Infection par trojan win32 generic

latouf64 Messages postés 7 Statut Membre -  
Malekal_morte- Messages postés 178136 Date d'inscription   Statut Modérateur, Contributeur sécurité Dernière intervention   -
Bonsoir,

Je rentre chez moi et découvre que Kaspersky a relevé une infection nommée trojan win32 generic.

J'ai cherché sur le forum...et ai balayé l'ordi par Tdsskiller de Kaspersky.

Voici le lien où j'ai hébergé le rapport : https://textup.fr/70693gD

Merci de l'aide !

Cordialement.

Latouf 64

12 réponses

  1.
    Malekal_morte- Messages postés 178136 Date d'inscription   Statut Modérateur, Contributeur sécurité Dernière intervention   24 712
     
    Salut,

    il le détecte dans quel fichier ?
    0
  2. latouf64 Messages postés 7 Statut Membre
     
    Bonsoir,

    il me marque trois fichiers :
    C:\Documents and Settings\YoannRobert\AppData\Local\Temporary Internet Files\Content.IE5\7WVJNEX7/pack[1].7z//protector.dll

    Merci pour le coup de main...c'est la première fois que cela m'arrive !

    Latouf64
    0
  3. Malekal_morte- Messages postés 178136 Date d'inscription   Statut Modérateur, Contributeur sécurité Dernière intervention   24 712
     
    vide le cache d'internet explorer https://www.commentcamarche.net/faq/3037-vider-le-cache-du-navigateur-chrome-firefox-safari-et-ie

    puis :

    Télécharge https://www.malekal.com/adwcleaner-supprimer-virus-adwares-pup/?t=33839&start= AdwCleaner ( d'Xplode ) sur ton bureau.
    Sur la page d'AdwCleaner, à droite, clic sur la disquette grise avec la flèche verte pour lancer le téléchargement.
    Lance AdwCleaner, clique sur [Scanner].
    Le scan peux durer plusieurs minutes, patienter.
    Une fois le scan terminé, clique sur [Nettoyer]

    Une fois le nettoyage terminéi, un rapport s'ouvrira. Copie/colle le contenu du rapport dans ta prochaine réponse par un copier/coller.
    Si cela ne fonctionne pas, utilise le site http://pjjoint.malekal.com pour héberger le rapport, donne le lien du rapport dans un nouveau message.

    Note : Le rapport est également sauvegardé sous C:\AdwCleaner[S1].txt

    0
  4. latouf64 Messages postés 7 Statut Membre
     
    Ok...j'applique tes consignes...

    Voilà le compte-rendu :

    # AdwCleaner v3.004 - Rapport créé le 15/09/2013 à 19:45:07
    # Mis à jour le 15/09/2013 par Xplode
    # Système d'exploitation : Windows 7 Home Premium Service Pack 1 (64 bits)
    # Nom d'utilisateur : YoannRobert - YOANNROBERT-PC
    # Exécuté depuis : C:\Users\YoannRobert\Desktop\adwcleaner.exe
    # Option : Nettoyer

    ***** [ Services ] *****

    ***** [ Fichiers / Dossiers ] *****

    Dossier Supprimé : C:\ProgramData\Babylon
    Dossier Supprimé : C:\ProgramData\boost_interprocess
    Dossier Supprimé : C:\ProgramData\Partner
    Dossier Supprimé : C:\ProgramData\visualbee
    Dossier Supprimé : C:\Program Files (x86)\Conduit
    Dossier Supprimé : C:\Program Files (x86)\optimizer pro
    Dossier Supprimé : C:\Program Files (x86)\Windows Searchqu Toolbar
    Dossier Supprimé : C:\Program Files (x86)\Audacity-tools
    Dossier Supprimé : C:\Program Files\DomaIQ Uninstaller
    Dossier Supprimé : C:\Users\YOANNR~1\AppData\Local\Temp\AskSearch
    Dossier Supprimé : C:\Users\YOANNR~1\AppData\Local\Temp\CT3293887
    Dossier Supprimé : C:\Users\YoannRobert\AppData\Local\Conduit
    Dossier Supprimé : C:\Users\YoannRobert\AppData\Local\cre
    Dossier Supprimé : C:\Users\YoannRobert\AppData\Local\Deal Boat
    Dossier Supprimé : C:\Users\YoannRobert\AppData\LocalLow\boost_interprocess
    Dossier Supprimé : C:\Users\YoannRobert\AppData\LocalLow\Conduit
    Dossier Supprimé : C:\Users\YoannRobert\AppData\LocalLow\searchquband
    Dossier Supprimé : C:\Users\YoannRobert\AppData\LocalLow\Searchqutoolbar
    Dossier Supprimé : C:\Users\YoannRobert\AppData\LocalLow\Audacity-tools
    Dossier Supprimé : C:\Users\YoannRobert\AppData\Roaming\Babylon
    Dossier Supprimé : C:\Users\YoannRobert\AppData\Roaming\pdfforge
    Dossier Supprimé : C:\Users\Elodie\AppData\LocalLow\boost_interprocess
    Dossier Supprimé : C:\Users\Elodie\AppData\LocalLow\Conduit
    Dossier Supprimé : C:\Users\Elodie\AppData\LocalLow\Audacity-tools
    Dossier Supprimé : C:\Users\YoannRobert\AppData\Roaming\Mozilla\Firefox\Profiles\qufhm493.default\Searchqutoolbar
    Dossier Supprimé : C:\Users\Elodie\AppData\Roaming\Mozilla\Firefox\Profiles\r7cwahl7.default\Searchqutoolbar
    Dossier Supprimé : C:\Users\YoannRobert\AppData\Roaming\Mozilla\Firefox\Profiles\qufhm493.default\Extensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1}
    Dossier Supprimé : C:\Users\YoannRobert\AppData\Roaming\Mozilla\Firefox\Profiles\qufhm493.default\Extensions\{99079A25-328F-4BD4-BE04-00955ACAA0A7}
    Dossier Supprimé : C:\Users\Elodie\AppData\Roaming\Mozilla\Firefox\Profiles\r7cwahl7.default\Extensions\{99079A25-328F-4BD4-BE04-00955ACAA0A7}
    Dossier Supprimé : C:\Users\YoannRobert\AppData\Roaming\Mozilla\Firefox\Profiles\qufhm493.default\Extensions\{d78b6094-2202-49e9-97b7-d9f31635bc08}
    Dossier Supprimé : C:\Users\YoannRobert\AppData\Local\Google\Chrome\User Data\Default\Extensions\bjbkkpfgfjlcicclmfakhipaaoifgeno
    Dossier Supprimé : C:\Users\YoannRobert\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl
    Dossier Supprimé : C:\Users\YoannRobert\AppData\Local\Google\Chrome\User Data\Default\Extensions\agembgempdmebanhogdjbpcmppdmklbe
    Fichier Supprimé : C:\Program Files (x86)\Mozilla Firefox\Extensions\{1FD91A9C-410C-4090-BBCC-55D3450EF433}
    Fichier Supprimé : C:\END
    Fichier Supprimé : C:\Users\YOANNR~1\AppData\Local\Temp\Searchqu.ini
    Fichier Supprimé : C:\Users\YOANNR~1\AppData\Local\Temp\searchqutoolbar-manifest.xml
    Fichier Supprimé : C:\Users\YOANNR~1\AppData\Local\Temp\SetupDataMngr_Searchqu.exe
    Fichier Supprimé : C:\Users\YoannRobert\AppData\Roaming\Microsoft\Windows\Start Menu\eBay.lnk
    Fichier Supprimé : C:\Users\YoannRobert\AppData\Roaming\Mozilla\Firefox\Profiles\qufhm493.default\\invalidprefs.js
    Fichier Supprimé : C:\Users\YoannRobert\AppData\Roaming\Mozilla\Firefox\Profiles\qufhm493.default\bProtector_extensions.rdf
    Fichier Supprimé : C:\Users\YoannRobert\AppData\Roaming\Mozilla\Firefox\Profiles\qufhm493.default\searchplugins\Babylon.xml
    Fichier Supprimé : C:\Program Files (x86)\Mozilla Firefox\searchplugins\Babylon.xml
    Fichier Supprimé : C:\Users\YoannRobert\AppData\Roaming\Mozilla\Firefox\Profiles\qufhm493.default\searchplugins\BrowserProtect.xml
    Fichier Supprimé : C:\Users\YoannRobert\AppData\Roaming\Mozilla\Firefox\Profiles\qufhm493.default\searchplugins\Conduit.xml
    Fichier Supprimé : C:\Users\YoannRobert\AppData\Roaming\Mozilla\Firefox\Profiles\qufhm493.default\searchplugins\Search_Results.xml
    Fichier Supprimé : C:\Program Files (x86)\Mozilla Firefox\searchplugins\Search_Results.xml
    Fichier Supprimé : C:\Users\YoannRobert\AppData\Roaming\Mozilla\Firefox\Profiles\qufhm493.default\user.js
    Fichier Supprimé : C:\Users\YoannRobert\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_eooncjejnppfjjklapaamhcdmjbilmde_0.localstorage
    Fichier Supprimé : C:\Users\YoannRobert\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_igdhbblpcellaljokkpfhcjlagemhgjl_0.localstorage

    ***** [ Raccourcis ] *****

    ***** [ Registre ] *****

    Clé Supprimée : HKCU\Software\Google\Chrome\Extensions\agembgempdmebanhogdjbpcmppdmklbe
    Clé Supprimée : HKLM\SOFTWARE\Google\Chrome\Extensions\agembgempdmebanhogdjbpcmppdmklbe
    Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\grusskartencenter.com
    Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\EscDomains\grusskartencenter.com
    Valeur Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [Optimizer Pro]
    Valeur Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [SearchProtect]
    Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}
    Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\BrowserConnection.dll
    Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\DNSBHO.dll
    Clé Supprimée : HKLM\SOFTWARE\Classes\BrowserConnection.Loader
    Clé Supprimée : HKLM\SOFTWARE\Classes\BrowserConnection.Loader.1
    Clé Supprimée : HKLM\SOFTWARE\Classes\DnsBHO.BHO
    Clé Supprimée : HKLM\SOFTWARE\Classes\DnsBHO.BHO.1
    Clé Supprimée : HKLM\SOFTWARE\Classes\Prod.cap
    Clé Supprimée : HKLM\SOFTWARE\Classes\SearchQUIEHelper.DNSGuard
    Clé Supprimée : HKLM\SOFTWARE\Classes\SearchQUIEHelper.DNSGuard.1
    Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\AskInstallChecker_RASAPI32
    Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\AskInstallChecker_RASMANCS
    Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\askpartnercobrandingtool_RASAPI32
    Clé Supprimée : HKLM\SOFTWARE\Microsoft\tracing\askpartnercobrandingtool_RASMANCS
    Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\ConduitInstaller_RASAPI32
    Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\ConduitInstaller_RASMANCS
    Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\datamngrUI_RASAPI32
    Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\datamngrUI_RASMANCS
    Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\Iminent_RASAPI32
    Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\Iminent_RASMANCS
    Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\IminentSetup_RASAPI32
    Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\IminentSetup_RASMANCS
    Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\MyBabylontb_RASAPI32
    Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\MyBabylontb_RASMANCS
    Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\SearchquMediaBar_RASAPI32
    Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\SearchquMediaBar_RASMANCS
    Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\SetupDataMngr_Searchqu_RASAPI32
    Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\SetupDataMngr_Searchqu_RASMANCS
    Valeur Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [DataMngr]
    Clé Supprimée : HKLM\SOFTWARE\Classes\CrossriderApp0012747.BHO
    Clé Supprimée : HKLM\SOFTWARE\Classes\CrossriderApp0012747.BHO.1
    Clé Supprimée : HKLM\SOFTWARE\Classes\CrossriderApp0012747.Sandbox
    Clé Supprimée : HKLM\SOFTWARE\Classes\CrossriderApp0012747.Sandbox.1
    Clé Supprimée : HKLM\SOFTWARE\Classes\CrossriderApp0033438.BHO
    Clé Supprimée : HKLM\SOFTWARE\Classes\CrossriderApp0033438.BHO.1
    Clé Supprimée : HKLM\SOFTWARE\Classes\CrossriderApp0033438.Sandbox
    Clé Supprimée : HKLM\SOFTWARE\Classes\CrossriderApp0033438.Sandbox.1
    Clé Supprimée : HKLM\SOFTWARE\58558d88b53cb948
    Clé Supprimée : HKLM\SOFTWARE\Classes\Toolbar.CT2643111
    Clé Supprimée : HKLM\SOFTWARE\Classes\Toolbar.CT3293887
    Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_pour_usbfix_RASAPI32
    Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_pour_usbfix_RASMANCS
    Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{AC662AF2-4601-4A68-84DF-A3FE83F1A5F9}
    Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{BDB69379-802F-4EAF-B541-F8DE92DD98DB}
    Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{D97A8234-F2A2-4AD4-91D5-FECDB2C553AF}
    Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{02054E11-5113-4BE3-8153-AA8DFB5D3761}
    Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{0F6E720A-1A6B-40E1-A294-1D4D19F156C8}
    Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{3C471948-F874-49F5-B338-4F214A2EE0B1}
    Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{99079A25-328F-4BD4-BE04-00955ACAA0A7}
    Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{9D717F81-9148-4F12-8568-69135F087DB0}
    Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{A40DC6C5-79D0-4CA8-A185-8FF989AF1115}
    Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{CC1AC828-BB47-4361-AFB5-96EEE259DD87}
    Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{FEFD3AF5-A346-4451-AA23-A3AD54915515}
    Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{D0B1518E-3E45-4D16-A23B-4D90EF938E44}
    Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{5CD5B243-1619-4929-A404-0D894841A37A}
    Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110111271147}
    Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110311341138}
    Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220322342238}
    Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{021B4049-F57D-4565-A693-FD3B04786BFA}
    Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{0362AA09-808D-48E9-B360-FB51A8CBCE09}
    Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{06844020-CD0B-3D3D-A7FE-371153013E49}
    Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{0ADC01BB-303B-3F8E-93DA-12C140E85460}
    Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{10D3722F-23E6-3901-B6C1-FF6567121920}
    Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{1675E62B-F911-3B7B-A046-EB57261212F3}
    Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{192929F2-9273-3894-91B0-F54671C4C861}
    Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{1B730ACF-26A3-447B-9994-14AEE0EB72CC}
    Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{2932897E-3036-43D9-8A64-B06447992065}
    Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{2DE92D29-A042-3C37-BFF8-07C7D8893EFA}
    Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{32B80AD6-1214-45F4-994E-78A5D482C000}
    Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{3A8E103F-B2B7-3BEF-B3B0-88E29B2420E4}
    Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{44B619BC-3D2B-4990-AA4F-9AA366921792}
    Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{478CE5D3-D38E-3FFE-8DBE-8C4A0F1C4D8D}
    Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{48B7DA4E-69ED-39E3-BAD5-3E3EFF22CFB0}
    Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{5982F405-44E4-3BBB-BAC4-CF8141CBBC5C}
    Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{5D8C3CC3-3C05-38A1-B244-924A23115FE9}
    Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{641593AF-D9FD-30F7-B783-36E16F7A2E08}
    Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{711FC48A-1356-3932-94D8-A8B733DBC7E4}
    Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{72227B7F-1F02-3560-95F5-592E68BACC0C}
    Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{7B5E8CE3-4722-4C0E-A236-A6FF731BEF37}
    Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{813A22E0-3E2B-4188-9BDA-ECA9878B8D48}
    Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{890D4F59-5ED0-3CB4-8E0E-74A5A86E7ED0}
    Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{8C68913C-AC3C-4494-8B9C-984D87C85003}
    Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{8D019513-083F-4AA5-933F-7D43A6DA82C4}
    Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{923F6FB8-A390-370E-A0D2-DD505432481D}
    Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{9BBB26EF-B178-35D6-9D3D-B485F4279FE5}
    Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{A62DDBE0-8D2A-339A-B089-8CBCC5CD322A}
    Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{A82AD04D-0B8E-3A49-947B-6A69A8A9C96D}
    Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{ADEB3CC9-A05D-4FCC-BD09-9025456AA3EA}
    Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{B06D4521-D09C-3F41-8E39-9D784CCA2A75}
    Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{BCFF5F55-6F44-11D2-86F8-00104B265ED5}
    Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{C06DAD42-6F39-4CE1-83CC-9A8B9105E556}
    Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{C2E799D0-43A5-3477-8A98-FC5F3677F35C}
    Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{D16107CD-2AD5-46A8-BA59-303B7C32C500}
    Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{D25B101F-8188-3B43-9D85-201F372BC205}
    Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{D2BA7595-5E44-3F1E-880F-03B3139FA5ED}
    Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{D35F5C81-17D9-3E1C-A1FC-4472542E1D25}
    Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{D8FA96CA-B250-312C-AF34-4FF1DD72589D}
    Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{DAFC1E63-3359-416D-9BC2-E7DCA6F7B0F3}
    Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{DC5E5C44-80FD-3697-9E65-9F286D92F3E7}
    Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{E1B4C9DE-D741-385F-981E-6745FACE6F01}
    Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{E7B623F5-9715-3F9F-A671-D1485A39F8A2}
    Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{ED916A7B-7C68-3198-B87D-2DABC30A5587}
    Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{EFA1BDB2-BB3D-3D9A-8EB5-D0D22E0F64F4}
    Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{F4CBF4DD-F8FE-35BA-BB7E-68304DAAB70B}
    Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{FC32005D-E27C-32E0-ADFA-152F598B75E7}
    Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550355345538}
    Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660366346638}
    Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{2BF2028E-3F3C-4C05-AB45-B2F1DCFE0759}
    Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{5B4144E1-B61D-495A-9A50-CD1A95D86D15}
    Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{6A4BCABA-C437-4C76-A54E-AF31B8A76CB9}
    Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{841D5A49-E48D-413C-9C28-EB3D9081D705}
    Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{DB538320-D3C5-433C-BCA9-C4081A054FCF}
    Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{44444444-4444-4444-4444-440344344438}
    Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0F6E720A-1A6B-40E1-A294-1D4D19F156C8}
    Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{99079A25-328F-4BD4-BE04-00955ACAA0A7}
    Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9D717F81-9148-4F12-8568-69135F087DB0}
    Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D0B1518E-3E45-4D16-A23B-4D90EF938E44}
    Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110111271147}
    Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110311341138}
    Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{0F6E720A-1A6B-40E1-A294-1D4D19F156C8}
    Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{99079A25-328F-4BD4-BE04-00955ACAA0A7}
    Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{9D717F81-9148-4F12-8568-69135F087DB0}
    Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D0B1518E-3E45-4D16-A23B-4D90EF938E44}
    Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{11111111-1111-1111-1111-110111271147}
    Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{0F6E720A-1A6B-40E1-A294-1D4D19F156C8}
    Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{82E1477C-B154-48D3-9891-33D83C26BCD3}
    Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{98889811-442D-49DD-99D7-DC866BE87DBC}
    Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{99079A25-328F-4BD4-BE04-00955ACAA0A7}
    Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{9D717F81-9148-4F12-8568-69135F087DB0}
    Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{D0B1518E-3E45-4D16-A23B-4D90EF938E44}
    Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{11111111-1111-1111-1111-110111271147}
    Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{5CD5B243-1619-4929-A404-0D894841A37A}
    Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{11111111-1111-1111-1111-110111271147}
    Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{11111111-1111-1111-1111-110311341138}
    Clé Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{68B81CCD-A80C-4060-8947-5AE69ED01199}
    Clé Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{99079A25-328F-4BD4-BE04-00955ACAA0A7}
    Clé Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E6B969FB-6D33-48D2-9061-8BBD4899EB08}
    Clé Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{11111111-1111-1111-1111-110111271147}
    Clé Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{21111111-1111-1111-1111-110111271147}
    Clé Supprimée : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
    Clé Supprimée : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2414}
    Clé Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2414}
    Valeur Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{99079A25-328F-4BD4-BE04-00955ACAA0A7}]
    Valeur Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{D0B1518E-3E45-4D16-A23B-4D90EF938E44}]
    Valeur Supprimée : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{D0B1518E-3E45-4D16-A23B-4D90EF938E44}]
    Valeur Supprimée : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{D0B1518E-3E45-4D16-A23B-4D90EF938E44}]
    Valeur Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks [{D0B1518E-3E45-4D16-A23B-4D90EF938E44}]
    Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\CLSID\{9D717F81-9148-4F12-8568-69135F087DB0}
    Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\CLSID\{A40DC6C5-79D0-4CA8-A185-8FF989AF1115}
    Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\CLSID\{CC1AC828-BB47-4361-AFB5-96EEE259DD87}
    Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\CLSID\{FEFD3AF5-A346-4451-AA23-A3AD54915515}
    Clé Supprimée : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9D717F81-9148-4F12-8568-69135F087DB0}
    Clé Supprimée : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2414}
    Clé Supprimée : HKCU\Software\Conduit
    Clé Supprimée : HKCU\Software\Cr_Installer
    Clé Supprimée : HKCU\Software\DataMngr
    [#] Clé Supprimée : HKCU\Software\DataMngr_Toolbar
    Clé Supprimée : HKCU\Software\Iminent
    Clé Supprimée : HKCU\Software\InstallCore
    Clé Supprimée : HKCU\Software\InstalledBrowserExtensions
    Clé Supprimée : HKCU\Software\Softonic
    Clé Supprimée : HKCU\Software\visualbee
    Clé Supprimée : HKCU\Software\YahooPartnerToolbar
    Clé Supprimée : HKCU\Software\AppDataLow\Toolbar
    Clé Supprimée : HKCU\Software\AppDataLow\Software\Conduit
    Clé Supprimée : HKCU\Software\AppDataLow\Software\ConduitSearchScopes
    Clé Supprimée : HKCU\Software\AppDataLow\Software\Crossrider
    Clé Supprimée : HKCU\Software\AppDataLow\Software\Deal Boat
    Clé Supprimée : HKCU\Software\AppDataLow\Software\searchqutoolbar
    Clé Supprimée : HKCU\Software\AppDataLow\Software\SmartBar
    Clé Supprimée : HKCU\Software\AppDataLow\Software\Audacity-tools
    Clé Supprimée : HKLM\Software\Babylon
    Clé Supprimée : HKLM\Software\Conduit
    Clé Supprimée : HKLM\Software\DataMngr
    Clé Supprimée : HKLM\Software\Deal Boat
    Clé Supprimée : HKLM\Software\Iminent
    Clé Supprimée : HKLM\Software\SearchquMediabarTb
    Clé Supprimée : HKLM\Software\Supreme Savings
    Clé Supprimée : HKLM\Software\visualbee
    Clé Supprimée : HKLM\Software\Audacity-tools
    Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}
    Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\DomaIQ Uninstaller
    Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SearchTheWebARP
    Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Windows Searchqu Toolbar
    Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Audacity-tools Toolbar
    Clé Supprimée : [x64] HKLM\SOFTWARE\DataMngr
    Clé Supprimée : [x64] HKLM\SOFTWARE\DomaIQ
    Donnée Supprimée : [x64] HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows [AppInit_DLLs] - C:\PROGRA~2\WIA6EB~1\Datamngr\x64\datamngr.dll
    Donnée Supprimée : [x64] HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows [AppInit_DLLs] - C:\PROGRA~2\WIA6EB~1\Datamngr\x64\IEBHO.dll

