Delta search onglet
Résolu
clo40660
Messages postés
8
Date d'inscription
Statut
Membre
Dernière intervention
-
cl040660 -
cl040660 -
Bonjour,
je souhaite supprimer la page de recherche delta search (en 2ème onglet) qui apparaît dès que je lance Google chrome.
Voici le rapport d'analyse
https://pjjoint.malekal.com/files.php?id=20130309_l7e12i9k12q12
merci
je souhaite supprimer la page de recherche delta search (en 2ème onglet) qui apparaît dès que je lance Google chrome.
Voici le rapport d'analyse
https://pjjoint.malekal.com/files.php?id=20130309_l7e12i9k12q12
merci
A voir également:
- Delta search onglet
- Spybot search and destroy - Télécharger - Antivirus & Antimalwares
- Raccourci rouvrir onglet fermé - Guide
- Www.google.com search video download - Télécharger - TV & Vidéo
- Search tool - Télécharger - Divers Web & Internet
- IP-Tools Lite - Télécharger - Web & Internet
14 réponses
Bonjour
regarde ici:
https://forum.malekal.com/viewtopic.php?t=42119&start=
Si tu as des soucis n'hésite pas
@+
regarde ici:
https://forum.malekal.com/viewtopic.php?t=42119&start=
Si tu as des soucis n'hésite pas
@+
Merci, j'ai fait toutes les manipulations indiquées sur le lien, mais l'onglet est toujours présent !!! j'ai joint le rapport de adwcleaner...ensuite je ne sais pas quoi faire d'autres ...
Re
réinitialise Google Chrome
https://forums.commentcamarche.net/forum/affich-37585758-reinitialiser-son-navigateur
@+
--------Contributeur Sécurité---------
On a tous été un jour débutant dans quelque chose.
Mais le savoir est la récompense de l'assiduité.
réinitialise Google Chrome
https://forums.commentcamarche.net/forum/affich-37585758-reinitialiser-son-navigateur
@+
--------Contributeur Sécurité---------
On a tous été un jour débutant dans quelque chose.
Mais le savoir est la récompense de l'assiduité.
Vous n’avez pas trouvé la réponse que vous recherchez ?
Posez votre question
Merci... fait mais toujours pareil !!!
j'ai trouvé des réponses sur ce message
https://forums.commentcamarche.net/forum/affich-27320845-delta-search
j'ai installé ZHPDiag et fait le scan, lien ci dessous ... mais ensuite, je ne sais pas si il fut que je continue les memes manipulations ???
https://pjjoint.malekal.com/files.php?id=ZHPDiag_20130309_k14t5g12y13y15
j'ai trouvé des réponses sur ce message
https://forums.commentcamarche.net/forum/affich-27320845-delta-search
j'ai installé ZHPDiag et fait le scan, lien ci dessous ... mais ensuite, je ne sais pas si il fut que je continue les memes manipulations ???
https://pjjoint.malekal.com/files.php?id=ZHPDiag_20130309_k14t5g12y13y15
Re
Editer :Je comprends mieux;Adwcleaner passé option recherche >>>> uniquement
1)Désinstalle Ad aware ainsi que Spybot et préfère lui Malwaresbytes
2)La version 8 d'Avast est sortie
3)Utilisation de l'outil ZHPFix :
* Copie tout le texte présent dans l'encadré ci-dessous (tu le sélectionnes avec ta souris / Clique droit dessus et choisis "copier" ou fait Ctrl+C )
-------------------------------------------------------------------------------------------------
M3 - MFPP: Plugins - [Lagueyrie] -- C:\Users\Lagueyrie\AppData\Roaming\Mozilla\Firefox\Profiles\9gl68up0.default\searchplugins\SearchquWebSearch.xml
M3 - MFPP: Plugins - [Lagueyrie] -- C:\Program Files (x86)\Mozilla FireFox\searchplugins\SearchquWebSearch.xml
O42 - Logiciel: Windows Searchqu Toolbar - (.Bandoo Media Inc.) [HKLM][64Bits] -- Searchqu MediaBar
[HKCU\Software\AppDataLow\Software\Smartbar]
[HKCU\Software\AppDataLow\Software\searchqutb]
[HKCU\Software\BabylonToolbar]
[HKCU\Software\InstallCore]
[HKCU\Software\eede8de13ce548]
[HKLM\Software\Wow6432Node\Babylon]
[HKLM\Software\Wow6432Node\Bandoo]
[HKLM\Software\Wow6432Node\DataMngr]
[HKLM\Software\Wow6432Node\SearchquMediabarTb]
O43 - CFD: 04/01/2011 - 00:14:11 - [1,841] ----D C:\Program Files (x86)\Windows Searchqu Toolbar
O43 - CFD: 12/05/2012 - 01:11:30 - [0] ----D C:\ProgramData\Babylon
O43 - CFD: 17/04/2011 - 17:42:05 - [0] ----D C:\Users\Lagueyrie\AppData\Roaming\alot
O43 - CFD: 12/05/2012 - 01:11:29 - [0,014] ----D C:\Users\Lagueyrie\AppData\Roaming\Babylon
O69 - SBI: prefs.js [Lagueyrie - 9gl68up0.default] user_pref("browser.search.selectedEngine", "Web Search");
O69 - SBI: SearchScopes [HKCU] {3BD44F0E-0596-4008-AEE0-45D47E3A8F0E} - (Search the Web) - https://www.google.com/?gws_rd=ssl
O69 - SBI: SearchScopes [HKCU] {5AA2BA46-9913-4DC7-9620-69AB0FA17AE7} - (ALOT Recherche) - https://search.alot.com/
O69 - SBI: SearchScopes [HKCU] {8A96AF9E-4074-43b7-BEA3-87217BDA74C8} - (Web Search) - http://www.searchnu.com/
O69 - SBI: SearchScopes [HKUS\.DEFAULT] {3BD44F0E-0596-4008-AEE0-45D47E3A8F0E} [DefaultScope] - (Search the Web) - https://www.google.com/?gws_rd=ssl
O69 - SBI: SearchScopes [HKUS\S-1-5-18] {3BD44F0E-0596-4008-AEE0-45D47E3A8F0E} [DefaultScope] - (Search the Web) - https://www.google.com/?gws_rd=ssl
[MD5.4DA57E612033ACE195B21F97DEE211E8] [SPRF][25/02/2013] (.Babylon Ltd. - Uninstaller Application.) -- C:\Users\Lagueyrie\AppData\Local\Temp\uninst1.exe [394832]
[HKLM\Software\Classes\Interface\{06DE5702-44CF-4B79-B4EF-3DDF653358F5}]
[HKLM\Software\Wow6432Node\Classes\Interface\{06DE5702-44CF-4B79-B4EF-3DDF653358F5}]
[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ecdf796-c2dc-4d79-a620-cce0c0a66cc9}]
[HKLM\Software\Classes\AppID\{1301a8a5-3dfb-4731-a162-b357d00c9644}]
[HKLM\Software\Wow6432Node\Classes\AppID\{1301a8a5-3dfb-4731-a162-b357d00c9644}]
[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{3BD44F0E-0596-4008-AEE0-45D47E3A8F0E}]
[HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{424624f4-c5dd-4e1d-bdd0-1e9c9b7799cc}]
[HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{424624f4-c5dd-4e1d-bdd0-1e9c9b7799cc}]
[HKLM\Software\Classes\Interface\{477f210a-2a86-4666-9c4b-1189634d2c84}]
[HKLM\Software\Wow6432Node\Classes\Interface\{477f210a-2a86-4666-9c4b-1189634d2c84}]
[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{5AA2BA46-9913-4DC7-9620-69AB0FA17AE7}]
[HKLM\Software\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}]
[HKLM\Software\Wow6432Node\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}]
[HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7f000001-db8e-f89c-2fec-49bf726f8c12}]
[HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7f000001-db8e-f89c-2fec-49bf726f8c12}]
[HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7FF99715-3016-4381-84CE-E4E4C9673020}]
[HKLM\Software\Classes\CLSID\{826D7151-8D99-434B-8540-082B8C2AE556}]
[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{8a96af9e-4074-43b7-bea3-87217bda74c8}]
[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{8A96AF9E-4074-43B7-BEA3-87217BDA74C8}]
[HKLM\Software\Classes\TypeLib\{8F5F1CB6-EA9E-40AF-A5CA-C7FD63CC1971}]
[HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9c8a3ca5-889e-4554-beec-ec0876e4e96a}]
[HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9c8a3ca5-889e-4554-beec-ec0876e4e96a}]
[HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{f9189560-573a-4fde-b055-ae7b0f4cf080}]
[HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{f9189560-573a-4fde-b055-ae7b0f4cf080}]
[HKLM\Software\Classes\Interface\{ff871e51-2655-4d06-aed5-745962a96b32}]
[HKLM\Software\Wow6432Node\Classes\Interface\{ff871e51-2655-4d06-aed5-745962a96b32}]
[HKLM\Software\Classes\AppID\bandoocore.exe]
[HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Bandoo]
[HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Searchqu MediaBar]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\F928123A039649549966D4C29D35B1C9]
[HKLM\Software\Classes\AppID\{4D076AB4-7562-427A-B5D2-BD96E19DEE56}]
[HKLM\Software\Wow6432Node\Classes\AppID\{4D076AB4-7562-427A-B5D2-BD96E19DEE56}]
[HKLM\Software\Classes\Prod.cap]
[HKLM\Software\Classes\AppID\secman.DLL]
[HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9C8A3CA5-889E-4554-BEEC-EC0876E4E96A}]
[HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9C8A3CA5-889E-4554-BEEC-EC0876E4E96A}]
[HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7F000001-DB8E-F89C-2FEC-49BF726F8C12}]
[HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7F000001-DB8E-F89C-2FEC-49BF726F8C12}]
[HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F9189560-573A-4FDE-B055-AE7B0F4CF080}]
[HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F9189560-573A-4FDE-B055-AE7B0F4CF080}]
[HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{424624F4-C5DD-4E1D-BDD0-1E9C9B7799CC}]
[HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{424624F4-C5DD-4E1D-BDD0-1E9C9B7799CC}]
[HKLM\Software\Classes\Interface\{FF871E51-2655-4D06-AED5-745962A96B32}]
[HKLM\Software\Wow6432Node\Classes\Interface\{FF871E51-2655-4D06-AED5-745962A96B32}]
[HKLM\Software\Classes\Interface\{477F210A-2A86-4666-9C4B-1189634D2C84}]
[HKLM\Software\Wow6432Node\Classes\Interface\{477F210A-2A86-4666-9C4B-1189634D2C84}]
[HKLM\Software\Classes\AppID\BandooCore.EXE]
[HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\Arpcache\Bandoo]
[HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\Arpcache\Searchqu MediaBar]
C:\Program Files (x86)\Windows Searchqu Toolbar
C:\ProgramData\Babylon
C:\Users\Lagueyrie\AppData\Roaming\alot
C:\Users\Lagueyrie\AppData\Roaming\Babylon
C:\Users\Lagueyrie\AppData\LocalLow\searchqutb
C:\Users\Lagueyrie\AppData\Roaming\Mozilla\Firefox\Profiles\9gl68up0.default\searchqutb
C:\Users\Lagueyrie\AppData\Roaming\Mozilla\Firefox\Profiles\9gl68up0.default\SearchPlugins\SearchquWebSearch.xml
C:\Users\Lagueyrie\AppData\Local\Temp\uninst1.exe
[HKCU\Software\eede8de13ce548\history\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}2.6.1095.52]:dllName="BrowserProtect.dll"
[HKCU\Software\eede8de13ce548\history\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}2.6.1095.52]:exeName="BrowserProtect.exe"
[HKCU\Software\eede8de13ce548\history\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}2.6.1095.52]:folderName="BrowserProtect"
[HKCU\Software\eede8de13ce548\history\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}2.6.1095.52]:guid="{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}"
[HKCU\Software\eede8de13ce548\history\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}2.6.1095.52]:serviceName="BrowserProtect"
[HKCU\Software\eede8de13ce548\history\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}2.6.1095.52]:version="2.6.1095.52"
[MD5.00000000000000000000000000000000] [APT] [{438DB13F-061D-4C46-8317-0C69823F5C11}] (...) -- C:\Users\Lagueyrie\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\FGJQS0OC\zyngaIE_toolbar[1].exe (.not file.)
