applications en cours

    ● Double-clique sur l'icône AD-Remover
    Vista ou windows 7 => clic droit "executer en tant que...."
    ● Au menu principal, clique sur "Nettoyer"
    ● Confirme le lancement de l'analyse et laisse l'outil travailler
    ● Poste le rapport qui apparait à la fin (il est aussi sauvegardé sous C:\Ad-report-CLEAN.txt )

    (CTRL+A Pour tout selectionner , CTRL+C pour copier et CTRL+V pour coller )

    <gras<Note :</gras> Process.exe est détecté par certains antivirus (AntiVir, Dr.Web, Kaspersky Anti-Virus) comme étant un RiskTool.
    Il ne s'agit pas d'un virus, mais d'un utilitaire destiné à mettre fin à des processus.

    *****************************

    # Téléchargez et enregistrez Navilog1 sur le Bureau.: http://perso.orange.fr/il.mafioso/Navifix/Navilog1.exe
    # Sous XP : double-cliquez sur l'icône pour lancer l'outil.
    # Sous vista : faites un clic droit sur Navilog1 présent sur le Bureau et choisissez "Exécuter en tant qu'administrateur".
    # Choisissez votre langue, appuyez sur F pour Français.
    # Appuyez sur une touche jusqu'à ce que vous arriviez au menu des options.
    # Choisissez l'option 1 (Recherche / Désinfection Automatique).
    # Laissez le programme travailler, il pourrait durer une dizaine de minutes.
    # Si l'outil trouve quelque chose, il sera amené à faire redémarrer l'ordinateur.
    # Lorsque le message "Scan terminé le..." s'affichera, appuyez sur une touche pour faire apparaitre le rapport dans le Bloc-notes (il sera aussi enregistré automatiquement sur votre disque dur : C:\cleannavi.txt)

    ********************************

    => Téléchargez FixLop de NicoVA : http://sd-2.archive-host.com/membres/up/174761209440524377/FixLop.exe
    => Lancer l'installateur
    => Cliquer deux fois sur Suivant puis cocher "Créer un icône sur le bureau"
    => Cliquer sur Installer
    => Cliquer enfin sur Terminer

    => Une fois FixLop ouvert : cliquez sur "Recherche"
    => Un rapport va s'afficher à la fin : FixLop[RECH].txt sous C:\
    Chaque difficulté rencontrée doit être l'occasion d'un nouveau progrès.

    [Pierre de Coubertin]
    0
  15. antho60430 Messages postés 80 Statut Membre
     
    ok mais je fait koi du rapport zhp diag que j'ai envoyer.
    0
    1. fred08700 Messages postés 3633 Statut Contributeur sécurité 550
       
      le rapport zhpdiag sert à identifier les éventuelles infections , les programmes non à jours , etc ...
      qui sont dans ton pc

      il sert aux helpeurs ,
      0
  16. fred08700 Messages postés 3633 Statut Contributeur sécurité 550
     
    info : Ceci depuis que j'ai lancer un patch pour nod 32 ==> ce n'est pas patch que tu as lancé , mais un crack ==>

    O42 - Logiciel: NOD32 FiX - (.nsane productions.) [HKLM] -- {DBC3FDEC-D5F4-439C-9A18-EF454A74E3DE}_is1 => Eset NOD32 Antivirus Crack
    0
  17. antho60430 Messages postés 80 Statut Membre
     
    voici le rapport de ad remover
    ======= RAPPORT D'AD-REMOVER 2.0.0.2,F | UNIQUEMENT XP/VISTA/7 =======

    Mis à jour par TeamXscript le 01/03/11
    Contact: AdRemover[DOT]contact[AT]gmail[DOT]com
    Site web: http://www.teamxscript.org

    C:\Program Files\Ad-Remover\main.exe (CLEAN [1]) -> Lancé à 16:12:24 le 04/03/2011, Mode normal

    Microsoft® Windows Vista(TM) Édition Familiale Premium Service Pack 2 (X86)
    julie@PC-DE-JULIE (Acer Aspire 2920)

    ============== ACTION(S) ==============

    Service: "AGCoreService" Stoppé et supprimé

    Fichier supprimé: C:\Users\julie\AppData\Local\epasdu.bat
    Fichier supprimé: C:\Windows\system32\u_ldsplrhstlkxf.dll.exe
    Fichier supprimé: C:\Windows\Downloaded Program Files\F3initialsetup1.0.1.1.inf
    Fichier supprimé: C:\Windows\system32\Macromed\Flash\FlashPlayerTrust\UnifiedToolbar.cfg
    Fichier supprimé: C:\Windows\Temp\msksetup.log
    Fichier supprimé: C:\Users\julie\AppData\Roaming\Mozilla\FireFox\Profiles\pa7tylkv.default\searchplugins\kiwee-toolbar.xml
    Fichier supprimé: C:\Users\Invité\AppData\Roaming\Mozilla\FireFox\Profiles\qrbu4h4h.default\searchplugins\kiwee-toolbar.xml
    Dossier supprimé: C:\Program Files\Conduit
    Dossier supprimé: C:\Users\julie\AppData\LocalLow\FunWebProducts
    Dossier supprimé: C:\Program Files\FunWebProducts
    Dossier supprimé: C:\Users\julie\AppData\Roaming\MessengerSkinner
    Dossier supprimé: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MessengerSkinner
    Dossier supprimé: C:\Program Files\MessengerSkinner
    Dossier supprimé: C:\Users\julie\AppData\LocalLow\MyWebSearch
    Dossier supprimé: C:\Program Files\MyWebSearch
    Dossier supprimé: C:\ProgramData\Trymedia
    Dossier supprimé: C:\Users\julie\AppData\Roaming\EoRezo
    Dossier supprimé: C:\Program Files\EoRezo
    Dossier supprimé: C:\Users\julie\AppData\Roaming\ItsLabel
    Dossier supprimé: C:\Users\julie\AppData\Roaming\AGI
    Dossier supprimé: C:\ProgramData\AGI
    Dossier supprimé: C:\Users\julie\AppData\LocalLow\AGI
    Dossier supprimé: C:\Program Files\AGI
    Dossier supprimé: C:\ProgramData\Kiwee Toolbar
    Dossier supprimé: C:\Users\julie\AppData\LocalLow\Kiwee Toolbar
    Dossier supprimé: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kiwee Toolbar
    Dossier supprimé: C:\Program Files\Kiwee Toolbar
    Fichier supprimé: C:\Windows\system32\4e994352-806e-1127-7c7e-40947793ef9b.exe
    Fichier supprimé: C:\Users\julie\AppData\Local\fegewv_nav.dat
    Fichier supprimé: C:\Users\julie\AppData\Local\fegewv.dat
    Fichier supprimé: C:\Users\julie\AppData\Local\fegewv_navps.dat

    (!) -- Fichiers temporaires supprimés.

    -- Fichier ouvert: C:\Users\julie\AppData\Roaming\Mozilla\FireFox\Profiles\pa7tylkv.default\Prefs.js --
    Ligne supprimée: user_pref("agcore.default.extid", "unifiedtoolbar@aginteractive.com");
    Ligne supprimée: user_pref("extensions.wrc.SearchRules.ask.com.style", ".WRCN {display:none} #yui-main .tsrc_vnru .ti...
    Ligne supprimée: user_pref("extensions.wrc.SearchRules.ask.com.url", "^hxxp(s)?\\:\\/\\/(.+\\.)?ask\\.com\\/.*");
    Ligne supprimée: user_pref("extensions.wrc.SearchRules.baidu.com.style", ".WRCN {display:none} .result .f .WRCN {disp...
    Ligne supprimée: user_pref("extensions.wrc.SearchRules.baidu.com.url", "^hxxp\\:\\/\\/www\\.baidu\\.com\\/.*");
    -- Fichier Fermé --

    -- Fichier ouvert: C:\Users\Invité\AppData\Roaming\Mozilla\FireFox\Profiles\qrbu4h4h.default\Prefs.js --
    Ligne supprimée: user_pref("agcore.default.extid", "unifiedtoolbar@aginteractive.com");
    Ligne supprimée: user_pref("browser.search.defaultenginename", "Kiwee Toolbar");
    Ligne supprimée: user_pref("extensions.wrc.SearchRules.ask.com.style", ".WRCN {display:none} #yui-main .tsrc_vnru .ti...
    Ligne supprimée: user_pref("extensions.wrc.SearchRules.ask.com.url", "^hxxp(s)?\\:\\/\\/(.+\\.)?ask\\.com\\/.*");
    Ligne supprimée: user_pref("extensions.wrc.SearchRules.baidu.com.style", ".WRCN {display:none} .result .f .WRCN {disp...
    Ligne supprimée: user_pref("extensions.wrc.SearchRules.baidu.com.url", "^hxxp\\:\\/\\/www\\.baidu\\.com\\/.*");
    Ligne supprimée: user_pref("keyword.URL", "hxxp://search.imgag.com/?appid=kwtb&component=UnifiedToolbarFF&c=GNKWO5002...
    -- Fichier Fermé --

