Neatsearchsystem

chacha003 -  
moment de grace Messages postés 30049 Statut Contributeur sécurité -
Bonjour,




J'ai un petit soucis, à chaque fois que je fais une recherche google, je tombe sur un site correspondant a neatsearchsystem.
J'ai regardé ce que je pouvez trouvé sur le net, c'est un virus...
Le soucis c'est que je ne trouve aucun moyen de m'en débarrasser.


Si vous connaissez un moyen merci beaucoup de m'aider.

12 réponses

moment de grace Messages postés 30049 Statut Contributeur sécurité 2 274
 
je doute que le rapport soit complety

1)


Télécharge AdwCleaner ( d'Xplode ) sur ton bureau.

http://general-changelog-team.fr/telechargements/logiciels/viewdownload/75-outils-de-xplode/28-adwcleaner

Lance le, clique sur SUPPRESSION puis patiente le temps du scan.
Une fois le scan fini, un rapport s'ouvrira. Poste moi son contenu dans ta prochaine réponse.

Note : Le rapport est également sauvegardé sous C:\AdwCleane.txt

.......................

2)

Téléchargez MalwareByte's Anti-Malware (que tu pourras garder ensuite)

https://www.commentcamarche.net/telecharger/securite/14361-malwarebytes-anti-malware/

. Enregistres le sur le bureau
. Double cliques sur le fichier téléchargé pour lancer le processus d'installation.
. Dans l'onglet "mise à jour", cliques sur le bouton Recherche de mise à jour
. Si le pare-feu demande l'autorisation de se connecter pour malwarebytes, accepte
. Une fois la mise à jour terminé
. Rend-toi dans l'onglet, Recherche
. Sélectionnes Exécuter un examen rapide
. Cliques sur Rechercher
. Le scan démarre.
. A la fin de l'analyse, un message s'affiche : L'examen s'est terminé normalement. Cliquez sur 'Afficher les résultats' pour afficher tous les objets trouvés.
. Cliques sur Ok pour poursuivre.
. Si des malwares ont été détectés, clique sur Afficher les résultats
. Sélectionnes tout (ou laisses cochés) et cliques sur Supprimer la sélection Malwarebytes va détruire les fichiers et clés de registre et en mettre une copie dans la quarantaine.
. Malwarebytes va ouvrir le bloc-notes et y copier le rapport d'analyse.
. Rends toi dans l'onglet rapport/log
. Tu cliques dessus pour l'afficher, une fois affiché
. Tu cliques sur edition en haut du boc notes, et puis sur sélectionner tous
. Tu recliques sur edition et puis sur copier et tu reviens sur le forum et dans ta réponse
. tu cliques droit dans le cadre de la reponse et coller


Si tu as besoin d'aide regarde ces tutoriels :
Aide: https://www.malekal.com/tutoriel-malwarebyte-anti-malware/
http://www.infos-du-net.com/forum/278396-11-tuto-malwarebytes-anti-malware-mbam

......................

3)

refais un nouveau rapport ZHPdiag stp

Rend toi sur http://pjjoint.malekal.com/

Clique sur "Parcourir "

Sélectionne le rapport ZHPdiag.txt qui se trouve sur ton bureau

Clique ensuite sur "Envoyer le fichier " et copie/colle le lien dans ton prochain message

0
chacha003
 
Malwarebytes' Anti-Malware 1.51.2.1300
www.malwarebytes.org

Version de la base de données: 8161

Windows 5.1.2600 Service Pack 2
Internet Explorer 6.0.2900.2180

14/11/2011 15:52:05
mbam-log-2011-11-14 (15-52-05).txt

Type d'examen: Examen rapide
Elément(s) analysé(s): 175235
Temps écoulé: 5 minute(s), 44 seconde(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 1
Valeur(s) du Registre infectée(s): 0
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 2
Fichier(s) infecté(s): 0

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
HKEY_LOCAL_MACHINE\SOFTWARE\ScanQuery (Adware.ScanQuery) -> Quarantined and deleted successfully.

Valeur(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)

Dossier(s) infecté(s):
c:\program files\scanquery (Adware.ScanQuery) -> Quarantined and deleted successfully.
c:\documents and settings\all users\application data\scanquery (Adware.ScanQuery) -> Quarantined and deleted successfully.

Fichier(s) infecté(s):
(Aucun élément nuisible détecté)
0
chacha003
 
et pour la suite :
http://pjjoint.malekal.com/files.php?id=ZHPDiag_u5z7e14n13z11m10r8i11n12t9i14f11e9o9i13o9d7m13v10f15
0
moment de grace Messages postés 30049 Statut Contributeur sécurité 2 274
 
as tu fait AdwCleaner ?
0
chacha003
 
oui
0
chacha003
 
# AdwCleaner v1.318 - Rapport créé le 14/11/2011 à 15:36:59
# Mis à jour le 13/11/11 à 21h par Xplode
# Système d'exploitation : Microsoft Windows XP Service Pack 2 (32 bits)
# Nom d'utilisateur : baudin - JC-20GRAMME (Administrateur)
# Exécuté depuis : C:\Documents and Settings\baudin\Mes documents\Downloads\adwcleaner0.exe
# Option [Suppression]


***** [Services] *****


***** [Fichiers / Dossiers] *****

Dossier Supprimé : C:\Documents and Settings\baudin\Application Data\CrazyLoader
Dossier Supprimé : C:\Documents and Settings\baudin\Application Data\OfferBox
Dossier Supprimé : C:\Documents and Settings\baudin\Application Data\searchquband
Dossier Supprimé : C:\Documents and Settings\baudin\Application Data\PriceGong
Dossier Supprimé : C:\Documents and Settings\baudin\Local Settings\Application Data\Conduit
Dossier Supprimé : C:\Documents and Settings\baudin\Menu Démarrer\Programmes\CrazyLoader
Dossier Supprimé : C:\Program Files\CrazyLoader
Dossier Supprimé : C:\Program Files\Windows iLivid Toolbar
Fichier Supprimé : C:\WINDOWS\system32\conduitEngine.tmp

***** [Registre] *****

Clé Supprimée : HKCU\Software\Offerbox
Clé Supprimée : HKCU\Software\PriceGong
Clé Supprimée : HKCU\Software\SweetIm
Clé Supprimée : HKCU\Software\JavaSoft\Prefs\crazyloader
Clé Supprimée : HKLM\SOFTWARE\Conduit
Clé Supprimée : HKLM\SOFTWARE\Offerbox
Clé Supprimée : HKLM\SOFTWARE\SweetIM
Clé Supprimée : HKLM\SOFTWARE\Classes\Conduit.Engine
Clé Supprimée : HKLM\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\2796BAE63F1801E277261BA0D77770028F20EEE4
Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{2D5E2D34-BED5-4B9F-9793-A31E26E6806E}
Clé Supprimée : HKLM\SOFTWARE\Google\Chrome\Extensions\bjeikeheijdjdfjbmknpefojickbkmom
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu2\Programs\CrazyLoader
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{C10DC1F4-CCDF-4224-A24D-B23AFC3573C8}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{99079a25-328f-4bd4-be04-00955acaa0a7}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EEE6C35B-6118-11DC-9C72-001320C79847}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EEE6C35B-6118-11DC-9C72-001320C79847}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{99079a25-328f-4bd4-be04-00955acaa0a7}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\CrazyLoader
Valeur Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{99079a25-328f-4bd4-be04-00955acaa0a7}]

***** [Navigateurs] *****

-\\ Internet Explorer v6.0.2900.2180

Remplacé : [HKCU\Software\Microsoft\Internet Explorer\Main - Start Page] = hxxp://www.searchqu.com/406 --> hxxp://www.google.fr
Remplacé : [HKCU\Software\Microsoft\Internet Explorer\Main - Search Bar] = hxxp://www.searchqu.com/sidebar.html?src=ssb&appid=101&systemid=406&sr=0 --> hxxp://www.google.fr
Remplacé : [HKLM\SOFTWARE\Microsoft\Internet Explorer\Search - SearchAssistant] = hxxp://www.searchqu.com/web?src=ieb&appid=101&systemid=406&sr=0&q={searchTerms} --> hxxp://www.google.fr

-\\ Google Chrome v15.0.874.106

Fichier : C:\Documents and Settings\baudin\Local Settings\Application Data\Google\Chrome\User Data\Default\Preferences

