Neatsearchsystem

chacha003 -  
moment de grace Messages postés 29099 Date d'inscription   Statut Contributeur sécurité Dernière intervention   -
Bonjour,


J'ai un petit soucis, à chaque fois que je fais une recherche google, je tombe sur un site correspondant a neatsearchsystem.
J'ai regardé ce que je pouvez trouvé sur le net, c'est un virus...
Le soucis c'est que je ne trouve aucun moyen de m'en débarrasser.

Si vous connaissez un moyen merci beaucoup de m'aider.

12 réponses

Résumé de la discussion

Un souci de redirection lors de recherches Google sur Windows XP et Safari 535.2 est décrit comme une infection potentielle par un logiciel type neatsearchsystem, avec difficulté à s’en débarrasser. Plusieurs réponses proposent de vérifier si les redirections apparaissent sur un seul navigateur ou sur tous, évoquent une piste rootkit et recommandent des outils et rapports en ligne. Malwarebytes signale un examen rapide avec quarantaines réussies pour ScanQuery et des éléments propres aux dossiers, et des liens vers VirusTotal et des pages de diagnostic sont partagés. En cas d’évolution, la discussion voit apparaître des mentions de tests sur Chrome et IE et des dépôts externes pour outils supplémentaires, sans conclusion sur l’état final du problème.

Généré automatiquement par IA
sur la base des meilleures réponses
  1. moment de grace Messages postés 29099 Date d'inscription   Statut Contributeur sécurité Dernière intervention   2 274
     
    je doute que le rapport soit complety

    1)

    Télécharge AdwCleaner ( d'Xplode ) sur ton bureau.

    http://general-changelog-team.fr/telechargements/logiciels/viewdownload/75-outils-de-xplode/28-adwcleaner

    Lance le, clique sur SUPPRESSION puis patiente le temps du scan.
    Une fois le scan fini, un rapport s'ouvrira. Poste moi son contenu dans ta prochaine réponse.

    Note : Le rapport est également sauvegardé sous C:\AdwCleane.txt

    .......................

    2)

    Téléchargez MalwareByte's Anti-Malware (que tu pourras garder ensuite)

    https://www.commentcamarche.net/telecharger/securite/14361-malwarebytes-anti-malware/

    . Enregistres le sur le bureau
    . Double cliques sur le fichier téléchargé pour lancer le processus d'installation.
    . Dans l'onglet "mise à jour", cliques sur le bouton Recherche de mise à jour
    . Si le pare-feu demande l'autorisation de se connecter pour malwarebytes, accepte
    . Une fois la mise à jour terminé
    . Rend-toi dans l'onglet, Recherche
    . Sélectionnes Exécuter un examen rapide
    . Cliques sur Rechercher
    . Le scan démarre.
    . A la fin de l'analyse, un message s'affiche : L'examen s'est terminé normalement. Cliquez sur 'Afficher les résultats' pour afficher tous les objets trouvés.
    . Cliques sur Ok pour poursuivre.
    . Si des malwares ont été détectés, clique sur Afficher les résultats
    . Sélectionnes tout (ou laisses cochés) et cliques sur Supprimer la sélection Malwarebytes va détruire les fichiers et clés de registre et en mettre une copie dans la quarantaine.
    . Malwarebytes va ouvrir le bloc-notes et y copier le rapport d'analyse.
    . Rends toi dans l'onglet rapport/log
    . Tu cliques dessus pour l'afficher, une fois affiché
    . Tu cliques sur edition en haut du boc notes, et puis sur sélectionner tous
    . Tu recliques sur edition et puis sur copier et tu reviens sur le forum et dans ta réponse
    . tu cliques droit dans le cadre de la reponse et coller

    Si tu as besoin d'aide regarde ces tutoriels :
    Aide: https://www.malekal.com/tutoriel-malwarebyte-anti-malware/
    http://www.infos-du-net.com/forum/278396-11-tuto-malwarebytes-anti-malware-mbam

    ......................

    3)

    refais un nouveau rapport ZHPdiag stp

    Rend toi sur http://pjjoint.malekal.com/

    Clique sur "Parcourir "

    Sélectionne le rapport ZHPdiag.txt qui se trouve sur ton bureau

    Clique ensuite sur "Envoyer le fichier " et copie/colle le lien dans ton prochain message

    0
  2. chacha003
     
    Malwarebytes' Anti-Malware 1.51.2.1300
    www.malwarebytes.org

    Version de la base de données: 8161

    Windows 5.1.2600 Service Pack 2
    Internet Explorer 6.0.2900.2180

    14/11/2011 15:52:05
    mbam-log-2011-11-14 (15-52-05).txt

    Type d'examen: Examen rapide
    Elément(s) analysé(s): 175235
    Temps écoulé: 5 minute(s), 44 seconde(s)

    Processus mémoire infecté(s): 0
    Module(s) mémoire infecté(s): 0
    Clé(s) du Registre infectée(s): 1
    Valeur(s) du Registre infectée(s): 0
    Elément(s) de données du Registre infecté(s): 0
    Dossier(s) infecté(s): 2
    Fichier(s) infecté(s): 0

    Processus mémoire infecté(s):
    (Aucun élément nuisible détecté)

    Module(s) mémoire infecté(s):
    (Aucun élément nuisible détecté)

    Clé(s) du Registre infectée(s):
    HKEY_LOCAL_MACHINE\SOFTWARE\ScanQuery (Adware.ScanQuery) -> Quarantined and deleted successfully.

    Valeur(s) du Registre infectée(s):
    (Aucun élément nuisible détecté)

    Elément(s) de données du Registre infecté(s):
    (Aucun élément nuisible détecté)

    Dossier(s) infecté(s):
    c:\program files\scanquery (Adware.ScanQuery) -> Quarantined and deleted successfully.
    c:\documents and settings\all users\application data\scanquery (Adware.ScanQuery) -> Quarantined and deleted successfully.

    Fichier(s) infecté(s):
    (Aucun élément nuisible détecté)
    0
    1. chacha003
       
      et pour la suite :
      http://pjjoint.malekal.com/files.php?id=ZHPDiag_u5z7e14n13z11m10r8i11n12t9i14f11e9o9i13o9d7m13v10f15
      0
  3. moment de grace Messages postés 29099 Date d'inscription   Statut Contributeur sécurité Dernière intervention   2 274
     
    as tu fait AdwCleaner ?
    0
    1. chacha003
       
      oui
      0
    2. chacha003
       
      # AdwCleaner v1.318 - Rapport créé le 14/11/2011 à 15:36:59
      # Mis à jour le 13/11/11 à 21h par Xplode
      # Système d'exploitation : Microsoft Windows XP Service Pack 2 (32 bits)
      # Nom d'utilisateur : baudin - JC-20GRAMME (Administrateur)
      # Exécuté depuis : C:\Documents and Settings\baudin\Mes documents\Downloads\adwcleaner0.exe
      # Option [Suppression]


      ***** [Services] *****


      ***** [Fichiers / Dossiers] *****

      Dossier Supprimé : C:\Documents and Settings\baudin\Application Data\CrazyLoader
      Dossier Supprimé : C:\Documents and Settings\baudin\Application Data\OfferBox
      Dossier Supprimé : C:\Documents and Settings\baudin\Application Data\searchquband
      Dossier Supprimé : C:\Documents and Settings\baudin\Application Data\PriceGong
      Dossier Supprimé : C:\Documents and Settings\baudin\Local Settings\Application Data\Conduit
      Dossier Supprimé : C:\Documents and Settings\baudin\Menu Démarrer\Programmes\CrazyLoader
      Dossier Supprimé : C:\Program Files\CrazyLoader
      Dossier Supprimé : C:\Program Files\Windows iLivid Toolbar
      Fichier Supprimé : C:\WINDOWS\system32\conduitEngine.tmp

      ***** [Registre] *****

      Clé Supprimée : HKCU\Software\Offerbox
      Clé Supprimée : HKCU\Software\PriceGong
      Clé Supprimée : HKCU\Software\SweetIm
      Clé Supprimée : HKCU\Software\JavaSoft\Prefs\crazyloader
      Clé Supprimée : HKLM\SOFTWARE\Conduit
      Clé Supprimée : HKLM\SOFTWARE\Offerbox
      Clé Supprimée : HKLM\SOFTWARE\SweetIM
      Clé Supprimée : HKLM\SOFTWARE\Classes\Conduit.Engine
      Clé Supprimée : HKLM\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\2796BAE63F1801E277261BA0D77770028F20EEE4
      Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{2D5E2D34-BED5-4B9F-9793-A31E26E6806E}
      Clé Supprimée : HKLM\SOFTWARE\Google\Chrome\Extensions\bjeikeheijdjdfjbmknpefojickbkmom
      Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu2\Programs\CrazyLoader
      Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{C10DC1F4-CCDF-4224-A24D-B23AFC3573C8}
      Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{99079a25-328f-4bd4-be04-00955acaa0a7}
      Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EEE6C35B-6118-11DC-9C72-001320C79847}
      Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EEE6C35B-6118-11DC-9C72-001320C79847}
      Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{99079a25-328f-4bd4-be04-00955acaa0a7}
      Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\CrazyLoader
      Valeur Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{99079a25-328f-4bd4-be04-00955acaa0a7}]

      ***** [Navigateurs] *****

      -\\ Internet Explorer v6.0.2900.2180

      Remplacé : [HKCU\Software\Microsoft\Internet Explorer\Main - Start Page] = hxxp://www.searchqu.com/406 --> hxxp://www.google.fr
      Remplacé : [HKCU\Software\Microsoft\Internet Explorer\Main - Search Bar] = hxxp://www.searchqu.com/sidebar.html?src=ssb&appid=101&systemid=406&sr=0 --> hxxp://www.google.fr
      Remplacé : [HKLM\SOFTWARE\Microsoft\Internet Explorer\Search - SearchAssistant] = hxxp://www.searchqu.com/web?src=ieb&appid=101&systemid=406&sr=0&q={searchTerms} --> hxxp://www.google.fr

      -\\ Google Chrome v15.0.874.106

      Fichier : C:\Documents and Settings\baudin\Local Settings\Application Data\Google\Chrome\User Data\Default\Preferences