    Clé supprimée: HKLM\Software\Classes\CLSID\{0200B7A8-AB05-E137-ECA9-F207A5D2BDF1}
    Clé supprimée: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{0200B7A8-AB05-E137-ECA9-F207A5D2BDF1}
    Clé supprimée: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{0200B7A8-AB05-E137-ECA9-F207A5D2BDF1}
    Clé supprimée: HKLM\Software\Classes\CLSID\{0BC6E3FA-78EF-4886-842C-5A1258C4455A}
    Clé supprimée: HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0BC6E3FA-78EF-4886-842C-5A1258C4455A}
    Clé supprimée: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{0BC6E3FA-78EF-4886-842C-5A1258C4455A}
    Clé supprimée: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{0BC6E3FA-78EF-4886-842C-5A1258C4455A}
    Clé supprimée: HKLM\Software\Classes\AppID\{CC50232E-FDB1-436F-B658-452F88E81736}
    Clé supprimée: HKLM\Software\Classes\CLSID\{64F56FC1-1272-44CD-BA6E-39723696E350}
    Clé supprimée: HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{64F56FC1-1272-44CD-BA6E-39723696E350}
    Clé supprimée: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{64F56FC1-1272-44CD-BA6E-39723696E350}
    Clé supprimée: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{64F56FC1-1272-44CD-BA6E-39723696E350}
    Clé supprimée: HKLM\Software\Classes\CLSID\{8C61924B-9098-E8ED-AF2B-BB554CCD3D43}
    Clé supprimée: HKLM\Software\Classes\CLSID\{C7B76B90-3455-4AE6-A752-EAC4D19689E5}
    Clé supprimée: HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C7B76B90-3455-4AE6-A752-EAC4D19689E5}
    Clé supprimée: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{C7B76B90-3455-4AE6-A752-EAC4D19689E5}
    Clé supprimée: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{C7B76B90-3455-4AE6-A752-EAC4D19689E5}
    Clé supprimée: HKLM\Software\Classes\CLSID\{E03BAFDC-EB9D-4C35-A7A2-AB6C62FF0A68}
    Clé supprimée: HKLM\Software\Classes\CLSID\{E6375F37-E4D1-4F51-B651-4658C27AC5BF}
    Clé supprimée: HKLM\Software\Classes\AppID\{A5461FCA-320C-4D6F-A150-A53823CE8142}
    Clé supprimée: HKLM\Software\Classes\Interface\{2E9937FC-CF2F-4F56-AF54-5A6A3DD375CC}
    Clé supprimée: HKLM\Software\Classes\Interface\{3E16A203-C0AA-4D44-ACC5-38A70A8C76DA}
    Clé supprimée: HKLM\Software\Classes\Interface\{741DE825-A6F0-4497-9AA6-8023CF9B0FFF}
    Clé supprimée: HKLM\Software\Classes\Interface\{819DB72D-1C28-4387-9778-E2FF3DC86F74}
    Clé supprimée: HKLM\Software\Classes\Interface\{B0D071A1-36B3-4757-A126-14C89C56013A}
    Clé supprimée: HKLM\Software\Classes\Interface\{CF54BE1C-9359-4395-8533-1657CF209CFE}
    Clé supprimée: HKLM\Software\Classes\TypeLib\{B4C656C9-F2E9-4E77-B3F4-443DF2BD778F}
    Clé supprimée: HKLM\Software\Classes\TypeLib\{B6ACB3F1-6A83-432C-B854-3E1056F87F4E}
    Clé supprimée: HKLM\Software\Classes\TypeLib\{C7403C30-3644-43D8-A82F-4BD84B9682D9}
    Clé supprimée: HKLM\Software\Classes\TypeLib\{D518921A-4A03-425E-9873-B9A71756821E}
    Clé supprimée: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\epasdu
    Clé supprimée: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{29BCB905-97FC-FCA2-F639-06BC24C8E842}
    Clé supprimée: HKLM\Software\Classes\AG.MediaPlayerCOM
    Clé supprimée: HKLM\Software\Classes\agcore.Config.AGConfig
    Clé supprimée: HKLM\Software\Classes\agcore.Search.Search
    Clé supprimée: HKLM\Software\Classes\agcore.Text.JSON
    Clé supprimée: HKLM\Software\Classes\agihelper.AGUtils
    Clé supprimée: HKLM\Software\Classes\EoRezoBHO.EoBho
    Clé supprimée: HKLM\Software\Classes\EoRezoBHO.EoBho.1
    Clé supprimée: HKLM\Software\Classes\Toolbar.CT2720081
    Clé supprimée: HKLM\Software\Classes\AppID\EoRezoBHO.DLL
    Clé supprimée: HKLM\Software\Classes\AppID\{362A53B2-2913-4F8A-82F5-7E0A23FDC6F9}
    Clé supprimée: HKLM\Software\EoRezo
    Clé supprimée: HKLM\Software\ItsLabel
    Clé supprimée: HKLM\Software\AGI
    Clé supprimée: HKLM\Software\Conduit
    Clé supprimée: HKLM\Software\FocusInteractive
    Clé supprimée: HKLM\Software\Fun Web Products
    Clé supprimée: HKLM\Software\FunWebProducts
    Clé supprimée: HKLM\Software\MyWebSearch
    Clé supprimée: HKLM\Software\Trymedia Systems
    Clé supprimée: HKCU\Software\EoRezo
    Clé supprimée: HKCU\Software\ItsLabel
    Clé supprimée: HKCU\Software\AGI
    Clé supprimée: HKCU\Software\Binary Noise\mPlayer\kiwee_toolbar_installer.exe
    Clé supprimée: HKCU\Software\fcn
    Clé supprimée: HKCU\Software\MyWebSearch
    Clé supprimée: HKCU\Software\AppDataLow\AskBarDis
    Clé supprimée: HKCU\Software\AppDataLow\HavingFunOnline
    Clé supprimée: HKCU\Software\AppDataLow\Software\Conduit
    Clé supprimée: HKCU\Software\AppDataLow\Software\Fun Web Products
    Clé supprimée: HKCU\Software\AppDataLow\Software\FunWebProducts
    Clé supprimée: HKCU\Software\AppDataLow\Software\MyWebSearch
    Clé supprimée: HKU\.DEFAULT\Software\AGI
    Clé supprimée: HKCU\Software\AppDataLow\6c49d477-8b15-07a5-3e17-66c897611bfd
    Clé supprimée: HKLM\Software\Microsoft\Shared Tools\MSConfig\startupreg\KiweeHook
    Clé supprimée: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0BC6E3FA-78EF-4886-842C-5A1258C4455A}
    Clé supprimée: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}
    Clé supprimée: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{13CF616A-D693-4D07-9CFA-B3232DC16E9E}
    Clé supprimée: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{3C81A5D2-53C9-4F84-90C5-D81A756068F9}
    Clé supprimée: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{BEC18F13-6794-413C-BC7E-98CBDA1FFBDB}
    Clé supprimée: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{CEA3B760-4BDE-4686-A2D0-76AE1CC64785}
    Clé supprimée: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{DE904B6D-9CD2-40BA-B866-5954CC82273C}
    Clé supprimée: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{EA92BBE4-FBA0-4DD3-9AEF-879F45A28F57}
    Clé supprimée: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{EFA4D463-8285-48B5-BDF9-500DD71E5977}
    Clé supprimée: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{FD43B244-D276-40BD-A8A6-0A5E7DD0C483}
    Clé supprimée: HKLM\Software\Microsoft\Internet Explorer\SearchScopes\{0BC6E3FA-78EF-4886-842C-5A1258C4455A}
    Clé supprimée: HKLM\Software\Microsoft\Internet Explorer\SearchScopes\{56256A51-B582-467e-B8D4-7786EDA79AE0}
    Clé supprimée: HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{59C7FC09-1C83-4648-B3E6-003D2BBC7481}
    Clé supprimée: HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9170B96C-28D4-4626-8358-27E6CAEEF907}
    Clé supprimée: HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{D1A71FA0-FF48-48dd-9B6D-7A13A3E42127}
    Clé supprimée: HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{DDB1968E-EAD6-40fd-8DAE-FF14757F60C7}
    Clé supprimée: HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F138D901-86F0-4383-99B6-9CDD406036DA}
    Clé supprimée: HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\EoEngine_is1
    Clé supprimée: HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\EoEngine_is1
    Clé supprimée: HKCU\Software\Microsoft\SystemCertificates\TrustedPublisher\Certificates\62119EF862C6B3A0D853419B87EB3E2F6C78640A
    Clé supprimée: HKCU\Software\Microsoft\SystemCertificates\TrustedPublisher\Certificates\7EE743314C844C7F445B8B1D7617612DF1FDD50F
    Clé supprimée: HKCU\Software\Microsoft\SystemCertificates\TrustedPublisher\Certificates\E6A6A4A475FCE37F8B5AC2F1244DEB2BFCA5615A
    Clé supprimée: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{00A6FAF1-072E-44CF-8957-5838F569A31D}
    Clé supprimée: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{07B18EA1-A523-4961-B6BB-170DE4475CCA}
    Clé supprimée: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{07B18EA9-A523-4961-B6BB-170DE4475CCA}
    Clé supprimée: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{07B18EAB-A523-4961-B6BB-170DE4475CCA}
    Clé supprimée: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB}
    Clé supprimée: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{9FF05104-B030-46FC-94B8-81276E4E27DF}
    Clé supprimée: HKLM\Software\Classes\CLSID\{147a976f-eee1-4377-8ea7-4716e4cdd239}
    Clé supprimée: HKLM\Software\Classes\CLSID\{A4730EBE-43A6-443e-9776-36915D323AD3}
    Clé supprimée: HKLM\Software\Microsoft\Code Store Database\Distribution Units\{1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB}
    Clé supprimée: HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{68AF847F-6E91-45DD-9B68-D6A12C30E5D7}
    Clé supprimée: HKLM\Software\Microsoft\Internet Explorer\Low Rights\RunDll32Policy\f3ScrCtr.dll
    Clé supprimée: HKLM\Software\Microsoft\Multimedia\WMPlayer\Schemes\f3pss

    Valeur supprimée: HKCU\Software\Microsoft\Windows\CurrentVersion\WinTrust\Trust Providers\Software Publishing\Trust Database\0|goicfboogidikkejccmclpieicihhlpo jimddp
    Valeur supprimée: HKCU\Software\Microsoft\Windows\CurrentVersion\WinTrust\Trust Providers\Software Publishing\Trust Database\0|goicfboogidikkejccmclpieicihhlpo hpfanicgkffmccehnpkikogcffaepkfp
    Valeur supprimée: HKCU\Software\Microsoft\Windows\CurrentVersion\WinTrust\Trust Providers\Software Publishing\Trust Database\0|goicfboogidikkejccmclpieicihhlpo dgnckdmmolaijpbbakmplfhlfpdhglgc
    Valeur supprimée: HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks|{0BC6E3FA-78EF-4886-842C-5A1258C4455A}