Supprimée : "host_referral_list": [ 2, [ "hxxp://0.180.channel.facebook.com/", [ "hxxp://0.180.channel.facebook.com/", 1.685856624250563, "hxxp://static.ak.fbcdn.net/", 0.06044823529518772 ] ], [ "hxxp://0.192.channel.facebook.com/", [ "hxxp://0.192.channel.facebook.com/", 1.724384494114967, "hxxp://static.ak.fbcdn.net/", 0.4888610480172125 ] ], [ "hxxp://1.180.channel.facebook.com/", [ "hxxp://1.180.channel.facebook.com/", 0.4300958960670239, "hxxp://static.ak.fbcdn.net/", 0.311966140178994 ] ], [ "hxxp://1.192.channel.facebook.com/", [ "hxxp://1.192.channel.facebook.com/", 1.302947875257048 ] ], [ "hxxp://2.192.channel.facebook.com/", [ "hxxp://2.192.channel.facebook.com/", 0.6532464564635534, "hxxp://static.ak.fbcdn.net/", 0.1271185392208833 ] ], [ "hxxp://3.192.channel.facebook.com/", [ "hxxp://3.192.channel.facebook.com/", 0.4727265148537443 ] ], [ "hxxp://62.108.36.121/", [ "hxxp://ad.zanox.com/", 0.1826261069738414 ] ], [ "hxxp://a.ligatus.com/", [ "hxxp://d.ligatus.com/", 0.354285064391383, "hxxp://i.ligatus.com/", 1.677931995494818, "hxxp://x.ligatus.com/", 0.7085701222349379 ] ], [ "hxxp://a.tribalfusion.com/", [ "hxxp://a.tribalfusion.com/", 0.07001348477161963, "hxxp://cdn5.tribalfusion.com/", 0.08694096495732856, "hxxp://su.addthis.com/", 0.05738103687183679, "hxxp://tags.bluekai.com/", 0.05738103687183679 ] ], [ "hxxp://acces.direction-x.com/", [ "hxxp://banners.direction-x.com/", 1.88569357506144, "hxxp://roule.direction-x.com/", 0.2848051618828095, "hxxp://statsroule.direction-x.com/", 0.1853771090524363 ] ], [ "hxxp://account.ea.com/", [ "hxxp://account.ea.com/", 0.2459238720294687, "hxxp://b.scorecardresearch.com/", 0.2459238720294687, "hxxp://eaeacom.112.2o7.net/", 0.2816564004440068, "hxxps://images.ea.com/", 0.4603190425166974 ] ], [ "hxxp://ad-emea.doubleclick.net/", [ "hxxp://s0.2mdn.net/", 0.7062767817242703, "hxxp://servedby.flashtalking.com/", 0.4918713301294032 ] ], [ "hxxp://ad.adserverplus.com/", [ "hxxp://ad.adserverplus.com/", 0.5211216038805425, "hxxp://ad.yieldmanager.com/", 0.5211216038805425, "hxxp://content.yieldmanager.edgesuite.net/", 0.5211216038805425 ] ], [ "hxxp://ad.doubleclick.net/", [ "hxxp://s0.2mdn.net/", 0.1194643877125031 ] ], [ "hxxp://ad.turn.com/", [ "hxxp://cdn.turn.com/", 0.8764500978772359 ] ], [ "hxxp://ad.yieldmanager.com/", [ "hxxp://ad.yieldmanager.com/", 1.688240235367076, "hxxp://ads.azjmp.com/", 1.688240235367076, "hxxp://hstfr.tradedoubler.com/", 0.09229627343241982, "hxxp://impfr.tradedoubler.com/", 0.3148263642147412, "hxxp://view.atdmt.com/", 0.1770886963926983 ] ], [ "hxxp://admax.quisma.com/", [ "hxxp://ad.doubleclick.net/", 0.09275211880150357, "hxxp://admax.quisma.com/", 0.09275211880150357 ] ], [ "hxxp://ads.affbuzzads.com/", [ "hxxp://ads.affbuzzads.com/", 0.5968401275213049, "hxxp://ads.cinamuse.com/", 0.5211216038805425 ] ], [ "hxxp://ads.azjmp.com/", [ "hxxp://images-cdn.azoogleads.com/", 1.474060504014537 ] ], [ "hxxp://ads.cinamuse.com/", [ "hxxp://www.google-analytics.com/", 0.5968401275213049, "hxxps://gs1.wac.edgecastcdn.net/", 0.5211216038805425 ] ], [ "hxxp://ads.heias.com/", [ "hxxp://ads.heias.com/", 0.3995214003858038, "hxxp://fl01.ct2.comclick.com/", 0.3792778246595056, "hxxp://mobile-shop.orange.fr/", 1.346650716301006, "hxxp://www.chaussuresmodatoi.com/", 1.979337867520938 ] ], [ "hxxp://ads.horyzon-media.com/", [ "hxxp://ds.serving-sys.com/", 0.07966983535531907 ] ], [ "hxxp://adserver.itsfogo.com/", [ "hxxp://partnerfeed.itsfogo.com/", 0.5666640561662435, "hxxps://adserver.itsfogo.com/", 1.208549243921373 ] ], [ "hxxp://afe2.specificclick.net/", [ "hxxp://akamai.smartadserver.com/", 0.6758232614574935, "hxxp://cache.adviva.net/", 0.6758232614574935, "hxxp://www.smartadserver.com/", 0.774019803720548 ] ], [ "hxxp://affiliation.unitead.net/", [ "hxxp://www.dredd.fr/", 0.2389224193927897 ] ], [ "hxxp://allier.fff.fr/", [ "hxxp://adserver.adtech.de/", 0.3805639543522383, "hxxp://aka-cdn-ns.adtech.de/", 0.2020125427645128, "hxxp://allier.fff.fr/", 2.223868238219212, "hxxp://www.google-analytics.com/", 0.2136165298086499 ] ], [ "hxxp://amgtrack.info/", [ "hxxp://ad.amgdgt.com/", 0.07490652530134688, "hxxps://at.amgdgt.com/", 0.07490652530134688, "hxxps://cdns.amgdgt.com/", 0.1489474643459278 ] ], [ "hxxp://api-leplus.nouvelobs.com/", [ "hxxp://api-leplus.nouvelobs.com/", 0.5442398948250001, "hxxp://leplus.nouvelobs.com/", 0.5442398948250001, "hxxp://referentiel.nouvelobs.com/", 0.5442398948250001, "hxxp://ssobs.nouvelobs.com/", 0.5442398948250001 ] ], [ "hxxp://api.zanox.com/", [ "hxxp://zbox.zanox.com/", 0.08694096495732856 ] ], [ "hxxp://api.zynga.com/", [ "hxxp://api.zynga.com/", 2.604564983234799 ] ], [ "hxxp://app.urbandive.net/", [ "hxxp://app.urbandive.net/", 0.4471699820270063, "hxxp://axe.urbandive.net/", 0.2668880129884505, "hxxp://uws1.urbandive.net/", 0.2668880129884505 ] ], [ "hxxp://apps.facebook.com/", [ "hxxp://0.180.channel.facebook.com/", 2.2733802, "hxxp://apps.facebook.com/", 3.264340799999999, "hxxp://creative.ak.fbcdn.net/", 2.6037004, "hxxp://empire-zc.static.zgncdn.com/", 3.264340799999999, "hxxp://photos-b.ak.fbcdn.net/", 3.924981199999999, "hxxp://photos-c.ak.fbcdn.net/", 5.143922001329999, "hxxp://photos-f.ak.fbcdn.net/", 5.988435141952134, "hxxp://photos-h.ak.fbcdn.net/", 11.02249696756242, "hxxp://profile.ak.fbcdn.net/", 19.50989522797294, "hxxp://static.ak.fbcdn.net/", 12.63593939043853 ] ], [ "hxxp://armyattack.digitalchocolate.com/", [ "hxxp://api.geo.kontagent.net/", 0.1616580605561793, "hxxp://crm.digitalchocolate.com/", 0.1928874586181684, "hxxp://dchoc1-a.akamaihd.net/", 0.0991992644322009, "hxxp://static.ak.facebook.com/", 0.06796986637021175 ] ], [ "hxxp://auvergne.fff.fr/", [ "hxxp://adserver.adtech.de/", 0.5109147936522884, "hxxp://aka-cdn-ns.adtech.de/", 0.3735938214453494, "hxxp://auvergne.fff.fr/", 5.86261315883075, "hxxp://www.google-analytics.com/", 0.3735938214453494 ] ], [ "hxxp://baisito.com/", [ "hxxp://baisito.com/", 48.52149486917769, "hxxp://mb.dvdhot.com/", 2.025335319191497, "hxxp://media.yesmessenger.com/", 4.673850736595761, "hxxp://outils.yes-messenger.com/", 2.613894300836889, "hxxp://services.x-traceur.com/", 2.025335319191497, "hxxp://static.tubave.com/", 10.55944055304968 ] ], [ "hxxp://bangbrosnetwork.com/", [ "hxxp://bangbrosnetwork.com/", 3.488752112087344, "hxxp://images1.bangbros.com/", 4.448068166009013, "hxxp://images2.bangbros.com/", 3.009094085126509, "hxxp://partners.bangbrosonline.com/", 1.570120004244004, "hxxp://vote.bangbros.com/", 1.570120004244004, "hxxp://www.google-analytics.com/", 3.968410139048179, "hxxp://x-images1.bangbros.com/", 1.570120004244004, "hxxp://x-images4.bangbros.com/", 6.846358300813186, "hxxp://x-images5.bangbros.com/", 2.049778031204839 ] ], [ "hxxp://banners.adultfriendfinder.com/", [ "hxxp://content.pop6.com/", 0.6118268221263056, "hxxp://graphics.pop6.com/", 0.4630483685260074, "hxxp://piclist.pop6.com/", 1.640076066354395, "hxxp://www.google-analytics.com/", 0.4629581030636104 ] ], [ "hxxp://banners.direction-x.com/", [ "hxxp://banners.direction-x.com/", 1.775708096894462 ] ], [ "hxxp://behaviour.nouvelobs.com/", [ "hxxp://astatic.weborama.fr/", 0.4460433525619454, "hxxp://behaviour.nouvelobs.com/", 0.4460433525619454, "hxxp://wousdat.weborama.fr/", 0.4460433525619454 ] ], [ "hxxp://bi.wooga.com/", [ "hxxp://track-proxy.bi.wooga.com/", 0.05398680625281666 ] ], [ "hxxp://boutique-online.orange.fr/", [ "hxxp://boutique-online.orange.fr/", 0.138654902861517, "hxxp://sdc.francetelecom.com/", 0.07407590700820772, "hxxp://sites.orange.fr/", 0.08483907298375927, "hxxp://statse.webtrendslive.com/", 0.07407590700820772 ] ], [ "hxxp://bouyguestelecom.solution.weborama.fr/", [ "hxxp://elstatic.weborama.fr/", 0.3054321080292188, "hxxp://istatic.weborama.fr/", 0.3418038789068225 ] ], [ "hxxp://c.brightcove.com/", [ "hxxp://admin.brightcove.com/", 0.2454173183798716, "hxxp://brightcove01.brightcove.com/", 0.09686070800122121, "hxxp://c.brightcove.com/", 0.1436494145279233, "hxxp://goku.brightcove.com/", 0.1436494145279233, "hxxp://load.tubemogul.com/", 0.05007200147451912, "hxxp://receive.inplay.tubemogul.com/", 0.08867021720267702, "hxxp://stickyads.adswizz.com/", 0.09686070800122121 ] ], [ "hxxp://cas.be.eu.criteo.com/", [ "hxxp://cas.be.eu.criteo.com/", 0.8845181230226835, "hxxp://dis.eu.criteo.com/", 0.2051915931843847, "hxxp://static.eu.criteo.net/", 1.090613792541262 ] ], [ "hxxp://cas.criteo.com/", [ "hxxp://cas.criteo.com/", 0.2429536940509196, "hxxp://dis.eu.criteo.com/", 0.06481852607701956, "hxxp://static.eu.criteo.net/", 0.3692222433652115 ] ], [ "hxxp://casse-auto-allier.auto-occasion.fr/", [ "hxxp://clk.tradedoubler.com/", 0.6758232614574935, "hxxp://data02.adlooxtracking.com/", 0.8722163459836025, "hxxp://fr.66.clickintext.net/", 0.9704128882466564, "hxxp://fr.66.slidein.clickintext.net/", 3.425326444823021, "hxxp://track.webgains.com/", 0.774019803720548, "hxxp://www.auto-occasion.fr/", 3.327129902559965, "hxxp://www.excedence.com/", 0.6758232614574935, "hxxp://www.oscaro.com/", 1.068609430509712, "hxxp://www.priceminister.com/", 0.774019803720548, "hxxp://www.shoes.fr/", 0.6758232614574935 ] ], [ "hxxp://catcher.pornravage.com/", [ "hxxp://catcher.pornravage.com/", 1.543755536839474, "hxxp://common.eravage.com/", 1.249476046016778, "hxxp://gateway.eravage.com/", 2.025335319191497, "hxxp://staticpr.archiveporno.com/", 2.613894300836889 ] ], [ "hxxp://cdn.contenttoemotion.com/", [ "hxxp://88.191.146.152/", 0.8722163459836025, "hxxp://94.23.23.208/", 0.5186042904789168, "hxxp://94.23.236.222/", 0.9883516577609596, "hxxp://cdn.contenttoemotion.com/", 1.829649850061989, "hxxp://img.contenttoemotion.com/", 1.829649850061989 ] ], [ "hxxp://cdn.datvantage.com/", [ "hxxp://t.datvantage.com/", 0.4600636081545027 ] ], [ "hxxp://cdn.flashtalking.com/", [ "hxxp://stat.flashtalking.com/", 0.07524983205669565 ] ], [ "hxxp://cdn.nextperf.net/", [ "hxxp://cdn.nextperf.net/", 1.773377972768559, "hxxp://img.nextproducts.net/", 7.566389585014766, "hxxp://imgcache.kiabi.com/", 2.363874359777497, "hxxp://ps3.nextperf.net/", 1.775189226709528, "hxxp://www.chaussuresmodatoi.com/", 0.212966225674159 ] ], [ "hxxp://cdn.turn.com/", [ "hxxp://pixel.rubiconproject.com/", 0.1755983798820219 ] ], [ "hxxp://cdn.wibiya.com/", [ "hxxp://edge.quantserve.com/", 0.4573948728475545, "hxxp://pixel.quantserve.com/", 