    ***** [ Navigateurs ] *****

    -\\ Internet Explorer v10.0.9200.16686

    Paramètre Restauré : HKCU\Software\Microsoft\Internet Explorer\Main [Start Page]

    -\\ Mozilla Firefox v23.0.1 (fr)

    [ Fichier : C:\Users\YoannRobert\AppData\Roaming\Mozilla\Firefox\Profiles\qufhm493.default\prefs.js ]

    Ligne Supprimée : user_pref("CT3293887.FF19Solved", "true");
    Ligne Supprimée : user_pref("CT3293887.addressUrlXPETakeover", "true");
    Ligne Supprimée : user_pref("CT3293887.browser.search.defaultthis.engineName", "true");
    Ligne Supprimée : user_pref("CT3293887.defaultSearchXPETakeover", "true");
    Ligne Supprimée : user_pref("CT3293887.installDate", "4/5/2013 16:39:23");
    Ligne Supprimée : user_pref("CT3293887.installSessionId", "-1");
    Ligne Supprimée : user_pref("CT3293887.installSp", "TRUE");
    Ligne Supprimée : user_pref("CT3293887.keyword", "true");
    Ligne Supprimée : user_pref("CT3293887.searchRevert", "FALSE");
    Ligne Supprimée : user_pref("CT3293887.searchUserMode", "2");
    Ligne Supprimée : user_pref("CT3293887.smartbar.homepage", "true");
    Ligne Supprimée : user_pref("CT3293887.startPageXPETakeover", "true");
    Ligne Supprimée : user_pref("CT3293887.versionFromInstaller", "10.15.2.23");
    Ligne Supprimée : user_pref("Smartbar.ConduitHomepagesList", "hxxp://search.conduit.com/?ctid=CT3293887&CUI=UN11682739519039812&UM=2&SearchSource=13&UP=SPA6D8DA31-7979-44BF-80BF-E396786D3DB9");
    Ligne Supprimée : user_pref("Smartbar.SearchFromAddressBarSavedUrl", "hxxp://dts.search-results.com/sr?src=ffb&appid=0&systemid=414&sr=0&q=");
    Ligne Supprimée : user_pref("browser.search.defaultthis.engineName", "Vgrabber V1.6 Customized Web Search");
    Ligne Supprimée : user_pref("browser.search.defaulturl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3293887&CUI=UN11682739519039812&UM=2&SearchSource=3&q={searchTerms}");
    Ligne Supprimée : user_pref("extensions.BabylonToolbar.admin", false);
    Ligne Supprimée : user_pref("extensions.BabylonToolbar.aflt", "babsst");
    Ligne Supprimée : user_pref("extensions.BabylonToolbar.appId", "{BDB69379-802F-4eaf-B541-F8DE92DD98DB}");
    Ligne Supprimée : user_pref("extensions.BabylonToolbar.dfltLng", "en");
    Ligne Supprimée : user_pref("extensions.BabylonToolbar.excTlbr", false);
    Ligne Supprimée : user_pref("extensions.BabylonToolbar.id", "3cca10e900000000000072f06d32491a");
    Ligne Supprimée : user_pref("extensions.BabylonToolbar.instlDay", "15675");
    Ligne Supprimée : user_pref("extensions.BabylonToolbar.instlRef", "sst");
    Ligne Supprimée : user_pref("extensions.BabylonToolbar.prdct", "BabylonToolbar");
    Ligne Supprimée : user_pref("extensions.BabylonToolbar.prtnrId", "babylon");
    Ligne Supprimée : user_pref("extensions.BabylonToolbar.tlbrId", "irhnew");
    Ligne Supprimée : user_pref("extensions.BabylonToolbar.tlbrSrchUrl", "hxxp://search.babylon.com/?babsrc=TB_def&mntrId=3cca10e900000000000072f06d32491a&q=");
    Ligne Supprimée : user_pref("extensions.BabylonToolbar.vrsn", "1.8.3.8");
    Ligne Supprimée : user_pref("extensions.BabylonToolbar.vrsni", "1.8.3.8");
    Ligne Supprimée : user_pref("extensions.BabylonToolbar_i.smplGrp", "none");
    Ligne Supprimée : user_pref("extensions.BabylonToolbar_i.vrsnTs", "1.8.3.89:24:26");
    Ligne Supprimée : user_pref("extensions.a75c9b989a6e64455971f45304161eb2302648b9149b24d7f99ef7e959a8e6505com33438.33438.backgroundjs", "\n\n/*****************************************************************************[...]
    Ligne Supprimée : user_pref("extensions.a75c9b989a6e64455971f45304161eb2302648b9149b24d7f99ef7e959a8e6505com33438.33438.internaldb.cache/5cdf8a7ef2ec84abac286c67587b78d9.value", "%22function%20tcmMarkWindow%28a%29%7Bva[...]
    Ligne Supprimée : user_pref("extensions.a75c9b989a6e64455971f45304161eb2302648b9149b24d7f99ef7e959a8e6505com33438.33438.internaldb.cache/62cce7d26ab5636bceb113b988d56c59_FR.value", "%22var%20cat_62cce7d26ab5636bceb113b[...]
    Ligne Supprimée : user_pref("extensions.a75c9b989a6e64455971f45304161eb2302648b9149b24d7f99ef7e959a8e6505com33438.33438.internaldb.cache/d9fe5d2850f1ed167451b193e8bd0e0c_FR.value", "%22var%20cat_d9fe5d2850f1ed167451b19[...]
    Ligne Supprimée : user_pref("extensions.a75c9b989a6e64455971f45304161eb2302648b9149b24d7f99ef7e959a8e6505com33438.33438.internaldb.cache/e7395ccc0c22b2cca7bf3e0c7db4d8a6_FR.value", "%22var%20cat_e7395ccc0c22b2cca7bf3e0[...]
    Ligne Supprimée : user_pref("extensions.a75c9b989a6e64455971f45304161eb2302648b9149b24d7f99ef7e959a8e6505com33438.33438.js", "\n\n /************************************************************************************\[...]
    Ligne Supprimée : user_pref("extensions.a75c9b989a6e64455971f45304161eb2302648b9149b24d7f99ef7e959a8e6505com33438.33438.plugins.plugin_1.code", "appAPI._cr_config={appID:function(){var a=appAPI.appInfo;if(a){return app[...]
    Ligne Supprimée : user_pref("extensions.a75c9b989a6e64455971f45304161eb2302648b9149b24d7f99ef7e959a8e6505com33438.33438.plugins.plugin_102.code", "if (typeof appAPI.internal.monetization === \"undefined\") {\n appAP[...]
    Ligne Supprimée : user_pref("extensions.a75c9b989a6e64455971f45304161eb2302648b9149b24d7f99ef7e959a8e6505com33438.33438.plugins.plugin_104.code", "if (typeof appAPI.internal.monetization === \"undefined\") {\n appAP[...]
    Ligne Supprimée : user_pref("extensions.a75c9b989a6e64455971f45304161eb2302648b9149b24d7f99ef7e959a8e6505com33438.33438.plugins.plugin_119.code", "if (typeof appAPI.internal.monetization === \"undefined\") {\n appAP[...]
    Ligne Supprimée : user_pref("extensions.a75c9b989a6e64455971f45304161eb2302648b9149b24d7f99ef7e959a8e6505com33438.33438.plugins.plugin_120.code", "if (typeof appAPI.internal.monetization === \"undefined\") {\n appAP[...]
    Ligne Supprimée : user_pref("extensions.a75c9b989a6e64455971f45304161eb2302648b9149b24d7f99ef7e959a8e6505com33438.33438.plugins.plugin_123.code", "if (typeof appAPI.internal.monetization === \"undefined\") {\n appAP[...]
    Ligne Supprimée : user_pref("extensions.a75c9b989a6e64455971f45304161eb2302648b9149b24d7f99ef7e959a8e6505com33438.33438.plugins.plugin_13.name", "CrossriderAppUtils");
    Ligne Supprimée : user_pref("extensions.a75c9b989a6e64455971f45304161eb2302648b9149b24d7f99ef7e959a8e6505com33438.33438.plugins.plugin_138.code", "if (typeof appAPI.internal.monetization === \"undefined\") {\n appAP[...]
    Ligne Supprimée : user_pref("extensions.a75c9b989a6e64455971f45304161eb2302648b9149b24d7f99ef7e959a8e6505com33438.33438.plugins.plugin_14.name", "CrossriderUtils");
    Ligne Supprimée : user_pref("extensions.a75c9b989a6e64455971f45304161eb2302648b9149b24d7f99ef7e959a8e6505com33438.33438.plugins.plugin_155.code", "if (typeof appAPI.internal.monetization === \"undefined\") {\n appAP[...]
    Ligne Supprimée : user_pref("extensions.a75c9b989a6e64455971f45304161eb2302648b9149b24d7f99ef7e959a8e6505com33438.33438.plugins.plugin_16.code", "if((typeof isBackground===\"undefined\"||isBackground!==true)&&(typeof _[...]
    Ligne Supprimée : user_pref("extensions.a75c9b989a6e64455971f45304161eb2302648b9149b24d7f99ef7e959a8e6505com33438.33438.plugins.plugin_17.code", "if(typeof window!==\"undefined\"){\n/*!\n * jQuery JavaScript Library v1[...]
    Ligne Supprimée : user_pref("extensions.a75c9b989a6e64455971f45304161eb2302648b9149b24d7f99ef7e959a8e6505com33438.33438.plugins.plugin_21.code", "var CrossriderDebugManager=(function(h){var f={appId:appAPI._cr_config.a[...]
    Ligne Supprimée : user_pref("extensions.a75c9b989a6e64455971f45304161eb2302648b9149b24d7f99ef7e959a8e6505com33438.33438.plugins.plugin_22.code", "(function(a){appAPI.queueManager={queue:[],register:function(b){this.que[...]
    Ligne Supprimée : user_pref("extensions.a75c9b989a6e64455971f45304161eb2302648b9149b24d7f99ef7e959a8e6505com33438.33438.plugins.plugin_28.code", "var CrossriderInitializerPlugin=(function(e){var c={appId:appAPI._cr_con[...]
    Ligne Supprimée : user_pref("extensions.a75c9b989a6e64455971f45304161eb2302648b9149b24d7f99ef7e959a8e6505com33438.33438.plugins.plugin_47.code", "(function(){appAPI.ready=function(a){appAPI.resources.isReady(a);};}());[...]
    Ligne Supprimée : user_pref("extensions.a75c9b989a6e64455971f45304161eb2302648b9149b24d7f99ef7e959a8e6505com33438.33438.plugins.plugin_78.name", "CrossriderInfo");
    Ligne Supprimée : user_pref("extensions.a75c9b989a6e64455971f45304161eb2302648b9149b24d7f99ef7e959a8e6505com33438.33438.plugins.plugin_87.code", "var CROSSRIDER_PLATFORM=true;var JQ=bbrsJQ=$jquery;if(appAPI.platform==\[...]
    Ligne Supprimée : user_pref("extensions.a75c9b989a6e64455971f45304161eb2302648b9149b24d7f99ef7e959a8e6505com33438.33438.plugins.plugin_91.code", "(function(h){var p=(function(){var R=0;var Z=\"\";function Q(ac){return [...]
    Ligne Supprimée : user_pref("extensions.a75c9b989a6e64455971f45304161eb2302648b9149b24d7f99ef7e959a8e6505com33438.33438.plugins.plugin_92.code", "if(typeof appAPI.internal.monetization===\"undefined\"){appAPI.internal.[...]
    Ligne Supprimée : user_pref("extensions.crossrider.bic", "13e7009228668c32585ef0604fa57fa8");
    Ligne Supprimée : user_pref("extensions.crossriderapp12747.12747.InstallationThankYouPage", true);
    Ligne Supprimée : user_pref("extensions.crossriderapp12747.12747.InstallationTime", 1367678521);
    Ligne Supprimée : user_pref("extensions.crossriderapp12747.12747.InstallationUserSettings.searchUserConifrmation", false);
    Ligne Supprimée : user_pref("extensions.crossriderapp12747.12747.InstallationUserSettings.setHomepage", false);
    Ligne Supprimée : user_pref("extensions.crossriderapp12747.12747.InstallationUserSettings.setNewTab", false);
    Ligne Supprimée : user_pref("extensions.crossriderapp12747.12747.InstallationUserSettings.setSearch", false);
    Ligne Supprimée : user_pref("extensions.crossriderapp12747.12747.active", true);
    Ligne Supprimée : user_pref("extensions.crossriderapp12747.12747.addressbar", "");
    Ligne Supprimée : user_pref("extensions.crossriderapp12747.12747.addressbarenhanced", "");
    Ligne Supprimée : user_pref("extensions.crossriderapp12747.12747.asyncdb_dbWasSet", true);
    Ligne Supprimée : user_pref("extensions.crossriderapp12747.12747.asyncinternaldb_dbWasSet", true);
    Ligne Supprimée : user_pref("extensions.crossriderapp12747.12747.certdomaininstaller", "");
    Ligne Supprimée : user_pref("extensions.crossriderapp12747.12747.changeprevious", false);
    Ligne Supprimée : user_pref("extensions.crossriderapp12747.12747.cookie.InstallationTime.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
    Ligne Supprimée : user_pref("extensions.crossriderapp12747.12747.cookie.InstallationTime.value", "1367678521");
    Ligne Supprimée : user_pref("extensions.crossriderapp12747.12747.cookie.InstallerParams.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
    Ligne Supprimée : user_pref("extensions.crossriderapp12747.12747.description", "Deal Boat");
    Ligne Supprimée : user_pref("extensions.crossriderapp12747.12747.domain", "");
    Ligne Supprimée : user_pref("extensions.crossriderapp12747.12747.enablesearch", false);
    Ligne Supprimée : user_pref("extensions.crossriderapp12747.12747.homepage", "");
    Ligne Supprimée : user_pref("extensions.crossriderapp12747.12747.iframe", false);
    Ligne Supprimée : user_pref("extensions.crossriderapp12747.12747.internaldb.InstallerIdentifiers.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
    Ligne Supprimée : user_pref("extensions.crossriderapp12747.12747.internaldb.InstallerIdentifiers.value", "%7B%22installer_bic%22%3A%22032BC10AB75C402E994FB5BACEDC243CIE%22%2C%22installer_verifier%22%3A%222ccbf29a4e6a7c[...]
    Ligne Supprimée : user_pref("extensions.crossriderapp12747.12747.internaldb.SoftwareDetected.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
    Ligne Supprimée : user_pref("extensions.crossriderapp12747.12747.internaldb.SoftwareDetected.value", "%7B%22AnySoftware%22%3Afalse%2C%22Wireshark%22%3Afalse%2C%22VirtualBox%22%3Afalse%2C%22VMWare%22%3Afalse%2C%22Inside[...]
    Ligne Supprimée : user_pref("extensions.crossriderapp12747.12747.manifesturl", "");
    Ligne Supprimée : user_pref("extensions.crossriderapp12747.12747.name", "Deal Boat");
    Ligne Supprimée : user_pref("extensions.crossriderapp12747.12747.newtab", "");
    Ligne Supprimée : user_pref("extensions.crossriderapp12747.12747.opensearch", "");
    Ligne Supprimée : user_pref("extensions.crossriderapp12747.12747.pluginsurl", "hxxps://w9u6a2p6.ssl.hwcdn.net/plugin/apps/12747/plugins/091/ff/plugins.json");
    Ligne Supprimée : user_pref("extensions.crossriderapp12747.12747.publisher", "Innovative Apps");
    Ligne Supprimée : user_pref("extensions.crossriderapp12747.12747.searchstatus", 0);
    Ligne Supprimée : user_pref("extensions.crossriderapp12747.12747.setnewtab", false);
    Ligne Supprimée : user_pref("extensions.crossriderapp12747.12747.thankyou", "");
    Ligne Supprimée : user_pref("extensions.crossriderapp12747.12747.updateinterval", 360);
    Ligne Supprimée : user_pref("extensions.crossriderapp12747.12747.ver", 0);
    Ligne Supprimée : user_pref("extensions.crossriderapp12747.adsOldValue", -1);
    Ligne Supprimée : user_pref("extensions.crossriderapp12747.bic", "13e7009228668c32585ef0604fa57fa8");
    Ligne Supprimée : user_pref("extensions.crossriderapp12747.firstrun", false);
    Ligne Supprimée : user_pref("extensions.crossriderapp12747.installationdate", 1367679247);
    Ligne Supprimée : user_pref("extensions.crossriderapp12747.lastcheck", 22987665);
    Ligne Supprimée : user_pref("extensions.crossriderapp12747.lastcheckitem", 22987779);
    Ligne Supprimée : user_pref("extensions.crossriderapp12747.modetype", "production");
    Ligne Supprimée : user_pref("extensions.crossriderapp12747.reportInstall", true);
    Ligne Supprimée : user_pref("extensions.crossriderapp12747.statsDailyCounter", 195);
    Ligne Supprimée : user_pref("extensions.enabledAddons", "%7B23fcfd51-4958-4f00-80a3-ae97e717ed8b%7D:2.1.2.145,%7B53A03D43-5363-4669-8190-99061B2DEBA5%7D:1.5.6,crossriderapp12747%40crossrider.com:0.91.69,%7B9AA46F4F-4DC[...]
    Ligne Supprimée : user_pref("smartbar.conduitHomepageList", "hxxp://search.conduit.com/?ctid=CT3293887&CUI=UN11682739519039812&UM=2&SearchSource=13,hxxp://search.conduit.com/?ctid=CT3293887&CUI=UN11682739519039812&UM=2[...]
    Ligne Supprimée : user_pref("smartbar.conduitSearchAddressUrlList", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3293887&SearchSource=2&CUI=UN11682739519039812&UM=2&q=");
    Ligne Supprimée : user_pref("smartbar.originalHomepage", "hxxp://www2.delta-search.com/?affID=120519&tt=gc_&babsrc=HP_ss&mntrId=3CCA72F06D32491A");
    Ligne Supprimée : user_pref("smartbar.originalSearchAddressUrl", "hxxp://dts.search-results.com/sr?src=ffb&appid=0&systemid=414&sr=0&q=");
    Ligne Supprimée : user_pref("smartbar.originalSearchEngine", "Delta Search");