    ============== SCAN ADDITIONNEL ==============

    **** Mozilla Firefox Version [3.5.17 (fr)] ****

    Searchplugins\babylon.xml (hxxp://search.babylon.com/web/{searchTerms})
    Components\aboutCertError.js
    Components\aboutPrivateBrowsing.js
    Components\aboutRights.js
    Components\aboutRobots.js
    Components\aboutSessionRestore.js
    Components\nsPostUpdateWin.js

    -- C:\Users\julie\AppData\Roaming\Mozilla\FireFox\Profiles\pa7tylkv.default --
    Extensions\{AA994882-F391-4d2e-806F-8908DA4814ED} (kikin plugin)
    Prefs.js - browser.download.dir, C:\\Users\\julie\\Desktop
    Prefs.js - browser.download.lastDir, C:\\Users\\julie\\Downloads
    Prefs.js - browser.search.defaultenginename, Search the web (Babylon)
    Prefs.js - browser.search.defaulturl, hxxp://search.babylon.com/web/{searchTerms}?babsrc=browsersearch&AF=14177
    Prefs.js - browser.search.selectedEngine, Google
    Prefs.js - browser.startup.homepage, hxxp://search.babylon.com/home?AF=14177
    Prefs.js - browser.startup.homepage_override.mstone, rv:1.9.1.17

    -- C:\Users\Invité\AppData\Roaming\Mozilla\FireFox\Profiles\qrbu4h4h.default --
    Prefs.js - browser.search.selectedEngine, Google
    Prefs.js - browser.startup.homepage, google
    Prefs.js - browser.startup.homepage_override.mstone, rv:1.9.1.16