[MD5.00000000000000000000000000000000] [APT] [{54DDF70B-DDE9-4A6B-A212-759E0EAFE414}] (...) -- C:\Users\Lagueyrie\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\3VAZ3HE4\zynga_6362.exe (.not file.)
[MD5.00000000000000000000000000000000] [APT] [{9AE0F759-F1CB-43B0-97D2-CF8020570F16}] (...) -- C:\Users\Lagueyrie\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\S6VEWXIK\zyngaIE_toolbar.exe (.not file.)
[MD5.00000000000000000000000000000000] [APT] [{9F2B1583-23AA-460D-A4BE-AA0B4F334BA6}] (...) -- C:\Users\Lagueyrie\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\WU9FFC75\zynga_6362.exe (.not file.)
[MD5.00000000000000000000000000000000] [APT] [{D28C3B94-5317-404D-A84D-1C3BA7ADBD57}] (...) -- C:\Users\Lagueyrie\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\3VAZ3HE4\zynga_6362 (1).exe (.not file.)
[MD5.00000000000000000000000000000000] [APT] [{E1515CF4-4DC2-448C-863B-71F259C05C97}] (...) -- C:\Users\Lagueyrie\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\B82NV2I9\zyngaIE_toolbar.exe (.not file.)
O69 - SBI: SearchScopes [HKCU] {70D46D94-BF1E-45ED-B567-48701376298E} - (Google Desktop) - http://127.0.0.1:4664/search&s=1nyomyAynyehGva7ZUhxdbcN3Qs?q={searchTerms}
M3 - MFPP: Plugins - [Lagueyrie] -- C:\Users\Lagueyrie\AppData\Roaming\Mozilla\Firefox\Profiles\9gl68up0.default\searchplugins\delta.xml
R3 - URLSearchHook: (no name) [64Bits] - {7b13ec3e-999a-4b70-b9cb-2617b8323822} . (.Microsoft Corporation - Navigateur Internet.) (No version) -- (.not file.)
[MD5.2A474C9DBB9FBAC669D86149F7CE5FF3] [APT] [Scheduled Update for Ask Toolbar] (...) -- C:\Program Files (x86)\Ask.com\UpdateTask.exe
O42 - Logiciel: Ask Toolbar - (.Ask.com.) [HKLM][64Bits] -- {86D4B82A-ABED-442A-BE86-96357B70F4FE}
O42 - Logiciel: Ask Toolbar Updater - (.Ask.com.) [HKCU][64Bits] -- {79A765E1-C399-405B-85AF-466F52E918B0}
O42 - Logiciel: Zynga Toolbar - (.Zynga.) [HKLM][64Bits] -- Zynga Toolbar
[HKCU\Software\APN]
[HKCU\Software\AppDataLow\Software\AskToolbar]
[HKCU\Software\AppDataLow\Software\ConduitSearchScopes]
[HKCU\Software\AppDataLow\Software\Conduit]
[HKCU\Software\AppDataLow\Software\Zynga]
[HKCU\Software\AppDataLow\Software\toolbar]
[HKCU\Software\AppDataLow\Toolbar]
[HKCU\Software\Ask.com]
[HKCU\Software\Conduit]
[HKCU\Software\Softonic]
[HKCU\Software\YahooPartnerToolbar]
[HKCU\Software\Zynga]
[HKLM\Software\Wow6432Node\APN]
[HKLM\Software\Wow6432Node\AskToolbar]
[HKLM\Software\Wow6432Node\Conduit]
[HKLM\Software\Wow6432Node\Zynga]
O43 - CFD: 08/02/2012 - 22:21:24 - [3,312] ----D C:\Program Files (x86)\Ask.com
O43 - CFD: 05/03/2010 - 22:08:15 - [1,821] ----D C:\Program Files (x86)\Conduit
O43 - CFD: 03/10/2011 - 19:36:56 - [11,685] ----D C:\Program Files (x86)\Zynga
O43 - CFD: 20/01/2013 - 11:42:20 - [0,000] ----D C:\ProgramData\blekko toolbars
O43 - CFD: 08/02/2012 - 22:20:47 - [0,164] ----D C:\Users\Lagueyrie\AppData\Local\APN
O43 - CFD: 22/09/2011 - 13:08:24 - [3,590] ----D C:\Users\Lagueyrie\AppData\Local\Conduit
O43 - CFD: 08/06/2011 - 10:06:50 - [4,946] ----D C:\Users\Lagueyrie\AppData\Local\Zynga
O69 - SBI: prefs.js [Lagueyrie - 9gl68up0.default] user_pref("CT2438727.AboutPrivacyUrl", "http://www.conduit.com");
O69 - SBI: prefs.js [Lagueyrie - 9gl68up0.default] user_pref("CT2438727.CTID", "CT2438727");
O69 - SBI: prefs.js [Lagueyrie - 9gl68up0.default] user_pref("CT2438727.CommunitiesChangesLastCheckTime", "0");
O69 - SBI: prefs.js [Lagueyrie - 9gl68up0.default] user_pref("CT2438727.CurrentServerDate", "2-3-2011");
O69 - SBI: prefs.js [Lagueyrie - 9gl68up0.default] user_pref("CT2438727.DialogsAlignMode", "LTR");
O69 - SBI: prefs.js [Lagueyrie - 9gl68up0.default] user_pref("CT2438727.DownloadReferralCookieData", "");
O69 - SBI: prefs.js [Lagueyrie - 9gl68up0.default] user_pref("CT2438727.FirstServerDate", "28-2-2010");
O69 - SBI: prefs.js [Lagueyrie - 9gl68up0.default] user_pref("CT2438727.FirstTime", true);
O69 - SBI: prefs.js [Lagueyrie - 9gl68up0.default] user_pref("CT2438727.FirstTimeFF3", true);
O69 - SBI: prefs.js [Lagueyrie - 9gl68up0.default] user_pref("CT2438727.FirstTimeSettingsDone", true);
O69 - SBI: prefs.js [Lagueyrie - 9gl68up0.default] user_pref("CT2438727.GroupingInvalidateCache", false);
O69 - SBI: prefs.js [Lagueyrie - 9gl68up0.default] user_pref("CT2438727.GroupingLastCheckTime", "0");
O69 - SBI: prefs.js [Lagueyrie - 9gl68up0.default] user_pref("CT2438727.GroupingLastServerUpdateTime", "0");
O69 - SBI: prefs.js [Lagueyrie - 9gl68up0.default] user_pref("CT2438727.GroupingServerCheckInterval", 1440);
O69 - SBI: prefs.js [Lagueyrie - 9gl68up0.default] user_pref("CT2438727.GroupingServiceUrl", "http://grouping.services.conduit.com/");
O69 - SBI: prefs.js [Lagueyrie - 9gl68up0.default] user_pref("CT2438727.Initialize", true);
O69 - SBI: prefs.js [Lagueyrie - 9gl68up0.default] user_pref("CT2438727.InitializeCommonPrefs", true);
O69 - SBI: prefs.js [Lagueyrie - 9gl68up0.default] user_pref("CT2438727.InstallationAndCookieDataSentCount", 3);
O69 - SBI: prefs.js [Lagueyrie - 9gl68up0.default] user_pref("CT2438727.InstalledDate", "Sun Feb 28 2010 17:56:26 GMT+0100");
O69 - SBI: prefs.js [Lagueyrie - 9gl68up0.default] user_pref("CT2438727.InvalidateCache", false);
O69 - SBI: prefs.js [Lagueyrie - 9gl68up0.default] user_pref("CT2438727.IsGrouping", false);
O69 - SBI: prefs.js [Lagueyrie - 9gl68up0.default] user_pref("CT2438727.IsMulticommunity", false);
O69 - SBI: prefs.js [Lagueyrie - 9gl68up0.default] user_pref("CT2438727.IsOpenThankYouPage", true);