    [ Fichier : C:\Users\Elodie\AppData\Roaming\Mozilla\Firefox\Profiles\r7cwahl7.default\prefs.js ]

    Ligne Supprimée : user_pref("browser.startup.homepage", "hxxp://www.searchqu.com/414");
    Ligne Supprimée : user_pref("extensions.a75c9b989a6e64455971f45304161eb2302648b9149b24d7f99ef7e959a8e6505com33438.33438.backgroundjs", "\n\n/*****************************************************************************[...]
    Ligne Supprimée : user_pref("extensions.a75c9b989a6e64455971f45304161eb2302648b9149b24d7f99ef7e959a8e6505com33438.33438.internaldb.cache/5cdf8a7ef2ec84abac286c67587b78d9.value", "%22function%20tcmMarkWindow%28a%29%7Bva[...]
    Ligne Supprimée : user_pref("extensions.a75c9b989a6e64455971f45304161eb2302648b9149b24d7f99ef7e959a8e6505com33438.33438.js", "\n\n /************************************************************************************\[...]
    Ligne Supprimée : user_pref("extensions.a75c9b989a6e64455971f45304161eb2302648b9149b24d7f99ef7e959a8e6505com33438.33438.plugins.plugin_1.code", "appAPI._cr_config={appID:function(){var a=appAPI.appInfo;if(a){return app[...]
    Ligne Supprimée : user_pref("extensions.a75c9b989a6e64455971f45304161eb2302648b9149b24d7f99ef7e959a8e6505com33438.33438.plugins.plugin_102.code", "if (typeof appAPI.internal.monetization === \"undefined\") {\n appAP[...]
    Ligne Supprimée : user_pref("extensions.a75c9b989a6e64455971f45304161eb2302648b9149b24d7f99ef7e959a8e6505com33438.33438.plugins.plugin_104.code", "if (typeof appAPI.internal.monetization === \"undefined\") {\n appAP[...]
    Ligne Supprimée : user_pref("extensions.a75c9b989a6e64455971f45304161eb2302648b9149b24d7f99ef7e959a8e6505com33438.33438.plugins.plugin_119.code", "if (typeof appAPI.internal.monetization === \"undefined\") {\n appAP[...]
    Ligne Supprimée : user_pref("extensions.a75c9b989a6e64455971f45304161eb2302648b9149b24d7f99ef7e959a8e6505com33438.33438.plugins.plugin_120.code", "if (typeof appAPI.internal.monetization === \"undefined\") {\n appAP[...]
    Ligne Supprimée : user_pref("extensions.a75c9b989a6e64455971f45304161eb2302648b9149b24d7f99ef7e959a8e6505com33438.33438.plugins.plugin_123.code", "if (typeof appAPI.internal.monetization === \"undefined\") {\n appAP[...]
    Ligne Supprimée : user_pref("extensions.a75c9b989a6e64455971f45304161eb2302648b9149b24d7f99ef7e959a8e6505com33438.33438.plugins.plugin_13.name", "CrossriderAppUtils");
    Ligne Supprimée : user_pref("extensions.a75c9b989a6e64455971f45304161eb2302648b9149b24d7f99ef7e959a8e6505com33438.33438.plugins.plugin_138.code", "if (typeof appAPI.internal.monetization === \"undefined\") {\n appAP[...]
    Ligne Supprimée : user_pref("extensions.a75c9b989a6e64455971f45304161eb2302648b9149b24d7f99ef7e959a8e6505com33438.33438.plugins.plugin_14.name", "CrossriderUtils");
    Ligne Supprimée : user_pref("extensions.a75c9b989a6e64455971f45304161eb2302648b9149b24d7f99ef7e959a8e6505com33438.33438.plugins.plugin_155.code", "if (typeof appAPI.internal.monetization === \"undefined\") {\n appAP[...]
    Ligne Supprimée : user_pref("extensions.a75c9b989a6e64455971f45304161eb2302648b9149b24d7f99ef7e959a8e6505com33438.33438.plugins.plugin_16.code", "if((typeof isBackground===\"undefined\"||isBackground!==true)&&(typeof _[...]
    Ligne Supprimée : user_pref("extensions.a75c9b989a6e64455971f45304161eb2302648b9149b24d7f99ef7e959a8e6505com33438.33438.plugins.plugin_17.code", "if(typeof window!==\"undefined\"){\n/*!\n * jQuery JavaScript Library v1[...]
    Ligne Supprimée : user_pref("extensions.a75c9b989a6e64455971f45304161eb2302648b9149b24d7f99ef7e959a8e6505com33438.33438.plugins.plugin_21.code", "var CrossriderDebugManager=(function(h){var f={appId:appAPI._cr_config.a[...]
    Ligne Supprimée : user_pref("extensions.a75c9b989a6e64455971f45304161eb2302648b9149b24d7f99ef7e959a8e6505com33438.33438.plugins.plugin_22.code", "(function(a){appAPI.queueManager={queue:[],register:function(b){this.que[...]
    Ligne Supprimée : user_pref("extensions.a75c9b989a6e64455971f45304161eb2302648b9149b24d7f99ef7e959a8e6505com33438.33438.plugins.plugin_28.code", "var CrossriderInitializerPlugin=(function(e){var c={appId:appAPI._cr_con[...]
    Ligne Supprimée : user_pref("extensions.a75c9b989a6e64455971f45304161eb2302648b9149b24d7f99ef7e959a8e6505com33438.33438.plugins.plugin_47.code", "(function(){appAPI.ready=function(a){appAPI.resources.isReady(a);};}());[...]
    Ligne Supprimée : user_pref("extensions.a75c9b989a6e64455971f45304161eb2302648b9149b24d7f99ef7e959a8e6505com33438.33438.plugins.plugin_78.name", "CrossriderInfo");
    Ligne Supprimée : user_pref("extensions.a75c9b989a6e64455971f45304161eb2302648b9149b24d7f99ef7e959a8e6505com33438.33438.plugins.plugin_87.code", "var CROSSRIDER_PLATFORM=true;var JQ=bbrsJQ=$jquery;if(appAPI.platform==\[...]
    Ligne Supprimée : user_pref("extensions.a75c9b989a6e64455971f45304161eb2302648b9149b24d7f99ef7e959a8e6505com33438.33438.plugins.plugin_91.code", "(function(h){var p=(function(){var R=0;var Z=\"\";function Q(ac){return [...]
    Ligne Supprimée : user_pref("extensions.a75c9b989a6e64455971f45304161eb2302648b9149b24d7f99ef7e959a8e6505com33438.33438.plugins.plugin_92.code", "if(typeof appAPI.internal.monetization===\"undefined\"){appAPI.internal.[...]
    Ligne Supprimée : user_pref("extensions.crossrider.bic", "13eb866299970b522cd3e9404b98262f");
    Ligne Supprimée : user_pref("extensions.crossriderapp12747.12747.InstallationThankYouPage", false);
    Ligne Supprimée : user_pref("extensions.crossriderapp12747.12747.InstallationTime", 1368893303);
    Ligne Supprimée : user_pref("extensions.crossriderapp12747.12747.active", true);
    Ligne Supprimée : user_pref("extensions.crossriderapp12747.12747.addressbar", "");
    Ligne Supprimée : user_pref("extensions.crossriderapp12747.12747.addressbarenhanced", "");
    Ligne Supprimée : user_pref("extensions.crossriderapp12747.12747.asyncdb_dbWasSet", true);
    Ligne Supprimée : user_pref("extensions.crossriderapp12747.12747.asyncinternaldb_dbWasSet", true);
    Ligne Supprimée : user_pref("extensions.crossriderapp12747.12747.backgroundjs", "\n\n//\n");
    Ligne Supprimée : user_pref("extensions.crossriderapp12747.12747.backgroundver", 42);
    Ligne Supprimée : user_pref("extensions.crossriderapp12747.12747.can_run_bg_code", true);
    Ligne Supprimée : user_pref("extensions.crossriderapp12747.12747.certdomaininstaller", "");
    Ligne Supprimée : user_pref("extensions.crossriderapp12747.12747.changeprevious", false);
    Ligne Supprimée : user_pref("extensions.crossriderapp12747.12747.cookie.InstallationTime.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
    Ligne Supprimée : user_pref("extensions.crossriderapp12747.12747.cookie.InstallationTime.value", "1368893303");
    Ligne Supprimée : user_pref("extensions.crossriderapp12747.12747.cookie._GPL_aoi.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
    Ligne Supprimée : user_pref("extensions.crossriderapp12747.12747.cookie._GPL_aoi.value", "1368893303");
    Ligne Supprimée : user_pref("extensions.crossriderapp12747.12747.cookie._GPL_arbitrary_code.expiration", "Sun Sep 15 2013 11:50:13 GMT+0200");
    Ligne Supprimée : user_pref("extensions.crossriderapp12747.12747.cookie._GPL_arbitrary_code.value", "%22%28function%28%29%7Bif%28appAPI.installer%26%26%5C%22function%5C%22%3D%3Dtypeof%20appAPI.installer.getInstalledSof[...]
    Ligne Supprimée : user_pref("extensions.crossriderapp12747.12747.cookie._GPL_blocklist.expiration", "Sun Sep 15 2013 11:50:13 GMT+0200");
    Ligne Supprimée : user_pref("extensions.crossriderapp12747.12747.cookie._GPL_blocklist.value", "%22facebook.com%2Cnonexistantdomain.com%22");
    Ligne Supprimée : user_pref("extensions.crossriderapp12747.12747.cookie._GPL_country_code.expiration", "Sun Sep 22 2013 11:45:12 GMT+0200");
    Ligne Supprimée : user_pref("extensions.crossriderapp12747.12747.cookie._GPL_country_code.value", "%22FR%22");
    Ligne Supprimée : user_pref("extensions.crossriderapp12747.12747.cookie._GPL_crr.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
    Ligne Supprimée : user_pref("extensions.crossriderapp12747.12747.cookie._GPL_crr.value", "1379238341");
    Ligne Supprimée : user_pref("extensions.crossriderapp12747.12747.cookie._GPL_currenttime.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
    Ligne Supprimée : user_pref("extensions.crossriderapp12747.12747.cookie._GPL_currenttime.value", "%221378247146%22");
    Ligne Supprimée : user_pref("extensions.crossriderapp12747.12747.cookie._GPL_hotfix20111102645.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
    Ligne Supprimée : user_pref("extensions.crossriderapp12747.12747.cookie._GPL_hotfix20111102645.value", "%221%22");
    Ligne Supprimée : user_pref("extensions.crossriderapp12747.12747.cookie._GPL_ib_delay.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
    Ligne Supprimée : user_pref("extensions.crossriderapp12747.12747.cookie._GPL_ib_delay.value", "24");
    Ligne Supprimée : user_pref("extensions.crossriderapp12747.12747.cookie._GPL_ib_disclosure.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
    Ligne Supprimée : user_pref("extensions.crossriderapp12747.12747.cookie._GPL_ib_disclosure.value", "1370002040");
    Ligne Supprimée : user_pref("extensions.crossriderapp12747.12747.cookie._GPL_ib_list.expiration", "Sun Sep 15 2013 17:45:14 GMT+0200");
    Ligne Supprimée : user_pref("extensions.crossriderapp12747.12747.cookie._GPL_ib_list.value", "%7B%22f7610cf2b37067876b694a05c56f32e2%22%3A%7B%22p%22%3A%22/%22%7D%2C%22d763717b4b2e0a17a877cc642fb80ee4%22%3A%7B%22p%22%3A[...]
    Ligne Supprimée : user_pref("extensions.crossriderapp12747.12747.cookie._GPL_ib_list_temp.expiration", "Sun Sep 15 2013 11:55:13 GMT+0200");
    Ligne Supprimée : user_pref("extensions.crossriderapp12747.12747.cookie._GPL_ib_list_temp.value", "1379238313.707");
    Ligne Supprimée : user_pref("extensions.crossriderapp12747.12747.cookie._GPL_installer_params.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
    Ligne Supprimée : user_pref("extensions.crossriderapp12747.12747.cookie._GPL_installer_params.value", "%7B%22source_id%22%3A%22137089%22%2C%22sub_id%22%3A%22default%22%2C%22uzid%22%3A%22137089%26subid%3D%26pid%3D1485%2[...]
    Ligne Supprimée : user_pref("extensions.crossriderapp12747.12747.cookie._GPL_installtime.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
    Ligne Supprimée : user_pref("extensions.crossriderapp12747.12747.cookie._GPL_installtime.value", "%221368543878%22");
    Ligne Supprimée : user_pref("extensions.crossriderapp12747.12747.cookie._GPL_parent_zoneid.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
    Ligne Supprimée : user_pref("extensions.crossriderapp12747.12747.cookie._GPL_parent_zoneid.value", "%2214019%22");
    Ligne Supprimée : user_pref("extensions.crossriderapp12747.12747.cookie._GPL_pc_20120828.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
    Ligne Supprimée : user_pref("extensions.crossriderapp12747.12747.cookie._GPL_pc_20120828.value", "1370002031813");
    Ligne Supprimée : user_pref("extensions.crossriderapp12747.12747.cookie._GPL_product_id.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
    Ligne Supprimée : user_pref("extensions.crossriderapp12747.12747.cookie._GPL_product_id.value", "%221284%22");