    ========================================

    **** Internet Explorer Version [8.0.6001.19019] ****

    HKCU_Main|Default_Page_URL - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
    HKCU_Main|Default_Search_URL - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
    HKCU_Main|Search bar - hxxp://go.microsoft.com/fwlink/?linkid=54896
    HKCU_Main|Start Page - hxxp://fr.msn.com/
    HKLM_Main|Default_Page_URL - hxxp://go.microsoft.com/fwlink/?LinkId=54896
    HKLM_Main|Default_Search_URL - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
    HKLM_Main|Search bar - hxxp://search.msn.com/spbasic.htm
    HKLM_Main|Search Page - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
    HKLM_Main|Start Page - hxxp://fr.msn.com/
    HKCU_SearchScopes\{003932CC-93F6-4CB3-8095-5B3AD49C8D33} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=&sbs=2&sc=2&f=web&vernum=&uid=&did=%7Bc0615dc0-909b-1...)
    HKCU_SearchScopes\{00651FF5-D3F5-4430-A294-D96A7FC5787B} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=GNKIW29197&sbs=2&sc=2&f=web&vernum=2.8.167&uid=&did=%...)
    HKCU_SearchScopes\{01271CC3-E587-4045-AD32-8900866FDD7D} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=GNKIW29197&sbs=2&sc=2&f=web&vernum=2.8.167&uid=&did=%...)
    HKCU_SearchScopes\{019EEA29-A3EF-4E06-AAB3-C71B0D004ED5} - "cherche.us" (hxxp://google.cherche.us/Result.php?client=pub-0420647136319153&cof=GIMP%3A00990...)
    HKCU_SearchScopes\{02320BD4-BA08-43FF-8D22-C34708D458E0} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=GNKIW29197&sbs=2&sc=2&f=web&vernum=2.8.167&uid=&did=%...)
    HKCU_SearchScopes\{0315A3FC-AEE0-4AFD-99CE-E56CB1C0D015} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=&sbs=2&sc=2&f=web&vernum=&uid=&did=%7Bc0615dc0-909b-1...)
    HKCU_SearchScopes\{04586199-5221-42CC-983F-97AC2735E3AA} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=GNKIW29197&sbs=2&sc=2&f=web&vernum=2.8.167&uid=&did=%...)
    HKCU_SearchScopes\{04AE9567-0EC8-4829-BA25-C95CA15CD29D} - "?" (hxxp://search.imgag.com/?c=GNKIW29197&sbs=2&sc=2&f=web&vernum=2.8.167&uid=&did=%...)
    HKCU_SearchScopes\{04EFCDC4-2D8D-4FFC-B10F-2CFAAD0CA60F} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=GNKIW29197&sbs=2&sc=2&f=web&vernum=2.8.167&uid=&did=%...)
    HKCU_SearchScopes\{0682D4E5-0F01-4D30-93C0-F65F10DDF776} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=GNKIW29197&sbs=2&sc=2&f=web&vernum=2.8.167&uid=&did=%...)
    HKCU_SearchScopes\{06F07BBF-5346-41E4-8964-371E8709A743} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=&sbs=2&sc=2&f=web&vernum=&uid=&did=%7Bc0615dc0-909b-1...)
    HKCU_SearchScopes\{07FEFACF-CE80-4764-A741-BDA5B76BDD9F} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=GNKIW29197&sbs=2&sc=2&f=web&vernum=2.8.167&uid=&did=%...)
    HKCU_SearchScopes\{08E25817-B01D-461B-933E-EECB85AE0C33} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=GNKIW29197&sbs=2&sc=2&f=web&vernum=2.8.167&uid=&did=%...)
    HKCU_SearchScopes\{09BAC30C-0306-49DC-B965-52F6A7A9A068} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=&sbs=2&sc=2&f=web&vernum=&uid=&did=%7Bc0615dc0-909b-1...)
    HKCU_SearchScopes\{09C24380-6553-46F2-A969-8C6056F09923} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=&sbs=2&sc=2&f=web&vernum=&uid=&did=%7Bc0615dc0-909b-1...)
    HKCU_SearchScopes\{0A99AABC-4997-46EC-809D-65EF0C08655E} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=&sbs=2&sc=2&f=web&vernum=&uid=&did=%7Bc0615dc0-909b-1...)
    HKCU_SearchScopes\{0B1A37CF-C726-4EA5-BDB6-222BC77AB8D6} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=GNKIW29197&sbs=2&sc=2&f=web&vernum=2.8.167&uid=&did=%...)
    HKCU_SearchScopes\{0B306C6F-0945-4C6F-8C24-2EA06C8176DA} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=&sbs=2&sc=2&f=web&vernum=&uid=&did=%7Bc0615dc0-909b-1...)
    HKCU_SearchScopes\{0BCF8D1E-2DDA-4E1E-AACE-1F86D52AFF3D} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=GNKIW29197&sbs=2&sc=2&f=web&vernum=2.8.167&uid=&did=%...)
    HKCU_SearchScopes\{0BF12AB9-1ED1-4FC4-A4CC-614547B380CA} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=GNKIW29197&sbs=2&sc=2&f=web&vernum=2.8.167&uid=&did=%...)
    HKCU_SearchScopes\{0C067178-4560-4D52-94E2-04AF4BD05B59} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=GNKIW29197&sbs=2&sc=2&f=web&vernum=2.8.167&uid=&did=%...)
    HKCU_SearchScopes\{0D5C7EF5-8268-48E5-9744-8A9719023F9C} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=&sbs=2&sc=2&f=web&vernum=&uid=&did=%7Bc0615dc0-909b-1...)
    HKCU_SearchScopes\{0E00E029-AFBD-406C-BE02-54571D5C68D5} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=GNKIW29197&sbs=2&sc=2&f=web&vernum=2.8.167&uid=&did=%...)
    HKCU_SearchScopes\{0F149DAE-DED3-48E0-9A44-F6643757475E} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=GNKIW29197&sbs=2&sc=2&f=web&vernum=2.8.167&uid=&did=%...)
    HKCU_SearchScopes\{0F1EC3B8-3066-426D-87E1-C30593457D90} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=GNKIW29197&sbs=2&sc=2&f=web&vernum=2.8.167&uid=&did=%...)
    HKCU_SearchScopes\{0F8D867D-B316-4E89-A32A-C60E7F7625E1} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=&sbs=2&sc=2&f=web&vernum=&uid=&did=%7Bc0615dc0-909b-1...)
    HKCU_SearchScopes\{1089FFDC-CBCB-40CB-B445-F1C337DABD0E} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=&sbs=2&sc=2&f=web&vernum=&uid=&did=%7Bc0615dc0-909b-1...)
    HKCU_SearchScopes\{11DD4D9A-92FE-45C0-AB53-B91A2574944B} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=GNKIW29197&sbs=2&sc=2&f=web&vernum=2.8.167&uid=&did=%...)
    HKCU_SearchScopes\{11F28700-8AF3-4A4A-90DE-EBE9BA2A8AE7} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=GNKIW29197&sbs=2&sc=2&f=web&vernum=2.8.167&uid=&did=%...)
    HKCU_SearchScopes\{12742904-8693-498B-BBAF-D0468DD9D6BF} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=GNKIW29197&sbs=2&sc=2&f=web&vernum=2.8.167&uid=&did=%...)
    HKCU_SearchScopes\{140B1A0B-6598-44F4-942B-882E1C64E7C7} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=&sbs=2&sc=2&f=web&vernum=&uid=&did=%7Bc0615dc0-909b-1...)
    HKCU_SearchScopes\{146C2366-9F0B-47F2-97EC-BEBF5D965D19} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=GNKIW29197&sbs=2&sc=2&f=web&vernum=2.8.167&uid=&did=%...)
    HKCU_SearchScopes\{1492E758-1217-4722-B716-81852188077E} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=GNKIW29197&sbs=2&sc=2&f=web&vernum=2.8.167&uid=&did=%...)
    HKCU_SearchScopes\{152FE8AF-C013-4014-87A9-7EF864B25A78} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=&sbs=2&sc=2&f=web&vernum=&uid=&did=%7Bc0615dc0-909b-1...)
    HKCU_SearchScopes\{17BA6F50-F674-43DD-BF08-85202DC68122} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=&sbs=2&sc=2&f=web&vernum=&uid=&did=%7Bc0615dc0-909b-1...)
    HKCU_SearchScopes\{1887563D-4B7B-41A9-AEE3-F4877464F401} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=GNKIW29197&sbs=2&sc=2&f=web&vernum=2.8.167&uid=&did=%...)
    HKCU_SearchScopes\{193930F1-86D0-47A6-9573-570C6088B28C} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=&sbs=2&sc=2&f=web&vernum=&uid=&did=%7Bc0615dc0-909b-1...)
    HKCU_SearchScopes\{19C1108B-6C3D-4E1A-8E25-1FEB3C6A8CC7} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=GNKIW29197&sbs=2&sc=2&f=web&vernum=2.8.167&uid=&did=%...)
    HKCU_SearchScopes\{1B970C5F-BA6A-48AE-B9B6-881841D6D3E0} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=GNKIW29197&sbs=2&sc=2&f=web&vernum=2.8.167&uid=&did=%...)
    HKCU_SearchScopes\{1BA2D977-2864-4A16-B67A-D25B03AA10A2} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=&sbs=2&sc=2&f=web&vernum=&uid=&did=%7Bc0615dc0-909b-1...)
    HKCU_SearchScopes\{1DAA7119-279C-42D8-B6FC-BAAF2604685A} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=&sbs=2&sc=2&f=web&vernum=&uid=&did=%7Bc0615dc0-909b-1...)
    HKCU_SearchScopes\{1DB03776-0776-4149-B0B0-63DA4C93C369} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=&sbs=2&sc=2&f=web&vernum=&uid=&did=%7Bc0615dc0-909b-1...)
    HKCU_SearchScopes\{1DBA3B25-A9DC-4FFB-A20E-2F437AEE90CD} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=&sbs=2&sc=2&f=web&vernum=&uid=&did=%7Bc0615dc0-909b-1...)
    HKCU_SearchScopes\{1EBD1809-B68C-4B51-A52B-2CA453108146} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=GNKIW29197&sbs=2&sc=2&f=web&vernum=2.8.167&uid=&did=%...)
    HKCU_SearchScopes\{1F220DB2-8DC4-45B1-AF37-B587F10E3E56} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=GNKIW29197&sbs=2&sc=2&f=web&vernum=2.8.167&uid=&did=%...)
    HKCU_SearchScopes\{1F506437-5C04-4972-A1EB-914E1BB670C5} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=GNKIW29197&sbs=2&sc=2&f=web&vernum=2.8.167&uid=&did=%...)
    HKCU_SearchScopes\{1F676261-4DC6-4539-8AAC-E7EA4C74C7E2} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=GNKIW29197&sbs=2&sc=2&f=web&vernum=2.8.167&uid=&did=%...)
    HKCU_SearchScopes\{20B5F7EA-DE28-4A87-8158-997EADAE34F9} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=GNKIW29197&sbs=2&sc=2&f=web&vernum=2.8.167&uid=&did=%...)
    HKCU_SearchScopes\{21665614-A702-45C6-A0A0-34A35790BBAE} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=GNKIW29197&sbs=2&sc=2&f=web&vernum=2.8.167&uid=&did=%...)
    HKCU_SearchScopes\{22C78D2E-721B-4FCC-99A1-7657201ED62E} - "?" (?)
    HKCU_SearchScopes\{2533DD5D-4D28-4A45-B084-ACA17DB8FE0D} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=GNKIW29197&sbs=2&sc=2&f=web&vernum=2.8.167&uid=&did=%...)
    HKCU_SearchScopes\{25C1F05A-FD25-4E7B-9F80-AE94ECA55FC8} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=GNKIW29197&sbs=2&sc=2&f=web&vernum=2.8.167&uid=&did=%...)
    HKCU_SearchScopes\{25D54288-D57B-4AA0-85C0-BDC235C72DB2} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=GNKIW29197&sbs=2&sc=2&f=web&vernum=2.8.167&uid=&did=%...)
    HKCU_SearchScopes\{263CBC2B-0CA0-4625-81FE-0237C9207B0B} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=GNKIW29197&sbs=2&sc=2&f=web&vernum=2.8.167&uid=&did=%...)
    HKCU_SearchScopes\{272871EA-5449-4453-8DBC-B9CC30841259} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=&sbs=2&sc=2&f=web&vernum=&uid=&did=%7Bc0615dc0-909b-1...)
    HKCU_SearchScopes\{2756EB88-E320-46C0-A34A-9A6C79324955} - "?" (?)
    HKCU_SearchScopes\{278D64F6-5372-42DA-A4AA-DB112E262320} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=GNKIW29197&sbs=2&sc=2&f=web&vernum=2.8.167&uid=&did=%...)
    HKCU_SearchScopes\{28BAE0DF-7492-462F-A0EB-945A2A81AB99} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=&sbs=2&sc=2&f=web&vernum=&uid=&did=%7Bc0615dc0-909b-1...)
    HKCU_SearchScopes\{29D06160-A8E7-400B-B8E4-02F5FD53988B} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=GNKIW29197&sbs=2&sc=2&f=web&vernum=2.8.167&uid=&did=%...)
    HKCU_SearchScopes\{2B0FF001-AF0B-405A-AA50-355DDFAC623B} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=GNKIW29197&sbs=2&sc=2&f=web&vernum=2.8.167&uid=&did=%...)
    HKCU_SearchScopes\{2B91D96F-5BA1-4129-9843-DA004FC205F7} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=GNKIW29197&sbs=2&sc=2&f=web&vernum=2.8.167&uid=&did=%...)