0.4573948728475545 ] ], [ "hxxp://cdn1.monsters.wooga.com/", [ "hxxp://api.facebook.com/", 7.851783044961697, "hxxp://api.live.monsters.wooga.com/", 48.42029308209764, "hxxp://bi.wooga.com/", 9.52308758892614, "hxxp://cdn1.monsters.wooga.com/", 716.7996181031109, "hxxp://profile.ak.fbcdn.net/", 42.91605183619351, "hxxps://api.facebook.com/", 15.5508261569931 ] ], [ "hxxp://cdn1.thumbs.vador.com/", [ "hxxp://cdn1.thumbs.vador.com/", 7.897673201237248, "hxxp://promo.vador.com/", 1.767036090615861 ] ], [ "hxxp://cdn10.skillstar.com/", [ "hxxp://cdn11.skillstar.com/", 0.190252550847396, "hxxp://cdn12.skillstar.com/", 0.1598954266849891, "hxxp://cdn13.skillstar.com/", 0.05774421803454718, "hxxp://www.skillstar.com/", 0.3853113447168868 ] ], [ "hxxp://cdn5.tribalfusion.com/", [ "hxxp://rd.rlcdn.com/", 0.08694096495732856 ] ], [ "hxxp://cfa.priceminister.com/", [ "hxxp://cfa.priceminister.com/", 1.166805972772766 ] ], [ "hxxp://cofidis2.solution.weborama.fr/", [ "hxxp://elstatic.weborama.fr/", 0.05391764018954336, "hxxp://istatic.weborama.fr/", 0.2841316472862764 ] ], [ "hxxp://common.eravage.com/", [ "hxxp://flv.pornravage.com/", 2.025335319191497 ] ], [ "hxxp://content.pop6.com/", [ "hxxp://content.pop6.com/", 0.1156284566792204 ] ], [ "hxxp://contenttoemotion.com/", [ "hxxp://cdn.contenttoemotion.com/", 0.4977749833819846, "hxxp://img.contenttoemotion.com/", 0.2392529092649921 ] ], [ "hxxp://crm.digitalchocolate.com/", [ "hxxp://ajax.googleapis.com/", 0.0745942841409368, "hxxp://crm-stage.digitalchocolate.com/", 0.06513083018275821, "hxxp://crm.digitalchocolate.com/", 0.0745942841409368, "hxxp://d1dxub0l5e01js.cloudfront.net/", 0.06513083018275821, "hxxp://dchoc1-a.akamaihd.net/", 0.09352119205729378, "hxxp://fbads.adparlor.com/", 0.06513083018275821, "hxxps://d1dxub0l5e01js.cloudfront.net/", 0.1124480999736508, "hxxps://www.facebook.com/", 0.06513083018275821 ] ], [ "hxxp://cshoppingbox.partner.leguide.com/", [ "hxxp://cimg.leguide.com/", 2.95143628965821, "hxxp://code.jquery.com/", 0.4377836034912695, "hxxp://csimg.leguide.com/", 4.189421230855781 ] ], [ "hxxp://cstatic.weborama.fr/", [ "hxxp://pixel.mathtag.com/", 0.2501687481819601 ] ], [ "hxxp://cti.w55c.net/", [ "hxxp://ads.adbrite.com/", 0.9285702433741844, "hxxp://i.w55c.net/", 0.9285702433741844, "hxxp://sync.adap.tv/", 0.9285702433741844 ] ], [ "hxxp://d.afdads.com/", [ "hxxp://cdn.afdads.com/", 0.1935097713458059 ] ], [ "hxxp://d1.openx.org/", [ "hxxp://62.108.36.121/", 0.1826261069738414, "hxxp://d1.openx.org/", 0.1594571232532795 ] ], [ "hxxp://dap.criteo.com/", [ "hxxp://abc.linternaute.com/", 0.1420590113442259, "hxxp://ad-emea.doubleclick.net/", 0.2452642759960138, "hxxp://ad.yieldmanager.com/", 0.1420590113442259, "hxxp://googleads.g.doubleclick.net/", 0.1420590113442259, "hxxp://pub.ftv-publicite.fr/", 0.1627000642745835, "hxxp://rfr.a2dfp.net/", 0.1627000642745835, "hxxp://s.openad.tf1.fr/", 0.1420590113442259, "hxxp://view.atdmt.com/", 0.1627000642745835, "hxxp://ww381.smartadserver.com/", 0.1833411172049412, "hxxp://www.googleadservices.com/", 0.1420590113442259 ] ], [ "hxxp://dchoc1-a.akamaihd.net/", [ "hxxp://armyattack.digitalchocolate.com/", 0.1408384618481866, "hxxp://d1dxub0l5e01js.cloudfront.net/", 0.0745942841409368, "hxxp://dchoc1-a.akamaihd.net/", 0.7086456993388989 ] ], [ "hxxp://difflhxxp.hvsdigital.com/", [ "hxxp://stats.hvsdigital.com/", 0.7304838155542581 ] ], [ "hxxp://dis.criteo.com/", [ "hxxp://abc.linternaute.com/", 0.6758232614574935, "hxxp://ad-emea.doubleclick.net/", 0.9704128882466564, "hxxp://ad.caradisiac.com/", 0.8722163459836025, "hxxp://ad.yieldmanager.com/", 0.774019803720548, "hxxp://ads.adverline.com/", 0.6758232614574935, "hxxp://ads.horyzon-media.com/", 0.9704128882466564, "hxxp://ads.prisacom.com/", 0.6758232614574935, "hxxp://mfr.247realmedia.com/", 1.265002515035821, "hxxp://s.openad.tf1.fr/", 0.6758232614574935, "hxxp://securite.01net.com/", 0.6758232614574935 ] ], [ "hxxp://dis.eu.criteo.com/", [ "hxxp://ad-emea.doubleclick.net/", 3.081115116577939, "hxxp://ads.horyzon-media.com/", 2.14577659904535, "hxxp://googleads.g.doubleclick.net/", 2.14577659904535, "hxxp://network.aufeminin.com/", 2.14577659904535, "hxxp://openad.tf1.fr/", 2.769335610733743, "hxxp://pixel.rubiconproject.com/", 2.14577659904535, "hxxp://s.openad.tf1.fr/", 2.457556104889546, "hxxp://securite.01net.com/", 2.14577659904535, "hxxp://ww381.smartadserver.com/", 3.111867558692069, "hxxps://ww381.smartadserver.com/", 2.457556104889546 ] ], [ "hxxp://droit-finances.commentcamarche.net/", [ "hxxp://ba.ccm2.net/", 0.05723552912612365, "hxxp://static.ccm2.net/", 0.3109115707172642, "hxxp://static.criteo.com/", 0.05723552912612365 ] ], [ "hxxp://elstatic.weborama.fr/", [ "hxxp://pmu.eficiens-serving.com/", 1.431841112314667, "hxxp://www.eficiens-serving2.com/", 1.827419620798088 ] ], [ "hxxp://empire-zc.static.zgncdn.com/", [ "hxxp://empire-zc.static.zgncdn.com/", 153.3240055204745, "hxxp://fb-client-zc.empire.zynga.com/", 14.78597061322256, "hxxps://fbcdn-profile-a.akamaihd.net/", 16.146985279298, "hxxps://graph.facebook.com/", 17.03401867153217 ] ], [ "hxxp://empire.static.zgncdn.com/", [ "hxxp://empire.static.zgncdn.com/", 4.874498137386953, "hxxp://fb-client-0.empire.zynga.com/", 0.5185486856429503, "hxxps://fbcdn-profile-a.akamaihd.net/", 0.666920558441738, "hxxps://graph.facebook.com/", 0.666920558441738 ] ], [ "hxxp://emploi.france5.fr/", [ "hxxp://cas.criteo.com/", 0.7097750350518064, "hxxp://dis.eu.criteo.com/", 0.6197289485153833, "hxxp://medias.francetv.fr/", 0.6197289485153833, "hxxp://participer.france5.fr/", 0.6197289485153833, "hxxp://pub.ftv-publicite.fr/", 1.069959381197499, "hxxp://s0.2mdn.net/", 0.7097750350518064, "hxxp://stat3.cybermonitor.com/", 0.6197289485153833, "hxxp://static.eu.criteo.net/", 0.7097750350518064, "hxxp://www.france5.fr/", 0.889867208124652, "hxxp://www.google-analytics.com/", 0.6197289485153833 ] ], [ "hxxp://experts-univers.com/", [ "hxxp://googleads.g.doubleclick.net/", 0.0919856718098416, "hxxp://media.experts-univers.com/", 0.3120699088067217, "hxxp://pixel.mathtag.com/", 0.1556942667299913, "hxxp://www.googleadservices.com/", 0.0919856718098416 ] ], [ "hxxp://f.megaclick.com/", [ "hxxp://ad.adorika.com/", 0.5968401275213049, "hxxp://ad.adserverplus.com/", 0.5211216038805425, "hxxp://ad.yieldmanager.com/", 0.5211216038805425, "hxxp://adx.adnxs.com/", 0.5211216038805425, "hxxp://cm.g.doubleclick.net/", 0.5211216038805425, "hxxp://content.yieldmanager.edgesuite.net/", 0.5211216038805425, "hxxp://f.megaclick.com/", 0.7482771748028294, "hxxp://ib.adnxs.com/", 0.5211216038805425, "hxxp://s.megaclick.com/", 0.8997142220843547, "hxxp://www.pubdirecte.com/", 0.5211216038805425 ] ], [ "hxxp://facebook.topeleven.com/", [ "hxxp://facebook.topeleven.com/", 5.970406652156154, "hxxp://static.ak.facebook.com/", 3.7315041437808, "hxxp://www.google-analytics.com/", 0.9647655256281916, "hxxps://ajax.googleapis.com/", 1.49260167226595, "hxxps://app.appatyze.com/", 0.746300836140755, "hxxps://connect.facebook.net/", 0.746300836132975, "hxxps://nordeus.hs.llnwd.net/", 5.033139163383897, "hxxps://s-static.ak.fbcdn.net/", 0.7463008361407371, "hxxps://www.facebook.com/", 2.238902508422211 ] ], [ "hxxp://fb-client-0.empire.zynga.com/", [ "hxxp://fb-client-0.empire.zynga.com/", 0.1635078449140378, "hxxp://static.ak.facebook.com/", 0.09530629400199937, "hxxp://zbar.zynga.com/", 0.06530246070507367, "hxxp://zgn.static.zynga.com/", 0.3524165484392049, "hxxp://zynga2-a.akamaihd.net/", 0.1553139605958507, "hxxps://fbcdn-profile-a.akamaihd.net/", 0.06530246070507367, "hxxps://graph.facebook.com/", 0.08930552734261425 ] ], [ "hxxp://fb-client-0.mw2.zynga.com/", [ "hxxp://fb-client-0.mw2.zynga.com/", 0.5521113132566277, "hxxp://mw2.static.zgncdn.com/", 2.156537351780162, "hxxp://profile.ak.fbcdn.net/", 0.5521113132566277, "hxxp://static.ak.facebook.com/", 1.033439124813687, "hxxp://www.facebook.com/", 0.7125539171089809, "hxxp://zbar.zynga.com/", 0.7927752190351568, "hxxp://zgn.static.zynga.com/", 2.798307767189573, "hxxp://zynga1-a.akamaihd.net/", 0.7125539171089809, "hxxp://zynga2-a.akamaihd.net/", 1.594988238296923, "hxxps://graph.facebook.com/", 0.7125539171089809 ] ], [ "hxxp://fb-client-zc.empire.zynga.com/", [ "hxxp://fb-client-zc.empire.zynga.com/", 4.399188879119999, "hxxp://graph.facebook.com/", 2.2733802, "hxxp://profile.ak.fbcdn.net/", 2.2733802, "hxxp://static.ak.facebook.com/", 2.9011101378336, "hxxp://static.ak.fbcdn.net/", 1.13417189424, "hxxp://zgn.static.zynga.com/", 5.709704400654704, "hxxp://zynga1-a.akamaihd.net/", 1.13417189424, "hxxp://zynga2-a.akamaihd.net/", 2.3629709659248, "hxxps://api-read.facebook.com/", 2.2733802, "hxxps://fbcdn-profile-a.akamaihd.net/", 1.5658343316 ] ], [ "hxxp://fb.westwars.com/", [ "hxxp://fb.westwars.com/", 0.08488933897501978 ] ], [ "hxxp://fifa.game.playfish.com/", [ "hxxp://b.scorecardresearch.com/", 1.548113842144225, "hxxp://connect.facebook.net/", 1.351711339782644, "hxxp://fifa.game.playfish.com/", 3.904943870483193, "hxxp://static.ak.facebook.com/", 1.744516344505806, "hxxp://static.ak.fbcdn.net/", 1.351711339782644, "hxxp://www.facebook.com/", 1.351711339782644, "hxxps://billing.service.playfish.com/", 1.351711339782644, "hxxps://console-ssl.service.playfish.com/", 2.53012635395213, "hxxps://d2syub29v5lge2.cloudfront.net/", 5.27976138701426, "hxxps://d2x3w3mc51yw0w.cloudfront.net/", 3.11933386103687 ] ], [ "hxxp://files.video-loader.com/", [ "hxxp://files.video-loader.com/", 0.2397672631666668, "hxxp://videos.video-loader.com/", 0.1444054422123235, "hxxp://www.au2m8.com/", 0.1444054422123235 ] ], [ "hxxp://fl01.ct2.comclick.com/", [ "hxxp://ad-emea.doubleclick.net/", 0.08407700513758448, "hxxp://ad.zanox.com/", 0.3572132108066206, "hxxp://elstatic.weborama.fr/", 0.4680219029843263, "hxxp://istatic.weborama.fr/", 0.7601029707952428, "hxxp://numericable.solution.weborama.fr/", 0.4680219029843263, "hxxp://s0.2mdn.net/", 0.084588351547504 ] ], [ "hxxp://fr.66.slidein.clickintext.net/", [ "hxxp://ad.publicidees.com/", 0.9704128882466564, "hxxp://ad.zanox.com/", 0.8722163459836025, "hxxp://affiliation.maty.com/", 0.6758232614574935, "hxxp://cdn.track.webgains.com/", 0.774019803720548, "hxxp://hstfr.tradedoubler.com/", 0.6758232614574935, "hxxp://img.netaffiliation.com/", 0.6758232614574935, "hxxp://media.boulanger.fr/", 