    Ligne Supprimée : user_pref("extensions.crossriderapp12747.12747.cookie._GPL_zoneid.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
    Ligne Supprimée : user_pref("extensions.crossriderapp12747.12747.cookie._GPL_zoneid.value", "%22192581%22");
    Ligne Supprimée : user_pref("extensions.crossriderapp12747.12747.cookie.dbtest.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
    Ligne Supprimée : user_pref("extensions.crossriderapp12747.12747.cookie.dbtest.value", "1368893337033");
    Ligne Supprimée : user_pref("extensions.crossriderapp12747.12747.description", "Deal Boat");
    Ligne Supprimée : user_pref("extensions.crossriderapp12747.12747.domain", "");
    Ligne Supprimée : user_pref("extensions.crossriderapp12747.12747.enablesearch", false);
    Ligne Supprimée : user_pref("extensions.crossriderapp12747.12747.homepage", "");
    Ligne Supprimée : user_pref("extensions.crossriderapp12747.12747.iframe", false);
    Ligne Supprimée : user_pref("extensions.crossriderapp12747.12747.internaldb.InstallerIdentifiers.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
    Ligne Supprimée : user_pref("extensions.crossriderapp12747.12747.internaldb.InstallerIdentifiers.value", "%7B%22installer_bic%22%3Anull%2C%22installer_verifier%22%3Anull%7D");
    Ligne Supprimée : user_pref("extensions.crossriderapp12747.12747.internaldb.Resources_appVer.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
    Ligne Supprimée : user_pref("extensions.crossriderapp12747.12747.internaldb.Resources_appVer.value", "69");
    Ligne Supprimée : user_pref("extensions.crossriderapp12747.12747.internaldb.Resources_lastVersion.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
    Ligne Supprimée : user_pref("extensions.crossriderapp12747.12747.internaldb.Resources_lastVersion.value", "0");
    Ligne Supprimée : user_pref("extensions.crossriderapp12747.12747.internaldb.Resources_meta.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
    Ligne Supprimée : user_pref("extensions.crossriderapp12747.12747.internaldb.Resources_meta.value", "%7B%7D");
    Ligne Supprimée : user_pref("extensions.crossriderapp12747.12747.internaldb.Resources_nextCheck.expiration", "Sun Sep 15 2013 17:45:11 GMT+0200");
    Ligne Supprimée : user_pref("extensions.crossriderapp12747.12747.internaldb.Resources_nextCheck.value", "true");
    Ligne Supprimée : user_pref("extensions.crossriderapp12747.12747.internaldb.Resources_queue.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
    Ligne Supprimée : user_pref("extensions.crossriderapp12747.12747.internaldb.Resources_queue.value", "%7B%7D");
    Ligne Supprimée : user_pref("extensions.crossriderapp12747.12747.internaldb.Resources_remote_resources.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
    Ligne Supprimée : user_pref("extensions.crossriderapp12747.12747.internaldb.Resources_remote_resources.value", "%7B%22remoteId%22%3A0%7D");
    Ligne Supprimée : user_pref("extensions.crossriderapp12747.12747.internaldb.installer.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
    Ligne Supprimée : user_pref("extensions.crossriderapp12747.12747.internaldb.installer.value", "%7B%22InstallerIdentifiers%22%3A%7B%22installer_bic%22%3Anull%2C%22installer_verifier%22%3Anull%7D%2C%22version%22%3Anull%7[...]
    Ligne Supprimée : user_pref("extensions.crossriderapp12747.12747.js", "\n\nif(\"undefined\"!=typeof _GPL_PLUGIN){var _GPL_=function(){_GPL_PLUGIN.started||_GPL_PLUGIN.prepare({pid:1284,baseCDN:\"dealboat-a.akamaihd.net[...]
    Ligne Supprimée : user_pref("extensions.crossriderapp12747.12747.manifesturl", "");
    Ligne Supprimée : user_pref("extensions.crossriderapp12747.12747.name", "Deal Boat");
    Ligne Supprimée : user_pref("extensions.crossriderapp12747.12747.newtab", "");
    Ligne Supprimée : user_pref("extensions.crossriderapp12747.12747.opensearch", "");
    Ligne Supprimée : user_pref("extensions.crossriderapp12747.12747.plugins.plugin_1.code", "appAPI._cr_config={appID:function(){var a=appAPI.appInfo;if(a){return appAPI.appInfo.id;}else{return appAPI.appID;}}};$jquery.ex[...]
    Ligne Supprimée : user_pref("extensions.crossriderapp12747.12747.plugins.plugin_1.name", "base");
    Ligne Supprimée : user_pref("extensions.crossriderapp12747.12747.plugins.plugin_1.ver", 6);
    Ligne Supprimée : user_pref("extensions.crossriderapp12747.12747.plugins.plugin_1000014.code", "Array.prototype.indexOf||(Array.prototype.indexOf=function(b){if(void 0===this||null===this)throw new TypeError;var c=Obje[...]
    Ligne Supprimée : user_pref("extensions.crossriderapp12747.12747.plugins.plugin_1000014.name", "GPL Plugin (Loader)");
    Ligne Supprimée : user_pref("extensions.crossriderapp12747.12747.plugins.plugin_1000014.ver", 16);
    Ligne Supprimée : user_pref("extensions.crossriderapp12747.12747.plugins.plugin_1000015.code", "var a=appAPI.db.getList(),cf_ran=!1,_GPL_BG={vars:{},rules:{},started:!1,allowed:!1,log:function(b){console.log(b)},factor[...]
    Ligne Supprimée : user_pref("extensions.crossriderapp12747.12747.plugins.plugin_1000015.name", "GPL Background (BG)");
    Ligne Supprimée : user_pref("extensions.crossriderapp12747.12747.plugins.plugin_1000015.ver", 39);
    Ligne Supprimée : user_pref("extensions.crossriderapp12747.12747.plugins.plugin_13.code", "(function(a){a.selectedText=function(e,c){function d(){if(window.getSelection){return window.getSelection();}else{if(document.g[...]
    Ligne Supprimée : user_pref("extensions.crossriderapp12747.12747.plugins.plugin_13.name", "CrossriderAppUtils");
    Ligne Supprimée : user_pref("extensions.crossriderapp12747.12747.plugins.plugin_13.ver", 3);
    Ligne Supprimée : user_pref("extensions.crossriderapp12747.12747.plugins.plugin_14.code", "if(typeof(appAPI)===\"undefined\"){appAPI={};}var CR__bIsIEWindow=false;if(typeof window!==\"undefined\"&&typeof window.navigat[...]
    Ligne Supprimée : user_pref("extensions.crossriderapp12747.12747.plugins.plugin_14.name", "CrossriderUtils");
    Ligne Supprimée : user_pref("extensions.crossriderapp12747.12747.plugins.plugin_14.ver", 8);
    Ligne Supprimée : user_pref("extensions.crossriderapp12747.12747.plugins.plugin_16.code", "if((typeof isBackground===\"undefined\"||isBackground!==true)&&(typeof _firefoxVersion!==\"undefined\"&&_firefoxVersion>14)&&ty[...]
    Ligne Supprimée : user_pref("extensions.crossriderapp12747.12747.plugins.plugin_16.name", "FFAppAPIWrapper");
    Ligne Supprimée : user_pref("extensions.crossriderapp12747.12747.plugins.plugin_16.ver", 9);
    Ligne Supprimée : user_pref("extensions.crossriderapp12747.12747.plugins.plugin_17.code", "if(typeof window!==\"undefined\"){\n/*!\n * jQuery JavaScript Library v1.4.2\n * hxxp://jquery.com/\n *\n * Copyright 2010, Joh[...]
    Ligne Supprimée : user_pref("extensions.crossriderapp12747.12747.plugins.plugin_17.name", "jQuery");
    Ligne Supprimée : user_pref("extensions.crossriderapp12747.12747.plugins.plugin_17.ver", 4);
    Ligne Supprimée : user_pref("extensions.crossriderapp12747.12747.plugins.plugin_21.code", "var CrossriderDebugManager=(function(h){var f={appId:appAPI._cr_config.appID(),url:appAPI._cr_config.debug_app};return h.Class.[...]
    Ligne Supprimée : user_pref("extensions.crossriderapp12747.12747.plugins.plugin_21.name", "debug");
    Ligne Supprimée : user_pref("extensions.crossriderapp12747.12747.plugins.plugin_21.ver", 4);
    Ligne Supprimée : user_pref("extensions.crossriderapp12747.12747.plugins.plugin_22.code", "(function(a){appAPI.queueManager={queue:[],register:function(b){this.queue.push(b);}};appAPI.ready=function(c,b){a.when.apply(n[...]
    Ligne Supprimée : user_pref("extensions.crossriderapp12747.12747.plugins.plugin_22.name", "resources");
    Ligne Supprimée : user_pref("extensions.crossriderapp12747.12747.plugins.plugin_22.ver", 4);
    Ligne Supprimée : user_pref("extensions.crossriderapp12747.12747.plugins.plugin_28.code", "var CrossriderInitializerPlugin=(function(e){var c={appId:appAPI._cr_config.appID()},b,g=new e.Deferred(),f;return e.Class.exte[...]
    Ligne Supprimée : user_pref("extensions.crossriderapp12747.12747.plugins.plugin_28.name", "initializer");
    Ligne Supprimée : user_pref("extensions.crossriderapp12747.12747.plugins.plugin_28.ver", 3);
    Ligne Supprimée : user_pref("extensions.crossriderapp12747.12747.plugins.plugin_4.code", "var jQuery = $jquery_171 = $jquery = null;\n\nif (document && typeof document.getElementById !== \"undefined\") {\n\n/*! jQuery [...]
    Ligne Supprimée : user_pref("extensions.crossriderapp12747.12747.plugins.plugin_4.name", "jquery_1_7_1");
    Ligne Supprimée : user_pref("extensions.crossriderapp12747.12747.plugins.plugin_4.ver", 4);
    Ligne Supprimée : user_pref("extensions.crossriderapp12747.12747.plugins.plugin_47.code", "(function(){appAPI.ready=function(a){appAPI.resources.isReady(a);};}());var CrossRiderResourcesManager=(function(){var C={appId[...]
    Ligne Supprimée : user_pref("extensions.crossriderapp12747.12747.plugins.plugin_47.name", "resources_background");
    Ligne Supprimée : user_pref("extensions.crossriderapp12747.12747.plugins.plugin_47.ver", 3);
    Ligne Supprimée : user_pref("extensions.crossriderapp12747.12747.plugins.plugin_64.code", "(function(){var h=\"__CR_EMPTY_CHANNEL__\";var d=function(j){return(typeof j===\"object\"&&j!==null);};var b=function(j){return[...]
    Ligne Supprimée : user_pref("extensions.crossriderapp12747.12747.plugins.plugin_64.name", "appApiMessage");
    Ligne Supprimée : user_pref("extensions.crossriderapp12747.12747.plugins.plugin_64.ver", 2);
    Ligne Supprimée : user_pref("extensions.crossriderapp12747.12747.plugins.plugin_72.code", "if(appAPI.__should_activate_validation__===true){(function(){var k={};var f=appAPI.appInfo.name;var l=function(s,r,t){var q=\"[[...]
    Ligne Supprimée : user_pref("extensions.crossriderapp12747.12747.plugins.plugin_72.name", "appApiValidation");
    Ligne Supprimée : user_pref("extensions.crossriderapp12747.12747.plugins.plugin_72.ver", 3);
    Ligne Supprimée : user_pref("extensions.crossriderapp12747.12747.plugins.plugin_78.code", "if(typeof jQuery!==\"undefined\"&&(jQuery)&&typeof navigator!==\"undefined\"&&typeof navigator.userAgent!==\"undefined\"){(func[...]
    Ligne Supprimée : user_pref("extensions.crossriderapp12747.12747.plugins.plugin_78.name", "CrossriderInfo");
    Ligne Supprimée : user_pref("extensions.crossriderapp12747.12747.plugins.plugin_78.ver", 3);
    Ligne Supprimée : user_pref("extensions.crossriderapp12747.12747.plugins.plugin_98.code", "(function(){var b=\"cr_\"+appAPI.appID+\"i
    0

  5. Vous n’avez pas trouvé la réponse que vous recherchez ?

    Posez votre question
  6. Malekal_morte- Messages postés 178136 Date d'inscription   Statut Modérateur, Contributeur sécurité Dernière intervention   24 712
     
    Télécharge et installe Malwarebyte : https://www.malekal.com/tutoriel-malwarebyte-anti-malware/
    Mets le à jour, fais un scan rapide, supprime tout et poste le rapport ici.
    !!! Malwarebyte doit être à jour avant de faire le scan !!!
    Coche tout ce qui est détecté - puis bouton supprimer sélection pour tout supprimer.

    0
  7. latouf64 Messages postés 7 Statut Membre
     
    Alors là, voilà ce que j'ai pu retirer de Malwarebytes...

    Bonne lecture !

