page d'acceuil Résolu

Question

Bonjour, 

Je me suis ramassée avec un virus j'ai tout nettoyé à l'aide de Malwarebites et supprimés tous les infections mais voilà donc, que je suis incapable de me débarrasser de la page d'acceuil SEARCHNU.COM/406 au démarrage de Google Chrome.

svp aidez moi ça fait maintenant plus de 6 heures que j'essaie d'arranger mon ordinateur!!!

Merci à l'avance pour votre aide!

Utilisateur anonyme · Answer

Bonsoir

Télécharge AdwCleaner ( d'Xplode ) sur ton bureau. 
Lance le, clique sur [Suppression]   puis patiente le temps du scan. 
Lorsque le message indiquant qu'AdwCleaner a détecté une variante spécifique d'adware s'affiche, clique sur  [OK]   
- L'ordinateur va redémarrer tout seul. Redémarre-le en mode normal. 
- AdwCleaner s'ouvrira normalement, avec comme seul choix possible [Suppression] 
- Clique dessus, puis patiente pendant la suppression. 
- Une fois la suppression effectuée, AdwCleaner t'invitera à redémarrer l'ordinateur 
- Au redémarrage, un rapport s'ouvrira. Poste le sur le forum. 


Note : Le rapport est également sauvegardé sous C:\AdwCleaner[S1].txt
Les toolbars, c'est pas obligatoire ( par Malekal ) :https://forum.malekal.com/viewtopic.php?t=6173&start= 

@+

Minette Chanel · Answer

omg on m'a répondu mais je n'y comprend rien svp ou dois envoyé le rapport???

Merci!

Utilisateur anonyme · Answer

Re  Minette Chanel

Pourquoi personne n'aurait répondu ?

Tu mets ce rapport dans ta prochaine réponse;merci

@+

Minette Chanel · Answer

Ma question est la suivante :: j'avais déjà installé ( Malwarebites ) et j'ai effectué l'examen complet qui a duré une heure 30 min... j'ai tout supprimé les infections(20) alors j'imagine que si je télécharge AdwCleaner je ne crois pas que ce logiciel trouvera d'autre infections puisque je viens de faire LA SUPPRESSION (donc aucun rapport de disponible).
Alors dois-je quand même télécharger AdwCleaner et refaire tout le processus???

Merci!

Utilisateur anonyme · Answer

Re

As tu toujours cette page en accueil?

@+

Minette Chanel · Answer

rebonjour Guillaume

Tu me demande d'installer AdwCleaner et lorsque vient le temps d'ouvrir le fichier pour cliquer sur RUN une fenêtre s'affiche en disant :: The publisher could not be verified. Are you sure you want to run this software?

Alors dois-je quand même cliquer sur RUN ?????

Minette Chanel · Answer

ouais bin ça fonctionne pas lorsque je clique sur RUN je suis vraiment découragée

Minette Chanel · Answer

voila ça fait 5 fois que j'essaie et le lancement se fait pas avez vous une solution???

Utilisateur anonyme · Answer

Re

Pour de plus amples informations, fait ceci stp

Ouvre ce lien et télécharge ZHPDiag de Nicolas Coolman : 

https://www.zebulon.fr/telechargements/securite/systeme/zhpdiag.html

Ou

https://www.commentcamarche.net/telecharger/utilitaires/24803-zhpdiag/

Serveur N°2

Ou

http://www.premiumorange.com/zeb-help-process/zhpdiag.html 
en bas de la page ZHP avec un numéro de version.
 
Une fois le téléchargement achevé, 

Double-clique sur l'icône pour lancer le programme.  Sous Vista ; Seven ou Windows 8 clic droit «  exécuter en tant que administrateur » 

 
Clique sur  la loupe avec le signe +   pour lancer l'analyse.

Laisse l'outil travailler, il peut être assez long. 

Ferme ZHPDiag en fin d'analyse. 


Pour transmettre le rapport clique sur ce lien: 
http://pjjoint.malekal.com/

Si problème utilise un des suivants

https://forums-fec.be/upload 
 https://www.cjoint.com/


Regarde sur le bureau
 
Sélectionne le fichier ZHPDiag.txt. 

Clique sur "Cliquez ici pour déposer le fichier". 

Un lien de cette forme : 

http://www.cijoint.com/cjlink.php?file=cj200905/cijSKAP5fU.txt 

est ajouté dans la page. 

Copie ce lien dans ta réponse.