O69 - SBI: prefs.js [Lagueyrie - 9gl68up0.default] user_pref("CT2438727.IsOpenUninstallPage", true);
O69 - SBI: prefs.js [Lagueyrie - 9gl68up0.default] user_pref("CT2438727.LanguagePackLastCheckTime", "Wed Mar 02 2011 18:21:38 GMT+0100");
O69 - SBI: prefs.js [Lagueyrie - 9gl68up0.default] user_pref("CT2438727.LanguagePackReloadIntervalMM", 1440);
O69 - SBI: prefs.js [Lagueyrie - 9gl68up0.default] user_pref("CT2438727.LanguagePackServiceUrl", "http://translation.users.conduit.com/Translation.ashx");
O69 - SBI: prefs.js [Lagueyrie - 9gl68up0.default] user_pref("CT2438727.LastLogin_2.5.7.3", "Tue Apr 13 2010 11:47:36 GMT+0200");
O69 - SBI: prefs.js [Lagueyrie - 9gl68up0.default] user_pref("CT2438727.LastLogin_2.5.8.6", "Wed Jul 28 2010 21:03:21 GMT+0200");
O69 - SBI: prefs.js [Lagueyrie - 9gl68up0.default] user_pref("CT2438727.LastLogin_2.7.1.3", "Wed Mar 02 2011 18:21:36 GMT+0100");
O69 - SBI: prefs.js [Lagueyrie - 9gl68up0.default] user_pref("CT2438727.LatestVersion", "2.7.1.3");
O69 - SBI: prefs.js [Lagueyrie - 9gl68up0.default] user_pref("CT2438727.Locale", "en");
O69 - SBI: prefs.js [Lagueyrie - 9gl68up0.default] user_pref("CT2438727.LoginCache", 4);
O69 - SBI: prefs.js [Lagueyrie - 9gl68up0.default] user_pref("CT2438727.MCDetectTooltipHeight", "83");
O69 - SBI: prefs.js [Lagueyrie - 9gl68up0.default] user_pref("CT2438727.MCDetectTooltipUrl", "http://@EB_INSTALL_LINK@/rank/tooltip/?version=1");
O69 - SBI: prefs.js [Lagueyrie - 9gl68up0.default] user_pref("CT2438727.MCDetectTooltipWidth", "295");
O69 - SBI: prefs.js [Lagueyrie - 9gl68up0.default] user_pref("CT2438727.RadioLastCheckTime", "0");
O69 - SBI: prefs.js [Lagueyrie - 9gl68up0.default] user_pref("CT2438727.RadioLastUpdateIPServer", "0");
O69 - SBI: prefs.js [Lagueyrie - 9gl68up0.default] user_pref("CT2438727.RadioLastUpdateServer", "0");
O69 - SBI: prefs.js [Lagueyrie - 9gl68up0.default] user_pref("CT2438727.SHRINK_TOOLBAR", 1);
O69 - SBI: prefs.js [Lagueyrie - 9gl68up0.default] user_pref("CT2438727.SearchBoxWidth", 168);
O69 - SBI: prefs.js [Lagueyrie - 9gl68up0.default] user_pref("CT2438727.SearchEngine", "Search||https://www.bing.com/search?q=UCM_SEARCH_TERM&pc=cosp&ptag=G6C999A66979CC674&form=CONORG&conlogo=CT3210127[...]
O69 - SBI: prefs.js [Lagueyrie - 9gl68up0.default] user_pref("CT2438727.SearchFromAddressBarIsInit", true);
O69 - SBI: prefs.js [Lagueyrie - 9gl68up0.default] user_pref("CT2438727.SearchFromAddressBarUrl", "http://search.conduit.com/ResultsExt.aspx?ctid=CT2438727&q=");
O69 - SBI: prefs.js [Lagueyrie - 9gl68up0.default] user_pref("CT2438727.SearchInNewTabEnabled", true);
O69 - SBI: prefs.js [Lagueyrie - 9gl68up0.default] user_pref("CT2438727.SearchInNewTabIntervalMM", 1440);
O69 - SBI: prefs.js [Lagueyrie - 9gl68up0.default] user_pref("CT2438727.SearchInNewTabLastCheckTime", "Wed Mar 02 2011 18:21:36 GMT+0100");
O69 - SBI: prefs.js [Lagueyrie - 9gl68up0.default] user_pref("CT2438727.SearchInNewTabServiceUrl", "http://newtab.conduit-hosting.com/newtab/?ctid=EB_TOOLBAR_ID");
O69 - SBI: prefs.js [Lagueyrie - 9gl68up0.default] user_pref("CT2438727.SearchInNewTabUsageUrl", "http://Usage.Hosting.conduit-services.com/UsageService.asmx/UsersRequests?ctid=EB_T[...]
O69 - SBI: prefs.js [Lagueyrie - 9gl68up0.default] user_pref("CT2438727.SettingsCheckIntervalMin", 120);
O69 - SBI: prefs.js [Lagueyrie - 9gl68up0.default] user_pref("CT2438727.SettingsLastCheckTime", "Wed Mar 02 2011 18:23:01 GMT+0100");
O69 - SBI: prefs.js [Lagueyrie - 9gl68up0.default] user_pref("CT2438727.SettingsLastUpdate", "1298225549");
O69 - SBI: prefs.js [Lagueyrie - 9gl68up0.default] user_pref("CT2438727.ThirdPartyComponentsInterval", 504);
O69 - SBI: prefs.js [Lagueyrie - 9gl68up0.default] user_pref("CT2438727.ThirdPartyComponentsLastCheck", "Wed Mar 02 2011 18:21:36 GMT+0100");
O69 - SBI: prefs.js [Lagueyrie - 9gl68up0.default] user_pref("CT2438727.ThirdPartyComponentsLastUpdate", "1278548974");
O69 - SBI: prefs.js [Lagueyrie - 9gl68up0.default] user_pref("CT2438727.TrusteLinkUrl", "http://trust.conduit.com/EB_ORIGINAL_CTID");
O69 - SBI: prefs.js [Lagueyrie - 9gl68up0.default] user_pref("CT2438727.UserID", "UN16758872036528261");
O69 - SBI: prefs.js [Lagueyrie - 9gl68up0.default] user_pref("CT2438727.ValidationData_Search", 0);
O69 - SBI: prefs.js [Lagueyrie - 9gl68up0.default] user_pref("CT2438727.ValidationData_Toolbar", 2);
O69 - SBI: prefs.js [Lagueyrie - 9gl68up0.default] user_pref("CT2438727.alertChannelId", "832836");
O69 - SBI: prefs.js [Lagueyrie - 9gl68up0.default] user_pref("CT2438727.backendstorage.currentgame", "7A796E6761");
O69 - SBI: prefs.js [Lagueyrie - 9gl68up0.default] user_pref("CT2438727.clientLogIsEnabled", true);
O69 - SBI: prefs.js [Lagueyrie - 9gl68up0.default] user_pref("CT2438727.clientLogServiceUrl", "http://clientlog.users.conduit.com/ClientDiagnostics.asmx/ReportDiagnosticsEvent");
O69 - SBI: prefs.js [Lagueyrie - 9gl68up0.default] user_pref("CT2438727.myStuffEnabled", true);
O69 - SBI: prefs.js [Lagueyrie - 9gl68up0.default] user_pref("CT2438727.myStuffPublihserMinWidth", 400);
O69 - SBI: prefs.js [Lagueyrie - 9gl68up0.default] user_pref("CT2438727.myStuffSearchUrl", "http://Apps.conduit.com/search?q=SEARCH_TERM&SearchSourceOrigin=29&ctid=EB_TOOLBAR_ID&oct[...]
O69 - SBI: prefs.js [Lagueyrie - 9gl68up0.default] user_pref("CT2438727.myStuffServiceIntervalMM", 1440);
O69 - SBI: prefs.js [Lagueyrie - 9gl68up0.default] user_pref("CT2438727.myStuffServiceUrl", "http://mystuff.conduit-services.com/MyStuffService.ashx?ComponentId=EB_MY_STUFF_INSTANCE[...]