0.6758232614574935, "hxxp://track.effiliation.com/", 1.166805972772766, "hxxp://tracking.publicidees.com/", 0.9704128882466564, "hxxp://www.lapostemobile.fr/", 0.6758232614574935 ] ], [ "hxxp://fr.answers.yahoo.com/", [ "hxxp://l.yimg.com/", 0.1765447419977191 ] ], [ "hxxp://fr.mappy.com/", [ "hxxp://ads.horyzon-media.com/", 0.3570289975077283, "hxxp://app.urbandive.net/", 0.2067940233089318, "hxxp://axe.mappy.com/", 0.4267380255359699, "hxxp://fr.mappy.com/", 0.7338183127983101, "hxxp://sbx.pagesjaunes.fr/", 0.2067940233089318, "hxxp://slab3.axe.mappy.com/", 0.2668880129884505, "hxxp://slab5.axe.mappy.com/", 0.2067940233089318, "hxxp://slab9.axe.mappy.com/", 0.2067940233089318, "hxxp://v3.x.mappy.com/", 0.6929543998162366, "hxxp://www.google.com/", 0.4958461136674161 ] ], [ "hxxp://fr.simsland.com/", [ "hxxp://fr.simsland.com/", 3.625581073151804, "hxxp://loga.hit-parade.com/", 0.5211216038805425, "hxxp://pagead2.googlesyndication.com/", 0.5211216038805425, "hxxp://perso0.free.fr/", 0.5211216038805425, "hxxp://www.annuairesims.com/", 0.5211216038805425, "hxxp://www.redirect.free.fr/", 0.5211216038805425, "hxxp://www.rueweb.com.free.fr/", 0.5211216038805425, "hxxp://www.visiofrance.com.free.fr/", 0.5211216038805425, "hxxp://www.visiofrance.com/", 0.5211216038805425 ] ], [ "hxxp://galleries.adult-empire.com/", [ "hxxp://galleries.adult-empire.com/", 0.4347976567290218, "hxxp://www.aepartnership.com/", 0.9474549345812202 ] ], [ "hxxp://galleries.swankdollars.com/", [ "hxxp://galleries.swankdollars.com/", 4.612654163907805 ] ], [ "hxxp://gateway-banner.eravage.com/", [ "hxxp://banner.pornravage.com/", 0.6402629137424144, "hxxp://gateway.eravage.com/", 0.6402629137424144 ] ], [ "hxxp://geobanner.getiton.com/", [ "hxxp://geobanner.getiton.com/", 0.4150024833967, "hxxp://graphics.pop6.com/", 4.551349196839129, "hxxp://maps.google.com/", 0.3516219378634771, "hxxp://photos.pop6.com/", 0.262434079881388, "hxxp://piclist.pop6.com/", 0.9149639534672366, "hxxp://www.google-analytics.com/", 0.3516222041029385 ] ], [ "hxxp://googleads.g.doubleclick.net/", [ "hxxp://google.com/", 0.7399242661938913, "hxxp://googleads.g.doubleclick.net/", 0.9374269708002274, "hxxp://pagead2.googlesyndication.com/", 1.524284625509962, "hxxps://googleads.g.doubleclick.net/", 0.7399242661938913 ] ], [ "hxxp://hosted.met-art.com/", [ "hxxp://hosted.met-art.com/", 23.24263636726532, "hxxp://www.google-analytics.com/", 2.243502233677023, "hxxp://www.magicnude.com/", 0.8433270352356586, "hxxp://www.met-art.com/", 0.2743186933410295, "hxxp://www2.met-art.com/", 17.42781108290899 ] ], [ "hxxp://hotmail.fr/", [ "hxxps://login.live.com/", 0.8051657804933505 ] ], [ "hxxp://hstfr.tradedoubler.com/", [ "hxxp://hstfr.tradedoubler.com/", 0.1750382210934839, "hxxp://vht.tradedoubler.com/", 1.967674022654115, "hxxp://www.lavachequirit.com/", 0.1429968271728476 ] ], [ "hxxp://i1.midasplayer.com/", [ "hxxp://i1.midasplayer.com/", 9.596355068444304, "hxxp://www.king.com/", 7.584232842285086 ] ], [ "hxxp://i4.cdscdn.com/", [ "hxxp://i6.cdscdn.com/", 2.539476730092063, "hxxp://imagesnew.cdiscount.com/", 2.253575376373089, "hxxp://www.cdiscount.com/", 2.539476730092063 ] ], [ "hxxp://i6.cdscdn.com/", [ "hxxp://i6.cdscdn.com/", 1.190821536032844 ] ], [ "hxxp://ib.adnxs.com/", [ "hxxp://ad-emea.doubleclick.net/", 1.030540236257501, "hxxp://bforbank.solution.weborama.fr/", 0.1069663866654423, "hxxp://elstatic.weborama.fr/", 0.1297885206195321, "hxxp://istatic.weborama.fr/", 0.1233277290100819, "hxxp://s0.2mdn.net/", 0.8712075583894563 ] ], [ "hxxp://ikea.mobilier-et-decoration.com/", [ "hxxp://ikea.mobilier-et-decoration.com/", 1.044077511957553 ] ], [ "hxxp://img.cdn.betclick.com/", [ "hxxp://img.cdn.betclic.com/", 0.2594726739484363, "hxxp://img.cdn.betclick.com/", 3.014254610091256, "hxxp://xml.betclick.com/", 1.573537071495775 ] ], [ "hxxp://img.mediaplex.com/", [ "hxxp://dsp.adledge.com/", 0.07524983205669565, "hxxp://img-cdn.mediaplex.com/", 0.08618356833843778, "hxxp://rs.adledge.com/", 0.07524983205669565 ] ], [ "hxxp://impfr.tradedoubler.com/", [ "hxxp://hstfr.tradedoubler.com/", 1.313228117939032 ] ], [ "hxxp://istatic.weborama.fr/", [ "hxxp://pmu.eficiens-serving.com/", 0.9642011258701045 ] ], [ "hxxp://jacquieetmicheltv.net/", [ "hxxp://jacquieetmicheltv.net/", 0.145883197562256 ] ], [ "hxxp://jetekiffe.com/", [ "hxxp://a12.x-traceur.com/", 2.025335319191497, "hxxp://img.media-rendering3.com/", 2.613894300836889, "hxxp://img.www.indecentes-voisines.com/", 2.613894300836889, "hxxp://jetekiffe.com/", 29.68760745652494, "hxxp://thumbs3.smartmovies.net/", 2.319614810014193, "hxxp://www.google-analytics.com/", 2.025335319191497, "hxxp://www.indecentes-voisines.com/", 2.529436058165675, "hxxp://www.jetekiffe.com/", 2.049778031204839, "hxxp://www.p0rno.org/", 5.407384219930683, "hxxp://www.smartmovies.net/", 2.049778031204839 ] ], [ "hxxp://jeu.orange.fr/", [ "hxxp://clienttools.oberon-media.com/", 0.08694096495732856, "hxxp://go.atraxio.com/", 0.09957341285711137, "hxxp://i2.midasplayer.com/", 0.1248383086566769, "hxxp://img.metaboli.fr/", 0.1248383086566769, "hxxp://jeu.orange.fr/", 1.355814849638278, "hxxp://jeuxenligne.orange.fr/", 0.238530339754722, "hxxp://oragamegweb.prod.mobivillage.com/", 0.1374707565564597, "hxxp://tr.production.orangeads.fr/", 0.08694096495732856, "hxxp://usercount.apizone.oberon-media.com/", 0.08694096495732856, "hxxp://www3.smartadserver.com/", 0.09957341285711137 ] ], [ "hxxp://jeux.france2.fr/", [ "hxxp://jeux.france2.fr/", 0.557022618513724, "hxxp://pub.ftv-publicite.fr/", 0.07446365139865456 ] ], [ "hxxp://js2.wlxrs.com/", [ "hxxp://at04.alenty.com/", 0.1535073579044134, "hxxp://js.alenty.com/", 0.1535073579044134, "hxxp://js2.wlxrs.com/", 0.3247786189712957 ] ], [ "hxxp://l3.player.m6.fr/", [ "hxxp://fr-m6.cdn.videoplaza.tv/", 0.1374707565564597, "hxxp://fr-m6.videoplaza.tv/", 0.09957341285711137, "hxxp://images.m6replay.fr/", 0.3395899229529845, "hxxp://l3.player.m6.fr/", 0.1374707565564597, "hxxp://www.m6replay.fr/", 0.1374707565564597 ] ], [ "hxxp://leguide-shopping.programme-tv.net/", [ "hxxp://leguide-shopping.programme-tv.net/", 0.6880911328789271 ] ], [ "hxxp://listes-cadeaux.carrefour.fr/", [ "hxxp://listes-cadeaux.carrefour.fr/", 0.0789972704754811 ] ], [ "hxxp://live.parionsweb.fr/", [ "hxxp://live.parionsweb.fr/", 1.806918381548859, "hxxp://www.google-analytics.com/", 0.4236718565432882 ] ], [ "hxxp://lp.live.monsters.wooga.com/", [ "hxxp://beacon-1.newrelic.com/", 2.208657065706, "hxxp://cdn1.monsters.wooga.com/", 4.775984936953999, "hxxp://lp.live.monsters.wooga.com/", 2.208657065706, "hxxp://openx.wooga.com/", 2.850489033518, "hxxp://static.ak.facebook.com/", 2.850489033518, "hxxps://api-read.facebook.com/", 2.529573049612, "hxxps://d1ros97qkrwjf5.cloudfront.net/", 2.208657065706, "hxxps://graph.facebook.com/", 3.2265669487571, "hxxps://mw.t.wooga.com/", 2.850489033518, "hxxps://secure.footprint.net/", 4.455068953047999 ] ], [ "hxxp://lp.sweetim.com/", [ "hxxp://cdn.download.sweetim.com/", 0.08948870848798139, "hxxp://cdn.web.sweetim.com/", 0.1675045056313497, "hxxp://lp.sweetim.com/", 0.08948870848798139, "hxxp://www.sweetim.com/", 0.08948870848798139 ] ], [ "hxxp://m.adnxs.com/", [ "hxxp://aidps.atdmt.com/", 0.07736726162000104, "hxxp://apnxscm.ac3.msn.com:81/", 0.1013148562169129, "hxxp://cas.be.eu.criteo.com/", 0.8837693124054686, "hxxp://m.adnxs.com/", 0.1013148562169129 ] ], [ "hxxp://maboutique-internet.orange.fr/", [ "hxxp://c.orange.fr/", 0.1368287908393687, "hxxp://i5.woopic.com/", 0.0632765554474551, "hxxp://iapref.orange.fr/", 0.0632765554474551, "hxxp://media.abonnez-vous.orange.fr/", 0.946117630672163, "hxxp://r.orange.fr/", 0.0632765554474551, "hxxp://s.gstat.orange.fr/", 0.0632765554474551, "hxxp://sdc.francetelecom.com/", 0.0632765554474551, "hxxps://boutiques.orange.fr/", 0.109246702567401, "hxxps://c.orange.fr/", 0.07247058487144431, "hxxps://iapref.orange.fr/", 0.0632765554474551 ] ], [ "hxxp://maps.google.fr/", [ "hxxp://gg.google.com/", 0.5614776397776141, "hxxp://khm0.google.fr/", 0.774019803720548, "hxxp://khm1.google.fr/", 0.774019803720548, "hxxp://maps.google.fr/", 1.369041414978032, "hxxp://maps.gstatic.com/", 6.737629008470925, "hxxp://mt0.google.com/", 1.843913010805752, "hxxp://mt1.google.com/", 1.202695325291683, "hxxp://ssl.gstatic.com/", 0.3350375604117457, "hxxp://t0.gstatic.com/", 0.774019803720548 ] ], [ "hxxp://market2.the-adult-company.com/", [ "hxxp://img.media-rendering3.com/", 2.025335319191497 ] ], [ "hxxp://mb.wendise.com/", [ "hxxp://thumbs.wendise.com/", 11.21732595342014, "hxxp://www.google-analytics.com/", 1.73771292226393 ] ], [ "hxxp://media.acces-charme.com/", [ "hxxp://img.acces-charme.com/", 4.08529175495037, "hxxp://media.acces-charme.com/", 20.30762723516155, "hxxp://static.acces-charme.com/", 75.33077662131168, "hxxp://www.acces-charme.com/", 0.8858981326222076, "hxxp://www.google-analytics.com/", 2.358874236931363 ] ], [ "hxxp://media.camsympa.com/", [ "hxxp://media.camsympa.com/", 4.603642443311159, "hxxp://pub.sv2.biz/", 1.73771292226393 ] ], [ "hxxp://media.eurolive.com/", [ "hxxp://media.eurolive.com/", 2.012993327737069 ] ], [ "hxxp://media.prizee.com/", [ "hxxp://media.prizee.com/", 53.67232253002998, "hxxp://pz-cadeaux.s3.amazonaws.com/", 2.127083409456189, "hxxp://www.prizee.com/", 10.20398323067401 ] ], [ "hxxp://media.yesmessenger.com/", [ "hxxp://maps.google.com/", 0.7054335046452285, "hxxp://media.yesmessenger.com/", 20.44685289750148, "hxxp://pub.sv2.biz/", 0.7054335046452285 ] ], [ "hxxp://medias.tuxboard.com/", [ "hxxp://l.longtailvideo.com/", 0.6758232614574935, "hxxp://medias.tuxboard.com/", 0.6758232614574935, "hxxp://plugins.longtailvideo.com/", 0.774019803720548 ] ], [ "hxxp://medias1.tuxboard.com/", [ "hxxp://l.longtailvideo.com/", 0.6758232614574935, "hxxp://medias1.tuxboard.com/", 0.6758232614574935, "hxxp://plugins.longtailvideo.com/", 0.774019803720548, "hxxp://www.tuxboard.com/", 2.737950648981639 ] ], [ "hxxp://mediaspub.lequipe.fr/", [ "hxxp://client.lenchanteur.com/", 0.4510452948431553 ] ], [ "hxxp://mobile-shop.orange.fr/", [ "hxxp://c.orange.fr/", 0.0967385577930694, "hxxp://dis.eu.criteo.com/", 0.0844657556849934, "hxxp://ld1.criteo.com/", 0.0844657556849934, "hxxp://mobile-shop.orange.fr/", 0.5463908250386632, "hxxp://mobile-shop1.orange-static.fr/", 