Merci

@+

Minette Chanel · Answer

VOICI LE RAPPORT MERCI BEAUCOUP POUR VOTRE AIDE !!! Rapport de ZHPDiag v2013.3.17.41 par Nicolas Coolman, Update du 2013-03-15 Run by Compaq_Owner at 2013-03-17 20:00:54 State : Error during network connexion High Elevated Privileges : OK UAC : Not Found ---\ Web Browser MSIE: Internet Explorer v6.0.2900.5512 GCIE: Google Chrome v25.0.1364.172 (Defaut) ---\ Windows Product Information ~ Langage: Anglais Windows XP Home Edition Service Pack 3 (Build 2600) Windows Automatic Updates : OK Windows Genuine Advantage : KO ---\ System Information ~ Processor: x86 Family 15 Model 47 Stepping 2, AuthenticAMD ~ Operating System: 32 Bits Boot mode: Normal (Normal boot) Total RAM: 1214 MB (44% free) System Restore: Activé (Enable) System drive C: has 150 GB (83%) free of 179 GB ---\ Logged in mode ~ Computer Name: SHELBY ~ User Name: Compaq_Owner ~ All Users Names: SUPPORT_fddfa904, SUPPORT_388945a0, HelpAssistant, Guest, Compaq_Owner, Administrator, ~ Unselected Option: O45,O61,O62,O65,O66,O80,O82,O89 Logged in as Administrator ---\ Environnement Variables ~ System Unit : C:\ ~ %AppData% : C:\Documents and Settings\Compaq_Owner\Application Data\ ~ %Desktop% : C:\Documents and Settings\Compaq_Owner\Desktop\ ~ %Favorites% : C:\Documents and Settings\Compaq_Owner\Favorites\ ~ %LocalAppData% : C:\Documents and Settings\Compaq_Owner\Local Settings\Application Data\ ~ %StartMenu% : C:\Documents and Settings\Compaq_Owner\Start Menu\ ~ %Windir% : C:\WINDOWS\ ~ %System% : C:\WINDOWS\system32\ ---\ DOS/Devices C:\ Hard drive, Flash drive, Thumb drive (Free 150 Go of 179 Go) D:\ Hard drive, Flash drive, Thumb drive (Free 0 Go of 7 Go) E:\ CD-ROM drive (Not Inserted) F:\ Floppy drive, Flash card reader, USB Key (Not Inserted) G:\ Floppy drive, Flash card reader, USB Key (Not Inserted) H:\ Floppy drive, Flash card reader, USB Key (Not Inserted) I:\ Floppy drive, Flash card reader, USB Key (Not Inserted) J:\ CD-ROM drive (Not Inserted) ---\ Security Center & Tools Informations [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Intl: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] XMLLookup: OK [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK [HKCU\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows] Load: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install] LastSuccessTime : OK ~ Scan Security Center in 00mn 00s ---\ Search Generic System Files [MD5.12896823FB95BFB3DC9B46BCAEDC9923] - (.Microsoft Corporation - Windows Explorer.) (.2008-04-13 - 19:12:19.) -- C:\WINDOWS\Explorer.exe [1033728] [MD5.A5492F3ED6A4C14B579E36C74A25AC1B] - (.Microsoft Corporation - Internet Extensions for Win32.) (.2013-02-06 - 05:48:44.) -- C:\WINDOWS\system32\wininet.dll [667136] [MD5.ED0EF0A136DEC83DF69F04118870003E] - (.Microsoft Corporation - Windows NT Logon Application.) (.2008-04-13 - 19:12:39.) -- C:\WINDOWS\system32\Winlogon.exe [507904] [MD5.1E44BC1E83D8FD2305F8D452DB109CF9] - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) (.2011-08-17 - 08:49:54.) -- C:\WINDOWS\system32\Drivers\AFD.sys [138496] [MD5.9F3A2F5AA6875C72BF062C712CFA2674] - (.Microsoft Corporation - IDE/ATAPI Port Driver.) (.2008-04-13 - 13:40:30.) -- C:\WINDOWS\system32\Drivers\atapi.sys [96512] [MD5.C885B02847F5D2FD45A24E219ED93B32] - (.Microsoft Corporation - CD-ROM File System Driver.) (.2008-04-13 - 14:14:21.) -- C:\WINDOWS\system32\Drivers\Cdfs.sys [63744] [MD5.1F4260CC5B42272D71F79E570A27A4FE] - (.Microsoft Corporation - SCSI CD-ROM Driver.) (.2008-04-13 - 13:40:46.) -- C:\WINDOWS\system32\Drivers\Cdrom.sys [62976] [MD5.D45926117EB9FA946A6AF572FBE1CAA3] - (.Microsoft Corporation - FIPS Crypto Driver.) (.2008-04-13 - 13:33:28.) -- C:\WINDOWS\system32\Drivers\Fips.sys [44544] [MD5.573C7D0A32852B48F3058CFD8026F511] - (.Windows (R) Server 2003 DDK provider - High Definition Audio Bus Driver v1.0a.) (.2008-04-13 - 11:36:05.) -- C:\WINDOWS\system32\Drivers\HDAudBus.sys [144384] [MD5.4A0B06AA8943C1E332520F7440C0AA30] - (.Microsoft Corporation - i8042 Port Driver.) (.2008-04-13 - 14:18:00.) -- C:\WINDOWS\system32\Drivers\i8042prt.sys [52480] [MD5.083A052659F5310DD8B6A6CB05EDCF8E] - (.Microsoft Corporation - IMAPI Kernel Driver.) (.2008-04-13 - 13:40:58.) -- C:\WINDOWS\system32\Drivers\Imapi.sys [42112] [MD5.CC748EA12C6EFFDE940EE98098BF96BB] - (.Microsoft Corporation - IP Network Address Translator.) (.2008-04-13 - 13:57:15.) -- C:\WINDOWS\system32\Drivers\IpNat.sys [152832] [MD5.23C74D75E36E7158768DD63D92789A91] - (.Microsoft Corporation - IPSec Driver.) (.2008-04-13 - 14:19:42.) -- C:\WINDOWS\system32\Drivers\IPSec.sys [75264] [MD5.7D304A5EB4344EBEEAB53A2FE3FFB9F0] - (.Microsoft Corporation - Windows NT SMB Minirdr.) (.2011-07-15 - 08:29:31.) -- C:\WINDOWS\system32\Drivers\MRxSmb.sys [456320] [MD5.74B2B2F5BEA5E9A3DC021D685551BD3D] - (.Microsoft Corporation - MBT Transport driver.) (.2008-04-13 - 14:21:00.) -- C:\WINDOWS\system32\Drivers etBT.sys [162816] [MD5.78A08DD6A8D65E697C18E1DB01C5CDCA] - (.Microsoft Corporation - NT File System Driver.) (.2008-04-13 - 14:15:53.) -- C:\WINDOWS\system32\Drivers tfs.sys [574976] [MD5.5575FAF8F97CE5E713D108C2A58D7C7C] - (.Microsoft Corporation - Parallel Port Driver.) (.2008-04-13 - 13:40:10.) -- C:\WINDOWS\system32\Drivers\Parport.sys [80128] [MD5.11B4A627BC9614B885C4969BFA5FF8A6] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) (.2008-04-13 - 14:19:43.) -- C:\WINDOWS\system32\Drivers\Rasl2tp.sys [51328] [MD5.15CABD0F7C00C47C70124907916AF3F1] - (.Microsoft Corporation - Microsoft RDP Device redirector.) (.2008-04-13 - 13:32:51.) -- C:\WINDOWS\system32\Drivers dpdr.sys [196224] [MD5.F828DD7E1419B6653894A8F97A0094C5] - (.Microsoft Corporation - Redbook Audio Filter Driver.) (.2008-04-13 - 13:40:27.) -- C:\WINDOWS\system32\Drivers edbook.sys [57600] [MD5.4C8FCB5CC53AAB716D810740FE59D025] - (.Microsoft Corporation - Volume Shadow Copy Driver.) (.2008-04-13 - 13:41:01.) -- C:\WINDOWS\system32\Drivers\volsnap.sys [52352] ~ Scan Generic Processes in 00mn 00s ---\ Hidden files state (Hidden/Total) ~ Mes images (My Pictures) : 2/2075 ~ Mes Videos (My Videos) : 1/2 ~ Mes Documents (My Documents) : 1/2914 ~ Mon Bureau (My Desktop) : 1/11 ~ Menu demarrer (Programs) : 1/36 ~ Scan Hidden Files in 00mn 07s ---\ Running Processes [MD5.D21352BCAAB174948EB9672BC203BB0F] - (.ATI Technologies Inc. - ATI External Event Utility EXE Module.) -- C:\WINDOWS\system32\Ati2evxx.exe [376832] [PID.1136] [MD5.B151DDB3FABD308162483DDA1B865E0A] - (.Pure Networks, Inc. - Network Magic Application.) -- C:\Program Files\Pure Networks\Network Magic mapp.exe [321088] [PID.376] [MD5.006220EE86EB71C5884F415EAA9E8058] - (.RealNetworks, Inc. - RealNetworks Scheduler.) -- C:\Program Files\Common Files\Real\Update_OB ealsched.exe [180269] [PID.392] [MD5.371BA71B566260932DCCCF843BF6C7E7] - (.AVG Technologies CZ, s.r.o. - AVG Tray Monitor.) -- C:\Program Files\AVG\AVG2012\avgtray.exe [2598520] [PID.412] [MD5.77F91DE9AE1E63D889E0B5D4ADBE6ECF] - (.Unknown owner - VProtect Application.) -- C:\Program Files\AVG Secure Search\vprot.exe [1124016] [PID.420] [MD5.12916E0642E92561C98B18A2A2D01B14] - (.Sun Microsystems, Inc. - Java(TM) Update Scheduler.) -- C:\Program Files\Common Files\Java\Java Update\jusched.exe [252848] [PID.452] [MD5.A33AF0B31471A0A42E41665D9B8B367A] - (.Cyberlink, Corp. - PowerBar Application.) -- C:\Program Files\CyberLink DVD Solution\Multimedia Launcher\PowerBar.exe [86016] [PID.884] [MD5.96261D590C12F5D47DA973AE882C58F0] - (.FileProperties_CompanyName - FileProperties_FileDescription.) -- C:\Documents and Settings\Compaq_Owner\Local Settings\Application Data\Updater4479\Updater4479.exe [206336] [PID.1036] [MD5.7CC860115CBA837E29FB066FC68B2C3D] - (.Skype Technologies S.A. - Skype.) -- C:\Program Files\Skype\Phone\Skype.exe [18708224] [PID.1020] [MD5.8BF6E87D0A6455905B89049851704201] - (.Conduit - Search Protect by Conduit.) -- C:\Documents and Settings\Compaq_Owner\Application Data\SearchProtect\bin\cltmng.exe [2731296] [PID.1184] [MD5.1C7EEE1A47231CBB792BBCF62DEBA60D] - (.215 Apps - Solid Savings exe.) -- C:\Documents and Settings\Compaq_Owner\Local Settings\Application Data\Updater26278\Updater26278.exe [210312] [PID.1284] [MD5.EA1145DEBCD508FD25BD1E95C4346929] - (.AVG Technologies CZ, s.r.o. - AVG Watchdog Service.) -- C:\Program Files\AVG\AVG2012\avgwdsvc.exe [193288] [PID.1160] [MD5.09D38AEC081F064FD67B8B9C49790020] - (.Conduit - Search Protect by Conduit.) -- C:\Program Files\SearchProtect\bin\CltMngSvc.exe [93984] [PID.1608] [MD5.999DB5F88C8E145CCA9D471E33227143] - (.Oracle Corporation - Java(TM) Quick Starter Service.) -- C:\Program Files\Java\jre7\bin\jqs.exe [170912] [PID.268] [MD5.11F714F85530A2BD134074DC30E99FCA] - (.Microsoft Corporation - Machine Debug Manager.) -- C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.exe [322120] [PID.388] [MD5.2D091A99624FB9E7EEF0A86D872EC0C3] - (.HP - PML Driver.) -- C:\WINDOWS\system32\HPZipm12.exe [73728] [PID.1320] [MD5.23E3C83DFF7B09A97B01A85ED8A44478] - (.Skype Technologies S.A. - Skype C2C Service.) -- C:\Documents and Settings\All Users\Application Data\Skype\Toolbars\Skype C2C Service\c2c_service.exe [3289208] [PID.2348] [MD5.084A67A4090798F931CAA08C02B31F88] - (.AVG Technologies CZ, s.r.o. - AVG Online Shield Service.) -- C:\Program Files\AVG\AVG2012\avgnsx.exe [1259568] [PID.2400] [MD5.9CE7E61E07EBD3CCF05055CC3FBC0C19] - (.AVG Technologies CZ, s.r.o. - AVG E-mail Scanner.) -- C:\Program Files\AVG\AVG2012\avgemcx.exe [979840] [PID.2420] [MD5.87C57CBE385E00726A2113614F6C6BD2] - (.Unknown owner - ToolbarU Application.) -- C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\14.1.7\ToolbarUpdater.exe [965296] [PID.2692] [MD5.3CB041B0C24258BDCFD0DB1B1BF95EFB] - (.Pure Networks, Inc. - Network Magic Service.) -- C:\Program Files\Pure Networks\Network Magic msrvc.exe [321088] [PID.2848] [MD5.231B6AD3DB2866BC3FDB9979E6B2B61E] - (.AVG Technologies CZ, s.r.o. - AVG Identity Protection Service.) -- C:\Program Files\AVG\AVG2012\avgidsagent.exe [5174392] [PID.2952] [MD5.8EF654045E518AC00E52E7A1E2D3AD70] - (.Canon Inc. - Canon Camera Access Library 8.) -- C:\Program Files\Canon\CAL\CALMAIN.exe [96370] [PID.3076] [MD5.B95AC0CDB8F068F0C024CD344B354298] - (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe [1274320] [PID.3000] [MD5.C0E0F315590EC848340C218BE0FF04D1] - (.Nicolas Coolman - ZHPDiag.) -- C:\Program Files\ZHPDiag\ZHPDiag.exe [5754880] [PID.468] [MD5.DC904E6BC7024F32EB8E0EE578433774] - (.AVG Technologies CZ, s.r.o. - AVG Resident Shield Service.) -- C:\Program Files\AVG\AVG2012\avgrsx.exe [768632] [PID.628] [MD5.ECC96985954185DFCF455FBBB8037A1B] - (.AVG Technologies CZ, s.r.o. - AVG Scanning Core Module - Server Part.) -- C:\Program Files\AVG\AVG2012\avgcsrvx.exe [338784] [PID.664] ~ Scan Processes Running in 00mn 02s ---\ Google Chrome, Start,Search,Extensions (G0,G1,G2) C:\Documents and Settings\Compaq_Owner\Local Settings\Application Data\Google\Chrome\User Data\Default\Preferences G1 - GCS: Preference [User Data\Default] http://search.conduit.com ~ Scan Google Browser in 00mn 00s ---\ Mozilla Firefox,Plugins,Start,Search,Extensions (P2,M0,M1,M2,M3) C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles r46rjmh.default\prefs.js C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles r46rjmh.default\user.js M3 - MFPP: Plugins - [Compaq_Owner] -- C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles r46rjmh.default\searchplugins\delta.xml M3 - MFPP: Plugins - [Compaq_Owner] -- C:\Program Files\Mozilla FireFox\searchplugins\avg-secure-search.xml M0 - MFSP: prefs.js [Compaq_Owner - tr46rjmh.default] http://search.babylon.com M2 - MFEP: prefs.js [Compaq_Owner - tr46rjmh.default\9518042e-7ad6-4dac-b377-056e28d00c8f@f1cc0a13-4df1-4d66-938f-088db8838882.com] [] Solid Savings v (.215 Apps.) M2 - MFEP: prefs.js [Compaq_Owner - tr46rjmh.default\crossriderapp4479@crossrider.com] [] Giant Savings v (.215 Apps.) M2 - MFEP: prefs.js [Compaq_Owner - tr46rjmh.default\ffxtlbr@babylon.com] [] Babylon v1.2.0 (.Babylon.) M2 - MFEP: prefs.js [Compaq_Owner - tr46rjmh.default\{20a82645-c095-46ed-80e3-08825760534b}] [MicrosoftCG] Microsoft .NET Framework Assistant v1.2.1 (.Microsoft.) M2 - MFEP: prefs.js [Compaq_Owner - tr46rjmh.default\{635abd67-4fe9-1b23-4f01-e679fa7484c1}] [yahoo.ytff] Yahoo! Toolbar v2.4.5.20111209014555 (.Yahoo!.) P2 - FPN:Firefox Plugin Navigator . (.Ask.com - Ask Toolbar Plugin Stub for 32-bit Windows.) -- C:\Program Files\Mozilla Firefox\Plugins\NPAskSBr.dll P2 - FPN:Firefox Plugin Navigator . (.Microsoft Corporation - Office Plugin for Netscape Navigator.) -- C:\Program Files\Mozilla Firefox\Plugins\NPOFFICE.DLL P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins pqtplugin.dll P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins pqtplugin2.dll P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins pqtplugin3.dll P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins pqtplugin4.dll P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins pqtplugin5.dll P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins pqtplugin6.dll P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins pqtplugin7.dll P2 - FPN: [HKLM] [@adobe.com/FlashPlayer] - (...) -- C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_6_602_180.dll P2 - FPN: [HKLM] [@avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin] - (.AVG Technologies - npsitesafety.) -- C:\Program Files\Common Files\AVG Secure Search\SiteSafetyInstaller\14.1.7 psitesafety.dll P2 - FPN: [HKLM] [@java.com/DTPlugin,version=10.17.2] - (.Oracle Corporation - NPRuntime Script Plug-in Library for Java(TM) Deploy.) -- C:\WINDOWS\system32 pDeployJava1.dll P2 - FPN: [HKLM] [@java.com/JavaPlugin,version=10.17.2] - (.Oracle Corporation - Next Generation Java Plug-in 10.17.2 for Mozilla browsers.) -- C:\Program Files\Java\jre7\bin\plugin2 pjp2.dll P2 - FPN: [HKLM] [@Microsoft.com/NpCtrl,version=1.0] - (. Microsoft Corporation - 5.1.20125.0.) -- c:\Program Files\Microsoft Silverlight\5.1.20125.0 pctrl.dll P2 - FPN: [HKLM] [@microsoft.com/WPF,version=3.5] - (.Microsoft Corporation - Windows Presentation Foundation (WPF) plug-in for Mozilla browsers.) -- c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll P2 - FPN: [HKLM] [@real.com/nppl3260;version=6.0.11.2240] - (.RealNetworks, Inc. - RealPlayer(tm) LiveConnect-Enabled Plug-In.) -- C:\Program Files\Real\RealPlayer\Netscape6 ppl3260.dll P2 - FPN: [HKLM] [@real.com/nprjplug;version=1.0.2.2298] - (.RealNetworks, Inc. - RealJukebox Netscape Plugin.) -- C:\Program Files\Real\RealPlayer\Netscape6 prjplug.dll P2 - FPN: [HKLM] [@real.com/nprpjplug;version=6.0.12.1348] - (.RealNetworks, Inc. - 6.0.12.1348.) -- C:\Program Files\Real\RealPlayer\Netscape6 prpjplug.dll P2 - FPN: [HKLM] [@RIM.com/WebSLLauncher,version=1.0] - (...) -- C:\Program Files\Common Files\Research In Motion\BBWebSLLauncher\NPWebSLLauncher.dll P2 - FPN: [HKLM] [@tools.google.com/Google Update;version=3] - (.Google Inc. - Google Update.) -- C:\Program Files\Google\Update\1.3.21.135 pGoogleUpdate3.dll P2 - FPN: [HKLM] [@tools.google.com/Google Update;version=9] - (.Google Inc. - Google Update.) -- C:\Program Files\Google\Update\1.3.21.135 pGoogleUpdate3.dll P2 - FPN: [HKCU] [@unity3d.com/UnityPlayer,version=1.0] - (.Unity Technologies ApS - Unity Player 4.0.1f2.) -- C:\Documents and Settings\Compaq_Owner\Local Settings\Application Data\Unity\WebPlayer\loader pUnity3D32.dll ~ Scan Firefox Browser in 00mn 00s ---\ Internet Explorer Extensions, Start, Search (R4,R3,R0,R1) R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://search.conduit.com R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://ie.redirect.hp.com R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://cf.rd.yahoo.com R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://ie.redirect.hp.com R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://cf.rd.yahoo.com R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = https://www.search.ask.com/web?l=dis&q=&o=APN10655A&apn_dtid=%5EBND101%5EYY%5EFR&shad=s_0048&gct=hp&apn_ptnrs=%5EAG5&d=101-0&lang=en&atb=sysid%3D101%3Auid%3D58c9331d816657ac%3Asrc%3Dhmp%3Ao%3DAPN10655A%3Atg%3D&p2=%5EAG5%5EBND101%5EYY%5EFR R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,CustomizeSearch = https://www.bing.com/?toHttps=1&redig=17DBE7D168544FA98200E890A8051984 R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURLs,Tabs = res://ieframe.dll/tabswelcome.htm R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = https://www.search.ask.com/web?l=dis&q=&o=APN10655A&apn_dtid=%5EBND101%5EYY%5EFR&shad=s_0048&gct=hp&apn_ptnrs=%5EAG5&d=101-0&lang=en&atb=sysid%3D101%3Auid%3D58c9331d816657ac%3Asrc%3Dhmp%3Ao%3DAPN10655A%3Atg%3D&p2=%5EAG5%5EBND101%5EYY%5EFR R3 - URLSearchHook: (no name) - {A3BC75A2-1F87-4686-AA43-5347D756017C} . (.Unity Technologies ApS - Unity Player 4.0.1f2.) (No version) -- (.not file.) R3 - URLSearchHook: Microsoft Url Search Hook - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (.Unity Technologies ApS - Unity Player 4.0.1f2.) (No version) -- (.not file.) R3 - URLSearchHook: KeyBar 1.6 Toolbar - {65f9f6b7-2dae-46fc-bfaf-f88e4af1beca} . (.Unity Technologies ApS - Unity Player 4.0.1f2.) (No version) -- (.not file.) ~ Scan IE Browser in 00mn 00s ---\ Internet Explorer, Proxy Management (R5) R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyHttp1.1 = 0 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll ~ Scan Proxy management in 00mn 00s ---\ Line Analysis F0, F1, F2, F3 - IniFiles, Auto loading programs F2 - REG:system.ini: USERINIT=C:\WINDOWS\system32\userinit.exe, F2 - REG:system.ini: Shell=C:\WINDOWS\explorer.exe F2 - REG:system.ini: VMApplet=rundll32 shell32,Control_RunDLL "sysdm.cpl" ~ Scan Keys in 00mn 00s ---\ Hosts file redirection (O1) ~ Le fichier hosts est sain (The hosts file is clean). ~ Scan Hosts File in 00mn 00s ~ Nombre de lignes (Lines number): 19 ---\ Browser Helper Objects (O2) O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} Orphean Key O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} . (.Adobe Systems Incorporated - Adobe Acrobat IE Helper Version 7.0 for Act.) -- C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll O2 - BHO: CrossriderApp0004479 - {11111111-1111-1111-1111-110011441179} . (.215 Apps - Giant Savings BHO.) -- C:\Program Files\Giant Savings\Giant Savings.dll O2 - BHO: CrossriderApp0026278 - {11111111-1111-1111-1111-110211621178} . (.215 Apps - Solid Savings BHO.) -- C:\Program Files\Solid Savings\Solid Savings.dll O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} Orphean Key O2 - BHO: KeyBar 1.6 - {65f9f6b7-2dae-46fc-bfaf-f88e4af1beca} . (.Conduit Ltd. - Conduit Toolbar.) -- C:\Program Files\KeyBar_1.6\prxtbKeyB.dll O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} . (.Oracle Corporation - Java(TM) Platform SE binary.) -- C:\Program Files\Java\jre7\bin\ssv.dll O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} . (.Microsoft Corporation - WindowsLiveLogin.dll.) -- C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: AVG Security Toolbar - {95B7759C-8C7F-4BF1-B163-73684A933233} . (.Unknown owner - toolbar.dll.) -- C:\Program Files\AVG Secure Search\14.1.0.10\AVG Secure Search_toolbar.dll O2 - BHO: HpWebHelper - {AAAE832A-5FFF-4661-9C8F-369692D1DCB9} . (.TODO: - TODO: .) -- C:\WINDOWS\pchealth\helpctr\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\plugin\WebHelper.dll O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} . (.Skype Technologies S.A. - Skype Click to Call for Internet Explorer.) -- C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} . (.Oracle Corporation - Java(TM) Platform SE binary.) -- C:\Program Files\Java\jre7\bin\jp2ssv.dll O2 - BHO: Yontoo Layers - {FD72061E-9FDE-484D-A58A-0BAB4151CAD8} . (.Yontoo LLC - Yontoo Runtime.) -- C:\Program Files\Yontoo\YontooIEClient.dll ~ Scan BHO in 00mn 00s ---\ Internet Explorer toolbars (O3) O3 - Toolbar: (no name) - [HKLM]{CCC7A320-B3CA-4199-B1A6-9F516DD69829} Orphean Key O3 - Toolbar: AVG Security Toolbar - [HKLM]{95B7759C-8C7F-4BF1-B163-73684A933233} . (.Unknown owner - toolbar.dll.) -- C:\Program Files\AVG Secure Search\14.1.0.10\AVG Secure Search_toolbar.dll O3 - Toolbar: KeyBar 1.6 Toolbar - [HKLM]{65f9f6b7-2dae-46fc-bfaf-f88e4af1beca} . (.Conduit Ltd. - Conduit Toolbar.) -- C:\Program Files\KeyBar_1.6\prxtbKeyB.dll ~ Scan Toolbar in 00mn 00s ---\ Auto loading programs from Registry and folders (O4) O4 - HKLM\..\Run: [Recguard] . (.Unknown owner - Recguard Application.) -- C:\WINDOWS\SMINST\RECGUARD.exe O4 - HKLM\..\Run: [nmapp] . (.Pure Networks, Inc. - Network Magic Application.) -- C:\Program Files\Pure Networks\Network Magic mapp.exe O4 - HKLM\..\Run: [TkBellExe] . (.RealNetworks, Inc. - RealNetworks Scheduler.) -- C:\Program Files\Common Files\Real\Update_OB ealsched.exe O4 - HKLM\..\Run: [AVG_TRAY] . (.AVG Technologies CZ, s.r.o. - AVG Tray Monitor.) -- C:\Program Files\AVG\AVG2012\avgtray.exe O4 - HKLM\..\Run: [vProt] . (.Unknown owner - VProtect Application.) -- C:\Program Files\AVG Secure Search\vprot.exe O4 - HKLM\..\Run: [APSDaemon] . (.Apple Inc. - Apple Push.) -- C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe O4 - HKLM\..\Run: [QuickTime Task] . (.Apple Inc. - QuickTime Task.) -- C:\Program Files\QuickTime\QTTask.exe O4 - HKLM\..\Run: [SunJavaUpdateSched] . (.Sun Microsystems, Inc. - Java(TM) Update Scheduler.) -- C:\Program Files\Common Files\Java\Java Update\jusched.exe O4 - HKLM\..\Run: [OtShot] . (.Unknown owner - OtShot MFC Application.) -- C:\Program Files\OtShot\otshot.exe O4 - HKLM\..\Run: [SearchProtectAll] . (.Conduit - Search Protect by Conduit.) -- C:\Program Files\SearchProtect\bin\cltmng.exe O4 - HKCU\..\Run: [ctfmon.exe] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [PowerBar] . (.Cyberlink, Corp. - PowerBar Application.) -- C:\Program Files\CyberLink DVD Solution\Multimedia Launcher\PowerBar.exe O4 - HKCU\..\Run: [Updater4479.exe] . (.FileProperties_CompanyName - FileProperties_FileDescription.) -- C:\Documents and Settings\Compaq_Owner\Local Settings\Application Data\Updater4479\Updater4479.exe O4 - HKCU\..\Run: [Skype] . (.Skype Technologies S.A. - Skype.) -- C:\Program Files\Skype\Phone\Skype.exe O4 - HKCU\..\Run: [SearchProtect] . (.Conduit - Search Protect by Conduit.) -- C:\Documents and Settings\Compaq_Owner\Application Data\SearchProtect\bin\cltmng.exe O4 - HKCU\..\Run: [Updater26278.exe] . (.215 Apps - Solid Savings exe.) -- C:\Documents and Settings\Compaq_Owner\Local Settings\Application Data\Updater26278\Updater26278.exe O4 - HKUS\S-1-5-21-4002823290-4221860123-174828001-1009\..\Run: [ctfmon.exe] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\ctfmon.exe O4 - HKUS\S-1-5-21-4002823290-4221860123-174828001-1009\..\Run: [PowerBar] . (.Cyberlink, Corp. - PowerBar Application.) -- C:\Program Files\CyberLink DVD Solution\Multimedia Launcher\PowerBar.exe O4 - HKUS\S-1-5-21-4002823290-4221860123-174828001-1009\..\Run: [Updater4479.exe] . (.FileProperties_CompanyName - FileProperties_FileDescription.) -- C:\Documents and Settings\Compaq_Owner\Local Settings\Application Data\Updater4479\Updater4479.exe O4 - HKUS\S-1-5-21-4002823290-4221860123-174828001-1009\..\Run: [Skype] . (.Skype Technologies S.A. - Skype.) -- C:\Program Files\Skype\Phone\Skype.exe O4 - HKUS\S-1-5-21-4002823290-4221860123-174828001-1009\..\Run: [SearchProtect] . (.Conduit - Search Protect by Conduit.) -- C:\Documents and Settings\Compaq_Owner\Application Data\SearchProtect\bin\cltmng.exe O4 - HKUS\S-1-5-21-4002823290-4221860123-174828001-1009\..\Run: [Updater26278.exe] . (.215 Apps - Solid Savings exe.) -- C:\Documents and Settings\Compaq_Owner\Local Settings\Application Data\Updater26278\Updater26278.exe ~ Scan Application in 00mn 00s ---\ Other User Links (O4) O4 - GS\Desktop: AVG 2012.lnk . (.AVG Technologies CZ, s.r.o. - AVG User Interface.) -- C:\Program Files\AVG\AVG2012\avgui.exe O4 - GS\Desktop: Google Chrome.lnk . (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe O4 - GS\Desktop: MBRCheck.lnk . (...) -- C:\Program Files\ZHPDiag\mbrcheck.exe O4 - GS\Desktop: Network Magic.lnk . (.Pure Networks, Inc. - Network Magic Application.) -- C:\Program Files\Pure Networks\Network Magic mapp.exe O4 - GS\Desktop: RealPlayer.lnk . (.RealNetworks, Inc. - RealPlayer.) -- C:\Program Files\Real\RealPlayer ealplay.exe O4 - GS\Desktop: Skype.lnk . (...) -- C:\WINDOWS\Installer\{4E76FF7E-AEBA-4C87-B788-CD47E5425B9D}\SkypeIcon.exe O4 - GS\Desktop: ZHPDiag.lnk . (.Nicolas Coolman - ZHPDiag Setup.) -- C:\Program Files\ZHPDiag\ZHPhep.exe O4 - GS\Desktop: ZHPFix.lnk . (.Nicolas Coolman - ZHPDiag Setup.) -- C:\Program Files\ZHPDiag\ZHPFix\ZHPhep.exe O4 - GS\Desktop: FrostWire 4.20.1.lnk . (.FrostWire Group - FrostWire.) -- C:\Program Files\FrostWire\FrostWire.exe O4 - GS\Desktop: Shortcut to Saved.lnk . (...) -- C:\Documents and Settings\Compaq_Owner\My Documents\FrostWire\Saved ~ Scan Global Startup in 00mn 00s ---\ Extra buttons on main IE button toolbar, or extra items in IE 'Tools' menu (O9) O9 - Extra button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} . (...) -- C:\Program Files\Skype\Toolbars\Internet Explorer\icon.ico O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} . (...) -- C:\Program Files\Microsoft Office\OFFICE11\REFBARH.ICO O9 - Extra button: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} . (...) -- C:\Program Files\PartyGaming\PartyPoker\images\ppicon.ico O9 - Extra button: Internet Connection Help - {E2D4D26B-0180-43a4-B05F-462D6D54C789} . (...) -- C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\conn_support.ico O9 - Extra button: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} -- Orphean Key O9 - Extra button: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} -- C:\Program Files\Messenger\msmsgs.exe (.not file.) ~ Scan IE Extra Buttons in 00mn 00s ---\ Winsock hijacker (Layered Service Provider) (O10) O10 - WLSP:\000000000001\Winsock LSP File . (.Microsoft Corporation - Microsoft Windows Sockets 2.0 Service Provider.) -- C:\WINDOWS\system32\mswsock.dll O10 - WLSP:\000000000002\Winsock LSP File . (.Microsoft Corporation - LDAP RnR Provider DLL.) -- C:\WINDOWS\system32\winrnr.dll O10 - WLSP:\000000000003\Winsock LSP File . (.Microsoft Corporation - Microsoft Windows Sockets 2.0 Service Provider.) -- C:\WINDOWS\system32\mswsock.dll ~ Scan Winsock in 00mn 00s ---\ 'Reset Web Settings' hijack (O14) O14 - IERESET.INF: START_PAGE_URL=START_PAGE_URL=http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome O14 - IERESET.INF: SAFESITE_VALUE=SAFESITE_VALUE="ie.search.msn.com" ~ Scan IE Paramètres WEB in 00mn 00s ---\ ActiveX Objects (Downloaded Program Files) (O16) O16 - DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} ((no name)) - http://fpdownload.macromedia.com/get/flashplayer/current/polarbear/ultrashim.cab ~ Scan Objets ActiveX in 00mn 00s ---\ Lop.com/Domain Hijackers (O17) O17 - HKLM\System\CCS\Services\Tcpip\..\{04987C83-B8A4-4147-9280-485BBE6BF4E0}: DhcpNameServer = 24.200.243.189 24.200.210.241 24.200.228.113 O17 - HKLM\System\CCS\Services\Tcpip\..\{80443072-5384-4D29-A197-604ECE8884D8}: DhcpNameServer = 16.92.3.242 16.92.3.243 16.81.3.243 16.118.3.243 O17 - HKLM\System\CCS\Services\Tcpip\..\{80443072-5384-4D29-A197-604ECE8884D8}: DhcpDomain = americas.hpqcorp.net O17 - HKLM\System\CS1\Services\Tcpip\..\{04987C83-B8A4-4147-9280-485BBE6BF4E0}: DhcpNameServer = 24.200.243.189 24.200.210.241 24.200.228.113 O17 - HKLM\System\CS1\Services\Tcpip\..\{80443072-5384-4D29-A197-604ECE8884D8}: DhcpNameServer = 16.92.3.242 16.92.3.243 16.81.3.243 16.118.3.243 O17 - HKLM\System\CS1\Services\Tcpip\..\{80443072-5384-4D29-A197-604ECE8884D8}: DhcpDomain = americas.hpqcorp.net O17 - HKLM\System\CS2\Services\Tcpip\..\{04987C83-B8A4-4147-9280-485BBE6BF4E0}: DhcpNameServer = 24.200.243.189 24.200.210.241 24.200.228.113 O17 - HKLM\System\CS2\Services\Tcpip\..\{80443072-5384-4D29-A197-604ECE8884D8}: DhcpNameServer = 16.92.3.242 16.92.3.243 16.81.3.243 16.118.3.243 O17 - HKLM\System\CS2\Services\Tcpip\..