O69 - SBI: prefs.js [Lagueyrie - 9gl68up0.default] user_pref("CT2438727.uninstallLogServiceUrl", "http://uninstall.users.conduit.com/Uninstall.asmx/RegisterToolbarUninstallation");
O69 - SBI: prefs.js [Lagueyrie - 9gl68up0.default] user_pref("CommunityToolbar.SearchFromAddressBarSavedUrl", "chrome://browser-region/locale/region.properties");
O69 - SBI: prefs.js [Lagueyrie - 9gl68up0.default] user_pref("CommunityToolbar.ToolbarsList", "CT2438727");
O69 - SBI: prefs.js [Lagueyrie - 9gl68up0.default] user_pref("CommunityToolbar.ToolbarsList2", "CT2438727");
O69 - SBI: prefs.js [Lagueyrie - 9gl68up0.default] user_pref("CommunityToolbar.alert.alertInfoInterval", 60);
O69 - SBI: prefs.js [Lagueyrie - 9gl68up0.default] user_pref("CommunityToolbar.alert.alertInfoLastCheckTime", "Sun Feb 28 2010 17:56:21 GMT+0100");
O69 - SBI: prefs.js [Lagueyrie - 9gl68up0.default] user_pref("CommunityToolbar.alert.clientsServerUrl", "http://alert.client.conduit.com");
O69 - SBI: prefs.js [Lagueyrie - 9gl68up0.default] user_pref("CommunityToolbar.alert.locale", "en");
O69 - SBI: prefs.js [Lagueyrie - 9gl68up0.default] user_pref("CommunityToolbar.alert.loginIntervalMin", 1440);
O69 - SBI: prefs.js [Lagueyrie - 9gl68up0.default] user_pref("CommunityToolbar.alert.loginLastCheckTime", "Sun Feb 28 2010 17:56:19 GMT+0100");
O69 - SBI: prefs.js [Lagueyrie - 9gl68up0.default] user_pref("CommunityToolbar.alert.loginLastUpdateTime", "1234796400");
O69 - SBI: prefs.js [Lagueyrie - 9gl68up0.default] user_pref("CommunityToolbar.alert.messageShowTimeSec", 20);
O69 - SBI: prefs.js [Lagueyrie - 9gl68up0.default] user_pref("CommunityToolbar.alert.servicesServerUrl", "http://alert.services.conduit.com");
O69 - SBI: prefs.js [Lagueyrie - 9gl68up0.default] user_pref("CommunityToolbar.alert.showTrayIcon", false);
O69 - SBI: prefs.js [Lagueyrie - 9gl68up0.default] user_pref("CommunityToolbar.alert.userCloseIntervalMin", 300);
O69 - SBI: prefs.js [Lagueyrie - 9gl68up0.default] user_pref("CommunityToolbar.alert.userId", "{a7ba1296-91bc-467a-ad06-b7085269c762}");
O69 - SBI: SearchScopes [HKCU] {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} - (Delta Search) - http://www.delta-search.com
O69 - SBI: SearchScopes [HKCU] {afdbddaa-5d3f-42ee-b79c-185a7020515b} [DefaultScope] - (Zynga Customized Web Search) - http://search.conduit.com
[MD5.02DE6B9AE1269AF813FE8B629EE50093] [SPRF][01/12/2010] (.Conduit Ltd. - Conduit Toolbar.) -- C:\Program Files (x86)\tbZyng.dll [2735200]
[HKLM\Software\Classes\TypeLib\{11549FE4-7C5A-4C17-9FC3-56FC5162A994}]
[HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{6c97a91e-4524-4019-86af-2aa2d567bf5c}]
[HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{86D4B82A-ABED-442A-BE86-96357B70F4FE}]
[HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{86D4B82A-ABED-442A-BE86-96357B70F4FE}]
[HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A5AA24EA-11B8-4113-95AE-9ED71DEAF12A}]
[HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A5AA24EA-11B8-4113-95AE-9ED71DEAF12A}]
[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}]
[HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}]
[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}]
[HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}]
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D4027C7F-154A-4066-A1AD-4243D8127440}]
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{D4027C7F-154A-4066-A1AD-4243D8127440}]
[HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\alotToolbar]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0E12F736682067FDE4D1158D5940A82E]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1A24B5BB8521B03E0C8D908F5ABC0AE6]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\261F213D1F55267499B1F87D0CC3BCF7]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2B0D56C4F4C46D844A57FFED6F0D2852]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\49D4375FE41653242AEA4C969E4E65E0]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6AA0923513360135B272E8289C5F13FA]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6F7467AF8F29C134CBBAB394ECCFDE96]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\741B4ADF27276464790022C965AB6DA8]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7DE196B10195F5647A2B21B761F3DE01]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\922525DCC5199162F8935747CA3D8E59]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\9D4F5849367142E4685ED8C25E44C5ED]
[HKLM\Software\Classes\Installer\Features\A28B4D68DEBAA244EB686953B7074FEF]
[HKLM\Software\Classes\Installer\Products\A28B4D68DEBAA244EB686953B7074FEF]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\A28B4D68DEBAA244EB686953B7074FEF]
[HKLM\Software\Wow6432Node\Classes\Installer\Products\A28B4D68DEBAA244EB686953B7074FEF]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A5875B04372C19545BEB90D4D606C472]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A876D9E80B896EC44A8620248CC79296]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B66FFAB725B92594C986DE826A867888]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BCDA179D619B91648538E3394CAC94CC]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D677B1A9671D4D4004F6F2A4469E86EA]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\DD1402A9DD4215A43ABDE169A41AFA0E]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E36E114A0EAD2AD46B381D23AD69CDDF]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\EF8E618DB3AEDFBB384561B5C548F65E]
[HKCU\Software\APN]
[HKLM\Software\Wow6432Node\APN]
[HKLM\Software\Microsoft\Shared Tools\MSConfig\startupreg\ApnUpdater]
[HKCU\Software\Ask.com]
[HKCU\Software\AppDataLow\Software\AskToolbar]
[HKLM\Software\Wow6432Node\AskToolbar]
[HKCU\Software\AppDataLow\Software\ConduitSearchScopes]
[HKCU\Software\Softonic]
[HKCU\Software\AppDataLow\Toolbar]
[HKCU\Software\AppDataLow\Software\Toolbar]
[HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\{79A765E1-C399-405B-85AF-466F52E918B0}]
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{02478D38-C3F9-4EFB-9B51-7695ECA05670}]
[HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{02478D38-C3F9-4EFB-9B51-7695ECA05670}]
[HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{02478D38-C3F9-4EFB-9B51-7695ECA05670}]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0CFE535C35F99574E8340BFA75BF92C2]
[HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Delta]
[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}]
[HKLM\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}]
[HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}]
[HKLM\Software\Classes\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}]
[HKLM\Software\Wow6432Node\Classes\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}]
[HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Delta Chrome Toolbar]
[HKLM\Software\Classes\Toolbar.CT2438727]
[HKLM\Software\Classes\Toolbar.CT2997248]
[HKLM\Software\Wow6432Node\Classes\Toolbar.CT2438727]
[HKLM\Software\Wow6432Node\Classes\Toolbar.CT2997248]
C:\Program Files (x86)\Zynga
C:\Program Files (x86)\Ask.com
C:\Program Files (x86)\Conduit
C:\Users\Lagueyrie\AppData\Local\Zynga
C:\Users\Lagueyrie\AppData\Local\Conduit
C:\Users\Lagueyrie\AppData\LocalLow\Zynga
C:\Users\Lagueyrie\AppData\LocalLow\AskToolbar
C:\Users\Lagueyrie\AppData\LocalLow\Conduit
C:\Users\Lagueyrie\AppData\Roaming\Mozilla\Firefox\Profiles\9gl68up0.default\Conduit
O90 - PUC: "A28B4D68DEBAA244EB686953B7074FEF" . (.Ask Toolbar.) -- c:\program files (x86)\ask.com\fv_7e60.ico
FirewallRAZ
Emptytemp
EmptyCLSID
--------------------------------------------------------------------------------------------
* Lance ZHPFix à partir du raccourci sur ton Bureau (si tu es sous Windows Vista ou Windows 7, fais le par un clic-droit --> Exécuter en tant qu'administrateur)
* Clique sur l'icone représentant le presse-papier ("coller le presse-papier")
le script doit automatiquement apparaitre dans ZHPFix, sinon, colle-le (Ctrl+v)
* Clique sur le bouton GO pour lancer le nettoyage
* Copie/colle la totalité du rapport dans ta prochaine réponse.
-> laisse travailler l'outil et ne touche à rien ...
-> Si il t'est demandé de redémarrer le PC pour finir le nettoyage, fais le !
Une fois terminé, un nouveau rapport s'affiche : poste le contenu de ce dernier dans ta prochaine réponse ...
( ce rapport est en outre sauvegardé dans ce dossier > C:\Program files\ZHPDiag\ ZHPFixReport.txt )
@+
--------Contributeur Sécurité---------
On a tous été un jour débutant dans quelque chose.
Mais le savoir est la récompense de l'assiduité.
Editer :Je comprends mieux;Adwcleaner passé option recherche >>>> uniquement
1)Désinstalle Ad aware ainsi que Spybot et préfère lui Malwaresbytes
2)La version 8 d'Avast est sortie
3)Utilisation de l'outil ZHPFix :
* Copie tout le texte présent dans l'encadré ci-dessous (tu le sélectionnes avec ta souris / Clique droit dessus et choisis "copier" ou fait Ctrl+C )
-------------------------------------------------------------------------------------------------
