Page d'accueil redirigée vers fhising
Fermé
Archimedali
Messages postés
4
Date d'inscription
jeudi 27 septembre 2012
Statut
Membre
Dernière intervention
31 août 2014
-
24 août 2014 à 15:46
Utilisateur anonyme - 31 août 2014 à 09:34
Utilisateur anonyme - 31 août 2014 à 09:34
A voir également:
- Page d'accueil redirigée vers fhising
- Mettre google en page d'accueil - Guide
- Supprimer une page word - Guide
- Page d'accueil iphone - Guide
- Comment remettre ma page d'accueil comme avant ✓ - Forum Réseaux sociaux
8 réponses
Giksz
Messages postés
141
Date d'inscription
mercredi 30 juillet 2014
Statut
Membre
Dernière intervention
1 mai 2019
60
Modifié par Giksz le 24/08/2014 à 15:51
Modifié par Giksz le 24/08/2014 à 15:51
salut,
pense à faire un scan complet avec ton antivirus à jour,
fait de même avec un antimalware comme Malwarebytes
Modifier la page de démarrage dans ton navigateur, en général ça se trouve dans le premier onglet de configuration quand tu fais option ou préférence.
Everything Is Possible !
pense à faire un scan complet avec ton antivirus à jour,
fait de même avec un antimalware comme Malwarebytes
Modifier la page de démarrage dans ton navigateur, en général ça se trouve dans le premier onglet de configuration quand tu fais option ou préférence.
Everything Is Possible !
Utilisateur anonyme
24 août 2014 à 15:55
24 août 2014 à 15:55
Bonjour
Télécharge AdwCleaner ( d'Xplode ) sur ton bureau.
Lance le, clique sur [Scanner] puis patiente le temps du scan.
Une fois le scan terminé clique sur le bouton [Nettoyer]
Patiente durant le nettoyage. Lis le message qui apparaît, puis clique sur Ok . Le PC va être redémarré automatiquement et le rapport s'ouvrira à la fin du redémarrage.
Poste le rapport
Note : Le rapport est également sauvegardé sous C:\AdwCleaner[S1].txt
A lire :
Les programmes potentiellement indésirables :
https://www.malekal.com/adwares-pup-protection/
Les toolbars, c'est pas obligatoire ( par Malekal ) :https://forum.malekal.com/viewtopic.php?t=6173&start=
@+
Télécharge AdwCleaner ( d'Xplode ) sur ton bureau.
Lance le, clique sur [Scanner] puis patiente le temps du scan.
Une fois le scan terminé clique sur le bouton [Nettoyer]
Patiente durant le nettoyage. Lis le message qui apparaît, puis clique sur Ok . Le PC va être redémarré automatiquement et le rapport s'ouvrira à la fin du redémarrage.
Poste le rapport
Note : Le rapport est également sauvegardé sous C:\AdwCleaner[S1].txt
A lire :
Les programmes potentiellement indésirables :
https://www.malekal.com/adwares-pup-protection/
Les toolbars, c'est pas obligatoire ( par Malekal ) :https://forum.malekal.com/viewtopic.php?t=6173&start=
@+
Archimedali
Messages postés
4
Date d'inscription
jeudi 27 septembre 2012
Statut
Membre
Dernière intervention
31 août 2014
24 août 2014 à 23:53
24 août 2014 à 23:53
Bonsoir,
Merci infiniment pour votre aide. J'ai suivi vos conseils et voici le texte du rapport :
# AdwCleaner v3.308 - Rapport créé le 24/08/2014 à 22:13:18
# Mis à jour le 20/08/2014 par Xplode
# Système d'exploitation : Windows 7 Starter Service Pack 1 (32 bits)
# Nom d'utilisateur : Medali - HAMLET
# Exécuté depuis : C:\Users\Medali\Desktop\adwcleaner_3.308.exe
# Option : Nettoyer
***** [ Services ] *****
[#] Service Supprimé : globalUpdate
[#] Service Supprimé : globalUpdatem
***** [ Fichiers / Dossiers ] *****
Dossier Supprimé : C:\ProgramData\NCH Software
Dossier Supprimé : C:\Program Files\globalUpdate
Dossier Supprimé : C:\Program Files\GoPhoto.it V9.0
Dossier Supprimé : C:\Program Files\NCH Software
Dossier Supprimé : C:\Program Files\PCDApp
Dossier Supprimé : C:\Users\Medali\AppData\Local\cool_mirage
Dossier Supprimé : C:\Users\Medali\AppData\Local\globalUpdate
Dossier Supprimé : C:\Users\Medali\AppData\Roaming\NCH Software
Dossier Supprimé : C:\Users\Medali\AppData\Local\Google\Chrome\User Data\Default\Extensions\nikpibnbobmbdbheedjfogjlikpgpnhp