\{80443072-5384-4D29-A197-604ECE8884D8}: DhcpDomain = americas.hpqcorp.net O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 24.200.243.189 24.200.210.241 24.200.228.113 ~ Scan Domain in 00mn 00s ---\ Extra protocols (O18) O18 - Handler: wlmailhtml - {03C514A3-1EFB-4856-9F99-10D7BE1653C0} . (.Microsoft Corporation - Windows Live Mail.) -- C:\Program Files\Windows Live\Mail\mailcomm.dll O18 - Filter: text/xml - {807553E5-5146-11D5-A672-00B0D022E945} . (.Microsoft Corporation - Microsoft Office XML MIME Filter.) -- C:\Program Files\Common Files\Microsoft Shared\OFFICE11\MSOXMLMF.dll ~ Scan Protocole Additionnel in 00mn 00s ---\ AppInit_DLLs Registry value Autorun (O20) O20 - Winlogon Notify: AtiExtEvent . (.ATI Technologies Inc. - ATI External Event Utility DLL Module.) -- C:\WINDOWS\system32\Ati2evxx.dll O20 - Winlogon Notify: crypt32chain . (.Microsoft Corporation - Crypto API32.) -- C:\WINDOWS\system32\crypt32.dll O20 - Winlogon Notify: cryptnet . (.Microsoft Corporation - Crypto Network Related API.) -- C:\WINDOWS\system32\cryptnet.dll O20 - Winlogon Notify: cscdll . (.Microsoft Corporation - Offline Network Agent.) -- C:\WINDOWS\system32\cscdll.dll O20 - Winlogon Notify: dimsntfy . (.Microsoft Corporation - DIMS Notification Handler.) -- C:\WINDOWS\system32\dimsntfy.dll O20 - Winlogon Notify: ScCertProp . (.Microsoft Corporation - Common DLL to receive Winlogon notification.) -- C:\WINDOWS\system32\wlnotify.dll O20 - Winlogon Notify: Schedule . (.Microsoft Corporation - Common DLL to receive Winlogon notification.) -- C:\WINDOWS\system32\wlnotify.dll O20 - Winlogon Notify: sclgntfy . (.Microsoft Corporation - Secondary Logon Service Notification DLL.) -- C:\WINDOWS\system32\sclgntfy.dll O20 - Winlogon Notify: SensLogn . (.Microsoft Corporation - Common DLL to receive Winlogon notification.) -- C:\WINDOWS\system32\WlNotify.dll O20 - Winlogon Notify: termsrv . (.Microsoft Corporation - Common DLL to receive Winlogon notification.) -- C:\WINDOWS\system32\wlnotify.dll O20 - Winlogon Notify: wlballoon . (.Microsoft Corporation - Common DLL to receive Winlogon notification.) -- C:\WINDOWS\system32\wlnotify.dll ~ Scan Winlogon in 00mn 00s ---\ AppInit_DLLs Registry value Autorun (O20) O20 - AppInit_DLLs: . (...) - C:\Program Files\search~1\datamngr\mgrldr.dll (.not file.) ~ Scan AppInit DLL in 00mn 00s ---\ ShellServiceObjectDelayLoad (O21) O21 - SSODL: PostBootReminder - {7849596a-48ea-486e-8937-a2a3009f31a9} . (.Microsoft Corporation - Windows Shell Common Dll.) -- C:\WINDOWS\system32\SHELL32.dll O21 - SSODL: CDBurn - {fbeb8a05-beee-4442-804e-409d6c4515e9} . (.Microsoft Corporation - Windows Shell Common Dll.) -- C:\WINDOWS\system32\SHELL32.dll O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} . (.Microsoft Corporation - Web Site Monitor.) -- C:\WINDOWS\system32\webcheck.dll O21 - SSODL: SysTray - {35CEC8A3-2BE6-11D2-8773-92E220524153} . (.Microsoft Corporation - Systray shell service object.) -- C:\WINDOWS\system32\stobject.dll O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} . (.Microsoft Corporation - Windows Portable Device Shell Service Objec.) -- C:\WINDOWS\system32\WPDShServiceObj.dll ~ Scan SSODL in 00mn 00s ---\ SharedTaskScheduler (O22) O22 - SharedTaskScheduler: Browseui preloader - {8C7461EF-2B13-11d2-BE35-3078302C2030} . (.Microsoft Corporation - Shell Browser UI Library.) -- C:\WINDOWS\system32\browseui.dll ~ Scan STS/SSO in 00mn 00s ---\ non Microsoft non disabled Windows XP/NT/2000 Services (O23) O23 - Service: (Ati HotKey Poller) . (.ATI Technologies Inc. - ATI External Event Utility EXE Module.) - C:\WINDOWS\system32\Ati2evxx.exe O23 - Service: AVGIDSAgent (AVGIDSAgent) . (.AVG Technologies CZ, s.r.o. - AVG Identity Protection Service.) - C:\Program Files\AVG\AVG2012\avgidsagent.exe O23 - Service: AVG WatchDog (avgwd) . (.AVG Technologies CZ, s.r.o. - AVG Watchdog Service.) - C:\Program Files\AVG\AVG2012\avgwdsvc.exe O23 - Service: Canon Camera Access Library 8 (CCALib8) . (.Canon Inc. - Canon Camera Access Library 8.) - C:\Program Files\Canon\CAL\CALMAIN.exe O23 - Service: Search Protect by Conduit Updater (CltMngSvc) . (.Conduit - Search Protect by Conduit.) - C:\Program Files\SearchProtect\bin\CltMngSvc.exe O23 - Service: Service Google Update (gupdate) (gupdate) . (.Google Inc. - Google Installer.) - C:\Program Files\Google\Update\GoogleUpdate.exe O23 - Service: Java Quick Starter (JavaQuickStarterService) . (.Oracle Corporation - Java(TM) Quick Starter Service.) - C:\Program Files\Java\jre7\bin\jqs.exe O23 - Service: Pure Networks Network Magic Service (nmservice) . (.Pure Networks, Inc. - Network Magic Service.) - C:\Program Files\Pure Networks\Network Magic msrvc.exe O23 - Service: Pml Driver HPZ12 (Pml Driver HPZ12) . (.HP - PML Driver.) - C:\WINDOWS\system32\HPZipm12.exe O23 - Service: Skype C2C Service (Skype C2C Service) . (.Skype Technologies S.A. - Skype C2C Service.) - C:\Documents and Settings\All Users\Application Data\Skype\Toolbars\Skype C2C Service\c2c_service.exe O23 - Service: Skype Updater (SkypeUpdate) . (.Skype Technologies - Skype Updater Service.) - C:\Program Files\Skype\Updater\Updater.exe O23 - Service: (vToolbarUpdater14.1.7) . (.Unknown owner - ToolbarU Application.) - C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\14.1.7\ToolbarUpdater.exe ~ Scan Services in 00mn 04s ---\ Windows Active Desktop & MHTML Editor (O24) O24 - Desktop Component 0: My Current Home Page - file:About:Home O24 - Default MHTML Editor: Last - .(.Microsoft Corporation - Microsoft Office Word.) - C:\Program Files\Microsoft Office\OFFICE11\WINWORD.exe O24 - Desktop General: BackupWallPaper - .(...) - C:\Documents and Settings\Compaq_Owner\Local Settings\Application Data\Microsoft\Wallpaper1.bmp O24 - Desktop General: WallPaper - .(...) - C:\Documents and Settings\Compaq_Owner\Local Settings\Application Data\Microsoft\Wallpaper1.bmp ~ Scan Desktop Component in 00mn 00s ---\ O34 - HKLM BootExecute: (autocheck autochk *) - File not found O34 - HKLM BootExecute: (C:\PROGRA~1\AVG\AVG2012\avgrsx.exe /sync /restart) (.AVG Technologies CZ, s.r.o. - AVG Resident Shield Service.) -- C:\PROGRA~1\AVG\AVG2012\avgrsx.exe ~ Scan Keys in 00mn 00s ---\ Task Planned Automatically(039) O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\Adobe Flash Player Updater.job [830] O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\AppleSoftwareUpdate.job [284] O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job [894] O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job [898] ~ Scan Scheduled Task in 00mn 00s ---\ ActiveSetup Installed Components (O40) O40 - ASIC: Microsoft Windows Media Player - >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (.Microsoft Corporation - Microsoft Windows Media Player Setup Utility.) -- C:\WINDOWS\inf\unregmp2.exe O40 - ASIC: Internet Explorer - >{26923b43-4d38-484f-9b9e-de460746276c} . (.Microsoft Corporation - Windows NT User Data Migration Tool.) -- C:\WINDOWS\system32\shmgrate.exe O40 - ASIC: Outlook Express - >{881dd1c5-3dcf-431b-b061-f3f88e8be88a} . (.Microsoft Corporation - Windows NT User Data Migration Tool.) -- C:\WINDOWS\system32\shmgrate.exe O40 - ASIC: Microsoft NetShow Player - {2179C5D3-EBFF-11CF-B6FD-00AA00B4E220} . (.Microsoft Corporation - Windows Media Player Extension.) -- C:\WINDOWS\system32\wmpdxm.dll O40 - ASIC: Microsoft Windows Media Player 6.4 - {22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (.Microsoft Corporation - Windows Media Player Extension.) -- C:\WINDOWS\system32\wmpdxm.dll O40 - ASIC: DirectAnimation - {283807B5-2C60-11D0-A31D-00AA00B92C03} . (.Microsoft Corporation - DirectX Media -- DirectAnimation.) -- C:\WINDOWS\system32\danim.dll O40 - ASIC: Themes Setup - {2C7339CF-2B09-4501-B3F3-F3508C9228ED} . (.Microsoft Corporation - Windows Theme API.) -- C:\WINDOWS\system32 hemeui.dll O40 - ASIC: Microsoft Outlook Express 6 - {44BBA840-CC51-11CF-AAFA-00AA00B6015C} . (.Microsoft Corporation - Outlook Express Setup Library.) -- C:\Program Files\Outlook Express\setup50.exe O40 - ASIC: NetMeeting 3.01 - {44BBA842-CC51-11CF-AAFA-00AA00B6015B} . (...) -- C:\WINDOWS\INF\msnetmtg.inf O40 - ASIC: Windows Messenger 4.7 - {5945c046-1e7d-11d1-bc44-00c04fd912be} . (...) -- C:\WINDOWS\INF\msmsgs.inf O40 - ASIC: Browsing Enhancements - {630b1da0-b465-11d1-9948-00c04f98bbc9} . (.Microsoft Corporation - Microsoft Internet Explorer FTP Folder Shell Extension.) -- C:\WINDOWS\system32\msieftp.dll O40 - ASIC: Microsoft Windows Media Player - {6BF52A52-394A-11d3-B153-00C04F79FAA6} . (...) -- C:\WINDOWS\INF\wmp11.inf O40 - ASIC: Address Book 6 - {7790769C-0471-11d2-AF11-00C04FA35D02} . (.Microsoft Corporation - Outlook Express Setup Library.) -- C:\Program Files\Outlook Express\setup50.exe O40 - ASIC: Windows Desktop Update - {89820200-ECBD-11cf-8B85-00AA005B4340} . (.Microsoft Corporation - Windows Shell Common Dll.) -- C:\WINDOWS\system32\shell32.dll O40 - ASIC: Internet Explorer 6 - {89820200-ECBD-11cf-8B85-00AA005B4383} . (.Microsoft Corporation - IE 5.0 Per-User Install Utility.) -- C:\WINDOWS\system32\ie4uinit.exe O40 - ASIC: (no name) - {89B4C1CD-B018-4511-B0A1-5476DBF70820} . (.Microsoft Corporation - Microsoft .NET IE SECURITY REGISTRATION.) -- c:\WINDOWS\system32\mscories.dll O40 - ASIC: Google Chrome - {8A69D345-D564-463c-AFF1-A69D9E530F96} . (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\25.0.1364.172\Installer\chrmstp.exe O40 - ASIC: Fax - {8b15971b-5355-4c82-8c07-7e181ea07608} . (...) -- C:\WINDOWS\INF\fxsocm.inf O40 - ASIC: Adobe Flash Player - {D27CDB6E-AE6D-11cf-96B8-444553540000} . (.Adobe Systems, Inc. - Adobe Flash Player 11.6 r602.) -- C:\WINDOWS\system32\Macromed\Flash\Flash32_11_6_602_180.ocx ~ Scan Active Setup in 00mn 00s ---\ Drivers launched at startup (O41) O41 - Driver: (AFD) . (.Microsoft Corporation - Ancillary Function Driver for WinSock.) - C:\WINDOWS\system32\drivers\afd.sys O41 - Driver: (AmdK8) . (.Advanced Micro Devices - AMD Processor Driver.) - C:\WINDOWS\system32\DRIVERS\AmdK8.sys O41 - Driver: (Avgldx86) . (.AVG Technologies CZ, s.r.o. - AVG AVI Loader Driver.) - C:\WINDOWS\system32\DRIVERS\avgldx86.sys O41 - Driver: (Avgmfx86) . (.AVG Technologies CZ, s.r.o. - AVG Resident Shield Minifilter Driver.) - C:\WINDOWS\system32\DRIVERS\avgmfx86.sys O41 - Driver: (Avgtdix) . (.AVG Technologies CZ, s.r.o. - AVG Network connection watcher.) - C:\WINDOWS\system32\DRIVERS\avgtdix.sys O41 - Driver: (avgtp) . (.AVG Technologies - No comment.) - C:\WINDOWS\system32\drivers\avgtpx86.sys O41 - Driver: (Cdrom) . (.Microsoft Corporation - SCSI CD-ROM Driver.) - C:\WINDOWS\system32\DRIVERS\cdrom.sys O41 - Driver: (i8042prt) . (.Microsoft Corporation - i8042 Port Driver.) - C:\WINDOWS\system32\DRIVERS\i8042prt.sys O41 - Driver: (Imapi) . (.Microsoft Corporation - IMAPI Kernel Driver.) - C:\WINDOWS\system32\DRIVERS\imapi.sys O41 - Driver: (IPSec) . (.Microsoft Corporation - IPSec Driver.) - C:\WINDOWS\system32\DRIVERS\ipsec.sys O41 - Driver: (Kbdclass) . (.Microsoft Corporation - Keyboard Class Driver.) - C:\WINDOWS\system32\DRIVERS\kbdclass.sys O41 - Driver: (kbdhid) . (.Microsoft Corporation - HID Mouse Filter Driver.) - C:\WINDOWS\system32\DRIVERS\kbdhid.sys O41 - Driver: (Mouclass) . (.Microsoft Corporation - Mouse Class Driver.) - C:\WINDOWS\system32\DRIVERS\mouclass.sys O41 - Driver: (MRxSmb) . (.Microsoft Corporation - Windows NT SMB Minirdr.) - C:\WINDOWS\system32\DRIVERS\mrxsmb.sys O41 - Driver: (NetBIOS) . (.Microsoft Corporation - NetBIOS interface driver.) - C:\WINDOWS\system32\DRIVERS etbios.sys O41 - Driver: (NetBT) . (.Microsoft Corporation - MBT Transport driver.) - C:\WINDOWS\system32\DRIVERS etbt.sys O41 - Driver: (Processor) . (.Microsoft Corporation - Processor Device Driver.) - C:\WINDOWS\system32\DRIVERS\processr.sys O41 - Driver: (RasAcd) . (.Microsoft Corporation - RAS Automatic Connection Driver.) - C:\WINDOWS\system32\DRIVERS asacd.sys O41 - Driver: (Rdbss) . (.Microsoft Corporation - Redirected Drive Buffering SubSystem Driver.) - C:\WINDOWS\system32\DRIVERS dbss.sys O41 - Driver: (RDPCDD) . (.Microsoft Corporation - RDP Miniport.) - C:\WINDOWS\system32\DRIVERS\RDPCDD.sys O41 - Driver: (redbook) . (.Microsoft Corporation - Redbook Audio Filter Driver.) - C:\WINDOWS\system32\DRIVERS edbook.sys O41 - Driver: (Tcpip) . (.Microsoft Corporation - TCP/IP Protocol Driver.) - C:\WINDOWS\system32\DRIVERS cpip.sys O41 - Driver: (TermDD) . (.Microsoft Corporation - Terminal Server Driver.) - C:\WINDOWS\system32\DRIVERS ermdd.sys O41 - Driver: VGA Display Controller. (VgaSave) . (.Microsoft Corporation - VGA/Super VGA Video Driver.) - C:\WINDOWS\system32\drivers\vga.sys ~ Scan Drivers in 00mn 00s ---\ Software installed (O42) O42 - Logiciel: ATI Control Panel - (...) [HKLM] -- {0BEDBD4E-2D34-47B5-9973-57E62B29307C} O42 - Logiciel: ATI Display Driver - (...) [HKLM] -- ATI Display Driver O42 - Logiciel: AVG 2012 - (.AVG Technologies.) [HKLM] -- AVG O42 - Logiciel: AVG 2012 - (.AVG Technologies.) [HKLM] -- {2F3A3B57-8AB4-4136-8FD2-96A77D5183C1} O42 - Logiciel: AVG 2012 - (.AVG Technologies.) [HKLM] -- {BBFDD98A-16DB-4A78-82A3-12ECCA29F1B0} O42 - Logiciel: AVG Security Toolbar - (.AVG Technologies.) [HKLM] -- AVG Secure Search O42 - Logiciel: Adobe AIR - (.Adobe Systems Inc..) [HKLM] -- Adobe AIR O42 - Logiciel: Adobe AIR - (.Adobe Systems Inc..) [HKLM] -- {B194272D-1F92-46DF-99EB-8D5CE91CB4EC} O42 - Logiciel: Adobe Flash Player 11 ActiveX - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player ActiveX O42 - Logiciel: Adobe Flash Player 11 Plugin - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player Plugin O42 - Logiciel: Adobe Reader 7.0 - (.Adobe Systems Incorporated.) [HKLM] -- {AC76BA86-7AD7-1033-7B44-A70000000000} O42 - Logiciel: Agere Systems PCI-SV92PP Soft Modem - (...) [HKLM] -- Agere Systems Soft Modem O42 - Logiciel: Apple Application Support - (.Apple Inc..) [HKLM] -- {A83279FD-CA4B-4206-9535-90974DE76654} O42 - Logiciel: Apple Software Update - (.Apple Inc..) [HKLM] -- {789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE} O42 - Logiciel: Ask Toolbar - (.Ask.com.) [HKLM] -- AskSBar Uninstall O42 - Logiciel: AstroPop Deluxe from Compaq (remove only) - (.WildTangent.) [HKLM] -- 997DD523-B925-4C73-970B-C201E8F781AD O42 - Logiciel: BlackBerry Device Software Updater - (.Research In Motion Ltd.) [HKLM] -- {070B059B-F742-4532-B9D1-11E1E3887C6C} O42 - Logiciel: Blackhawk Striker 2 from Compaq (remove only) - (.WildTangent.) [HKLM] -- BFAF1EEC-E987-415B-BCB8-80CDB0BC6CDF O42 - Logiciel: Blasterball 2 from Compaq (remove only) - (.WildTangent.) [HKLM] -- 75528D5F-DD82-402E-BA7C-045B7DC6A712 O42 - Logiciel: Bookworm Deluxe from Compaq (remove only) - (.WildTangent.) [HKLM] -- E618FC78-EE4F-4243-8409-078EB5E0B1F6 O42 - Logiciel: Bounce Symphony from Compaq (remove only) - (.WildTangent.) [HKLM] -- 29FF6D07-4A15-41F1-9D5E-E0F3A58012C6 O42 - Logiciel: Bureau En Gros 2.0 - (.IKON.) [HKLM] -- {1F0F3AE8-0098-4373-947F-59A431BB55B9} O42 - Logiciel: Canon Camera Access Library - (.Canon Inc..) [HKLM] -- CAL O42 - Logiciel: Canon DIGITAL CAMERA Solution Disk - Guide d'utilisation des logiciels - (.Canon Inc..) [HKLM] -- Software Guide O42 - Logiciel: Canon Guide d'impression personnelle - (.Canon Inc..) [HKLM] -- Personal Printing Guide O42 - Logiciel: Canon MOV Decoder - (.Canon Inc..) [HKLM] -- Canon MOV Decoder O42 - Logiciel: Canon MOV Encoder - (.Canon Inc..) [HKLM] -- Canon MOV Encoder O42 - Logiciel: Canon MovieEdit Task for ZoomBrowser EX - (.Canon Inc..) [HKLM] -- MovieEditTask O42 - Logiciel: Canon PowerShot SD980 IS_IXUS 200 IS Guide d'utilisation de l'appareil phot - (.Canon Inc..) [HKLM] -- CameraUserGuide-PSSD980IS_IXUS200IS O42 - Logiciel: Canon Utilities CameraWindow - (.Canon Inc..) [HKLM] -- CameraWindowLauncher O42 - Logiciel: Canon Utilities CameraWindow DC - (.Canon Inc..) [HKLM] -- CameraWindowDC O42 - Logiciel: Canon Utilities CameraWindow DC 8 - (.Canon Inc..) [HKLM] -- CameraWindowDC8 O42 - Logiciel: Canon Utilities CameraWindow DC_DV 6 for ZoomBrowser EX - (.Canon Inc..) [HKLM] -- CameraWindowDVC6 O42 - Logiciel: Canon Utilities MyCamera - (.Canon Inc..) [HKLM] -- MyCamera O42 - Logiciel: Canon Utilities MyCamera DC - (.Canon Inc..) [HKLM] -- MyCameraDC O42 - Logiciel: Canon Utilities PhotoStitch - (.Canon Inc..) [HKLM] -- PhotoStitch O42 - Logiciel: Canon Utilities RemoteCapture Task for ZoomBrowser EX - (.Canon Inc..) [HKLM] -- RemoteCaptureTask O42 - Logiciel: Canon Utilities ZoomBrowser EX - (.Canon Inc..) [HKLM] -- ZoomBrowser EX O42 - Logiciel: Canon ZoomBrowser EX Memory Card Utility - (.Canon Inc..) [HKLM] -- ZoomBrowser EX Memory Card Utility O42 - Logiciel: Chuzzle Deluxe from Compaq (remove only) - (.WildTangent.) [HKLM] -- 9448DE42-C017-4A3E-A0BB-C50BF673E9E0 O42 - Logiciel: Cisco Connect - (.Cisco Consumer Products LLC.) [HKLM] -- Cisco Connect O42 - Logiciel: Compaq Connections (remove only) - (...) [HKLM] -- HPOOVClient-5577497 Uninstaller O42 - Logiciel: Compaq Organize - (...) [HKLM] -- {D0122362-6333-4DE4-93F6-A5A2F3CC101A} O42 - Logiciel: Critical Update for Windows Media Player 11 (KB959772) - (.Microsoft Corporation.) [HKLM] -- KB959772_WM11 O42 - Logiciel: Crystal Maze from Compaq (remove only) - (.WildTangent.) [HKLM] -- C43D84CD-EBFC-48D3-A330-7868C8AD415A O42 - Logiciel: Customer Experience Enhancement - (.Hewlett-Packard.) [HKLM] -- InstallShield_{23012310-3E05-46A5-88A9-C6CBCABCAC79} O42 - Logiciel: DVD Solution - (...) [HKLM] -- {B97CF5C3-0487-11D8-A36E-0050BAE317E1} O42 - Logiciel: Easy Internet Sign-up - (.Hewlett-Packard.) [HKLM] -- InstallShield_{8105684D-8CA6-440D-8F58-7E5FD67A499D} O42 - Logiciel: FATE from Compaq (remove only) - (.WildTangent.) [HKLM] -- 85CF9BF3-1057-468C-962D-31BAABC6AC72 O42 - Logiciel: FrostWire 4.20.1 - (.FrostWire, LLC.) [HKLM] -- FrostWire O42 - Logiciel: Google Chrome - (.Google Inc..) [HKLM] -- Google Chrome O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM] -- {A92DAB39-4E2C-4304-9AB6-BC44E68B55E2} O42 - Logiciel: HP Boot Optimizer - (.Hewlett-Packard Company.) [HKLM] -- {3BA95526-6AE0-4B87-A62D-17187EF565FC} O42 - Logiciel: HP DVD Play 1.0 - (...) [HKLM] -- {45D707E9-F3C4-11D9-A373-0050BAE317E1} O42 - Logiciel: HP Game Console and games - (.WildTangent.) [HKLM] -- HP Game Console O42 - Logiciel: HP Imaging Device Functions 6.0 - (.HP.) [HKLM] -- HP Imaging Device Functions O42 - Logiciel: HP PSC & OfficeJet 4.7 - (.HP.) [HKLM] -- {5469D537-9B44-4c78-BF2D-5F9807564F74} O42 - Logiciel: HP Photosmart Premier Software 6.0 - (.HP.) [HKLM] -- HP Photo & Imaging O42 - Logiciel: HP Rhapsody - (...) [HKLM] -- HP Rhapsody O42 - Logiciel: HP Support Overview - (.Hewlett-Packard Company.) [HKLM] -- {D7DBA21A-CDE5-42EC-BB1C-AE4B3E616B9A}_is1 O42 - Logiciel: HP Update - (.Hewlett-Packard.) [HKLM] -- {818ABC3C-635C-4651-8183-D0E9640B7DD1} O42 - Logiciel: HP Web Helper - (...) [HKLM] -- {DAAD5187-62C5-4AD6-A526-803C18C4944D} O42 - Logiciel: Haali Media Splitter - (...) [HKLM] -- HaaliMkx O42 - Logiciel: High Definition Audio Driver Package - KB888111 - (.Microsoft Corporation.) [HKLM] -- KB888111WXPSP2 O42 - Logiciel: Hotfix for Windows Media Format 11 SDK (KB929399) - (.Microsoft Corporation.) [HKLM] -- KB929399 O42 - Logiciel: Hotfix for Windows Media Player 11 (KB939683) - (.Microsoft Corporation.) [HKLM] -- KB939683 O42 - Logiciel: Hotfix for Windows XP (KB2158563) - (.Microsoft Corporation.) [HKLM] -- KB2158563 O42 - Logiciel: Hotfix for Windows XP (KB2443685) - (.Microsoft Corporation.) [HKLM] -- KB2443685 O42 - Logiciel: Hotfix for Windows XP (KB2570791) - (.Microsoft Corporation.) [HKLM] -- KB2570791 O42 - Logiciel: Hotfix for Windows XP (KB2633952) - (.Microsoft Corporation.) [HKLM] -- KB2633952 O42 - Logiciel: Hotfix for Windows XP (KB2756822) - (.Microsoft Corporation.) [HKLM] -- KB2756822 O42 - Logiciel: Hotfix for Windows XP (KB2779562) - (.Microsoft Corporation.) [HKLM] -- KB2779562 O42 - Logiciel: Hotfix for Windows XP (KB952287) - (.Microsoft Corporation.) [HKLM] -- KB952287 O42 - Logiciel: Hotfix for Windows XP (KB954550-v5) - (.Microsoft Corporation.) [HKLM] -- KB954550-v5 O42 - Logiciel: Hotfix for Windows XP (KB961118) - (.Microsoft Corporation.) [HKLM] -- KB961118 O42 - Logiciel: Hotfix for Windows XP (KB970653-v3) - (.Microsoft Corporation.) [HKLM] -- KB970653-v3 O42 - Logiciel: Hotfix for Windows XP (KB976098-v2) - (.Microsoft Corporation.) [HKLM] -- KB976098-v2 O42 - Logiciel: Hotfix for Windows XP (KB979306) - (.Microsoft Corporation.) [HKLM] -- KB979306 O42 - Logiciel: Hotfix for Windows XP (KB981793) - (.Microsoft Corporation.) [HKLM] -- KB981793 O42 - Logiciel: Insaniquarium Deluxe from Compaq (remove only) - (.WildTangent.) [HKLM] -- 5AF1DD17-7B06-45EF-8592-2E524E458BAB O42 - Logiciel: Java 7 Update 17 - (.Oracle.) [HKLM] -- {26A24AE4-039D-4CA4-87B4-2F83217017FF} O42 - Logiciel: Junk Mail filter update - (.Microsoft Corporation.) [HKLM] -- {8E5233E1-7495-44FB-8DEB-4BE906D59619} O42 - Logiciel: KeyBar 1.6 Toolbar - (.KeyBar 1.6.) [HKLM] -- KeyBar_1.6 Toolbar O42 - Logiciel: Lemonade Tycoon 2 from Compaq (remove only) - (.WildTangent.) [HKLM] -- 63E4EC24-7173-4E1F-9C77-B4403CBCF91F O42 - Logiciel: Lexibox Deluxe from Compaq (remove only) - (.WildTangent.) [HKLM] -- F05A08BF-E600-4FBD-A53A-3D47296B1275 O42 - Logiciel: MSVCRT - (.Microsoft.) [HKLM] -- {22B775E7-6C42-4FC5-8E10-9A5E3257BD94} O42 - Logiciel: MSXML 4.0 SP2 (KB954430) - (.Microsoft Corporation.) [HKLM] -- {86493ADD-824D-4B8E-BD72-8C5DCDC52A71} O42 - Logiciel: MSXML 4.0 SP2 (KB973688) - (.Microsoft Corporation.) [HKLM] -- {F662A8E6-F4DC-41A2-901E-8C11F044BDEC} O42 - Logiciel: MSXML 4.0 SP2 and SOAP Toolkit 3.0 - (.Webroot Software, Inc..) [HKLM] -- {32343DB6-9A52-40C9-87E4-5E7C79791C87} O42 - Logiciel: MSXML 6.0 Parser (KB925673) - (.Microsoft Corporation.) [HKLM] -- {FE9126DB-5F84-495A-BB46-3C724F1C2D08} O42 - Logiciel: Mah Jong Quest from Compaq (remove only) - (.WildTangent.) [HKLM] -- 422C7575-C10D-4795-87FA-9972765379E6 O42 - Logiciel: Microsoft Choice Guard - (.Microsoft Corporation.) [HKLM] -- {F0E12BBA-AD66-4022-A453-A1C8A0C4D570} O42 - Logiciel: Microsoft Compression Client Pack 1.0 for Windows XP - (.Microsoft Corporation.) [HKLM] -- MSCompPackV1 O42 - Logiciel: Microsoft Kernel-Mode Driver Framework Feature Pack 1.5 - (.Microsoft Corporation.) [HKLM] -- Wdf01005 O42 - Logiciel: Microsoft Money 2006 - (.Microsoft.) [HKLM] -- Money2006b O42 - Logiciel: Microsoft Silverlight - (.Microsoft Corporation.) [HKLM] -- {89F4137D-6C26-4A84-BDB8-2E5A4BB71E00} O42 - Logiciel: Microsoft User-Mode Driver Framework Feature Pack 1.0 - (.Microsoft Corporation.) [HKLM] -- Wudf01000 O42 - Logiciel: Microsoft Works - (.Microsoft Corporation.) [HKLM] -- {416D80BA-6F6D-4672-B7CF-F54DA2F80B44} O42 - Logiciel: Multimedia Launcher - (...) [HKLM] -- {1FBF6C24-C1FD-4101-A42B-0C564F9E8E79} O42 - Logiciel: Network Magic - (.Pure Networks.) [HKLM] -- {25B9A03C-28C3-4F39-AA3A-37ACE91BF759} O42 - Logiciel: PDFCreator - (.Frank Heindörfer, Philip Chinery.) [HKLM] -- {0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D} O42 - Logiciel: PartyPoker - (.PartyGaming.) [HKLM] -- PartyPoker O42 - Logiciel: Polar Bowler from Compaq (remove only) - (.WildTangent.) [HKLM] -- 05E21449-3BA3-42BF-BBDA-95205F4EA40A O42 - Logiciel: Polar Golfer from Compaq (remove only) - (.WildTangent.) [HKLM] -- 3330A279-CC39-4A17-AE19-DA464B26AD9A O42 - Logiciel: Puzzle Express from Compaq (remove only) - (.WildTangent.) [HKLM] -- E1A0F769-A43A-4DDB-9F73-12791E453557 O42 - Logiciel: Python 2.2 pywin32 extensions (build 203) - (...) [HKLM] -- pywin32-py2.2 O42 - Logiciel: Python 2.2.3 - (.PythonLabs at Zope Corporation.) [HKLM] -- Python 2.2.3 O42 - Logiciel: QuickTime - (.Apple Inc..) [HKLM] -- {AF0CE7C0-A3E4-4D73-988B-B29187EC6E9A} O42 - Logiciel: Quicken 2006 - (.Intuit.) [HKLM] -- {2818095F-FB6C-42C8-827E-0A406CC9AFF5} O42 - Logiciel: RealPlayer - (...) [HKLM] -- RealPlayer 6.0 O42 - Logiciel: Search Protect by conduit - (.Conduit.) [HKLM] -- SearchProtect O42 - Logiciel: Security Update for CAPICOM (KB931906) - (.Microsoft Corporation.) [HKLM] -- KB931906 O42 - Logiciel: Security Update for CAPICOM (KB931906) - (.Microsoft Corporation.) [HKLM] -- {0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A} O42 - Logiciel: Security Update for Step By Step Interactive Training (KB923723) - (.Microsoft Corporation.) [HKLM] -- KB923723 O42 - Logiciel: Security Update for Windows Media Player (KB2378111) - (.Microsoft Corporation.) [HKLM] -- KB2378111_WM9 O42 - Logiciel: Security Update for Windows Media Player (KB952069) - (.Microsoft Corporation.) [HKLM] -- KB952069_WM9 O42 - Logiciel: Security Update for Windows Media Player (KB954155) - (.Microsoft Corporation.) [HKLM] -- KB954155_WM9 O42 - Logiciel: Security Update for Windows Media Player (KB968816) - (.Microsoft Corporation.) [HKLM] -- KB968816_WM9 O42 - Logiciel: Security Update for Windows Media Player (KB973540) - (.Microsoft Corporation.) [HKLM] -- KB973540_WM9 O42 - Logiciel: Security Update for Windows Media Player (KB975558) - (.Microsoft Corporation.) [HKLM] -- KB975558_WM8 O42 - Logiciel: Security Update for Windows Media Player (KB978695) - (.Microsoft Corporation.) [HKLM] -- KB978695_WM9 O42 - Logiciel: Security Update for Windows Media Player 10 (KB936782) - (.Microsoft Corporation.) [HKLM] -- KB936782_WMP10 O42 - Logiciel: Security Update for Windows Media Player 11 (KB936782) - (.Microsoft Corporation.) [HKLM] -- KB936782_WMP11 O42 - Logiciel: Security Update for Windows Media Player 11 (KB954154) - (.Microsoft Corporation.) [HKLM] -- KB954154_WM11 O42 - Logiciel: Security Update for Windows XP (KB2079403) - (.Microsoft Corporation.) [HKLM] -- KB2079403 O42 - Logiciel: Security Update for Windows XP (KB2115168) - (.Microsoft Corporation.) [HKLM] -- KB2115168 O42 - Logiciel: Security Update for Windows XP (KB2121546) - (.Microsoft Corporation.) [HKLM] -- KB2121546 O42 - Logiciel: Security Update for Windows XP (KB2160329) - (.Microsoft Corporation.) [HKLM] -- KB2160329 O42 - Logiciel: Security Update for Windows XP (KB2183461) - (.Microsoft Corporation.) [HKLM] -- KB2183461 O42 - Logiciel: Security Update for Windows XP (KB2229593) - (.Microsoft Corporation.) [HKLM] -- KB2229593 O42 - Logiciel: Security Update for Windows XP (KB2259922) - (.Microsoft Corporation.) [HKLM] -- KB2259922 O42 - Logiciel: Security Update for Windows XP (KB2279986) - (.Microsoft Corporation.) [HKLM] -- KB2279986 O42 - Logiciel: Security Update for Windows XP (KB2286198) - (.Microsoft Corporation.) [HKLM] -- KB2286198 O42 - Logiciel: Security Update for Windows XP (KB2296011) - (.Microsoft Corporation.) [HKLM] -- KB2296011 O42 - Logiciel: Security Update for Windows XP (KB2296199) - (.Microsoft Corporation.) [HKLM] -- KB2296199 O42 - Logiciel: Security Update for Windows XP (KB2347290) - (.Microsoft Corporation.) [HKLM] -- KB2347290 O42 - Logiciel: Security Update for Windows XP (KB2360131) - (.Microsoft Corporation.) [HKLM] -- KB2360131 O42 - Logiciel: Security Update for Windows XP (KB2360937) - (.Microsoft Corporation.) [HKLM] -- KB2360937 O42 - Logiciel: Security Update for Windows XP (KB2387149) - (.Microsoft Corporation.) [HKLM] -- KB2387149 O42 - Logiciel: Security Update for Windows XP (KB2393802) - (.Microsoft Corporation.) [HKLM] -- KB2393802 O42 - Logiciel: Security Update for Windows XP (KB2412687) - (.Microsoft Corporation.) [HKLM] -- KB2412687 O42 - Logiciel: Security Update for Windows XP (KB2416400) - (.Microsoft Corporation.) [HKLM] -- KB2416400 O42 - Logiciel: Security Update for Windows XP (KB2419632) - (.Microsoft Corporation.) [HKLM] -- KB2419632 O42 - Logiciel: Security Update for Windows XP (KB2423089) - (.Microsoft Corporation.) [HKLM] -- KB2423089 O42 - Logiciel: Security Update for Windows XP (KB2436673) - (.Microsoft Corporation.) [HKLM] -- KB2436673 O42 - Logiciel: Security Update for Windows XP (KB2440591) - (.Microsoft Corporation.) [HKLM] -- KB2440591 O42 - Logiciel: Security Update for Windows XP (KB2443105) - (.Microsoft Corporation.) [HKLM] -- KB2443105 O42 - Logiciel: Security Update for Windows XP (KB2476490) - (.Microsoft Corporation.) [HKLM] -- KB2476490 O42 - Logiciel: Security Update for Windows XP (KB2476687) - (.Microsoft Corporation.) [HKLM] -- KB2476687 O42 - Logiciel: Security Update for Windows XP (KB2478960) - (.Microsoft Corporation.) [HKLM] -- KB2478960 O42 - Logiciel: Security Update for Windows XP (KB2478971) - (.Microsoft Corporation.) [HKLM] -- KB2478971 O42 - Logiciel: Security Update for Windows XP (KB2479628) - (.Microsoft Corporation.) [HKLM] -- KB2479628 O42 - Logiciel: Security Update for Windows XP (KB2479943) - (.Microsoft Corporation.) [HKLM] -- KB2479943 O42 - Logiciel: Security Update for Windows XP (KB2481109) - (.Microsoft Corporation.) [HKLM] -- KB2481109 O42 - Logiciel: Security Update for Windows XP (KB2482017) - (.Microsoft Corporation.) [HKLM] -- KB2482017 O42 - Logiciel: Security Update for Windows XP (KB2483185) - (.Microsoft Corporation.) [HKLM] -- KB2483185 O42 - Logiciel: Security Update for Windows XP (KB2485376) - (.Microsoft Corporation.) [HKLM] -- KB2485376 O42 - Logiciel: Security Update for Windows XP (KB2485663) - (.Microsoft Corporation.) [HKLM] -- KB2485663 O42 - Logiciel: Security Update for Windows XP (KB2491683) - (.Microsoft Corporation.) [HKLM] -- KB2491683 O42 - Logiciel: Security Update for Windows XP (KB2497640) - (.Microsoft Corporation.) [HKLM] -- KB2497640 O42 - Logiciel: Security Update for Windows XP (KB2503658) - (.Microsoft Corporation.) [HKLM] -- KB2503658 O42 - Logiciel: Security Update for Windows XP (KB2503665) - (.Microsoft Corporation.) [HKLM] -- KB2503665 O42 - Logiciel: Security Update for Windows XP (KB2506212) - (.Microsoft Corporation.) [HKLM] -- KB2506212 O42 - Logiciel: Security Update for Windows XP (KB2506223) - (.Microsoft Corporation.) [HKLM] -- KB2506223 O42 - Logiciel: Security Update for Windows XP (KB2507618) - (.Microsoft Corporation