M3 - MFPP: Plugins - [Lagueyrie] -- C:\Users\Lagueyrie\AppData\Roaming\Mozilla\Firefox\Profiles\9gl68up0.default\searchplugins\SearchquWebSearch.xml
M3 - MFPP: Plugins - [Lagueyrie] -- C:\Program Files (x86)\Mozilla FireFox\searchplugins\SearchquWebSearch.xml
O42 - Logiciel: Windows Searchqu Toolbar - (.Bandoo Media Inc.) [HKLM][64Bits] -- Searchqu MediaBar
[HKCU\Software\AppDataLow\Software\Smartbar]
[HKCU\Software\AppDataLow\Software\searchqutb]
[HKCU\Software\BabylonToolbar]
[HKCU\Software\InstallCore]
[HKCU\Software\eede8de13ce548]
[HKLM\Software\Wow6432Node\Babylon]
[HKLM\Software\Wow6432Node\Bandoo]
[HKLM\Software\Wow6432Node\DataMngr]
[HKLM\Software\Wow6432Node\SearchquMediabarTb]
O43 - CFD: 04/01/2011 - 00:14:11 - [1,841] ----D C:\Program Files (x86)\Windows Searchqu Toolbar
O43 - CFD: 12/05/2012 - 01:11:30 - [0] ----D C:\ProgramData\Babylon
O43 - CFD: 17/04/2011 - 17:42:05 - [0] ----D C:\Users\Lagueyrie\AppData\Roaming\alot
O43 - CFD: 12/05/2012 - 01:11:29 - [0,014] ----D C:\Users\Lagueyrie\AppData\Roaming\Babylon
O69 - SBI: prefs.js [Lagueyrie - 9gl68up0.default] user_pref("browser.search.selectedEngine", "Web Search");
O69 - SBI: SearchScopes [HKCU] {3BD44F0E-0596-4008-AEE0-45D47E3A8F0E} - (Search the Web) - https://www.google.com/?gws_rd=ssl
O69 - SBI: SearchScopes [HKCU] {5AA2BA46-9913-4DC7-9620-69AB0FA17AE7} - (ALOT Recherche) - https://search.alot.com/
O69 - SBI: SearchScopes [HKCU] {8A96AF9E-4074-43b7-BEA3-87217BDA74C8} - (Web Search) - http://www.searchnu.com/
O69 - SBI: SearchScopes [HKUS\.DEFAULT] {3BD44F0E-0596-4008-AEE0-45D47E3A8F0E} [DefaultScope] - (Search the Web) - https://www.google.com/?gws_rd=ssl
O69 - SBI: SearchScopes [HKUS\S-1-5-18] {3BD44F0E-0596-4008-AEE0-45D47E3A8F0E} [DefaultScope] - (Search the Web) - https://www.google.com/?gws_rd=ssl
[MD5.4DA57E612033ACE195B21F97DEE211E8] [SPRF][25/02/2013] (.Babylon Ltd. - Uninstaller Application.) -- C:\Users\Lagueyrie\AppData\Local\Temp\uninst1.exe [394832]
[HKLM\Software\Classes\Interface\{06DE5702-44CF-4B79-B4EF-3DDF653358F5}]
[HKLM\Software\Wow6432Node\Classes\Interface\{06DE5702-44CF-4B79-B4EF-3DDF653358F5}]
[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ecdf796-c2dc-4d79-a620-cce0c0a66cc9}]
[HKLM\Software\Classes\AppID\{1301a8a5-3dfb-4731-a162-b357d00c9644}]
[HKLM\Software\Wow6432Node\Classes\AppID\{1301a8a5-3dfb-4731-a162-b357d00c9644}]
[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{3BD44F0E-0596-4008-AEE0-45D47E3A8F0E}]
[HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{424624f4-c5dd-4e1d-bdd0-1e9c9b7799cc}]
[HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{424624f4-c5dd-4e1d-bdd0-1e9c9b7799cc}]
[HKLM\Software\Classes\Interface\{477f210a-2a86-4666-9c4b-1189634d2c84}]
[HKLM\Software\Wow6432Node\Classes\Interface\{477f210a-2a86-4666-9c4b-1189634d2c84}]
[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{5AA2BA46-9913-4DC7-9620-69AB0FA17AE7}]
[HKLM\Software\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}]
[HKLM\Software\Wow6432Node\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}]
[HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7f000001-db8e-f89c-2fec-49bf726f8c12}]
[HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7f000001-db8e-f89c-2fec-49bf726f8c12}]
[HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7FF99715-3016-4381-84CE-E4E4C9673020}]
[HKLM\Software\Classes\CLSID\{826D7151-8D99-434B-8540-082B8C2AE556}]
[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{8a96af9e-4074-43b7-bea3-87217bda74c8}]
[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{8A96AF9E-4074-43B7-BEA3-87217BDA74C8}]
[HKLM\Software\Classes\TypeLib\{8F5F1CB6-EA9E-40AF-A5CA-C7FD63CC1971}]
[HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9c8a3ca5-889e-4554-beec-ec0876e4e96a}]
[HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9c8a3ca5-889e-4554-beec-ec0876e4e96a}]
[HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{f9189560-573a-4fde-b055-ae7b0f4cf080}]
[HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{f9189560-573a-4fde-b055-ae7b0f4cf080}]
[HKLM\Software\Classes\Interface\{ff871e51-2655-4d06-aed5-745962a96b32}]
[HKLM\Software\Wow6432Node\Classes\Interface\{ff871e51-2655-4d06-aed5-745962a96b32}]
[HKLM\Software\Classes\AppID\bandoocore.exe]
[HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Bandoo]
[HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Searchqu MediaBar]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\F928123A039649549966D4C29D35B1C9]
[HKLM\Software\Classes\AppID\{4D076AB4-7562-427A-B5D2-BD96E19DEE56}]
[HKLM\Software\Wow6432Node\Classes\AppID\{4D076AB4-7562-427A-B5D2-BD96E19DEE56}]
[HKLM\Software\Classes\Prod.cap]
[HKLM\Software\Classes\AppID\secman.DLL]
[HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9C8A3CA5-889E-4554-BEEC-EC0876E4E96A}]
[HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9C8A3CA5-889E-4554-BEEC-EC0876E4E96A}]
[HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7F000001-DB8E-F89C-2FEC-49BF726F8C12}]
[HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7F000001-DB8E-F89C-2FEC-49BF726F8C12}]
[HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F9189560-573A-4FDE-B055-AE7B0F4CF080}]
[HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F9189560-573A-4FDE-B055-AE7B0F4CF080}]
[HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{424624F4-C5DD-4E1D-BDD0-1E9C9B7799CC}]
[HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{424624F4-C5DD-4E1D-BDD0-1E9C9B7799CC}]
[HKLM\Software\Classes\Interface\{FF871E51-2655-4D06-AED5-745962A96B32}]
[HKLM\Software\Wow6432Node\Classes\Interface\{FF871E51-2655-4D06-AED5-745962A96B32}]
[HKLM\Software\Classes\Interface\{477F210A-2A86-4666-9C4B-1189634D2C84}]
[HKLM\Software\Wow6432Node\Classes\Interface\{477F210A-2A86-4666-9C4B-1189634D2C84}]
[HKLM\Software\Classes\AppID\BandooCore.EXE]
[HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\Arpcache\Bandoo]
[HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\Arpcache\Searchqu MediaBar]
C:\Program Files (x86)\Windows Searchqu Toolbar
C:\ProgramData\Babylon
C:\Users\Lagueyrie\AppData\Roaming\alot
C:\Users\Lagueyrie\AppData\Roaming\Babylon
C:\Users\Lagueyrie\AppData\LocalLow\searchqutb
C:\Users\Lagueyrie\AppData\Roaming\Mozilla\Firefox\Profiles\9gl68up0.default\searchqutb
C:\Users\Lagueyrie\AppData\Roaming\Mozilla\Firefox\Profiles\9gl68up0.default\SearchPlugins\SearchquWebSearch.xml
C:\Users\Lagueyrie\AppData\Local\Temp\uninst1.exe
[HKCU\Software\eede8de13ce548\history\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}2.6.1095.52]:dllName="BrowserProtect.dll"
[HKCU\Software\eede8de13ce548\history\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}2.6.1095.52]:exeName="BrowserProtect.exe"
[HKCU\Software\eede8de13ce548\history\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}2.6.1095.52]:folderName="BrowserProtect"
[HKCU\Software\eede8de13ce548\history\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}2.6.1095.52]:guid="{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}"
[HKCU\Software\eede8de13ce548\history\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}2.6.1095.52]:serviceName="BrowserProtect"
[HKCU\Software\eede8de13ce548\history\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}2.6.1095.52]:version="2.6.1095.52"
[MD5.00000000000000000000000000000000] [APT] [{438DB13F-061D-4C46-8317-0C69823F5C11}] (...) -- C:\Users\Lagueyrie\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\FGJQS0OC\zyngaIE_toolbar[1].exe (.not file.)
[MD5.00000000000000000000000000000000] [APT] [{54DDF70B-DDE9-4A6B-A212-759E0EAFE414}] (...) -- C:\Users\Lagueyrie\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\3VAZ3HE4\zynga_6362.exe (.not file.)
[MD5.00000000000000000000000000000000] [APT] [{9AE0F759-F1CB-43B0-97D2-CF8020570F16}] (...) -- C:\Users\Lagueyrie\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\S6VEWXIK\zyngaIE_toolbar.exe (.not file.)
[MD5.00000000000000000000000000000000] [APT] [{9F2B1583-23AA-460D-A4BE-AA0B4F334BA6}] (...) -- C:\Users\Lagueyrie\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\WU9FFC75\zynga_6362.exe (.not file.)
[MD5.00000000000000000000000000000000] [APT] [{D28C3B94-5317-404D-A84D-1C3BA7ADBD57}] (...) -- C:\Users\Lagueyrie\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\3VAZ3HE4\zynga_6362 (1).exe (.not file.)
[MD5.00000000000000000000000000000000] [APT] [{E1515CF4-4DC2-448C-863B-71F259C05C97}] (...) -- C:\Users\Lagueyrie\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\B82NV2I9\zyngaIE_toolbar.exe (.not file.)
O69 - SBI: SearchScopes [HKCU] {70D46D94-BF1E-45ED-B567-48701376298E} - (Google Desktop) - http://127.0.0.1:4664/search&s=1nyomyAynyehGva7ZUhxdbcN3Qs?q={searchTerms}
M3 - MFPP: Plugins - [Lagueyrie] -- C:\Users\Lagueyrie\AppData\Roaming\Mozilla\Firefox\Profiles\9gl68up0.default\searchplugins\delta.xml
R3 - URLSearchHook: (no name) [64Bits] - {7b13ec3e-999a-4b70-b9cb-2617b8323822} . (.Microsoft Corporation - Navigateur Internet.) (No version) -- (.not file.)
