je suis envahis par des intrus Fermé

Question

Bonjour tout le monde,

Mon pc est entieremet et injustement envahi par des sites intrus et cela m'empeche de travailler et mon ordi est rendu lent.

voilà queqlues un de ces nuisibles
http://open.okitspace.com/

http://www.lpcloudsvr203.com/

https://www.hugedomains.com/domain_profile.cfm?d=greatmmos&e=com

http://open.okitspace.com/

http://solutiontrk.com/


Aidez-moi SVP de m'en départir, je suis désepéré...
J'utilise vista
merci bcpdavance

lilidurhone · Answer

Tu as dû installer des logiciels potentiellement indésirables


Pour éviter ce genre de problème :

- Ne télécharge aucun programme proposé dans des publicités ou sur des sites suspects. A noter que certains sites connus comme O1net, Softronic, Tuto4PC, etc modifient parfois les programmes proposés au téléchargement pour y ajouter des logiciels publicitaires ==> Préfère toujours le téléchargement directement sur le site de l'éditeur.


- Au cours de l'installation d'un programme gratuit, lis bien attentivement et décoche tous les programmes additionnels qui sont proposés, en particulier les barres d'outils.

Pour ton information lis ces dossier sur les Programmes Potentiellement Indésirables et Les Barres d'Outils ce n'est pas obligatoires

* Télécharge cet outil simple d'utilisation 

http://general-changelog-team.fr/fr/downloads/viewdownload/20-outils-de-xplode/2-adwcleaner (de Xplode) sur ton bureau.


* Si problème avec le 1er lien prends le ici https://www.commentcamarche.net/telecharger/securite/2759-adwcleaner/

* Lance le (Sous vista/seven/8 clic droit dessus,et sur exécuter en tant qu'administrateur)si tu es sous xp double cliques dessus

* Cliques sur scanner 
* Poste le rapport de recherche C:\Adwcleaner[R]

* Note le rapport de recherche est également sauvegardé sous C:\Adwcleaner[R1]