0.4566378139900941, "hxxp://orangefr.widget.criteo.com/", 0.0844657556849934, "hxxp://s.gstat.orange.fr/", 0.0844657556849934, "hxxp://sdc.francetelecom.com/", 0.0844657556849934, "hxxps://boutiques.orange.fr/", 0.2268612556044694, "hxxps://c.orange.fr/", 0.1591352708968958 ] ], [ "hxxp://mw2.static.zgncdn.com/", [ "hxxp://client-0.mw2.zynga.com/", 1.033439124813687, "hxxp://mw2.static.zgncdn.com/", 2.156537351780162, "hxxp://mw2.static1.zgncdn.com/", 1.755430842149277, "hxxp://mw2.static2.zgncdn.com/", 2.316979955632512, "hxxp://mw2.static3.zgncdn.com/", 1.996094747927807, "hxxp://zcache.zgncdn.com/", 0.5521113132566277, "hxxps://fbcdn-profile-a.akamaihd.net/", 0.7125539171089809, "hxxps://graph.facebook.com/", 0.7125539171089809 ] ], [ "hxxp://n21.ad.ad-srv.net/", [ "hxxp://ad.zanox.com/", 0.2147743836410109, "hxxp://static.groupon.fr/", 0.1875268872089423, "hxxp://www.groupon.fr/", 0.1875268872089423 ] ], [ "hxxp://n24.ad.ad-srv.net/", [ "hxxp://action.metaffiliation.com/", 1.298664854951716, "hxxp://ad.zanox.com/", 1.487359748406239, "hxxp://img.netaffiliation.com/", 1.298664854951716 ] ], [ "hxxp://n3.ad.ad-srv.net/", [ "hxxp://action.metaffiliation.com/", 0.1420590113442259, "hxxp://ad.zanox.com/", 0.1627000642745835, "hxxp://cdn.contentspread.net/", 0.1627000642745835, "hxxp://img.netaffiliation.com/", 0.1420590113442259, "hxxp://img.tati.fr/", 0.1420590113442259, "hxxp://ui.zanox-affiliate.de/", 0.1420590113442259 ] ], [ "hxxp://n42.ad.ad-srv.net/", [ "hxxp://ad.zanox.com/", 0.2246232230656564, "hxxp://eulerian.brandalley.fr/", 0.1420590113442259, "hxxp://hstfr.tradedoubler.com/", 0.1420590113442259, "hxxp://impfr.tradedoubler.com/", 0.1420590113442259, "hxxp://media.boulanger.fr/", 0.1627000642745835, "hxxp://www.asos.fr/", 0.1420590113442259 ] ], [ "hxxp://n46.ad.ad-srv.net/", [ "hxxp://ad.zanox.com/", 0.0518856741485609, "hxxp://banners.contentfeed.net/", 0.3371630265006705, "hxxp://banniere.reussissonsensemble.fr/", 0.3371630265006705, "hxxp://cdn.contentspread.net/", 0.4654862679300305, "hxxp://static.groupon.fr/", 0.294388612690884, "hxxp://track.effiliation.com/", 0.294388612690884, "hxxp://www.atelierdeschefs.com/", 0.294388612690884, "hxxp://www.prizee.com/", 0.294388612690884 ] ], [ "hxxp://n7-auto-pieces.com/", [ "hxxp://n7-auto-pieces.com/", 3.719916071612186, "hxxp://www.n7-auto-pieces.com/", 0.9704128882466564 ] ], [ "hxxp://noplp.france2.fr/", [ "hxxp://www.france2.fr/", 0.1579417536041384, "hxxp://www.google-analytics.com/", 0.05285653346812919 ] ], [ "hxxp://nxtck.com/", [ "hxxp://ad.zanox.com/", 0.6493012908768084, "hxxp://cdn.nextperf.net/", 0.6493012908768084, "hxxp://www.kiabi.com/", 0.6493012908768084 ] ], [ "hxxp://omg.esprit-click.com/", [ "hxxp://i.esprit-click.com/", 0.9359996251679994 ] ], [ "hxxp://onlinecatalogue.ikea.com/", [ "hxxp://d1mu9ule1cy7bp.cloudfront.net/", 5.306249197284277, "hxxp://ecbooklog.ecweb.is/", 1.978252127919575, "hxxp://ikea.122.2o7.net/", 1.511164819938565, "hxxp://onlinecatalogue.ikea.com/", 6.707511121227324 ] ], [ "hxxp://openx.wooga.com/", [ "hxxp://beacon-1.newrelic.com/", 1.337494827162624, "hxxp://cdn12.wooga.com/", 4.254223200798246, "hxxp://openx.wooga.com/", 1.337426021626768, "hxxps://d1ros97qkrwjf5.cloudfront.net/", 0.3487694648691003 ] ], [ "hxxp://outils.yesmessenger.com/", [ "hxxp://outils.yesmessenger.com/", 4.020075335057307 ] ], [ "hxxp://p4.avfkqhr3tq436.pagymtvhk75hejiw.if.v4.ipv6-exp.l.google.com/", [ "hxxp://p4.avfkqhr3tq436.pagymtvhk75hejiw.if.v4.ipv6-exp.l.google.com/", 0.5849438978466032 ] ], [ "hxxp://p4.c2ccaxq6yhg6u.d2szoczrfisgiwzy.if.v4.ipv6-exp.l.google.com/", [ "hxxp://p4.c2ccaxq6yhg6u.d2szoczrfisgiwzy.if.v4.ipv6-exp.l.google.com/", 0.06147507191386605 ] ], [ "hxxp://p4.dhxg7pecdipdy.vgy6ym3wcnu6ykvm.if.v4.ipv6-exp.l.google.com/", [ "hxxp://p4.dhxg7pecdipdy.vgy6ym3wcnu6ykvm.if.v4.ipv6-exp.l.google.com/", 0.07972473850592197 ] ], [ "hxxp://p4.gm5qdaaa2otnq.ml7bg626bfjnqwgv.if.v4.ipv6-exp.l.google.com/", [ "hxxp://p4.gm5qdaaa2otnq.ml7bg626bfjnqwgv.if.v4.ipv6-exp.l.google.com/", 0.3282755444739386 ] ], [ "hxxp://p4.grpypjega4obc.axcvnreexqlh2vln.if.v4.ipv6-exp.l.google.com/", [ "hxxp://p4.grpypjega4obc.axcvnreexqlh2vln.if.v4.ipv6-exp.l.google.com/", 0.1896298188199763 ] ], [ "hxxp://pagead2.googlesyndication.com/", [ "hxxp://pagead2.googlesyndication.com/", 0.5952074997242605 ] ], [ "hxxp://participer.france5.fr/", [ "hxxp://participer.france5.fr/", 0.9799132946610761 ] ], [ "hxxp://partner.shopping.orange.fr/", [ "hxxp://cimg.leguide.com/", 0.09957341285711137, "hxxp://ecx.images-amazon.com/", 0.08694096495732856, "hxxp://img.orangeregie.leguide.com/", 0.08694096495732856, "hxxp://lgstats.leguide.com/", 0.08694096495732856, "hxxp://shopping.orange.fr/", 0.08694096495732856 ] ], [ "hxxp://pdv.porn.fr/", [ "hxxp://logi151.xiti.com/", 0.9354382357610492, "hxxp://pdv.porn.fr/", 10.65361633506465, "hxxp://public.porn.fr/", 5.599840478700095, "hxxp://thumbsp.porn.fr/", 42.73049639339586, "hxxp://www.porn.fr/", 0.5884838741510292 ] ], [ "hxxp://petite-chatte.org/", [ "hxxp://a22.x-traceur.com/", 2.025335319191497, "hxxp://gateway.eravage.com/", 2.025335319191497, "hxxp://ktu.sv2.biz/", 3.496732773304977, "hxxp://media.acces-charme.com/", 2.025335319191497, "hxxp://petite-chatte.org/", 49.99289232329119, "hxxp://services.x-traceur.com/", 2.025335319191497, "hxxp://www.laly-filmsx.com/", 2.025335319191497, "hxxp://www.petite-chatte.org/", 2.025335319191497, "hxxp://www.pornravage.com/", 2.025335319191497, "hxxp://www.secret-de-cindy.com/", 2.025335319191497 ] ], [ "hxxp://peugeot.piecedoccasion.fr/", [ "hxxp://peugeot.piecedoccasion.fr/", 2.260715453583193, "hxxp://www.google-analytics.com/", 0.6424364370880548 ] ], [ "hxxp://peugeot.piecesavenue.com/", [ "hxxp://peugeot.piecesavenue.com/", 6.408537398774624, "hxxp://www.google-analytics.com/", 0.5108530704555615 ] ], [ "hxxp://photos-de-cul.com/", [ "hxxp://a18.x-traceur.com/", 2.025335319191497, "hxxp://img.www.indecentes-voisines.com/", 2.613894300836889, "hxxp://mb.archivesexy.com/", 2.025335319191497, "hxxp://media.acces-charme.com/", 2.319614810014193, "hxxp://photos-de-cul.com/", 42.63590505272371, "hxxp://services.x-traceur.com/", 2.025335319191497, "hxxp://thumbs.wendise.com/", 2.613894300836889, "hxxp://thumbs3.smartmovies.net/", 2.613894300836889, "hxxp://www.indecentes-voisines.com/", 2.613894300836889, "hxxp://www.smartmovies.net/", 2.319614810014193 ] ], [ "hxxp://pixel.invitemedia.com/", [ "hxxp://pixel.rubiconproject.com/", 0.9285702433741844, "hxxp://segment-pixel.invitemedia.com/", 0.364393466749374, "hxxp://tags.bluekai.com/", 0.364393466749374, "hxxp://tap.rubiconproject.com/", 0.9285702433741844 ] ], [ "hxxp://platform.twitter.com/", [ "hxxp://cdn.api.twitter.com/", 0.6640989555453576, "hxxp://platform.twitter.com/", 2.152997147923919 ] ], [ "hxxp://promo.eurolive.com/", [ "hxxp://promo.eurolive.com/", 3.031630657003979 ] ], [ "hxxp://promo.vador.com/", [ "hxxp://cdn1.static.vador.com/", 5.345534382687872, "hxxp://cdn1.thumbs.vador.com/", 0.5888390439148596, "hxxp://promo.vador.com/", 0.8833197164543539 ] ], [ "hxxp://pub.payglad.com/", [ "hxxp://banners.direction-x.com/", 0.9182854210828584, "hxxp://pub.payglad.com/", 3.679595738396221, "hxxp://test.direction-x.com/", 0.5821749640628718 ] ], [ "hxxp://public.porn.fr/", [ "hxxp://public.porn.fr/", 4.8471833858614 ] ], [ "hxxp://publicinvasion.bangbros1.com/", [ "hxxp://publicinvasion.bangbros1.com/", 5.745717918975983 ] ], [ "hxxp://resources.infolinks.com/", [ "hxxp://rt1301.infolinks.com/", 0.5968401275213049 ] ], [ "hxxp://rg.revolvermaps.com/", [ "hxxp://rg.revolvermaps.com/", 3.22893336029691 ] ], [ "hxxp://rya.rockyou.com/", [ "hxxp://b.scorecardresearch.com/", 0.08785650042191764, "hxxp://bannerfarm.ace.advertising.com/", 0.05492271005791945 ] ], [ "hxxp://s.kewego.com/", [ "hxxp://api.kewego.com/", 3.412148272251843, "hxxp://s.kewego.com/", 1.504039041058379, "hxxp://tll.kewego.com/", 1.885660887297072, "hxxp://www.kewego.com/", 1.885660887297072 ] ], [ "hxxp://s.megaclick.com/", [ "hxxp://f.megaclick.com/", 0.1933579219744897 ] ], [ "hxxp://s.ytimg.com/", [ "hxxp://googleads.g.doubleclick.net/", 0.7777452655892271, "hxxp://i2.ytimg.com/", 0.9704128882466564, "hxxp://i4.ytimg.com/", 0.774019803720548, "hxxp://o-o.preferred.orange-par1.v11.lscache5.c.youtube.com/", 0.4918713301294032, "hxxp://o-o.preferred.orange-par1.v14.lscache4.c.youtube.com/", 0.4918713301294032, "hxxp://s.youtube.com/", 0.4918713301294032, "hxxp://s.ytimg.com/", 0.6053545281628883, "hxxp://s0.2mdn.net/", 0.5473272186728071, "hxxp://s2.youtube.com/", 0.1554741249826479, "hxxp://www.youtube.com/", 0.3023585812262254 ] ], [ "hxxp://s0.2mdn.net/", [ "hxxp://airfrance.bannerfactory.fr/", 0.08618356833843778, "hxxp://gmf-rugby-banniere.tbwa-paris.com/", 0.4079839037956786, "hxxp://googleads.g.doubleclick.net/", 0.4918713301294032, "hxxp://motifcdn2.doubleclick.net/", 0.4918713301294032, "hxxp://s0.2mdn.net/", 0.4918713301294032, "hxxp://www.googleadservices.com/", 0.4918713301294032 ] ], [ "hxxp://s15281735.onlinehome-server.info/", [ "hxxp://www.eboostvo.com/", 0.6758232614574935, "hxxp://www.gtlien.com/", 0.8722163459836025 ] ], [ "hxxp://s7.addthis.com/", [ "hxxp://ds.addthis.com/", 0.1237444749986771, "hxxp://l.addthiscdn.com/", 0.7811050704805154 ] ], [ "hxxp://secure.shared.live.com/", [ "hxxp://sn1msg2010829.gateway.messenger.live.com/", 2.14577659904535, "hxxp://sn1msg2020211.sn1.gateway.edge.messenger.live.com/", 0.8090091894001237, "hxxp://sn1msg3010706.sn1.gateway.edge.messenger.live.com/", 0.1508094298355345, "hxxp://sn1msg3010811.gateway.messenger.live.com/", 0.05366731644145602, "hxxp://sn1msg3010833.sn1.gateway.edge.messenger.live.com/", 0.2723918619685038, "hxxp://sn1msg3010834.sn1.gateway.edge.messenger.live.com/", 2.14577659904535, "hxxp://sn1msg3020133.sn1.gateway.edge.messenger.live.com/", 0.4237864986621632, "hxxp://sn1msg3020319.gateway.messenger.live.com/", 0.1508094298355345, "hxxps://js2.wlxrs.com/", 0.771179021541732, "hxxps://secure.wlxrs.com/", 0.7717047922524893 ] ], [ "hxxp://sitedefou.com/", [ "hxxp://sitedefou.com/", 4.279479053757193, "hxxp://www.google-analytics.com/", 1.558611020109449, "hxxp://www.webchoc.org/", 4.834473356205843 ] ], [ "hxxp://siteunder.numericable.fr/", [ "hxxp://siteunder.numericable.fr/", 0.2164284904923876 ] ], [ "hxxp://sn113w.snt113.mail.live.com/", [ "hxxp://gfx2.hotmail.com/", 3.70467412826633, "hxxp://gfx3.hotmail.com/", 9.004925727617662, "hxxp://gfx4.hotmail.com/", 2.769335610733743, "hxxp://h.live.com/", 2.457556104889546, "hxxp://js.wlxrs.com/", 9.460812192993338, "hxxp://msc.wlxrs.com/", 2.457556104889546, "hxxp://secure.wlxrs.com/", 8.402644426391582, "hxxp://sn113w.snt113.mail.live.com/", 6.198910175019899, "hxxp://www.mailorama.fr/", 4.016453634110526, "hxxps://secure.wlxrs.com/", 3.392894622422135 ] ], [ "hxxp://sn1msg1010509.sn1.gateway.edge.messenger.live.com/", [ "hxxp://shared.live.com/", 0.278950849757824, "hxxp://sn1msg1010509.sn1.gateway.edge.messenger.live.com/", 0.278950849757824 ] ], [ "hxxp://sn1msg1010522.gateway.messenger.live.com/", [ "hxxp://sn1msg1010522.gateway.messenger.live.com/", 3.111279437530011 ] ], [ "hxxp://sn1msg1010616.gateway.messenger.live.com/", [ "hxxp://sn1msg1010616.gateway.messenger.live.com/", 0.924911291466851 ] ], [ "hxxp://sn1msg1010621.gateway.messenger.live.com/", [ "hxxp://sn1msg1010621.gateway.messenger.live.com/", 0.5190681686126378 ] ], [ "hxxp://sn1msg1010640.sn1.gateway.edge.messenger.live.com/", [ "hxxp://shared.live.com/", 0.4018324634836641, "hxxp://sn1msg1010640.sn1.gateway.edge.messenger.live.com/", 0.4018324634836641 ] ], [ "hxxp://sn1msg1010711.sn1.gateway.edge.messenger.live.com/", [ "hxxp://shared.live.com/", 0.0676411044314246, "hxxp://sn1msg1010711.sn1.gateway.edge.messenger.live.com/", 0.0676411044314246 ] ], [ "hxxp://sn1msg1010724.gateway.messenger.live.com/", [ "hxxp://sn1msg1010724.gateway.messenger.live.com/", 0.1528109112880595 ] ], [ "hxxp://sn1msg1010728.gateway.messenger.live.com/", [ "hxxp://sn1msg1010728.gateway.messenger.live.com/", 2.330779429424695 ] ], [ "hxxp://sn1msg1010739.sn1.gateway.edge.messenger.live.com/", [ "hxxp://shared.live.com/", 0.06147507191386605, "hxxp://sn1msg1010739.sn1.gateway.edge.messenger.live.com/", 0.06147507191386605 ] ], [ "hxxp://sn1msg1010810.sn1.gateway.edge.messenger.live.com/", [ "hxxp://shared.live.com/", 0.7808220282465778, "hxxp://sn1msg1010810.sn1.gateway.edge.messenger.live.com/", 0.7808220282465778 ] ], [ "hxxp://sn1msg1010811.sn1.gateway.edge.messenger.live.com/", [ "hxxp://shared.live.com/", 0.05802450937920715, "hxxp://sn1msg1010811.sn1.gateway.edge.messenger.live.com/", 0.05802450937920715 ] ], [ "hxxp://sn1msg1010815.gateway.messenger.live.com/", [ "hxxp://sn1msg1010815.gateway.messenger.live.com/", 2.056340104668041 ] ], [ "hxxp://sn1msg1020111.sn1.gateway.edge.messenger.live.com/", [ "hxxp://shared.live.com/", 0.1066964385052727, "hxxp://sn1msg1020111.sn1.gateway.edge.messenger.live.com/", 0.1066964385052727 ] ], [ "hxxp://sn1msg1020117.gateway.messenger.live.com/", [ "hxxp://shared.live.com/", 0.4018324634836641, "hxxp://sn1msg1020117.gateway.messenger.live.com/", 0.5769902039765427 ] ], [ "hxxp://sn1msg1020121.gateway.messenger.live.com/", [ "hxxp://sn1msg1020121.gateway.messenger.live.com/", 1.058249101750589 ] ], [ "hxxp://sn1msg1020211.sn1.gateway.edge.messenger.live.com/", [ "hxxp://shared.live.com/", 0.0781893762112512, "hxxp://sn1msg1020211.sn1.gateway.edge.messenger.live.com/", 0.0781893762112512 ] ], [ "hxxp://sn1msg1020226.gateway.messenger.live.com/", [ "hxxp://sn1msg1020226.gateway.messenger.live.com/", 1.601149859688571 ] ], [ "hxxp://sn1msg1020240.sn1.gateway.edge.messenger.live.com/", [ "hxxp://shared.live.com/", 0.6565825732037985, "hxxp://sn1msg1020240.sn1.gateway.edge.messenger.live.com/", 0.6565825732037985 ] ], [ "hxxp://sn1msg2010522.gateway.messenger.live.com/", [ "hxxp://sn1msg2010522.gateway.messenger.live.com/", 0.06685963565240703 ] ], [ "hxxp://sn1msg2010523.gateway.messenger.live.com/", [ "hxxp://sn1msg2010523.gateway.messenger.live.com/", 0.1114099256495704 ] ], [ "hxxp://sn1msg2010539.sn1.gateway.edge.messenger.live.com/", [ "hxxp://shared.live.com/", 0.0844657556849934, "hxxp://sn1msg2010539.sn1.gateway.edge.messenger.live.com/", 0.0844657556849934 ] ], [ "hxxp://sn1msg2010631.gateway.messenger.live.com/", [ "hxxp://sn1msg2010631.gateway.messenger.live.com/", 0.9811511974797592 ] ], [ "hxxp://sn1msg2010640.sn1.gateway.edge.messenger.live.com/", [ "hxxp://shared.live.com/", 0.05169354788278111, "hxxp://sn1msg2010640.sn1.gateway.edge.messenger.live.com/", 0.05169354788278111 ] ], [ "hxxp://sn1msg2010722.gateway.messenger.live.com/", [ "hxxp://sn1msg2010722.gateway.messenger.live.com/", 0.1144765475982469 ] ], [ "hxxp://sn1msg2010728.gateway.messenger.live.com/", [ "hxxp://sn1msg2010728.gateway.messenger.live.com/", 1.234633121586469 ] ], [ "hxxp://sn1msg2010739.sn1.gateway.edge.messenger.live.com/", [ "hxxp://shared.live.com/", 0.1227063848829763, "hxxp://sn1msg2010739.sn1.gateway.edge.messenger.live.com/", 0.1227063848829763 ] ], [ "hxxp://sn1msg2010816.gateway.messenger.live.com/", [ "hxxp://sn1msg2010816.gateway.messenger.live.com/", 2.666791140213729 ] ], [ "hxxp://sn1msg2010829.gateway.messenger.live.com/", [ "hxxp://sn1msg2010829.gateway.messenger.live.com/", 3.392894622422135 ] ], [ "hxxp://sn1msg2020110.sn1.gateway.edge.messenger.live.com/", [ "hxxp://shared.live.com/", 0.3282755444739386, "hxxp://sn1msg2020110.sn1.gateway.edge.messenger.live.com/", 0.3282755444739386 ] ], [ "hxxp://sn1msg2020121.gateway.messenger.live.com/", [ "hxxp://sn1msg2020121.gateway.messenger.live.com/", 0.1634831616612047 ] ], [ "hxxp://sn1msg2020125.gateway.messenger.live.com/", [ "hxxp://sn1msg2020125.gateway.messenger.live.com/", 0.09174815585601133 ] ], [ "hxxp://sn1msg2020133.gateway.messenger.live.com/", [ "hxxp://sn1msg2020133.gateway.messenger.live.com/", 0.1543069402252034 ] ], [ "hxxp://sn1msg2020211.sn1.gateway.edge.messenger.live.com/", [ "hxxp://shared.live.com/", 1.857229544077419, "hxxp://sn1msg2020211.sn1.gateway.edge.messenger.live.com/", 1.857229544077419 ] ], [ "hxxp://sn1msg2020216.gateway.messenger.live.com/", [ "hxxp://sn1msg2020216.gateway.messenger.live.com/", 0.5769902039765427 ] ], [ "hxxp://sn1msg2020218.gateway.messenger.live.com/", [ "hxxp://sn1msg2020218.gateway.messenger.live.com/", 0.942785233318274 ] ], [ "hxxp://sn1msg2020220.gateway.messenger.live.com/", [ "hxxp://sn1msg2020220.gateway.messenger.live.com/", 0.09085864371942265 ] ], [ "hxxp://sn1msg3010706.sn1.gateway.edge.messenger.live.com/", [ "hxxp://shared.live.com/", 1.204228275505104, "hxxp://sn1msg3010706.sn1.gateway.edge.messenger.live.com/", 1.204228275505104 ] ], [ "hxxp://sn1msg3010707.gateway.messenger.live.com/", [ "hxxp://sn1msg3010707.gateway.messenger.live.com/", 0.1337256836797691 ] ], [ "hxxp://sn1msg3010716.gateway.messenger.live.com/", [ "hxxp://sn1msg3010716.gateway.messenger.live.com/", 0.3002208050129051 ] ], [ "hxxp://sn1msg3010721.gateway.messenger.live.com/", [ "hxxp://sn1msg3010721.gateway.messenger.live.com/", 0.2452642759960138 ] ], [ "hxxp://sn1msg3010727.gateway.messenger.live.com/", [ "hxxp://sn1msg3010727.gateway.messenger.live.com/", 0.07074622739331947 ] ], [ "hxxp://sn1msg3010811.gateway.messenger.live.com/", [ "hxxp://sn1msg3010811.gateway.messenger.live.com/", 0.9159223855497107 ] ], [ "hxxp://sn1msg3010827.gateway.messenger.live.com/", [ "hxxp://sn1msg3010827.gateway.messenger.live.com/", 0.4713700125779626 ] ], [ "hxxp://sn1msg3010833.sn1.gateway.edge.messenger.live.com/", [ "hxxp://shared.live.com/", 0.4163026780205873, "hxxp://sn1msg3010833.sn1.gateway.edge.messenger.live.com/", 0.4163026780205873 ] ], [ "hxxp://sn1msg3010834.sn1.gateway.edge.messenger.live.com/", [ "hxxp://shared.live.com/", 0.3761880567857649, "hxxp://sn1msg3010834.sn1.gateway.edge.messenger.live.com/", 0.3761880567857649 ] ], [ "hxxp://sn1msg3020133.sn1.gateway.edge.messenger.live.com/", [ "hxxp://shared.live.com/", 1.474060504014537, "hxxp://sn1msg3020133.sn1.gateway.edge.messenger.live.com/", 1.474060504014537 ] ], [ "hxxp://sn1msg3020208.gateway.messenger.live.com/", [ "hxxp://sn1msg3020208.gateway.messenger.live.com/", 0.05306567976064198 ] ], [ "hxxp://sn1msg3020228.gateway.messenger.live.com/", [ "hxxp://sn1msg3020228.gateway.messenger.live.com/", 0.3430680893845182 ] ], [ "hxxp://sn1msg3020231.sn1.gateway.edge.messenger.live.com/", [ "hxxp://shared.live.com/", 0.1789859996603801, "hxxp://sn1msg3020231.sn1.gateway.edge.messenger.live.com/", 0.1789859996603801 ] ], [ "hxxp://sn1msg3020316.gateway.messenger.live.com/", [ "hxxp://sn1msg3020316.gateway.messenger.live.com/", 0.1817260015110316 ] ], [ "hxxp://sn1msg3020319.gateway.messenger.live.com/", [ "hxxp://sn1msg3020319.gateway.messenger.live.com/", 1.729148293032969 ] ], [ "hxxp://sn1msg3020322.gateway.messenger.live.com/", [ "hxxp://sn1msg3020322.gateway.messenger.live.com/", 0.3090185635162116 ] ], [ "hxxp://sn1msg3020329.gateway.messenger.live.com/", [ "hxxp://sn1msg3020329.gateway.messenger.live.com/", 0.05248489702257039 ] ], [ "hxxp://sn1msg3020427.gateway.messenger.live.com/", [ "hxxp://sn1msg3020427.gateway.messenger.live.com/", 0.05262090867432177 ] ], [ "hxxp://sn1msg3020433.sn1.gateway.edge.messenger.live.com/", [ "hxxp://shared.live.com/", 0.5290067947091094, "hxxp://sn1msg3020433.sn1.gateway.edge.messenger.live.com/", 0.5290067947091094 ] ], [ "hxxp://sn1msg3030116.gateway.messenger.live.com/", [ "hxxp://sn1msg3030116.gateway.messenger.live.com/", 0.0962617644923922 ] ], [ "hxxp://sn1msg3030125.gateway.messenger.live.com/", [ "hxxp://sn1msg3030125.gateway.messenger.live.com/", 0.2595216392036553 ] ], [ "hxxp://sn1msg3030126.gateway.messenger.live.com/", [ "hxxp://sn1msg3030126.gateway.messenger.live.com/", 0.1572889270409144 ] ], [ "hxxp://sn1msg3030131.sn1.gateway.edge.messenger.live.com/", [ "hxxp://shared.live.com/", 0.05442348752376278, "hxxp://sn1msg3030131.sn1.gateway.edge.messenger.live.com/", 0.05442348752376278 ] ], [ "hxxp://stat.fdjeux.com/", [ "hxxp://stat.fdjeux.com/", 2.140805473791581, "hxxp://www.google-analytics.com/", 0.5190681686126378 ] ], [ "hxxp://static.eu.criteo.net/", [ "hxxp://caw.criteo.com/", 21.90251792660207, "hxxp://images.eu.criteo.net/", 91.9129387362738, "hxxp://static.eu.criteo.net/", 21.7705018682285 ] ], [ "hxxp://static.weborama.fr/", [ "hxxp://ad.doubleclick.net/", 0.08948870848798139, "hxxp://s0.2mdn.net/", 0.05613568354727971 ] ], [ "hxxp://static1.shopoon.fr/", [ "hxxp://images.shopoon.fr/", 2.011296236235034, "hxxp://static1.shopoon.fr/", 1.033258675295012, "hxxp://www.google-analytics.com/", 0.7072461549816705 ] ], [ "hxxp://stats.b
0
chacha003
 