Fichier Supprimé : C:\Windows\system32\installd.exe
Fichier Supprimé : C:\Users\Medali\AppData\Roaming\addonVont.zip
Fichier Supprimé : C:\Users\Medali\AppData\Roaming\ext.crx
Fichier Supprimé : C:\Users\Medali\AppData\Roaming\Mozilla\Firefox\Profiles\yiji3bez.default\invalidprefs.js
Fichier Supprimé : C:\Users\Medali\AppData\Roaming\Mozilla\Firefox\Profiles\yiji3bez.default\searchplugins\buenosearch.xml
Fichier Supprimé : C:\Users\Medali\AppData\Roaming\Mozilla\Firefox\Profiles\yiji3bez.default\searchplugins\speedbit.xml
Fichier Supprimé : C:\Users\Medali\AppData\Roaming\Mozilla\Firefox\Profiles\yiji3bez.default\searchplugins\VenteeRo.xml
Fichier Supprimé : C:\Users\Medali\AppData\Roaming\Mozilla\Firefox\Profiles\yiji3bez.default\user.js
***** [ Tâches planifiées ] *****
Tâche Supprimée : globalUpdateUpdateTaskMachineCore
Tâche Supprimée : globalUpdateUpdateTaskMachineUA
Tâche Supprimée : 7ab2b024-ff5b-4ba5-bc6e-92e59cfaaa5e-1
Tâche Supprimée : 7ab2b024-ff5b-4ba5-bc6e-92e59cfaaa5e-2
Tâche Supprimée : 7ab2b024-ff5b-4ba5-bc6e-92e59cfaaa5e-4
Tâche Supprimée : 7ab2b024-ff5b-4ba5-bc6e-92e59cfaaa5e-5
Tâche Supprimée : 7ab2b024-ff5b-4ba5-bc6e-92e59cfaaa5e-6
Tâche Supprimée : 7ab2b024-ff5b-4ba5-bc6e-92e59cfaaa5e-7
***** [ Raccourcis ] *****
***** [ Registre ] *****
Clé Supprimée : HKLM\SOFTWARE\Google\Chrome\Extensions\acfoobbgoakpihljnfedbcfaipcdlfhk
Clé Supprimée : HKCU\Software\Google\Chrome\Extensions\nikpibnbobmbdbheedjfogjlikpgpnhp
Clé Supprimée : HKLM\SOFTWARE\Classes\globalUpdate.OneClickCtrl.10
Clé Supprimée : HKLM\SOFTWARE\Classes\globalUpdate.OneClickProcessLauncherMachine
Clé Supprimée : HKLM\SOFTWARE\Classes\globalUpdate.OneClickProcessLauncherMachine.1.0
Clé Supprimée : HKLM\SOFTWARE\Classes\globalUpdate.Update3WebControl.4
Clé Supprimée : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoCreateAsync
Clé Supprimée : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoCreateAsync.1.0
Clé Supprimée : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreClass
Clé Supprimée : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreClass.1
Clé Supprimée : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreMachineClass
Clé Supprimée : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreMachineClass.1
Clé Supprimée : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CredentialDialogMachine
Clé Supprimée : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CredentialDialogMachine.1.0
Clé Supprimée : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassMachine
Clé Supprimée : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassMachine.1.0
Clé Supprimée : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassMachineFallback
Clé Supprimée : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassMachineFallback.1.0
Clé Supprimée : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassSvc
Clé Supprimée : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassSvc.1.0
Clé Supprimée : HKLM\SOFTWARE\Classes\globalUpdateUpdate.ProcessLauncher
Clé Supprimée : HKLM\SOFTWARE\Classes\globalUpdateUpdate.ProcessLauncher.1.0
Clé Supprimée : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3COMClassService
Clé Supprimée : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3COMClassService.1.0
Clé Supprimée : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebMachine
Clé Supprimée : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebMachine.1.0
Clé Supprimée : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebMachineFallback
Clé Supprimée : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebMachineFallback.1.0
Clé Supprimée : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebSvc
Clé Supprimée : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebSvc.1.0
Clé Supprimée : HKLM\SOFTWARE\Classes\Updater.AmiUpd
Clé Supprimée : HKLM\SOFTWARE\Classes\Updater.AmiUpd.1