allxtrm · Answer

@Lilidurhone Merci infiniment pour te réponse ultrapide. voilà le rapport: # AdwCleaner v3.019 - Report created 20/02/2014 at 17:04:50 # Updated 17/02/2014 by Xplode # Operating System : Windows (TM) Vista Home Premium Service Pack 2 (64 bits) # Username : Al - PC # Running from : C:\Users\Al\Desktop\adwcleaner.exe # Option : Scan ***** [ Services ] ***** Service Found : 70e6ca8c Service Found : SrvUpdater Service Found : Yontoo Desktop Updater ***** [ Files / Folders ] ***** File Found : \END File Found : C:\END File Found : C:\Users\Al\AppData\Roaming\Mozilla\Firefox\Profiles\w7m2wc3w.default\Extensions\ftdownloader4@ftdownloader.com.xpi File Found : C:\Users\Al\AppData\Roaming\Mozilla\Firefox\Profiles\w7m2wc3w.default\Extensions\torntv2@torntv.com.xpi File Found : C:\Users\Al\AppData\Roaming\Mozilla\Firefox\Profiles\w7m2wc3w.default\searchplugins\conduit-search.xml File Found : C:\Users\Al\AppData\Roaming\Mozilla\Firefox\Profiles\w7m2wc3w.default\searchplugins\Web Search.xml File Found : C:\Users\Al\AppData\Roaming\Mozilla\Firefox\Profiles\w7m2wc3w.default\user.js File Found : C:\Users\Al\AppData\Roaming\speedanalysis.ico File Found : C:\Windows\System32\roboot64.exe File Found : C:\Windows\System32\Tasks\Dealply File Found : C:\Windows\System32\Tasks\Escolade File Found : C:\Windows\System32\Tasks\PassWidget Update File Found : C:\Windows\Tasks\PassWidget Update.job Folder Found : C:\Users\Al\AppData\Roaming\Mozilla\Firefox\Profiles\w7m2wc3w.default\Extensions\{77e8143b-6759-416e-b521-82cfed75150b} Folder Found : C:\Users\Al\AppData\Roaming\Mozilla\Firefox\Profiles\w7m2wc3w.default\Extensions\{77E8143B-6759-416E-B521-82CFED75150B} Folder Found \Searchprotect Folder Found C:\Program Files (x86)\BetterSurf Folder Found C:\Program Files (x86)\Better-Surf Folder Found C:\Program Files (x86)\BrowserSafeguard Folder Found C:\Program Files (x86)\Conduit Folder Found C:\Program Files (x86)\Free Ride Games Folder Found C:\Program Files (x86)\Music Toolbar Folder Found C:\Program Files (x86)\optimizer pro Folder Found C:\Program Files (x86)\Pass-Widget Folder Found C:\Program Files (x86)\SoftwareUpdater Folder Found C:\Program Files (x86)\TornTV.com Folder Found C:\ProgramData\~Browser Manager Folder Found C:\ProgramData\Babylon Folder Found C:\ProgramData\Conduit Folder Found C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BrowserSafeguard Folder Found C:\ProgramData\Microsoft\Windows\Start Menu\Programs\optimizer pro v3.2 Folder Found C:\ProgramData\Tarma Installer Folder Found C:\Searchprotect Folder Found C:\Users\Al\AppData\LocAl\Conduit Folder Found C:\Users\Al\AppData\LocAl\NativeMessaging Folder Found C:\Users\Al\AppData\LocAl\PackageAware Folder Found C:\Users\Al\AppData\LocAl\PutLockerDownloader Folder Found C:\Users\Al\AppData\LocAl\Smartbar Folder Found C:\Users\Al\AppData\LocAl\SwvUpdater Folder Found C:\Users\Al\AppData\LocAlLow\BabylonToolbar Folder Found C:\Users\Al\AppData\LocAlLow\Conduit Folder Found C:\Users\Al\AppData\LocAlLow\PriceGong Folder Found C:\Users\Al\AppData\LocAlLow\Smartbar Folder Found C:\Users\Al\AppData\Roaming\Babylon Folder Found C:\Users\Al\AppData\Roaming\file scout Folder Found C:\Users\Al\AppData\Roaming\Mozilla\Firefox\Profiles\w7m2wc3w.default\CT3288691 Folder Found C:\Users\Al\AppData\Roaming\Mozilla\Firefox\Profiles\w7m2wc3w.default\Smartbar Folder Found C:\Users\Al\AppData\Roaming\Mozilla\Firefox\Profiles\w7m2wc3w.default\ValueApps Folder Found C:\Users\Al\AppData\Roaming\okitspace Folder Found C:\Users\Al\AppData\Roaming\OpenCandy Folder Found C:\Users\Al\AppData\Roaming\optimizer pro Folder Found C:\Users\Al\AppData\Roaming\PerformerSoft Folder Found C:\Users\Al\AppData\Roaming\SpeedanAlysis Folder Found C:\Users\Al\AppData\Roaming\Systweak Folder Found C:\Users\Al\Documents\optimizer pro Folder Found C:\Windows\SysWOW64\Searchprotect ***** [ Shortcuts ] ***** ***** [ Registry ] ***** Data Found : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows [AppInit_DLLs] - c:\progra~2\musict~1\datamngr\mgrldr.dll Data Found : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows [AppInit_DLLs] - c:\progra~2\optimi~1\optpro~1.dll Data Found : [x64] HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows [AppInit_DLLs] - C:\PROGRA~2\MUSICT~1\Datamngr\x64\mgrldr.dll Data Found : [x64] HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows [AppInit_DLLs] - C:\PROGRA~2\OPTIMI~1\OPTPRO~2.DLL Key Found : HKCU\Software\1ClickDownload Key Found : HKCU\Software\APN PIP Key Found : HKCU\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F} Key Found : HKCU\Software\AppDataLow\Software\Conduit Key Found : HKCU\Software\AppDataLow\Software\Crossrider Key Found : HKCU\Software\AppDataLow\Software\DynConIE Key Found : HKCU\Software\AppDataLow\Software\PassWidget Key Found : HKCU\Software\AppDataLow\Software\PriceGong Key Found : HKCU\Software\AppDataLow\Software\SmartBar Key Found : HKCU\Software\Conduit Key Found : HKCU\Software\Cr_Installer Key Found : HKCU\Software\DataMngr Key Found : HKCU\Software\DataMngr_Toolbar Key Found : HKCU\Software\Escolade Key Found : HKCU\Software\filescout Key Found : HKCU\Software\InstallCore Key Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{006EE092-9658-4FD6-BD8E-A21A348E59F5} Key Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Giant Savings Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Optimizer Pro_is1 Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\RegClean Pro_is1 Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\ShopperReportsSA Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\SoftwareUpdater Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Wajam Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{03F998B2-0E00-11D3-A498-00104B6EB52E} Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{7F6AFBF1-E065-4627-A2FD-810366367D01} Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{AE07101B-46D4-4A98-AF68-0333EA26E113} Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{7F6AFBF1-E065-4627-A2FD-810366367D01} Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{A1B48071-416D-474E-A13B-BE5456E7FC31} Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{AE07101B-46D4-4A98-AF68-0333EA26E113} Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F25AF245-4A81-40DC-92F9-E9021F207706} Key Found : HKCU\Software\Optimizer Pro Key Found : HKCU\Software\performersoft llc Key Found : HKCU\Software\PIP Key Found : HKCU\Software\PrivitizeVPNInstallDates Key Found : HKCU\Software\SmartBar Key Found : HKCU\Software\smartbarbackup Key Found : HKCU\Software\smartbarlog Key Found : HKCU\Software\Softonic Key Found : HKCU\Software\StartSearch Key Found : HKCU\Software\vShare.tv Key Found : [x64] HKCU\Software\1ClickDownload Key Found : [x64] HKCU\Software\APN PIP Key Found : [x64] HKCU\Software\Conduit Key Found : [x64] HKCU\Software\Cr_Installer Key Found : [x64] HKCU\Software\DataMngr Key Found : [x64] HKCU\Software\DataMngr_Toolbar Key Found : [x64] HKCU\Software\Escolade Key Found : [x64] HKCU\Software\filescout Key Found : [x64] HKCU\Software\InstallCore Key Found : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{006EE092-9658-4FD6-BD8E-A21A348E59F5} Key Found : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} Key Found : [x64] HKCU\Software\Optimizer Pro Key Found : [x64] HKCU\Software\performersoft llc Key Found : [x64] HKCU\Software\PIP Key Found : [x64] HKCU\Software\PrivitizeVPNInstallDates Key Found : [x64] HKCU\Software\SmartBar Key Found : [x64] HKCU\Software\smartbarbackup Key Found : [x64] HKCU\Software\smartbarlog Key Found : [x64] HKCU\Software\Softonic Key Found : [x64] HKCU\Software\StartSearch Key Found : [x64] HKCU\Software\vShare.tv Key Found : HKLM\Software\{1146AC44-2F03-4431-B4FD-889BC837521F} Key Found : HKLM\Software\{3A7D3E19-1B79-4E4E-BD96-5467DA2C4EF0} Key Found : HKLM\Software\{6791A2F3-FC80-475C-A002-C014AF797E9C} Key Found : HKLM\Software\AVG Security Toolbar Key Found : HKLM\Software\Babylon Key Found : HKLM\Software\BrowserMngr Key Found : HKLM\Software\caphyon Key Found : HKLM\SOFTWARE\Classes\*\shell\filescout Key Found : HKLM\SOFTWARE\Classes\AppID\{BDB69379-802F-4EAF-B541-F8DE92DD98DB} Key Found : HKLM\SOFTWARE\Classes\AppID\DefaultTabBHO.DLL Key Found : HKLM\SOFTWARE\Classes\Applications\ilividsetup.exe Key Found : HKLM\SOFTWARE\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3} Key Found : HKLM\SOFTWARE\Classes\CLSID\{3C471948-F874-49F5-B338-4F214A2EE0B1} Key Found : HKLM\SOFTWARE\Classes\CLSID\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} Key Found : HKLM\SOFTWARE\Classes\CLSID\{56561B2A-FB5D-363A-9631-4C03D6054209} Key Found : HKLM\SOFTWARE\Classes\CLSID\{761F6A83-F007-49E4-8EAC-CDB6808EF06F} Key Found : HKLM\SOFTWARE\Classes\CLSID\{80922EE0-8A76-46AE-95D5-BD3C3FE0708D} Key Found : HKLM\SOFTWARE\Classes\CLSID\{94496571-6AC5-4836-82D5-D46260C44B17} Key Found : HKLM\SOFTWARE\Classes\CLSID\{97D69524-BB57-4185-9C7F-5F05593B771A} Key Found : HKLM\SOFTWARE\Classes\CLSID\{A1E28287-1A31-4B0F-8D05-AA8C465D3C5A} Key Found : HKLM\SOFTWARE\Classes\CLSID\{A717364F-69F3-3A24-ADD5-3901A57F880E} Key Found : HKLM\SOFTWARE\Classes\CLSID\{AE07101B-46D4-4A98-AF68-0333EA26E113} Key Found : HKLM\SOFTWARE\Classes\CLSID\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497} Key Found : HKLM\SOFTWARE\Classes\CLSID\{AF175732-0D59-716D-F757-9F1492D808D9} Key Found : HKLM\SOFTWARE\Classes\CLSID\{BC9FD17D-30F6-4464-9E53-596A90AFF023} Key Found : HKLM\SOFTWARE\Classes\CLSID\{CC5AD34C-6F10-4CB3-B74A-C2DD4D5060A3} Key Found : HKLM\SOFTWARE\Classes\CLSID\{CCB08265-B35D-30B2-A6AF-6986CA957358} Key Found : HKLM\SOFTWARE\Classes\CLSID\{CD92622E-49B9-33B7-98D1-EC51049457D7} Key Found : HKLM\SOFTWARE\Classes\CLSID\{DE9028D0-5FFA-4E69-94E3-89EE8741F468} Key Found : HKLM\SOFTWARE\Classes\CLSID\{E041E037-FA4B-364A-B440-7A1051EA0301} Key Found : HKLM\SOFTWARE\Classes\CLSID\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39} Key Found : HKLM\SOFTWARE\Classes\DefaultTabBHO.DefaultTabBrowserActiveX Key Found : HKLM\SOFTWARE\Classes\DefaultTabBHO.DefaultTabBrowserActiveX.1 Key Found : HKLM\SOFTWARE\Classes\FTDownloader Key Found : HKLM\SOFTWARE\Classes\iesmartbar.bandobjectattribute Key Found : HKLM\SOFTWARE\Classes\iesmartbar.dockingpanel Key Found : HKLM\SOFTWARE\Classes\iesmartbar.iesmartbar Key Found : HKLM\SOFTWARE\Classes\iesmartbar.iesmartbarbandobject Key Found : HKLM\SOFTWARE\Classes\iesmartbar.smartbardisplaystate Key Found : HKLM\SOFTWARE\Classes\iesmartbar.smartbarmenuform Key Found : HKLM\Software\Classes\Installer\Products\A28B4D68DEBAA244EB686953B7074FEF Key Found : HKLM\SOFTWARE\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217} Key Found : HKLM\SOFTWARE\Classes\Interface\{17BF1E05-C0E8-413C-BD1F-A481EEA3B8E9} Key Found : HKLM\SOFTWARE\Classes\Interface\{3408AC0D-510E-4808-8F7B-6B70B1F88534} Key Found : HKLM\SOFTWARE\Classes\Interface\{462862BE-9A5C-49A5-9CBD-A649EAC63645} Key Found : HKLM\SOFTWARE\Classes\Interface\{83B2FE06-BA20-4F7D-96C6-6FC3A4E877D3} Key Found : HKLM\SOFTWARE\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC} Key Found : HKLM\SOFTWARE\Classes\Interface\{B32966A2-F7C2-4362-A6CF-399EC8B44110} Key Found : HKLM\SOFTWARE\Classes\Prod.cap Key Found : HKLM\SOFTWARE\Classes\Toolbar.CT3279141 Key Found : HKLM\SOFTWARE\Classes\Toolbar.CT3279411 Key Found : HKLM\SOFTWARE\Classes\Toolbar.CT3287375 Key Found : HKLM\SOFTWARE\Classes\Toolbar.CT3288691 Key Found : HKLM\SOFTWARE\Classes\Toolbar.CT3291326 Key Found : HKLM\SOFTWARE\Classes\TypeLib\{0113A098-06EA-4776-A011-D75590778F1E} Key Found : HKLM\SOFTWARE\Classes\TypeLib\{13ABD093-D46F-40DF-A608-47E162EC799D} Key Found : HKLM\SOFTWARE\Classes\TypeLib\{9C049BA6-EA47-4AC3-AED6-A66D8DC9E1D8} Key Found : HKLM\SOFTWARE\Classes\TypeLib\{9DBB28C1-1925-11D3-A498-00104B6EB52E} Key Found : HKLM\SOFTWARE\Classes\TypeLib\{BEAA0C04-ED15-4C17-800B-28716025A4E4} Key Found : HKLM\SOFTWARE\Classes\TypeLib\{DCABB943-792E-44C4-9029-ECBEE6265AF9} Key Found : HKLM\Software\Conduit Key Found : HKLM\Software\DataMngr Key Found : HKLM\Software\Driver-Soft Key Found : HKLM\SOFTWARE\Google\Chrome\Extensions\cfcbmgbfdbijmjgjihagbomfbjfjmgon Key Found : HKLM\SOFTWARE\Google\Chrome\Extensions\dedmngkbaffkenlfdcbganndoghblmap Key Found : HKLM\SOFTWARE\Google\Chrome\Extensions\fbdagnimlohkpamglloopgfnoiijpmoj Key Found : HKLM\SOFTWARE\Google\Chrome\Extensions\kekfoodhbhpjhjcdecjngamojfhknooc Key Found : HKLM\SOFTWARE\Google\Chrome\Extensions\nbmafkdmkkckhggblphicnnhlgljnoje Key Found : HKLM\SOFTWARE\Google\Chrome\Extensions\poheodfamflhhhdcmjfeggbgigeefaco Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{006EE092-9658-4FD6-BD8E-A21A348E59F5} Key Found : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\bitguard.exe Key Found : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\bprotect.exe Key Found : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\browserdefender.exe Key Found : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\browserprotect.exe Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0E1230F8-EA50-42A9-983C-D22ABC2EED3B} Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{78F3A323-798E-4AEA-9A57-88F4B05FD5DD} Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{7AC3E13B-3BCA-4158-B330-F66DBB03C1B5} Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{7F6AFBF1-E065-4627-A2FD-810366367D01} Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{8F97BFF8-488B-4107-BCEE-B161AB4E4183} Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{A1B48071-416D-474E-A13B-BE5456E7FC31} Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{A1E28287-1A31-4B0F-8D05-AA8C465D3C5A} Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Optimizer Pro_is1 Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SoftwareUpdater Key Found : HKLM\Software\PIP Key Found : HKLM\Software\SoftwareUpdater Key Found : HKLM\Software\systweak Key Found : HKLM\Software\Viewpoint Key Found : HKLM\Software\Vittalia Key Found : [x64] HKLM\SOFTWARE\Classes\CLSID\{31AD400D-1B06-4E33-A59A-90C2C140CBA0} Key Found : [x64] HKLM\SOFTWARE\Classes\CLSID\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} Key Found : [x64] HKLM\SOFTWARE\Classes\CLSID\{56561B2A-FB5D-363A-9631-4C03D6054209} Key Found : [x64] HKLM\SOFTWARE\Classes\CLSID\{A717364F-69F3-3A24-ADD5-3901A57F880E} Key Found : [x64] HKLM\SOFTWARE\Classes\CLSID\{AE07101B-46D4-4A98-AF68-0333EA26E113} Key Found : [x64] HKLM\SOFTWARE\Classes\CLSID\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497} Key Found : [x64] HKLM\SOFTWARE\Classes\CLSID\{CCB08265-B35D-30B2-A6AF-6986CA957358} Key Found : [x64] HKLM\SOFTWARE\Classes\CLSID\{CD92622E-49B9-33B7-98D1-EC51049457D7} Key Found : [x64] HKLM\SOFTWARE\Classes\CLSID\{E041E037-FA4B-364A-B440-7A1051EA0301} Key Found : [x64] HKLM\SOFTWARE\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217} Key Found : [x64] HKLM\SOFTWARE\Classes\Interface\{17BF1E05-C0E8-413C-BD1F-A481EEA3B8E9} Key Found : [x64] HKLM\SOFTWARE\Classes\Interface\{3408AC0D-510E-4808-8F7B-6B70B1F88534} Key Found : [x64] HKLM\SOFTWARE\Classes\Interface\{462862BE-9A5C-49A5-9CBD-A649EAC63645} Key Found : [x64] HKLM\SOFTWARE\Classes\Interface\{83B2FE06-BA20-4F7D-96C6-6FC3A4E877D3} Key Found : [x64] HKLM\SOFTWARE\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC} Key Found : [x64] HKLM\SOFTWARE\Classes\Interface\{B32966A2-F7C2-4362-A6CF-399EC8B44110} Key Found : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31AD400D-1B06-4E33-A59A-90C2C140CBA0} Key Found : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} Key Found : [x64] HKLM\SOFTWARE\Tarma Installer Key Found : [x64] HKLM\SOFTWARE\V9Software Value Found : HKCU\Software\Microsoft\Internet Explorer\Main [BrowserMngr Start Page] Value Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes [BrowserMngrDefaultScope] Value Found : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{7AC3E13B-3BCA-4158-B330-F66DBB03C1B5}] Value Found : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}] Value Found : HKCU\Software\Mozilla\Firefox\Extensions [speedanalysis@SpeedAnalysis.com] Value Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{AE07101B-46D4-4A98-AF68-0333EA26E113}] Value Found : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [12x3q@3244516.com] Value Found : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [ntfdsaftsfdfdxx@mozilla.org] Value Found : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [speedanalysis@SpeedAnalysis.com] Value Found : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [xz123@ya456.com] Value Found : HKLM\SYSTEM\ControlSet001\Control\Session Manager\AppCertDlls [x64] Value Found : HKLM\SYSTEM\ControlSet001\Control\Session Manager\AppCertDlls [x86] Value Found : HKLM\SYSTEM\ControlSet002\Control\Session Manager\AppCertDlls [x64] Value Found : HKLM\SYSTEM\ControlSet002\Control\Session Manager\AppCertDlls [x86] Value Found : HKLM\SYSTEM\CurrentControlSet\Control\Session Manager\AppCertDlls [x64] Value Found : HKLM\SYSTEM\CurrentControlSet\Control\Session Manager\AppCertDlls [x86] Value Found : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{AE07101B-46D4-4A98-AF68-0333EA26E113}] ***** [ Browsers ] ***** -\ Internet Explorer v9.0.8112.16533 Setting Found : HKCU\Software\Microsoft\Internet Explorer\Main [Secondary Start Pages] - hxxp://search.conduit.com/?ctid=CT3319613&octid=EB_ORIGINAL_CTID&SearchSource=55&CUI=&UM=4&UP=SP918DC395-CA00-4EB2-BEBF-E701A4F26E26&SSPV= Setting Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURls [Tabs] - hxxp://search.babylon.com/?affID=113357&tt=120912_cpc_3812_4&babsrc=NT_ss&mntrId=383cf390000000000000000000000000 Setting Found : HKCU\Software\Microsoft\Internet Explorer\SearchUrl [Default] - hxxp://feed.snapdo.com/?publisher=Vittalia&dpid=Vittalia&co=CA&userid=dad38c0e-9806-d4e3-dd23-ed140e0ab6a6&searchtype=ds&q={searchTerms}&installDate=17/01/2014 Setting Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchUrl [Default] - hxxp://feed.snapdo.com/?publisher=Vittalia&dpid=Vittalia&co=CA&userid=dad38c0e-9806-d4e3-dd23-ed140e0ab6a6&searchtype=ds&q={searchTerms}&installDate=17/01/2014 -\ Mozilla Firefox v18.0.2 (en-US) [ File : C:\Users\Al\AppData\Roaming\Mozilla\Firefox\Profiles\w7m2wc3w.default\prefs.js ] Line Found : user_pref("CT3279141.FF19Solved", "true"); Line Found : user_pref("CT3279141.UserID", "UN35481994572138145"); Line Found : user_pref("CT3279141.addressUrlXPETakeover", "true"); Line Found : user_pref("CT3279141.autoDisableScopes", -1); Line Found : user_pref("CT3279141.browser.search.defaultthis.engineName", "true"); Line Found : user_pref("CT3279141.defaultSearchXPETakeover", "true"); Line Found : user_pref("CT3279141.installDate", "13/2/2013 21:39:28"); Line Found : user_pref("CT3279141.keyword", "true"); Line Found : user_pref("CT3279411.FF19Solved", "true"); Line Found : user_pref("CT3279411.UserID", "UN93755565286501704"); Line Found : user_pref("CT3279411.addressUrlXPETakeover", "true"); Line Found : user_pref("CT3279411.autoDisableScopes", 10); Line Found : user_pref("CT3279411.browser.search.defaultthis.engineName", "true"); Line Found : user_pref("CT3279411.defaultSearchXPETakeover", "true"); Line Found : user_pref("CT3279411.installDate", "19/3/2013 0:17:46"); Line Found : user_pref("CT3279411.keyword", "true"); Line Found : user_pref("CT3287375.1000082.isPlayDisplay", "true"); Line Found : user_pref("CT3287375.1000082.state", "{\"state\":\"stopped\",\"text\":\"Californi...\",\"description\":\"California Rock - Rock\",\"url\":\"hxxp://www.feedlive.net/california.asx\"}"); Line Found : user_pref("CT3287375.ENABALE_HISTORY", "{\"dataType\":\"string\",\"data\":\"true\"}"); Line Found : user_pref("CT3287375.ENABLE_RETURN_WEB_SEARCH_ON_THE_PAGE", "{\"dataType\":\"string\",\"data\":\"true\"}"); Line Found : user_pref("CT3287375.FF19Solved", "true"); Line Found : user_pref("CT3287375.FirstTime", "true"); Line Found : user_pref("CT3287375.FirstTimeFF3", "true"); Line Found : user_pref("CT3287375.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3287375&SearchSource=2&CUI=UN56455630209392227&UM=2&q="); Line Found : user_pref("CT3287375.UserID", "UN56455630209392227"); Line Found : user_pref("CT3287375.YTbyClickFavorites.enc", "W10="); Line Found : user_pref("CT3287375.YTbyClickRecent.enc", "W10="); Line Found : user_pref("CT3287375.addressBarTakeOverEnabledInHidden", "true"); Line Found : user_pref("CT3287375.autoDisableScopes", 10); Line Found : user_pref("CT3287375.browser.search.defaultthis.engineName", "true"); Line Found : user_pref("CT3287375.countryCode", "CA"); Line Found : user_pref("CT3287375.embeddedsData", "[{\"appId\":\"10000002\",\"apiPermissions\":{\"crossDomainAjax\":true,\"getMainFrameTitle\":true,\"getMainFrameUrl\":true,\"getSearchTerm\":true,\"instantAlert\":[...] Line Found : user_pref("CT3287375.firstTimeDialogOpened", "true"); Line Found : user_pref("CT3287375.fixPageNotFoundErrorByUser", "TRUE"); Line Found : user_pref("CT3287375.fixPageNotFoundErrorInHidden", "true"); Line Found : user_pref("CT3287375.fullUserID", "UN56455630209392227.XX.202505074236"); Line Found : user_pref("CT3287375.installDate", "11/4/2013 17:14:41"); Line Found : user_pref("CT3287375.installType", "DirectDownload"); Line Found : user_pref("CT3287375.installerVersion", "1.3.7.3"); Line Found : user_pref("CT3287375.isCheckedStartAsHidden", true); Line Found : user_pref("CT3287375.isEnableAllDialogs", "{\"dataType\":\"string\",\"data\":\"true\"}"); Line Found : user_pref("CT3287375.isFirstTimeToolbarLoading", "false"); Line Found : user_pref("CT3287375.isToolbarShrinked", "{\"dataType\":\"string\",\"data\":\"false\"}"); Line Found : user_pref("CT3287375.isWelcomPage", "{\"dataType\":\"boolean\",\"data\":\"true\"}"); Line Found : user_pref("CT3287375.keyword", "true"); Line Found : user_pref("CT3287375.lastNewTabSettings", "{\"isEnabled\":true,\"newTabUrl\":\"hxxp://search.conduit.com/?ctid=CT3287375&octid=CT3287375&SearchSource=15&CUI=UN56455630209392227&SSPV=&Lay=1&UM=2\"}"); Line Found : user_pref("CT3287375.lastVersion", "10.22.5.510"); Line Found : user_pref("CT3287375.mam_gk_installer_preapproved.enc", "VFJVRQ=="); Line Found : user_pref("CT3287375.navigationAliasesJson", "{\"EB_SEARCH_TERM\":\"\",\"EB_MAIN_FRAME_URL\":\"hxxp%3A%2F%2Fsearch.conduit.com%2F%3Fctid%3DCT3291326%26CUI%3DUN33710343732683948%26UM%3D2%26SearchSource[...] Line Found : user_pref("CT3287375.newSettings", "{\"dataType\":\"boolean\",\"data\":\"true\"}"); Line Found : user_pref("CT3287375.originalHomepage", "hxxp://search.conduit.com/?ctid=CT3291326&CUI=UN33710343732683948&UM=2&SearchSource=13&UP=SPA07C7D3F-5C4A-42CB-A255-014F8708215D&SSPV="); Line Found : user_pref("CT3287375.originalSearchAddressUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3291326&SearchSource=2&CUI=UN33710343732683948&UM=2&q="); Line Found : user_pref("CT3287375.originalSearchEngine", "Conduit Search"); Line Found : user_pref("CT3287375.originalSearchEngineName", "Conduit Search"); Line Found : user_pref("CT3287375.search.searchAppId", "10000002"); Line Found : user_pref("CT3287375.search.searchCount", "0"); Line Found : user_pref("CT3287375.searchFromAddressBarEnabledByUser", "true"); Line Found : user_pref("CT3287375.searchInNewTabEnabledByUser", "true"); Line Found : user_pref("CT3287375.searchInNewTabEnabledInHidden", "true"); Line Found : user_pref("CT3287375.searchSuggestEnabledByUser", "TRUE"); Line Found : user_pref("CT3287375.searchUninstallUserMode", "2"); Line Found : user_pref("CT3287375.searchUserMode", "2"); Line Found : user_pref("CT3287375.selectToSearchBoxEnabled", "{\"dataType\":\"string\",\"data\":\"true\"}"); Line Found : user_pref("CT3287375.serviceLayer_service_login_isFirstLoginInvoked", "{\"dataType\":\"boolean\",\"data\":\"true\"}"); Line Found : user_pref("CT3287375.serviceLayer_service_login_loginCount", "{\"dataType\":\"number\",\"data\":\"4\"}"); Line Found : user_pref("CT3287375.serviceLayer_service_toolbarGrouping_activeCTID", "{\"dataType\":\"string\",\"data\":\"CT3287375\"}"); Line Found : user_pref("CT3287375.serviceLayer_service_toolbarGrouping_activeDownloadUrl", "{\"dataType\":\"string\",\"data\":\"hxxp://Vafmusic.OurToolbar.com//xpi\"}"); Line Found : user_pref("CT3287375.serviceLayer_service_toolbarGrouping_activeToolbarName", "{\"dataType\":\"string\",\"data\":\"Vafmusic \"}"); Line Found : user_pref("CT3287375.serviceLayer_service_toolbarGrouping_invoked", "{\"dataType\":\"string\",\"data\":\"true\"}"); Line Found : user_pref("CT3287375.serviceLayer_service_usage_toolbarUsageCount", "{\"dataType\":\"number\",\"data\":\"2\"}"); Line Found : user_pref("CT3287375.serviceLayer_services_Configuration_lastUpdate", "1389902834239"); Line Found : user_pref("CT3287375.serviceLayer_services_appTrackingFirstTime_lastUpdate", "1389902832647"); Line Found : user_pref("CT3287375.serviceLayer_services_appsMetadata_lastUpdate", "1389902832640"); Line Found : user_pref("CT3287375.serviceLayer_services_gottenAppsContextMenu_lastUpdate", "1389902832785"); Line Found : user_pref("CT3287375.serviceLayer_services_login_10.22.5.510_lastUpdate", "1389902832482"); Line Found : user_pref("CT3287375.serviceLayer_services_otherAppsContextMenu_lastUpdate", "1389902833029"); Line Found : user_pref("CT3287375.serviceLayer_services_searchAPI_lastUpdate", "1389902833421"); Line Found : user_pref("CT3287375.serviceLayer_services_serviceMap_lastUpdate", "1389902832629"); Line Found : user_pref("CT3287375.serviceLayer_services_setupAPI_lastUpdate", "1386247364503"); Line Found : user_pref("CT3287375.serviceLayer_services_toolbarContextMenu_lastUpdate", "1389902832672"); Line Found : user_pref("CT3287375.serviceLayer_services_toolbarSettings_lastUpdate", "1389902832863"); Line Found : user_pref("CT3287375.serviceLayer_services_translation_lastUpdate", "1389902832655"); Line Found : user_pref("CT3287375.settingsINI", true); Line Found : user_pref("CT3287375.showToolbarPermission", "false"); Line Found : user_pref("CT3287375.smartbar.CTID", "CT3287375"); Line Found : user_pref("CT3287375.smartbar.Uninstall", "0"); Line Found : user_pref("CT3287375.smartbar.homepage", true); Line Found : user_pref("CT3287375.smartbar.toolbarName", "Vafmusic "); Line Found : user_pref("CT3287375.toolbarBornServerTime", "5-12-2013"); Line Found : user_pref("CT3287375.toolbarCurrentServerTime", "16-1-2014"); Line Found : user_pref("CT3287375.toolbarInstallDate", "05-12-2013 07:42:44"); Line Found : user_pref("CT3287375.toolbarLoginClientTime", "Thu Dec 05 2013 07:42:59 GMT-0500 (Eastern Standard Time)"); Line Found : user_pref("CT3287375_Firefox.csv", "[{\"from\":\"Abs Layer\",\"action\":\"loading toolbar\",\"time\":1389902829996,\"isWithState\":\"\",\"timeFromStart\":0,\"timeFromPrev\":0}]"); Line Found : user_pref("CT3288691.ENABALE_HISTORY", "{\"dataType\":\"string\",\"data\":\"true\"}"); Line Found : user_pref("CT3288691.ENABLE_RETURN_WEB_SEARCH_ON_THE_PAGE", "{\"dataType\":\"string\",\"data\":\"true\"}"); Line Found : user_pref("CT3288691.FF19Solved", "true"); Line Found : user_pref("CT3288691.FirstTime", "true"); Line Found : user_pref("CT3288691.FirstTimeFF3", "true"); Line Found : user_pref("CT3288691.UserID", "UN15801948464926938"); Line Found : user_pref("CT3288691.addressBarTakeOverEnabledInHidden", "true"); Line Found : user_pref("CT3288691.appOptions", "{}"); Line Found : user_pref("CT3288691.countryCode", "CA"); Line Found : user_pref("CT3288691.defaultSearch", "false"); Line Found : user_pref("CT3288691.embeddedsData", "[{\"appId\":\"10000002\",\"apiPermissions\":{\"crossDomainAjax\":true,\"getMainFrameTitle\":true,\"getMainFrameUrl\":true,\"getSearchTerm\":true,\"instantAlert\":[...] Line Found : user_pref("CT3288691.enableAlerts", "true"); Line Found : user_pref("CT3288691.enableSearchFromAddressBar", "false"); Line Found : user_pref("CT3288691.firstTimeDialogOpened", "true"); Line Found : user_pref("CT3288691.fixPageNotFoundError", "false"); Line Found : user_pref("CT3288691.fixPageNotFoundErrorByUser", "false"); Line Found : user_pref("CT3288691.fixPageNotFoundErrorInHidden", "true"); Line Found : user_pref("CT3288691.fullUserID", "UN15801948464926938.IN.20140120162752"); Line Found : user_pref("CT3288691.installDate", "20/01/2014 16:28:33"); Line Found : user_pref("CT3288691.installSessionId", "{3C056951-297E-4E20-808A-E52501025B49}"); Line Found : user_pref("CT3288691.installSp", "false"); Line Found : user_pref("CT3288691.installType", "conduitnsisintegration"); Line Found : user_pref("CT3288691.installUsage", "2014-01-21T02:46:00.0034069+03:00"); Line Found : user_pref("CT3288691.installUsageEarly", "2014-01-21T02:45:55.6665235+03:00"); Line Found : user_pref("CT3288691.installerVersion", "1.8.1.4"); Line Found : user_pref("CT3288691.isCheckedStartAsHidden", true); Line Found : user_pref("CT3288691.isEnableAllDialogs", "{\"dataType\":\"string\",\"data\":\"true\"}"); Line Found : user_pref("CT3288691.isFirstTimeToolbarLoading", "false"); Line Found : user_pref("CT3288691.isToolbarShrinked", "{\"dataType\":\"string\",\"data\":\"false\"}"); Line Found : user_pref("CT3288691.keyword", true); Line