      Supprimée : "host_referral_list": [ 2, [ "hxxp://0.180.channel.facebook.com/", [ "hxxp://0.180.channel.facebook.com/", 1.685856624250563, "hxxp://static.ak.fbcdn.net/", 0.06044823529518772 ] ], [ "hxxp://0.192.channel.facebook.com/", [ "hxxp://0.192.channel.facebook.com/", 1.724384494114967, "hxxp://static.ak.fbcdn.net/", 0.4888610480172125 ] ], [ "hxxp://1.180.channel.facebook.com/", [ "hxxp://1.180.channel.facebook.com/", 0.4300958960670239, "hxxp://static.ak.fbcdn.net/", 0.311966140178994 ] ], [ "hxxp://1.192.channel.facebook.com/", [ "hxxp://1.192.channel.facebook.com/", 1.302947875257048 ] ], [ "hxxp://2.192.channel.facebook.com/", [ "hxxp://2.192.channel.facebook.com/", 0.6532464564635534, "hxxp://static.ak.fbcdn.net/", 0.1271185392208833 ] ], [ "hxxp://3.192.channel.facebook.com/", [ "hxxp://3.192.channel.facebook.com/", 0.4727265148537443 ] ], [ "hxxp://62.108.36.121/", [ "hxxp://ad.zanox.com/", 0.1826261069738414 ] ], [ "hxxp://a.ligatus.com/", [ "hxxp://d.ligatus.com/", 0.354285064391383, "hxxp://i.ligatus.com/", 1.677931995494818, "hxxp://x.ligatus.com/", 0.7085701222349379 ] ], [ "hxxp://a.tribalfusion.com/", [ "hxxp://a.tribalfusion.com/", 0.07001348477161963, "hxxp://cdn5.tribalfusion.com/", 0.08694096495732856, "hxxp://su.addthis.com/", 0.05738103687183679, "hxxp://tags.bluekai.com/", 0.05738103687183679 ] ], [ "hxxp://acces.direction-x.com/", [ "hxxp://banners.direction-x.com/", 1.88569357506144, "hxxp://roule.direction-x.com/", 0.2848051618828095, "hxxp://statsroule.direction-x.com/", 0.1853771090524363 ] ], [ "hxxp://account.ea.com/", [ "hxxp://account.ea.com/", 0.2459238720294687, "hxxp://b.scorecardresearch.com/", 0.2459238720294687, "hxxp://eaeacom.112.2o7.net/", 0.2816564004440068, "hxxps://images.ea.com/", 0.4603190425166974 ] ], [ "hxxp://ad-emea.doubleclick.net/", [ "hxxp://s0.2mdn.net/", 0.7062767817242703, "hxxp://servedby.flashtalking.com/", 0.4918713301294032 ] ], [ "hxxp://ad.adserverplus.com/", [ "hxxp://ad.adserverplus.com/", 0.5211216038805425, "hxxp://ad.yieldmanager.com/", 0.5211216038805425, "hxxp://content.yieldmanager.edgesuite.net/", 0.5211216038805425 ] ], [ "hxxp://ad.doubleclick.net/", [ "hxxp://s0.2mdn.net/", 0.1194643877125031 ] ], [ "hxxp://ad.turn.com/", [ "hxxp://cdn.turn.com/", 0.8764500978772359 ] ], [ "hxxp://ad.yieldmanager.com/", [ "hxxp://ad.yieldmanager.com/", 1.688240235367076, "hxxp://ads.azjmp.com/", 1.688240235367076, "hxxp://hstfr.tradedoubler.com/", 0.09229627343241982, "hxxp://impfr.tradedoubler.com/", 0.3148263642147412, "hxxp://view.atdmt.com/", 0.1770886963926983 ] ], [ "hxxp://admax.quisma.com/", [ "hxxp://ad.doubleclick.net/", 0.09275211880150357, "hxxp://admax.quisma.com/", 0.09275211880150357 ] ], [ "hxxp://ads.affbuzzads.com/", [ "hxxp://ads.affbuzzads.com/", 0.5968401275213049, "hxxp://ads.cinamuse.com/", 0.5211216038805425 ] ], [ "hxxp://ads.azjmp.com/", [ "hxxp://images-cdn.azoogleads.com/", 1.474060504014537 ] ], [ "hxxp://ads.cinamuse.com/", [ "hxxp://www.google-analytics.com/", 0.5968401275213049, "hxxps://gs1.wac.edgecastcdn.net/", 0.5211216038805425 ] ], [ "hxxp://ads.heias.com/", [ "hxxp://ads.heias.com/", 0.3995214003858038, "hxxp://fl01.ct2.comclick.com/", 0.3792778246595056, "hxxp://mobile-shop.orange.fr/", 1.346650716301006, "hxxp://www.chaussuresmodatoi.com/", 1.979337867520938 ] ], [ "hxxp://ads.horyzon-media.com/", [ "hxxp://ds.serving-sys.com/", 0.07966983535531907 ] ], [ "hxxp://adserver.itsfogo.com/", [ "hxxp://partnerfeed.itsfogo.com/", 0.5666640561662435, "hxxps://adserver.itsfogo.com/", 1.208549243921373 ] ], [ "hxxp://afe2.specificclick.net/", [ "hxxp://akamai.smartadserver.com/", 0.6758232614574935, "hxxp://cache.adviva.net/", 0.6758232614574935, "hxxp://www.smartadserver.com/", 0.774019803720548 ] ], [ "hxxp://affiliation.unitead.net/", [ "hxxp://www.dredd.fr/", 0.2389224193927897 ] ], [ "hxxp://allier.fff.fr/", [ "hxxp://adserver.adtech.de/", 0.3805639543522383, "hxxp://aka-cdn-ns.adtech.de/", 0.2020125427645128, "hxxp://allier.fff.fr/", 2.223868238219212, "hxxp://www.google-analytics.com/", 0.2136165298086499 ] ], [ "hxxp://amgtrack.info/", [ "hxxp://ad.amgdgt.com/", 0.07490652530134688, "hxxps://at.amgdgt.com/", 0.07490652530134688, "hxxps://cdns.amgdgt.com/", 0.1489474643459278 ] ], [ "hxxp://api-leplus.nouvelobs.com/", [ "hxxp://api-leplus.nouvelobs.com/", 0.5442398948250001, "hxxp://leplus.nouvelobs.com/", 0.5442398948250001, "hxxp://referentiel.nouvelobs.com/", 0.5442398948250001, "hxxp://ssobs.nouvelobs.com/", 0.5442398948250001 ] ], [ "hxxp://api.zanox.com/", [ "hxxp://zbox.zanox.com/", 0.08694096495732856 ] ], [ "hxxp://api.zynga.com/", [ "hxxp://api.zynga.com/", 2.604564983234799 ] ], [ "hxxp://app.urbandive.net/", [ "hxxp://app.urbandive.net/", 0.4471699820270063, "hxxp://axe.urbandive.net/", 0.2668880129884505, "hxxp://uws1.urbandive.net/", 0.2668880129884505 ] ], [ "hxxp://apps.facebook.com/", [ "hxxp://0.180.channel.facebook.com/", 2.2733802, "hxxp://apps.facebook.com/", 3.264340799999999, "hxxp://creative.ak.fbcdn.net/", 2.6037004, "hxxp://empire-zc.static.zgncdn.com/", 3.264340799999999, "hxxp://photos-b.ak.fbcdn.net/", 3.924981199999999, "hxxp://photos-c.ak.fbcdn.net/", 5.143922001329999, "hxxp://photos-f.ak.fbcdn.net/", 5.988435141952134, "hxxp://photos-h.ak.fbcdn.net/", 11.02249696756242, "hxxp://profile.ak.fbcdn.net/", 19.50989522797294, "hxxp://static.ak.fbcdn.net/", 12.63593939043853 ] ], [ "hxxp://armyattack.digitalchocolate.com/", [ "hxxp://api.geo.kontagent.net/", 0.1616580605561793, "hxxp://crm.digitalchocolate.com/", 0.1928874586181684, "hxxp://dchoc1-a.akamaihd.net/", 0.0991992644322009, "hxxp://static.ak.facebook.com/", 0.06796986637021175 ] ], [ "hxxp://auvergne.fff.fr/", [ "hxxp://adserver.adtech.de/", 0.5109147936522884, "hxxp://aka-cdn-ns.adtech.de/", 0.3735938214453494, "hxxp://auvergne.fff.fr/", 5.86261315883075, "hxxp://www.google-analytics.com/", 0.3735938214453494 ] ], [ "hxxp://baisito.com/", [ "hxxp://baisito.com/", 48.52149486917769, "hxxp://mb.dvdhot.com/", 2.025335319191497, "hxxp://media.yesmessenger.com/", 4.673850736595761, "hxxp://outils.yes-messenger.com/", 2.613894300836889, "hxxp://services.x-traceur.com/", 2.025335319191497, "hxxp://static.tubave.com/", 10.55944055304968 ] ], [ "hxxp://bangbrosnetwork.com/", [ "hxxp://bangbrosnetwork.com/", 3.488752112087344, "hxxp://images1.bangbros.com/", 4.448068166009013, "hxxp://images2.bangbros.com/", 3.009094085126509, "hxxp://partners.bangbrosonline.com/", 1.570120004244004, "hxxp://vote.bangbros.com/", 1.570120004244004, "hxxp://www.google-analytics.com/", 3.968410139048179, "hxxp://x-images1.bangbros.com/", 1.570120004244004, "hxxp://x-images4.bangbros.com/", 6.846358300813186, "hxxp://x-images5.bangbros.com/", 2.049778031204839 ] ], [ "hxxp://banners.adultfriendfinder.com/", [ "hxxp://content.pop6.com/", 0.6118268221263056, "hxxp://graphics.pop6.com/", 0.4630483685260074, "hxxp://piclist.pop6.com/", 1.640076066354395, "hxxp://www.google-analytics.com/", 0.4629581030636104 ] ], [ "hxxp://banners.direction-x.com/", [ "hxxp://banners.direction-x.com/", 1.775708096894462 ] ], [ "hxxp://behaviour.nouvelobs.com/", [ "hxxp://astatic.weborama.fr/", 0.4460433525619454, "hxxp://behaviour.nouvelobs.com/", 0.4460433525619454, "hxxp://wousdat.weborama.fr/", 0.4460433525619454 ] ], [ "hxxp://bi.wooga.com/", [ "hxxp://track-proxy.bi.wooga.com/", 0.05398680625281666 ] ], [ "hxxp://boutique-online.orange.fr/", [ "hxxp://boutique-online.orange.fr/", 0.138654902861517, "hxxp://sdc.francetelecom.com/", 0.07407590700820772, "hxxp://sites.orange.fr/", 0.08483907298375927, "hxxp://statse.webtrendslive.com/", 0.07407590700820772 ] ], [ "hxxp://bouyguestelecom.solution.weborama.fr/", [ "hxxp://elstatic.weborama.fr/", 0.3054321080292188, "hxxp://istatic.weborama.fr/", 0.3418038789068225 ] ], [ "hxxp://c.brightcove.com/", [ "hxxp://admin.brightcove.com/", 0.2454173183798716, "hxxp://brightcove01.brightcove.com/", 0.09686070800122121, "hxxp://c.brightcove.com/", 0.1436494145279233, "hxxp://goku.brightcove.com/", 0.1436494145279233, "hxxp://load.tubemogul.com/", 0.05007200147451912, "hxxp://receive.inplay.tubemogul.com/", 0.08867021720267702, "hxxp://stickyads.adswizz.com/", 0.09686070800122121 ] ], [ "hxxp://cas.be.eu.criteo.com/", [ "hxxp://cas.be.eu.criteo.com/", 0.8845181230226835, "hxxp://dis.eu.criteo.com/", 0.2051915931843847, "hxxp://static.eu.criteo.net/", 1.090613792541262 ] ], [ "hxxp://cas.criteo.com/", [ "hxxp://cas.criteo.com/", 0.2429536940509196, "hxxp://dis.eu.criteo.com/", 0.06481852607701956, "hxxp://static.eu.criteo.net/", 0.3692222433652115 ] ], [ "hxxp://casse-auto-allier.auto-occasion.fr/", [ "hxxp://clk.tradedoubler.com/", 0.6758232614574935, "hxxp://data02.adlooxtracking.com/", 0.8722163459836025, "hxxp://fr.66.clickintext.net/", 0.9704128882466564, "hxxp://fr.66.slidein.clickintext.net/", 3.425326444823021, "hxxp://track.webgains.com/", 0.774019803720548, "hxxp://www.auto-occasion.fr/", 3.327129902559965, "hxxp://www.excedence.com/", 0.6758232614574935, "hxxp://www.oscaro.com/", 1.068609430509712, "hxxp://www.priceminister.com/", 0.774019803720548, "hxxp://www.shoes.fr/", 0.6758232614574935 ] ], [ "hxxp://catcher.pornravage.com/", [ "hxxp://catcher.pornravage.com/", 1.543755536839474, "hxxp://common.eravage.com/", 1.249476046016778, "hxxp://gateway.eravage.com/", 2.025335319191497, "hxxp://staticpr.archiveporno.com/", 2.613894300836889 ] ], [ "hxxp://cdn.contenttoemotion.com/", [ "hxxp://88.191.146.152/", 0.8722163459836025, "hxxp://94.23.23.208/", 0.5186042904789168, "hxxp://94.23.236.222/", 0.9883516577609596, "hxxp://cdn.contenttoemotion.com/", 1.829649850061989, "hxxp://img.contenttoemotion.com/", 1.829649850061989 ] ], [ "hxxp://cdn.datvantage.com/", [ "hxxp://t.datvantage.com/", 0.4600636081545027 ] ], [ "hxxp://cdn.flashtalking.com/", [ "hxxp://stat.flashtalking.com/", 0.07524983205669565 ] ], [ "hxxp://cdn.nextperf.net/", [ "hxxp://cdn.nextperf.net/", 1.773377972768559, "hxxp://img.nextproducts.net/", 7.566389585014766, "hxxp://imgcache.kiabi.com/", 2.363874359777497, "hxxp://ps3.nextperf.net/", 1.775189226709528, "hxxp://www.chaussuresmodatoi.com/", 0.212966225674159 ] ], [ "hxxp://cdn.turn.com/", [ "hxxp://pixel.rubiconproject.com/", 0.1755983798820219 ] ], [ "hxxp://cdn.wibiya.com/", [ "hxxp://edge.quantserve.com/", 0.4573948728475545, "hxxp://pixel.quantserve.com/", 