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{74F475FA-6C75-43BD-AAB9-ECDA6184F600}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\IMBooster_RASAPI32
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\IMBooster_RASMANCS
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\InstTracker_RASAPI32
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\InstTracker_RASMANCS
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\utilJumpFlip_RASAPI32
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\utilJumpFlip_RASMANCS
Clé Supprimée : HKLM\SOFTWARE\MozillaPlugins\@staging.google.com/globalUpdate Update;version=10
Clé Supprimée : HKLM\SOFTWARE\MozillaPlugins\@staging.google.com/globalUpdate Update;version=4
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{3278F5CF-48F3-4253-A6BB-004CE84AF492}
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{577975B8-C40E-43E6-B0DE-4C6B44088B52}
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{58FDA6AF-67D8-4198-B7CD-94B17532C8D5}
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{C007DADD-132A-624C-088E-59EE6CF0711F}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{02A96331-0CA6-40E2-A87D-C224601985EB}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{3278F5CF-48F3-4253-A6BB-004CE84AF492}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{3B5702BA-7F4C-4D1A-B026-1E9A01D43978}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{5645E0E7-FC12-43BF-A6E4-F9751942B298}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{577975B8-C40E-43E6-B0DE-4C6B44088B52}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{5E89ACE9-E16B-499A-87B4-0DBF742404C1}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{69F256DF-BA98-45E9-86EA-FC3CFECF9D30}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{6E87FC94-9866-49B9-8E93-5736D6DE3DD7}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{7E49F793-B3CD-4BF7-8419-B34B8BD30E61}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{834469E3-CA2B-4F21-A5CA-4F6F4DBCDE87}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{8529FAA3-5BFD-43C1-AB35-B53C4B96C6E5}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{ADBC39BE-3D20-4333-8D99-E91EB1B62474}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{CFC47BB5-5FB5-4AD0-8427-6AA04334A3FC}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{E06CA7F5-BA34-4FF6-8D24-B1BDC594D91F}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{E0ADB535-D7B5-4D8B-B15D-578BDD20D76A}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{F6421EE5-A5BE-4D31-81D5-C16B7BF48E4C}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{FD8E81D0-F5FE-4CB1-9AEA-1E163D2BAB78}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{5645E0E7-FC12-43BF-A6E4-F9751942B298}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5645E0E7-FC12-43BF-A6E4-F9751942B298}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5E89ACE9-E16B-499A-87B4-0DBF742404C1}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}
Clé Supprimée : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
Clé Supprimée : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{756D1D40-E491-4E1D-9BC6-5B37CEDE646E}
Clé Supprimée : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{7F4EFF06-7032-458E-AE16-1C1D8255C28A}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{756D1D40-E491-4E1D-9BC6-5B37CEDE646E}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{7F4EFF06-7032-458E-AE16-1C1D8255C28A}
Clé Supprimée : HKCU\Software\1ClickDownload
Clé Supprimée : HKCU\Software\GlobalUpdate
Clé Supprimée : HKCU\Software\IM
Clé Supprimée : HKCU\Software\InstalledBrowserExtensions
Clé Supprimée : HKCU\Software\NoVooITSet
Clé Supprimée : HKCU\Software\Vonteera Safe ads
Clé Supprimée : HKCU\Software\AppDataLow\Software\Crossrider
Clé Supprimée : HKLM\SOFTWARE\GlobalUpdate
Clé Supprimée : HKLM\SOFTWARE\InstalledBrowserExtensions