Utilisateur anonyme · Answer

Bonsoir

Le rapport est incomplet.
Je t'ai demandé de faire comme ceci

Pour transmettre le rapport clique sur ce lien:
http://pjjoint.malekal.com/

Si problème utilise un des suivants

https://forums-fec.be/upload
https://www.cjoint.com/


Regarde sur le bureau

Sélectionne le fichier ZHPDiag.txt.

Clique sur "Cliquez ici pour déposer le fichier".

Un lien de cette forme :

http://www.cijoint.com/cjlink.php?file=cj200905/cijSKAP5fU.txt

est ajouté dans la page.

Copie ce lien dans ta réponse.  

@+

Minette Chanel · Answer

Bonsoir Guillaume, en ouvrant mon ordinateur aujourd'hui mon anti-virus AVG m'affichais que j'avais un virus, alors j'ai fait une analyse complète et mis en quarantaine... j'ai finalement réussi à télécharger AdwCleaner et m'a sorti le même résultat du fameux virus que j'ai mis en quarantaine. Mais malheureusement ***AUCUN rapport m'est apparue, alors je ne sais plus quoi faire et quelle marche à suivre pour me débarrasser de ce virus!! Et ma page web s'ouvre encore sur searchnu.com/406 

J'attend de tes nouvelles et encore merci pour l'aide que tu m'apporte j'apprécie beaucoup...

P.S :: voici le nom de ce virus :: UPDATER 26278.exe

Utilisateur anonyme · Answer

Bonsoir

J'attends un rapport ZHPDiag;merci 
https://forums.commentcamarche.net/forum/affich-27388836-page-d-acceuil#15

@+

Minette Chanel · Answer

voici le lien du rapport merci bcp ::

https://pjjoint.malekal.com/files.php?id=ZHPDiag_20130319_w5j10e14b8z12

Utilisateur anonyme · Answer

Bonjour

On commence par Malwaresbytes
Tu le mets à jour et ensuite tu lances une analyse rapide.
Tu supprimes bien tout ce qu'il trouve.
Et tu me postes son rapport

Merci

@+

Minette Chanel · Answer

voici le rapport pour Malwarebytes------------

Malwarebytes Anti-Malware (Essai) 1.70.0.1100
www.malwarebytes.org

Version de la base de données: v2013.03.20.09

Windows XP Service Pack 3 x86 NTFS
Internet Explorer 6.0.2900.5512
Compaq_Owner :: SHELBY [administrateur]

Protection: Désactivé

2013-03-20 13:16:25
mbam-log-2013-03-20 (13-16-25).txt

Type d'examen: Examen rapide
Options d'examen activées: Mémoire | Démarrage | Registre | Système de fichiers | Heuristique/Extra | Heuristique/Shuriken | PUP | PUM
Options d'examen désactivées: P2P
Elément(s) analysé(s): 211780
Temps écoulé: 12 minute(s), 57 seconde(s)

Processus mémoire détecté(s): 0
(Aucun élément nuisible détecté)

Module(s) mémoire détecté(s): 0
(Aucun élément nuisible détecté)

Clé(s) du Registre détectée(s): 1
HKCU\SOFTWARE\CROSSRIDER (Adware.GamePlayLab) -> Mis en quarantaine et supprimé avec succès.

Valeur(s) du Registre détectée(s): 1
HKCU\Software\Crossrider|215AppVerifier (Adware.GamePlayLab) -> Données: 9a7589f0075b6d9e2175468198d0dacc -> Mis en quarantaine et supprimé avec succès.

Elément(s) de données du Registre détecté(s): 0
(Aucun élément nuisible détecté)

Dossier(s) détecté(s): 0
(Aucun élément nuisible détecté)

Fichier(s) détecté(s): 0
(Aucun élément nuisible détecté)

(fin)

Utilisateur anonyme · Answer

Bonsoir


On nettoie et on reprend

 Télécharge DelFix de Xplode

Lance le.
Tu as 5 choix :

 Réactiver l'UAC
 Supprimer les outils de désinfection (cocher par défaut)
Effectuer une sauvegarde du registre
 Purger la restauration de système
Réinitialisation des paramètres usine

Tu coches ceux qui sont en gras 
et tu exécutes
Le rapport se trouve ici généralement
C:\DelFix.txt 
 
@+

Minette Chanel · Answer

voici le rapport ..j'ai vraiment hâte de régler le problème mon ordi est tellement lente grrr MERCI GUILLAUME très heureuse que tu m'offres ton aide :)))

# DelFix v10.1 - Logfile created 21/03/2013 at 17:32:04
# Updated 23/02/2013 by Xplode
# Username : Compaq_Owner - SHELBY

~ Removing disinfection tools ...


~ Creating registry backup ... OK

~ Cleaning system restore ...

Deleted : RP #730 [Software Distribution Service 3.0 | 12/21/2012 09:11:40]
Deleted : RP #731 [System Checkpoint | 12/23/2012 16:39:42]
Deleted : RP #732 [System Checkpoint | 12/24/2012 17:18:44]
Deleted : RP #733 [System Checkpoint | 12/25/2012 19:17:20]
Deleted : RP #734 [System Checkpoint | 12/26/2012 21:19:01]
Deleted : RP #735 [System Checkpoint | 12/27/2012 21:58:15]
Deleted : RP #736 [System Checkpoint | 12/28/2012 22:15:53]
Deleted : RP #737 [System Checkpoint | 12/29/2012 23:13:26]
Deleted : RP #738 [System Checkpoint | 01/01/2013 00:45:41]
Deleted : RP #739 [System Checkpoint | 01/02/2013 01:38:22]
Deleted : RP #740 [System Checkpoint | 01/03/2013 02:19:26]
Deleted : RP #741 [System Checkpoint | 01/04/2013 02:19:36]
Deleted : RP #742 [System Checkpoint | 01/05/2013 03:37:41]
Deleted : RP #743 [Software Distribution Service 3.0 | 01/05/2013 07:41:45]
Deleted : RP #744 [System Checkpoint | 01/06/2013 20:33:03]
Deleted : RP #745 [System Checkpoint | 01/07/2013 21:42:34]
Deleted : RP #746 [System Checkpoint | 01/08/2013 22:33:38]
Deleted : RP #747 [System Checkpoint | 01/09/2013 23:03:51]
Deleted : RP #748 [Software Distribution Service 3.0 | 01/10/2013 09:13:05]
Deleted : RP #749 [System Checkpoint | 01/11/2013 20:33:28]
Deleted : RP #750 [System Checkpoint | 01/13/2013 18:38:20]
Deleted : RP #751 [System Checkpoint | 01/14/2013 19:04:08]
Deleted : RP #752 [System Checkpoint | 01/15/2013 22:24:55]
Deleted : RP #753 [Software Distribution Service 3.0 | 01/16/2013 08:00:36]
Deleted : RP #754 [Installed Java 7 Update 11 | 01/17/2013 16:23:32]
Deleted : RP #755 [System Checkpoint | 01/19/2013 20:46:23]
Deleted : RP #756 [System Checkpoint | 01/20/2013 21:02:39]
Deleted : RP #757 [System Checkpoint | 01/21/2013 23:11:46]
Deleted : RP #758 [System Checkpoint | 01/23/2013 00:54:47]
Deleted : RP #759 [System Checkpoint | 01/24/2013 16:45:46]
Deleted : RP #760 [System Checkpoint | 01/25/2013 19:47:57]
Deleted : RP #761 [System Checkpoint | 01/26/2013 21:11:20]
Deleted : RP #762 [System Checkpoint | 01/27/2013 22:37:14]
Deleted : RP #763 [System Checkpoint | 01/28/2013 22:50:38]
Deleted : RP #764 [System Checkpoint | 01/29/2013 23:23:24]
Deleted : RP #765 [System Checkpoint | 01/31/2013 01:14:01]
Deleted : RP #766 [System Checkpoint | 02/01/2013 05:24:53]
Deleted : RP #767 [System Checkpoint | 02/02/2013 19:09:53]
Deleted : RP #768 [System Checkpoint | 02/03/2013 19:53:14]
Deleted : RP #769 [System Checkpoint | 02/05/2013 00:23:45]
Deleted : RP #770 [System Checkpoint | 02/07/2013 00:09:22]
Deleted : RP #771 [Removed Java 7 Update 7 | 02/07/2013 15:49:50]
Deleted : RP #772 [Installed Java 7 Update 13 | 02/07/2013 15:50:20]
Deleted : RP #773 [System Checkpoint | 02/08/2013 16:12:45]
Deleted : RP #774 [System Checkpoint | 02/10/2013 16:28:16]
Deleted : RP #775 [System Checkpoint | 02/11/2013 19:49:41]
Deleted : RP #776 [System Checkpoint | 02/12/2013 22:12:46]
Deleted : RP #777 [System Checkpoint | 02/13/2013 22:21:57]
Deleted : RP #778 [Software Distribution Service 3.0 | 02/14/2013 07:31:26]
Deleted : RP #779 [System Checkpoint | 02/15/2013 13:36:39]
Deleted : RP #780 [System Checkpoint | 02/16/2013 14:34:12]
Deleted : RP #781 [System Checkpoint | 02/17/2013 17:07:25]
Deleted : RP #782 [System Checkpoint | 02/18/2013 21:05:36]
Deleted : RP #783 [System Checkpoint | 02/19/2013 23:24:40]
Deleted : RP #784 [System Checkpoint | 02/21/2013 06:21:42]
Deleted : RP #785 [Removed Java 7 Update 13 | 02/22/2013 11:25:24]
Deleted : RP #786 [Installed Java 7 Update 15 | 02/22/2013 11:26:16]
Deleted : RP #787 [System Checkpoint | 02/23/2013 17:11:35]
Deleted : RP #788 [System Checkpoint | 02/24/2013 20:21:43]
Deleted : RP #789 [System Checkpoint | 02/25/2013 20:29:21]
Deleted : RP #790 [System Checkpoint | 02/26/2013 20:53:37]
Deleted : RP #791 [System Checkpoint | 02/27/2013 21:28:05]
Deleted : RP #792 [System Checkpoint | 02/28/2013 23:21:11]
Deleted : RP #793 [System Checkpoint | 03/04/2013 20:38:32]
Deleted : RP #794 [System Checkpoint | 03/05/2013 21:11:59]
Deleted : RP #795 [Removed Java 7 Update 15 | 03/06/2013 20:02:38]
Deleted : RP #796 [Installed Java 7 Update 17 | 03/06/2013 20:03:11]
Deleted : RP #797 [System Checkpoint | 03/07/2013 20:17:13]
Deleted : RP #798 [System Checkpoint | 03/08/2013 20:36:41]
Deleted : RP #799 [System Checkpoint | 03/11/2013 15:44:26]
Deleted : RP #800 [System Checkpoint | 03/12/2013 20:20:59]
Deleted : RP #801 [Software Distribution Service 3.0 | 03/13/2013 07:01:12]
Deleted : RP #802 [System Checkpoint | 03/14/2013 08:48:44]
Deleted : RP #803 [System Checkpoint | 03/15/2013 20:23:32]
Deleted : RP #804 [System Checkpoint | 03/17/2013 18:45:06]
Deleted : RP #805 [Printer Driver PDFCreator Installed | 03/17/2013 22:33:53]
Deleted : RP #806 [System Checkpoint | 03/18/2013 22:59:07]
Deleted : RP #807 [System Checkpoint | 03/19/2013 22:59:25]
Deleted : RP #808 [System Checkpoint | 03/20/2013 23:04:56]
Deleted : RP #809 [Software Distribution Service 3.0 | 03/21/2013 05:55:40]

New restore point created !

~ Resetting system settings ... OK

########## - EOF - ##########

Utilisateur anonyme · Answer

Bonsoir


Ouvre ce lien et télécharge ZHPDiag de Nicolas Coolman : 

https://www.zebulon.fr/telechargements/securite/systeme/zhpdiag.html

Ou

https://www.commentcamarche.net/telecharger/utilitaires/24803-zhpdiag/

Serveur N°2

Ou

http://www.premiumorange.com/zeb-help-process/zhpdiag.html 
en bas de la page ZHP avec un numéro de version.
 
Une fois le téléchargement achevé, 

Double-clique sur l'icône pour lancer le programme.  Sous Vista ; Seven ou Windows 8 clic droit «  exécuter en tant que administrateur » 

 
Clique sur  la loupe avec le signe +   pour lancer l'analyse.

Laisse l'outil travailler, il peut être assez long. 

Ferme ZHPDiag en fin d'analyse. 


Pour transmettre le rapport clique sur ce lien: 
http://pjjoint.malekal.com/

Si problème utilise un des suivants

https://forums-fec.be/upload 
 https://www.cjoint.com/


Regarde sur le bureau
 
Sélectionne le fichier ZHPDiag.txt. 

Clique sur "Cliquez ici pour déposer le fichier". 

Un lien de cette forme : 

http://www.cijoint.com/cjlink.php?file=cj200905/cijSKAP5fU.txt 

est ajouté dans la page. 

Copie ce lien dans ta réponse.

Merci

@+

Minette Chanel · Answer

Guillaume ça fait depuis dimanche dernier que nous essayons de régler le fameux problème et je t'en remercie, sauf que régler une étape à la fois, par jour, étant donné que nous sommes pas dans le même fuseau horaire ça commence à être long. Pendant ton absence y aurait-il quelqu'un d'autre qui pourrait gérer mon cas??? J'apprécierais beaucoup si c'était possible.... J'ai vraiment hâte que tout rentre dans l'ordre........

Merci de ta compréhension! 
Minette :)

Utilisateur anonyme · Answer

Bonjour

Je ne vois aucun rapport ZHPDiag

@+

Utilisateur anonyme · Answer

Re

On reprend avec Adwcleaner.
Télécharge AdwCleaner ( d'Xplode ) sur ton bureau. 
Lance le, clique sur [Suppression]   puis patiente le temps du scan. 
Lorsque le message indiquant qu'AdwCleaner a détecté une variante spécifique d'adware s'affiche, clique sur  [OK]   
- L'ordinateur va redémarrer tout seul. Redémarre-le en mode normal. 
- AdwCleaner s'ouvrira normalement, avec comme seul choix possible [Suppression] 
- Clique dessus, puis patiente pendant la suppression. 
- Une fois la suppression effectuée, AdwCleaner t'invitera à redémarrer l'ordinateur 
- Au redémarrage, un rapport s'ouvrira. Poste le sur le forum. 


Note : Le rapport est également sauvegardé sous C:\AdwCleaner[S1].txt
Les toolbars, c'est pas obligatoire ( par Malekal ) :https://forum.malekal.com/viewtopic.php?t=6173&start= 


@+

Minette Chanel · Answer

Bonjour, j'imagine que ce n'est pas normal attendre 30 min pour avoir le rapport de AdwCleaner, donc la dernière fois que j'avais essayé de télécharger le logiciel et bien ça ne fonctionnait pas et c'est pareil aujourd'hui... :((
Quelle est l'étape suivante à suivre Merci!