0.4573948728475545 ] ], [ "hxxp://cdn1.monsters.wooga.com/", [ "hxxp://api.facebook.com/", 7.851783044961697, "hxxp://api.live.monsters.wooga.com/", 48.42029308209764, "hxxp://bi.wooga.com/", 9.52308758892614, "hxxp://cdn1.monsters.wooga.com/", 716.7996181031109, "hxxp://profile.ak.fbcdn.net/", 42.91605183619351, "hxxps://api.facebook.com/", 15.5508261569931 ] ], [ "hxxp://cdn1.thumbs.vador.com/", [ "hxxp://cdn1.thumbs.vador.com/", 7.897673201237248, "hxxp://promo.vador.com/", 1.767036090615861 ] ], [ "hxxp://cdn10.skillstar.com/", [ "hxxp://cdn11.skillstar.com/", 0.190252550847396, "hxxp://cdn12.skillstar.com/", 0.1598954266849891, "hxxp://cdn13.skillstar.com/", 0.05774421803454718, "hxxp://www.skillstar.com/", 0.3853113447168868 ] ], [ "hxxp://cdn5.tribalfusion.com/", [ "hxxp://rd.rlcdn.com/", 0.08694096495732856 ] ], [ "hxxp://cfa.priceminister.com/", [ "hxxp://cfa.priceminister.com/", 1.166805972772766 ] ], [ "hxxp://cofidis2.solution.weborama.fr/", [ "hxxp://elstatic.weborama.fr/", 0.05391764018954336, "hxxp://istatic.weborama.fr/", 0.2841316472862764 ] ], [ "hxxp://common.eravage.com/", [ "hxxp://flv.pornravage.com/", 2.025335319191497 ] ], [ "hxxp://content.pop6.com/", [ "hxxp://content.pop6.com/", 0.1156284566792204 ] ], [ "hxxp://contenttoemotion.com/", [ "hxxp://cdn.contenttoemotion.com/", 0.4977749833819846, "hxxp://img.contenttoemotion.com/", 0.2392529092649921 ] ], [ "hxxp://crm.digitalchocolate.com/", [ "hxxp://ajax.googleapis.com/", 0.0745942841409368, "hxxp://crm-stage.digitalchocolate.com/", 0.06513083018275821, "hxxp://crm.digitalchocolate.com/", 0.0745942841409368, "hxxp://d1dxub0l5e01js.cloudfront.net/", 0.06513083018275821, "hxxp://dchoc1-a.akamaihd.net/", 0.09352119205729378, "hxxp://fbads.adparlor.com/", 0.06513083018275821, "hxxps://d1dxub0l5e01js.cloudfront.net/", 0.1124480999736508, "hxxps://www.facebook.com/", 0.06513083018275821 ] ], [ "hxxp://cshoppingbox.partner.leguide.com/", [ "hxxp://cimg.leguide.com/", 2.95143628965821, "hxxp://code.jquery.com/", 0.4377836034912695, "hxxp://csimg.leguide.com/", 4.189421230855781 ] ], [ "hxxp://cstatic.weborama.fr/", [ "hxxp://pixel.mathtag.com/", 0.2501687481819601 ] ], [ "hxxp://cti.w55c.net/", [ "hxxp://ads.adbrite.com/", 0.9285702433741844, "hxxp://i.w55c.net/", 0.9285702433741844, "hxxp://sync.adap.tv/", 0.9285702433741844 ] ], [ "hxxp://d.afdads.com/", [ "hxxp://cdn.afdads.com/", 0.1935097713458059 ] ], [ "hxxp://d1.openx.org/", [ "hxxp://62.108.36.121/", 0.1826261069738414, "hxxp://d1.openx.org/", 0.1594571232532795 ] ], [ "hxxp://dap.criteo.com/", [ "hxxp://abc.linternaute.com/", 0.1420590113442259, "hxxp://ad-emea.doubleclick.net/", 0.2452642759960138, "hxxp://ad.yieldmanager.com/", 0.1420590113442259, "hxxp://googleads.g.doubleclick.net/", 0.1420590113442259, "hxxp://pub.ftv-publicite.fr/", 0.1627000642745835, "hxxp://rfr.a2dfp.net/", 0.1627000642745835, "hxxp://s.openad.tf1.fr/", 0.1420590113442259, "hxxp://view.atdmt.com/", 0.1627000642745835, "hxxp://ww381.smartadserver.com/", 0.1833411172049412, "hxxp://www.googleadservices.com/", 0.1420590113442259 ] ], [ "hxxp://dchoc1-a.akamaihd.net/", [ "hxxp://armyattack.digitalchocolate.com/", 0.1408384618481866, "hxxp://d1dxub0l5e01js.cloudfront.net/", 0.0745942841409368, "hxxp://dchoc1-a.akamaihd.net/", 0.7086456993388989 ] ], [ "hxxp://difflhxxp.hvsdigital.com/", [ "hxxp://stats.hvsdigital.com/", 0.7304838155542581 ] ], [ "hxxp://dis.criteo.com/", [ "hxxp://abc.linternaute.com/", 0.6758232614574935, "hxxp://ad-emea.doubleclick.net/", 0.9704128882466564, "hxxp://ad.caradisiac.com/", 0.8722163459836025, "hxxp://ad.yieldmanager.com/", 0.774019803720548, "hxxp://ads.adverline.com/", 0.6758232614574935, "hxxp://ads.horyzon-media.com/", 0.9704128882466564, "hxxp://ads.prisacom.com/", 0.6758232614574935, "hxxp://mfr.247realmedia.com/", 1.265002515035821, "hxxp://s.openad.tf1.fr/", 0.6758232614574935, "hxxp://securite.01net.com/", 0.6758232614574935 ] ], [ "hxxp://dis.eu.criteo.com/", [ "hxxp://ad-emea.doubleclick.net/", 3.081115116577939, "hxxp://ads.horyzon-media.com/", 2.14577659904535, "hxxp://googleads.g.doubleclick.net/", 2.14577659904535, "hxxp://network.aufeminin.com/", 2.14577659904535, "hxxp://openad.tf1.fr/", 2.769335610733743, "hxxp://pixel.rubiconproject.com/", 2.14577659904535, "hxxp://s.openad.tf1.fr/", 2.457556104889546, "hxxp://securite.01net.com/", 2.14577659904535, "hxxp://ww381.smartadserver.com/", 3.111867558692069, "hxxps://ww381.smartadserver.com/", 2.457556104889546 ] ], [ "hxxp://droit-finances.commentcamarche.net/", [ "hxxp://ba.ccm2.net/", 0.05723552912612365, "hxxp://static.ccm2.net/", 0.3109115707172642, "hxxp://static.criteo.com/", 0.05723552912612365 ] ], [ "hxxp://elstatic.weborama.fr/", [ "hxxp://pmu.eficiens-serving.com/", 1.431841112314667, "hxxp://www.eficiens-serving2.com/", 1.827419620798088 ] ], [ "hxxp://empire-zc.static.zgncdn.com/", [ "hxxp://empire-zc.static.zgncdn.com/", 153.3240055204745, "hxxp://fb-client-zc.empire.zynga.com/", 14.78597061322256, "hxxps://fbcdn-profile-a.akamaihd.net/", 16.146985279298, "hxxps://graph.facebook.com/", 17.03401867153217 ] ], [ "hxxp://empire.static.zgncdn.com/", [ "hxxp://empire.static.zgncdn.com/", 4.874498137386953, "hxxp://fb-client-0.empire.zynga.com/", 0.5185486856429503, "hxxps://fbcdn-profile-a.akamaihd.net/", 0.666920558441738, "hxxps://graph.facebook.com/", 0.666920558441738 ] ], [ "hxxp://emploi.france5.fr/", [ "hxxp://cas.criteo.com/", 0.7097750350518064, "hxxp://dis.eu.criteo.com/", 0.6197289485153833, "hxxp://medias.francetv.fr/", 0.6197289485153833, "hxxp://participer.france5.fr/", 0.6197289485153833, "hxxp://pub.ftv-publicite.fr/", 1.069959381197499, "hxxp://s0.2mdn.net/", 0.7097750350518064, "hxxp://stat3.cybermonitor.com/", 0.6197289485153833, "hxxp://static.eu.criteo.net/", 0.7097750350518064, "hxxp://www.france5.fr/", 0.889867208124652, "hxxp://www.google-analytics.com/", 0.6197289485153833 ] ], [ "hxxp://experts-univers.com/", [ "hxxp://googleads.g.doubleclick.net/", 0.0919856718098416, "hxxp://media.experts-univers.com/", 0.3120699088067217, "hxxp://pixel.mathtag.com/", 0.1556942667299913, "hxxp://www.googleadservices.com/", 0.0919856718098416 ] ], [ "hxxp://f.megaclick.com/", [ "hxxp://ad.adorika.com/", 0.5968401275213049, "hxxp://ad.adserverplus.com/", 0.5211216038805425, "hxxp://ad.yieldmanager.com/", 0.5211216038805425, "hxxp://adx.adnxs.com/", 0.5211216038805425, "hxxp://cm.g.doubleclick.net/", 0.5211216038805425, "hxxp://content.yieldmanager.edgesuite.net/", 0.5211216038805425, "hxxp://f.megaclick.com/", 0.7482771748028294, "hxxp://ib.adnxs.com/", 0.5211216038805425, "hxxp://s.megaclick.com/", 0.8997142220843547, "hxxp://www.pubdirecte.com/", 0.5211216038805425 ] ], [ "hxxp://facebook.topeleven.com/", [ "hxxp://facebook.topeleven.com/", 5.970406652156154, "hxxp://static.ak.facebook.com/", 3.7315041437808, "hxxp://www.google-analytics.com/", 0.9647655256281916, "hxxps://ajax.googleapis.com/", 1.49260167226595, "hxxps://app.appatyze.com/", 0.746300836140755, "hxxps://connect.facebook.net/", 0.746300836132975, "hxxps://nordeus.hs.llnwd.net/", 5.033139163383897, "hxxps://s-static.ak.fbcdn.net/", 0.7463008361407371, "hxxps://www.facebook.com/", 2.238902508422211 ] ], [ "hxxp://fb-client-0.empire.zynga.com/", [ "hxxp://fb-client-0.empire.zynga.com/", 0.1635078449140378, "hxxp://static.ak.facebook.com/", 0.09530629400199937, "hxxp://zbar.zynga.com/", 0.06530246070507367, "hxxp://zgn.static.zynga.com/", 0.3524165484392049, "hxxp://zynga2-a.akamaihd.net/", 0.1553139605958507, "hxxps://fbcdn-profile-a.akamaihd.net/", 0.06530246070507367, "hxxps://graph.facebook.com/", 0.08930552734261425 ] ], [ "hxxp://fb-client-0.mw2.zynga.com/", [ "hxxp://fb-client-0.mw2.zynga.com/", 0.5521113132566277, "hxxp://mw2.static.zgncdn.com/", 2.156537351780162, "hxxp://profile.ak.fbcdn.net/", 0.5521113132566277, "hxxp://static.ak.facebook.com/", 1.033439124813687, "hxxp://www.facebook.com/", 0.7125539171089809, "hxxp://zbar.zynga.com/", 0.7927752190351568, "hxxp://zgn.static.zynga.com/", 2.798307767189573, "hxxp://zynga1-a.akamaihd.net/", 0.7125539171089809, "hxxp://zynga2-a.akamaihd.net/", 1.594988238296923, "hxxps://graph.facebook.com/", 0.7125539171089809 ] ], [ "hxxp://fb-client-zc.empire.zynga.com/", [ "hxxp://fb-client-zc.empire.zynga.com/", 4.399188879119999, "hxxp://graph.facebook.com/", 2.2733802, "hxxp://profile.ak.fbcdn.net/", 2.2733802, "hxxp://static.ak.facebook.com/", 2.9011101378336, "hxxp://static.ak.fbcdn.net/", 1.13417189424, "hxxp://zgn.static.zynga.com/", 5.709704400654704, "hxxp://zynga1-a.akamaihd.net/", 1.13417189424, "hxxp://zynga2-a.akamaihd.net/", 2.3629709659248, "hxxps://api-read.facebook.com/", 2.2733802, "hxxps://fbcdn-profile-a.akamaihd.net/", 1.5658343316 ] ], [ "hxxp://fb.westwars.com/", [ "hxxp://fb.westwars.com/", 0.08488933897501978 ] ], [ "hxxp://fifa.game.playfish.com/", [ "hxxp://b.scorecardresearch.com/", 1.548113842144225, "hxxp://connect.facebook.net/", 1.351711339782644, "hxxp://fifa.game.playfish.com/", 3.904943870483193, "hxxp://static.ak.facebook.com/", 1.744516344505806, "hxxp://static.ak.fbcdn.net/", 1.351711339782644, "hxxp://www.facebook.com/", 1.351711339782644, "hxxps://billing.service.playfish.com/", 1.351711339782644, "hxxps://console-ssl.service.playfish.com/", 2.53012635395213, "hxxps://d2syub29v5lge2.cloudfront.net/", 5.27976138701426, "hxxps://d2x3w3mc51yw0w.cloudfront.net/", 3.11933386103687 ] ], [ "hxxp://files.video-loader.com/", [ "hxxp://files.video-loader.com/", 0.2397672631666668, "hxxp://videos.video-loader.com/", 0.1444054422123235, "hxxp://www.au2m8.com/", 0.1444054422123235 ] ], [ "hxxp://fl01.ct2.comclick.com/", [ "hxxp://ad-emea.doubleclick.net/", 0.08407700513758448, "hxxp://ad.zanox.com/", 0.3572132108066206, "hxxp://elstatic.weborama.fr/", 0.4680219029843263, "hxxp://istatic.weborama.fr/", 0.7601029707952428, "hxxp://numericable.solution.weborama.fr/", 0.4680219029843263, "hxxp://s0.2mdn.net/", 0.084588351547504 ] ], [ "hxxp://fr.66.slidein.clickintext.net/", [ "hxxp://ad.publicidees.com/", 0.9704128882466564, "hxxp://ad.zanox.com/", 0.8722163459836025, "hxxp://affiliation.maty.com/", 0.6758232614574935, "hxxp://cdn.track.webgains.com/", 0.774019803720548, "hxxp://hstfr.tradedoubler.com/", 0.6758232614574935, "hxxp://img.netaffiliation.com/", 0.6758232614574935, "hxxp://media.boulanger.fr/", 