Found : user_pref("CT3288691.lastNewTabSettings", "{\"isEnabled\":false,\"newTabUrl\":\"hxxp://search.conduit.com/?ctid=CT3288691&octid=CT3288691&SearchSource=15&CUI=UN15801948464926938&SSPV=&Lay=1&UM=2\"}"); Line Found : user_pref("CT3288691.lastVersion", "10.23.0.822"); Line Found : user_pref("CT3288691.mam_gk_installer_preapproved.enc", "dHJ1ZQ=="); Line Found : user_pref("CT3288691.navigationAliasesJson", "{\"EB_SEARCH_TERM\":\"\",\"EB_MAIN_FRAME_URL\":\"hxxp%3A%2F%2Fsearch.snapdo.com%2F%3Fst%3Dhp%26q%3D\",\"EB_MAIN_FRAME_TITLE\":\"%0A%09Search%0A\",\"EB_TOO[...] Line Found : user_pref("CT3288691.openThankYouPage", "false"); Line Found : user_pref("CT3288691.openUninstallPage", "true"); Line Found : user_pref("CT3288691.originalSearchAddressUrl", "hxxp://feed.snapdo.com/?publisher=Vittalia&dpid=Vittalia&co=CA&userid=dad38c0e-9806-d4e3-dd23-ed140e0ab6a6&searchtype=ds&installDate=17/01/2014&q="); Line Found : user_pref("CT3288691.revertSettingsEnabled", "false"); Line Found : user_pref("CT3288691.search.searchAppId", "10000002"); Line Found : user_pref("CT3288691.search.searchCount", "0"); Line Found : user_pref("CT3288691.searchInNewTabEnabledByUser", "false"); Line Found : user_pref("CT3288691.searchInNewTabEnabledInHidden", "true"); Line Found : user_pref("CT3288691.searchRevert", "false"); Line Found : user_pref("CT3288691.searchSuggestEnabledByUser", "false"); Line Found : user_pref("CT3288691.searchUninstallUserMode", "2"); Line Found : user_pref("CT3288691.searchUserMode", "2"); Line Found : user_pref("CT3288691.selectToSearchBoxEnabled", "{\"dataType\":\"string\",\"data\":\"true\"}"); Line Found : user_pref("CT3288691.serviceLayer_service_login_isFirstLoginInvoked", "{\"dataType\":\"boolean\",\"data\":\"true\"}"); Line Found : user_pref("CT3288691.serviceLayer_service_login_loginCount", "{\"dataType\":\"number\",\"data\":\"4\"}"); Line Found : user_pref("CT3288691.serviceLayer_service_toolbarGrouping_activeCTID", "{\"dataType\":\"string\",\"data\":\"CT3288691\"}"); Line Found : user_pref("CT3288691.serviceLayer_service_toolbarGrouping_activeDownloadUrl", "{\"dataType\":\"string\",\"data\":\"hxxp://DivXBrowserBar.OurToolbar.com//xpi\"}"); Line Found : user_pref("CT3288691.serviceLayer_service_toolbarGrouping_activeToolbarName", "{\"dataType\":\"string\",\"data\":\"DivX Browser Bar \"}"); Line Found : user_pref("CT3288691.serviceLayer_service_toolbarGrouping_invoked", "{\"dataType\":\"string\",\"data\":\"true\"}"); Line Found : user_pref("CT3288691.serviceLayer_service_usage_toolbarUsageCount", "{\"dataType\":\"number\",\"data\":\"2\"}"); Line Found : user_pref("CT3288691.serviceLayer_services_Configuration_lastUpdate", "1390970292725"); Line Found : user_pref("CT3288691.serviceLayer_services_appTrackingFirstTime_lastUpdate", "1390261557452"); Line Found : user_pref("CT3288691.serviceLayer_services_appsMetadata_lastUpdate", "1390970292249"); Line Found : user_pref("CT3288691.serviceLayer_services_gottenAppsContextMenu_lastUpdate", "1390261557611"); Line Found : user_pref("CT3288691.serviceLayer_services_installUsage_ToolbarInstallEarly_lastUpdate", "1390261553180"); Line Found : user_pref("CT3288691.serviceLayer_services_installUsage_ToolbarInstall_lastUpdate", "1390261562488"); Line Found : user_pref("CT3288691.serviceLayer_services_login_10.23.0.722_lastUpdate", "1390261557854"); Line Found : user_pref("CT3288691.serviceLayer_services_login_10.23.0.822_lastUpdate", "1390970291808"); Line Found : user_pref("CT3288691.serviceLayer_services_otherAppsContextMenu_lastUpdate", "1390261557361"); Line Found : user_pref("CT3288691.serviceLayer_services_searchAPI_lastUpdate", "1390970292337"); Line Found : user_pref("CT3288691.serviceLayer_services_serviceMap_lastUpdate", "1390970291669"); Line Found : user_pref("CT3288691.serviceLayer_services_toolbarContextMenu_lastUpdate", "1390970291745"); Line Found : user_pref("CT3288691.serviceLayer_services_toolbarSettings_lastUpdate", "1390970292221"); Line Found : user_pref("CT3288691.serviceLayer_services_translation_lastUpdate", "1390970292102"); Line Found : user_pref("CT3288691.settingsINI", true); Line Found : user_pref("CT3288691.shouldFirstTimeDialog", "false"); Line Found : user_pref("CT3288691.showToolbarPermission", "false"); Line Found : user_pref("CT3288691.smartbar.CTID", "CT3288691"); Line Found : user_pref("CT3288691.smartbar.Uninstall", "0"); Line Found : user_pref("CT3288691.smartbar.toolbarName", "DivX Browser Bar "); Line Found : user_pref("CT3288691.startPage", "false"); Line Found : user_pref("CT3288691.toolbarBornServerTime", "21-1-2014"); Line Found : user_pref("CT3288691.toolbarCurrentServerTime", "29-1-2014"); Line Found : user_pref("CT3288691.toolbarInstallDate", "20-01-2014 16:27:54"); Line Found : user_pref("CT3288691.toolbarLoginClientTime", "Mon Jan 20 2014 18:45:57 GMT-0500 (Eastern Standard Time)"); Line Found : user_pref("CT3288691.versionFromInstaller", "10.23.0.722"); Line Found : user_pref("CT3288691.xpeMode", "0"); Line Found : user_pref("CT3288691_Firefox.csv", "[{\"from\":\"Abs Layer\",\"action\":\"loading toolbar\",\"time\":1390970283245,\"isWithState\":\"\",\"timeFromStart\":0,\"timeFromPrev\":0}]"); Line Found : user_pref("CT3291326.FF19Solved", "true"); Line Found : user_pref("CT3291326.UserID", "UN33710343732683948"); Line Found : user_pref("CT3291326.addressUrlXPETakeover", "true"); Line Found : user_pref("CT3291326.autoDisableScopes", 10); Line Found : user_pref("CT3291326.browser.search.defaultthis.engineName", "true"); Line Found : user_pref("CT3291326.defaultSearchXPETakeover", "true"); Line Found : user_pref("CT3291326.fullUserID", "UN33710343732683948.IN.20130615193519"); Line Found : user_pref("CT3291326.installDate", "15/06/2013 19:35:20"); Line Found : user_pref("CT3291326.installSessionId", "-1"); Line Found : user_pref("CT3291326.installSp", "TRUE"); Line Found : user_pref("CT3291326.installerVersion", "1.4.3.0"); Line Found : user_pref("CT3291326.keyword", "true"); Line Found : user_pref("CT3291326.originalHomepage", "hxxp://searchou.com/?affil=7&uid=d0dfc450-91b5-11e2-bc68-00269e150a49"); Line Found : user_pref("CT3291326.originalSearchAddressUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3287375&SearchSource=2&CUI=UN56455630209392227&UM=2&q="); Line Found : user_pref("CT3291326.originalSearchEngine", "Vafmusic Customized Web Search"); Line Found : user_pref("CT3291326.searchRevert", "false"); Line Found : user_pref("CT3291326.searchUserMode", "2"); Line Found : user_pref("CT3291326.smartbar.homepage", "true"); Line Found : user_pref("CT3291326.startPageXPETakeover", "true"); Line Found : user_pref("CT3291326.versionFromInstaller", "10.16.2.9"); Line Found : user_pref("Smartbar.ConduitHomepagesList", ""); Line Found : user_pref("Smartbar.ConduitSearchEngineList", "Vafmusic Customized Web Search"); Line Found : user_pref("Smartbar.ConduitSearchUrlList", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3287375&SearchSource=2&CUI=UN56455630209392227&UM=2&q="); Line Found : user_pref("Smartbar.SearchFromAddressBarSavedUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3287375&SearchSource=2&CUI=UN56455630209392227&UM=2&q="); Line Found : user_pref("Smartbar.keywordURLSelectedCTID", "CT3287375"); Line Found : user_pref("browser.search.defaultenginename", "Web Search"); Line Found : user_pref("browser.search.defaultthis.engineName", "KeyBar 1.13 Customized Web Search"); Line Found : user_pref("browser.search.defaulturl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3291326&CUI=UN33710343732683948&UM=2&SearchSource=3&q={searchTerms}"); Line Found : user_pref("extensions.helperbar.DockingPositionDown", false); Line Found : user_pref("extensions.helperbar.SmartbarDisabled", false); Line Found : user_pref("extensions.helperbar.SmartbarStateMinimaized", false); Line Found : user_pref("extensions.helperbar.Visibility", true); Line Found : user_pref("extensions.helperbar.countryiso", "ca"); Line Found : user_pref("extensions.helperbar.downloadprovider", "vittalia"); Line Found : user_pref("extensions.helperbar.externalJsFiles", "{\"d\":\"[{\\"ExcludeDomains\\":[\\"snap.do\\",\\"snapdo.com\\"],\\"hxxpInjection\\":\\"hxxp:\\\/\\\/i.linkuryjs.info\\\/kury\\\[...] Line Found : user_pref("extensions.helperbar.installationid", "dad38c0e-9806-d4e3-dd23-ed140e0ab6a6"); Line Found : user_pref("extensions.helperbar.installdate", "17/01/2014"); Line Found : user_pref("extensions.helperbar.lastExternalJsUpdate", "1390970302251"); Line Found : user_pref("extensions.helperbar.publisher", "vittalia"); Line Found : user_pref("plugin.state.npconduitfirefoxplugin", 2); Line Found : user_pref("smartbar.addressBarOwnerCTID", "CT3287375"); Line Found : user_pref("smartbar.conduitHomepageList", "hxxp://search.conduit.com/?ctid=CT3291326&CUI=UN33710343732683948&UM=2&SearchSource=13,hxxp://search.conduit.com/?UM=2&ctid=CT3287375&SearchSource=13&CUI=UN5[...] Line Found : user_pref("smartbar.conduitSearchAddressUrlList", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3279141&SearchSource=2&CUI=UN35481994572138145&UM=UM_ID&q=,hxxp://search.conduit.com/ResultsExt.aspx[...] Line Found : user_pref("smartbar.defaultSearchOwnerCTID", "CT3287375"); Line Found : user_pref("smartbar.homePageOwnerCTID", "CT3287375"); Line Found : user_pref("smartbar.machineId", "EMYQEFZ3IPAFZCKBLK4JTEEQ/U+1NMZXB7LQQ8EGNL8S9/HLPX218JQJEQQF5CMUD1BM1+EC8SJBWZS1UCMYFA"); Line Found : user_pref("smartbar.originalSearchAddressUrl", "hxxp://isearch.avg.com/search?cid={A5FE936B-7DE0-4EC9-8BC6-D0C715506465}&mid=e0facd3048be47d1b790d16fd8f1e3ba-e62e105ce2bb01c71204d71beda7c0a923b743a6&l[...] Line Found : user_pref("smartbar.originalSearchEngine", "AVG Secure Search"); Line Found : user_pref("valueApps.CT3287375./9B+7E+x305.storedInFile", true); Line Found : user_pref("valueApps.CT3287375./9B+7E,x305.storedInFile", true); Line Found : user_pref("valueApps.CT3287375./9B+7E-x305.storedInFile", true); Line Found : user_pref("valueApps.CT3287375./9B+7E.:2z527.storedInFile", true); Line Found : user_pref("valueApps.CT3287375./9B+7E.x305.storedInFile", true); Line Found : user_pref("valueApps.CT3287375./9B+7E/x305.storedInFile", true); Line Found : user_pref("valueApps.CT3287375./9B+7E06CG5EL8:", "6E6D69696A74736E7473"); Line Found : user_pref("valueApps.CT3287375./9B+7E06CG5EL8:.storedInFile", false); Line Found : user_pref("valueApps.CT3287375./9B+7E06CG5EL;8I:K", "247E2D2F226A74736F6F707A79747A79242F4B49474F42357D5D5C3D"); Line Found : user_pref("valueApps.CT3287375./9B+7E06CG5EL;8I:K.storedInFile", false); Line Found : user_pref("valueApps.CT3287375./9B+7E0x305.storedInFile", true); Line Found : user_pref("valueApps.CT3287375./9B+7E1x305.storedInFile", true); Line Found : user_pref("valueApps.CT3287375./9B+7E2x305.storedInFile", true); Line Found : user_pref("valueApps.CT3287375./9B+7E31;CJ7FK;KG#NCEP@MC+VKN.storedInFile", true); Line Found : user_pref("valueApps.CT3287375./9B+7E3x305.storedInFile", true); Line Found : user_pref("valueApps.CT3287375./9B+7E4x305.storedInFile", true); Line Found : user_pref("valueApps.CT3287375./9B+7E5x305.storedInFile", true); Line Found : user_pref("valueApps.CT3287375./9B+7E6x305.storedInFile", true); Line Found : user_pref("valueApps.CT3287375./9B+7E7x305.storedInFile", true); Line Found : user_pref("valueApps.CT3287375./9B+7E8x305.storedInFile", true); Line Found : user_pref("valueApps.CT3287375./9B+7E9x305.storedInFile", true); Line Found : user_pref("valueApps.CT3287375./9B+7E:x305.storedInFile", true); Line Found : user_pref("valueApps.CT3287375./9B+7E;x305.storedInFile", true); Line Found : user_pref("valueApps.CT3287375./9B+7Ex305.storedInFile", true); Line Found : user_pref("valueApps.CT3287375./9B+7E?x305.storedInFile", true); Line Found : user_pref("valueApps.CT3287375./9B+7E@x305.storedInFile", true); Line Found : user_pref("valueApps.CT3287375./9B+7EAx305.storedInFile", true); Line Found : user_pref("valueApps.CT3287375./9B+7EBE3G=;D9N9=D", "372C2D326975762E3A3C7B3A39434A494841434B265146492965504656496571734D334B57"); Line Found : user_pref("valueApps.CT3287375./9B+7EBE3G=;D9N9=D.storedInFile", false); Line Found : user_pref("valueApps.CT3287375./9B+7EBx305.storedInFile", true); Line Found : user_pref("valueApps.CT3287375./9B+7ECx305.storedInFile", true); Line Found : user_pref("valueApps.CT3287375./9B+7EDx305.storedInFile", true); Line Found : user_pref("valueApps.CT3287375./9B+7Etx305.storedInFile", true); Line Found : user_pref("valueApps.CT3287375./9B-0?3G>D", "6A68406E716F74447A7844487320757C7D4E257C2421522A265757292C27585C282B3032"); Line Found : user_pref("valueApps.CT3287375./9B-0?3G>D.storedInFile", false); Line Found : user_pref("valueApps.CT3287375./9B-0?3G@6:5;", ""); Line Found : user_pref("valueApps.CT3287375./9B-0?3G@6:5;.storedInFile", false); Line Found : user_pref("valueApps.CT3287375./9B-0?3GFA7EF", "2B2E2C3D"); Line Found : user_pref("valueApps.CT3287375./9B-0?3GFA7EF.storedInFile", false); Line Found : user_pref("valueApps.CT3287375./9B-3=3ECCJA=F>", "247E333D2C452F4135276F292A212C393D44307832332A354448584C3A23282E2E3132333435363B466068576C5E6857705A6C60606B6668563F73796F697861"); Line Found : user_pref("valueApps.CT3287375./9B-3=3ECCJA=F>.storedInFile", false); Line Found : user_pref("valueApps.CT3287375./9B/>01=9A6K601=9A6K6@44I48?", "372C2D3269757633423633414847203E3D474E4D4C45474F2A554A4D2D5858585E4B554E366352564F"); Line Found : user_pref("valueApps.CT3287375./9B3=>@44I48?.storedInFile", false); Line Found : user_pref("valueApps.CT3287375./9B5BA==9CJAG", "6D3E3B706C6D75737A73764873774C4D764B214C4D"); Line Found : user_pref("valueApps.CT3287375./9B5BA==9CJAG.storedInFile", false); Line Found : user_pref("valueApps.CT3287375./9B6B11G4C56B>F;P;ANR@P", "6E6D69696A74736E7375707774"); Line Found : user_pref("valueApps.CT3287375./9B6B11G4C56B>F;P;ANR@P.storedInFile", false); Line Found : user_pref("valueApps.CT3287375./9B90E@.3C;7B=?OFB>>RHIQS", "393F352F3E"); Line Found : user_pref("valueApps.CT3287375./9B90E@.3C;7B=?OFB>>RHIQS.storedInFile", false); Line Found : user_pref("valueApps.CT3287375./9B9643G3/9E", "6A"); Line Found : user_pref("valueApps.CT3287375./9B9643G3/9E.storedInFile", false); Line Found : user_pref("valueApps.CT3287375./9B;45>:BI9I7IE", "2B2E2C3D"); Line Found : user_pref("valueApps.CT3287375./9B;45>:BI9I7IE.storedInFile", false); Line Found : user_pref("valueApps.CT3287375./9B<:222H64<", "393F352F3E"); Line Found : user_pref("valueApps.CT3287375./9B<:222H64<.storedInFile", false); Line Found : user_pref("valueApps.CT3287375./9B<:222H64