Utilisateur anonyme · Answer

Re

La voici:

Utilisation de l'outil ZHPFix : 

* Copie  tout le texte présent dans l'encadré ci-dessous (tu le sélectionnes avec ta souris / Clique droit dessus et choisis "copier" ou fait Ctrl+C ) 
-------------------------------------------------------------------------------------------------


[MD5.96261D590C12F5D47DA973AE882C58F0] - (.FileProperties_CompanyName - FileProperties_FileDescription.) -- C:\Documents and Settings\Compaq_Owner\Local Settings\Application Data\Updater4479\Updater4479.exe   [206336] [PID.500]
M0 - MFSP: prefs.js [Compaq_Owner - tr46rjmh.default] http://search.babylon.com
M2 - MFEP: prefs.js [Compaq_Owner - tr46rjmh.default\9518042e-7ad6-4dac-b377-056e28d00c8f@f1cc0a13-4df1-4d66-938f-088db8838882.com] [] Solid Savings v (.215 Apps.)
M2 - MFEP: prefs.js [Compaq_Owner - tr46rjmh.default\crossriderapp4479@crossrider.com] [] Giant Savings v (.215 Apps.)
M2 - MFEP: prefs.js [Compaq_Owner - tr46rjmh.default\ffxtlbr@babylon.com] [] Babylon v1.2.0 (.Babylon.)
P2 - FPN:Firefox Plugin Navigator . (.Ask.com - Ask Toolbar Plugin Stub for 32-bit Windows.) -- C:\Program Files\Mozilla Firefox\Plugins\NPAskSBr.dll    
O2 - BHO: CrossriderApp0004479 - {11111111-1111-1111-1111-110011441179} . (.215 Apps - Giant Savings BHO.) -- C:\Program Files\Giant Savings\Giant Savings.dll
O2 - BHO: CrossriderApp0026278 - {11111111-1111-1111-1111-110211621178} . (.215 Apps - Solid Savings BHO.) -- C:\Program Files\Solid Savings\Solid Savings.dll
O2 - BHO: Yontoo Layers - {FD72061E-9FDE-484D-A58A-0BAB4151CAD8} . (.Yontoo LLC - Yontoo Runtime.) -- C:\Program Files\Yontoo\YontooIEClient.dll
O20 - AppInit_DLLs: . (...) - C:\Program Files\search~1\datamngr\mgrldr.dll (.not file.)
O42 - Logiciel: Ask Toolbar - (.Ask.com.) [HKLM] -- AskSBar Uninstall
O42 - Logiciel: Solid Savings - (.215 Apps.) [HKLM] -- Solid Savings
O42 - Logiciel: Yontoo 1.10.03 - (.Yontoo LLC.) [HKLM] -- {889DF117-14D1-44EE-9F31-C5FB5D47F68B}
[HKCU\Software\1ClickDownload]    
[HKCU\Software\5be88d8b13fea14]    
[HKCU\Software\BabylonToolbar]
[HKCU\Software\Cr_Installer]    
[HKCU\Software\DataMngr_Toolbar]
[HKCU\Software\Giant Savings]
[HKCU\Software\InstallCore]    
[HKCU\Software\InstalledBrowserExtensions]    
[HKCU\Software\SmartBar]
[HKCU\Software\Solid Savings]    
[HKCU\Software\SweetIM]
[HKCU\Software\iLivid]
[HKLM\Software\5be88d8b13fea14]    
[HKLM\Software\AskSBar]
[HKLM\Software\Babylon]
[HKLM\Software\Datamngr]
[HKLM\Software\SweetIM]
[HKLM\Software\iLividSRTB]
[HKLM\Software\iWin]    
O43 - CFD: 2009-05-30 - 11:26:30 - [0,117] ----D C:\Program Files\AskSBar
O43 - CFD: 2012-07-12 - 14:25:00 - [2,909] ----D C:\Program Files\Giant Savings
O43 - CFD: 2013-03-17 - 18:33:02 - [3,908] ----D C:\Program Files\Solid Savings    
O43 - CFD: 2012-12-16 - 13:19:21 - [0,319] ----D C:\Program Files\Yontoo
O43 - CFD: 2012-07-12 - 14:24:23 - [0,015] ----D C:\Documents and Settings\Compaq_Owner\Application Data\Babylon
O43 - CFD: 2013-01-22 - 23:01:52 - [0] ----D C:\Documents and Settings\Compaq_Owner\Local Settings\Application Data\Giant Savings
O61 - LFC: 2013-03-20 - 13:36:44 ---A- C:\Documents and Settings\Compaq_Owner\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\http_www.searchnu.com_0.localstorage   [5120]
O61 - LFC: 2013-03-20 - 13:36:44 ---A- C:\Documents and Settings\Compaq_Owner\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\http_www.searchnu.com_0.localstorage-journal   [5672]
O61 - LFC: 2013-03-22 - 02:20:24 ---A- C:\Documents and Settings\Compaq_Owner\Local Settings\Application Data\Google\Chrome\User Data\Default\databases\chrome-extension_cijeeimilokkhlfjombmalgpabbonmah_0\13   [286720]    
O61 - LFC: 2013-03-22 - 02:20:25 ---A- C:\Documents and Settings\Compaq_Owner\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\chrome-extension_cijeeimilokkhlfjombmalgpabbonmah_0.localstorage   [3072]    
O61 - LFC: 2013-03-22 - 02:20:25 ---A- C:\Documents and Settings\Compaq_Owner\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\chrome-extension_cijeeimilokkhlfjombmalgpabbonmah_0.localstorage-journal   [3608]    
O61 - LFC: 2013-03-22 - 02:21:54 ---A- C:\Documents and Settings\Compaq_Owner\Local Settings\Application Data\Google\Chrome\User Data\Default\databases\chrome-extension_cijeeimilokkhlfjombmalgpabbonmah_0\12   [18432]    
O61 - LFC: 2013-03-22 - 02:27:11 ---A- C:\Documents and Settings\Compaq_Owner\Local Settings\Temp	oolbar_log.txt   [56474946]
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("avg.install.userHPSettings", "http://search.babylon.com/?affID=113480&babsrc=HP_ss&mntrId=08f1536e00000000000000173124d[...]
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("browser.babylon.HPOnNewTab", "search.babylon.com");
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("browser.search.selectedEngine", "Search the web (Babylon)");
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("browser.startup.homepage", "http://search.babylon.com/?babsrc=HP_Prot");
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.BabylonToolbar.admin", false);
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.BabylonToolbar.aflt", "babsst");
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.BabylonToolbar.babExt", "");
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.BabylonToolbar.babTrack", "affID=113480");
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.BabylonToolbar.bbDpng", 26);
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.BabylonToolbar.dfltLng", "en");
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.BabylonToolbar.dfltSrch", true);
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.BabylonToolbar.hmpg", true);
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.BabylonToolbar.id", "08f1536e00000000000000173124df9d");
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.BabylonToolbar.instlDay", "15533");
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.BabylonToolbar.instlRef", "sst");
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.BabylonToolbar.keyWordUrl", "http://search.babylon.com/?affID=113480&babsrc=KW_ss&mntrId=08f1536e00000000000[...]
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.BabylonToolbar.lastDP", 26);
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.BabylonToolbar.lastVrsnTs", "1.5.3.1714:24:58");
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.BabylonToolbar.mntrFFxVrsn", "5.0");
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.BabylonToolbar.newTab", true);
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.BabylonToolbar.newTabUrl", "http://search.babylon.com/?babsrc=NT_bb");
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.BabylonToolbar.noFFXTlbr", false);
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.BabylonToolbar.prdct", "BabylonToolbar");
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.BabylonToolbar.propectorlck", 89851301);
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.BabylonToolbar.prtkDS", 1);
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.BabylonToolbar.prtkHmpg", 1);
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.BabylonToolbar.prtnrId", "babylon");
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.BabylonToolbar.ptch_0717", true);
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.BabylonToolbar.smplGrp", "czb");
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.BabylonToolbar.srcExt", "ss");
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.BabylonToolbar.tlbrId", "tb9");
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.BabylonToolbar.vrsn", "1.5.3.17");
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.BabylonToolbar.vrsnTs", "1.5.3.1714:24:58");
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.BabylonToolbar.vrsni", "1.5.3.17");
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.BabylonToolbar_i.aflt", "babsst");
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.BabylonToolbar_i.babExt", "");
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.BabylonToolbar_i.babTrack", "affID=113480");
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.BabylonToolbar_i.hardId", "08f1536e00000000000000173124df9d");
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.BabylonToolbar_i.id", "08f1536e00000000000000173124df9d");
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.BabylonToolbar_i.instlDay", "15533");
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.BabylonToolbar_i.instlRef", "sst");
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.BabylonToolbar_i.newTab", false);
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.BabylonToolbar_i.prdct", "BabylonToolbar");
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.BabylonToolbar_i.prtnrId", "babylon");
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.BabylonToolbar_i.smplGrp", "none");
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.BabylonToolbar_i.srcExt", "ss");
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.BabylonToolbar_i.tlbrId", "tb9");
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.BabylonToolbar_i.vrsn", "1.5.3.17");
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.BabylonToolbar_i.vrsnTs", "1.5.3.1714:24:58");
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.BabylonToolbar_i.vrsni", "1.5.3.17");
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossrider.bic", "1399689947f0dad4d07d41e2345ceebb");
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.4479.InstallationThankYouPage", true);
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.4479.InstallationTime", 1342117469);
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.4479.InstallationUserSettings.searchUserConifrmation", false);
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.4479.InstallationUserSettings.setHomepage", false);
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.4479.InstallationUserSettings.setNewTab", false);
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.4479.InstallationUserSettings.setSearch", false);
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.4479.active", true);
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.4479.addressbar", "");
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.4479.affid", "0");
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.4479.backgroundjs", "

\"undefined\"!=typeof _GPL_BG_NEW&&appAPI.webRequest&&appAPI.webR[...]
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.4479.backgroundver", 7);
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.4479.can_run_bg_code", true);
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.4479.certdomaininstaller", "");
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.4479.changeprevious", false);
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.4479.cookie.InstallationTime.expiration", "Fri Feb 01 2030 00:00:00 GMT-0500 (Eastern Stan[...]
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.4479.cookie.InstallationTime.value", "1342117469");
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.4479.cookie.InstallerParams.expiration", "Fri Feb 01 2030 00:00:00 GMT-0500 (Eastern Stand[...]
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.4479.cookie._GPL_aoi.expiration", "Fri Feb 01 2030 00:00:00 GMT-0500 (Eastern Standard Tim[...]
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.4479.cookie._GPL_aoi.value", "1342117469");
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.4479.cookie._GPL_blocklist.expiration", "Fri Oct 26 2012 18:36:36 GMT-0400 (Eastern Daylig[...]
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.4479.cookie._GPL_blocklist.value", "%5B%22nonexistantdomain.com%22%5D");
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.4479.cookie._GPL_country_code.expiration", "Fri Nov 02 2012 18:31:28 GMT-0400 (Eastern Day[...]
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.4479.cookie._GPL_country_code.value", "%22CA%22");
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.4479.cookie._GPL_crr.expiration", "Fri Feb 01 2030 00:00:00 GMT-0500 (Eastern Standard Tim[...]
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.4479.cookie._GPL_crr.value", "1351290700");
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.4479.cookie._GPL_hotfix20111102645.expiration", "Fri Feb 01 2030 00:00:00 GMT-0500 (Easter[...]
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.4479.cookie._GPL_hotfix20111102645.value", "%221%22");
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.4479.cookie._GPL_installer_params.expiration", "Fri Feb 01 2030 00:00:00 GMT-0500 (Eastern[...]
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.4479.cookie._GPL_installer_params.value", "%7B%22source_id%22%3A%2241449%22%2C%22sub_id%22[...]
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.4479.cookie._GPL_parent_zoneid.expiration", "Fri Feb 01 2030 00:00:00 GMT-0500 (Eastern St[...]
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.4479.cookie._GPL_parent_zoneid.value", "%2241449%22");
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.4479.cookie._GPL_pc_20120828.expiration", "Fri Feb 01 2030 00:00:00 GMT-0500 (Eastern Stan[...]
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.4479.cookie._GPL_pc_20120828.value", "1346850404098");
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.4479.cookie._GPL_product_id.expiration", "Fri Feb 01 2030 00:00:00 GMT-0500 (Eastern Stand[...]
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.4479.cookie._GPL_product_id.value", "%221242%22");
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.4479.cookie._GPL_zoneid.expiration", "Fri Feb 01 2030 00:00:00 GMT-0500 (Eastern Standard [...]
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.4479.cookie._GPL_zoneid.value", "%2255549%22");
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.4479.cookie.dbtest.expiration", "Fri Feb 01 2030 00:00:00 GMT-0500 (Eastern Standard Time)[...]
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.4479.cookie.dbtest.value", "1346850390749");
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.4479.description", "Save big with Giant Savings! Coupons display instantly while you're sh[...]
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.4479.domain", "");
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.4479.emailsig", "");
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.4479.enablesearch", false);
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.4479.exposesites", "");
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.4479.fbremoteurl", "");
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.4479.group", 0);
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.4479.homepage", "");
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.4479.iframe", false);
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.4479.internaldb.InstallerIdentifiers.expiration", "Fri Feb 01 2030 00:00:00 GMT-0500 (East[...]
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.4479.internaldb.InstallerIdentifiers.value", "%7B%22installer_bic%22%3A%22CA18DE6AFF9C4522[...]
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.4479.internaldb.Resources_appVer.expiration", "Fri Feb 01 2030 00:00:00 GMT-0500 (Eastern [...]
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.4479.internaldb.Resources_appVer.value", "43");
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.4479.internaldb.Resources_lastVersion.expiration", "Fri Feb 01 2030 00:00:00 GMT-0500 (Eas[...]
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.4479.internaldb.Resources_lastVersion.value", "0");
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.4479.internaldb.Resources_meta.expiration", "Fri Feb 01 2030 00:00:00 GMT-0500 (Eastern St[...]
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.4479.internaldb.Resources_meta.value", "%7B%7D");
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.4479.internaldb.Resources_nextCheck.expiration", "Sat Oct 27 2012 00:31:40 GMT-0400 (Easte[...]
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.4479.internaldb.Resources_nextCheck.value", "true");
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.4479.internaldb.Resources_queue.expiration", "Fri Feb 01 2030 00:00:00 GMT-0500 (Eastern S[...]
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.4479.internaldb.Resources_queue.value", "%7B%7D");
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.4479.js", "

if(\"undefined\"!=typeof _GPL_PLUGIN){var _GPL_=function(){_GPL_PLUGIN.star[...]
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.4479.manifesturl", "");
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.4479.name", "Giant Savings");
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.4479.newtab", "");
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.4479.opensearch", "");
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.4479.plugins.plugin_1.code", "appAPI._cr_config={appID:function(){var a=appAPI.appInfo;if([...]
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.4479.plugins.plugin_1.ver", 3);
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.4479.plugins.plugin_1000014.code", "Array.prototype.indexOf||(Array.prototype.indexOf=func[...]
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.4479.plugins.plugin_1000014.ver", 7);
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.4479.plugins.plugin_1000015.code", "var _GPL_BG={vars:{},rules:{},started:!1,log:function([...]
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.4479.plugins.plugin_1000015.ver", 4);
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.4479.plugins.plugin_13.code", "(function(a){a.selectedText=function(e,c){function d(){if(w[...]
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.4479.plugins.plugin_13.ver", 2);
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.4479.plugins.plugin_14.code", "if(typeof(appAPI)===\"undefined\"){appAPI={}}appAPI.JSON={}[...]
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.4479.plugins.plugin_14.ver", 2);
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.4479.plugins.plugin_15.code", "(function(f){var u={};var e=Math.floor(Math.random()*99999)[...]
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.4479.plugins.plugin_15.name", "FacebookFFIE");
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.4479.plugins.plugin_15.ver", 1);
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.4479.plugins.plugin_16.code", "(function(f,b){if(typeof(b)==\"undefined\"){b={}}var d=f.ap[...]
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.4479.plugins.plugin_16.ver", 3);
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.4479.plugins.plugin_17.code", "if(typeof window!==\"undefined\"){
/*!
 * jQuery JavaScri[...]
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.4479.plugins.plugin_17.ver", 3);
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.4479.plugins.plugin_21.code", "var CrossriderDebugManager=(function(h){var f={appId:appAPI[...]
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.4479.plugins.plugin_21.name", "debug");
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.4479.plugins.plugin_21.ver", 3);
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.4479.plugins.plugin_22.code", "(function(a){appAPI.queueManager={queue:[],register:functio[...]
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.4479.plugins.plugin_22.ver", 2);
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.4479.plugins.plugin_28.code", "var CrossriderInitializerPlugin=(function(e){var c={appId:a[...]
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.4479.plugins.plugin_28.name", "initializer");
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.4479.plugins.plugin_28.ver", 2);
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.4479.plugins.plugin_4.code", "/*! jQuery v1.7.1 jquery.com | jquery.org/license */
(funct[...]
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.4479.plugins.plugin_4.name", "jquery_1_7_1");
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.4479.plugins.plugin_4.ver", 3);
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.4479.plugins.plugin_47.code", "(function(){appAPI.ready=function(a){appAPI.resources.isRea[...]
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.4479.plugins.plugin_47.name", "resources_background");
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.4479.plugins.plugin_47.ver", 1);
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.4479.plugins_lists.plugins_0", "17,14,16,47,1000015");
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.4479.plugins_lists.plugins_1", "17,14,13,16,15,4,1,21,22,1000014,28");
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.4479.pluginsurl", "http://app-static.crossrider.com/plugin/apps/4479/plugins/081/ff/plugin[...]
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.4479.pluginsversion", 16);
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.4479.premium", true);
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.4479.publisher", "215 Apps");
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.4479.searchstatus", 0);
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.4479.setnewtab", false);
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.4479.settingsurl", "");
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.4479.thankyou", "");
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.4479.updateinterval", 360);
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.4479.ver", 43);
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.apps", "4479");
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.bic", "1399689947f0dad4d07d41e2345ceebb");
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.cid", 4479);
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.firstrun", false);
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.hadappinstalled", true);
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.installationdate", 1346850362);
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.lastcheck", 22521512);
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.lastcheckitem", 22521512);
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.misc.lastBgWorkerTimer", "1346850487146");
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.misc.lastDomWorkerTimer", "1346850487130");
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.modetype", "production");
[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ecdf796-c2dc-4d79-a620-cce0c0a66cc9}]    
[HKLM\Software\Classes\CLSID\{10DE7085-6A1E-4D41-A7BF-9AF93E351401}]    
[HKLM\Software\Classes\Interface\{10DE7085-6A1E-4D41-A7BF-9AF93E351401}]    
[HKLM\Software\Classes\Interface\{1AD27395-1659-4DFF-A319-2CFA243861A5}]    
[HKLM\Software\Classes\AppID\{608D3067-77E8-463D-9084-908966806826}]    
[HKLM\Software\Classes\CLSID\{80922ee0-8a76-46ae-95d5-bd3c3fe0708d}]    
[HKLM\Software\Classes\CLSID\{80922EE0-8A76-46AE-95D5-BD3C3FE0708D}]    
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{889DF117-14D1-44EE-9F31-C5FB5D47F68B}]    
[HKLM\Software\Classes\CLSID\{99066096-8989-4612-841F-621A01D54AD7}]    
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{9D717F81-9148-4F12-8568-69135F087DB0}]    
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{9D717F81-9148-4F12-8568-69135F087DB0}]    
[HKLM\Software\Classes\CLSID\{B15FD82E-85BC-430d-90CB-65DB1B030510}]    
[HKLM\Software\Classes\AppID\{BDB69379-802F-4EAF-B541-F8DE92DD98DB}]    
[HKLM\Software\Classes\AppID\{BDB69379-802F-4eaf-B541-F8DE92DD98DB}]    
[HKLM\Software\Classes\TypeLib\{C2AC8A0E-E48E-484B-A71C-C7A937FAAB94}]    
[HKLM\Software\Classes\AppID\{CFDAFE39-20CE-451D-BD45-A37452F39CF0}]    
[HKLM\Software\Classes\TypeLib\{D372567D-67C1-4B29-B3F0-159B52B3E967}]    
[HKLM\Software\Classes\CLSID\{DF7770F7-832F-4BDF-B144-100EDDD0C3AE}]    
[HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{DF7770F7-832F-4BDF-B144-100EDDD0C3AE}]    
[HKLM\Software\Classes\CLSID\{E46C8196-B634-44a1-AF6E-957C64278AB1}]    
[HKLM\Software\Classes\CLSID\{E46C8196-B634-44A1-AF6E-957C64278AB1}]    
[HKLM\Software\Classes\CLSID\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}]    
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{FD72061E-9FDE-484D-A58A-0BAB4151CAD8}]    
[HKLM\Software\Classes\CLSID\{FD72061E-9FDE-484D-A58A-0BAB4151CAD8}]    
[HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FD72061E-9FDE-484D-A58A-0BAB4151CAD8}]    
[HKLM\Software\Classes\CLSID\{FE9271F2-6EFD-44B0-A826-84C829536E93}]    
[HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\AskSBar Uninstall]
[HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\PartyPoker]
[HKLM\Software\Classes\imside1egate.application.1]
[HKCU\Software\1ClickDownload]    
[HKCU\Software\BabylonToolbar]
[HKCU\Software\Cr_Installer]    
[HKLM\Software\DataMngr]
[HKLM\Software\iLividSRTB]
[HKCU\Software\ilivid]
[HKLM\Software\iwin]    
[HKCU\Software\SweetIM]
[HKLM\Software\SweetIM]
[HKCU\Software\InstalledBrowserExtensions\215 Apps]
[HKLM\Software\Classes\TypeLib\{F0D4B230-DA4B-4daf-81E4-DFEE4931A4AA}]    
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F0D4B231-DA4B-4DAF-81E4-DFEE4931A4AA}]    
[HKLM\Software\Classes\CLSID\{F0D4B231-DA4B-4DAF-81E4-DFEE4931A4AA}]    
[HKLM\Software\Classes\AskSBar.ToolbarPlugin]
[HKLM\Software\Classes\AskSBar.ToolbarPlugin.1]
[HKLM\Software\Classes\Prod.cap]
[HKCU\Software\InstallCore]    
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{82E1477C-B154-48D3-9891-33D83C26BCD3}]    
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{82E1477C-B154-48D3-9891-33D83C26BCD3}]    
[HKCU\Software\Solid Savings]    
[HKLM\Software\Classes\AskSBar.SettingsPlugin]
[HKLM\Software\Classes\AskSBar.SettingsPlugin.1]
[HKLM\Software\Classes\CrossriderApp0004479.BHO]
[HKLM\Software\Classes\CrossriderApp0004479.BHO.1]
[HKLM\Software\Classes\CrossriderApp0004479.FBApi]
[HKLM\Software\Classes\CrossriderApp0004479.FBApi.1]
[HKLM\Software\Classes\CrossriderApp0004479.Sandbox]
[HKLM\Software\Classes\CrossriderApp0004479.Sandbox.1]
[HKLM\Software\Classes\CrossriderApp0026278.BHO]
[HKLM\Software\Classes\CrossriderApp0026278.BHO.1]
[HKLM\Software\Classes\CrossriderApp0026278.Sandbox]
[HKLM\Software\Classes\CrossriderApp0026278.Sandbox.1]
[HKLM\Software\Classes\YontooIEClient.Api]
[HKLM\Software\Classes\YontooIEClient.Api.1]
[HKLM\Software\Classes\YontooIEClient.Layers]
[HKLM\Software\Classes\YontooIEClient.Layers.1]
[HKLM\Software\Classes\AppID\YontooIEClient.DLL]
[HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\Arpcache\AskSBar Uninstall]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\AskSBar Uninstall]
C:\Program Files\yontoo
C:\Program Files\AskSBar
C:\Program Files\Giant Savings
C:\Program Files\Solid Savings    
C:\Documents and Settings\Compaq_Owner\Application Data\Babylon
C:\Documents and Settings\Compaq_Owner\Local Settings\Application Data\Giant Savings
C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles	r46rjmh.default\Extensions\ffxtlbr@babylon.com
[HKCU\Software\5be88d8b13fea14\history\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}2.6.1095.52]:dllName="BrowserProtect.dll"
[HKCU\Software\5be88d8b13fea14\history\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}2.6.1095.52]:exeName="BrowserProtect.exe"
[HKCU\Software\5be88d8b13fea14\history\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}2.6.1095.52]:folderName="BrowserProtect"
[HKCU\Software\5be88d8b13fea14\history\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}2.6.1095.52]:guid="{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}"    
[HKCU\Software\5be88d8b13fea14\history\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}2.6.1095.52]:serviceName="BrowserProtect"
[HKCU\Software\5be88d8b13fea14\history\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}2.6.1095.52]:version="2.6.1095.52"    
[HKLM\Software\5be88d8b13fea14]    
O4 - HKCU\..\Run: [Updater4479.exe] . (.FileProperties_CompanyName - FileProperties_FileDescription.) -- C:\Documents and Settings\Compaq_Owner\Local Settings\Application Data\Updater4479\Updater4479.exe
O4 - HKUS\S-1-5-21-4002823290-4221860123-174828001-1009\..\Run: [Updater4479.exe] . (.FileProperties_CompanyName - FileProperties_FileDescription.) -- C:\Documents and Settings\Compaq_Owner\Local Settings\Application Data\Updater4479\Updater4479.exe

FirewallRAZ
Emptytemp
EmptyCLSID


--------------------------------------------------------------------------------------------
* Lance ZHPFix à partir du raccourci sur ton Bureau (si tu es sous Windows Vista ou Windows 7, fais le par un clic-droit --> Exécuter en tant qu'administrateur) 

* Clique sur l'icone représentant le presse-papier ("coller le presse-papier") 
le script doit automatiquement apparaitre dans ZHPFix, sinon, colle-le (Ctrl+v) 
* Clique sur le bouton GO pour lancer le nettoyage 
* Copie/colle la totalité du rapport dans ta prochaine réponse.