0.6758232614574935, "hxxp://track.effiliation.com/", 1.166805972772766, "hxxp://tracking.publicidees.com/", 0.9704128882466564, "hxxp://www.lapostemobile.fr/", 0.6758232614574935 ] ], [ "hxxp://fr.answers.yahoo.com/", [ "hxxp://l.yimg.com/", 0.1765447419977191 ] ], [ "hxxp://fr.mappy.com/", [ "hxxp://ads.horyzon-media.com/", 0.3570289975077283, "hxxp://app.urbandive.net/", 0.2067940233089318, "hxxp://axe.mappy.com/", 0.4267380255359699, "hxxp://fr.mappy.com/", 0.7338183127983101, "hxxp://sbx.pagesjaunes.fr/", 0.2067940233089318, "hxxp://slab3.axe.mappy.com/", 0.2668880129884505, "hxxp://slab5.axe.mappy.com/", 0.2067940233089318, "hxxp://slab9.axe.mappy.com/", 0.2067940233089318, "hxxp://v3.x.mappy.com/", 0.6929543998162366, "hxxp://www.google.com/", 0.4958461136674161 ] ], [ "hxxp://fr.simsland.com/", [ "hxxp://fr.simsland.com/", 3.625581073151804, "hxxp://loga.hit-parade.com/", 0.5211216038805425, "hxxp://pagead2.googlesyndication.com/", 0.5211216038805425, "hxxp://perso0.free.fr/", 0.5211216038805425, "hxxp://www.annuairesims.com/", 0.5211216038805425, "hxxp://www.redirect.free.fr/", 0.5211216038805425, "hxxp://www.rueweb.com.free.fr/", 0.5211216038805425, "hxxp://www.visiofrance.com.free.fr/", 0.5211216038805425, "hxxp://www.visiofrance.com/", 0.5211216038805425 ] ], [ "hxxp://galleries.adult-empire.com/", [ "hxxp://galleries.adult-empire.com/", 0.4347976567290218, "hxxp://www.aepartnership.com/", 0.9474549345812202 ] ], [ "hxxp://galleries.swankdollars.com/", [ "hxxp://galleries.swankdollars.com/", 4.612654163907805 ] ], [ "hxxp://gateway-banner.eravage.com/", [ "hxxp://banner.pornravage.com/", 0.6402629137424144, "hxxp://gateway.eravage.com/", 0.6402629137424144 ] ], [ "hxxp://geobanner.getiton.com/", [ "hxxp://geobanner.getiton.com/", 0.4150024833967, "hxxp://graphics.pop6.com/", 4.551349196839129, "hxxp://maps.google.com/", 0.3516219378634771, "hxxp://photos.pop6.com/", 0.262434079881388, "hxxp://piclist.pop6.com/", 0.9149639534672366, "hxxp://www.google-analytics.com/", 0.3516222041029385 ] ], [ "hxxp://googleads.g.doubleclick.net/", [ "hxxp://google.com/", 0.7399242661938913, "hxxp://googleads.g.doubleclick.net/", 0.9374269708002274, "hxxp://pagead2.googlesyndication.com/", 1.524284625509962, "hxxps://googleads.g.doubleclick.net/", 0.7399242661938913 ] ], [ "hxxp://hosted.met-art.com/", [ "hxxp://hosted.met-art.com/", 23.24263636726532, "hxxp://www.google-analytics.com/", 2.243502233677023, "hxxp://www.magicnude.com/", 0.8433270352356586, "hxxp://www.met-art.com/", 0.2743186933410295, "hxxp://www2.met-art.com/", 17.42781108290899 ] ], [ "hxxp://hotmail.fr/", [ "hxxps://login.live.com/", 0.8051657804933505 ] ], [ "hxxp://hstfr.tradedoubler.com/", [ "hxxp://hstfr.tradedoubler.com/", 0.1750382210934839, "hxxp://vht.tradedoubler.com/", 1.967674022654115, "hxxp://www.lavachequirit.com/", 0.1429968271728476 ] ], [ "hxxp://i1.midasplayer.com/", [ "hxxp://i1.midasplayer.com/", 9.596355068444304, "hxxp://www.king.com/", 7.584232842285086 ] ], [ "hxxp://i4.cdscdn.com/", [ "hxxp://i6.cdscdn.com/", 2.539476730092063, "hxxp://imagesnew.cdiscount.com/", 2.253575376373089, "hxxp://www.cdiscount.com/", 2.539476730092063 ] ], [ "hxxp://i6.cdscdn.com/", [ "hxxp://i6.cdscdn.com/", 1.190821536032844 ] ], [ "hxxp://ib.adnxs.com/", [ "hxxp://ad-emea.doubleclick.net/", 1.030540236257501, "hxxp://bforbank.solution.weborama.fr/", 0.1069663866654423, "hxxp://elstatic.weborama.fr/", 0.1297885206195321, "hxxp://istatic.weborama.fr/", 0.1233277290100819, "hxxp://s0.2mdn.net/", 0.8712075583894563 ] ], [ "hxxp://ikea.mobilier-et-decoration.com/", [ "hxxp://ikea.mobilier-et-decoration.com/", 1.044077511957553 ] ], [ "hxxp://img.cdn.betclick.com/", [ "hxxp://img.cdn.betclic.com/", 0.2594726739484363, "hxxp://img.cdn.betclick.com/", 3.014254610091256, "hxxp://xml.betclick.com/", 1.573537071495775 ] ], [ "hxxp://img.mediaplex.com/", [ "hxxp://dsp.adledge.com/", 0.07524983205669565, "hxxp://img-cdn.mediaplex.com/", 0.08618356833843778, "hxxp://rs.adledge.com/", 0.07524983205669565 ] ], [ "hxxp://impfr.tradedoubler.com/", [ "hxxp://hstfr.tradedoubler.com/", 1.313228117939032 ] ], [ "hxxp://istatic.weborama.fr/", [ "hxxp://pmu.eficiens-serving.com/", 0.9642011258701045 ] ], [ "hxxp://jacquieetmicheltv.net/", [ "hxxp://jacquieetmicheltv.net/", 0.145883197562256 ] ], [ "hxxp://jetekiffe.com/", [ "hxxp://a12.x-traceur.com/", 2.025335319191497, "hxxp://img.media-rendering3.com/", 2.613894300836889, "hxxp://img.www.indecentes-voisines.com/", 2.613894300836889, "hxxp://jetekiffe.com/", 29.68760745652494, "hxxp://thumbs3.smartmovies.net/", 2.319614810014193, "hxxp://www.google-analytics.com/", 2.025335319191497, "hxxp://www.indecentes-voisines.com/", 2.529436058165675, "hxxp://www.jetekiffe.com/", 2.049778031204839, "hxxp://www.p0rno.org/", 5.407384219930683, "hxxp://www.smartmovies.net/", 2.049778031204839 ] ], [ "hxxp://jeu.orange.fr/", [ "hxxp://clienttools.oberon-media.com/", 0.08694096495732856, "hxxp://go.atraxio.com/", 0.09957341285711137, "hxxp://i2.midasplayer.com/", 0.1248383086566769, "hxxp://img.metaboli.fr/", 0.1248383086566769, "hxxp://jeu.orange.fr/", 1.355814849638278, "hxxp://jeuxenligne.orange.fr/", 0.238530339754722, "hxxp://oragamegweb.prod.mobivillage.com/", 0.1374707565564597, "hxxp://tr.production.orangeads.fr/", 0.08694096495732856, "hxxp://usercount.apizone.oberon-media.com/", 0.08694096495732856, "hxxp://www3.smartadserver.com/", 0.09957341285711137 ] ], [ "hxxp://jeux.france2.fr/", [ "hxxp://jeux.france2.fr/", 0.557022618513724, "hxxp://pub.ftv-publicite.fr/", 0.07446365139865456 ] ], [ "hxxp://js2.wlxrs.com/", [ "hxxp://at04.alenty.com/", 0.1535073579044134, "hxxp://js.alenty.com/", 0.1535073579044134, "hxxp://js2.wlxrs.com/", 0.3247786189712957 ] ], [ "hxxp://l3.player.m6.fr/", [ "hxxp://fr-m6.cdn.videoplaza.tv/", 0.1374707565564597, "hxxp://fr-m6.videoplaza.tv/", 0.09957341285711137, "hxxp://images.m6replay.fr/", 0.3395899229529845, "hxxp://l3.player.m6.fr/", 0.1374707565564597, "hxxp://www.m6replay.fr/", 0.1374707565564597 ] ], [ "hxxp://leguide-shopping.programme-tv.net/", [ "hxxp://leguide-shopping.programme-tv.net/", 0.6880911328789271 ] ], [ "hxxp://listes-cadeaux.carrefour.fr/", [ "hxxp://listes-cadeaux.carrefour.fr/", 0.0789972704754811 ] ], [ "hxxp://live.parionsweb.fr/", [ "hxxp://live.parionsweb.fr/", 1.806918381548859, "hxxp://www.google-analytics.com/", 0.4236718565432882 ] ], [ "hxxp://lp.live.monsters.wooga.com/", [ "hxxp://beacon-1.newrelic.com/", 2.208657065706, "hxxp://cdn1.monsters.wooga.com/", 4.775984936953999, "hxxp://lp.live.monsters.wooga.com/", 2.208657065706, "hxxp://openx.wooga.com/", 2.850489033518, "hxxp://static.ak.facebook.com/", 2.850489033518, "hxxps://api-read.facebook.com/", 2.529573049612, "hxxps://d1ros97qkrwjf5.cloudfront.net/", 2.208657065706, "hxxps://graph.facebook.com/", 3.2265669487571, "hxxps://mw.t.wooga.com/", 2.850489033518, "hxxps://secure.footprint.net/", 4.455068953047999 ] ], [ "hxxp://lp.sweetim.com/", [ "hxxp://cdn.download.sweetim.com/", 0.08948870848798139, "hxxp://cdn.web.sweetim.com/", 0.1675045056313497, "hxxp://lp.sweetim.com/", 0.08948870848798139, "hxxp://www.sweetim.com/", 0.08948870848798139 ] ], [ "hxxp://m.adnxs.com/", [ "hxxp://aidps.atdmt.com/", 0.07736726162000104, "hxxp://apnxscm.ac3.msn.com:81/", 0.1013148562169129, "hxxp://cas.be.eu.criteo.com/", 0.8837693124054686, "hxxp://m.adnxs.com/", 0.1013148562169129 ] ], [ "hxxp://maboutique-internet.orange.fr/", [ "hxxp://c.orange.fr/", 0.1368287908393687, "hxxp://i5.woopic.com/", 0.0632765554474551, "hxxp://iapref.orange.fr/", 0.0632765554474551, "hxxp://media.abonnez-vous.orange.fr/", 0.946117630672163, "hxxp://r.orange.fr/", 0.0632765554474551, "hxxp://s.gstat.orange.fr/", 0.0632765554474551, "hxxp://sdc.francetelecom.com/", 0.0632765554474551, "hxxps://boutiques.orange.fr/", 0.109246702567401, "hxxps://c.orange.fr/", 0.07247058487144431, "hxxps://iapref.orange.fr/", 0.0632765554474551 ] ], [ "hxxp://maps.google.fr/", [ "hxxp://gg.google.com/", 0.5614776397776141, "hxxp://khm0.google.fr/", 0.774019803720548, "hxxp://khm1.google.fr/", 0.774019803720548, "hxxp://maps.google.fr/", 1.369041414978032, "hxxp://maps.gstatic.com/", 6.737629008470925, "hxxp://mt0.google.com/", 1.843913010805752, "hxxp://mt1.google.com/", 1.202695325291683, "hxxp://ssl.gstatic.com/", 0.3350375604117457, "hxxp://t0.gstatic.com/", 0.774019803720548 ] ], [ "hxxp://market2.the-adult-company.com/", [ "hxxp://img.media-rendering3.com/", 2.025335319191497 ] ], [ "hxxp://mb.wendise.com/", [ "hxxp://thumbs.wendise.com/", 11.21732595342014, "hxxp://www.google-analytics.com/", 1.73771292226393 ] ], [ "hxxp://media.acces-charme.com/", [ "hxxp://img.acces-charme.com/", 4.08529175495037, "hxxp://media.acces-charme.com/", 20.30762723516155, "hxxp://static.acces-charme.com/", 75.33077662131168, "hxxp://www.acces-charme.com/", 0.8858981326222076, "hxxp://www.google-analytics.com/", 2.358874236931363 ] ], [ "hxxp://media.camsympa.com/", [ "hxxp://media.camsympa.com/", 4.603642443311159, "hxxp://pub.sv2.biz/", 1.73771292226393 ] ], [ "hxxp://media.eurolive.com/", [ "hxxp://media.eurolive.com/", 2.012993327737069 ] ], [ "hxxp://media.prizee.com/", [ "hxxp://media.prizee.com/", 53.67232253002998, "hxxp://pz-cadeaux.s3.amazonaws.com/", 2.127083409456189, "hxxp://www.prizee.com/", 10.20398323067401 ] ], [ "hxxp://media.yesmessenger.com/", [ "hxxp://maps.google.com/", 0.7054335046452285, "hxxp://media.yesmessenger.com/", 20.44685289750148, "hxxp://pub.sv2.biz/", 0.7054335046452285 ] ], [ "hxxp://medias.tuxboard.com/", [ "hxxp://l.longtailvideo.com/", 0.6758232614574935, "hxxp://medias.tuxboard.com/", 0.6758232614574935, "hxxp://plugins.longtailvideo.com/", 0.774019803720548 ] ], [ "hxxp://medias1.tuxboard.com/", [ "hxxp://l.longtailvideo.com/", 0.6758232614574935, "hxxp://medias1.tuxboard.com/", 0.6758232614574935, "hxxp://plugins.longtailvideo.com/", 0.774019803720548, "hxxp://www.tuxboard.com/", 2.737950648981639 ] ], [ "hxxp://mediaspub.lequipe.fr/", [ "hxxp://client.lenchanteur.com/", 0.4510452948431553 ] ], [ "hxxp://mobile-shop.orange.fr/", [ "hxxp://c.orange.fr/", 0.0967385577930694, "hxxp://dis.eu.criteo.com/", 0.0844657556849934, "hxxp://ld1.criteo.com/", 0.0844657556849934, "hxxp://mobile-shop.orange.fr/", 0.5463908250386632, "hxxp://mobile-shop1.orange-static.fr/", 0.4566378139900941, "hxxp://orangefr.widget.criteo.com/", 