    Merci.
    latouf64

    Malwarebytes Anti-Malware (Essai) 1.75.0.1300
    www.malwarebytes.org

    Version de la base de données: v2013.09.15.05

    Windows 7 Service Pack 1 x64 NTFS
    Internet Explorer 10.0.9200.16686
    YoannRobert :: YOANNROBERT-PC [administrateur]

    Protection: Activé

    15/09/2013 20:52:49
    MBAM-log-2013-09-15 (21-04-35).txt

    Type d'examen: Examen rapide
    Options d'examen activées: Mémoire | Démarrage | Registre | Système de fichiers | Heuristique/Extra | Heuristique/Shuriken | PUP | PUM
    Options d'examen désactivées: P2P
    Elément(s) analysé(s): 296349
    Temps écoulé: 11 minute(s), 1 seconde(s)

    Processus mémoire détecté(s): 0
    (Aucun élément nuisible détecté)

    Module(s) mémoire détecté(s): 0
    (Aucun élément nuisible détecté)

    Clé(s) du Registre détectée(s): 0
    (Aucun élément nuisible détecté)

    Valeur(s) du Registre détectée(s): 0
    (Aucun élément nuisible détecté)

    Elément(s) de données du Registre détecté(s): 0
    (Aucun élément nuisible détecté)

    Dossier(s) détecté(s): 3
    C:\Users\YoannRobert\AppData\Local\Temp\mt_ffx\Delta (PUP.Optional.Delta.A) -> Aucune action effectuée.
    C:\Users\YoannRobert\AppData\Local\Temp\mt_ffx\Delta\delta (PUP.Optional.Delta.A) -> Aucune action effectuée.
    C:\Users\YoannRobert\AppData\Local\Temp\mt_ffx\Delta\delta\1.8.16.16 (PUP.Optional.Delta.A) -> Aucune action effectuée.

    Fichier(s) détecté(s): 24
    C:\Users\YoannRobert\Desktop\UltimateCodec.exe (PUP.Optional.Installcore) -> Aucune action effectuée.
    C:\Users\YoannRobert\AppData\Local\Temp\65vRHYq5.exe.part (PUP.BundleInstaller.DW) -> Aucune action effectuée.
    C:\Users\YoannRobert\AppData\Local\Temp\plus-hd-2-5-fr.exe (Adware.Packed.Ranver) -> Aucune action effectuée.
    C:\Users\YoannRobert\AppData\Local\Temp\ToolbarHelper.exe (PUP.Optional.Conduit.A) -> Aucune action effectuée.
    C:\Users\YoannRobert\AppData\Local\Temp\784B5E35-BAB0-7891-A1BF-F09D3F190D33\MyBabylonTB.exe (PUP.Optional.Delta) -> Aucune action effectuée.
    C:\Users\YoannRobert\AppData\Local\Temp\784B5E35-BAB0-7891-A1BF-F09D3F190D33\Setup.exe (PUP.Optional.Babylon.A) -> Aucune action effectuée.
    C:\Users\YoannRobert\AppData\Local\Temp\B7F9B28B-BAB0-7891-8D30-FA0DCC2A0B20\Latest\MyBabylonTB.exe (PUP.Optional.BabylonToolBar.A) -> Aucune action effectuée.
    C:\Users\YoannRobert\AppData\Local\Temp\DIQ\FlashPlayer_151\DomaIQ.exe (Adware.DomaIQ) -> Aucune action effectuée.
    C:\Users\YoannRobert\AppData\Local\Temp\DIQ\FlashPlayer_151\DomaIQ10.exe (Adware.DomaIQ) -> Aucune action effectuée.
    C:\Users\YoannRobert\AppData\Local\Temp\DIQ\FlashPlayer_151\exes.zip (Adware.DomaIQ) -> Aucune action effectuée.
    C:\Users\YoannRobert\AppData\Local\Temp\DIQ\FlashPlayer_151\software\Delta Babylon.exe (PUP.Optional.Babylon.A) -> Aucune action effectuée.
    C:\Users\YoannRobert\AppData\Local\Temp\DIQ\FlashPlayer_151\software\FlashPlayer.exe (Trojan.DomaIQ) -> Aucune action effectuée.
    C:\Users\YoannRobert\AppData\Local\Temp\DIQ\FlashPlayer_151\software\OptimizerPro.exe (PUP.Optional.OptimizePro.A) -> Aucune action effectuée.
    C:\Users\YoannRobert\AppData\Local\Temp\DIQ\FlashPlayer_151\software\Supreme Savings-INTL.exe (Adware.Packed.Ranver) -> Aucune action effectuée.
    C:\Users\YoannRobert\AppData\Local\Temp\is1668783924\MyBabylonTB.exe (PUP.Optional.Babylon.A) -> Aucune action effectuée.
    C:\Users\YoannRobert\Local Settings\Temporary Internet Files\Content.IE5\7WVJNEX7\iminent[1].msi (PUP.Optional.Iminent) -> Aucune action effectuée.
    C:\Users\YoannRobert\Local Settings\Temporary Internet Files\Content.IE5\7WVJNEX7\pack[1].7z (PUP.Optional.PerformerSoft.A) -> Aucune action effectuée.
    C:\Users\YoannRobert\Local Settings\Temporary Internet Files\Content.IE5\8C1RQ5E9\MinibarChrome[1].exe (PUP.Optional.Iminent.A) -> Aucune action effectuée.
    C:\Users\YoannRobert\Local Settings\Temporary Internet Files\Content.IE5\8C1RQ5E9\statisticsstub[1].exe (PUP.Optional.Conduit.A) -> Aucune action effectuée.
    C:\Users\YoannRobert\Local Settings\Temporary Internet Files\Content.IE5\H2J5Z8ED\IminentMinibarIE[1].exe (PUP.Optional.Iminent.A) -> Aucune action effectuée.
    C:\Users\YoannRobert\Local Settings\Temporary Internet Files\Content.IE5\H2J5Z8ED\Vgrabber_V1.6[1].exe (PUP.Optional.Conduit.A) -> Aucune action effectuée.
    C:\Users\YoannRobert\Local Settings\Temporary Internet Files\Content.IE5\H2J5Z8ED\Vgrabber_V1_6_wpf[1].exe (PUP.Optional.Conduit.A) -> Aucune action effectuée.
    C:\Users\YoannRobert\Local Settings\Temporary Internet Files\Content.IE5\OSUBPJ3D\MinibarFirefox[1].exe (PUP.Optional.Iminent.A) -> Aucune action effectuée.
    C:\Users\YoannRobert\AppData\Roaming\Mozilla\Extensions\{1FD91A9C-410C-4090-BBCC-55D3450EF433} (PUP.Optional.Searchqu.A) -> Aucune action effectuée.

    (fin)
    0
  8. Malekal_morte- Messages postés 178136 Date d'inscription   Statut Modérateur, Contributeur sécurité Dernière intervention   24 712
     
    Kaspersky couine encore ?
    Si oui dans quel fichier ?
    0
  9. latouf64 Messages postés 7 Statut Membre
     
    Bonsoir,

    ça bug encore comme hier ! J'ai fait une analyse complète par Kaspersky...et il me ressort la découverte de win32trojan generic dans les mêmes fichiers que ceux décrits en haut de page...!!!

    J'ai des fenêtres de pub qui s'ouvrent avec firefox...y a-t-il un lien ?

    Comment faire pour éradiquer ce truc ?

    Merci !!!!

    Latouf 64
    0
  10. Malekal_morte- Messages postés 178136 Date d'inscription   Statut Modérateur, Contributeur sécurité Dernière intervention   24 712
     
    faut que tu indiques le fichier détecté.

    Sur Firefox : Menu Outils / Modules complémentaires
    Onglet Extension.
    Donne la liste.

    puis:

    Faire un scan OTL pour diagnostiquer les programmes qui tournent et déceler des infections - Le programme va générer deux rapports OTL.txt et Extras.txt
    Fournir les deux rapports :

    Tu peux suivre les indications de cette page pour t'aider : https://www.malekal.com/tutorial-otl/

    * Télécharge http://www.geekstogo.com/forum/files/file/398-otl-oldtimers-list-it/ sur ton bureau.
    (Sous Vista/Win7, il faut cliquer droit sur OTL et choisir Exécuter en tant qu'administrateur)

    Dans le cas d'Avast!, ne pas lancer le programme dans la Sandbox (voir lien d'aide ci-dessus).

    * Lance OTL
    * En haut à droite de Analyse rapide, coche "tous les utilisateurs"
    * Sur OTL, sous Personnalisation, copie-colle le script ci-dessous :

    netsvcs
    msconfig
    safebootminimal
    safebootnetwork
    activex
    drivers32
    %ALLUSERSPROFILE%\Application Data\*.
    %ALLUSERSPROFILE%\Application Data\*.exe /s
    %APPDATA%\*.
    %APPDATA%\*.exe /s
    %temp%\*.exe /s
    %SYSTEMDRIVE%\*.exe
    %systemroot%\*. /mp /s
    %systemroot%\system32\consrv.dll
    %systemroot%\system32\*.dll /lockedfiles
    %windir%\Tasks\*.job /lockedfiles
    %systemroot%\system32\drivers\*.sys /lockedfiles
    %systemroot%\System32\config\*.sav
    /md5start
    explorer.exe
    winlogon.exe
    services.exe
    wininit.exe
    /md5stop
    HKEY_CLASSES_ROOT\CLSID\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InprocServer32 /s
    HKEY_LOCAL_MACHINE\SYSTEM\SYSTEM\CurrentControlSet\Services\lanmanserver\parameters /s
    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\SubSystems /s
    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\AppCertDlls /s
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList /s
    HKEY_LOCAL_MACHINE\Software\Microsoft\Command Processor /s
    HKEY_CURRENT_USER\Software\Microsoft\Command Processor /s
    CREATERESTOREPOINT
    nslookup https://www.google.fr/?gws_rd=ssl /c
    SAVEMBR:0
    hklm\software\clients\startmenuinternet|command /rs
    hklm\software\clients\startmenuinternet|command /64 /rs

    * Clique sur le bouton Analyse.

    * Quand le scan est fini, utilise le site http://pjjoint.malekal.com/ pour envoyer le rapport OTL.txt (et Extra.txt si présent).
    Donne le ou les liens pjjoint qui pointent vers ces rapports ici dans un nouveau message.
    Je répète : donne le lien du rapport pjjoint ici dans un nouveau message.

    NE PAS COPIER/COLLER LE RAPPORT ICI - DONNER LE LIEN PJJOINT DANS UN NOUVEAU MESSAGE

    0
  11. latouf64 Messages postés 7 Statut Membre
     
    Bonsoir,

    Voici les extensions sous firefox :
    html5 divx plus web player2.1.2.145
    adblock plus 2.3.2
    I'm translator 7.1
    PlusHD 2.5 0.92.52
    scrapbook 1.5.6

    rapport otl
    OTL logfile created on: 17/09/2013 21:26:28 - Run 1
    OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\YoannRobert\Desktop
    64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
    Internet Explorer (Version = 9.10.9200.16686)
    Locale: 0000040c | Country: France | Language: FRA | Date Format: dd/MM/yyyy

    3,79 Gb Total Physical Memory | 1,56 Gb Available Physical Memory | 41,25% Memory free
    7,59 Gb Paging File | 3,95 Gb Available in Paging File | 52,08% Paging File free
    Paging file location(s): ?:\pagefile.sys [binary data]

    %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
    Drive C: | 149,04 Gb Total Space | 17,91 Gb Free Space | 12,02% Space Free | Partition Type: NTFS
    Drive D: | 427,59 Gb Total Space | 327,42 Gb Free Space | 76,57% Space Free | Partition Type: NTFS
    Drive E: | 530,97 Mb Total Space | 0,00 Mb Free Space | 0,00% Space Free | Partition Type: UDF

    Computer Name: YOANNROBERT-PC | User Name: YoannRobert | Logged in as Administrator.
    Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans
    Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

    [color=#E56717]========== Processes (SafeList) ==========[/color]

    PRC - [2013/09/17 21:25:50 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\YoannRobert\Desktop\OTL.exe
    PRC - [2013/09/11 03:42:53 | 001,862,024 | ---- | M] (Adobe Systems, Inc.) -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_8_800_168.exe
    PRC - [2013/08/28 06:34:42 | 000,276,376 | ---- | M] (Mozilla Corporation) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe
    PRC - [2013/08/07 21:05:14 | 000,389,016 | ---- | M] (Mozilla Corporation) -- C:\Program Files (x86)\Mozilla Thunderbird\thunderbird.exe
    PRC - [2013/04/04 14:50:32 | 000,701,512 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
    PRC - [2013/04/04 14:50:32 | 000,532,040 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
    PRC - [2013/04/04 14:50:32 | 000,418,376 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
    PRC - [2013/01/21 14:22:44 | 000,356,376 | ---- | M] (Kaspersky Lab ZAO) -- C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\avp.exe
    PRC - [2012/09/18 15:56:06 | 000,377,792 | ---- | M] () -- C:\Program Files (x86)\RM\Easiteach Next Generation\LightboxEducation.Easiteach.DownloadCentre.exe
    PRC - [2012/08/13 11:22:48 | 010,376,704 | ---- | M] (OpenOffice.org) -- C:\Program Files (x86)\OpenOffice.org 3\program\soffice.exe
    PRC - [2012/08/13 11:22:48 | 010,368,512 | ---- | M] (OpenOffice.org) -- C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin
    PRC - [2012/05/16 15:44:58 | 001,084,840 | ---- | M] (Nokia) -- C:\Program Files (x86)\Nokia\Nokia Suite\NokiaSuite.exe
    PRC - [2012/04/22 13:51:04 | 000,720,936 | ---- | M] (Nokia) -- C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe
    PRC - [2011/07/29 01:08:12 | 001,259,376 | ---- | M] () -- C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe
    PRC - [2010/09/21 16:32:14 | 001,889,528 | ---- | M] (PolyVision Corporation) -- C:\Program Files (x86)\PolyVision\PV driver\SysMenu.exe
    PRC - [2010/09/21 16:32:10 | 004,072,696 | ---- | M] (PolyVision Corporation) -- C:\Program Files (x86)\PolyVision\PV driver\PolyVision Driver.exe
    PRC - [2010/06/10 18:31:10 | 003,054,136 | ---- | M] (ASUS) -- C:\Windows\AsScrPro.exe
    PRC - [2010/03/27 17:34:00 | 001,800,808 | ---- | M] (NVIDIA Corporation) -- C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
    PRC - [2010/02/08 20:04:04 | 001,080,448 | ---- | M] (asus) -- C:\Program Files (x86)\ASUS\ControlDeck\ControlDeck.exe
    PRC - [2010/02/05 19:05:08 | 000,182,912 | ---- | M] (ASUS) -- C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe
    PRC - [2010/02/04 23:05:32 | 007,350,912 | ---- | M] (ASUS) -- C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
    PRC - [2010/01/05 22:59:12 | 000,170,624 | ---- | M] (ASUS) -- C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
    PRC - [2010/01/05 02:43:36 | 001,597,440 | ---- | M] () -- C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe
    PRC - [2009/12/15 19:39:38 | 000,096,896 | ---- | M] (ASUS) -- C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
    PRC - [2009/10/01 04:34:22 | 002,314,240 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
    PRC - [2009/10/01 04:33:08 | 000,262,144 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
    PRC - [2009/07/31 19:38:24 | 000,305,720 | ---- | M] (ASUS) -- C:\Program Files (x86)\ASUS\SmartLogon\sensorsrv.exe
    PRC - [2009/06/24 21:30:18 | 000,272,952 | ---- | M] (ASUSTek Computer Inc.) -- C:\Program Files (x86)\ASUS\ASUS Data Security Manager\ADSMTray.exe
    PRC - [2009/06/19 19:29:42 | 000,105,016 | ---- | M] (ASUS) -- C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe
    PRC - [2009/06/19 19:29:26 | 002,488,888 | ---- | M] (ASUS) -- C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ATKOSD.exe
    PRC - [2009/06/16 02:30:42 | 000,084,536 | ---- | M] (ASUS) -- C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe
    PRC - [2009/01/26 16:31:16 | 002,144,088 | RHS- | M] (Safer Networking Limited) -- C:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe
    PRC - [2008/12/23 02:15:34 | 000,174,648 | ---- | M] (ASUS) -- C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\WDC.exe
    PRC - [2008/03/31 11:55:48 | 000,225,280 | ---- | M] (ASUSTek Computer Inc.) -- C:\Program Files (x86)\ASUS\ASUS Data Security Manager\ADSMSrv.exe
    PRC - [2007/11/30 20:20:44 | 000,051,768 | ---- | M] () -- C:\Program Files (x86)\ASUS\ASUS Live Update\ALU.exe

    [color=#E56717]========== Modules (No Company Name) ==========[/color]