    HKCU_SearchScopes\{2CFFA7E7-6558-41AF-BD80-19EFBBDA513D} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=GNKIW29197&sbs=2&sc=2&f=web&vernum=2.8.167&uid=&did=%...)
    HKCU_SearchScopes\{2F11D21B-1C7D-4D03-B226-DC1911179EA9} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=GNKIW29197&sbs=2&sc=2&f=web&vernum=2.8.167&uid=&did=%...)
    HKCU_SearchScopes\{2F9CB1E9-D478-4C64-B381-31C968162123} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=GNKIW29197&sbs=2&sc=2&f=web&vernum=2.8.167&uid=&did=%...)
    HKCU_SearchScopes\{2FABE25B-9970-407B-8B96-3DC850A9EE98} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=GNKIW29197&sbs=2&sc=2&f=web&vernum=2.8.167&uid=&did=%...)
    HKCU_SearchScopes\{308BA887-31DE-4AAE-97D3-4F928B0EEF50} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=GNKIW29197&sbs=2&sc=2&f=web&vernum=2.8.167&uid=&did=%...)
    HKCU_SearchScopes\{30DE41E7-DBED-4353-8B60-F85E3890FF9B} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=GNKIW29197&sbs=2&sc=2&f=web&vernum=2.8.167&uid=&did=%...)
    HKCU_SearchScopes\{312E7DA9-647A-43F0-AE29-411A0459CF6C} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=GNKIW29197&sbs=2&sc=2&f=web&vernum=2.8.167&uid=&did=%...)
    HKCU_SearchScopes\{3174BF41-C78D-4D65-8A45-23549297906D} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=&sbs=2&sc=2&f=web&vernum=&uid=&did=%7Bc0615dc0-909b-1...)
    HKCU_SearchScopes\{32260B53-4081-49FE-9B51-CCEC7FFD05CE} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=&sbs=2&sc=2&f=web&vernum=&uid=&did=%7Bc0615dc0-909b-1...)
    HKCU_SearchScopes\{3253DE1F-F0B5-4A40-B693-08C6B2B42AE5} - "?" (?)
    HKCU_SearchScopes\{32AAA31F-06D0-4349-A44C-3A61C534ECF5} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=GNKIW29197&sbs=2&sc=2&f=web&vernum=2.8.167&uid=&did=%...)
    HKCU_SearchScopes\{3346C0A8-A883-41C9-A024-97A781D5381D} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=&sbs=2&sc=2&f=web&vernum=&uid=&did=%7Bc0615dc0-909b-1...)
    HKCU_SearchScopes\{33AB756F-9BAF-4F1D-BEFF-150F1479D132} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=&sbs=2&sc=2&f=web&vernum=&uid=&did=%7Bc0615dc0-909b-1...)
    HKCU_SearchScopes\{35F42100-D9C7-4269-B7DD-43FCA5DE06E2} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=&sbs=2&sc=2&f=web&vernum=&uid=&did=%7Bc0615dc0-909b-1...)
    HKCU_SearchScopes\{36E6BD4B-D8B7-4591-A2FC-24950933FCC7} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=&sbs=2&sc=2&f=web&vernum=&uid=&did=%7Bc0615dc0-909b-1...)
    HKCU_SearchScopes\{37600070-B81E-42F5-9A9B-8EDEF597A987} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=GNKIW29197&sbs=2&sc=2&f=web&vernum=2.8.167&uid=&did=%...)
    HKCU_SearchScopes\{37DE7839-8913-406B-A410-ABD7BC5EF117} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=GNKIW29197&sbs=2&sc=2&f=web&vernum=2.8.167&uid=&did=%...)
    HKCU_SearchScopes\{38932753-9101-4B0E-BCEA-9CDD5DD4F99B} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=GNKIW29197&sbs=2&sc=2&f=web&vernum=2.8.167&uid=&did=%...)
    HKCU_SearchScopes\{3944D740-CF0B-4ACA-9B1C-C7B3C6757AB2} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=&sbs=2&sc=2&f=web&vernum=&uid=&did=%7Bc0615dc0-909b-1...)
    HKCU_SearchScopes\{39500016-43A5-4253-A36D-2B9284E0B682} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=GNKIW29197&sbs=2&sc=2&f=web&vernum=2.8.167&uid=&did=%...)
    HKCU_SearchScopes\{39A5A7BB-17C4-40BF-8B3F-BB30C96E0D41} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=&sbs=2&sc=2&f=web&vernum=&uid=&did=%7Bc0615dc0-909b-1...)
    HKCU_SearchScopes\{3A2B5EC0-46C1-4F2B-A6CD-28913BFB74A9} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=&sbs=2&sc=2&f=web&vernum=&uid=&did=%7Bc0615dc0-909b-1...)
    HKCU_SearchScopes\{3A392422-85A3-4186-969B-F4FD7B7BFA71} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=&sbs=2&sc=2&f=web&vernum=&uid=&did=%7Bc0615dc0-909b-1...)
    HKCU_SearchScopes\{3A8C34C3-8AA3-427F-A5BE-B6F87D5A8128} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=GNKIW29197&sbs=2&sc=2&f=web&vernum=2.8.167&uid=&did=%...)
    HKCU_SearchScopes\{3B5734E4-00E3-4F0B-AF91-38CCC43E245E} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=GNKIW29197&sbs=2&sc=2&f=web&vernum=2.8.167&uid=&did=%...)
    HKCU_SearchScopes\{3BB51249-1489-47B3-AF82-410BCCBDE3A2} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=GNKIW29197&sbs=2&sc=2&f=web&vernum=2.8.167&uid=&did=%...)
    HKCU_SearchScopes\{3D1133E9-AD0A-49B9-88D3-7B62D6B07168} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=&sbs=2&sc=2&f=web&vernum=&uid=&did=%7Bc0615dc0-909b-1...)
    HKCU_SearchScopes\{3D367A3C-A838-4CF9-BB20-6337BC361892} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=&sbs=2&sc=2&f=web&vernum=&uid=&did=%7Bc0615dc0-909b-1...)
    HKCU_SearchScopes\{3E15EF6B-C174-44C0-A363-FDD8ED00C850} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=GNKIW29197&sbs=2&sc=2&f=web&vernum=2.8.167&uid=&did=%...)
    HKCU_SearchScopes\{3E5AE99E-3B29-455C-9501-2A2E5FC2C25E} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=&sbs=2&sc=2&f=web&vernum=&uid=&did=%7Bc0615dc0-909b-1...)
    HKCU_SearchScopes\{3ECBE298-A2A7-4FEB-843A-444FA9694B27} - "Google" (?)
    HKCU_SearchScopes\{3F372FBD-9580-478C-80C8-53430A5686DB} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=GNKIW29197&sbs=2&sc=2&f=web&vernum=2.8.167&uid=&did=%...)
    HKCU_SearchScopes\{3FB91650-8A52-4FD4-A9B9-FE0586613E57} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=GNKIW29197&sbs=2&sc=2&f=web&vernum=2.8.167&uid=&did=%...)
    HKCU_SearchScopes\{403C25AA-FA6B-4156-8756-176FA5DD264D} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=GNKIW29197&sbs=2&sc=2&f=web&vernum=2.8.167&uid=&did=%...)
    HKCU_SearchScopes\{41A80482-FBC2-4F25-9122-03E9C69D1C02} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=&sbs=2&sc=2&f=web&vernum=&uid=&did=%7Bc0615dc0-909b-1...)
    HKCU_SearchScopes\{42F305B4-2BEE-4713-991F-79999B774BA9} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=GNKIW29197&sbs=2&sc=2&f=web&vernum=2.8.167&uid=&did=%...)
    HKCU_SearchScopes\{432FB66F-69F2-45D3-9EFE-A2DFEDB90DA7} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=GNKIW29197&sbs=2&sc=2&f=web&vernum=2.8.167&uid=&did=%...)
    HKCU_SearchScopes\{442FAED6-B154-4023-A965-3B0D36459DE2} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=&sbs=2&sc=2&f=web&vernum=&uid=&did=%7Bc0615dc0-909b-1...)
    HKCU_SearchScopes\{458FFAA4-12C6-4F08-97A1-DEA0066211FA} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=GNKIW29197&sbs=2&sc=2&f=web&vernum=2.8.167&uid=&did=%...)
    HKCU_SearchScopes\{45E15E66-5424-446E-BA43-3C40763A142D} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=&sbs=2&sc=2&f=web&vernum=&uid=&did=%7Bc0615dc0-909b-1...)
    HKCU_SearchScopes\{462AB61C-8B78-469C-A2CA-8E512801BCF9} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=GNKIW29197&sbs=2&sc=2&f=web&vernum=2.8.167&uid=&did=%...)
    HKCU_SearchScopes\{463521FF-3073-4D8E-84E2-D38BB16C79F0} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=&sbs=2&sc=2&f=web&vernum=&uid=&did=%7Bc0615dc0-909b-1...)
    HKCU_SearchScopes\{46DFC96A-94C3-49C7-A6AD-730C8421CAD4} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=GNKIW29197&sbs=2&sc=2&f=web&vernum=2.8.167&uid=&did=%...)
    HKCU_SearchScopes\{47B0046E-FB20-45B1-B723-15FD4420E63A} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=GNKIW29197&sbs=2&sc=2&f=web&vernum=2.8.167&uid=&did=%...)
    HKCU_SearchScopes\{481C6311-9562-4ED9-BFE7-332A4177C9D0} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=GNKIW29197&sbs=2&sc=2&f=web&vernum=2.8.167&uid=&did=%...)
    HKCU_SearchScopes\{484907E2-E37D-4467-B69A-826CE62E42F1} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=GNKIW29197&sbs=2&sc=2&f=web&vernum=2.8.167&uid=&did=%...)
    HKCU_SearchScopes\{4A6A20E3-390F-4CC5-9CC0-BF812BC0C627} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=&sbs=2&sc=2&f=web&vernum=&uid=&did=%7Bc0615dc0-909b-1...)
    HKCU_SearchScopes\{4C78C8D5-ECEF-477E-A030-9688C57E8D61} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=GNKIW29197&sbs=2&sc=2&f=web&vernum=2.8.167&uid=&did=%...)
    HKCU_SearchScopes\{4CD78A2E-A70D-4247-A210-8695EDF8978F} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=GNKIW29197&sbs=2&sc=2&f=web&vernum=2.8.167&uid=&did=%...)
    HKCU_SearchScopes\{4CEA6D15-6B34-4737-A4C7-55BB9746D537} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=GNKIW29197&sbs=2&sc=2&f=web&vernum=2.8.167&uid=&did=%...)
    HKCU_SearchScopes\{4D259631-90FD-4934-8D35-5BC3DF9A7A16} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=&sbs=2&sc=2&f=web&vernum=&uid=&did=%7Bc0615dc0-909b-1...)
    HKCU_SearchScopes\{4FA4685C-2977-481F-BD86-D7E957E4EB1F} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=GNKIW29197&sbs=2&sc=2&f=web&vernum=2.8.167&uid=&did=%...)
    HKCU_SearchScopes\{4FD68953-232C-4C4A-824B-24034D187E92} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=&sbs=2&sc=2&f=web&vernum=&uid=&did=%7Bc0615dc0-909b-1...)
    HKCU_SearchScopes\{4FE1596F-BDEE-4DBD-8FDB-43E0A88272F6} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=GNKIW29197&sbs=2&sc=2&f=web&vernum=2.8.167&uid=&did=%...)
    HKCU_SearchScopes\{5026F0B0-EC96-463A-9B04-46C5F49D8C45} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=GNKIW29197&sbs=2&sc=2&f=web&vernum=2.8.167&uid=&did=%...)
    HKCU_SearchScopes\{50389F4D-C577-41DB-A1F6-332A96800066} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=GNKIW29197&sbs=2&sc=2&f=web&vernum=2.8.167&uid=&did=%...)
    HKCU_SearchScopes\{508FCD8C-934C-4AE1-AEB9-1DE4E888B107} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=&sbs=2&sc=2&f=web&vernum=&uid=&did=%7Bc0615dc0-909b-1...)
    HKCU_SearchScopes\{51914871-A873-47C9-8C17-3212087D189B} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=GNKIW29197&sbs=2&sc=2&f=web&vernum=2.8.167&uid=&did=%...)
    HKCU_SearchScopes\{52D6E1DF-2C84-41D9-9229-F5B1789170DF} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=GNKIW29197&sbs=2&sc=2&f=web&vernum=2.8.167&uid=&did=%...)
    HKCU_SearchScopes\{56B57C1D-F028-432A-9D58-393CC1E47FAA} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=GNKIW29197&sbs=2&sc=2&f=web&vernum=2.8.167&uid=&did=%...)
    HKCU_SearchScopes\{572D8E26-51D7-4593-9202-4CA1ACB32FC7} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=GNKIW29197&sbs=2&sc=2&f=web&vernum=2.8.167&uid=&did=%...)
    HKCU_SearchScopes\{57D25E21-E5FA-4E7E-91B9-48386E99D1C4} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=&sbs=2&sc=2&f=web&vernum=&uid=&did=%7Bc0615dc0-909b-1...)
    HKCU_SearchScopes\{584F076B-D5BA-4609-8A24-A82650D0D061} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=GNKIW29197&sbs=2&sc=2&f=web&vernum=2.8.167&uid=&did=%...)
    HKCU_SearchScopes\{58BBAC15-09D0-448C-B564-4D291F1A4CD9} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=&sbs=2&sc=2&f=web&vernum=&uid=&did=%7Bc0615dc0-909b-1...)
    HKCU_SearchScopes\{59EDB7A5-8613-44E1-9E89-D7EEF6058683} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=&sbs=2&sc=2&f=web&vernum=&uid=&did=%7Bc0615dc0-909b-1...)