0.0844657556849934, "hxxp://s.gstat.orange.fr/", 0.0844657556849934, "hxxp://sdc.francetelecom.com/", 0.0844657556849934, "hxxps://boutiques.orange.fr/", 0.2268612556044694, "hxxps://c.orange.fr/", 0.1591352708968958 ] ], [ "hxxp://mw2.static.zgncdn.com/", [ "hxxp://client-0.mw2.zynga.com/", 1.033439124813687, "hxxp://mw2.static.zgncdn.com/", 2.156537351780162, "hxxp://mw2.static1.zgncdn.com/", 1.755430842149277, "hxxp://mw2.static2.zgncdn.com/", 2.316979955632512, "hxxp://mw2.static3.zgncdn.com/", 1.996094747927807, "hxxp://zcache.zgncdn.com/", 0.5521113132566277, "hxxps://fbcdn-profile-a.akamaihd.net/", 0.7125539171089809, "hxxps://graph.facebook.com/", 0.7125539171089809 ] ], [ "hxxp://n21.ad.ad-srv.net/", [ "hxxp://ad.zanox.com/", 0.2147743836410109, "hxxp://static.groupon.fr/", 0.1875268872089423, "hxxp://www.groupon.fr/", 0.1875268872089423 ] ], [ "hxxp://n24.ad.ad-srv.net/", [ "hxxp://action.metaffiliation.com/", 1.298664854951716, "hxxp://ad.zanox.com/", 1.487359748406239, "hxxp://img.netaffiliation.com/", 1.298664854951716 ] ], [ "hxxp://n3.ad.ad-srv.net/", [ "hxxp://action.metaffiliation.com/", 0.1420590113442259, "hxxp://ad.zanox.com/", 0.1627000642745835, "hxxp://cdn.contentspread.net/", 0.1627000642745835, "hxxp://img.netaffiliation.com/", 0.1420590113442259, "hxxp://img.tati.fr/", 0.1420590113442259, "hxxp://ui.zanox-affiliate.de/", 0.1420590113442259 ] ], [ "hxxp://n42.ad.ad-srv.net/", [ "hxxp://ad.zanox.com/", 0.2246232230656564, "hxxp://eulerian.brandalley.fr/", 0.1420590113442259, "hxxp://hstfr.tradedoubler.com/", 0.1420590113442259, "hxxp://impfr.tradedoubler.com/", 0.1420590113442259, "hxxp://media.boulanger.fr/", 0.1627000642745835, "hxxp://www.asos.fr/", 0.1420590113442259 ] ], [ "hxxp://n46.ad.ad-srv.net/", [ "hxxp://ad.zanox.com/", 0.0518856741485609, "hxxp://banners.contentfeed.net/", 0.3371630265006705, "hxxp://banniere.reussissonsensemble.fr/", 0.3371630265006705, "hxxp://cdn.contentspread.net/", 0.4654862679300305, "hxxp://static.groupon.fr/", 0.294388612690884, "hxxp://track.effiliation.com/", 0.294388612690884, "hxxp://www.atelierdeschefs.com/", 0.294388612690884, "hxxp://www.prizee.com/", 0.294388612690884 ] ], [ "hxxp://n7-auto-pieces.com/", [ "hxxp://n7-auto-pieces.com/", 3.719916071612186, "hxxp://www.n7-auto-pieces.com/", 0.9704128882466564 ] ], [ "hxxp://noplp.france2.fr/", [ "hxxp://www.france2.fr/", 0.1579417536041384, "hxxp://www.google-analytics.com/", 0.05285653346812919 ] ], [ "hxxp://nxtck.com/", [ "hxxp://ad.zanox.com/", 0.6493012908768084, "hxxp://cdn.nextperf.net/", 0.6493012908768084, "hxxp://www.kiabi.com/", 0.6493012908768084 ] ], [ "hxxp://omg.esprit-click.com/", [ "hxxp://i.esprit-click.com/", 0.9359996251679994 ] ], [ "hxxp://onlinecatalogue.ikea.com/", [ "hxxp://d1mu9ule1cy7bp.cloudfront.net/", 5.306249197284277, "hxxp://ecbooklog.ecweb.is/", 1.978252127919575, "hxxp://ikea.122.2o7.net/", 1.511164819938565, "hxxp://onlinecatalogue.ikea.com/", 6.707511121227324 ] ], [ "hxxp://openx.wooga.com/", [ "hxxp://beacon-1.newrelic.com/", 1.337494827162624, "hxxp://cdn12.wooga.com/", 4.254223200798246, "hxxp://openx.wooga.com/", 1.337426021626768, "hxxps://d1ros97qkrwjf5.cloudfront.net/", 0.3487694648691003 ] ], [ "hxxp://outils.yesmessenger.com/", [ "hxxp://outils.yesmessenger.com/", 4.020075335057307 ] ], [ "hxxp://p4.avfkqhr3tq436.pagymtvhk75hejiw.if.v4.ipv6-exp.l.google.com/", [ "hxxp://p4.avfkqhr3tq436.pagymtvhk75hejiw.if.v4.ipv6-exp.l.google.com/", 0.5849438978466032 ] ], [ "hxxp://p4.c2ccaxq6yhg6u.d2szoczrfisgiwzy.if.v4.ipv6-exp.l.google.com/", [ "hxxp://p4.c2ccaxq6yhg6u.d2szoczrfisgiwzy.if.v4.ipv6-exp.l.google.com/", 0.06147507191386605 ] ], [ "hxxp://p4.dhxg7pecdipdy.vgy6ym3wcnu6ykvm.if.v4.ipv6-exp.l.google.com/", [ "hxxp://p4.dhxg7pecdipdy.vgy6ym3wcnu6ykvm.if.v4.ipv6-exp.l.google.com/", 0.07972473850592197 ] ], [ "hxxp://p4.gm5qdaaa2otnq.ml7bg626bfjnqwgv.if.v4.ipv6-exp.l.google.com/", [ "hxxp://p4.gm5qdaaa2otnq.ml7bg626bfjnqwgv.if.v4.ipv6-exp.l.google.com/", 0.3282755444739386 ] ], [ "hxxp://p4.grpypjega4obc.axcvnreexqlh2vln.if.v4.ipv6-exp.l.google.com/", [ "hxxp://p4.grpypjega4obc.axcvnreexqlh2vln.if.v4.ipv6-exp.l.google.com/", 0.1896298188199763 ] ], [ "hxxp://pagead2.googlesyndication.com/", [ "hxxp://pagead2.googlesyndication.com/", 0.5952074997242605 ] ], [ "hxxp://participer.france5.fr/", [ "hxxp://participer.france5.fr/", 0.9799132946610761 ] ], [ "hxxp://partner.shopping.orange.fr/", [ "hxxp://cimg.leguide.com/", 0.09957341285711137, "hxxp://ecx.images-amazon.com/", 0.08694096495732856, "hxxp://img.orangeregie.leguide.com/", 0.08694096495732856, "hxxp://lgstats.leguide.com/", 0.08694096495732856, "hxxp://shopping.orange.fr/", 0.08694096495732856 ] ], [ "hxxp://pdv.porn.fr/", [ "hxxp://logi151.xiti.com/", 0.9354382357610492, "hxxp://pdv.porn.fr/", 10.65361633506465, "hxxp://public.porn.fr/", 5.599840478700095, "hxxp://thumbsp.porn.fr/", 42.73049639339586, "hxxp://www.porn.fr/", 0.5884838741510292 ] ], [ "hxxp://petite-chatte.org/", [ "hxxp://a22.x-traceur.com/", 2.025335319191497, "hxxp://gateway.eravage.com/", 2.025335319191497, "hxxp://ktu.sv2.biz/", 3.496732773304977, "hxxp://media.acces-charme.com/", 2.025335319191497, "hxxp://petite-chatte.org/", 49.99289232329119, "hxxp://services.x-traceur.com/", 2.025335319191497, "hxxp://www.laly-filmsx.com/", 2.025335319191497, "hxxp://www.petite-chatte.org/", 2.025335319191497, "hxxp://www.pornravage.com/", 2.025335319191497, "hxxp://www.secret-de-cindy.com/", 2.025335319191497 ] ], [ "hxxp://peugeot.piecedoccasion.fr/", [ "hxxp://peugeot.piecedoccasion.fr/", 2.260715453583193, "hxxp://www.google-analytics.com/", 0.6424364370880548 ] ], [ "hxxp://peugeot.piecesavenue.com/", [ "hxxp://peugeot.piecesavenue.com/", 6.408537398774624, "hxxp://www.google-analytics.com/", 0.5108530704555615 ] ], [ "hxxp://photos-de-cul.com/", [ "hxxp://a18.x-traceur.com/", 2.025335319191497, "hxxp://img.www.indecentes-voisines.com/", 2.613894300836889, "hxxp://mb.archivesexy.com/", 2.025335319191497, "hxxp://media.acces-charme.com/", 2.319614810014193, "hxxp://photos-de-cul.com/", 42.63590505272371, "hxxp://services.x-traceur.com/", 2.025335319191497, "hxxp://thumbs.wendise.com/", 2.613894300836889, "hxxp://thumbs3.smartmovies.net/", 2.613894300836889, "hxxp://www.indecentes-voisines.com/", 2.613894300836889, "hxxp://www.smartmovies.net/", 2.319614810014193 ] ], [ "hxxp://pixel.invitemedia.com/", [ "hxxp://pixel.rubiconproject.com/", 0.9285702433741844, "hxxp://segment-pixel.invitemedia.com/", 0.364393466749374, "hxxp://tags.bluekai.com/", 0.364393466749374, "hxxp://tap.rubiconproject.com/", 0.9285702433741844 ] ], [ "hxxp://platform.twitter.com/", [ "hxxp://cdn.api.twitter.com/", 0.6640989555453576, "hxxp://platform.twitter.com/", 2.152997147923919 ] ], [ "hxxp://promo.eurolive.com/", [ "hxxp://promo.eurolive.com/", 3.031630657003979 ] ], [ "hxxp://promo.vador.com/", [ "hxxp://cdn1.static.vador.com/", 5.345534382687872, "hxxp://cdn1.thumbs.vador.com/", 0.5888390439148596, "hxxp://promo.vador.com/", 0.8833197164543539 ] ], [ "hxxp://pub.payglad.com/", [ "hxxp://banners.direction-x.com/", 0.9182854210828584, "hxxp://pub.payglad.com/", 3.679595738396221, "hxxp://test.direction-x.com/", 0.5821749640628718 ] ], [ "hxxp://public.porn.fr/", [ "hxxp://public.porn.fr/", 4.8471833858614 ] ], [ "hxxp://publicinvasion.bangbros1.com/", [ "hxxp://publicinvasion.bangbros1.com/", 5.745717918975983 ] ], [ "hxxp://resources.infolinks.com/", [ "hxxp://rt1301.infolinks.com/", 0.5968401275213049 ] ], [ "hxxp://rg.revolvermaps.com/", [ "hxxp://rg.revolvermaps.com/", 3.22893336029691 ] ], [ "hxxp://rya.rockyou.com/", [ "hxxp://b.scorecardresearch.com/", 0.08785650042191764, "hxxp://bannerfarm.ace.advertising.com/", 0.05492271005791945 ] ], [ "hxxp://s.kewego.com/", [ "hxxp://api.kewego.com/", 3.412148272251843, "hxxp://s.kewego.com/", 1.504039041058379, "hxxp://tll.kewego.com/", 1.885660887297072, "hxxp://www.kewego.com/", 1.885660887297072 ] ], [ "hxxp://s.megaclick.com/", [ "hxxp://f.megaclick.com/", 0.1933579219744897 ] ], [ "hxxp://s.ytimg.com/", [ "hxxp://googleads.g.doubleclick.net/", 0.7777452655892271, "hxxp://i2.ytimg.com/", 0.9704128882466564, "hxxp://i4.ytimg.com/", 0.774019803720548, "hxxp://o-o.preferred.orange-par1.v11.lscache5.c.youtube.com/", 0.4918713301294032, "hxxp://o-o.preferred.orange-par1.v14.lscache4.c.youtube.com/", 0.4918713301294032, "hxxp://s.youtube.com/", 0.4918713301294032, "hxxp://s.ytimg.com/", 0.6053545281628883, "hxxp://s0.2mdn.net/", 0.5473272186728071, "hxxp://s2.youtube.com/", 0.1554741249826479, "hxxp://www.youtube.com/", 0.3023585812262254 ] ], [ "hxxp://s0.2mdn.net/", [ "hxxp://airfrance.bannerfactory.fr/", 0.08618356833843778, "hxxp://gmf-rugby-banniere.tbwa-paris.com/", 0.4079839037956786, "hxxp://googleads.g.doubleclick.net/", 0.4918713301294032, "hxxp://motifcdn2.doubleclick.net/", 0.4918713301294032, "hxxp://s0.2mdn.net/", 0.4918713301294032, "hxxp://www.googleadservices.com/", 0.4918713301294032 ] ], [ "hxxp://s15281735.onlinehome-server.info/", [ "hxxp://www.eboostvo.com/", 0.6758232614574935, "hxxp://www.gtlien.com/", 0.8722163459836025 ] ], [ "hxxp://s7.addthis.com/", [ "hxxp://ds.addthis.com/", 0.1237444749986771, "hxxp://l.addthiscdn.com/", 0.7811050704805154 ] ], [ "hxxp://secure.shared.live.com/", [ "hxxp://sn1msg2010829.gateway.messenger.live.com/", 2.14577659904535, "hxxp://sn1msg2020211.sn1.gateway.edge.messenger.live.com/", 0.8090091894001237, "hxxp://sn1msg3010706.sn1.gateway.edge.messenger.live.com/", 0.1508094298355345, "hxxp://sn1msg3010811.gateway.messenger.live.com/", 0.05366731644145602, "hxxp://sn1msg3010833.sn1.gateway.edge.messenger.live.com/", 0.2723918619685038, "hxxp://sn1msg3010834.sn1.gateway.edge.messenger.live.com/", 2.14577659904535, "hxxp://sn1msg3020133.sn1.gateway.edge.messenger.live.com/", 0.4237864986621632, "hxxp://sn1msg3020319.gateway.messenger.live.com/", 0.1508094298355345, "hxxps://js2.wlxrs.com/", 0.771179021541732, "hxxps://secure.wlxrs.com/", 0.7717047922524893 ] ], [ "hxxp://sitedefou.com/", [ "hxxp://sitedefou.com/", 4.279479053757193, "hxxp://www.google-analytics.com/", 1.558611020109449, "hxxp://www.webchoc.org/", 4.834473356205843 ] ], [ "hxxp://siteunder.numericable.fr/", [ "hxxp://siteunder.numericable.fr/", 0.2164284904923876 ] ], [ "hxxp://sn113w.snt113.mail.live.com/", [ "hxxp://gfx2.hotmail.com/", 3.70467412826633, "hxxp://gfx3.hotmail.com/", 9.004925727617662, "hxxp://gfx4.hotmail.com/", 2.769335610733743, "hxxp://h.live.com/", 2.457556104889546, "hxxp://js.wlxrs.com/", 9.460812192993338, "hxxp://msc.wlxrs.com/", 2.457556104889546, "hxxp://secure.wlxrs.com/", 8.402644426391582, "hxxp://sn113w.snt113.mail.live.com/", 6.198910175019899, "hxxp://www.mailorama.fr/", 4.016453634110526, "hxxps://secure.wlxrs.com/", 3.392894622422135 ] ], [ "hxxp://sn1msg1010509.sn1.gateway.edge.messenger.live.com/", [ "hxxp://shared.live.com/", 0.278950849757824, "hxxp://sn1msg1010509.sn1.gateway.edge.messenger.live.com/", 0.278950849757824 ] ], [ "hxxp://sn1msg1010522.gateway.messenger.live.com/", [ "hxxp://sn1msg1010522.gateway.messenger.live.com/", 3.111279437530011 ] ], [ "hxxp://sn1msg1010616.gateway.messenger.live.com/", [ "hxxp://sn1msg1010616.gateway.messenger.live.com/", 0.924911291466851 ] ], [ "hxxp://sn1msg1010621.gateway.messenger.live.com/", [ "hxxp://sn1msg1010621.gateway.messenger.live.com/", 0.5190681686126378 ] ], [ "hxxp://sn1msg1010640.sn1.gateway.edge.messenger.live.com/", [ "hxxp://shared.live.com/", 0.4018324634836641, "hxxp://sn1msg1010640.sn1.gateway.edge.messenger.live.com/", 0.4018324634836641 ] ], [ "hxxp://sn1msg1010711.sn1.gateway.edge.messenger.live.com/", [ "hxxp://shared.live.com/", 0.0676411044314246, "hxxp://sn1msg1010711.sn1.gateway.edge.messenger.live.com/", 0.0676411044314246 ] ], [ "hxxp://sn1msg1010724.gateway.messenger.live.com/", [ "hxxp://sn1msg1010724.gateway.messenger.live.com/", 0.1528109112880595 ] ], [ "hxxp://sn1msg1010728.gateway.messenger.live.com/", [ "hxxp://sn1msg1010728.gateway.messenger.live.com/", 2.330779429424695 ] ], [ "hxxp://sn1msg1010739.sn1.gateway.edge.messenger.live.com/", [ "hxxp://shared.live.com/", 0.06147507191386605, "hxxp://sn1msg1010739.sn1.gateway.edge.messenger.live.com/", 0.06147507191386605 ] ], [ "hxxp://sn1msg1010810.sn1.gateway.edge.messenger.live.com/", [ "hxxp://shared.live.com/", 0.7808220282465778, "hxxp://sn1msg1010810.sn1.gateway.edge.messenger.live.com/", 0.7808220282465778 ] ], [ "hxxp://sn1msg1010811.sn1.gateway.edge.messenger.live.com/", [ "hxxp://shared.live.com/", 0.05802450937920715, "hxxp://sn1msg1010811.sn1.gateway.edge.messenger.live.com/", 0.05802450937920715 ] ], [ "hxxp://sn1msg1010815.gateway.messenger.live.com/", [ "hxxp://sn1msg1010815.gateway.messenger.live.com/", 2.056340104668041 ] ], [ "hxxp://sn1msg1020111.sn1.gateway.edge.messenger.live.com/", [ "hxxp://shared.live.com/", 0.1066964385052727, "hxxp://sn1msg1020111.sn1.gateway.edge.messenger.live.com/", 0.1066964385052727 ] ], [ "hxxp://sn1msg1020117.gateway.messenger.live.com/", [ "hxxp://shared.live.com/", 0.4018324634836641, "hxxp://sn1msg1020117.gateway.messenger.live.com/", 0.5769902039765427 ] ], [ "hxxp://sn1msg1020121.gateway.messenger.live.com/", [ "hxxp://sn1msg1020121.gateway.messenger.live.com/", 1.058249101750589 ] ], [ "hxxp://sn1msg1020211.sn1.gateway.edge.messenger.live.com/", [ "hxxp://shared.live.com/", 0.0781893762112512, "hxxp://sn1msg1020211.sn1.gateway.edge.messenger.live.com/", 0.0781893762112512 ] ], [ "hxxp://sn1msg1020226.gateway.messenger.live.com/", [ "hxxp://sn1msg1020226.gateway.messenger.live.com/", 1.601149859688571 ] ], [ "hxxp://sn1msg1020240.sn1.gateway.edge.messenger.live.com/", [ "hxxp://shared.live.com/", 0.6565825732037985, "hxxp://sn1msg1020240.sn1.gateway.edge.messenger.live.com/", 0.6565825732037985 ] ], [ "hxxp://sn1msg2010522.gateway.messenger.live.com/", [ "hxxp://sn1msg2010522.gateway.messenger.live.com/", 0.06685963565240703 ] ], [ "hxxp://sn1msg2010523.gateway.messenger.live.com/", [ "hxxp://sn1msg2010523.gateway.messenger.live.com/", 0.1114099256495704 ] ], [ "hxxp://sn1msg2010539.sn1.gateway.edge.messenger.live.com/", [ "hxxp://shared.live.com/", 0.0844657556849934, "hxxp://sn1msg2010539.sn1.gateway.edge.messenger.live.com/", 0.0844657556849934 ] ], [ "hxxp://sn1msg2010631.gateway.messenger.live.com/", [ "hxxp://sn1msg2010631.gateway.messenger.live.com/", 0.9811511974797592 ] ], [ "hxxp://sn1msg2010640.sn1.gateway.edge.messenger.live.com/", [ "hxxp://shared.live.com/", 0.05169354788278111, "hxxp://sn1msg2010640.sn1.gateway.edge.messenger.live.com/", 0.05169354788278111 ] ], [ "hxxp://sn1msg2010722.gateway.messenger.live.com/", [ "hxxp://sn1msg2010722.gateway.messenger.live.com/", 0.1144765475982469 ] ], [ "hxxp://sn1msg2010728.gateway.messenger.live.com/", [ "hxxp://sn1msg2010728.gateway.messenger.live.com/", 1.234633121586469 ] ], [ "hxxp://sn1msg2010739.sn1.gateway.edge.messenger.live.com/", [ "hxxp://shared.live.com/", 0.1227063848829763, "hxxp://sn1msg2010739.sn1.gateway.edge.messenger.live.com/", 0.1227063848829763 ] ], [ "hxxp://sn1msg2010816.gateway.messenger.live.com/", [ "hxxp://sn1msg2010816.gateway.messenger.live.com/", 2.666791140213729 ] ], [ "hxxp://sn1msg2010829.gateway.messenger.live.com/", [ "hxxp://sn1msg2010829.gateway.messenger.live.com/", 3.392894622422135 ] ], [ "hxxp://sn1msg2020110.sn1.gateway.edge.messenger.live.com/", [ "hxxp://shared.live.com/", 0.3282755444739386, "hxxp://sn1msg2020110.sn1.gateway.edge.messenger.live.com/", 0.3282755444739386 ] ], [ "hxxp://sn1msg2020121.gateway.messenger.live.com/", [ "hxxp://sn1msg2020121.gateway.messenger.live.com/", 0.1634831616612047 ] ], [ "hxxp://sn1msg2020125.gateway.messenger.live.com/", [ "hxxp://sn1msg2020125.gateway.messenger.live.com/", 0.09174815585601133 ] ], [ "hxxp://sn1msg2020133.gateway.messenger.live.com/", [ "hxxp://sn1msg2020133.gateway.messenger.live.com/", 0.1543069402252034 ] ], [ "hxxp://sn1msg2020211.sn1.gateway.edge.messenger.live.com/", [ "hxxp://shared.live.com/", 1.857229544077419, "hxxp://sn1msg2020211.sn1.gateway.edge.messenger.live.com/", 1.857229544077419 ] ], [ "hxxp://sn1msg2020216.gateway.messenger.live.com/", [ "hxxp://sn1msg2020216.gateway.messenger.live.com/", 0.5769902039765427 ] ], [ "hxxp://sn1msg2020218.gateway.messenger.live.com/", [ "hxxp://sn1msg2020218.gateway.messenger.live.com/", 0.942785233318274 ] ], [ "hxxp://sn1msg2020220.gateway.messenger.live.com/", [ "hxxp://sn1msg2020220.gateway.messenger.live.com/", 0.09085864371942265 ] ], [ "hxxp://sn1msg3010706.sn1.gateway.edge.messenger.live.com/", [ "hxxp://shared.live.com/", 1.204228275505104, "hxxp://sn1msg3010706.sn1.gateway.edge.messenger.live.com/", 1.204228275505104 ] ], [ "hxxp://sn1msg3010707.gateway.messenger.live.com/", [ "hxxp://sn1msg3010707.gateway.messenger.live.com/", 0.1337256836797691 ] ], [ "hxxp://sn1msg3010716.gateway.messenger.live.com/", [ "hxxp://sn1msg3010716.gateway.messenger.live.com/", 0.3002208050129051 ] ], [ "hxxp://sn1msg3010721.gateway.messenger.live.com/", [ "hxxp://sn1msg3010721.gateway.messenger.live.com/", 0.2452642759960138 ] ], [ "hxxp://sn1msg3010727.gateway.messenger.live.com/", [ "hxxp://sn1msg3010727.gateway.messenger.live.com/", 0.07074622739331947 ] ], [ "hxxp://sn1msg3010811.gateway.messenger.live.com/", [ "hxxp://sn1msg3010811.gateway.messenger.live.com/", 0.9159223855497107 ] ], [ "hxxp://sn1msg3010827.gateway.messenger.live.com/", [ "hxxp://sn1msg3010827.gateway.messenger.live.com/", 0.4713700125779626 ] ], [ "hxxp://sn1msg3010833.sn1.gateway.edge.messenger.live.com/", [ "hxxp://shared.live.com/", 0.4163026780205873, "hxxp://sn1msg3010833.sn1.gateway.edge.messenger.live.com/", 0.4163026780205873 ] ], [ "hxxp://sn1msg3010834.sn1.gateway.edge.messenger.live.com/", [ "hxxp://shared.live.com/", 0.3761880567857649, "hxxp://sn1msg3010834.sn1.gateway.edge.messenger.live.com/", 0.3761880567857649 ] ], [ "hxxp://sn1msg3020133.sn1.gateway.edge.messenger.live.com/", [ "hxxp://shared.live.com/", 1.474060504014537, "hxxp://sn1msg3020133.sn1.gateway.edge.messenger.live.com/", 1.474060504014537 ] ], [ "hxxp://sn1msg3020208.gateway.messenger.live.com/", [ "hxxp://sn1msg3020208.gateway.messenger.live.com/", 0.05306567976064198 ] ], [ "hxxp://sn1msg3020228.gateway.messenger.live.com/", [ "hxxp://sn1msg3020228.gateway.messenger.live.com/", 0.3430680893845182 ] ], [ "hxxp://sn1msg3020231.sn1.gateway.edge.messenger.live.com/", [ "hxxp://shared.live.com/", 0.1789859996603801, "hxxp://sn1msg3020231.sn1.gateway.edge.messenger.live.com/", 0.1789859996603801 ] ], [ "hxxp://sn1msg3020316.gateway.messenger.live.com/", [ "hxxp://sn1msg3020316.gateway.messenger.live.com/", 0.1817260015110316 ] ], [ "hxxp://sn1msg3020319.gateway.messenger.live.com/", [ "hxxp://sn1msg3020319.gateway.messenger.live.com/", 1.729148293032969 ] ], [ "hxxp://sn1msg3020322.gateway.messenger.live.com/", [ "hxxp://sn1msg3020322.gateway.messenger.live.com/", 0.3090185635162116 ] ], [ "hxxp://sn1msg3020329.gateway.messenger.live.com/", [ "hxxp://sn1msg3020329.gateway.messenger.live.com/", 0.05248489702257039 ] ], [ "hxxp://sn1msg3020427.gateway.messenger.live.com/", [ "hxxp://sn1msg3020427.gateway.messenger.live.com/", 0.05262090867432177 ] ], [ "hxxp://sn1msg3020433.sn1.gateway.edge.messenger.live.com/", [ "hxxp://shared.live.com/", 0.5290067947091094, "hxxp://sn1msg3020433.sn1.gateway.edge.messenger.live.com/", 0.5290067947091094 ] ], [ "hxxp://sn1msg3030116.gateway.messenger.live.com/", [ "hxxp://sn1msg3030116.gateway.messenger.live.com/", 0.0962617644923922 ] ], [ "hxxp://sn1msg3030125.gateway.messenger.live.com/", [ "hxxp://sn1msg3030125.gateway.messenger.live.com/", 0.2595216392036553 ] ], [ "hxxp://sn1msg3030126.gateway.messenger.live.com/", [ "hxxp://sn1msg3030126.gateway.messenger.live.com/", 0.1572889270409144 ] ], [ "hxxp://sn1msg3030131.sn1.gateway.edge.messenger.live.com/", [ "hxxp://shared.live.com/", 0.05442348752376278, "hxxp://sn1msg3030131.sn1.gateway.edge.messenger.live.com/", 0.05442348752376278 ] ], [ "hxxp://stat.fdjeux.com/", [ "hxxp://stat.fdjeux.com/", 2.140805473791581, "hxxp://www.google-analytics.com/", 0.5190681686126378 ] ], [ "hxxp://static.eu.criteo.net/", [ "hxxp://caw.criteo.com/", 21.90251792660207, "hxxp://images.eu.criteo.net/", 91.9129387362738, "hxxp://static.eu.criteo.net/", 21.7705018682285 ] ], [ "hxxp://static.weborama.fr/", [ "hxxp://ad.doubleclick.net/", 0.08948870848798139, "hxxp://s0.2mdn.net/", 0.05613568354727971 ] ], [ "hxxp://static1.shopoon.fr/", [ "hxxp://images.shopoon.fr/", 2.011296236235034, "hxxp://static1.shopoon.fr/", 1.033258675295012, "hxxp://www.google-analytics.com/", 0.7072461549816705 ] ], [ "hxxp://stats.b
      0
    3. chacha003
       