-> laisse travailler l'outil et ne touche à rien ... 


-> Si il t'est demandé de redémarrer le PC pour finir le nettoyage, fais le ! 

Une fois terminé, un nouveau rapport s'affiche : poste le contenu de ce dernier dans ta prochaine réponse ... 

( ce rapport est en outre sauvegardé dans ce dossier > C:\Program files\ZHPDiag\ ZHPFixReport.txt ) 



@+

Minette Chanel · Answer

[MD5.96261D590C12F5D47DA973AE882C58F0] - (.FileProperties_CompanyName - FileProperties_FileDescription.) -- C:\Documents and Settings\Compaq_Owner\Local Settings\Application Data\Updater4479\Updater4479.exe [206336] [PID.500] 
M0 - MFSP: prefs.js [Compaq_Owner - tr46rjmh.default] http://search.babylon.com 
M2 - MFEP: prefs.js [Compaq_Owner - tr46rjmh.default\9518042e-7ad6-4dac-b377-056e28d00c8f@f1cc0a13-4df1-4d66-938f-088db8838882.com] [] Solid Savings v (.215 Apps.) 
M2 - MFEP: prefs.js [Compaq_Owner - tr46rjmh.default\crossriderapp4479@crossrider.com] [] Giant Savings v (.215 Apps.) 
M2 - MFEP: prefs.js [Compaq_Owner - tr46rjmh.default\ffxtlbr@babylon.com] [] Babylon v1.2.0 (.Babylon.) 
P2 - FPN:Firefox Plugin Navigator . (.Ask.com - Ask Toolbar Plugin Stub for 32-bit Windows.) -- C:\Program Files\Mozilla Firefox\Plugins\NPAskSBr.dll 
O2 - BHO: CrossriderApp0004479 - {11111111-1111-1111-1111-110011441179} . (.215 Apps - Giant Savings BHO.) -- C:\Program Files\Giant Savings\Giant Savings.dll 
O2 - BHO: CrossriderApp0026278 - {11111111-1111-1111-1111-110211621178} . (.215 Apps - Solid Savings BHO.) -- C:\Program Files\Solid Savings\Solid Savings.dll 
O2 - BHO: Yontoo Layers - {FD72061E-9FDE-484D-A58A-0BAB4151CAD8} . (.Yontoo LLC - Yontoo Runtime.) -- C:\Program Files\Yontoo\YontooIEClient.dll 
O20 - AppInit_DLLs: . (...) - C:\Program Files\search~1\datamngr\mgrldr.dll (.not file.) 
O42 - Logiciel: Ask Toolbar - (.Ask.com.) [HKLM] -- AskSBar Uninstall 
O42 - Logiciel: Solid Savings - (.215 Apps.) [HKLM] -- Solid Savings 
O42 - Logiciel: Yontoo 1.10.03 - (.Yontoo LLC.) [HKLM] -- {889DF117-14D1-44EE-9F31-C5FB5D47F68B} 
[HKCU\Software\1ClickDownload] 
[HKCU\Software\5be88d8b13fea14] 
[HKCU\Software\BabylonToolbar] 
[HKCU\Software\Cr_Installer] 
[HKCU\Software\DataMngr_Toolbar] 
[HKCU\Software\Giant Savings] 
[HKCU\Software\InstallCore] 
[HKCU\Software\InstalledBrowserExtensions] 
[HKCU\Software\SmartBar] 
[HKCU\Software\Solid Savings] 
[HKCU\Software\SweetIM] 
[HKCU\Software\iLivid] 
[HKLM\Software\5be88d8b13fea14] 
[HKLM\Software\AskSBar] 
[HKLM\Software\Babylon] 
[HKLM\Software\Datamngr] 
[HKLM\Software\SweetIM] 
[HKLM\Software\iLividSRTB] 
[HKLM\Software\iWin] 
O43 - CFD: 2009-05-30 - 11:26:30 - [0,117] ----D C:\Program Files\AskSBar 
O43 - CFD: 2012-07-12 - 14:25:00 - [2,909] ----D C:\Program Files\Giant Savings 
O43 - CFD: 2013-03-17 - 18:33:02 - [3,908] ----D C:\Program Files\Solid Savings 
O43 - CFD: 2012-12-16 - 13:19:21 - [0,319] ----D C:\Program Files\Yontoo 
O43 - CFD: 2012-07-12 - 14:24:23 - [0,015] ----D C:\Documents and Settings\Compaq_Owner\Application Data\Babylon 
O43 - CFD: 2013-01-22 - 23:01:52 - [0] ----D C:\Documents and Settings\Compaq_Owner\Local Settings\Application Data\Giant Savings 
O61 - LFC: 2013-03-20 - 13:36:44 ---A- C:\Documents and Settings\Compaq_Owner\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\http_www.searchnu.com_0.localstorage [5120] 
O61 - LFC: 2013-03-20 - 13:36:44 ---A- C:\Documents and Settings\Compaq_Owner\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\http_www.searchnu.com_0.localstorage-journal [5672] 
O61 - LFC: 2013-03-22 - 02:20:24 ---A- C:\Documents and Settings\Compaq_Owner\Local Settings\Application Data\Google\Chrome\User Data\Default\databases\chrome-extension_cijeeimilokkhlfjombmalgpabbonmah_0\13 [286720] 
O61 - LFC: 2013-03-22 - 02:20:25 ---A- C:\Documents and Settings\Compaq_Owner\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\chrome-extension_cijeeimilokkhlfjombmalgpabbonmah_0.localstorage [3072] 
O61 - LFC: 2013-03-22 - 02:20:25 ---A- C:\Documents and Settings\Compaq_Owner\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\chrome-extension_cijeeimilokkhlfjombmalgpabbonmah_0.localstorage-journal [3608] 
O61 - LFC: 2013-03-22 - 02:21:54 ---A- C:\Documents and Settings\Compaq_Owner\Local Settings\Application Data\Google\Chrome\User Data\Default\databases\chrome-extension_cijeeimilokkhlfjombmalgpabbonmah_0\12 [18432] 
O61 - LFC: 2013-03-22 - 02:27:11 ---A- C:\Documents and Settings\Compaq_Owner\Local Settings\Temp	oolbar_log.txt [56474946] 
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("avg.install.userHPSettings", "http://search.babylon.com/?affID=113480&babsrc=HP_ss&mntrId=08f1536e00000000000000173124d[...] 
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("browser.babylon.HPOnNewTab", "search.babylon.com"); 
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("browser.search.selectedEngine", "Search the web (Babylon)"); 
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("browser.startup.homepage", "http://search.babylon.com/?babsrc=HP_Prot"); 
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.BabylonToolbar.admin", false); 
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.BabylonToolbar.aflt", "babsst"); 
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.BabylonToolbar.babExt", ""); 
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.BabylonToolbar.babTrack", "affID=113480"); 
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.BabylonToolbar.bbDpng", 26); 
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.BabylonToolbar.dfltLng", "en"); 
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.BabylonToolbar.dfltSrch", true); 
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.BabylonToolbar.hmpg", true); 
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.BabylonToolbar.id", "08f1536e00000000000000173124df9d"); 
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.BabylonToolbar.instlDay", "15533"); 
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.BabylonToolbar.instlRef", "sst"); 
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.BabylonToolbar.keyWordUrl", "http://search.babylon.com/?affID=113480&babsrc=KW_ss&mntrId=08f1536e00000000000[...] 
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.BabylonToolbar.lastDP", 26); 
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.BabylonToolbar.lastVrsnTs", "1.5.3.1714:24:58"); 
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.BabylonToolbar.mntrFFxVrsn", "5.0"); 
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.BabylonToolbar.newTab", true); 
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.BabylonToolbar.newTabUrl", "http://search.babylon.com/?babsrc=NT_bb"); 
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.BabylonToolbar.noFFXTlbr", false); 
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.BabylonToolbar.prdct", "BabylonToolbar"); 
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.BabylonToolbar.propectorlck", 89851301); 
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.BabylonToolbar.prtkDS", 1); 
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.BabylonToolbar.prtkHmpg", 1); 
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.BabylonToolbar.prtnrId", "babylon"); 
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.BabylonToolbar.ptch_0717", true); 
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.BabylonToolbar.smplGrp", "czb"); 
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.BabylonToolbar.srcExt", "ss"); 
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.BabylonToolbar.tlbrId", "tb9"); 
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.BabylonToolbar.vrsn", "1.5.3.17"); 
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.BabylonToolbar.vrsnTs", "1.5.3.1714:24:58"); 
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.BabylonToolbar.vrsni", "1.5.3.17"); 
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.BabylonToolbar_i.aflt", "babsst"); 
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.BabylonToolbar_i.babExt", ""); 
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.BabylonToolbar_i.babTrack", "affID=113480"); 
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.BabylonToolbar_i.hardId", "08f1536e00000000000000173124df9d"); 
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.BabylonToolbar_i.id", "08f1536e00000000000000173124df9d"); 
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.BabylonToolbar_i.instlDay", "15533"); 
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.BabylonToolbar_i.instlRef", "sst"); 
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.BabylonToolbar_i.newTab", false); 
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.BabylonToolbar_i.prdct", "BabylonToolbar"); 
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.BabylonToolbar_i.prtnrId", "babylon"); 
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.BabylonToolbar_i.smplGrp", "none"); 
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.BabylonToolbar_i.srcExt", "ss"); 
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.BabylonToolbar_i.tlbrId", "tb9"); 
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.BabylonToolbar_i.vrsn", "1.5.3.17"); 
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.BabylonToolbar_i.vrsnTs", "1.5.3.1714:24:58"); 
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.BabylonToolbar_i.vrsni", "1.5.3.17"); 
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossrider.bic", "1399689947f0dad4d07d41e2345ceebb"); 
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.4479.InstallationThankYouPage", true); 
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.4479.InstallationTime", 1342117469); 
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.4479.InstallationUserSettings.searchUserConifrmation", false); 
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.4479.InstallationUserSettings.setHomepage", false); 
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.4479.InstallationUserSettings.setNewTab", false); 
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.4479.InstallationUserSettings.setSearch", false); 
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.4479.active", true); 
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.4479.addressbar", ""); 
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.4479.affid", "0"); 
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.4479.backgroundjs", "

\"undefined\"!=typeof _GPL_BG_NEW&&appAPI.webRequest&&appAPI.webR[...] 
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.4479.backgroundver", 7); 
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.4479.can_run_bg_code", true); 
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.4479.certdomaininstaller", ""); 
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.4479.changeprevious", false); 
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.4479.cookie.InstallationTime.expiration", "Fri Feb 01 2030 00:00:00 GMT-0500 (Eastern Stan[...] 
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.4479.cookie.InstallationTime.value", "1342117469"); 
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.4479.cookie.InstallerParams.expiration", "Fri Feb 01 2030 00:00:00 GMT-0500 (Eastern Stand[...] 
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.4479.cookie._GPL_aoi.expiration", "Fri Feb 01 2030 00:00:00 GMT-0500 (Eastern Standard Tim[...] 
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.4479.cookie._GPL_aoi.value", "1342117469"); 
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.4479.cookie._GPL_blocklist.expiration", "Fri Oct 26 2012 18:36:36 GMT-0400 (Eastern Daylig[...] 
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.4479.cookie._GPL_blocklist.value", "%5B%22nonexistantdomain.com%22%5D"); 
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.4479.cookie._GPL_country_code.expiration", "Fri Nov 02 2012 18:31:28 GMT-0400 (Eastern Day[...] 
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.4479.cookie._GPL_country_code.value", "%22CA%22"); 
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.4479.cookie._GPL_crr.expiration", "Fri Feb 01 2030 00:00:00 GMT-0500 (Eastern Standard Tim[...] 
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.4479.cookie._GPL_crr.value", "1351290700"); 
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.4479.cookie._GPL_hotfix20111102645.expiration", "Fri Feb 01 2030 00:00:00 GMT-0500 (Easter[...] 
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.4479.cookie._GPL_hotfix20111102645.value", "%221%22"); 
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.4479.cookie._GPL_installer_params.expiration", "Fri Feb 01 2030 00:00:00 GMT-0500 (Eastern[...] 
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.4479.cookie._GPL_installer_params.value", "%7B%22source_id%22%3A%2241449%22%2C%22sub_id%22[...] 
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.4479.cookie._GPL_parent_zoneid.expiration", "Fri Feb 01 2030 00:00:00 GMT-0500 (Eastern St[...] 
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.4479.cookie._GPL_parent_zoneid.value", "%2241449%22"); 
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.4479.cookie._GPL_pc_20120828.expiration", "Fri Feb 01 2030 00:00:00 GMT-0500 (Eastern Stan[...] 
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.4479.cookie._GPL_pc_20120828.value", "1346850404098"); 
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.4479.cookie._GPL_product_id.expiration", "Fri Feb 01 2030 00:00:00 GMT-0500 (Eastern Stand[...] 
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.4479.cookie._GPL_product_id.value", "%221242%22"); 
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.4479.cookie._GPL_zoneid.expiration", "Fri Feb 01 2030 00:00:00 GMT-0500 (Eastern Standard [...] 
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.4479.cookie._GPL_zoneid.value", "%2255549%22"); 
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.4479.cookie.dbtest.expiration", "Fri Feb 01 2030 00:00:00 GMT-0500 (Eastern Standard Time)[...] 
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.4479.cookie.dbtest.value", "1346850390749"); 
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.4479.description", "Save big with Giant Savings! Coupons display instantly while you're sh[...] 
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.4479.domain", ""); 
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.4479.emailsig", ""); 
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.4479.enablesearch", false); 
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.4479.exposesites", ""); 
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.4479.fbremoteurl", ""); 
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.4479.group", 0); 
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.4479.homepage", ""); 
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.4479.iframe", false); 
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.4479.internaldb.InstallerIdentifiers.expiration", "Fri Feb 01 2030 00:00:00 GMT-0500 (East[...] 
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.4479.internaldb.InstallerIdentifiers.value", "%7B%22installer_bic%22%3A%22CA18DE6AFF9C4522[...] 
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.4479.internaldb.Resources_appVer.expiration", "Fri Feb 01 2030 00:00:00 GMT-0500 (Eastern [...] 
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.4479.internaldb.Resources_appVer.value", "43"); 
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.4479.internaldb.Resources_lastVersion.expiration", "Fri Feb 01 2030 00:00:00 GMT-0500 (Eas[...] 
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.4479.internaldb.Resources_lastVersion.value", "0"); 
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.4479.internaldb.Resources_meta.expiration", "Fri Feb 01 2030 00:00:00 GMT-0500 (Eastern St[...] 
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.4479.internaldb.Resources_meta.value", "%7B%7D"); 
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.4479.internaldb.Resources_nextCheck.expiration", "Sat Oct 27 2012 00:31:40 GMT-0400 (Easte[...] 
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.4479.internaldb.Resources_nextCheck.value", "true"); 
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.4479.internaldb.Resources_queue.expiration", "Fri Feb 01 2030 00:00:00 GMT-0500 (Eastern S[...] 
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.4479.internaldb.Resources_queue.value", "%7B%7D"); 
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.4479.js", "

if(\"undefined\"!=typeof _GPL_PLUGIN){var _GPL_=function(){_GPL_PLUGIN.star[...] 
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.4479.manifesturl", ""); 
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.4479.name", "Giant Savings"); 
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.4479.newtab", ""); 
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.4479.opensearch", ""); 
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.4479.plugins.plugin_1.code", "appAPI._cr_config={appID:function(){var a=appAPI.appInfo;if([...] 
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.4479.plugins.plugin_1.ver", 3); 
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.4479.plugins.plugin_1000014.code", "Array.prototype.indexOf||(Array.prototype.indexOf=func[...] 
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.4479.plugins.plugin_1000014.ver", 7); 
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.4479.plugins.plugin_1000015.code", "var _GPL_BG={vars:{},rules:{},started:!1,log:function([...] 
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.4479.plugins.plugin_1000015.ver", 4); 
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.4479.plugins.plugin_13.code", "(function(a){a.selectedText=function(e,c){function d(){if(w[...] 
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.4479.plugins.plugin_13.ver", 2); 
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.4479.plugins.plugin_14.code", "if(typeof(appAPI)===\"undefined\"){appAPI={}}appAPI.JSON={}[...] 
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.4479.plugins.plugin_14.ver", 2); 
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.4479.plugins.plugin_15.code", "(function(f){var u={};var e=Math.floor(Math.random()*99999)[...] 
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.4479.plugins.plugin_15.name", "FacebookFFIE"); 
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.4479.plugins.plugin_15.ver", 1); 
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.4479.plugins.plugin_16.code", "(function(f,b){if(typeof(b)==\"undefined\"){b={}}var d=f.ap[...] 
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.4479.plugins.plugin_16.ver", 3); 
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.4479.plugins.plugin_17.code", "if(typeof window!==\"undefined\"){
/*!
 * jQuery JavaScri[...] 
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.4479.plugins.plugin_17.ver", 3); 
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.4479.plugins.plugin_21.code", "var CrossriderDebugManager=(function(h){var f={appId:appAPI[...] 
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.4479.plugins.plugin_21.name", "debug"); 
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.4479.plugins.plugin_21.ver", 3); 
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.4479.plugins.plugin_22.code", "(function(a){appAPI.queueManager={queue:[],register:functio[...] 
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.4479.plugins.plugin_22.ver", 2); 
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.4479.plugins.plugin_28.code", "var CrossriderInitializerPlugin=(function(e){var c={appId:a[...] 
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.4479.plugins.plugin_28.name", "initializer"); 
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.4479.plugins.plugin_28.ver", 2); 
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.4479.plugins.plugin_4.code", "/*! jQuery v1.7.1 jquery.com | jquery.org/license */
(funct[...] 
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.4479.plugins.plugin_4.name", "jquery_1_7_1"); 
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.4479.plugins.plugin_4.ver", 3); 
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.4479.plugins.plugin_47.code", "(function(){appAPI.ready=function(a){appAPI.resources.isRea[...] 
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.4479.plugins.plugin_47.name", "resources_background"); 
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.4479.plugins.plugin_47.ver", 1); 
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.4479.plugins_lists.plugins_0", "17,14,16,47,1000015"); 
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.4479.plugins_lists.plugins_1", "17,14,13,16,15,4,1,21,22,1000014,28"); 
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.4479.pluginsurl", "http://app-static.crossrider.com/plugin/apps/4479/plugins/081/ff/plugin[...] 
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.4479.pluginsversion", 16); 
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.4479.premium", true); 
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.4479.publisher", "215 Apps"); 
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.4479.searchstatus", 0); 
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.4479.setnewtab", false); 
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.4479.settingsurl", ""); 
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.4479.thankyou", ""); 
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.4479.updateinterval", 360); 
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.4479.ver", 43); 
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.apps", "4479"); 
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.bic", "1399689947f0dad4d07d41e2345ceebb"); 
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.cid", 4479); 
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.firstrun", false); 
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.hadappinstalled", true); 
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.installationdate", 1346850362); 
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.lastcheck", 22521512); 
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.lastcheckitem", 22521512); 
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.misc.lastBgWorkerTimer", "1346850487146"); 
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.misc.lastDomWorkerTimer", "1346850487130"); 
O69 - SBI: prefs.js [Compaq_Owner - tr46rjmh.default] user_pref("extensions.crossriderapp4479.modetype", "production"); 
[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ecdf796-c2dc-4d79-a620-cce0c0a66cc9}] 
[HKLM\Software\Classes\CLSID\{10DE7085-6A1E-4D41-A7BF-9AF93E351401}] 
[HKLM\Software\Classes\Interface\{10DE7085-6A1E-4D41-A7BF-9AF93E351401}] 
[HKLM\Software\Classes\Interface\{1AD27395-1659-4DFF-A319-2CFA243861A5}] 
[HKLM\Software\Classes\AppID\{608D3067-77E8-463D-9084-908966806826}] 
[HKLM\Software\Classes\CLSID\{80922ee0-8a76-46ae-95d5-bd3c3fe0708d}] 
[HKLM\Software\Classes\CLSID\{80922EE0-8A76-46AE-95D5-BD3C3FE0708D}] 
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{889DF117-14D1-44EE-9F31-C5FB5D47F68B}] 
[HKLM\Software\Classes\CLSID\{99066096-8989-4612-841F-621A01D54AD7}] 
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{9D717F81-9148-4F12-8568-69135F087DB0}] 
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{9D717F81-9148-4F12-8568-69135F087DB0}] 
[HKLM\Software\Classes\CLSID\{B15FD82E-85BC-430d-90CB-65DB1B030510}] 
[HKLM\Software\Classes\AppID\{BDB69379-802F-4EAF-B541-F8DE92DD98DB}] 
[HKLM\Software\Classes\AppID\{BDB69379-802F-4eaf-B541-F8DE92DD98DB}] 
[HKLM\Software\Classes\TypeLib\{C2AC8A0E-E48E-484B-A71C-C7A937FAAB94}] 
[HKLM\Software\Classes\AppID\{CFDAFE39-20CE-451D-BD45-A37452F39CF0}] 
[HKLM\Software\Classes\TypeLib\{D372567D-67C1-4B29-B3F0-159B52B3E967}] 
[HKLM\Software\Classes\CLSID\{DF7770F7-832F-4BDF-B144-100EDDD0C3AE}] 
[HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{DF7770F7-832F-4BDF-B144-100EDDD0C3AE}] 
[HKLM\Software\Classes\CLSID\{E46C8196-B634-44a1-AF6E-957C64278AB1}] 
[HKLM\Software\Classes\CLSID\{E46C8196-B634-44A1-AF6E-957C64278AB1}] 
[HKLM\Software\Classes\CLSID\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}] 
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{FD72061E-9FDE-484D-A58A-0BAB4151CAD8}] 
[HKLM\Software\Classes\CLSID\{FD72061E-9FDE-484D-A58A-0BAB4151CAD8}] 
[HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FD72061E-9FDE-484D-A58A-0BAB4151CAD8}] 
[HKLM\Software\Classes\CLSID\{FE9271F2-6EFD-44B0-A826-84C829536E93}] 
[HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\AskSBar Uninstall] 
[HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\PartyPoker] 
[HKLM\Software\Classes\imside1egate.application.1] 
[HKCU\Software\1ClickDownload] 
[HKCU\Software\BabylonToolbar] 
[HKCU\Software\Cr_Installer] 
[HKLM\Software\DataMngr] 
[HKLM\Software\iLividSRTB] 
[HKCU\Software\ilivid] 
[HKLM\Software\iwin] 
[HKCU\Software\SweetIM] 
[HKLM\Software\SweetIM] 
[HKCU\Software\InstalledBrowserExtensions\215 Apps] 
[HKLM\Software\Classes\TypeLib\{F0D4B230-DA4B-4daf-81E4-DFEE4931A4AA}] 
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F0D4B231-DA4B-4DAF-81E4-DFEE4931A4AA}] 
[HKLM\Software\Classes\CLSID\{F0D4B231-DA4B-4DAF-81E4-DFEE4931A4AA}] 
[HKLM\Software\Classes\AskSBar.ToolbarPlugin] 
[HKLM\Software\Classes\AskSBar.ToolbarPlugin.1] 
[HKLM\Software\Classes\Prod.cap] 
[HKCU\Software\InstallCore] 
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{82E1477C-B154-48D3-9891-33D83C26BCD3}] 
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{82E1477C-B154-48D3-9891-33D83C26BCD3}] 
[HKCU\Software\Solid Savings] 
[HKLM\Software\Classes\AskSBar.SettingsPlugin] 
[HKLM\Software\Classes\AskSBar.SettingsPlugin.1] 
[HKLM\Software\Classes\CrossriderApp0004479.BHO] 
[HKLM\Software\Classes\CrossriderApp0004479.BHO.1] 
[HKLM\Software\Classes\CrossriderApp0004479.FBApi] 
[HKLM\Software\Classes\CrossriderApp0004479.FBApi.1] 
[HKLM\Software\Classes\CrossriderApp0004479.Sandbox] 
[HKLM\Software\Classes\CrossriderApp0004479.Sandbox.1] 
[HKLM\Software\Classes\CrossriderApp0026278.BHO] 
[HKLM\Software\Classes\CrossriderApp0026278.BHO.1] 
[HKLM\Software\Classes\CrossriderApp0026278.Sandbox] 
[HKLM\Software\Classes\CrossriderApp0026278.Sandbox.1] 
[HKLM\Software\Classes\YontooIEClient.Api] 
[HKLM\Software\Classes\YontooIEClient.Api.1] 
[HKLM\Software\Classes\YontooIEClient.Layers] 
[HKLM\Software\Classes\YontooIEClient.Layers.1] 
[HKLM\Software\Classes\AppID\YontooIEClient.DLL] 
[HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\Arpcache\AskSBar Uninstall] 
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\AskSBar Uninstall] 
C:\Program Files\yontoo 
C:\Program Files\AskSBar 
C:\Program Files\Giant Savings 
C:\Program Files\Solid Savings 
C:\Documents and Settings\Compaq_Owner\Application Data\Babylon 
C:\Documents and Settings\Compaq_Owner\Local Settings\Application Data\Giant Savings 
C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles	r46rjmh.default\Extensions\ffxtlbr@babylon.com 
[HKCU\Software\5be88d8b13fea14\history\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}2.6.1095.52]:dllName="BrowserProtect.dll" 
[HKCU\Software\5be88d8b13fea14\history\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}2.6.1095.52]:exeName="BrowserProtect.exe" 
[HKCU\Software\5be88d8b13fea14\history\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}2.6.1095.52]:folderName="BrowserProtect" 
[HKCU\Software\5be88d8b13fea14\history\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}2.6.1095.52]:guid="{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}" 
[HKCU\Software\5be88d8b13fea14\history\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}2.6.1095.52]:serviceName="BrowserProtect" 
[HKCU\Software\5be88d8b13fea14\history\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}2.6.1095.52]:version="2.6.1095.52" 
[HKLM\Software\5be88d8b13fea14] 
O4 - HKCU\..\Run: [Updater4479.exe] . (.FileProperties_CompanyName - FileProperties_FileDescription.) -- C:\Documents and Settings\Compaq_Owner\Local Settings\Application Data\Updater4479\Updater4479.exe 
O4 - HKUS\S-1-5-21-4002823290-4221860123-174828001-1009\..\Run: [Updater4479.exe] . (.FileProperties_CompanyName - FileProperties_FileDescription.) -- C:\Documents and Settings\Compaq_Owner\Local Settings\Application Data\Updater4479\Updater4479.exe 