H.A.W.X · Answer

Bonsoir,

Ok lili dort donc continue avec ceci :
~ http://www.sosvirus.net/canned-speech-shortcut-module-t613.html#p3768

Bonne soirée

allxtrm · Answer

Merci HAWX
Jai lancé le lien mais je ne sais pas quoi faire ensuite, je suis entrain de regarder quoi faire...

allxtrm · Answer

ok, je télécharge lantivir

lilidurhone · Answer

Hello

Fais nettoyer :)

Et oui je dormais ;)

allxtrm · Answer

Merci beaucoup Lili et Hawx, vous etes supers, mon problème est réglé.

lilidurhone · Answer

* Télécharge ZHPDiag (de Nicolas Coolman)
https://www.zebulon.fr/telechargements/securite/systeme/zhpdiag.html ou https://www.commentcamarche.net/telecharger/utilitaires/24803-zhpdiag/

* Au cas où le premier lien ne marcherai pas, clique sur celui de dessous
ftp://zebulon.fr/ZHPDiag2.exe

* Laisse toi guider lors de l'installation, il se lancera automatiquement à la fin.

* Surtout, n'oublie pas d'installer son icône sur le bureau l'icône est en forme de parchemin 
https://www.cjoint.com/13sp/CIvuQfap3YY_zhpdiag.png

* A l'ouverture du logiciel il te sera proposé deux options "rechercher" et "configurer"

* Cliques sur configurer 

* Tournevis puis tous 

* Clique sur l'icône représentant une loupe + (« Lancer le diagnostic »)

* Enregistre le rapport sur ton Bureau à l'aide de l'icône représentant une disquette

* Pour héberger le rapport, rends toi sur cjoint.com
* Clique sur choisissez un fichier va chercher le rapport dans ton PC.

* Le rapport est hébergé:
- Pour XP : C:\Documents and Settings\username\Local Settings\Application Data\ZHP
- Depuis Vista : C:\Users\username\AppData\Roaming\ZHP 

* Une fois le rapport trouvé, sélectionne le, et clique sur Ouvrir

* Choisis le type de diffusion(je te conseille privée 4 jours il sera détruit)

* Puis cliques sur créer le lien cjoint

* Une fois que tu auras obtenu le lien copies colle dans ta prochaine réponse

* Pour t'aider  https://www.commentcamarche.net/faq/29493-utiliser-cjoint-pour-heberger-des-fichiers

allxtrm · Answer

https://www.cjoint.com/?3CbvQlKUWz0

lilidurhone · Answer

On continue demain :)

lilidurhone · Answer

* Télécharge sur le bureau RogueKiller

* Quitte tous tes programmes en cours.

* Sous Vista/Seven et windows 8 , clique droit -> lancer en tant qu'administrateur

* Sinon lance simplement RogueKiller.exe

* Patiente pendant le pre-scan, puis clique sur le bouton Scan

* Un rapport RKreport.txt a du se créer sur le bureau, poste-le.

Note : Si le programme a été bloqué, ne pas hésiter à essayer plusieurs fois.

allxtrm · Answer

Allo Lili
https://www.cjoint.com/?3CcpMPQWnKA 
https://www.cjoint.com/?3CcpNV0wjRW 

RogueKiller V8.8.10 [Feb 28 2014] by Adlice Software
mail : https://www.adlice.com/contact/
Feedback : https://forum.adlice.com/
Website : https://www.adlice.com/roguekiller/
Blog : https://www.adlice.com/

Operating System : Windows Vista (6.0.6002 Service Pack 2) 64 bits version
Started in : Normal mode
User : Al [Admin rights]
Mode : Remove -- Date : 03/02/2014 09:25:51
| ARK || FAK || MBR |

¤¤¤ Bad processes : 1 ¤¤¤
[SUSP PATH] ouc.exe -- C:\ProgramData\Modem HDM EC156\OnlineUpdate\ouc.exe [7] -> KILLED [TermProc]

¤¤¤ Registry Entries : 6 ¤¤¤
[HJ POL][PUM] HKLM\[...]\System : ConsentPromptBehaviorAdmin (0) -> REPLACED (2)
[HJ POL][PUM] HKLM\[...]\System : EnableLUA (0) -> REPLACED (1)
[HJ POL][PUM] HKLM\[...]\Wow6432Node\[...]\System : ConsentPromptBehaviorAdmin (0) -> REPLACED (2)
[HJ POL][PUM] HKLM\[...]\Wow6432Node\[...]\System : EnableLUA (0) -> REPLACED (1)
[HJ DESK][PUM] HKLM\[...]\NewStartPanel : {59031a47-3f72-44a7-89c5-5595fe6b30ee} (1) -> REPLACED (0)
[HJ DESK][PUM] HKLM\[...]\NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> REPLACED (0)

¤¤¤ Scheduled tasks : 0 ¤¤¤

¤¤¤ Startup Entries : 0 ¤¤¤

¤¤¤ Web browsers : 0 ¤¤¤

¤¤¤ Browser Addons : 0 ¤¤¤

¤¤¤ Particular Files / Folders: ¤¤¤

¤¤¤ Driver : [NOT LOADED 0x0] ¤¤¤

¤¤¤ External Hives: ¤¤¤

¤¤¤ Infection :  ¤¤¤

¤¤¤ HOSTS File: ¤¤¤
--> %SystemRoot%\System32\drivers\etc\hosts

lilidurhone · Answer

Comment va le pc?

allxtrm · Answer

très bien, merci bcp.

lilidurhone · Answer

Refais un zhpdiag

allxtrm · Answer

C fait Lili,
https://www.cjoint.com/?3CcrMy6MLRp

lilidurhone · Answer

On continue demain

Je suis envahis par des intrus

17 réponses

Discussions similaires