désolé voici le lien
http://pjjoint.malekal.com/files.php?id=97g12b12l12b5s14y14i6y13n5t11m8f14l14p1115z11u9q11
0
moment de grace Messages postés 30049 Statut Contributeur sécurité 2 274
 
Ok



1)

Copie tout le texte présent en gras ci-dessous (tu le selectionnes avec ta souris / Clique droit dessus et choisis "copier" ou fait Ctrl+C )



G0 - GCSP: Preference [User Data\Default][HomePage] http://www.searchnu.com/
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.searchnu.com/
[HKCU\Software\ilivid]
[HKLM\Software\CrazyLoader]
[HKLM\Software\GamesBarSetup]
[HKLM\Software\Trymedia Systems]
O43 - CFD: 09/08/2011 - 20:18:18 - [0] ----D- C:\Program Files\Babylon
O43 - CFD: 21/05/2011 - 06:35:28 - [2012] ----D- C:\Program Files\GamesBar
O43 - CFD: 02/05/2011 - 10:44:16 - [270] ----D- C:\Documents and Settings\baudin\Local Settings\Application Data\MediaGet2
O44 - LFC:[MD5.AD4B0F606E0F8465BC4C4C170B37E1A3] - 31/10/2011 - 18:22:25 ---A- . (...) -- C:\END [43]
O47 - AAKE:Key Export SP - "C:\Program Files\CrazyLoader\crazyloader.exe" [Enabled] .(...) -- C:\Program Files\CrazyLoader\crazyloader.exe (.not file.)
C:\Documents and Settings\baudin\Local Settings\Application Data\fe44cf38
C:\Program Files\Babylon
C:\Program Files\GamesBar
C:\Documents and Settings\baudin\Local Settings\Application Data\MediaGet2
[HKCU\Software\toolbar]
[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{E08A9998-D98F-476f-8F5C-37C80FE0A4DA}]
[HKCU\Software\Toolbar]
O47 - AAKE:Key Export SP - "C:\Program Files\SweetIM\Messenger\SweetIM.exe" [Disabled] .(...) -- C:\Program Files\SweetIM\Messenger\SweetIM.exe (.not file.)
O47 - AAKE:Key Export SP - "C:\Documents and Settings\baudin\Mes documents\Downloads\SweetImSetup.exe" [Disabled] .(...) -- C:\Documents and Settings\baudin\Mes documents\Downloads\SweetImSetup.exe (.not file.)
EMPTYTEMP
EMPTYFLASH


Puis Lance ZHPFix depuis le raccourci du bureau . (Clique droit -> Executer en tant qu'admin pour Vista ou Seven)

* Une fois l'outil ZHPFix ouvert ,

- Clique sur l'icone représentant la lettre H (« coller les lignes Helper »)
- Les lignes se collent automatiquement dans ZHPFix, sinon colle les lignes
- Clique sur le bouton « GO » pour lancer le nettoyage,
- Copie/colle la totalité du rapport dans ta prochaine réponse



le rapport se trouve dans le dossier de zhpdiag dans program files sous le nom de ZHPFixReport

............................

2)

Redemarre le pc et dis moi si tu as encore des soucis



CONTRIBUTEUR SECURITE

En désinfection, c'est la fin le plus important !
"Restez" jusqu'au bout...merci
0

Vous n’avez pas trouvé la réponse que vous recherchez ?