FirewallRAZ 
Emptytemp 
EmptyCLSID 

Rapport de ZHPFix 2013.3.9.1 par Nicolas Coolman, Update du 9/03/2013
Fichier d'export Registre : 
Run by Compaq_Owner at 2013-03-22 14:01:51
High Elevated Privileges : OK
Windows XP Home Edition Service Pack 3 (Build 2600)

Recycle Files Deleted

========== Software ==========
NOT FOUND Software Key: AskSBar Uninstall
NOT FOUND Software Key: Solid Savings
NOT FOUND Software Key: {889DF117-14D1-44EE-9F31-C5FB5D47F68B}

========== Registry Key ==========
NOT FOUND Key: CLSID BHO: {11111111-1111-1111-1111-110011441179}
NOT FOUND Key: CLSID BHO: {11111111-1111-1111-1111-110211621178}
NOT FOUND Key: CLSID BHO: {FD72061E-9FDE-484D-A58A-0BAB4151CAD8}
NOT FOUND Key: HKCU\Software\1ClickDownload
NOT FOUND Key: HKCU\Software\5be88d8b13fea14
NOT FOUND Key: HKCU\Software\BabylonToolbar
NOT FOUND Key: HKCU\Software\Cr_Installer
NOT FOUND Key: HKCU\Software\DataMngr_Toolbar
NOT FOUND Key: HKCU\Software\Giant Savings
NOT FOUND Key: HKCU\Software\InstallCore
NOT FOUND Key: HKCU\Software\InstalledBrowserExtensions
NOT FOUND Key: HKCU\Software\SmartBar
NOT FOUND Key: HKCU\Software\Solid Savings
NOT FOUND Key: HKCU\Software\SweetIM
NOT FOUND Key: HKCU\Software\iLivid
NOT FOUND Key: HKLM\Software\5be88d8b13fea14
NOT FOUND Key: HKLM\Software\AskSBar
NOT FOUND Key: HKLM\Software\Babylon
NOT FOUND Key: HKLM\Software\Datamngr
NOT FOUND Key: HKLM\Software\SweetIM
NOT FOUND Key: HKLM\Software\iLividSRTB
NOT FOUND Key: HKLM\Software\iWin
DELETED Key: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ecdf796-c2dc-4d79-a620-cce0c0a66cc9}
DELETED Key: HKLM\Software\Classes\CLSID\{10DE7085-6A1E-4D41-A7BF-9AF93E351401}
DELETED Key: HKLM\Software\Classes\Interface\{10DE7085-6A1E-4D41-A7BF-9AF93E351401}
DELETED Key: HKLM\Software\Classes\Interface\{1AD27395-1659-4DFF-A319-2CFA243861A5}
DELETED Key: HKLM\Software\Classes\AppID\{608D3067-77E8-463D-9084-908966806826}
DELETED Key: HKLM\Software\Classes\CLSID\{80922ee0-8a76-46ae-95d5-bd3c3fe0708d}
NOT FOUND Key: HKLM\Software\Classes\CLSID\{80922EE0-8A76-46AE-95D5-BD3C3FE0708D}
NOT FOUND Key: HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{889DF117-14D1-44EE-9F31-C5FB5D47F68B}
DELETED Key: HKLM\Software\Classes\CLSID\{99066096-8989-4612-841F-621A01D54AD7}
DELETED Key: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{9D717F81-9148-4F12-8568-69135F087DB0}
DELETED Key: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{9D717F81-9148-4F12-8568-69135F087DB0}
DELETED Key: HKLM\Software\Classes\CLSID\{B15FD82E-85BC-430d-90CB-65DB1B030510}
DELETED Key: HKLM\Software\Classes\AppID\{BDB69379-802F-4EAF-B541-F8DE92DD98DB}
NOT FOUND Key: HKLM\Software\Classes\AppID\{BDB69379-802F-4eaf-B541-F8DE92DD98DB}
DELETED Key: HKLM\Software\Classes\TypeLib\{C2AC8A0E-E48E-484B-A71C-C7A937FAAB94}
DELETED Key: HKLM\Software\Classes\AppID\{CFDAFE39-20CE-451D-BD45-A37452F39CF0}
DELETED Key: HKLM\Software\Classes\TypeLib\{D372567D-67C1-4B29-B3F0-159B52B3E967}
DELETED Key: HKLM\Software\Classes\CLSID\{DF7770F7-832F-4BDF-B144-100EDDD0C3AE}
DELETED Key: HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{DF7770F7-832F-4BDF-B144-100EDDD0C3AE}
DELETED Key: HKLM\Software\Classes\CLSID\{E46C8196-B634-44a1-AF6E-957C64278AB1}
NOT FOUND Key: HKLM\Software\Classes\CLSID\{E46C8196-B634-44A1-AF6E-957C64278AB1}
DELETED Key: HKLM\Software\Classes\CLSID\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}
DELETED Key: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{FD72061E-9FDE-484D-A58A-0BAB4151CAD8}
NOT FOUND Key: HKLM\Software\Classes\CLSID\{FD72061E-9FDE-484D-A58A-0BAB4151CAD8}
NOT FOUND Key: HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FD72061E-9FDE-484D-A58A-0BAB4151CAD8}
DELETED Key: HKLM\Software\Classes\CLSID\{FE9271F2-6EFD-44B0-A826-84C829536E93}
DELETED Key: HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\AskSBar Uninstall
DELETED Key: HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\PartyPoker
DELETED Key: HKLM\Software\Classes\imside1egate.application.1
NOT FOUND Key: HKCU\Software\InstalledBrowserExtensions\215 Apps
DELETED Key: HKLM\Software\Classes\TypeLib\{F0D4B230-DA4B-4daf-81E4-DFEE4931A4AA}
DELETED Key: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F0D4B231-DA4B-4DAF-81E4-DFEE4931A4AA}
DELETED Key: HKLM\Software\Classes\CLSID\{F0D4B231-DA4B-4DAF-81E4-DFEE4931A4AA}
DELETED Key: HKLM\Software\Classes\AskSBar.ToolbarPlugin
DELETED Key: HKLM\Software\Classes\AskSBar.ToolbarPlugin.1
DELETED Key: HKLM\Software\Classes\Prod.cap
DELETED Key: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{82E1477C-B154-48D3-9891-33D83C26BCD3}
DELETED Key: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{82E1477C-B154-48D3-9891-33D83C26BCD3}
DELETED Key: HKLM\Software\Classes\AskSBar.SettingsPlugin
DELETED Key: HKLM\Software\Classes\AskSBar.SettingsPlugin.1
DELETED Key: HKLM\Software\Classes\CrossriderApp0004479.BHO
DELETED Key: HKLM\Software\Classes\CrossriderApp0004479.BHO.1
DELETED Key: HKLM\Software\Classes\CrossriderApp0004479.FBApi
DELETED Key: HKLM\Software\Classes\CrossriderApp0004479.FBApi.1
DELETED Key: HKLM\Software\Classes\CrossriderApp0004479.Sandbox
DELETED Key: HKLM\Software\Classes\CrossriderApp0004479.Sandbox.1
DELETED Key: HKLM\Software\Classes\CrossriderApp0026278.BHO
DELETED Key: HKLM\Software\Classes\CrossriderApp0026278.BHO.1
DELETED Key: HKLM\Software\Classes\CrossriderApp0026278.Sandbox
DELETED Key: HKLM\Software\Classes\CrossriderApp0026278.Sandbox.1
DELETED Key: HKLM\Software\Classes\YontooIEClient.Api
DELETED Key: HKLM\Software\Classes\YontooIEClient.Api.1
DELETED Key: HKLM\Software\Classes\YontooIEClient.Layers
DELETED Key: HKLM\Software\Classes\YontooIEClient.Layers.1
DELETED Key: HKLM\Software\Classes\AppID\YontooIEClient.DLL
NOT FOUND Key: HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\Arpcache\AskSBar Uninstall
NOT FOUND Key: HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\AskSBar Uninstall

========== Registry Value ==========
NOT FOUND [HKCU\Software\5be88d8b13fea14\history\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}2.6.1095.52]:dllName="BrowserProtect.dll"
NOT FOUND [HKCU\Software\5be88d8b13fea14\history\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}2.6.1095.52]:exeName="BrowserProtect.exe"
NOT FOUND [HKCU\Software\5be88d8b13fea14\history\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}2.6.1095.52]:folderName="BrowserProtect"
NOT FOUND [HKCU\Software\5be88d8b13fea14\history\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}2.6.1095.52]:guid="{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}"
NOT FOUND [HKCU\Software\5be88d8b13fea14\history\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}2.6.1095.52]:serviceName="BrowserProtect"
NOT FOUND [HKCU\Software\5be88d8b13fea14\history\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}2.6.1095.52]:version="2.6.1095.52"
DELETED RunValue: Updater4479.exe
NOT FOUND RunValue: Updater4479.exe
DELETED FirewallRaz (SP) : %windir%\system32\sessmgr.exe
DELETED FirewallRaz (SP) : C:\Program Files\EarthLink TotalAccess\TaskPanl.exe
DELETED FirewallRaz (SP) : %windir%\Network Diagnostic\xpnetdiag.exe
DELETED FirewallRaz (SP) : C:\Program Files\Messenger\msmsgs.exe
DELETED FirewallRaz (SP) : C:\Program Files\Mozilla Firefox\firefox.exe
DELETED FirewallRaz (SP) : C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe
DELETED FirewallRaz (SP) : C:\Program Files\LimeWire\LimeWire.exe
DELETED FirewallRaz (SP) : C:\Program Files\Windows Live\Messenger\msnmsgr.exe
DELETED FirewallRaz (SP) : C:\Program Files\AVG\AVG10\avgmfapx.exe
DELETED FirewallRaz (DP) : %windir%\system32\sessmgr.exe
DELETED FirewallRaz (DP) : %windir%\Network Diagnostic\xpnetdiag.exe
DELETED FirewallRaz (DP) : C:\Program Files\Windows Live\Messenger\msnmsgr.exe
No Value in Firewall Exception Register Key (FirewallRaz)

========== Registry Data Items ==========
REMOVED AppInit: \Program Files\search~1\datamngr\mgrldr.dll

========== Browser Profiles ==========
DELETED Mozilla Pref: http://search.babylon.com
DELETED Mozilla Pref: http://search.babylon.com
DELETED Mozilla Pref: http://search.babylon.com
DELETED Mozilla Pref: http://search.babylon.com
DELETED Mozilla Pref: user_pref("avg.install.userHPSettings", "http://search.babylon.com/?affID=113480&babsrc=HP_ss&mntrId=08f1536e00000000000000173124d[...]
DELETED Mozilla Pref: user_pref("browser.babylon.HPOnNewTab", "search.babylon.com");
DELETED Mozilla Pref: user_pref("browser.search.selectedEngine", "Search the web (Babylon)");
DELETED Mozilla Pref: user_pref("browser.startup.homepage", "http://search.babylon.com/?babsrc=HP_Prot");
DELETED Mozilla Pref: user_pref("extensions.BabylonToolbar.admin", false);
DELETED Mozilla Pref: user_pref("extensions.BabylonToolbar.aflt", "babsst");
DELETED Mozilla Pref: user_pref("extensions.BabylonToolbar.babExt", "");
DELETED Mozilla Pref: user_pref("extensions.BabylonToolbar.babTrack", "affID=113480");
DELETED Mozilla Pref: user_pref("extensions.BabylonToolbar.bbDpng", 26);
DELETED Mozilla Pref: user_pref("extensions.BabylonToolbar.dfltLng", "en");
DELETED Mozilla Pref: user_pref("extensions.BabylonToolbar.dfltSrch", true);
DELETED Mozilla Pref: user_pref("extensions.BabylonToolbar.hmpg", true);
DELETED Mozilla Pref: user_pref("extensions.BabylonToolbar.id", "08f1536e00000000000000173124df9d");
DELETED Mozilla Pref: user_pref("extensions.BabylonToolbar.instlDay", "15533");
DELETED Mozilla Pref: user_pref("extensions.BabylonToolbar.instlRef", "sst");
DELETED Mozilla Pref: user_pref("extensions.BabylonToolbar.keyWordUrl", "http://search.babylon.com/?affID=113480&babsrc=KW_ss&mntrId=08f1536e00000000000[...]
DELETED Mozilla Pref: user_pref("extensions.BabylonToolbar.lastDP", 26);
DELETED Mozilla Pref: user_pref("extensions.BabylonToolbar.lastVrsnTs", "1.5.3.1714:24:58");
DELETED Mozilla Pref: user_pref("extensions.BabylonToolbar.mntrFFxVrsn", "5.0");
DELETED Mozilla Pref: user_pref("extensions.BabylonToolbar.newTab", true);
DELETED Mozilla Pref: user_pref("extensions.BabylonToolbar.newTabUrl", "http://search.babylon.com/?babsrc=NT_bb");
DELETED Mozilla Pref: user_pref("extensions.BabylonToolbar.noFFXTlbr", false);
DELETED Mozilla Pref: user_pref("extensions.BabylonToolbar.prdct", "BabylonToolbar");
DELETED Mozilla Pref: user_pref("extensions.BabylonToolbar.propectorlck", 89851301);
DELETED Mozilla Pref: user_pref("extensions.BabylonToolbar.prtkDS", 1);
DELETED Mozilla Pref: user_pref("extensions.BabylonToolbar.prtkHmpg", 1);
DELETED Mozilla Pref: user_pref("extensions.BabylonToolbar.prtnrId", "babylon");
DELETED Mozilla Pref: user_pref("extensions.BabylonToolbar.ptch_0717", true);
DELETED Mozilla Pref: user_pref("extensions.BabylonToolbar.smplGrp", "czb");
DELETED Mozilla Pref: user_pref("extensions.BabylonToolbar.srcExt", "ss");
DELETED Mozilla Pref: user_pref("extensions.BabylonToolbar.tlbrId", "tb9");
DELETED Mozilla Pref: user_pref("extensions.BabylonToolbar.vrsn", "1.5.3.17");
DELETED Mozilla Pref: user_pref("extensions.BabylonToolbar.vrsnTs", "1.5.3.1714:24:58");
DELETED Mozilla Pref: user_pref("extensions.BabylonToolbar.vrsni", "1.5.3.17");
DELETED Mozilla Pref: user_pref("extensions.BabylonToolbar_i.aflt", "babsst");
DELETED Mozilla Pref: user_pref("extensions.BabylonToolbar_i.babExt", "");
DELETED Mozilla Pref: user_pref("extensions.BabylonToolbar_i.babTrack", "affID=113480");
DELETED Mozilla Pref: user_pref("extensions.BabylonToolbar_i.hardId", "08f1536e00000000000000173124df9d");
DELETED Mozilla Pref: user_pref("extensions.BabylonToolbar_i.id", "08f1536e00000000000000173124df9d");
DELETED Mozilla Pref: user_pref("extensions.BabylonToolbar_i.instlDay", "15533");
DELETED Mozilla Pref: user_pref("extensions.BabylonToolbar_i.instlRef", "sst");
DELETED Mozilla Pref: user_pref("extensions.BabylonToolbar_i.newTab", false);
DELETED Mozilla Pref: user_pref("extensions.BabylonToolbar_i.prdct", "BabylonToolbar");
DELETED Mozilla Pref: user_pref("extensions.BabylonToolbar_i.prtnrId", "babylon");
DELETED Mozilla Pref: user_pref("extensions.BabylonToolbar_i.smplGrp", "none");
DELETED Mozilla Pref: user_pref("extensions.BabylonToolbar_i.srcExt", "ss");
DELETED Mozilla Pref: user_pref("extensions.BabylonToolbar_i.tlbrId", "tb9");
DELETED Mozilla Pref: user_pref("extensions.BabylonToolbar_i.vrsn", "1.5.3.17");
DELETED Mozilla Pref: user_pref("extensions.BabylonToolbar_i.vrsnTs", "1.5.3.1714:24:58");
DELETED Mozilla Pref: user_pref("extensions.BabylonToolbar_i.vrsni", "1.5.3.17");
DELETED Mozilla Pref: user_pref("extensions.crossrider.bic", "1399689947f0dad4d07d41e2345ceebb");
DELETED Mozilla Pref: user_pref("extensions.crossriderapp4479.4479.InstallationThankYouPage", true);
DELETED Mozilla Pref: user_pref("extensions.crossriderapp4479.4479.InstallationTime", 1342117469);
DELETED Mozilla Pref: user_pref("extensions.crossriderapp4479.4479.InstallationUserSettings.searchUserConifrmation", false);
DELETED Mozilla Pref: user_pref("extensions.crossriderapp4479.4479.InstallationUserSettings.setHomepage", false);
DELETED Mozilla Pref: user_pref("extensions.crossriderapp4479.4479.InstallationUserSettings.setNewTab", false);
DELETED Mozilla Pref: user_pref("extensions.crossriderapp4479.4479.InstallationUserSettings.setSearch", false);
DELETED Mozilla Pref: user_pref("extensions.crossriderapp4479.4479.active", true);
DELETED Mozilla Pref: user_pref("extensions.crossriderapp4479.4479.addressbar", "");
DELETED Mozilla Pref: user_pref("extensions.crossriderapp4479.4479.affid", "0");
NOT FOUND Mozilla Pref: user_pref("extensions.crossriderapp4479.4479.backgroundjs", "