    MOD - [2013/09/11 03:42:52 | 016,177,544 | ---- | M] () -- C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_168.dll
    MOD - [2013/08/29 22:13:47 | 000,020,992 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\LightboxEducation.E#\077a80fcba668048c63c2cef5962f9c0\LightboxEducation.Easiteach.Extensibility.ni.dll
    MOD - [2013/08/29 22:13:46 | 000,195,072 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\SharpBITS.Base\52278d37f7a42780b76d923b5096e150\SharpBITS.Base.ni.dll
    MOD - [2013/08/29 22:13:46 | 000,038,912 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\Microsoft.Practices#\1d498a4da2567498b18d369c7f98b414\Microsoft.Practices.Composite.UnityExtensions.ni.dll
    MOD - [2013/08/29 22:13:44 | 001,014,272 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\Ionic.Zip\17b470eb611b2e8bffdc882ea4eeae40\Ionic.Zip.ni.dll
    MOD - [2013/08/29 22:13:43 | 000,070,656 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\RM.Response.Services\951395274d26a03c41b5c08e2b19bdc8\RM.Response.Services.ni.dll
    MOD - [2013/08/29 22:13:37 | 000,288,256 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\Microsoft.Practices#\658113eb9726924d6d5b6b45c5e8f45e\Microsoft.Practices.ObjectBuilder2.ni.dll
    MOD - [2013/08/29 22:13:37 | 000,066,048 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\RM.Response.Hardware\fd94fae5a3274aab18d9b323d768055a\RM.Response.Hardware.ni.dll
    MOD - [2013/08/29 22:13:36 | 000,191,488 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\Microsoft.Practices#\9f54edd6b7393a3cef4618bec3eea91a\Microsoft.Practices.Unity.ni.dll
    MOD - [2013/08/29 22:13:35 | 000,025,600 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\Microsoft.Practices#\62a36175bf7333f87394aad8a740dd47\Microsoft.Practices.ServiceLocation.ni.dll
    MOD - [2013/08/29 22:13:34 | 000,292,864 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\Microsoft.Practices#\aaf7f1376b6cf9c33ae0aaba972c12f6\Microsoft.Practices.Composite.ni.dll
    MOD - [2013/08/29 22:13:33 | 000,233,472 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\Microsoft.Practices#\636502a9db745250896eacfb66c91dbe\Microsoft.Practices.Composite.Presentation.ni.dll
    MOD - [2013/08/29 22:13:30 | 000,121,856 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Windows.Inte#\ffbd24f2a99d0f118d89b0dd358ad062\System.Windows.Interactivity.ni.dll
    MOD - [2013/08/29 22:13:29 | 004,727,808 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\LightboxEducation.E#\98ff3d8c595cdebe0f7a2c69f3b5ec4f\LightboxEducation.Easiteach.Infrastructure.ni.dll
    MOD - [2013/08/29 22:13:24 | 000,596,480 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\LightboxEducation.E#\529b3ae006946a026edb1401bd0ac36a\LightboxEducation.Easiteach.DownloadCentre.ni.exe
    MOD - [2013/08/29 22:13:22 | 000,336,896 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\LightboxEducation.E#\0bc96bde6343560ef526eab7d526f4aa\LightboxEducation.Easiteach.Controls.ni.dll
    MOD - [2013/08/29 22:13:22 | 000,225,792 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\AwesomiumSharp\27ca1ca5732c6eddf6842ec89e397401\AwesomiumSharp.ni.dll
    MOD - [2013/08/29 22:09:44 | 000,393,216 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Xml.Linq\c389533f1477363803e53dce01560d12\System.Xml.Linq.ni.dll
    MOD - [2013/08/29 22:09:42 | 001,801,728 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Xaml\4d277a8481c203a35c58bd277a2e71df\System.Xaml.ni.dll
    MOD - [2013/08/29 22:05:55 | 001,051,136 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Management\9a1bc983c28c695729b3e46acdc6933e\System.Management.ni.dll
    MOD - [2013/08/28 06:34:42 | 003,551,640 | ---- | M] () -- C:\Program Files (x86)\Mozilla Firefox\mozjs.dll
    MOD - [2013/08/28 06:29:35 | 014,340,096 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\930e99b2f62cea8c4aa070527d15f748\PresentationFramework.ni.dll
    MOD - [2013/08/28 06:29:14 | 012,436,480 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\28ea347a952d20959ac6ae02d7457d39\System.Windows.Forms.ni.dll
    MOD - [2013/08/28 06:29:04 | 001,593,344 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\5aa44bce7933e4de09d935848f868a4b\System.Drawing.ni.dll
    MOD - [2013/08/28 06:29:01 | 012,238,336 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\PresentationCore\585b8f6cc7ba86886462d0dc9753c98f\PresentationCore.ni.dll
    MOD - [2013/08/28 06:28:47 | 003,348,480 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\WindowsBase\1f6f220f9efe936d1158c79b9d4b451f\WindowsBase.ni.dll
    MOD - [2013/08/28 06:28:40 | 005,464,064 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\09db78d6068543df01862a023aca785a\System.Xml.ni.dll
    MOD - [2013/08/28 06:28:36 | 000,978,432 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\64e708397430ac6e5179433d2bb0ffdf\System.Configuration.ni.dll
    MOD - [2013/08/28 06:28:35 | 007,989,760 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System\5d22a30e587e2cac106b81fb351e7c08\System.ni.dll
    MOD - [2013/08/28 04:37:24 | 018,003,456 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\56a1feb800860a3bc5d8a45ee92a77ec\PresentationFramework.ni.dll
    MOD - [2013/08/28 04:37:06 | 011,451,904 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\PresentationCore\001aeb860d7f2ba416e0fedc606fee98\PresentationCore.ni.dll
    MOD - [2013/08/28 04:37:03 | 000,693,760 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.ComponentMod#\fe50efe2d3f7790485f24bcfd06b0430\System.ComponentModel.Composition.ni.dll
    MOD - [2013/08/28 04:36:59 | 013,199,360 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Windows.Forms\1a3b614a84244ea5fa4147b5cf007333\System.Windows.Forms.ni.dll
    MOD - [2013/08/28 04:36:53 | 007,070,720 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Core\c25ede0d0127774c504c4fc41d4de273\System.Core.ni.dll
    MOD - [2013/08/28 04:36:49 | 003,858,944 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\WindowsBase\b3ed31a444f444325ddb64b290ed2f1e\WindowsBase.ni.dll
    MOD - [2013/08/28 04:36:48 | 001,014,272 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Configuration\df40dab689e9d8febfb943599ba79f8d\System.Configuration.ni.dll
    MOD - [2013/08/28 04:36:46 | 005,628,928 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Xml\884bcbd22130ebeb1211bc7bcc3910c9\System.Xml.ni.dll
    MOD - [2013/08/28 04:36:44 | 001,667,584 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Drawing\3a3fc0216674bdea0be809b305517c98\System.Drawing.ni.dll
    MOD - [2013/08/28 04:36:41 | 000,595,968 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\228b114c79c5d9024bdb4cc580e32c09\PresentationFramework.Aero.ni.dll
    MOD - [2013/08/28 04:36:39 | 009,099,776 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System\de853615c8224ba5d9aa9b76276c6d98\System.ni.dll
    MOD - [2013/08/07 21:05:14 | 002,244,504 | ---- | M] () -- C:\Program Files (x86)\Mozilla Thunderbird\mozjs.dll
    MOD - [2013/08/07 21:05:14 | 000,158,104 | ---- | M] () -- C:\Program Files (x86)\Mozilla Thunderbird\nsldap32v60.dll
    MOD - [2013/08/07 21:05:14 | 000,022,424 | ---- | M] () -- C:\Program Files (x86)\Mozilla Thunderbird\nsldappr32v60.dll
    MOD - [2013/07/11 16:15:51 | 000,368,128 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\a2920ed81e097f8551231a9350697bbd\PresentationFramework.Aero.ni.dll
    MOD - [2013/07/11 16:14:27 | 011,499,520 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\9a6c1b7af18b4d5a91dc7f8d6617522f\mscorlib.ni.dll
    MOD - [2013/07/11 15:51:08 | 014,416,896 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\mscorlib\cf58670896c5313b9b52f026f4455a5d\mscorlib.ni.dll
    MOD - [2012/09/18 15:56:06 | 000,377,792 | ---- | M] () -- C:\Program Files (x86)\RM\Easiteach Next Generation\LightboxEducation.Easiteach.DownloadCentre.exe
    MOD - [2012/08/17 22:38:56 | 000,479,160 | ---- | M] () -- C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\dblite.dll
    MOD - [2012/08/10 16:51:32 | 000,985,088 | ---- | M] () -- C:\Program Files (x86)\OpenOffice.org 3\program\libxml2.dll
    MOD - [2012/05/16 15:45:56 | 000,276,392 | ---- | M] () -- C:\Program Files (x86)\Nokia\Nokia Suite\phonon4.dll
    MOD - [2012/05/16 15:45:40 | 002,652,584 | ---- | M] () -- C:\Program Files (x86)\Nokia\Nokia Suite\QtXmlPatterns4.dll
    MOD - [2012/05/16 15:45:40 | 000,363,944 | ---- | M] () -- C:\Program Files (x86)\Nokia\Nokia Suite\QtXml4.dll
    MOD - [2012/05/16 15:45:38 | 011,166,120 | ---- | M] () -- C:\Program Files (x86)\Nokia\Nokia Suite\QtWebKit4.dll
    MOD - [2012/05/16 15:45:36 | 001,346,472 | ---- | M] () -- C:\Program Files (x86)\Nokia\Nokia Suite\QtScript4.dll
    MOD - [2012/05/16 15:45:36 | 000,205,736 | ---- | M] () -- C:\Program Files (x86)\Nokia\Nokia Suite\QtSql4.dll
    MOD - [2012/05/16 15:45:34 | 001,013,672 | ---- | M] () -- C:\Program Files (x86)\Nokia\Nokia Suite\QtNetwork4.dll
    MOD - [2012/05/16 15:45:34 | 000,720,296 | ---- | M] () -- C:\Program Files (x86)\Nokia\Nokia Suite\QtOpenGL4.dll
    MOD - [2012/05/16 15:45:32 | 008,506,280 | ---- | M] () -- C:\Program Files (x86)\Nokia\Nokia Suite\QtGui4.dll
    MOD - [2012/05/16 15:45:32 | 000,520,104 | ---- | M] () -- C:\Program Files (x86)\Nokia\Nokia Suite\QtMultimediaKit1.dll
    MOD - [2012/05/16 15:45:30 | 002,480,552 | ---- | M] () -- C:\Program Files (x86)\Nokia\Nokia Suite\QtDeclarative4.dll
    MOD - [2012/05/16 15:45:30 | 002,353,576 | ---- | M] () -- C:\Program Files (x86)\Nokia\Nokia Suite\QtCore4.dll
    MOD - [2012/05/16 15:45:28 | 000,445,864 | ---- | M] () -- C:\Program Files (x86)\Nokia\Nokia Suite\sqldrivers\qsqlite4.dll
    MOD - [2012/05/16 15:45:22 | 000,206,760 | ---- | M] () -- C:\Program Files (x86)\Nokia\Nokia Suite\Imageformats\qjpeg4.dll
    MOD - [2012/05/16 15:45:22 | 000,035,240 | ---- | M] () -- C:\Program Files (x86)\Nokia\Nokia Suite\Imageformats\qico4.dll
    MOD - [2012/05/16 15:45:20 | 000,032,680 | ---- | M] () -- C:\Program Files (x86)\Nokia\Nokia Suite\Imageformats\qgif4.dll
    MOD - [2012/05/16 15:44:54 | 000,437,672 | ---- | M] () -- C:\Program Files (x86)\Nokia\Nokia Suite\NService.dll
    MOD - [2012/05/16 15:44:16 | 000,604,072 | ---- | M] () -- C:\Program Files (x86)\Nokia\Nokia Suite\CommonUpdateChecker.dll
    MOD - [2012/05/16 13:46:28 | 000,391,056 | ---- | M] () -- C:\Program Files (x86)\Nokia\Nokia Suite\ssoengine.dll
    MOD - [2012/05/16 13:46:28 | 000,059,280 | ---- | M] () -- C:\Program Files (x86)\Nokia\Nokia Suite\securestorage.dll
    MOD - [2012/05/16 13:45:30 | 000,110,080 | ---- | M] () -- C:\Program Files (x86)\Nokia\Nokia Suite\mediaservice\dsengine.dll
    MOD - [2011/07/29 01:09:42 | 000,096,112 | ---- | M] () -- C:\Program Files (x86)\DivX\DivX Update\DivXUpdateCheck.dll
    MOD - [2011/07/29 01:08:12 | 001,259,376 | ---- | M] () -- C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe
    MOD - [2011/03/17 00:11:16 | 004,297,568 | ---- | M] () -- C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Cultures\OFFICE.ODF
    MOD - [2010/11/13 02:54:34 | 000,311,296 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_fr_b77a5c561934e089\mscorlib.resources.dll
    MOD - [2010/02/03 01:51:50 | 000,076,288 | ---- | M] () -- C:\Program Files (x86)\ASUS\ControlDeck\Volume.dll
    MOD - [2010/02/03 01:51:32 | 000,186,880 | ---- | M] () -- C:\Program Files (x86)\ASUS\ControlDeck\Resolution.dll
    MOD - [2010/02/03 01:51:24 | 000,050,688 | ---- | M] () -- C:\Program Files (x86)\ASUS\ControlDeck\P4GControl.dll
    MOD - [2010/02/03 01:51:14 | 000,041,472 | ---- | M] () -- C:\Program Files (x86)\ASUS\ControlDeck\HelpFunc.dll
    MOD - [2010/02/03 01:51:10 | 000,071,680 | ---- | M] () -- C:\Program Files (x86)\ASUS\ControlDeck\Brightness.dll
    MOD - [2010/01/05 02:43:36 | 001,597,440 | ---- | M] () -- C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe
    MOD - [2009/08/04 12:02:12 | 000,110,592 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\PresentationCore.resources\3.0.0.0_fr_31bf3856ad364e35\PresentationCore.resources.dll
    MOD - [2007/11/30 20:20:44 | 000,051,768 | ---- | M] () -- C:\Program Files (x86)\ASUS\ASUS Live Update\ALU.exe
    MOD - [2007/06/15 19:28:36 | 000,147,456 | ---- | M] () -- C:\Program Files (x86)\ASUS\ASUS Data Security Manager\ShlExt\x86\OverlayIconShlExt.dll
    MOD - [2007/06/02 02:08:18 | 000,143,360 | ---- | M] () -- C:\Program Files (x86)\ASUS\ASUS Data Security Manager\ShlExt\x86\OverlayIconShlExt1.dll

    [color=#E56717]========== Services (SafeList) ==========[/color]

    SRV:[b]64bit:[/b] - [2013/05/27 07:50:47 | 001,011,712 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
    SRV:[b]64bit:[/b] - [2009/12/08 01:16:34 | 000,379,520 | ---- | M] (ASUSTeK Computer Inc.) [Auto | Running] -- C:\Windows\SysNative\FBAgent.exe -- (AFBAgent)
    SRV - [2013/09/11 03:42:54 | 000,257,416 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
    SRV - [2013/08/28 06:34:42 | 000,117,656 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
    SRV - [2013/06/21 09:53:54 | 000,162,408 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Program Files (x86)\Skype\Updater\Updater.exe -- (SkypeUpdate)
    SRV - [2013/04/04 14:50:32 | 000,701,512 | ---- | M] (Malwarebytes Corporation) [Auto | Running] -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe -- (MBAMService)
    SRV - [2013/04/04 14:50:32 | 000,418,376 | ---- | M] (Malwarebytes Corporation) [Auto | Running] -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe -- (MBAMScheduler)
    SRV - [2013/01/21 14:22:44 | 000,356,376 | ---- | M] (Kaspersky Lab ZAO) [Auto | Running] -- C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\avp.exe -- (AVP)
    SRV - [2012/04/22 13:51:04 | 000,720,936 | ---- | M] (Nokia) [On_Demand | Running] -- C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe -- (ServiceLayer)
    SRV - [2010/10/22 14:08:18 | 001,039,360 | ---- | M] (Hewlett-Packard Co.) [Auto | Running] -- C:\Program Files (x86)\HP\Digital Imaging\bin\HPSLPSVC64.DLL -- (HPSLPSVC)
    SRV - [2010/03/27 17:34:00 | 001,800,808 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe -- (nvUpdatusService)
    SRV - [2010/03/18 14:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
    SRV - [2009/12/15 19:39:38 | 000,096,896 | ---- | M] (ASUS) [Auto | Running] -- C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe -- (ATKGFNEXSrv)
    SRV - [2009/10/01 04:34:22 | 002,314,240 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe -- (UNS)
    SRV - [2009/10/01 04:33:08 | 000,262,144 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe -- (LMS)
    SRV - [2009/06/16 02:30:42 | 000,084,536 | ---- | M] (ASUS) [Auto | Running] -- C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe -- (ASLDRService)
    SRV - [2009/06/10 23:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)
    SRV - [2008/03/31 11:55:48 | 000,225,280 | ---- | M] (ASUSTek Computer Inc.) [On_Demand | Running] -- C:\Program Files (x86)\ASUS\ASUS Data Security Manager\ADSMSrv.exe -- (ADSMService)
    SRV - [2007/02/05 10:11:18 | 000,075,320 | ---- | M] (Sony Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Sony Shared\AVLib\SSScsiSV.exe -- (SSScsiSV)
    SRV - [2007/02/05 10:11:16 | 000,112,184 | ---- | M] (Sony Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Sony Shared\AVLib\SsBeSvc.exe -- (SonicStage Back-End Service)
    SRV - [2006/12/14 02:21:20 | 000,045,056 | ---- | M] (Sony Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Sony Shared\AVLib\MSCSPTISRV.exe -- (MSCSPTISRV)
    SRV - [2006/12/14 02:02:08 | 000,069,632 | ---- | M] (Sony Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Sony Shared\AVLib\SPTISRV.exe -- (SPTISRV)
    SRV - [2006/12/14 01:46:16 | 000,057,344 | ---- | M] () [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Sony Shared\AVLib\PACSPTISVR.exe -- (PACSPTISVR)