[MD5.2A474C9DBB9FBAC669D86149F7CE5FF3] [APT] [Scheduled Update for Ask Toolbar] (...) -- C:\Program Files (x86)\Ask.com\UpdateTask.exe
O42 - Logiciel: Ask Toolbar - (.Ask.com.) [HKLM][64Bits] -- {86D4B82A-ABED-442A-BE86-96357B70F4FE}
O42 - Logiciel: Ask Toolbar Updater - (.Ask.com.) [HKCU][64Bits] -- {79A765E1-C399-405B-85AF-466F52E918B0}
O42 - Logiciel: Zynga Toolbar - (.Zynga.) [HKLM][64Bits] -- Zynga Toolbar
[HKCU\Software\APN]
[HKCU\Software\AppDataLow\Software\AskToolbar]
[HKCU\Software\AppDataLow\Software\ConduitSearchScopes]
[HKCU\Software\AppDataLow\Software\Conduit]
[HKCU\Software\AppDataLow\Software\Zynga]
[HKCU\Software\AppDataLow\Software\toolbar]
[HKCU\Software\AppDataLow\Toolbar]
[HKCU\Software\Ask.com]
[HKCU\Software\Conduit]
[HKCU\Software\Softonic]
[HKCU\Software\YahooPartnerToolbar]
[HKCU\Software\Zynga]
[HKLM\Software\Wow6432Node\APN]
[HKLM\Software\Wow6432Node\AskToolbar]
[HKLM\Software\Wow6432Node\Conduit]
[HKLM\Software\Wow6432Node\Zynga]
O43 - CFD: 08/02/2012 - 22:21:24 - [3,312] ----D C:\Program Files (x86)\Ask.com
O43 - CFD: 05/03/2010 - 22:08:15 - [1,821] ----D C:\Program Files (x86)\Conduit
O43 - CFD: 03/10/2011 - 19:36:56 - [11,685] ----D C:\Program Files (x86)\Zynga
O43 - CFD: 20/01/2013 - 11:42:20 - [0,000] ----D C:\ProgramData\blekko toolbars
O43 - CFD: 08/02/2012 - 22:20:47 - [0,164] ----D C:\Users\Lagueyrie\AppData\Local\APN
O43 - CFD: 22/09/2011 - 13:08:24 - [3,590] ----D C:\Users\Lagueyrie\AppData\Local\Conduit
O43 - CFD: 08/06/2011 - 10:06:50 - [4,946] ----D C:\Users\Lagueyrie\AppData\Local\Zynga
O69 - SBI: prefs.js [Lagueyrie - 9gl68up0.default] user_pref("CT2438727.AboutPrivacyUrl", "http://www.conduit.com");
O69 - SBI: prefs.js [Lagueyrie - 9gl68up0.default] user_pref("CT2438727.CTID", "CT2438727");
O69 - SBI: prefs.js [Lagueyrie - 9gl68up0.default] user_pref("CT2438727.CommunitiesChangesLastCheckTime", "0");
O69 - SBI: prefs.js [Lagueyrie - 9gl68up0.default] user_pref("CT2438727.CurrentServerDate", "2-3-2011");
O69 - SBI: prefs.js [Lagueyrie - 9gl68up0.default] user_pref("CT2438727.DialogsAlignMode", "LTR");
O69 - SBI: prefs.js [Lagueyrie - 9gl68up0.default] user_pref("CT2438727.DownloadReferralCookieData", "");
O69 - SBI: prefs.js [Lagueyrie - 9gl68up0.default] user_pref("CT2438727.FirstServerDate", "28-2-2010");
O69 - SBI: prefs.js [Lagueyrie - 9gl68up0.default] user_pref("CT2438727.FirstTime", true);
O69 - SBI: prefs.js [Lagueyrie - 9gl68up0.default] user_pref("CT2438727.FirstTimeFF3", true);
O69 - SBI: prefs.js [Lagueyrie - 9gl68up0.default] user_pref("CT2438727.FirstTimeSettingsDone", true);
O69 - SBI: prefs.js [Lagueyrie - 9gl68up0.default] user_pref("CT2438727.GroupingInvalidateCache", false);
O69 - SBI: prefs.js [Lagueyrie - 9gl68up0.default] user_pref("CT2438727.GroupingLastCheckTime", "0");
O69 - SBI: prefs.js [Lagueyrie - 9gl68up0.default] user_pref("CT2438727.GroupingLastServerUpdateTime", "0");
O69 - SBI: prefs.js [Lagueyrie - 9gl68up0.default] user_pref("CT2438727.GroupingServerCheckInterval", 1440);
O69 - SBI: prefs.js [Lagueyrie - 9gl68up0.default] user_pref("CT2438727.GroupingServiceUrl", "http://grouping.services.conduit.com/");
O69 - SBI: prefs.js [Lagueyrie - 9gl68up0.default] user_pref("CT2438727.Initialize", true);
O69 - SBI: prefs.js [Lagueyrie - 9gl68up0.default] user_pref("CT2438727.InitializeCommonPrefs", true);
O69 - SBI: prefs.js [Lagueyrie - 9gl68up0.default] user_pref("CT2438727.InstallationAndCookieDataSentCount", 3);
O69 - SBI: prefs.js [Lagueyrie - 9gl68up0.default] user_pref("CT2438727.InstalledDate", "Sun Feb 28 2010 17:56:26 GMT+0100");
O69 - SBI: prefs.js [Lagueyrie - 9gl68up0.default] user_pref("CT2438727.InvalidateCache", false);
O69 - SBI: prefs.js [Lagueyrie - 9gl68up0.default] user_pref("CT2438727.IsGrouping", false);
O69 - SBI: prefs.js [Lagueyrie - 9gl68up0.default] user_pref("CT2438727.IsMulticommunity", false);
O69 - SBI: prefs.js [Lagueyrie - 9gl68up0.default] user_pref("CT2438727.IsOpenThankYouPage", true);
O69 - SBI: prefs.js [Lagueyrie - 9gl68up0.default] user_pref("CT2438727.IsOpenUninstallPage", true);
O69 - SBI: prefs.js [Lagueyrie - 9gl68up0.default] user_pref("CT2438727.LanguagePackLastCheckTime", "Wed Mar 02 2011 18:21:38 GMT+0100");
O69 - SBI: prefs.js [Lagueyrie - 9gl68up0.default] user_pref("CT2438727.LanguagePackReloadIntervalMM", 1440);
O69 - SBI: prefs.js [Lagueyrie - 9gl68up0.default] user_pref("CT2438727.LanguagePackServiceUrl", "http://translation.users.conduit.com/Translation.ashx");
O69 - SBI: prefs.js [Lagueyrie - 9gl68up0.default] user_pref("CT2438727.LastLogin_2.5.7.3", "Tue Apr 13 2010 11:47:36 GMT+0200");
O69 - SBI: prefs.js [Lagueyrie - 9gl68up0.default] user_pref("CT2438727.LastLogin_2.5.8.6", "Wed Jul 28 2010 21:03:21 GMT+0200");
O69 - SBI: prefs.js [Lagueyrie - 9gl68up0.default] user_pref("CT2438727.LastLogin_2.7.1.3", "Wed Mar 02 2011 18:21:36 GMT+0100");
O69 - SBI: prefs.js [Lagueyrie - 9gl68up0.default] user_pref("CT2438727.LatestVersion", "2.7.1.3");
O69 - SBI: prefs.js [Lagueyrie - 9gl68up0.default] user_pref("CT2438727.Locale", "en");
O69 - SBI: prefs.js [Lagueyrie - 9gl68up0.default] user_pref("CT2438727.LoginCache", 4);
O69 - SBI: prefs.js [Lagueyrie - 9gl68up0.default] user_pref("CT2438727.MCDetectTooltipHeight", "83");
O69 - SBI: prefs.js [Lagueyrie - 9gl68up0.default] user_pref("CT2438727.MCDetectTooltipUrl", "http://@EB_INSTALL_LINK@/rank/tooltip/?version=1");
O69 - SBI: prefs.js [Lagueyrie - 9gl68up0.default] user_pref("CT2438727.MCDetectTooltipWidth", "295");
O69 - SBI: prefs.js [Lagueyrie - 9gl68up0.default] user_pref("CT2438727.RadioLastCheckTime", "0");
O69 - SBI: prefs.js [Lagueyrie - 9gl68up0.default] user_pref("CT2438727.RadioLastUpdateIPServer", "0");
O69 - SBI: prefs.js [Lagueyrie - 9gl68up0.default] user_pref("CT2438727.RadioLastUpdateServer", "0");
O69 - SBI: prefs.js [Lagueyrie - 9gl68up0.default] user_pref("CT2438727.SHRINK_TOOLBAR", 1);
O69 - SBI: prefs.js [Lagueyrie - 9gl68up0.default] user_pref("CT2438727.SearchBoxWidth", 168);
O69 - SBI: prefs.js [Lagueyrie - 9gl68up0.default] user_pref("CT2438727.SearchEngine", "Search||https://www.bing.com/search?q=UCM_SEARCH_TERM&pc=cosp&ptag=G6C999A66979CC674&form=CONORG&conlogo=CT3210127[...]
O69 - SBI: prefs.js [Lagueyrie - 9gl68up0.default] user_pref("CT2438727.SearchFromAddressBarIsInit", true);
O69 - SBI: prefs.js [Lagueyrie - 9gl68up0.default] user_pref("CT2438727.SearchFromAddressBarUrl", "http://search.conduit.com/ResultsExt.aspx?ctid=CT2438727&q=");
O69 - SBI: prefs.js [Lagueyrie - 9gl68up0.default] user_pref("CT2438727.SearchInNewTabEnabled", true);
O69 - SBI: prefs.js [Lagueyrie - 9gl68up0.default] user_pref("CT2438727.SearchInNewTabIntervalMM", 1440);
O69 - SBI: prefs.js [Lagueyrie - 9gl68up0.default] user_pref("CT2438727.SearchInNewTabLastCheckTime", "Wed Mar 02 2011 18:21:36 GMT+0100");
O69 - SBI: prefs.js [Lagueyrie - 9gl68up0.default] user_pref("CT2438727.SearchInNewTabServiceUrl", "http://newtab.conduit-hosting.com/newtab/?ctid=EB_TOOLBAR_ID");
O69 - SBI: prefs.js [Lagueyrie - 9gl68up0.default] user_pref("CT2438727.SearchInNewTabUsageUrl", "http://Usage.Hosting.conduit-services.com/UsageService.asmx/UsersRequests?ctid=EB_T[...]