    HKCU_SearchScopes\{5A103CAE-1809-4711-A527-B0FC87752C7C} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=GNKIW29197&sbs=2&sc=2&f=web&vernum=2.8.167&uid=&did=%...)
    HKCU_SearchScopes\{5AB6EB40-92DD-41AF-BF3F-47DF0F1EEC5C} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=&sbs=2&sc=2&f=web&vernum=&uid=&did=%7Bc0615dc0-909b-1...)
    HKCU_SearchScopes\{5CC93E64-2D3C-4A6D-B306-22E0185A2659} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=GNKIW29197&sbs=2&sc=2&f=web&vernum=2.8.167&uid=&did=%...)
    HKCU_SearchScopes\{5CCB59EA-0A9C-483E-873C-DAA8166395B7} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=&sbs=2&sc=2&f=web&vernum=&uid=&did=%7Bc0615dc0-909b-1...)
    HKCU_SearchScopes\{5CD18F0A-B607-4989-841E-82C9FAC53384} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=GNKIW29197&sbs=2&sc=2&f=web&vernum=2.8.167&uid=&did=%...)
    HKCU_SearchScopes\{5CEDC958-4776-45B4-810A-82FBA46ED490} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=GNKIW29197&sbs=2&sc=2&f=web&vernum=2.8.167&uid=&did=%...)
    HKCU_SearchScopes\{5D3DFF74-A77D-4921-9718-A4EE1E109C6D} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=GNKIW29197&sbs=2&sc=2&f=web&vernum=2.8.167&uid=&did=%...)
    HKCU_SearchScopes\{5DCD1EA5-791F-4A39-ACC9-C1AE58F540B9} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=GNKIW29197&sbs=2&sc=2&f=web&vernum=2.8.167&uid=&did=%...)
    HKCU_SearchScopes\{5E005738-DF69-4B46-BA6F-DABDD64FFB69} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=GNKIW29197&sbs=2&sc=2&f=web&vernum=2.8.167&uid=&did=%...)
    HKCU_SearchScopes\{5E47E8EA-01CE-4858-A280-46DEA61EBFD1} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=GNKIW29197&sbs=2&sc=2&f=web&vernum=2.8.167&uid=&did=%...)
    HKCU_SearchScopes\{5E686E7A-2CD0-4B64-8886-DF67464E5B37} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=GNKIW29197&sbs=2&sc=2&f=web&vernum=2.8.167&uid=&did=%...)
    HKCU_SearchScopes\{5ECB406F-63EA-4655-B5BF-F1546C45BDF8} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=GNKIW29197&sbs=2&sc=2&f=web&vernum=2.8.167&uid=&did=%...)
    HKCU_SearchScopes\{5ED9B48B-B1E4-47B0-B3B4-949FFCA88910} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=GNKIW29197&sbs=2&sc=2&f=web&vernum=2.8.167&uid=&did=%...)
    HKCU_SearchScopes\{5F26A22D-64C4-4943-A1CF-B335CE9189FF} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=GNKIW29197&sbs=2&sc=2&f=web&vernum=2.8.167&uid=&did=%...)
    HKCU_SearchScopes\{602659C4-E408-4177-8C45-59C80778A003} - "?" (?)
    HKCU_SearchScopes\{6032882C-8D64-4A62-9086-19A63FC8C30E} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=&sbs=2&sc=2&f=web&vernum=&uid=&did=%7Bc0615dc0-909b-1...)
    HKCU_SearchScopes\{60714135-E16A-41C0-AEF7-0A059CBF4428} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=GNKIW29197&sbs=2&sc=2&f=web&vernum=2.8.167&uid=&did=%...)
    HKCU_SearchScopes\{609E746F-7784-4EA4-9896-62B4412C7973} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=GNKIW29197&sbs=2&sc=2&f=web&vernum=2.8.167&uid=&did=%...)
    HKCU_SearchScopes\{614924CE-DBC5-471F-9717-5F90932E1E2A} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=&sbs=2&sc=2&f=web&vernum=&uid=&did=%7Bc0615dc0-909b-1...)
    HKCU_SearchScopes\{618290AE-2CF0-44AB-9701-529B41A53C26} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=GNKIW29197&sbs=2&sc=2&f=web&vernum=2.8.167&uid=&did=%...)
    HKCU_SearchScopes\{61D22022-F431-4C00-A175-EA81A63A63AC} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=GNKIW29197&sbs=2&sc=2&f=web&vernum=2.8.167&uid=&did=%...)
    HKCU_SearchScopes\{61D60425-60C1-4C61-AB70-39299503AA64} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=&sbs=2&sc=2&f=web&vernum=&uid=&did=%7Bc0615dc0-909b-1...)
    HKCU_SearchScopes\{622F02C2-7C9D-4204-A29F-492923932665} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=GNKIW29197&sbs=2&sc=2&f=web&vernum=2.8.167&uid=&did=%...)
    HKCU_SearchScopes\{62CF233C-DBD2-4F7A-A5A5-BCD5BB9A7F11} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=GNKIW29197&sbs=2&sc=2&f=web&vernum=2.8.167&uid=&did=%...)
    HKCU_SearchScopes\{63F05F8E-4424-410C-B3FA-E3777F1AE49A} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=&sbs=2&sc=2&f=web&vernum=&uid=&did=%7Bc0615dc0-909b-1...)
    HKCU_SearchScopes\{65994E97-393C-4FFB-A39D-3F7E009284A9} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=&sbs=2&sc=2&f=web&vernum=&uid=&did=%7Bc0615dc0-909b-1...)
    HKCU_SearchScopes\{661241FA-C2C7-4F6A-AE75-1486E4DD45A6} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=&sbs=2&sc=2&f=web&vernum=&uid=&did=%7Bc0615dc0-909b-1...)
    HKCU_SearchScopes\{666A3375-C7E3-4BE4-99F7-0BFB58493D41} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=GNKIW29197&sbs=2&sc=2&f=web&vernum=2.8.167&uid=&did=%...)
    HKCU_SearchScopes\{667543C7-F20E-44BC-A554-6581E2B26A67} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=&sbs=2&sc=2&f=web&vernum=&uid=&did=%7Bc0615dc0-909b-1...)
    HKCU_SearchScopes\{67267111-7F89-4B2F-AC17-8A4B6E51B733} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=&sbs=2&sc=2&f=web&vernum=&uid=&did=%7Bc0615dc0-909b-1...)
    HKCU_SearchScopes\{6759F1D9-D3AE-4C8B-883F-C33D78E177BB} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=&sbs=2&sc=2&f=web&vernum=&uid=&did=%7Bc0615dc0-909b-1...)
    HKCU_SearchScopes\{678B44C0-30E1-477F-8EDD-5E60943328D2} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=GNKIW29197&sbs=2&sc=2&f=web&vernum=2.8.167&uid=&did=%...)
    HKCU_SearchScopes\{6A0C13E8-176A-4FC6-8F61-86A9EEC98C90} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=GNKIW29197&sbs=2&sc=2&f=web&vernum=2.8.167&uid=&did=%...)
    HKCU_SearchScopes\{6A89FC7D-7C21-41AA-98DE-71D60A1114D3} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=&sbs=2&sc=2&f=web&vernum=&uid=&did=%7Bc0615dc0-909b-1...)
    HKCU_SearchScopes\{6AA8BD75-5E66-4F51-AACE-2A925284F685} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=GNKIW29197&sbs=2&sc=2&f=web&vernum=2.8.167&uid=&did=%...)
    HKCU_SearchScopes\{6BB7BF25-D09F-4BFC-90B0-D5B6A0870CF1} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=GNKIW29197&sbs=2&sc=2&f=web&vernum=2.8.167&uid=&did=%...)
    HKCU_SearchScopes\{6C241DDB-9A04-4F97-BC11-6364535C5C06} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=&sbs=2&sc=2&f=web&vernum=&uid=&did=%7Bc0615dc0-909b-1...)
    HKCU_SearchScopes\{6C61AD21-1B1E-4694-A4B6-B1D419DBA537} - "?" (?)
    HKCU_SearchScopes\{6D46B301-FDEA-43B9-8438-681427346DA6} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=GNKIW29197&sbs=2&sc=2&f=web&vernum=2.8.167&uid=&did=%...)
    HKCU_SearchScopes\{6D49885A-4C03-4D78-81C9-7C739311A38E} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=GNKIW29197&sbs=2&sc=2&f=web&vernum=2.8.167&uid=&did=%...)
    HKCU_SearchScopes\{6D8D8733-78DD-4773-AEC7-5AF3437DDAF2} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=&sbs=2&sc=2&f=web&vernum=&uid=&did=%7Bc0615dc0-909b-1...)
    HKCU_SearchScopes\{6DA8228B-A45C-4C38-81AA-AFF835601909} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=GNKIW29197&sbs=2&sc=2&f=web&vernum=2.8.167&uid=&did=%...)
    HKCU_SearchScopes\{6DAAB6EA-56D7-477C-955C-394D66C00AAD} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=GNKIW29197&sbs=2&sc=2&f=web&vernum=2.8.167&uid=&did=%...)
    HKCU_SearchScopes\{6DF0AC3D-A314-43D8-848C-6BEF0EF8AB78} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=GNKIW29197&sbs=2&sc=2&f=web&vernum=2.8.167&uid=&did=%...)
    HKCU_SearchScopes\{6E03E53B-C55D-4C00-AF1A-868A88CDB9A3} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=&sbs=2&sc=2&f=web&vernum=&uid=&did=%7Bc0615dc0-909b-1...)
    HKCU_SearchScopes\{6E323A33-B90B-46C4-A0CA-FD53D62F4C5D} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=GNKIW29197&sbs=2&sc=2&f=web&vernum=2.8.167&uid=&did=%...)
    HKCU_SearchScopes\{6E58A897-7859-4991-9DC9-26278924F816} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=GNKIW29197&sbs=2&sc=2&f=web&vernum=2.8.167&uid=&did=%...)
    HKCU_SearchScopes\{6F7B65D3-9CBA-46B2-9CA1-354D3EAB2FEF} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=GNKIW29197&sbs=2&sc=2&f=web&vernum=2.8.167&uid=&did=%...)
    HKCU_SearchScopes\{706D1DD9-253A-43FD-A571-71DE8A8E8AF9} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=GNKIW29197&sbs=2&sc=2&f=web&vernum=2.8.167&uid=&did=%...)
    HKCU_SearchScopes\{7090D54E-BBE9-4ED4-98F8-376AC7C1EB35} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=&sbs=2&sc=2&f=web&vernum=&uid=&did=%7Bc0615dc0-909b-1...)
    HKCU_SearchScopes\{70D217E1-AEC5-44D6-9D2D-697547DF33D6} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=GNKIW29197&sbs=2&sc=2&f=web&vernum=2.8.167&uid=&did=%...)
    HKCU_SearchScopes\{724A5145-04FA-4245-AA93-E9EDA5839D99} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=GNKIW29197&sbs=2&sc=2&f=web&vernum=2.8.167&uid=&did=%...)
    HKCU_SearchScopes\{735EB812-1381-4FD5-A20F-14E78A692825} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=&sbs=2&sc=2&f=web&vernum=&uid=&did=%7Bc0615dc0-909b-1...)
    HKCU_SearchScopes\{73B00CC3-600D-46E2-BD1B-F1F87A853C45} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=GNKIW29197&sbs=2&sc=2&f=web&vernum=2.8.167&uid=&did=%...)
    HKCU_SearchScopes\{7441B943-5440-44D4-8361-7FC6B98BF2FD} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=&sbs=2&sc=2&f=web&vernum=&uid=&did=%7Bc0615dc0-909b-1...)
    HKCU_SearchScopes\{74D8EEE3-C3D8-483B-9582-41449A35BF2A} - "?" (?)
    HKCU_SearchScopes\{753FBD77-A442-4379-AAED-DAE6DDF11BE3} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=&sbs=2&sc=2&f=web&vernum=&uid=&did=%7Bc0615dc0-909b-1...)
    HKCU_SearchScopes\{76B1F531-81D5-45AC-8E94-65F42EF96D90} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=&sbs=2&sc=2&f=web&vernum=&uid=&did=%7Bc0615dc0-909b-1...)
    HKCU_SearchScopes\{76BFF595-CE55-4C77-86CE-E46618098000} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=GNKIW29197&sbs=2&sc=2&f=web&vernum=2.8.167&uid=&did=%...)
    HKCU_SearchScopes\{76EA6B6E-4442-4A49-B4A9-F55CA1BE8BEB} - "?" (?)
    HKCU_SearchScopes\{77389A19-1A05-4C84-962F-AEE6FBC1F1ED} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=GNKIW29197&sbs=2&sc=2&f=web&vernum=2.8.167&uid=&did=%...)
    HKCU_SearchScopes\{7762FE8F-E443-4C6A-BD96-F5A187F91188} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=GNKIW29197&sbs=2&sc=2&f=web&vernum=2.8.167&uid=&did=%...)
    HKCU_SearchScopes\{77E55CC5-D18D-45BA-BA2B-7049A8CB880C} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=GNKIW29197&sbs=2&sc=2&f=web&vernum=2.8.167&uid=&did=%...)
    HKCU_SearchScopes\{79F9E0CB-C554-4761-A062-2DDC6BA96BBC} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=GNKIW29197&sbs=2&sc=2&f=web&vernum=2.8.167&uid=&did=%...)
    HKCU_SearchScopes\{7AD0F63C-BB8D-42E1-A383-4B7EAC40C559} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=GNKIW29197&sbs=2&sc=2&f=web&vernum=2.8.167&uid=&did=%...)
    HKCU_SearchScopes\{7AE5BF0E-CC89-46E7-A6BB-7D878E9CFDF1} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=GNKIW29197&sbs=2&sc=2&f=web&vernum=2.8.167&uid=&did=%...)