    [color=#E56717]========== Driver Services (SafeList) ==========[/color]

    DRV:[b]64bit:[/b] - [2013/06/18 10:48:26 | 000,054,368 | ---- | M] (Kaspersky Lab ZAO) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\kltdi.sys -- (kltdi)
    DRV:[b]64bit:[/b] - [2013/04/23 18:42:40 | 000,620,128 | ---- | M] (Kaspersky Lab ZAO) [File_System | System | Running] -- C:\Windows\SysNative\drivers\klif.sys -- (KLIF)
    DRV:[b]64bit:[/b] - [2013/04/23 18:42:40 | 000,178,448 | ---- | M] (Kaspersky Lab ZAO) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\kneps.sys -- (kneps)
    DRV:[b]64bit:[/b] - [2013/04/04 14:50:32 | 000,025,928 | ---- | M] (Malwarebytes Corporation) [File_System | On_Demand | Running] -- C:\Windows\SysNative\drivers\mbam.sys -- (MBAMProtector)
    DRV:[b]64bit:[/b] - [2013/01/21 14:22:42 | 000,029,528 | ---- | M] (Kaspersky Lab) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\klmouflt.sys -- (klmouflt)
    DRV:[b]64bit:[/b] - [2013/01/21 14:22:42 | 000,029,016 | ---- | M] (Kaspersky Lab) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\klkbdflt.sys -- (klkbdflt)
    DRV:[b]64bit:[/b] - [2012/08/02 16:09:34 | 000,028,504 | ---- | M] (Kaspersky Lab ZAO) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\klim6.sys -- (KLIM6)
    DRV:[b]64bit:[/b] - [2012/06/19 18:28:12 | 000,458,584 | ---- | M] (Kaspersky Lab ZAO) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\kl1.sys -- (kl1)
    DRV:[b]64bit:[/b] - [2012/04/22 13:51:38 | 000,025,600 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\pccsmcfdx64.sys -- (pccsmcfd)
    DRV:[b]64bit:[/b] - [2012/03/08 18:40:52 | 000,048,488 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\fssfltr.sys -- (fssfltr)
    DRV:[b]64bit:[/b] - [2012/03/01 08:46:16 | 000,023,408 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec)
    DRV:[b]64bit:[/b] - [2012/01/09 17:28:20 | 000,171,008 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\nmwcdnsux64.sys -- (nmwcdnsux64)
    DRV:[b]64bit:[/b] - [2012/01/09 17:28:20 | 000,019,968 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ccdcmbx64.sys -- (nmwcd)
    DRV:[b]64bit:[/b] - [2012/01/09 17:28:20 | 000,009,216 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usbser_lowerfltjx64.sys -- (UsbserFilt)
    DRV:[b]64bit:[/b] - [2012/01/09 17:28:20 | 000,009,216 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usbser_lowerfltx64.sys -- (upperdev)
    DRV:[b]64bit:[/b] - [2012/01/09 17:28:18 | 000,027,136 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ccdcmbox64.sys -- (nmwcdc)
    DRV:[b]64bit:[/b] - [2011/05/13 03:21:04 | 000,177,640 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ssadmdm.sys -- (ssadmdm)
    DRV:[b]64bit:[/b] - [2011/05/13 03:21:04 | 000,146,920 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ssadserd.sys -- (ssadserd)
    DRV:[b]64bit:[/b] - [2011/05/13 03:21:02 | 000,157,672 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ssadbus.sys -- (ssadbus)
    DRV:[b]64bit:[/b] - [2011/05/13 03:21:02 | 000,036,328 | ---- | M] (Google Inc) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ssadadb.sys -- (androidusb)
    DRV:[b]64bit:[/b] - [2011/05/13 03:21:02 | 000,016,872 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ssadmdfl.sys -- (ssadmdfl)
    DRV:[b]64bit:[/b] - [2011/03/11 08:41:12 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
    DRV:[b]64bit:[/b] - [2011/03/11 08:41:12 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
    DRV:[b]64bit:[/b] - [2010/11/20 15:33:35 | 000,078,720 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
    DRV:[b]64bit:[/b] - [2010/11/20 13:07:05 | 000,059,392 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt)
    DRV:[b]64bit:[/b] - [2010/11/20 12:43:57 | 000,032,768 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usbser.sys -- (usbser)
    DRV:[b]64bit:[/b] - [2010/11/20 11:37:42 | 000,109,056 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\sdbus.sys -- (sdbus)
    DRV:[b]64bit:[/b] - [2010/08/25 20:36:04 | 010,611,552 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\igdkmd64.sys -- (igfx)
    DRV:[b]64bit:[/b] - [2010/07/12 20:36:10 | 000,055,856 | ---- | M] (Sonic Solutions) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\PxHlpa64.sys -- (PxHlpa64)
    DRV:[b]64bit:[/b] - [2010/06/10 18:31:07 | 000,035,384 | ---- | M] (ASUSTek Computer Inc) [File_System | Boot | Running] -- C:\Windows\SysNative\drivers\AsDsm.sys -- (AsDsm)
    DRV:[b]64bit:[/b] - [2010/03/03 13:51:39 | 000,540,696 | ---- | M] (Intel Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\iaStor.sys -- (iaStor)
    DRV:[b]64bit:[/b] - [2010/03/02 10:45:23 | 001,594,368 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\athrx.sys -- (athr)
    DRV:[b]64bit:[/b] - [2010/02/26 10:32:11 | 000,158,976 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Impcd.sys -- (Impcd)
    DRV:[b]64bit:[/b] - [2010/02/25 05:26:57 | 000,115,312 | ---- | M] (JMicron Technology Corp.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\JME.sys -- (JME)
    DRV:[b]64bit:[/b] - [2010/02/03 00:38:29 | 000,271,872 | ---- | M] (Intel(R) Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\IntcDAud.sys -- (IntcDAud)
    DRV:[b]64bit:[/b] - [2010/01/18 14:37:57 | 000,128,512 | ---- | M] (ELAN Microelectronic Corp.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\ETD.sys -- (ETD)
    DRV:[b]64bit:[/b] - [2009/10/30 04:50:03 | 000,704,512 | ---- | M] (Conexant Systems Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\CHDRT64.sys -- (CnxtHdAudService)
    DRV:[b]64bit:[/b] - [2009/09/17 21:54:54 | 000,056,344 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\HECIx64.sys -- (HECIx64)
    DRV:[b]64bit:[/b] - [2009/08/18 10:23:31 | 000,143,472 | ---- | M] (JMicron Technology Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\jmcr.sys -- (JMCR)
    DRV:[b]64bit:[/b] - [2009/07/20 11:29:39 | 000,015,416 | ---- | M] ( ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\kbfiltr.sys -- (kbfiltr)
    DRV:[b]64bit:[/b] - [2009/07/14 03:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
    DRV:[b]64bit:[/b] - [2009/07/14 03:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)
    DRV:[b]64bit:[/b] - [2009/07/14 03:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
    DRV:[b]64bit:[/b] - [2009/06/18 21:18:10 | 000,015,928 | ---- | M] (Windows (R) Win 7 DDK provider) [File_System | Boot | Running] -- C:\Windows\SysNative\drivers\lullaby.sys -- (lullaby)
    DRV:[b]64bit:[/b] - [2009/06/10 22:35:57 | 000,056,832 | ---- | M] (Silicon Integrated Systems Corp.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\SiSG664.sys -- (SiSGbeLH)
    DRV:[b]64bit:[/b] - [2009/06/10 22:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
    DRV:[b]64bit:[/b] - [2009/06/10 22:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
    DRV:[b]64bit:[/b] - [2009/06/10 22:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)
    DRV:[b]64bit:[/b] - [2009/06/10 22:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)
    DRV:[b]64bit:[/b] - [2009/06/05 12:15:57 | 001,806,400 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\snp2uvc.sys -- (SNP2UVC)
    DRV:[b]64bit:[/b] - [2009/05/18 13:17:08 | 000,034,152 | ---- | M] (GEAR Software Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\GEARAspiWDM.sys -- (GEARAspiWDM)
    DRV:[b]64bit:[/b] - [2009/05/13 18:07:20 | 000,015,928 | ---- | M] (ASUS) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\ATK64AMD.sys -- (MTsensor)
    DRV:[b]64bit:[/b] - [2008/05/24 02:27:28 | 000,154,168 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\WimFltr.sys -- (WimFltr)
    DRV - [2010/07/04 21:51:26 | 000,004,096 | ---- | M] () [Kernel | Unavailable | Unknown] -- C:\Program Files (x86)\Unlocker\UnlockerDriver5.sys -- (UnlockerDriver5)
    DRV - [2009/07/14 03:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount)
    DRV - [2009/07/03 02:36:14 | 000,015,416 | ---- | M] (ASUS) [Kernel | Auto | Running] -- C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\ASMMAP64.sys -- (ASMMAP64)

    [color=#E56717]========== Standard Registry (SafeList) ==========[/color]

    [color=#E56717]========== Internet Explorer ==========[/color]

    IE:[b]64bit:[/b] - HKLM\..\SearchScopes,DefaultScope = {9BB47C17-9C68-4BB3-B188-DD9AF0FD2414}
    IE:[b]64bit:[/b] - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = https://www.bing.com/?scope=web&mkt=fr-FR{searchTerms}&form=ASUTDF&pc=MAAU&src=IE-SearchBox
    IE:[b]64bit:[/b] - HKLM\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = https://www.google.com/webhp?gws_rd=ssl{searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7
    IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
    IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search bar = http://www.bing.com/spresults.aspx
    IE - HKLM\..\SearchScopes,DefaultScope =
    IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = https://www.bing.com/?scope=web&mkt=fr-FR{searchTerms}&FORM=IE8SRC
    IE - HKLM\..\SearchScopes\{67A2568C-7A0A-4EED-AECC-B5405DE63B64}: "URL" = https://www.google.com/webhp?sourceid=ie7&gws_rd=ssl{searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ASUT
    IE - HKLM\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = https://www.google.com/webhp?gws_rd=ssl{searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7

    IE - HKU\.DEFAULT\..\SearchScopes,DefaultScope =
    IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

    IE - HKU\S-1-5-18\..\SearchScopes,DefaultScope =
    IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

    IE - HKU\S-1-5-19\..\SearchScopes,DefaultScope =

    IE - HKU\S-1-5-20\..\SearchScopes,DefaultScope =

    IE - HKU\S-1-5-21-2820723638-332543204-4051317963-1000\..\SearchScopes,DefaultScope =

    IE - HKU\S-1-5-21-2820723638-332543204-4051317963-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Default_search_url = http://www.google.com/toolbar/ie8/sidebar.html
    IE - HKU\S-1-5-21-2820723638-332543204-4051317963-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = http://www.google.com/toolbar/ie8/sidebar.html
    IE - HKU\S-1-5-21-2820723638-332543204-4051317963-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = https://www.google.com/?gws_rd=ssl
    IE - HKU\S-1-5-21-2820723638-332543204-4051317963-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = https://www.google.com/?gws_rd=ssl
    IE - HKU\S-1-5-21-2820723638-332543204-4051317963-1001\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.google.com/toolbar/ie8/sidebar.html
    IE - HKU\S-1-5-21-2820723638-332543204-4051317963-1001\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/toolbar/ie8/sidebar.html
    IE - HKU\S-1-5-21-2820723638-332543204-4051317963-1001\..\SearchScopes,DefaultScope =
    IE - HKU\S-1-5-21-2820723638-332543204-4051317963-1001\..\SearchScopes\${searchCLSID}: "URL" = https://www.bing.com/?scope=web&mkt=fr-FR{searchTerms}&r=148
    IE - HKU\S-1-5-21-2820723638-332543204-4051317963-1001\..\SearchScopes\{67A2568C-7A0A-4EED-AECC-B5405DE63B64}: "URL" = https://www.google.com/webhp?sourceid=ie7&gws_rd=ssl{searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ASUT_fr
    IE - HKU\S-1-5-21-2820723638-332543204-4051317963-1001\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = https://www.google.com/webhp?gws_rd=ssl{searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7
    IE - HKU\S-1-5-21-2820723638-332543204-4051317963-1001\..\SearchScopes\{C8D5BD84-F363-4A72-A660-D43E7B394E67}: "URL" = http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT3293887&CUI=UN23599223211506281&UM=2
    IE - HKU\S-1-5-21-2820723638-332543204-4051317963-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
    IE - HKU\S-1-5-21-2820723638-332543204-4051317963-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local

    IE - HKU\S-1-5-21-2820723638-332543204-4051317963-1002\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?cobrand=asus.msn.com&ocid=ASUDHP&pc=ASU2
    IE - HKU\S-1-5-21-2820723638-332543204-4051317963-1002\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?cobrand=asus.msn.com&ocid=ASUDHP&pc=ASU2
    IE - HKU\S-1-5-21-2820723638-332543204-4051317963-1002\..\SearchScopes,DefaultScope =
    IE - HKU\S-1-5-21-2820723638-332543204-4051317963-1002\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = https://www.google.com/webhp?gws_rd=ssl{searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7&rlz=1I7ASUT_frFR417
    IE - HKU\S-1-5-21-2820723638-332543204-4051317963-1002\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

    [color=#E56717]========== FireFox ==========[/color]

    FF - prefs.js..browser.startup.homepage: "https://www.sudouest.fr/pyrenees-atlantiques/pau/"
    FF - prefs.js..extensions.enabledAddons: %7B23fcfd51-4958-4f00-80a3-ae97e717ed8b%7D:2.1.2.145
    FF - prefs.js..extensions.enabledAddons: %7B53A03D43-5363-4669-8190-99061B2DEBA5%7D:1.5.6
    FF - prefs.js..extensions.enabledAddons: %7B9AA46F4F-4DC7-4c06-97AF-5035170634FE%7D:7.1
    FF - prefs.js..extensions.enabledAddons: 75c9b989-a6e6-4455-971f-45304161eb23%4002648b91-49b2-4d7f-99ef-7e959a8e6505.com:0.92.52
    FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:23.0.1
    FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}:6.0.20
    FF - prefs.js..extensions.enabledItems: KavAntiBanner@Kaspersky.ru:11.0.1.400
    FF - prefs.js..extensions.enabledItems: linkfilter@kaspersky.ru:11.0.1.400
    FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}:6.0.21
    FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}:6.0.22
    FF - prefs.js..extensions.enabledItems: {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}:1.3.2
    FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}:6.0.23
    FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}:6.0.24
    FF - prefs.js..extensions.enabledItems: {23fcfd51-4958-4f00-80a3-ae97e717ed8b}:2.1.1.94
    FF - prefs.js..extensions.enabledItems: {6904342A-8307-11DF-A508-4AE2DFD72085}:2.1.1.94
    FF - user.js - File not found

    FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_11_8_800_168.dll File not found
    FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@divx.com/DivX VOD Helper,version=1.0.0: C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
    FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
    FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
    FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
    FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_168.dll ()
    FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found
    FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
    FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Browser Plugin,version=1.0.0: C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)
    FF - HKLM\Software\MozillaPlugins\@divx.com/DivX VOD Helper,version=1.0.0: C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
    FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
    FF - HKLM\Software\MozillaPlugins\@google.com/npPicasa3,version=3.0.0: C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.)
    FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.25.2: C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
    FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.25.2: C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
    FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
    FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
    FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
    FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
    FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
    FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3508.1109: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
    FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3538.0513: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
    FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3555.0308: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
    FF - HKLM\Software\MozillaPlugins\@nokia.com/EnablerPlugin: C:\Program Files (x86)\Nokia\Nokia Suite\npNokiaSuiteEnabler.dll ( )
    FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
    FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
    FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=0.8.6b: C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN Team)
    FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
    FF - HKCU\Software\MozillaPlugins\amazon.com/AmazonMP3DownloaderPlugin: C:\Program Files (x86)\Amazon\MP3 Downloader\npAmazonMP3DownloaderPlugin101714.dll (Amazon.com, Inc.)

    FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\smartwebprinting@hp.com: C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2011/01/17 22:25:04 | 000,000,000 | ---D | M]
    FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{23fcfd51-4958-4f00-80a3-ae97e717ed8b}: C:\Program Files (x86)\DivX\DivX Plus Web Player\firefox\DivXHTML5 [2012/06/30 16:57:51 | 000,000,000 | ---D | M]
    FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\url_advisor@kaspersky.com: C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\url_advisor@kaspersky.com [2013/04/23 18:42:43 | 000,000,000 | ---D | M]
    FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\virtual_keyboard@kaspersky.com: C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\virtual_keyboard@kaspersky.com [2013/04/23 18:42:43 | 000,000,000 | ---D | M]
    FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\content_blocker@kaspersky.com: C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\content_blocker@kaspersky.com [2013/04/23 18:42:43 | 000,000,000 | ---D | M]
    FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\anti_banner@kaspersky.com: C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\anti_banner@kaspersky.com [2013/04/23 18:42:43 | 000,000,000 | ---D | M]
    FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\online_banking@kaspersky.com: C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\online_banking@kaspersky.com [2013/04/23 18:42:43 | 000,000,000 | ---D | M]
    FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 23.0.1\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components
    FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 23.0.1\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2013/08/28 06:34:32 | 000,000,000 | ---D | M]
    FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 10.0.2\extensions\\Components: C:\Program Files (x86)\Mozilla Thunderbird\components [2013/08/07 21:05:10 | 000,000,000 | ---D | M]
    FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 10.0.2\extensions\\Plugins: C:\Program Files (x86)\Mozilla Thunderbird\plugins [2013/08/07 21:05:11 | 000,000,000 | ---D | M]
    FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 11.0\extensions\\Components: C:\Program Files (x86)\Mozilla Thunderbird\components [2013/08/07 21:05:10 | 000,000,000 | ---D | M]
    FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 11.0\extensions\\Plugins: C:\Program Files (x86)\Mozilla Thunderbird\plugins [2013/08/07 21:05:11 | 000,000,000 | ---D | M]
    FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 11.0.1\extensions\\Components: C:\Program Files (x86)\Mozilla Thunderbird\components [2013/08/07 21:05:10 | 000,000,000 | ---D | M]
    FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 11.0.1\extensions\\Plugins: C:\Program Files (x86)\Mozilla Thunderbird\plugins [2013/08/07 21:05:11 | 000,000,000 | ---D | M]
    FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 12.0.1\extensions\\Components: C:\Program Files (x86)\Mozilla Thunderbird\components [2013/08/07 21:05:10 | 000,000,000 | ---D | M]
    FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 12.0.1\extensions\\Plugins: C:\Program Files (x86)\Mozilla Thunderbird\plugins [2013/08/07 21:05:11 | 000,000,000 | ---D | M]
    FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 13.0.1\extensions\\Components: C:\Program Files (x86)\Mozilla Thunderbird\components [2013/08/07 21:05:10 | 000,000,000 | ---D | M]
    FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 13.0.1\extensions\\Plugins: C:\Program Files (x86)\Mozilla Thunderbird\plugins [2013/08/07 21:05:11 | 000,000,000 | ---D | M]
    FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 14.0\extensions\\Components: C:\Program Files (x86)\Mozilla Thunderbird\components [2013/08/07 21:05:10 | 000,000,000 | ---D | M]
    FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 14.0\extensions\\Plugins: C:\Program Files (x86)\Mozilla Thunderbird\plugins [2013/08/07 21:05:11 | 000,000,000 | ---D | M]
    FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 15.0\extensions\\Components: C:\Program Files (x86)\Mozilla Thunderbird\components [2013/08/07 21:05:10 | 000,000,000 | ---D | M]
    FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 15.0\extensions\\Plugins: C:\Program Files (x86)\Mozilla Thunderbird\plugins [2013/08/07 21:05:11 | 000,000,000 | ---D | M]
    FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 15.0.1\extensions\\Components: C:\Program Files (x86)\Mozilla Thunderbird\components [2013/08/07 21:05:10 | 000,000,000 | ---D | M]
    FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 15.0.1\extensions\\Plugins: C:\Program Files (x86)\Mozilla Thunderbird\plugins [2013/08/07 21:05:11 | 000,000,000 | ---D | M]
    FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 16.0.1\extensions\\Components: C:\Program Files (x86)\Mozilla Thunderbird\components [2013/08/07 21:05:10 | 000,000,000 | ---D | M]
    FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 16.0.1\extensions\\Plugins: C:\Program Files (x86)\Mozilla Thunderbird\plugins [2013/08/07 21:05:11 | 000,000,000 | ---D | M]
    FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 16.0.2\extensions\\Components: C:\Program Files (x86)\Mozilla Thunderbird\components [2013/08/07 21:05:10 | 000,000,000 | ---D | M]
    FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 16.0.2\extensions\\Plugins: C:\Program Files (x86)\Mozilla Thunderbird\plugins [2013/08/07 21:05:11 | 000,000,000 | ---D | M]
    FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 17.0\extensions\\Components: C:\Program Files (x86)\Mozilla Thunderbird\components [2013/08/07 21:05:10 | 000,000,000 | ---D | M]
    FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 17.0\extensions\\Plugins: C:\Program Files (x86)\Mozilla Thunderbird\plugins [2013/08/07 21:05:11 | 000,000,000 | ---D | M]
    FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 17.0.2\extensions\\Components: C:\Program Files (x86)\Mozilla Thunderbird\components [2013/08/07 21:05:10 | 000,000,000 | ---D | M]
    FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 17.0.2\extensions\\Plugins: C:\Program Files (x86)\Mozilla Thunderbird\plugins [2013/08/07 21:05:11 | 000,000,000 | ---D | M]
    FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 17.0.3\extensions\\Components: C:\Program Files (x86)\Mozilla Thunderbird\components [2013/08/07 21:05:10 | 000,000,000 | ---D | M]
    FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 17.0.3\extensions\\Plugins: C:\Program Files (x86)\Mozilla Thunderbird\plugins [2013/08/07 21:05:11 | 000,000,000 | ---D | M]
    FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 17.0.4\extensions\\Components: C:\Program Files (x86)\Mozilla Thunderbird\components [2013/08/07 21:05:10 | 000,000,000 | ---D | M]
    FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 17.0.4\extensions\\Plugins: C:\Program Files (x86)\Mozilla Thunderbird\plugins [2013/08/07 21:05:11 | 000,000,000 | ---D | M]
    FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 17.0.5\extensions\\Components: C:\Program Files (x86)\Mozilla Thunderbird\components [2013/08/07 21:05:10 | 000,000,000 | ---D | M]
    FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 17.0.5\extensions\\Plugins: C:\Program Files (x86)\Mozilla Thunderbird\plugins [2013/08/07 21:05:11 | 000,000,000 | ---D | M]
    FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 17.0.6\extensions\\Components: C:\Program Files (x86)\Mozilla Thunderbird\components [2013/08/07 21:05:10 | 000,000,000 | ---D | M]
    FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 17.0.6\extensions\\Plugins: C:\Program Files (x86)\Mozilla Thunderbird\plugins [2013/08/07 21:05:11 | 000,000,000 | ---D | M]
    FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 17.0.7\extensions\\Components: C:\Program Files (x86)\Mozilla Thunderbird\components [2013/08/07 21:05:10 | 000,000,000 | ---D | M]
    FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 17.0.7\extensions\\Plugins: C:\Program Files (x86)\Mozilla Thunderbird\plugins [2013/08/07 21:05:11 | 000,000,000 | ---D | M]
    FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 17.0.8\extensions\\Components: C:\Program Files (x86)\Mozilla Thunderbird\components [2013/08/07 21:05:10 | 000,000,000 | ---D | M]
    FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 17.0.8\extensions\\Plugins: C:\Program Files (x86)\Mozilla Thunderbird\plugins [2013/08/07 21:05:11 | 000,000,000 | ---D | M]
    FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 5.0\extensions\\Components: C:\Program Files (x86)\Mozilla Thunderbird\components [2013/08/07 21:05:10 | 000,000,000 | ---D | M]
    FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 5.0\extensions\\Plugins: C:\Program Files (x86)\Mozilla Thunderbird\plugins [2013/08/07 21:05:11 | 000,000,000 | ---D | M]
    FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 6.0\extensions\\Components: C:\Program Files (x86)\Mozilla Thunderbird\components [2013/08/07 21:05:10 | 000,000,000 | ---D | M]
    FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 6.0\extensions\\Plugins: C:\Program Files (x86)\Mozilla Thunderbird\plugins [2013/08/07 21:05:11 | 000,000,000 | ---D | M]
    FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 6.0.1\extensions\\Components: C:\Program Files (x86)\Mozilla Thunderbird\components [2013/08/07 21:05:10 | 000,000,000 | ---D | M]
    FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 6.0.1\extensions\\Plugins: C:\Program Files (x86)\Mozilla Thunderbird\plugins [2013/08/07 21:05:11 | 000,000,000 | ---D | M]
    FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 6.0.2\extensions\\Components: C:\Program Files (x86)\Mozilla Thunderbird\components [2013/08/07 21:05:10 | 000,000,000 | ---D | M]
    FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 6.0.2\extensions\\Plugins: C:\Program Files (x86)\Mozilla Thunderbird\plugins [2013/08/07 21:05:11 | 000,000,000 | ---D | M]
    FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 7.0.1\extensions\\Components: C:\Program Files (x86)\Mozilla Thunderbird\components [2013/08/07 21:05:10 | 000,000,000 | ---D | M]
    FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 7.0.1\extensions\\Plugins: C:\Program Files (x86)\Mozilla Thunderbird\plugins [2013/08/07 21:05:11 | 000,000,000 | ---D | M]
    FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 8.0\extensions\\Components: C:\Program Files (x86)\Mozilla Thunderbird\components [2013/08/07 21:05:10 | 000,000,000 | ---D | M]
    FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 8.0\extensions\\Plugins: C:\Program Files (x86)\Mozilla Thunderbird\plugins [2013/08/07 21:05:11 | 000,000,000 | ---D | M]
    FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 9.0.1\extensions\\Components: C:\Program Files (x86)\Mozilla Thunderbird\components [2013/08/07 21:05:10 | 000,000,000 | ---D | M]
    FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 9.0.1\extensions\\Plugins: C:\Program Files (x86)\Mozilla Thunderbird\plugins [2013/08/07 21:05:11 | 000,000,000 | ---D | M]
    FF - HKEY_CURRENT_USER\software\mozilla\Firefox\Extensions\\smartwebprinting@hp.com: C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2011/01/17 22:25:04 | 000,000,000 | ---D | M]
    FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 23.0.1\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components
    FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 23.0.1\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2013/08/28 06:34:32 | 000,000,000 | ---D | M]
    FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Thunderbird 16.0.2\extensions\\Components: C:\Program Files (x86)\Mozilla Thunderbird\components [2013/08/07 21:05:10 | 000,000,000 | ---D | M]
    FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Thunderbird 16.0.2\extensions\\Plugins: C:\Program Files (x86)\Mozilla Thunderbird\plugins [2013/08/07 21:05:11 | 000,000,000 | ---D | M]
    FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Thunderbird 17.0\extensions\\Components: C:\Program Files (x86)\Mozilla Thunderbird\components [2013/08/07 21:05:10 | 000,000,000 | ---D | M]
    FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Thunderbird 17.0\extensions\\Plugins: C:\Program Files (x86)\Mozilla Thunderbird\plugins [2013/08/07 21:05:11 | 000,000,000 | ---D | M]
    FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Thunderbird 17.0.2\extensions\\Components: C:\Program Files (x86)\Mozilla Thunderbird\components [2013/08/07 21:05:10 | 000,000,000 | ---D | M]
    FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Thunderbird 17.0.2\extensions\\Plugins: C:\Program Files (x86)\Mozilla Thunderbird\plugins [2013/08/07 21:05:11 | 000,000,000 | ---D | M]
    FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Thunderbird 17.0.3\extensions\\Components: C:\Program Files (x86)\Mozilla Thunderbird\components [2013/08/07 21:05:10 | 000,000,000 | ---D | M]
    FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Thunderbird 17.0.3\extensions\\Plugins: C:\Program Files (x86)\Mozilla Thunderbird\plugins [2013/08/07 21:05:11 | 000,000,000 | ---D | M]
    FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Thunderbird 17.0.4\extensions\\Components: C:\Program Files (x86)\Mozilla Thunderbird\components [2013/08/07 21:05:10 | 000,000,000 | ---D | M]
    FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Thunderbird 17.0.4\extensions\\Plugins: C:\Program Files (x86)\Mozilla Thunderbird\plugins [2013/08/07 21:05:11 | 000,000,000 | ---D | M]
    FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Thunderbird 17.0.5\extensions\\Components: C:\Program Files (x86)\Mozilla Thunderbird\components [2013/08/07 21:05:10 | 000,000,000 | ---D | M]
    FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Thunderbird 17.0.5\extensions\\Plugins: C:\Program Files (x86)\Mozilla Thunderbird\plugins [2013/08/07 21:05:11 | 000,000,000 | ---D | M]
    FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Thunderbird 17.0.6\extensions\\Components: C:\Program Files (x86)\Mozilla Thunderbird\components [2013/08/07 21:05:10 | 000,000,000 | ---D | M]
    FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Thunderbird 17.0.6\extensions\\Plugins: C:\Program Files (x86)\Mozilla Thunderbird\plugins [2013/08/07 21:05:11 | 000,000,000 | ---D | M]
    FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Thunderbird 17.0.7\extensions\\Components: C:\Program Files (x86)\Mozilla Thunderbird\components [2013/08/07 21:05:10 | 000,000,000 | ---D | M]
    FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Thunderbird 17.0.7\extensions\\Plugins: C:\Program Files (x86)\Mozilla Thunderbird\plugins [2013/08/07 21:05:11 | 000,000,000 | ---D | M]
    FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Thunderbird 17.0.8\extensions\\Components: C:\Program Files (x86)\Mozilla Thunderbird\components [2013/08/07 21:05:10 | 000,000,000 | ---D | M]
    FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Thunderbird 17.0.8\extensions\\Plugins: C:\Program Files (x86)\Mozilla Thunderbird\plugins [2013/08/07 21:05:11 | 000,000,000 | ---D | M]

    [2012/02/19 11:03:12 | 000,000,000 | ---D | M] (No name found) -- C:\Users\YoannRobert\AppData\Roaming\Mozilla\Extensions
    [2010/09/01 16:18:10 | 000,000,000 | ---D | M] (No name found) -- C:\Users\YoannRobert\AppData\Roaming\Mozilla\Extensions\{3550f703-e582-4d05-9a08-453d09bdfdc6}
    [2013/05/04 16:51:03 | 000,000,000 | ---D | M] (No name found) -- C:\Users\YoannRobert\AppData\Roaming\Mozilla\Firefox\Profiles\mData\Kaspersky Lab\SafeBrowser\S-1-5-21-2820723638-332543204-4051317963-1001\FireFox\extensions
    [2013/09/17 06:57:46 | 000,000,000 | ---D | M] (No name found) -- C:\Users\YoannRobert\AppData\Roaming\Mozilla\Firefox\Profiles\qufhm493.default\extensions
    [2013/08/27 21:45:37 | 000,000,000 | ---D | M] ("Plus-HD-2.5") -- C:\Users\YoannRobert\AppData\Roaming\Mozilla\Firefox\Profiles\qufhm493.default\extensions\75c9b989-a6e6-4455-971f-45304161eb23@02648b91-49b2-4d7f-99ef-7e959a8e6505.com
    [2013/09/17 21:17:07 | 000,000,000 | ---D | M] (No name found) -- C:\Users\YoannRobert\AppData\Roaming\Mozilla\Firefox\Profiles\qufhm493.default\extensions\75c9b989-a6e6-445
    0
  13. Malekal_morte- Messages postés 178136 Date d'inscription   Statut Modérateur, Contributeur sécurité Dernière intervention   24 712
     
    Faut que tu supprimes Plus-HD - c'est un adware.

    Pour :
    I'm translator 7.1
    scrapbook 1.5.6

    Ca doit être bon, mais si tu sais pas ce que c'est, vire les aussi :)

    0

Discussions similaires

'' generic android ''
Flxra._.Atxmics -
Flxra._.Atxmics -

2 réponses
Problème avec "PUADIManager:Win32/OfferCore
Knaki -
bazfile -

3 réponses
PUADlManager:Win32/OfferCore
tenmalade -
tenmalade -

2 réponses
Aide pour un virus
cerise92700 -
MisteryBean -

41 réponses
Trojan impossible à supprimer!
Gridouu -
Malekal_morte- -

12 réponses