***** [ Navigateurs ] *****
-\\ Internet Explorer v11.0.9600.17239
-\\ Mozilla Firefox v30.0 (fr)
[ Fichier : C:\Users\Baby\AppData\Roaming\Mozilla\Firefox\Profiles\6ctl33mf.default\prefs.js ]
Ligne Supprimée : user_pref("keyword.URL", "hxxp://go.speedbit.com/search.aspx?s=Unknown&q=");
[ Fichier : C:\Users\Medali\AppData\Roaming\Mozilla\Firefox\Profiles\yiji3bez.default\prefs.js ]
Ligne Supprimée : user_pref("browser.search.defaultenginename", "SpeedBit Search");
Ligne Supprimée : user_pref("browser.search.defaulturl", "hxxp://home.speedbit.com/search.aspx?aff=115&q=");
Ligne Supprimée : user_pref("browser.search.order.1", "SpeedBit Search");
Ligne Supprimée : user_pref("browser.search.selectedEngine", "SpeedBit Search");
Ligne Supprimée : user_pref("browser.startup.homepage", "hxxp://home.speedbit.com/?aff=115");
Ligne Supprimée : user_pref("browser.startup.homepage_override_url", "hxxp://home.speedbit.com/?aff=115");
Ligne Supprimée : user_pref("extensions.buenosearch.admin", false);
Ligne Supprimée : user_pref("extensions.buenosearch.aflt", "babsst");
Ligne Supprimée : user_pref("extensions.buenosearch.appId", "{37EB75F2-7392-4DBE-B5AD-147EC6D7BF5F}");
Ligne Supprimée : user_pref("extensions.buenosearch.autoRvrt", "false");
Ligne Supprimée : user_pref("extensions.buenosearch.dfltLng", "fr");
Ligne Supprimée : user_pref("extensions.buenosearch.excTlbr", false);
Ligne Supprimée : user_pref("extensions.buenosearch.ffxUnstlRst", true);
Ligne Supprimée : user_pref("extensions.buenosearch.id", "f66e501a000000000000582c80139263");
Ligne Supprimée : user_pref("extensions.buenosearch.instlDay", "16216");
Ligne Supprimée : user_pref("extensions.buenosearch.instlRef", "sst");
Ligne Supprimée : user_pref("extensions.buenosearch.newTab", false);
Ligne Supprimée : user_pref("extensions.buenosearch.prdct", "buenosearch");
Ligne Supprimée : user_pref("extensions.buenosearch.prtnrId", "buenosearch");
Ligne Supprimée : user_pref("extensions.buenosearch.rvrt", "false");
Ligne Supprimée : user_pref("extensions.buenosearch.smplGrp", "none");
Ligne Supprimée : user_pref("extensions.buenosearch.tb_url", "hxxp://www.buenosearch.com/?q={searchTerms}&babsrc=TB_ss&mntrId=F66E582C80139263&affID=128403&tsp=5259");
Ligne Supprimée : user_pref("extensions.buenosearch.tlbrId", "base");
Ligne Supprimée : user_pref("extensions.buenosearch.tlbrSrchUrl", "hxxp://www.buenosearch.com/?q={searchTerms}&babsrc=TB_ss&mntrId=F66E582C80139263&affID=128403&tsp=5259");
Ligne Supprimée : user_pref("extensions.buenosearch.vrsn", "1.8.28.7");
Ligne Supprimée : user_pref("extensions.buenosearch.vrsnTs", "1.8.28.72:51:33");
Ligne Supprimée : user_pref("extensions.buenosearch.vrsni", "1.8.28.7");
Ligne Supprimée : user_pref("extensions.crossrider.bic", "14719ad7f95acb616031d8448fe2b8fa");
Ligne Supprimée : user_pref("keyword.URL", "hxxp://home.speedbit.com/search.aspx?aff=115&q=");
[ Fichier : C:\Users\mimou\AppData\Roaming\Mozilla\Firefox\Profiles\1ol1xrft.default\prefs.js ]
-\\ Google Chrome v
[ Fichier : C:\Users\Medali\AppData\Local\Google\Chrome\User Data\Default\preferences ]
Supprimée [Search Provider] : hxxp://home.speedbit.com/search.aspx?aff=115&q={searchTerms}
Supprimée [Extension] : acfoobbgoakpihljnfedbcfaipcdlfhk
Supprimée [Extension] : nikpibnbobmbdbheedjfogjlikpgpnhp
*************************
AdwCleaner[R0].txt - [91757 octets] - [04/02/2014 02:23:05]
AdwCleaner[R1].txt - [7139 octets] - [16/05/2014 18:37:04]
AdwCleaner[R2].txt - [12513 octets] - [24/08/2014 22:08:41]
AdwCleaner[S0].txt - [91279 octets] - [04/02/2014 02:25:06]
AdwCleaner[S1].txt - [7258 octets] - [16/05/2014 18:48:49]
AdwCleaner[S2].txt - [12706 octets] - [24/08/2014 22:13:18]
########## EOF - C:\AdwCleaner\AdwCleaner[S2].txt - [12767 octets] ##########
Cependanr le bouton "accueil" de mon navigateur, bien qu'il affiche "https://www.google.fr/", me renvoie toujours sur un site de pub non sécurisé.