    HKCU_SearchScopes\{7B6CEBB6-6251-4C78-AC30-92D998AF52DA} - "?" (?)
    HKCU_SearchScopes\{7C1AEABC-A882-4086-92D6-01503472BD10} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=GNKIW29197&sbs=2&sc=2&f=web&vernum=2.8.167&uid=&did=%...)
    HKCU_SearchScopes\{7C411551-7D2A-433F-9733-CEB405FB2916} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=GNKIW29197&sbs=2&sc=2&f=web&vernum=2.8.167&uid=&did=%...)
    HKCU_SearchScopes\{7C50A33F-ECBD-43BF-9897-6B696FDC2B08} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=&sbs=2&sc=2&f=web&vernum=&uid=&did=%7Bc0615dc0-909b-1...)
    HKCU_SearchScopes\{7C7A6EF8-3658-46BE-9FBB-39E5CBE2FB3C} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=&sbs=2&sc=2&f=web&vernum=&uid=&did=%7Bc0615dc0-909b-1...)
    HKCU_SearchScopes\{7E4F03F3-E632-4C1F-AF54-E624ACFE701C} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=GNKIW29197&sbs=2&sc=2&f=web&vernum=2.8.167&uid=&did=%...)
    HKCU_SearchScopes\{7F2E158F-ECE3-4645-97DE-AC2F8817C9D6} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=&sbs=2&sc=2&f=web&vernum=&uid=&did=%7Bc0615dc0-909b-1...)
    HKCU_SearchScopes\{8044BA9F-921E-4B52-8C53-E27624DEC738} - "?" (?)
    HKCU_SearchScopes\{80A7D062-4176-4CFD-B71F-6A5150B5F143} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=GNKIW29197&sbs=2&sc=2&f=web&vernum=2.8.167&uid=&did=%...)
    HKCU_SearchScopes\{80B88A83-D4A9-476B-A62B-D86289FD12B0} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=GNKIW29197&sbs=2&sc=2&f=web&vernum=2.8.167&uid=&did=%...)
    HKCU_SearchScopes\{80D5BC94-99A4-4604-B83C-31D2F1EC2123} - "?" (?)
    HKCU_SearchScopes\{810503F4-173F-4AA3-BA6F-31DE7F97A258} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=&sbs=2&sc=2&f=web&vernum=&uid=&did=%7Bc0615dc0-909b-1...)
    HKCU_SearchScopes\{81BD9F06-A1DA-4139-A759-5769147F8847} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=GNKIW29197&sbs=2&sc=2&f=web&vernum=2.8.167&uid=&did=%...)
    HKCU_SearchScopes\{8210EC15-76F5-4706-B02F-BDF30784104D} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=GNKIW29197&sbs=2&sc=2&f=web&vernum=2.8.167&uid=&did=%...)
    HKCU_SearchScopes\{821F3B14-4E07-4B3A-8FB2-F777E98CF5F7} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=GNKIW29197&sbs=2&sc=2&f=web&vernum=2.8.167&uid=&did=%...)
    HKCU_SearchScopes\{828B2E92-9364-4C3D-A438-7914253FBC4D} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=&sbs=2&sc=2&f=web&vernum=&uid=&did=%7Bc0615dc0-909b-1...)
    HKCU_SearchScopes\{828EEBAB-6ADB-4881-A4E3-E27B0ABECD2D} - "Google" (?)
    HKCU_SearchScopes\{82E7111B-19E4-402A-B810-DDEB9D3F8526} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=&sbs=2&sc=2&f=web&vernum=&uid=&did=%7Bc0615dc0-909b-1...)
    HKCU_SearchScopes\{82EA8BC6-D573-4DE3-8731-3831849FE622} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=&sbs=2&sc=2&f=web&vernum=&uid=&did=%7Bc0615dc0-909b-1...)
    HKCU_SearchScopes\{838659A7-2B87-40E3-BDDC-A8DA02586F64} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=&sbs=2&sc=2&f=web&vernum=&uid=&did=%7Bc0615dc0-909b-1...)
    HKCU_SearchScopes\{83CC21A5-FEC7-4832-B17D-B815D6C96563} - "?" (?)
    HKCU_SearchScopes\{85299914-7171-4FD4-A164-C70006A5CE20} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=GNKIW29197&sbs=2&sc=2&f=web&vernum=2.8.167&uid=&did=%...)
    HKCU_SearchScopes\{859EEE37-AF7F-4148-BC63-A10DDEF06BE7} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=&sbs=2&sc=2&f=web&vernum=&uid=&did=%7Bc0615dc0-909b-1...)
    HKCU_SearchScopes\{85FF3E5A-F65C-4B02-86DB-88ED6A508686} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=&sbs=2&sc=2&f=web&vernum=&uid=&did=%7Bc0615dc0-909b-1...)
    HKCU_SearchScopes\{8614E82B-2C05-4985-92D5-465C03738545} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=GNKIW29197&sbs=2&sc=2&f=web&vernum=2.8.167&uid=&did=%...)
    HKCU_SearchScopes\{8689061B-C8F7-4904-994A-645F12A5919D} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=GNKIW29197&sbs=2&sc=2&f=web&vernum=2.8.167&uid=&did=%...)
    HKCU_SearchScopes\{86B2AF15-F25D-40C9-83F1-5C3AAD93F9B6} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=&sbs=2&sc=2&f=web&vernum=&uid=&did=%7Bc0615dc0-909b-1...)
    HKCU_SearchScopes\{87002885-6268-4185-BA27-BCE18104F87A} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=GNKIW29197&sbs=2&sc=2&f=web&vernum=2.8.167&uid=&did=%...)
    HKCU_SearchScopes\{87539014-BA57-4F12-8862-D874D21BC990} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=GNKIW29197&sbs=2&sc=2&f=web&vernum=2.8.167&uid=&did=%...)
    HKCU_SearchScopes\{87F7D82D-AF10-45B6-9BAF-9B59D203D6F2} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=GNKIW29197&sbs=2&sc=2&f=web&vernum=2.8.167&uid=&did=%...)
    HKCU_SearchScopes\{88FB6224-7E5E-4D24-9B0B-2D5EB72DA3E6} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=GNKIW29197&sbs=2&sc=2&f=web&vernum=2.8.167&uid=&did=%...)
    HKCU_SearchScopes\{89733CB8-6878-4CB0-8C94-CFD177414FE5} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=&sbs=2&sc=2&f=web&vernum=&uid=&did=%7Bc0615dc0-909b-1...)
    HKCU_SearchScopes\{897DE991-01BA-4B50-8467-470671079303} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=GNKIW29197&sbs=2&sc=2&f=web&vernum=2.8.167&uid=&did=%...)
    HKCU_SearchScopes\{899797EC-5ED0-4124-BA5E-C3DE8B5FD3DD} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=GNKIW29197&sbs=2&sc=2&f=web&vernum=2.8.167&uid=&did=%...)
    HKCU_SearchScopes\{8C9072B0-0C17-4A29-847C-AC7C218B3353} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=GNKIW29197&sbs=2&sc=2&f=web&vernum=2.8.167&uid=&did=%...)
    HKCU_SearchScopes\{8D280960-D36E-4BFC-8C68-E090D2A08346} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=GNKIW29197&sbs=2&sc=2&f=web&vernum=2.8.167&uid=&did=%...)
    HKCU_SearchScopes\{902576E4-937F-42CE-8F26-BB13068B4E90} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=GNKIW29197&sbs=2&sc=2&f=web&vernum=2.8.167&uid=&did=%...)
    HKCU_SearchScopes\{9074C604-A6C3-49FA-8AD1-76EAB8B73232} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=GNKIW29197&sbs=2&sc=2&f=web&vernum=2.8.167&uid=&did=%...)
    HKCU_SearchScopes\{9276CA88-A640-44F1-8762-73F433EDA421} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=&sbs=2&sc=2&f=web&vernum=&uid=&did=%7Bc0615dc0-909b-1...)
    HKCU_SearchScopes\{9296196E-661B-44AD-BF97-BA51093FA9E6} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=GNKIW29197&sbs=2&sc=2&f=web&vernum=2.8.167&uid=&did=%...)
    HKCU_SearchScopes\{93F2E7CE-1804-429B-8971-C466639F61F8} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=GNKIW29197&sbs=2&sc=2&f=web&vernum=2.8.167&uid=&did=%...)
    HKCU_SearchScopes\{94161F89-F7CB-48A0-9CF9-EDC23F702654} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=&sbs=2&sc=2&f=web&vernum=&uid=&did=%7Bc0615dc0-909b-1...)
    HKCU_SearchScopes\{948DA394-8DD0-4B41-81FC-3C608EEEBAFB} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=&sbs=2&sc=2&f=web&vernum=&uid=&did=%7Bc0615dc0-909b-1...)
    HKCU_SearchScopes\{9530600F-7305-4C7C-8889-B9EE2C1E5746} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=GNKIW29197&sbs=2&sc=2&f=web&vernum=2.8.167&uid=&did=%...)
    HKCU_SearchScopes\{95B971CB-9F79-4BA3-BF8E-775A8F8ED84F} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=GNKIW29197&sbs=2&sc=2&f=web&vernum=2.8.167&uid=&did=%...)
    HKCU_SearchScopes\{96002445-9157-461D-A57D-6D3FE13F8EAC} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=GNKIW29197&sbs=2&sc=2&f=web&vernum=2.8.167&uid=&did=%...)
    HKCU_SearchScopes\{9706B2D9-A360-4D86-9C5D-E950171C123C} - "?" (?)
    HKCU_SearchScopes\{9708A5A7-ABB6-43FE-AAA0-32B8AA108D2D} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=&sbs=2&sc=2&f=web&vernum=&uid=&did=%7Bc0615dc0-909b-1...)
    HKCU_SearchScopes\{9851093D-79E8-4C01-B8BE-E092BDBA7337} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=&sbs=2&sc=2&f=web&vernum=&uid=&did=%7Bc0615dc0-909b-1...)
    HKCU_SearchScopes\{99C2F8ED-CCDE-4D96-B370-10EF13DF360E} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=&sbs=2&sc=2&f=web&vernum=&uid=&did=%7Bc0615dc0-909b-1...)
    HKCU_SearchScopes\{99ED0A43-EA29-401A-B785-7B8C2A4F61AF} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=&sbs=2&sc=2&f=web&vernum=&uid=&did=%7Bc0615dc0-909b-1...)
    HKCU_SearchScopes\{9A5FD5C7-12BA-4D86-84A6-D14BD512DF2A} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=GNKIW29197&sbs=2&sc=2&f=web&vernum=2.8.167&uid=&did=%...)
    HKCU_SearchScopes\{9A87BA60-F930-48B2-8E3A-4913E2A29902} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=GNKIW29197&sbs=2&sc=2&f=web&vernum=2.8.167&uid=&did=%...)
    HKCU_SearchScopes\{9AA6D804-D661-44E9-9FED-DEB139ACD226} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=GNKIW29197&sbs=2&sc=2&f=web&vernum=2.8.167&uid=&did=%...)
    HKCU_SearchScopes\{9BAFA229-F6DE-4A77-B66C-244695888C7C} - "Google" (?)
    HKCU_SearchScopes\{9C65643C-416B-4C09-AF6F-9015EF7D0C50} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=&sbs=2&sc=2&f=web&vernum=&uid=&did=%7Bc0615dc0-909b-1...)
    HKCU_SearchScopes\{9C8200FE-9DA1-451F-8B31-6D70E21DF142} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=GNKIW29197&sbs=2&sc=2&f=web&vernum=2.8.167&uid=&did=%...)
    HKCU_SearchScopes\{9CA57E9F-47AC-40A8-8A71-C1A813088E51} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=GNKIW29197&sbs=2&sc=2&f=web&vernum=2.8.167&uid=&did=%...)
    HKCU_SearchScopes\{9D5AFDAF-83BB-43F6-9E7B-FB8D5F0F3B9F} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=&sbs=2&sc=2&f=web&vernum=&uid=&did=%7Bc0615dc0-909b-1...)
    HKCU_SearchScopes\{9D699B1A-D50E-49B4-8FEE-5FBEA5E1CE6A} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=GNKIW29197&sbs=2&sc=2&f=web&vernum=2.8.167&uid=&did=%...)
    HKCU_SearchScopes\{9D73F072-588F-4AD3-9ABE-E8F763F0CA97} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=&sbs=2&sc=2&f=web&vernum=&uid=&did=%7Bc0615dc0-909b-1...)
    HKCU_SearchScopes\{9E482E79-38C5-41C4-AFAF-FC54B6E77849} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=&sbs=2&sc=2&f=web&vernum=&uid=&did=%7Bc0615dc0-909b-1...)
    HKCU_SearchScopes\{9F416028-35DF-439A-BAA8-58BF1F88D0F5} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=&sbs=2&sc=2&f=web&vernum=&uid=&did=%7Bc0615dc0-909b-1...)
    HKCU_SearchScopes\{9FF19F8F-41EE-49AE-9650-B5713A2A5464} - "?" (?)
    HKCU_SearchScopes\{A06B3E73-2BB5-464F-A145-F1A19D61B8D8} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=GNKIW29197&sbs=2&sc=2&f=web&vernum=2.8.167&uid=&did=%...)
    HKCU_SearchScopes\{A07DE7ED-03EE-46B2-9E05-E595F282E802} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=GNKIW29197&sbs=2&sc=2&f=web&vernum=2.8.167&uid=&did=%...)
    HKCU_SearchScopes\{A1A656D2-D8FA-4A9F-A779-89220035F3DE} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=&sbs=2&sc=2&f=web&vernum=&uid=&did=%7Bc0615dc0-909b-1...)
    HKCU_SearchScopes\{A1C76718-399A-4FC0-A9BA-C37D9D0102C3} - "Live Search Powered by Kiwee" (hxxp://search.imgag.com/?c=GNKIW29197&sbs=2&sc=2&f=web&vernum=2.8.167&uid=&did=%...)
    HK
    0
  18. antho60430 Messages postés 80 Statut Membre
     