O69 - SBI: prefs.js [Lagueyrie - 9gl68up0.default] user_pref("CT2438727.SettingsCheckIntervalMin", 120);
O69 - SBI: prefs.js [Lagueyrie - 9gl68up0.default] user_pref("CT2438727.SettingsLastCheckTime", "Wed Mar 02 2011 18:23:01 GMT+0100");
O69 - SBI: prefs.js [Lagueyrie - 9gl68up0.default] user_pref("CT2438727.SettingsLastUpdate", "1298225549");
O69 - SBI: prefs.js [Lagueyrie - 9gl68up0.default] user_pref("CT2438727.ThirdPartyComponentsInterval", 504);
O69 - SBI: prefs.js [Lagueyrie - 9gl68up0.default] user_pref("CT2438727.ThirdPartyComponentsLastCheck", "Wed Mar 02 2011 18:21:36 GMT+0100");
O69 - SBI: prefs.js [Lagueyrie - 9gl68up0.default] user_pref("CT2438727.ThirdPartyComponentsLastUpdate", "1278548974");
O69 - SBI: prefs.js [Lagueyrie - 9gl68up0.default] user_pref("CT2438727.TrusteLinkUrl", "http://trust.conduit.com/EB_ORIGINAL_CTID");
O69 - SBI: prefs.js [Lagueyrie - 9gl68up0.default] user_pref("CT2438727.UserID", "UN16758872036528261");
O69 - SBI: prefs.js [Lagueyrie - 9gl68up0.default] user_pref("CT2438727.ValidationData_Search", 0);
O69 - SBI: prefs.js [Lagueyrie - 9gl68up0.default] user_pref("CT2438727.ValidationData_Toolbar", 2);
O69 - SBI: prefs.js [Lagueyrie - 9gl68up0.default] user_pref("CT2438727.alertChannelId", "832836");
O69 - SBI: prefs.js [Lagueyrie - 9gl68up0.default] user_pref("CT2438727.backendstorage.currentgame", "7A796E6761");
O69 - SBI: prefs.js [Lagueyrie - 9gl68up0.default] user_pref("CT2438727.clientLogIsEnabled", true);
O69 - SBI: prefs.js [Lagueyrie - 9gl68up0.default] user_pref("CT2438727.clientLogServiceUrl", "http://clientlog.users.conduit.com/ClientDiagnostics.asmx/ReportDiagnosticsEvent");
O69 - SBI: prefs.js [Lagueyrie - 9gl68up0.default] user_pref("CT2438727.myStuffEnabled", true);
O69 - SBI: prefs.js [Lagueyrie - 9gl68up0.default] user_pref("CT2438727.myStuffPublihserMinWidth", 400);
O69 - SBI: prefs.js [Lagueyrie - 9gl68up0.default] user_pref("CT2438727.myStuffSearchUrl", "http://Apps.conduit.com/search?q=SEARCH_TERM&SearchSourceOrigin=29&ctid=EB_TOOLBAR_ID&oct[...]
O69 - SBI: prefs.js [Lagueyrie - 9gl68up0.default] user_pref("CT2438727.myStuffServiceIntervalMM", 1440);
O69 - SBI: prefs.js [Lagueyrie - 9gl68up0.default] user_pref("CT2438727.myStuffServiceUrl", "http://mystuff.conduit-services.com/MyStuffService.ashx?ComponentId=EB_MY_STUFF_INSTANCE[...]
O69 - SBI: prefs.js [Lagueyrie - 9gl68up0.default] user_pref("CT2438727.uninstallLogServiceUrl", "http://uninstall.users.conduit.com/Uninstall.asmx/RegisterToolbarUninstallation");
O69 - SBI: prefs.js [Lagueyrie - 9gl68up0.default] user_pref("CommunityToolbar.SearchFromAddressBarSavedUrl", "chrome://browser-region/locale/region.properties");
O69 - SBI: prefs.js [Lagueyrie - 9gl68up0.default] user_pref("CommunityToolbar.ToolbarsList", "CT2438727");
O69 - SBI: prefs.js [Lagueyrie - 9gl68up0.default] user_pref("CommunityToolbar.ToolbarsList2", "CT2438727");
O69 - SBI: prefs.js [Lagueyrie - 9gl68up0.default] user_pref("CommunityToolbar.alert.alertInfoInterval", 60);
O69 - SBI: prefs.js [Lagueyrie - 9gl68up0.default] user_pref("CommunityToolbar.alert.alertInfoLastCheckTime", "Sun Feb 28 2010 17:56:21 GMT+0100");
O69 - SBI: prefs.js [Lagueyrie - 9gl68up0.default] user_pref("CommunityToolbar.alert.clientsServerUrl", "http://alert.client.conduit.com");
O69 - SBI: prefs.js [Lagueyrie - 9gl68up0.default] user_pref("CommunityToolbar.alert.locale", "en");
O69 - SBI: prefs.js [Lagueyrie - 9gl68up0.default] user_pref("CommunityToolbar.alert.loginIntervalMin", 1440);
O69 - SBI: prefs.js [Lagueyrie - 9gl68up0.default] user_pref("CommunityToolbar.alert.loginLastCheckTime", "Sun Feb 28 2010 17:56:19 GMT+0100");
O69 - SBI: prefs.js [Lagueyrie - 9gl68up0.default] user_pref("CommunityToolbar.alert.loginLastUpdateTime", "1234796400");
O69 - SBI: prefs.js [Lagueyrie - 9gl68up0.default] user_pref("CommunityToolbar.alert.messageShowTimeSec", 20);
O69 - SBI: prefs.js [Lagueyrie - 9gl68up0.default] user_pref("CommunityToolbar.alert.servicesServerUrl", "http://alert.services.conduit.com");
O69 - SBI: prefs.js [Lagueyrie - 9gl68up0.default] user_pref("CommunityToolbar.alert.showTrayIcon", false);
O69 - SBI: prefs.js [Lagueyrie - 9gl68up0.default] user_pref("CommunityToolbar.alert.userCloseIntervalMin", 300);
O69 - SBI: prefs.js [Lagueyrie - 9gl68up0.default] user_pref("CommunityToolbar.alert.userId", "{a7ba1296-91bc-467a-ad06-b7085269c762}");
O69 - SBI: SearchScopes [HKCU] {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} - (Delta Search) - http://www.delta-search.com
O69 - SBI: SearchScopes [HKCU] {afdbddaa-5d3f-42ee-b79c-185a7020515b} [DefaultScope] - (Zynga Customized Web Search) - http://search.conduit.com
[MD5.02DE6B9AE1269AF813FE8B629EE50093] [SPRF][01/12/2010] (.Conduit Ltd. - Conduit Toolbar.) -- C:\Program Files (x86)\tbZyng.dll [2735200]
[HKLM\Software\Classes\TypeLib\{11549FE4-7C5A-4C17-9FC3-56FC5162A994}]
[HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{6c97a91e-4524-4019-86af-2aa2d567bf5c}]
[HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{86D4B82A-ABED-442A-BE86-96357B70F4FE}]
[HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{86D4B82A-ABED-442A-BE86-96357B70F4FE}]
[HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A5AA24EA-11B8-4113-95AE-9ED71DEAF12A}]
[HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A5AA24EA-11B8-4113-95AE-9ED71DEAF12A}]
[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}]
[HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}]
[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}]
[HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}]
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D4027C7F-154A-4066-A1AD-4243D8127440}]
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{D4027C7F-154A-4066-A1AD-4243D8127440}]
[HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\alotToolbar]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0E12F736682067FDE4D1158D5940A82E]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1A24B5BB8521B03E0C8D908F5ABC0AE6]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\261F213D1F55267499B1F87D0CC3BCF7]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2B0D56C4F4C46D844A57FFED6F0D2852]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\49D4375FE41653242AEA4C969E4E65E0]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6AA0923513360135B272E8289C5F13FA]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6F7467AF8F29C134CBBAB394ECCFDE96]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\741B4ADF27276464790022C965AB6DA8]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7DE196B10195F5647A2B21B761F3DE01]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\922525DCC5199162F8935747CA3D8E59]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\9D4F5849367142E4685ED8C25E44C5ED]
[HKLM\Software\Classes\Installer\Features\A28B4D68DEBAA244EB686953B7074FEF]
[HKLM\Software\Classes\Installer\Products\A28B4D68DEBAA244EB686953B7074FEF]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\A28B4D68DEBAA244EB686953B7074FEF]
[HKLM\Software\Wow6432Node\Classes\Installer\Products\A28B4D68DEBAA244EB686953B7074FEF]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A5875B04372C19545BEB90D4D606C472]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A876D9E80B896EC44A8620248CC79296]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B66FFAB725B92594C986DE826A867888]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BCDA179D619B91648538E3394CAC94CC]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D677B1A9671D4D4004F6F2A4469E86EA]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\DD1402A9DD4215A43ABDE169A41AFA0E]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E36E114A0EAD2AD46B381D23AD69CDDF]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\EF8E618DB3AEDFBB384561B5C548F65E]
[HKCU\Software\APN]
[HKLM\Software\Wow6432Node\APN]
[HKLM\Software\Microsoft\Shared Tools\MSConfig\startupreg\ApnUpdater]
[HKCU\Software\Ask.com]
[HKCU\Software\AppDataLow\Software\AskToolbar]
[HKLM\Software\Wow6432Node\AskToolbar]
[HKCU\Software\AppDataLow\Software\ConduitSearchScopes]
[HKCU\Software\Softonic]
[HKCU\Software\AppDataLow\Toolbar]
[HKCU\Software\AppDataLow\Software\Toolbar]
[HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\{79A765E1-C399-405B-85AF-466F52E918B0}]
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{02478D38-C3F9-4EFB-9B51-7695ECA05670}]
[HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{02478D38-C3F9-4EFB-9B51-7695ECA05670}]
[HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{02478D38-C3F9-4EFB-9B51-7695ECA05670}]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0CFE535C35F99574E8340BFA75BF92C2]
[HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Delta]
[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}]
[HKLM\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}]
[HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}]
[HKLM\Software\Classes\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}]
[HKLM\Software\Wow6432Node\Classes\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}]
[HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Delta Chrome Toolbar]
[HKLM\Software\Classes\Toolbar.CT2438727]
[HKLM\Software\Classes\Toolbar.CT2997248]
[HKLM\Software\Wow6432Node\Classes\Toolbar.CT2438727]
[HKLM\Software\Wow6432Node\Classes\Toolbar.CT2997248]
C:\Program Files (x86)\Zynga
C:\Program Files (x86)\Ask.com
C:\Program Files (x86)\Conduit
C:\Users\Lagueyrie\AppData\Local\Zynga
C:\Users\Lagueyrie\AppData\Local\Conduit
C:\Users\Lagueyrie\AppData\LocalLow\Zynga
C:\Users\Lagueyrie\AppData\LocalLow\AskToolbar
C:\Users\Lagueyrie\AppData\LocalLow\Conduit
C:\Users\Lagueyrie\AppData\Roaming\Mozilla\Firefox\Profiles\9gl68up0.default\Conduit
O90 - PUC: "A28B4D68DEBAA244EB686953B7074FEF" . (.Ask Toolbar.) -- c:\program files (x86)\ask.com\fv_7e60.ico
FirewallRAZ
Emptytemp
EmptyCLSID
--------------------------------------------------------------------------------------------
* Lance ZHPFix à partir du raccourci sur ton Bureau (si tu es sous Windows Vista ou Windows 7, fais le par un clic-droit --> Exécuter en tant qu'administrateur)
* Clique sur l'icone représentant le presse-papier ("coller le presse-papier")
le script doit automatiquement apparaitre dans ZHPFix, sinon, colle-le (Ctrl+v)
* Clique sur le bouton GO pour lancer le nettoyage
* Copie/colle la totalité du rapport dans ta prochaine réponse.