Posez votre question
chacha003
 
Rapport de ZHPFix 1.12.3368 par Nicolas Coolman, Update du 12/11/2011
Fichier d'export Registre :
Run by baudin at 14/11/2011 16:20:26
Windows XP Professional Service Pack 2 (Build 2600)
Web site : http://www.premiumorange.com/zeb-help-process/zhpfix.html

========== Clé(s) du Registre ==========
SUPPRIME Key: HKCU\Software\ilivid
SUPPRIME Key: HKLM\Software\CrazyLoader
SUPPRIME Key: HKLM\Software\GamesBarSetup
SUPPRIME Key: HKLM\Software\Trymedia Systems
SUPPRIME Key: HKCU\Software\toolbar
SUPPRIME Key: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{E08A9998-D98F-476f-8F5C-37C80FE0A4DA}
ABSENT Key: HKCU\Software\Toolbar

========== Valeur(s) du Registre ==========
SUPPRIME AAKE KeyValue: C:\Program Files\CrazyLoader\crazyloader.exe
SUPPRIME AAKE KeyValue: C:\Program Files\SweetIM\Messenger\SweetIM.exe
SUPPRIME AAKE KeyValue: C:\Documents and Settings\baudin\Mes documents\Downloads\SweetImSetup.exe

========== Elément(s) de donnée du Registre ==========
SUPPRIME R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant

========== Préférences navigateur ==========
ABSENT Chrome File:

========== Dossier(s) ==========
SUPPRIME Folder: C:\Program Files\Babylon
SUPPRIME Folder: C:\Program Files\GamesBar
SUPPRIME Folder: C:\Documents and Settings\baudin\Local Settings\Application Data\MediaGet2
SUPPRIME Folder: c:\documents and settings\baudin\local settings\application data\fe44cf38
SUPPRIME Temporaires Windows: : 3
SUPPRIME Flash Cookies: 7

========== Fichier(s) ==========
SUPPRIME File: c:\end
ABSENT File: c:\program files\crazyloader\crazyloader.exe
ABSENT Folder/File: c:\program files\babylon
ABSENT Folder/File: c:\program files\gamesbar
ABSENT Folder/File: c:\documents and settings\baudin\local settings\application data\mediaget2
ABSENT File: c:\program files\sweetim\messenger\sweetim.exe
ABSENT File: c:\documents and settings\baudin\mes documents\downloads\sweetimsetup.exe
SUPPRIME Temporaires Windows: : 38
SUPPRIME Flash Cookies: 3


========== Récapitulatif ==========
7 : Clé(s) du Registre
3 : Valeur(s) du Registre
1 : Elément(s) de donnée du Registre
6 : Dossier(s)
9 : Fichier(s)
1 : Préférences navigateur


End of clean in 00mn 05s

========== Chemin de fichier rapport ==========
C:\ZHP\ZHPFix[R1].txt - 14/11/2011 16:20:26 [2309]
0
chacha003
 
neatsearch recherche toujours quand je fais une recherche google
0
moment de grace Messages postés 30049 Statut Contributeur sécurité 2 274
 
Télécharge OTL de OLDTimer

http://www.geekstogo.com/forum/files/file/398-otl-oldtimers-list-it/


enregistre le sur ton Bureau.

Double clic ( pour vista / 7 => clic droit "executer en tant qu'administrateur") sur OTL.exe pour le lancer.

Coche les 2 cases Lop et Purity

Coche la case devant tous les utilisateurs

règle age du fichier sur "60 jours"

dans la moitié gauche , mets tout sur "tous"

ne modifie pas ceci :

"fichiers créés" et "fichiers Modifiés"

Clic sur Analyse.

A la fin du scan, le Bloc-Notes va s'ouvrir avec le rapport (OTL.txt).

Ce fichier est sur ton Bureau (en général C:\Documents and settings\le_nom_de_ta_session\OTL.txt)

NE LE POSTE PAS SUR LE FORUM

Rend toi sur http://pjjoint.malekal.com/

Clique sur "Parcourir "

Sélectionne le rapport

Clique ensuite sur "Envoyer le fichier " et copie/colle le lien dans ton prochain message
Tu feras la meme chose avec le "Extra.txt" qui logiquement sera aussi sur ton bureau.
0
chacha003
 
otl
http://pjjoint.malekal.com/files.php?id=9t1212n6u7k15b5b9p15z6x11l5d7w6t5z10h6k11z10d9
extra
http://pjjoint.malekal.com/files.phpid=u14n14c8z7o15b1510e9m10r6n15m15c11d15k6y10h14w9y10x5
0
moment de grace Messages postés 30049 Statut Contributeur sécurité 2 274
 
peux tu me les mettre sur https://www.cjoint.com/
0
chacha003
 
http://cjoint.com/?AKorkucakFX

http://cjoint.com/?AKorkUhGLRR
0
moment de grace Messages postés 30049 Statut Contributeur sécurité 2 274
 
Télécharge Reload_TDSSKiller
http://dl.dropbox.com/u/21363431/Reload_Tdsskiller.exe

Lance le

choisis : télécharger la derniere version

relance-le

choisis : lancer le nettoyage

TDSSKiller va s'ouvrir , clique sur "Start Scan"

Si TDSS.tdl2 est détecté l''option delete sera cochée par défaut.
Si TDSS.tdl3 est détecté assure toi que Cure est bien cochée.
Si TDSS.tdl4(\HardDisk0\MBR) est détecté assure toi que Cure est bien cochée.
Si Suspicious file est indiqué, laisse l''option cochée sur Skip
Si Rootkit.Win32.ZAccess.* est détecté règle sur "cure" en haut , et "delete" en bas

une fois qu'il a terminé , redemarre s'il te le demande pour finir de nettoyer

sinon , ferme tdssKiller et le rapport s'affichera sur le bureau


Copie/Colle son contenu dans ta prochaine réponse.
0
chacha003
 
http://cjoint.com/?AKorEzVtUL7
0
moment de grace Messages postés 30049 Statut Contributeur sécurité 2 274
 
j'avoue que je souffre un peu là pour trouver

Relance OTL
- Sous Vista/Seven clic-droit sur l'icône et choisir "Exécuter en tant qu'administrateur" dans le menu contextuel.
* L'interface principale s'ouvre :
* Dans la partie du bas "Personnalisation", copie/colle la liste en citation :

:OTL
IE - HKU\S-1-5-21-1614895754-920026266-839522115-1003\..\URLSearchHook: {472734EA-242A-422b-ADF8-83D1E48CC825} - No CLSID value found
FF - HKLM\Software\MozillaPlugins\@oberon-media.com/ONCAdapter: C:\Program Files\Fichiers communs\Oberon Media\NCAdapter\1.0.0.7\npapicomadapter.dll File not found
O3 - HKLM\..\Toolbar: (no name) - !{EEE6C35B-6118-11DC-9C72-001320C79847} - No CLSID value found. O3 - HKLM\..\Toolbar: (no name) - 10 - No CLSID value found.
O3 - HKU\.DEFAULT\..\Toolbar\WebBrowser: (no name) - {00725D68-069B-4095-9FF1-E7469C0E95DF} - No CLSID value found.
O3 - HKU\S-1-5-18\..\Toolbar\WebBrowser: (no name) - {00725D68-069B-4095-9FF1-E7469C0E95DF} - No CLSID value found.

:Files
C:\Documents and Settings\All Users\Application Data\Media Get LLC


:Commands
[emptyflash]
[emptytemp]



* Clique sur le bouton Correction, patiente pendant le travail de l'outil, il va redémarrer le PC.
* Accepte en cliquant sur OK
* Le rapport indiquant les actions réalisées par OTL doit s'ouvrir spontanément
* Copie/colle le dans ton prochain message

Tu peux le retrouver le fichier à la racine du disque : C:\_OTL\MovedFiles (Vérifie la date si besoin : jjmmaaaa_xxxxxxxx.log)
0
chacha003
 
http://cjoint.com/?AKor3S82ica
0
moment de grace Messages postés 30049 Statut Contributeur sécurité 2 274
 
as tu ces redirections sur un seul navigateur, ou sur tous ?
0
chacha003
 
j'ai essayer sur google chrome et IE même résultat
0
moment de grace Messages postés 30049 Statut Contributeur sécurité 2 274
 
Attention, avant de commencer, lit attentivement la procédure, et imprime la

Aide à l'utilisation
https://www.bleepingcomputer.com/combofix/fr/comment-utiliser-combofix



Télécharge ComboFix de sUBs sur ton Bureau :

http://download.bleepingcomputer.com/sUBs/ComboFix.exe

/!\ Déconnecte-toi du net et <gras>DESACTIVES TOUTES LES DEFENSES, antivirus et antispyware y compris /!\ </gras>

---> Double-clique sur ComboFix.exe
Un "pop-up" va apparaître qui dit que ComboFix est utilisé à vos risques et avec aucune garantie... Clique sur oui pour accepter

SURTOUT INSTALLES LA CONSOLE DE RECUPERATION
(si il te propose de l'installer remets internet)

---> Mets-le en langue française F
Tape sur la touche 1 (Yes) pour démarrer le scan.

Ne touche à rien(souris, clavier) tant que le scan n'est pas terminé, car tu risques de planter ton PC

En fin de scan, il est possible que ComboFix ait besoin de redémarrer le PC pour finaliser la désinfection, laisse-le faire.

Une fois le scan achevé, un rapport va s'afficher : Poste son contenu

/!\ Réactive la protection en temps réel de ton antivirus et de ton antispyware avant de te reconnecter à Internet. /!\

Note : Le rapport se trouve également là : C:\ComboFix.txt



0
chacha003
 
un soucis, je n'ai pas d'imprimante
0
moment de grace Messages postés 30049 Statut Contributeur sécurité 2 274
 
pas grave

desactive tes protections
lance combofix
si il propose la console, repond oui avec internet connecté

et il fait le reste
0
chacha003
 
http://cjoint.com/?AKotdSzxhZC
voila
0
moment de grace Messages postés 30049 Statut Contributeur sécurité 2 274
 
Un rootkit de trouvé !!

J'ai un doute sur sa désinfection

Rends toi sur ce site :

https://www.virustotal.com/gui/

Clique sur parcourir et cherche ce fichier :


c:\windows\system32\drivers\mrxsmb.sys


Clique sur Send File.

Un rapport va s'élaborer ligne à ligne.

Attends la fin. Il doit comprendre la taille du fichier envoyé.


Copie le lien de Virus Total dans ta réponse.


Si tu ne trouves pas le fichier alors

Affiche tous les fichiers et dossiers :

Pour cela :
Clique sur démarrer/panneau de configuration/option des dossiers/affichage

Cocher afficher les dossiers cachés

Décoche la case "Masquer les fichiers protégés du système d'exploitation (recommandé)"

Décocher masquer les extensions dont le type est connu

Puis fais «appliquer» pour valider les changements.

Et OK


0
chacha003
 
http://www.virustotal.com/file-scan/reanalysis.html?id=0fdd53c72f3158283306892a57a2687d5358a468380e8be6eb58eae100d813c1-1321294063
0
chacha003
 
http://www.virustotal.com/file-scan/report.html?id=0fdd53c72f3158283306892a57a2687d5358a468380e8be6eb58eae100d813c1-1320751859
0
moment de grace Messages postés 30049 Statut Contributeur sécurité 2 274
 
il est bon

as tu encore ces redirections ?
0
chacha003
 
pour le moment non j'espère que ca va durer
en tout cas merci beaucoup car seule j'aurais jamais pu faire tout ceci
0
moment de grace Messages postés 30049 Statut Contributeur sécurité 2 274
 
il était bien caché celui là

teste un peu le pc

si c'est ok demain, je te posterai la fin...
0
chacha003
 
ok par contre demain pas d'inquiétude car je rentre chez moi que vers 20h
0
moment de grace Messages postés 30049 Statut Contributeur sécurité 2 274
 
demain ou plus tard...pas important
0
moment de grace Messages postés 30049 Statut Contributeur sécurité 2 274
 
bonjour

Télécharge ZHPDiag ( de Nicolas coolman ).
https://www.zebulon.fr/telechargements/securite/systeme/zhpdiag.html


(outil de diagnostic)


Double clique sur le fichier d'installation, puis installe le avec les paramètres par défaut ( N'oublie pas de cocher " Créer une icône sur le bureau " )

Lance ZHPDiag en double cliquant sur l'icône présente sur ton bureau (Clique droit -> Executer en tant qu'admin ( vista )

Clique sur la loupe en haut à gauche, puis laisse l'outil scanner.

Une fois le scan terminé, clique sur l'icône en forme de disquette et enregistre le fichier sur ton bureau.

Rend toi sur http://pjjoint.malekal.com/

Clique sur "Parcourir "

Sélectionne le rapport ZHPdiag.txt qui se trouve sur ton bureau

Clique ensuite sur "Envoyer le fichier " et copie/colle le lien dans ton prochain message


-1
chacha003
 
Bonjour, je n'ai pas pu sauvegarder le rapport directement du logiciel donc j'ai fait un copier coller bloc note.
http://pjjoint.malekal.com/files.phpid=ZHPDiag_l127x7c6f9s11t14c15s13r1311v7o13s15e1010i5r12q9x11

merci
0
moment de grace Messages postés 30049 Statut Contributeur sécurité 2 274
 
Not Found

dépose le là stp

https://www.cjoint.com/
0
chacha003
 
http://cjoint.com/?AKopvOkcTeM
0