à+
Merci infiniment pour votre aide. J'ai suivi vos conseils et voici le texte du rapport :
# AdwCleaner v3.308 - Rapport créé le 24/08/2014 à 22:13:18
# Mis à jour le 20/08/2014 par Xplode
# Système d'exploitation : Windows 7 Starter Service Pack 1 (32 bits)
# Nom d'utilisateur : Medali - HAMLET
# Exécuté depuis : C:\Users\Medali\Desktop\adwcleaner_3.308.exe
# Option : Nettoyer
***** [ Services ] *****
[#] Service Supprimé : globalUpdate
[#] Service Supprimé : globalUpdatem
***** [ Fichiers / Dossiers ] *****
Dossier Supprimé : C:\ProgramData\NCH Software
Dossier Supprimé : C:\Program Files\globalUpdate
Dossier Supprimé : C:\Program Files\GoPhoto.it V9.0
Dossier Supprimé : C:\Program Files\NCH Software
Dossier Supprimé : C:\Program Files\PCDApp
Dossier Supprimé : C:\Users\Medali\AppData\Local\cool_mirage
Dossier Supprimé : C:\Users\Medali\AppData\Local\globalUpdate
Dossier Supprimé : C:\Users\Medali\AppData\Roaming\NCH Software
Dossier Supprimé : C:\Users\Medali\AppData\Local\Google\Chrome\User Data\Default\Extensions\nikpibnbobmbdbheedjfogjlikpgpnhp
Fichier Supprimé : C:\Windows\system32\installd.exe
Fichier Supprimé : C:\Users\Medali\AppData\Roaming\addonVont.zip
Fichier Supprimé : C:\Users\Medali\AppData\Roaming\ext.crx
Fichier Supprimé : C:\Users\Medali\AppData\Roaming\Mozilla\Firefox\Profiles\yiji3bez.default\invalidprefs.js
Fichier Supprimé : C:\Users\Medali\AppData\Roaming\Mozilla\Firefox\Profiles\yiji3bez.default\searchplugins\buenosearch.xml
Fichier Supprimé : C:\Users\Medali\AppData\Roaming\Mozilla\Firefox\Profiles\yiji3bez.default\searchplugins\speedbit.xml
Fichier Supprimé : C:\Users\Medali\AppData\Roaming\Mozilla\Firefox\Profiles\yiji3bez.default\searchplugins\VenteeRo.xml
Fichier Supprimé : C:\Users\Medali\AppData\Roaming\Mozilla\Firefox\Profiles\yiji3bez.default\user.js
***** [ Tâches planifiées ] *****
Tâche Supprimée : globalUpdateUpdateTaskMachineCore
Tâche Supprimée : globalUpdateUpdateTaskMachineUA
Tâche Supprimée : 7ab2b024-ff5b-4ba5-bc6e-92e59cfaaa5e-1
Tâche Supprimée : 7ab2b024-ff5b-4ba5-bc6e-92e59cfaaa5e-2
Tâche Supprimée : 7ab2b024-ff5b-4ba5-bc6e-92e59cfaaa5e-4
Tâche Supprimée : 7ab2b024-ff5b-4ba5-bc6e-92e59cfaaa5e-5
Tâche Supprimée : 7ab2b024-ff5b-4ba5-bc6e-92e59cfaaa5e-6
Tâche Supprimée : 7ab2b024-ff5b-4ba5-bc6e-92e59cfaaa5e-7
***** [ Raccourcis ] *****
***** [ Registre ] *****
Clé Supprimée : HKLM\SOFTWARE\Google\Chrome\Extensions\acfoobbgoakpihljnfedbcfaipcdlfhk
Clé Supprimée : HKCU\Software\Google\Chrome\Extensions\nikpibnbobmbdbheedjfogjlikpgpnhp
Clé Supprimée : HKLM\SOFTWARE\Classes\globalUpdate.OneClickCtrl.10
Clé Supprimée : HKLM\SOFTWARE\Classes\globalUpdate.OneClickProcessLauncherMachine
Clé Supprimée : HKLM\SOFTWARE\Classes\globalUpdate.OneClickProcessLauncherMachine.1.0
Clé Supprimée : HKLM\SOFTWARE\Classes\globalUpdate.Update3WebControl.4
Clé Supprimée : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoCreateAsync
Clé Supprimée : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoCreateAsync.1.0
Clé Supprimée : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreClass
Clé Supprimée : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreClass.1
Clé Supprimée : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreMachineClass
Clé Supprimée : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreMachineClass.1
Clé Supprimée : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CredentialDialogMachine
Clé Supprimée : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CredentialDialogMachine.1.0
Clé Supprimée : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassMachine
Clé Supprimée : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassMachine.1.0