      désolé voici le lien
      http://pjjoint.malekal.com/files.php?id=97g12b12l12b5s14y14i6y13n5t11m8f14l14p1115z11u9q11
      0
  4. moment de grace Messages postés 29099 Date d'inscription   Statut Contributeur sécurité Dernière intervention   2 274
     
    Ok

    1)

    Copie tout le texte présent en gras ci-dessous (tu le selectionnes avec ta souris / Clique droit dessus et choisis "copier" ou fait Ctrl+C )



    G0 - GCSP: Preference [User Data\Default][HomePage] http://www.searchnu.com/
    R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.searchnu.com/
    [HKCU\Software\ilivid]
    [HKLM\Software\CrazyLoader]
    [HKLM\Software\GamesBarSetup]
    [HKLM\Software\Trymedia Systems]
    O43 - CFD: 09/08/2011 - 20:18:18 - [0] ----D- C:\Program Files\Babylon
    O43 - CFD: 21/05/2011 - 06:35:28 - [2012] ----D- C:\Program Files\GamesBar
    O43 - CFD: 02/05/2011 - 10:44:16 - [270] ----D- C:\Documents and Settings\baudin\Local Settings\Application Data\MediaGet2
    O44 - LFC:[MD5.AD4B0F606E0F8465BC4C4C170B37E1A3] - 31/10/2011 - 18:22:25 ---A- . (...) -- C:\END [43]
    O47 - AAKE:Key Export SP - "C:\Program Files\CrazyLoader\crazyloader.exe" [Enabled] .(...) -- C:\Program Files\CrazyLoader\crazyloader.exe (.not file.)
    C:\Documents and Settings\baudin\Local Settings\Application Data\fe44cf38
    C:\Program Files\Babylon
    C:\Program Files\GamesBar
    C:\Documents and Settings\baudin\Local Settings\Application Data\MediaGet2
    [HKCU\Software\toolbar]
    [HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{E08A9998-D98F-476f-8F5C-37C80FE0A4DA}]
    [HKCU\Software\Toolbar]
    O47 - AAKE:Key Export SP - "C:\Program Files\SweetIM\Messenger\SweetIM.exe" [Disabled] .(...) -- C:\Program Files\SweetIM\Messenger\SweetIM.exe (.not file.)
    O47 - AAKE:Key Export SP - "C:\Documents and Settings\baudin\Mes documents\Downloads\SweetImSetup.exe" [Disabled] .(...) -- C:\Documents and Settings\baudin\Mes documents\Downloads\SweetImSetup.exe (.not file.)
    EMPTYTEMP
    EMPTYFLASH


    Puis Lance ZHPFix depuis le raccourci du bureau . (Clique droit -> Executer en tant qu'admin pour Vista ou Seven)

    * Une fois l'outil ZHPFix ouvert ,

    - Clique sur l'icone représentant la lettre H (« coller les lignes Helper »)
    - Les lignes se collent automatiquement dans ZHPFix, sinon colle les lignes
    - Clique sur le bouton « GO » pour lancer le nettoyage,
    - Copie/colle la totalité du rapport dans ta prochaine réponse

    le rapport se trouve dans le dossier de zhpdiag dans program files sous le nom de ZHPFixReport

    ............................

    2)

    Redemarre le pc et dis moi si tu as encore des soucis

    CONTRIBUTEUR SECURITE

    En désinfection, c'est la fin le plus important !
    "Restez" jusqu'au bout...merci
    0
  5. Vous n’avez pas trouvé la réponse que vous recherchez ?

    Posez votre question
  6. chacha003
     
    Rapport de ZHPFix 1.12.3368 par Nicolas Coolman, Update du 12/11/2011
    Fichier d'export Registre :
    Run by baudin at 14/11/2011 16:20:26
    Windows XP Professional Service Pack 2 (Build 2600)
    Web site : http://www.premiumorange.com/zeb-help-process/zhpfix.html

    ========== Clé(s) du Registre ==========
    SUPPRIME Key: HKCU\Software\ilivid
    SUPPRIME Key: HKLM\Software\CrazyLoader
    SUPPRIME Key: HKLM\Software\GamesBarSetup
    SUPPRIME Key: HKLM\Software\Trymedia Systems
    SUPPRIME Key: HKCU\Software\toolbar
    SUPPRIME Key: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{E08A9998-D98F-476f-8F5C-37C80FE0A4DA}
    ABSENT Key: HKCU\Software\Toolbar

    ========== Valeur(s) du Registre ==========
    SUPPRIME AAKE KeyValue: C:\Program Files\CrazyLoader\crazyloader.exe
    SUPPRIME AAKE KeyValue: C:\Program Files\SweetIM\Messenger\SweetIM.exe
    SUPPRIME AAKE KeyValue: C:\Documents and Settings\baudin\Mes documents\Downloads\SweetImSetup.exe

    ========== Elément(s) de donnée du Registre ==========
    SUPPRIME R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant

    ========== Préférences navigateur ==========
    ABSENT Chrome File:

    ========== Dossier(s) ==========
    SUPPRIME Folder: C:\Program Files\Babylon
    SUPPRIME Folder: C:\Program Files\GamesBar
    SUPPRIME Folder: C:\Documents and Settings\baudin\Local Settings\Application Data\MediaGet2
    SUPPRIME Folder: c:\documents and settings\baudin\local settings\application data\fe44cf38
    SUPPRIME Temporaires Windows: : 3
    SUPPRIME Flash Cookies: 7

    ========== Fichier(s) ==========
    SUPPRIME File: c:\end
    ABSENT File: c:\program files\crazyloader\crazyloader.exe
    ABSENT Folder/File: c:\program files\babylon
    ABSENT Folder/File: c:\program files\gamesbar
    ABSENT Folder/File: c:\documents and settings\baudin\local settings\application data\mediaget2
    ABSENT File: c:\program files\sweetim\messenger\sweetim.exe
    ABSENT File: c:\documents and settings\baudin\mes documents\downloads\sweetimsetup.exe
    SUPPRIME Temporaires Windows: : 38
    SUPPRIME Flash Cookies: 3

    ========== Récapitulatif ==========
    7 : Clé(s) du Registre
    3 : Valeur(s) du Registre
    1 : Elément(s) de donnée du Registre
    6 : Dossier(s)
    9 : Fichier(s)
    1 : Préférences navigateur

    End of clean in 00mn 05s

    ========== Chemin de fichier rapport ==========
    C:\ZHP\ZHPFix[R1].txt - 14/11/2011 16:20:26 [2309]
    0
    1. chacha003
       
      neatsearch recherche toujours quand je fais une recherche google
      0
  7. moment de grace Messages postés 29099 Date d'inscription   Statut Contributeur sécurité Dernière intervention   2 274
     
    Télécharge OTL de OLDTimer

    http://www.geekstogo.com/forum/files/file/398-otl-oldtimers-list-it/

    enregistre le sur ton Bureau.