-> laisse travailler l'outil et ne touche à rien ...
-> Si il t'est demandé de redémarrer le PC pour finir le nettoyage, fais le !
Une fois terminé, un nouveau rapport s'affiche : poste le contenu de ce dernier dans ta prochaine réponse ...
( ce rapport est en outre sauvegardé dans ce dossier > C:\Program files\ZHPDiag\ ZHPFixReport.txt )
@+
--------Contributeur Sécurité---------
On a tous été un jour débutant dans quelque chose.
Mais le savoir est la récompense de l'assiduité.
merci pour ton aide
voici le nouveau rapport de zhpdiag
https://pjjoint.malekal.com/files.php?id=20130309_r15n9t9e13p9
voici le nouveau rapport de zhpdiag
https://pjjoint.malekal.com/files.php?id=20130309_r15n9t9e13p9
... oui, j'ai toujours l'onglet qui s'affiche !!! quelle M... !!.
J'ai supprimé Ad aware ...mais je ne trouve pas Spybot dans les programmes ??
Merci
J'ai supprimé Ad aware ...mais je ne trouve pas Spybot dans les programmes ??
Merci
Guillaume, merci pour ton aide.
J'ai supprimé google chrome et réinstallé (sauvegarde des favoris)... c'est ok maintenant !!!
Par contre je ne vois toujours pas Spybot dans mes programmes .
Petite question, en ce qui concerne Malwaresbytes , la période d'essai est périmée, en dehors des scans manuels, je ne sais pas trop si je suis protégée.
Par quoi puis le remplacer ?
J'ai supprimé google chrome et réinstallé (sauvegarde des favoris)... c'est ok maintenant !!!
Par contre je ne vois toujours pas Spybot dans mes programmes .
Petite question, en ce qui concerne Malwaresbytes , la période d'essai est périmée, en dehors des scans manuels, je ne sais pas trop si je suis protégée.
Par quoi puis le remplacer ?
Bonjour
Effectivement aucune trace de Spybot ;-)
1)Désinstalle Malwaresbytes et installe cette version gratuite
https://www.commentcamarche.net/telecharger/securite/14361-malwarebytes-anti-malware/
Tu met à jour avant chaque analyse
2) Télécharge DelFix de Xplode
Lance le.
Tu as 5 choix :
Réactiver l'UAC
Supprimer les outils de désinfection (cocher par défaut)
Effectuer une sauvegarde du registre
Purger la restauration de système
Réinitialisation des paramètres usine
Tu coches ceux qui sont en gras
et tu exécutes
Le rapport se trouve ici généralement
C:\DelFix.txt
@+
Effectivement aucune trace de Spybot ;-)
1)Désinstalle Malwaresbytes et installe cette version gratuite
https://www.commentcamarche.net/telecharger/securite/14361-malwarebytes-anti-malware/
Tu met à jour avant chaque analyse
2) Télécharge DelFix de Xplode
Lance le.
Tu as 5 choix :
Réactiver l'UAC
Supprimer les outils de désinfection (cocher par défaut)
Effectuer une sauvegarde du registre
Purger la restauration de système
Réinitialisation des paramètres usine
Tu coches ceux qui sont en gras
et tu exécutes
Le rapport se trouve ici généralement
C:\DelFix.txt
@+
Bonjour et bon dimanche,
1- j'ai supprimé et réinstallé Malwaresbytes .
* je peux scanner sans problèmes, mais au niveau de l'onglet "protection", je ne peux rien faire. Suis je quand meme protégée ?
2- j'ai lancé Delfix, ci dessous le rapport.
Merci encore pour ton aide
# DelFix v10.1 - Rapport créé le 10/03/2013 à 10:43:11
# Mis à jour le 23/02/2013 par Xplode
# Nom d'utilisateur : Lagueyrie - PC-LAGUEYRIE
~ Suppression des outils de désinfection ...
Supprimé : C:\ZHP
Supprimé : C:\Program Files (x86)\ZHPDiag
Supprimé : C:\AdwCleaner[R1].txt
Supprimé : C:\PhysicalDisk0_MBR.bin
Supprimé : C:\Users\Lagueyrie\Desktop\ZHPDiag.txt
Supprimé : C:\Users\Lagueyrie\Desktop\ZHPFixReport.txt
Supprimé : C:\Users\Public\Desktop\MBRCheck.lnk
Supprimé : C:\Users\Public\Desktop\ZHPDiag.lnk
Supprimé : C:\Users\Public\Desktop\ZHPFix.lnk
Supprimé : C:\Users\Lagueyrie\Documents\Downloads\adwcleaner.exe
Supprimé : C:\Users\Lagueyrie\Documents\Downloads\Extras.Txt
Supprimé : C:\Users\Lagueyrie\Documents\Downloads\OTL.Txt
Supprimé : C:\Users\Lagueyrie\Documents\Downloads\OTL.exe
Supprimé : C:\Users\Lagueyrie\Documents\Downloads\ZHPDiag2.exe
Supprimée : HKLM\SOFTWARE\OldTimer Tools
Supprimée : HKLM\SOFTWARE\AdwCleaner
Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ZHPDiag_is1
~ Purge de la restauration système ...
Supprimé : RP #1289 [Point de contrôle planifié | 03/06/2013 23:00:02]
Supprimé : RP #1290 [Point de contrôle planifié | 03/07/2013 23:23:04]
Supprimé : RP #1291 [Installed Java(TM) 6 Update 39 | 03/08/2013 16:20:28]
Supprimé : RP #1292 [Installation avast! Free Antivirus | 03/09/2013 14:09:32]
Supprimé : RP #1293 [Removed Google Drive | 03/09/2013 14:30:13]
Supprimé : RP #1294 [Installed Java 7 Update 17 | 03/09/2013 15:07:09]
Supprimé : RP #1295 [Removed Java(TM) 6 Update 39 | 03/09/2013 15:10:53]
Supprimé : RP #1296 [OTL Restore Point - 09/03/2013 16:37:55 | 03/09/2013 15:37:55]
Supprimé : RP #1297 [Removed Ask Toolbar. | 03/09/2013 16:51:25]
Supprimé : RP #1298 [Removed Ad-Aware Antivirus. | 03/09/2013 17:11:22]
Supprimé : RP #1299 [Installation avast! Free Antivirus | 03/09/2013 17:28:26]
Supprimé : RP #1300 [Windows Update | 03/09/2013 21:48:25]
Nouveau point de restauration créé !
########## - EOF - ##########
1- j'ai supprimé et réinstallé Malwaresbytes .
* je peux scanner sans problèmes, mais au niveau de l'onglet "protection", je ne peux rien faire. Suis je quand meme protégée ?
2- j'ai lancé Delfix, ci dessous le rapport.
Merci encore pour ton aide
# DelFix v10.1 - Rapport créé le 10/03/2013 à 10:43:11
# Mis à jour le 23/02/2013 par Xplode
# Nom d'utilisateur : Lagueyrie - PC-LAGUEYRIE
~ Suppression des outils de désinfection ...
Supprimé : C:\ZHP
Supprimé : C:\Program Files (x86)\ZHPDiag
Supprimé : C:\AdwCleaner[R1].txt
Supprimé : C:\PhysicalDisk0_MBR.bin
Supprimé : C:\Users\Lagueyrie\Desktop\ZHPDiag.txt
Supprimé : C:\Users\Lagueyrie\Desktop\ZHPFixReport.txt
Supprimé : C:\Users\Public\Desktop\MBRCheck.lnk
Supprimé : C:\Users\Public\Desktop\ZHPDiag.lnk
Supprimé : C:\Users\Public\Desktop\ZHPFix.lnk
Supprimé : C:\Users\Lagueyrie\Documents\Downloads\adwcleaner.exe
Supprimé : C:\Users\Lagueyrie\Documents\Downloads\Extras.Txt
Supprimé : C:\Users\Lagueyrie\Documents\Downloads\OTL.Txt
Supprimé : C:\Users\Lagueyrie\Documents\Downloads\OTL.exe
Supprimé : C:\Users\Lagueyrie\Documents\Downloads\ZHPDiag2.exe
Supprimée : HKLM\SOFTWARE\OldTimer Tools
Supprimée : HKLM\SOFTWARE\AdwCleaner
Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ZHPDiag_is1
~ Purge de la restauration système ...
Supprimé : RP #1289 [Point de contrôle planifié | 03/06/2013 23:00:02]
Supprimé : RP #1290 [Point de contrôle planifié | 03/07/2013 23:23:04]
Supprimé : RP #1291 [Installed Java(TM) 6 Update 39 | 03/08/2013 16:20:28]
Supprimé : RP #1292 [Installation avast! Free Antivirus | 03/09/2013 14:09:32]
Supprimé : RP #1293 [Removed Google Drive | 03/09/2013 14:30:13]
Supprimé : RP #1294 [Installed Java 7 Update 17 | 03/09/2013 15:07:09]
Supprimé : RP #1295 [Removed Java(TM) 6 Update 39 | 03/09/2013 15:10:53]
Supprimé : RP #1296 [OTL Restore Point - 09/03/2013 16:37:55 | 03/09/2013 15:37:55]
Supprimé : RP #1297 [Removed Ask Toolbar. | 03/09/2013 16:51:25]
Supprimé : RP #1298 [Removed Ad-Aware Antivirus. | 03/09/2013 17:11:22]
Supprimé : RP #1299 [Installation avast! Free Antivirus | 03/09/2013 17:28:26]
Supprimé : RP #1300 [Windows Update | 03/09/2013 21:48:25]
Nouveau point de restauration créé !
########## - EOF - ##########