\"undefined\"!=typeof _GPL_BG_NEW&&appAPI.webRequest&&appAPI.webR[...]
DELETED Mozilla Pref: user_pref("extensions.crossriderapp4479.4479.backgroundver", 7);
DELETED Mozilla Pref: user_pref("extensions.crossriderapp4479.4479.can_run_bg_code", true);
DELETED Mozilla Pref: user_pref("extensions.crossriderapp4479.4479.certdomaininstaller", "");
DELETED Mozilla Pref: user_pref("extensions.crossriderapp4479.4479.changeprevious", false);
DELETED Mozilla Pref: user_pref("extensions.crossriderapp4479.4479.cookie.InstallationTime.expiration", "Fri Feb 01 2030 00:00:00 GMT-0500 (Eastern Stan[...]
DELETED Mozilla Pref: user_pref("extensions.crossriderapp4479.4479.cookie.InstallationTime.value", "1342117469");
DELETED Mozilla Pref: user_pref("extensions.crossriderapp4479.4479.cookie.InstallerParams.expiration", "Fri Feb 01 2030 00:00:00 GMT-0500 (Eastern Stand[...]
DELETED Mozilla Pref: user_pref("extensions.crossriderapp4479.4479.cookie._GPL_aoi.expiration", "Fri Feb 01 2030 00:00:00 GMT-0500 (Eastern Standard Tim[...]
DELETED Mozilla Pref: user_pref("extensions.crossriderapp4479.4479.cookie._GPL_aoi.value", "1342117469");
DELETED Mozilla Pref: user_pref("extensions.crossriderapp4479.4479.cookie._GPL_blocklist.expiration", "Fri Oct 26 2012 18:36:36 GMT-0400 (Eastern Daylig[...]
DELETED Mozilla Pref: user_pref("extensions.crossriderapp4479.4479.cookie._GPL_blocklist.value", "%5B%22nonexistantdomain.com%22%5D");
DELETED Mozilla Pref: user_pref("extensions.crossriderapp4479.4479.cookie._GPL_country_code.expiration", "Fri Nov 02 2012 18:31:28 GMT-0400 (Eastern Day[...]
DELETED Mozilla Pref: user_pref("extensions.crossriderapp4479.4479.cookie._GPL_country_code.value", "%22CA%22");
DELETED Mozilla Pref: user_pref("extensions.crossriderapp4479.4479.cookie._GPL_crr.expiration", "Fri Feb 01 2030 00:00:00 GMT-0500 (Eastern Standard Tim[...]
DELETED Mozilla Pref: user_pref("extensions.crossriderapp4479.4479.cookie._GPL_crr.value", "1351290700");
DELETED Mozilla Pref: user_pref("extensions.crossriderapp4479.4479.cookie._GPL_hotfix20111102645.expiration", "Fri Feb 01 2030 00:00:00 GMT-0500 (Easter[...]
DELETED Mozilla Pref: user_pref("extensions.crossriderapp4479.4479.cookie._GPL_hotfix20111102645.value", "%221%22");
DELETED Mozilla Pref: user_pref("extensions.crossriderapp4479.4479.cookie._GPL_installer_params.expiration", "Fri Feb 01 2030 00:00:00 GMT-0500 (Eastern[...]
NOT FOUND Mozilla Pref: user_pref("extensions.crossriderapp4479.4479.cookie._GPL_installer_params.value", "%7B%22source_id%22%3A%2241449%22%2C%22sub_id%22[...]
DELETED Mozilla Pref: user_pref("extensions.crossriderapp4479.4479.cookie._GPL_parent_zoneid.expiration", "Fri Feb 01 2030 00:00:00 GMT-0500 (Eastern St[...]
DELETED Mozilla Pref: user_pref("extensions.crossriderapp4479.4479.cookie._GPL_parent_zoneid.value", "%2241449%22");
DELETED Mozilla Pref: user_pref("extensions.crossriderapp4479.4479.cookie._GPL_pc_20120828.expiration", "Fri Feb 01 2030 00:00:00 GMT-0500 (Eastern Stan[...]
DELETED Mozilla Pref: user_pref("extensions.crossriderapp4479.4479.cookie._GPL_pc_20120828.value", "1346850404098");
DELETED Mozilla Pref: user_pref("extensions.crossriderapp4479.4479.cookie._GPL_product_id.expiration", "Fri Feb 01 2030 00:00:00 GMT-0500 (Eastern Stand[...]
DELETED Mozilla Pref: user_pref("extensions.crossriderapp4479.4479.cookie._GPL_product_id.value", "%221242%22");
DELETED Mozilla Pref: user_pref("extensions.crossriderapp4479.4479.cookie._GPL_zoneid.expiration", "Fri Feb 01 2030 00:00:00 GMT-0500 (Eastern Standard [...]
DELETED Mozilla Pref: user_pref("extensions.crossriderapp4479.4479.cookie._GPL_zoneid.value", "%2255549%22");
DELETED Mozilla Pref: user_pref("extensions.crossriderapp4479.4479.cookie.dbtest.expiration", "Fri Feb 01 2030 00:00:00 GMT-0500 (Eastern Standard Time)[...]
DELETED Mozilla Pref: user_pref("extensions.crossriderapp4479.4479.cookie.dbtest.value", "1346850390749");
DELETED Mozilla Pref: user_pref("extensions.crossriderapp4479.4479.description", "Save big with Giant Savings! Coupons display instantly while you're sh[...]
DELETED Mozilla Pref: user_pref("extensions.crossriderapp4479.4479.domain", "");
DELETED Mozilla Pref: user_pref("extensions.crossriderapp4479.4479.emailsig", "");
DELETED Mozilla Pref: user_pref("extensions.crossriderapp4479.4479.enablesearch", false);
DELETED Mozilla Pref: user_pref("extensions.crossriderapp4479.4479.exposesites", "");
DELETED Mozilla Pref: user_pref("extensions.crossriderapp4479.4479.fbremoteurl", "");
DELETED Mozilla Pref: user_pref("extensions.crossriderapp4479.4479.group", 0);
DELETED Mozilla Pref: user_pref("extensions.crossriderapp4479.4479.homepage", "");
DELETED Mozilla Pref: user_pref("extensions.crossriderapp4479.4479.iframe", false);
DELETED Mozilla Pref: user_pref("extensions.crossriderapp4479.4479.internaldb.InstallerIdentifiers.expiration", "Fri Feb 01 2030 00:00:00 GMT-0500 (East[...]
NOT FOUND Mozilla Pref: user_pref("extensions.crossriderapp4479.4479.internaldb.InstallerIdentifiers.value", "%7B%22installer_bic%22%3A%22CA18DE6AFF9C4522[...]
DELETED Mozilla Pref: user_pref("extensions.crossriderapp4479.4479.internaldb.Resources_appVer.expiration", "Fri Feb 01 2030 00:00:00 GMT-0500 (Eastern [...]
DELETED Mozilla Pref: user_pref("extensions.crossriderapp4479.4479.internaldb.Resources_appVer.value", "43");
DELETED Mozilla Pref: user_pref("extensions.crossriderapp4479.4479.internaldb.Resources_lastVersion.expiration", "Fri Feb 01 2030 00:00:00 GMT-0500 (Eas[...]
DELETED Mozilla Pref: user_pref("extensions.crossriderapp4479.4479.internaldb.Resources_lastVersion.value", "0");
DELETED Mozilla Pref: user_pref("extensions.crossriderapp4479.4479.internaldb.Resources_meta.expiration", "Fri Feb 01 2030 00:00:00 GMT-0500 (Eastern St[...]
DELETED Mozilla Pref: user_pref("extensions.crossriderapp4479.4479.internaldb.Resources_meta.value", "%7B%7D");
DELETED Mozilla Pref: user_pref("extensions.crossriderapp4479.4479.internaldb.Resources_nextCheck.expiration", "Sat Oct 27 2012 00:31:40 GMT-0400 (Easte[...]
DELETED Mozilla Pref: user_pref("extensions.crossriderapp4479.4479.internaldb.Resources_nextCheck.value", "true");
DELETED Mozilla Pref: user_pref("extensions.crossriderapp4479.4479.internaldb.Resources_queue.expiration", "Fri Feb 01 2030 00:00:00 GMT-0500 (Eastern S[...]
DELETED Mozilla Pref: user_pref("extensions.crossriderapp4479.4479.internaldb.Resources_queue.value", "%7B%7D");
NOT FOUND Mozilla Pref: user_pref("extensions.crossriderapp4479.4479.js", "

if(\"undefined\"!=typeof _GPL_PLUGIN){var _GPL_=function(){_GPL_PLUGIN.star[...]
DELETED Mozilla Pref: user_pref("extensions.crossriderapp4479.4479.manifesturl", "");
DELETED Mozilla Pref: user_pref("extensions.crossriderapp4479.4479.name", "Giant Savings");
DELETED Mozilla Pref: user_pref("extensions.crossriderapp4479.4479.newtab", "");
DELETED Mozilla Pref: user_pref("extensions.crossriderapp4479.4479.opensearch", "");
DELETED Mozilla Pref: user_pref("extensions.crossriderapp4479.4479.plugins.plugin_1.code", "appAPI._cr_config={appID:function(){var a=appAPI.appInfo;if([...]
DELETED Mozilla Pref: user_pref("extensions.crossriderapp4479.4479.plugins.plugin_1.ver", 3);
DELETED Mozilla Pref: user_pref("extensions.crossriderapp4479.4479.plugins.plugin_1000014.code", "Array.prototype.indexOf||(Array.prototype.indexOf=func[...]
DELETED Mozilla Pref: user_pref("extensions.crossriderapp4479.4479.plugins.plugin_1000014.ver", 7);
NOT FOUND Mozilla Pref: user_pref("extensions.crossriderapp4479.4479.plugins.plugin_1000015.code", "var _GPL_BG={vars:{},rules:{},started:!1,log:function([...]
DELETED Mozilla Pref: user_pref("extensions.crossriderapp4479.4479.plugins.plugin_1000015.ver", 4);
DELETED Mozilla Pref: user_pref("extensions.crossriderapp4479.4479.plugins.plugin_13.code", "(function(a){a.selectedText=function(e,c){function d(){if(w[...]
DELETED Mozilla Pref: user_pref("extensions.crossriderapp4479

Utilisateur anonyme · Answer

Re

Pour transmettre le rapport clique sur ce lien : 

 
http://pjjoint.malekal.com/

Si problème utilise un des suivants

https://forums-fec.be/upload 
 https://www.cjoint.com/


Clique sur Parcourir et cherche le fichier : Nom_complet_du_fichier (Fichier demandé )
Clique sur Ouvrir. 

Clique sur "Envoyer le fichier". 

Un lien de cette forme : 

http://pjjoint.malekal.com/cjlink.php?file=cj200905/cijSKAP5fU.txt 

est ajouté dans la page. 

Copie ce lien dans ta réponse.


@+

Minette Chanel · Answer

https://pjjoint.malekal.com/files.php?id=20130322_v13m12w12u14t8

Utilisateur anonyme · Answer

Re

Pour vérifications ;poste moi un nouveau rapport ZHPDiag;merci

As tu encore cette page searchnu?

@+

Minette Chanel · Answer

oui je l'ai encore :(((

Utilisateur anonyme · Answer

Re

Réinitialise les navigateurs sur lesquels tu es ennuyé

https://forums.commentcamarche.net/forum/affich-37585758-reinitialiser-son-navigateur
Attention à sauvegarder tes favoris

@+

Minette Chanel · Answer

excuse moi mais je ne suis pas une bollée des ordis alors lorsque tu me dis de faire Windows+R c'est du chinois pour moi alors pourrais tu élaborer svp merci et désolée pour les problèmes que je te cause :(

Utilisateur anonyme · Answer

Re 

Et bien en tapant cette commande;la fenêtre "exécuter" s'ouvre  
  
           --------Contributeur Sécurité--------- 
On a tous été un jour débutant dans quelque chose. 
Mais le savoir est la récompense de l'assiduité.

Minette Chanel · Answer

oui je sais que je dois TAPER cette commande mais OU? surement pas dans la barre d'addresse.........

Utilisateur anonyme · Answer

Re

Tu connais la touche Windows?

la deuxième touche en bas à gauche de ton clavier

@+

Minette Chanel · Answer

merci Guillaume 

C: bla bla bla UNAVAILABLE introuvable :(((
voilà, c'est donc impossible par ce trajet

Minette Chanel · Answer

Il y a aucun moyen que vous puissiez travailler sur mon ordinateur à distance??? La façon dont je vois le problème je n'y parviendrai pas par moi même, étant donné que ça fait 6 jours que nous essayons de le régler!???

Minette Chanel · Answer

oui j'avais déja trouvé la touche mais ça fonctionne toujours pas .. dis moi si j'ai le bon nom svp merci

"C:\Documents and Settings\NOM_DE_LA_SESSION\Local Settings\Application Data\Google\Chrome\User Data\"

Minette Chanel · Answer

bon j'ai décidé de DÉsinstaller Chrome et je l'ai RÉinsatallé... finalement ça fonctionné. Ma page d'accueil s'ouvre sur Google Chrome :)

Le seul hic... lorsque je démarre mon ordinateur il y a une fenêtre qui s'affiche ( OTSHOT) et ce depuis que j'avais *Searchun* en page d'accueil. J'ai regardé dans désinstaller un programme mais il n'y est pas. Qu'est-ce que tu me conseilles Guillaume???

Un gros merci pour toute l'aide que tu m'as apporté jusqu'à présent, tu es vraiment patient lol ;)

Utilisateur anonyme · Answer

Re

Utilisation de l'outil ZHPFix : 

* Copie  tout le texte présent dans l'encadré ci-dessous (tu le sélectionnes avec ta souris / Clique droit dessus et choisis "copier" ou fait Ctrl+C ) 
-------------------------------------------------------------------------------------------------


[MD5.04A6AFB35C568B8362B62D0EC1433EAE] - (.Unknown owner - OtShot MFC Application.) -- C:\Program Files\OtShot\otshot.exe   [4386816] [PID.464]
O4 - HKLM\..\Run: [OtShot] . (.Unknown owner - OtShot MFC Application.) -- C:\Program Files\OtShot\otshot.exe 
[HKCU\Software\OtShot]
[HKLM\Software\ZalmanInstaller_otshot]
O43 - CFD: 2013-03-17 - 19:36:52 - [4,189] ----D C:\Program Files\OtShot
O45 - LFCP:[MD5.067FACADE4EFE37D5AB6F57798415D76] - 2013-03-21 - 13:17:12 ---A- - C:\WINDOWS\Prefetch\OTSHOT.EXE-33311584.pf

FirewallRAZ
Emptytemp
EmptyCLSID


--------------------------------------------------------------------------------------------
* Lance ZHPFix à partir du raccourci sur ton Bureau (si tu es sous Windows Vista ou Windows 7, fais le par un clic-droit --> Exécuter en tant qu'administrateur) 

* Clique sur l'icone représentant le presse-papier ("coller le presse-papier") 
le script doit automatiquement apparaitre dans ZHPFix, sinon, colle-le (Ctrl+v) 
* Clique sur le bouton GO pour lancer le nettoyage 
* Copie/colle la totalité du rapport dans ta prochaine réponse.

-> laisse travailler l'outil et ne touche à rien ... 


-> Si il t'est demandé de redémarrer le PC pour finir le nettoyage, fais le ! 

Une fois terminé, un nouveau rapport s'affiche : poste le contenu de ce dernier dans ta prochaine réponse ... 

( ce rapport est en outre sauvegardé dans ce dossier > C:\Program files\ZHPDiag\ ZHPFixReport.txt ) 



@+

Minette Chanel · Answer

Rapport de ZHPFix 2013.3.9.1 par Nicolas Coolman, Update du 9/03/2013
Fichier d'export Registre : 
Run by Compaq_Owner at 2013-03-22 21:07:01
High Elevated Privileges : OK
Windows XP Home Edition Service Pack 3 (Build 2600)

Recycle Files Deleted

========== Memory Process ==========
DELETED Memory Process: C:\Program Files\OtShot\otshot.exe

========== Registry Key ==========
DELETED Key: HKCU\Software\OtShot
DELETED Key: HKLM\Software\ZalmanInstaller_otshot

========== Registry Value ==========
DELETED RunValue: OtShot
No Value in Firewall Exception Register Key (FirewallRaz)

========== Repertory ==========
No Empty CLSID Directories

========== File ==========
DELETED File: c:\program files\otshot\otshot.exe
NOT FOUND File: c:\program files\otshot\otshot.exe
DELETED File: c:\windows\prefetch\otshot.exe-33311584.pf 
DELETED Window Temporary


========== Summary ==========
1 : Memory Process
2 : Registry Key
2 : Registry Value
1 : Repertory
4 : File


End of clean in 00mn 02s

========== Report File ==========
C:\ZHP\ZHPFix[R1].txt - 2013-03-22 12:36:38 [20117]
C:\ZHP\ZHPFix[R2].txt - 2013-03-22 13:01:52 [29317]
C:\ZHP\ZHPFix[R3].txt - 2013-03-22 21:07:02 [1174]

Minette Chanel · Answer

MERCIIIIIIIIIIIIIIIIIII GUILLAUME problème RÉSOLU youpiiiiiiiiiiiiiii 
Searchnu disparu et Otshot disparu woooooooooooow très heureuse

on dirait un ordinateur tout neuf très heureuse la fille xox MERCI beaucoup pour ta patience!!! ;)
:)))))))))))))))))))))))))))))))  :))))))))))))))))))))))))))))) yayyyyyyyyyy

Utilisateur anonyme · Answer

Bonjour


On finalise

 Télécharge DelFix de Xplode

Lance le.
Tu as 5 choix :

 Réactiver l'UAC
 Supprimer les outils de désinfection (cocher par défaut)
Effectuer une sauvegarde du registre
 Purger la restauration de système
Réinitialisation des paramètres usine

Tu coches ceux qui sont en gras 
et tu exécutes
Le rapport se trouve ici généralement
C:\DelFix.txt 


@+

Minette Chanel · Answer

Bonjour Guillaume :))

# DelFix v10.1 - Logfile created 23/03/2013 at 10:43:48
# Updated 23/02/2013 by Xplode
# Username : Compaq_Owner - SHELBY

~ Removing disinfection tools ...

Deleted : C:\ZHP
Deleted : C:\Program Files\ZHPDiag
Deleted : C:\AdwCleaner[R1].txt
Deleted : C:\AdwCleaner[S1].txt
Deleted : C:\AdwCleaner[S2].txt
Deleted : C:\AdwCleaner[S3].txt
Deleted : C:\PhysicalDisk0_MBR.bin
Deleted : C:\Documents and Settings\All Users\Desktop\ZHPDiag.lnk
Deleted : C:\Documents and Settings\Compaq_Owner\My Documents\Downloads\adwcleaner (1).exe
Deleted : C:\Documents and Settings\Compaq_Owner\My Documents\Downloads\adwcleaner (2).exe
Deleted : C:\Documents and Settings\Compaq_Owner\My Documents\Downloads\adwcleaner.exe
Deleted : C:\Documents and Settings\Compaq_Owner\My Documents\Downloads\ZHPDiag2 (1).exe
Deleted : C:\Documents and Settings\Compaq_Owner\My Documents\Downloads\ZHPDiag2.exe
Deleted : HKLM\SOFTWARE\AdwCleaner
Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ZHPDiag_is1

~ Creating registry backup ... OK

~ Cleaning system restore ...

Deleted : RP #730 [Software Distribution Service 3.0 | 03/21/2013 21:32:15]
Deleted : RP #731 [System Checkpoint | 03/21/2013 21:32:16]
Deleted : RP #732 [System Checkpoint | 03/21/2013 21:32:16]
Deleted : RP #733 [System Checkpoint | 03/21/2013 21:32:16]
Deleted : RP #734 [System Checkpoint | 03/21/2013 21:32:16]
Deleted : RP #735 [System Checkpoint | 03/21/2013 21:32:16]
Deleted : RP #736 [System Checkpoint | 03/21/2013 21:32:17]
Deleted : RP #737 [System Checkpoint | 03/21/2013 21:32:17]
Deleted : RP #738 [System Checkpoint | 03/21/2013 21:32:17]
Deleted : RP #739 [System Checkpoint | 03/21/2013 21:32:17]
Deleted : RP #740 [System Checkpoint | 03/21/2013 21:32:17]
Deleted : RP #741 [System Checkpoint | 03/21/2013 21:32:18]
Deleted : RP #742 [System Checkpoint | 03/21/2013 21:32:18]
Deleted : RP #743 [Software Distribution Service 3.0 | 03/21/2013 21:32:18]
Deleted : RP #744 [System Checkpoint | 03/21/2013 21:32:18]
Deleted : RP #745 [System Checkpoint | 03/21/2013 21:32:18]
Deleted : RP #746 [System Checkpoint | 03/21/2013 21:32:19]
Deleted : RP #747 [System Checkpoint | 03/21/2013 21:32:19]
Deleted : RP #748 [Software Distribution Service 3.0 | 03/21/2013 21:32:19]
Deleted : RP #749 [System Checkpoint | 03/21/2013 21:32:20]
Deleted : RP #750 [System Checkpoint | 03/21/2013 21:32:20]
Deleted : RP #751 [System Checkpoint | 03/21/2013 21:32:20]
Deleted : RP #752 [System Checkpoint | 03/21/2013 21:32:20]
Deleted : RP #753 [Software Distribution Service 3.0 | 03/21/2013 21:32:20]
Deleted : RP #754 [Installed Java 7 Update 11 | 03/21/2013 21:32:21]
Deleted : RP #755 [System Checkpoint | 03/21/2013 21:32:21]
Deleted : RP #756 [System Checkpoint | 03/21/2013 21:32:21]
Deleted : RP #757 [System Checkpoint | 03/21/2013 21:32:21]
Deleted : RP #758 [System Checkpoint | 03/21/2013 21:32:21]
Deleted : RP #759 [System Checkpoint | 03/21/2013 21:32:22]
Deleted : RP #760 [System Checkpoint | 03/21/2013 21:32:22]
Deleted : RP #761 [System Checkpoint | 03/21/2013 21:32:22]
Deleted : RP #762 [System Checkpoint | 03/21/2013 21:32:22]
Deleted : RP #763 [System Checkpoint | 03/21/2013 21:32:22]
Deleted : RP #764 [System Checkpoint | 03/21/2013 21:32:23]
Deleted : RP #765 [System Checkpoint | 03/21/2013 21:32:23]
Deleted : RP #766 [System Checkpoint | 03/21/2013 21:32:24]
Deleted : RP #767 [System Checkpoint | 03/21/2013 21:32:24]
Deleted : RP #768 [System Checkpoint | 03/21/2013 21:32:24]
Deleted : RP #769 [System Checkpoint | 03/21/2013 21:32:24]
Deleted : RP #770 [System Checkpoint | 03/21/2013 21:32:25]
Deleted : RP #771 [Removed Java 7 Update 7 | 03/21/2013 21:32:25]
Deleted : RP #772 [Installed Java 7 Update 13 | 03/21/2013 21:32:25]
Deleted : RP #773 [System Checkpoint | 03/21/2013 21:32:25]
Deleted : RP #774 [System Checkpoint | 03/21/2013 21:32:25]
Deleted : RP #775 [System Checkpoint | 03/21/2013 21:32:25]
Deleted : RP #776 [System Checkpoint | 03/21/2013 21:32:26]
Deleted : RP #777 [System Checkpoint | 03/21/2013 21:32:26]
Deleted : RP #778 [Software Distribution Service 3.0 | 03/21/2013 21:32:26]
Deleted : RP #779 [System Checkpoint | 03/21/2013 21:32:26]
Deleted : RP #780 [System Checkpoint | 03/21/2013 21:32:26]
Deleted : RP #781 [System Checkpoint | 03/21/2013 21:32:26]
Deleted : RP #782 [System Checkpoint | 03/21/2013 21:32:27]
Deleted : RP #783 [System Checkpoint | 03/21/2013 21:32:27]
Deleted : RP #784 [System Checkpoint | 03/21/2013 21:32:27]
Deleted : RP #785 [Removed Java 7 Update 13 | 03/21/2013 21:32:27]
Deleted : RP #786 [Installed Java 7 Update 15 | 03/21/2013 21:32:27]
Deleted : RP #787 [System Checkpoint | 03/21/2013 21:32:27]
Deleted : RP #788 [System Checkpoint | 03/21/2013 21:32:27]
Deleted : RP #789 [System Checkpoint | 03/21/2013 21:32:28]
Deleted : RP #790 [System Checkpoint | 03/21/2013 21:32:28]
Deleted : RP #791 [System Checkpoint | 03/21/2013 21:32:28]
Deleted : RP #792 [System Checkpoint | 03/21/2013 21:32:28]
Deleted : RP #793 [System Checkpoint | 03/21/2013 21:32:28]
Deleted : RP #794 [System Checkpoint | 03/21/2013 21:32:29]
Deleted : RP #795 [Removed Java 7 Update 15 | 03/21/2013 21:32:29]
Deleted : RP #796 [Installed Java 7 Update 17 | 03/21/2013 21:32:30]
Deleted : RP #797 [System Checkpoint | 03/21/2013 21:32:30]
Deleted : RP #798 [System Checkpoint | 03/21/2013 21:32:30]
Deleted : RP #799 [System Checkpoint | 03/21/2013 21:32:30]
Deleted : RP #800 [System Checkpoint | 03/21/2013 21:32:30]
Deleted : RP #801 [Software Distribution Service 3.0 | 03/21/2013 21:32:31]
Deleted : RP #802 [System Checkpoint | 03/21/2013 21:32:31]
Deleted : RP #803 [System Checkpoint | 03/21/2013 21:32:32]
Deleted : RP #804 [System Checkpoint | 03/21/2013 21:32:32]
Deleted : RP #805 [Printer Driver PDFCreator Installed | 03/21/2013 21:32:32]
Deleted : RP #806 [System Checkpoint | 03/21/2013 21:32:32]
Deleted : RP #807 [System Checkpoint | 03/21/2013 21:32:32]
Deleted : RP #808 [System Checkpoint | 03/21/2013 21:32:33]
Deleted : RP #809 [Software Distribution Service 3.0 | 03/21/2013 21:32:33]
Deleted : RP #810 [End of disinfection | 03/21/2013 21:32:38]
Deleted : RP #811 [System Checkpoint | 03/23/2013 02:42:44]

New restore point created !

~ Resetting system settings ... OK

########## - EOF - ##########

Utilisateur anonyme · Answer

Re

Voilà le sujet est vraiment résolu ;-))

@+

Page d'acceuil

44 réponses

Discussions similaires

Newsletters