    Double clic ( pour vista / 7 => clic droit "executer en tant qu'administrateur") sur OTL.exe pour le lancer.

    Coche les 2 cases Lop et Purity

    Coche la case devant tous les utilisateurs

    règle age du fichier sur "60 jours"

    dans la moitié gauche , mets tout sur "tous"

    ne modifie pas ceci :

    "fichiers créés" et "fichiers Modifiés"

    Clic sur Analyse.

    A la fin du scan, le Bloc-Notes va s'ouvrir avec le rapport (OTL.txt).

    Ce fichier est sur ton Bureau (en général C:\Documents and settings\le_nom_de_ta_session\OTL.txt)

    NE LE POSTE PAS SUR LE FORUM

    Rend toi sur http://pjjoint.malekal.com/

    Clique sur "Parcourir "

    Sélectionne le rapport

    Clique ensuite sur "Envoyer le fichier " et copie/colle le lien dans ton prochain message
    Tu feras la meme chose avec le "Extra.txt" qui logiquement sera aussi sur ton bureau.
    0
    1. chacha003
       
      otl
      http://pjjoint.malekal.com/files.php?id=9t1212n6u7k15b5b9p15z6x11l5d7w6t5z10h6k11z10d9
      extra
      http://pjjoint.malekal.com/files.phpid=u14n14c8z7o15b1510e9m10r6n15m15c11d15k6y10h14w9y10x5
      0
    2. moment de grace Messages postés 29099 Date d'inscription   Statut Contributeur sécurité Dernière intervention   2 274
       
      peux tu me les mettre sur https://www.cjoint.com/
      0
    3. chacha003
       
      http://cjoint.com/?AKorkucakFX

      http://cjoint.com/?AKorkUhGLRR
      0
  8. moment de grace Messages postés 29099 Date d'inscription   Statut Contributeur sécurité Dernière intervention   2 274
     
    Télécharge Reload_TDSSKiller
    http://dl.dropbox.com/u/21363431/Reload_Tdsskiller.exe

    Lance le

    choisis : télécharger la derniere version

    relance-le

    choisis : lancer le nettoyage

    TDSSKiller va s'ouvrir , clique sur "Start Scan"

    Si TDSS.tdl2 est détecté l''option delete sera cochée par défaut.
    Si TDSS.tdl3 est détecté assure toi que Cure est bien cochée.
    Si TDSS.tdl4(\HardDisk0\MBR) est détecté assure toi que Cure est bien cochée.
    Si Suspicious file est indiqué, laisse l''option cochée sur Skip
    Si Rootkit.Win32.ZAccess.* est détecté règle sur "cure" en haut , et "delete" en bas

    une fois qu'il a terminé , redemarre s'il te le demande pour finir de nettoyer

    sinon , ferme tdssKiller et le rapport s'affichera sur le bureau

    Copie/Colle son contenu dans ta prochaine réponse.
    0
    1. chacha003
       
      http://cjoint.com/?AKorEzVtUL7
      0
  9. moment de grace Messages postés 29099 Date d'inscription   Statut Contributeur sécurité Dernière intervention   2 274
     
    j'avoue que je souffre un peu là pour trouver

    Relance OTL
    - Sous Vista/Seven clic-droit sur l'icône et choisir "Exécuter en tant qu'administrateur" dans le menu contextuel.
    * L'interface principale s'ouvre :
    * Dans la partie du bas "Personnalisation", copie/colle la liste en citation :

    :OTL
    IE - HKU\S-1-5-21-1614895754-920026266-839522115-1003\..\URLSearchHook: {472734EA-242A-422b-ADF8-83D1E48CC825} - No CLSID value found
    FF - HKLM\Software\MozillaPlugins\@oberon-media.com/ONCAdapter: C:\Program Files\Fichiers communs\Oberon Media\NCAdapter\1.0.0.7\npapicomadapter.dll File not found
    O3 - HKLM\..\Toolbar: (no name) - !{EEE6C35B-6118-11DC-9C72-001320C79847} - No CLSID value found. O3 - HKLM\..\Toolbar: (no name) - 10 - No CLSID value found.
    O3 - HKU\.DEFAULT\..\Toolbar\WebBrowser: (no name) - {00725D68-069B-4095-9FF1-E7469C0E95DF} - No CLSID value found.
    O3 - HKU\S-1-5-18\..\Toolbar\WebBrowser: (no name) - {00725D68-069B-4095-9FF1-E7469C0E95DF} - No CLSID value found.

    :Files
    C:\Documents and Settings\All Users\Application Data\Media Get LLC

    :Commands
    [emptyflash]
    [emptytemp]


    * Clique sur le bouton Correction, patiente pendant le travail de l'outil, il va redémarrer le PC.
    * Accepte en cliquant sur OK
    * Le rapport indiquant les actions réalisées par OTL doit s'ouvrir spontanément
    * Copie/colle le dans ton prochain message

    Tu peux le retrouver le fichier à la racine du disque : C:\_OTL\MovedFiles (Vérifie la date si besoin : jjmmaaaa_xxxxxxxx.log)
    0
    1. chacha003
       
      http://cjoint.com/?AKor3S82ica
      0
    2. moment de grace Messages postés 29099 Date d'inscription   Statut Contributeur sécurité Dernière intervention   2 274
       
      as tu ces redirections sur un seul navigateur, ou sur tous ?
      0
    3. chacha003
       
      j'ai essayer sur google chrome et IE même résultat
      0
  10. moment de grace Messages postés 29099 Date d'inscription   Statut Contributeur sécurité Dernière intervention   2 274
     
    Attention, avant de commencer, lit attentivement la procédure, et imprime la

    Aide à l'utilisation
    https://www.bleepingcomputer.com/combofix/fr/comment-utiliser-combofix

    Télécharge ComboFix de sUBs sur ton Bureau :

    http://download.bleepingcomputer.com/sUBs/ComboFix.exe

    /!\ Déconnecte-toi du net et <gras>DESACTIVES TOUTES LES DEFENSES, antivirus et antispyware y compris /!\ </gras>

    ---> Double-clique sur ComboFix.exe
    Un "pop-up" va apparaître qui dit que ComboFix est utilisé à vos risques et avec aucune garantie... Clique sur oui pour accepter

    SURTOUT INSTALLES LA CONSOLE DE RECUPERATION
    (si il te propose de l'installer remets internet)

    ---> Mets-le en langue française F
    Tape sur la touche 1 (Yes) pour démarrer le scan.

    Ne touche à rien(souris, clavier) tant que le scan n'est pas terminé, car tu risques de planter ton PC

    En fin de scan, il est possible que ComboFix ait besoin de redémarrer le PC pour finaliser la désinfection, laisse-le faire.

    Une fois le scan achevé, un rapport va s'afficher : Poste son contenu

    /!\ Réactive la protection en temps réel de ton antivirus et de ton antispyware avant de te reconnecter à Internet. /!\

    Note : Le rapport se trouve également là : C:\ComboFix.txt

    0
    1. chacha003
       
      un soucis, je n'ai pas d'imprimante
      0
    2. moment de grace Messages postés 29099 Date d'inscription   Statut Contributeur sécurité Dernière intervention   2 274
       
      pas grave

      desactive tes protections
      lance combofix
      si il propose la console, repond oui avec internet connecté

      et il fait le reste
      0
    3. chacha003
       
      http://cjoint.com/?AKotdSzxhZC
      voila
      0
  11. moment de grace Messages postés 29099 Date d'inscription   Statut Contributeur sécurité Dernière intervention   2 274
     
    Un rootkit de trouvé !!

    J'ai un doute sur sa désinfection

    Rends toi sur ce site :

    https://www.virustotal.com/gui/

    Clique sur parcourir et cherche ce fichier :

    c:\windows\system32\drivers\mrxsmb.sys

    Clique sur Send File.

    Un rapport va s'élaborer ligne à ligne.

    Attends la fin. Il doit comprendre la taille du fichier envoyé.


    Copie le lien de Virus Total dans ta réponse.


    Si tu ne trouves pas le fichier alors

    Affiche tous les fichiers et dossiers :

    Pour cela :
    Clique sur démarrer/panneau de configuration/option des dossiers/affichage

    Cocher afficher les dossiers cachés

    Décoche la case "Masquer les fichiers protégés du système d'exploitation (recommandé)"

    Décocher masquer les extensions dont le type est connu

    Puis fais «appliquer» pour valider les changements.

    Et OK

    0
    1. chacha003
       
      http://www.virustotal.com/file-scan/reanalysis.html?id=0fdd53c72f3158283306892a57a2687d5358a468380e8be6eb58eae100d813c1-1321294063
      0
    2. chacha003
       
      http://www.virustotal.com/file-scan/report.html?id=0fdd53c72f3158283306892a57a2687d5358a468380e8be6eb58eae100d813c1-1320751859
      0
  12. moment de grace Messages postés 29099 Date d'inscription   Statut Contributeur sécurité Dernière intervention   2 274
     
    il est bon

    as tu encore ces redirections ?
    0
    1. chacha003
       
      pour le moment non j'espère que ca va durer
      en tout cas merci beaucoup car seule j'aurais jamais pu faire tout ceci
      0
    2. moment de grace Messages postés 29099 Date d'inscription   Statut Contributeur sécurité Dernière intervention   2 274
       
      il était bien caché celui là

      teste un peu le pc

      si c'est ok demain, je te posterai la fin...
      0
    3. chacha003
       
      ok par contre demain pas d'inquiétude car je rentre chez moi que vers 20h
      0
    4. moment de grace Messages postés 29099 Date d'inscription   Statut Contributeur sécurité Dernière intervention   2 274
       
      demain ou plus tard...pas important
      0
  13. moment de grace Messages postés 29099 Date d'inscription   Statut Contributeur sécurité Dernière intervention   2 274
     
    bonjour

    Télécharge ZHPDiag ( de Nicolas coolman ).
    https://www.zebulon.fr/telechargements/securite/systeme/zhpdiag.html


    (outil de diagnostic)


    Double clique sur le fichier d'installation, puis installe le avec les paramètres par défaut ( N'oublie pas de cocher " Créer une icône sur le bureau " )

    Lance ZHPDiag en double cliquant sur l'icône présente sur ton bureau (Clique droit -> Executer en tant qu'admin ( vista )

    Clique sur la loupe en haut à gauche, puis laisse l'outil scanner.

    Une fois le scan terminé, clique sur l'icône en forme de disquette et enregistre le fichier sur ton bureau.

    Rend toi sur http://pjjoint.malekal.com/

    Clique sur "Parcourir "

    Sélectionne le rapport ZHPdiag.txt qui se trouve sur ton bureau

    Clique ensuite sur "Envoyer le fichier " et copie/colle le lien dans ton prochain message

    -1
    1. chacha003
       
      Bonjour, je n'ai pas pu sauvegarder le rapport directement du logiciel donc j'ai fait un copier coller bloc note.
      http://pjjoint.malekal.com/files.phpid=ZHPDiag_l127x7c6f9s11t14c15s13r1311v7o13s15e1010i5r12q9x11

      merci
      0
    2. moment de grace Messages postés 29099 Date d'inscription   Statut Contributeur sécurité Dernière intervention   2 274
       
      Not Found

      dépose le là stp

      https://www.cjoint.com/
      0
    3. chacha003
       
      http://cjoint.com/?AKopvOkcTeM
      0