Clé Supprimée : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassMachineFallback
Clé Supprimée : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassMachineFallback.1.0
Clé Supprimée : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassSvc
Clé Supprimée : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassSvc.1.0
Clé Supprimée : HKLM\SOFTWARE\Classes\globalUpdateUpdate.ProcessLauncher
Clé Supprimée : HKLM\SOFTWARE\Classes\globalUpdateUpdate.ProcessLauncher.1.0
Clé Supprimée : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3COMClassService
Clé Supprimée : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3COMClassService.1.0
Clé Supprimée : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebMachine
Clé Supprimée : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebMachine.1.0
Clé Supprimée : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebMachineFallback
Clé Supprimée : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebMachineFallback.1.0
Clé Supprimée : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebSvc
Clé Supprimée : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebSvc.1.0
Clé Supprimée : HKLM\SOFTWARE\Classes\Updater.AmiUpd
Clé Supprimée : HKLM\SOFTWARE\Classes\Updater.AmiUpd.1
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{74F475FA-6C75-43BD-AAB9-ECDA6184F600}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\IMBooster_RASAPI32
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\IMBooster_RASMANCS
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\InstTracker_RASAPI32
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\InstTracker_RASMANCS
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\utilJumpFlip_RASAPI32
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\utilJumpFlip_RASMANCS
Clé Supprimée : HKLM\SOFTWARE\MozillaPlugins\@staging.google.com/globalUpdate Update;version=10
Clé Supprimée : HKLM\SOFTWARE\MozillaPlugins\@staging.google.com/globalUpdate Update;version=4
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{3278F5CF-48F3-4253-A6BB-004CE84AF492}
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{577975B8-C40E-43E6-B0DE-4C6B44088B52}
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{58FDA6AF-67D8-4198-B7CD-94B17532C8D5}
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{C007DADD-132A-624C-088E-59EE6CF0711F}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{02A96331-0CA6-40E2-A87D-C224601985EB}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{3278F5CF-48F3-4253-A6BB-004CE84AF492}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{3B5702BA-7F4C-4D1A-B026-1E9A01D43978}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{5645E0E7-FC12-43BF-A6E4-F9751942B298}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{577975B8-C40E-43E6-B0DE-4C6B44088B52}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{5E89ACE9-E16B-499A-87B4-0DBF742404C1}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{69F256DF-BA98-45E9-86EA-FC3CFECF9D30}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{6E87FC94-9866-49B9-8E93-5736D6DE3DD7}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{7E49F793-B3CD-4BF7-8419-B34B8BD30E61}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{834469E3-CA2B-4F21-A5CA-4F6F4DBCDE87}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{8529FAA3-5BFD-43C1-AB35-B53C4B96C6E5}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{ADBC39BE-3D20-4333-8D99-E91EB1B62474}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{CFC47BB5-5FB5-4AD0-8427-6AA04334A3FC}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{E06CA7F5-BA34