    voici le rapport de navilog
    Fix Navipromo version 4.0.9 commencé le 04/03/2011 16:25:40,52

    !!! Attention,ce rapport peut indiquer des fichiers/programmes légitimes!!!
    !!! Postez ce rapport sur le forum pour le faire analyser !!!

    Outil exécuté depuis C:\navilog1

    Mise à jour le 24.11.2010 à 16h00 par IL-MAFIOSO

    Microsoft® Windows Vista(TM) Édition Familiale Premium ( v6.0.6002 ) Service Pack 2
    X86-based PC ( Multiprocessor Free : Intel(R) Pentium(R) Dual CPU T2370 @ 1.73GHz )
    BIOS : Ver 1.00PARTTBL
    USER : julie ( Not Administrator ! )
    BOOT : Normal boot

    C:\ (Local Disk) - NTFS - Total:69 Go (Free:6 Go)
    D:\ (Local Disk) - NTFS - Total:69 Go (Free:69 Go)
    E:\ (CD or DVD)
    F:\ (USB)
    G:\ (USB) - FAT32 - Total:1924 Mo (Free:0 Go)

    Recherche executée en mode normal

    [b]Aucune Infection Navipromo/Egdaccess trouvée/b

    *** Scan terminé 04/03/2011 16:26:05,16 ***
    0
  19. antho60430 Messages postés 80 Statut Membre
     
    voici le rapport de fix lop
    ####### FixLop vers 1.0.2.5 [ Recherche ] #######

    # Exécuté depuis C:\Program Files\FixLop
    # Le 04/03/2011 à 16h28
    # Utilisateur : julie | PC-DE-JULIE

    # S.E : Windows Vista (TM) Home Premium | Service Pack 2 | 32 bits
    # CPU : Intel(R) Pentium(R) Dual CPU T2370 @ 1.73GHz

    # Internet Explorer version [8.0.6001.19019]
    # Mozilla Firefox : 3.5.17 (fr)

    ############## [ Processus ]

    ############## [ Fichiers/Dossiers ]

    Fichier présent : C:\Program Files\Circle Developement

    ~~~~ Lecture fichier C:\Users\julie\AppData\Roaming\Mozilla\Firefox\Profiles\pa7tylkv.default\prefs.js ~~~~

    ############## [ Clés de registres ]

    ############## [ Internet Explorer ]

    -- [ HKLM\Software\Microsoft\Internet Explorer\Main ] --

    Search Page : hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
    Default_page_url : hxxp://go.microsoft.com/fwlink/?LinkId=54896
    Default_search_url : hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
    Start Page : hxxp://fr.msn.com/
    Local Page : C:\Windows\System32\blank.htm

    -- [ HKCU\Software\Microsoft\Internet Explorer\Main ] --

    Search Page :
    Default_page_url : hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
    Default_search_url : hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
    Start Page : hxxp://fr.msn.com/
    Local Page : C:\Windows\system32\blank.htm

    ########## [ ! SCAN fini le 04/03/2011 à 16h28 ]
    0
  • 1
  • 2
  • 3
  • 4