-4FF6-8D24-B1BDC594D91F}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{E0ADB535-D7B5-4D8B-B15D-578BDD20D76A}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{F6421EE5-A5BE-4D31-81D5-C16B7BF48E4C}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{FD8E81D0-F5FE-4CB1-9AEA-1E163D2BAB78}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{5645E0E7-FC12-43BF-A6E4-F9751942B298}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5645E0E7-FC12-43BF-A6E4-F9751942B298}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5E89ACE9-E16B-499A-87B4-0DBF742404C1}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}
Clé Supprimée : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
Clé Supprimée : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{756D1D40-E491-4E1D-9BC6-5B37CEDE646E}
Clé Supprimée : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{7F4EFF06-7032-458E-AE16-1C1D8255C28A}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{756D1D40-E491-4E1D-9BC6-5B37CEDE646E}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{7F4EFF06-7032-458E-AE16-1C1D8255C28A}
Clé Supprimée : HKCU\Software\1ClickDownload
Clé Supprimée : HKCU\Software\GlobalUpdate
Clé Supprimée : HKCU\Software\IM
Clé Supprimée : HKCU\Software\InstalledBrowserExtensions
Clé Supprimée : HKCU\Software\NoVooITSet
Clé Supprimée : HKCU\Software\Vonteera Safe ads
Clé Supprimée : HKCU\Software\AppDataLow\Software\Crossrider
Clé Supprimée : HKLM\SOFTWARE\GlobalUpdate
Clé Supprimée : HKLM\SOFTWARE\InstalledBrowserExtensions
***** [ Navigateurs ] *****
-\\ Internet Explorer v11.0.9600.17239
-\\ Mozilla Firefox v30.0 (fr)
[ Fichier : C:\Users\Baby\AppData\Roaming\Mozilla\Firefox\Profiles\6ctl33mf.default\prefs.js ]
Ligne Supprimée : user_pref("keyword.URL", "hxxp://go.speedbit.com/search.aspx?s=Unknown&q=");
[ Fichier : C:\Users\Medali\AppData\Roaming\Mozilla\Firefox\Profiles\yiji3bez.default\prefs.js ]
Ligne Supprimée : user_pref("browser.search.defaultenginename", "SpeedBit Search");
Ligne Supprimée : user_pref("browser.search.defaulturl", "hxxp://home.speedbit.com/search.aspx?aff=115&q=");
Ligne Supprimée : user_pref("browser.search.order.1", "SpeedBit Search");
Ligne Supprimée : user_pref("browser.search.selectedEngine", "SpeedBit Search");
Ligne Supprimée : user_pref("browser.startup.homepage", "hxxp://home.speedbit.com/?aff=115");
Ligne Supprimée : user_pref("browser.startup.homepage_override_url", "hxxp://home.speedbit.com/?aff=115");
Ligne Supprimée : user_pref("extensions.buenosearch.admin", false);
Ligne Supprimée : user_pref("extensions.buenosearch.aflt", "babsst");
Ligne Supprimée : user_pref("extensions.buenosearch.appId", "{37EB75F2-7392-4DBE-B5AD-147EC6D7BF5F}");
Ligne Supprimée : user_pref("extensions.buenosearch.autoRvrt", "false");
Ligne Supprimée : user_pref("extensions.buenosearch.dfltLng", "fr");
Ligne Supprimée : user_pref("extensions.buenosearch.excTlbr", false);
Ligne Supprimée : user_pref("extensions.buenosearch.ffxUnstlRst", true);
Ligne Supprimée : user_pref("extensions.buenosearch.id", "f66e501a000000000000582c80139263");
Ligne Supprimée : user_pref("extensions.buenosearch.instlDay", "16216");
Ligne Supprimée : user_pref("extensions.buenosearch.instlRef", "sst");
Ligne Supprimée : user_pref("extensions.buenosearch.newTab", false);
Ligne Supprimée : user_pref("extensions.buenosearch.prdct", "buenosearch");
Ligne Supprimée : user_pref("extensions.buenosearch.prtnrId", "buenosearch");
Ligne Supprimée : user_pref("extensions.buenosearch.rvrt", "false");
Ligne Supprimée : user_pref("extensions.buenosearch.smplGrp", "none");
Ligne Supprimée : user_pref("extensions.buenosearch.tb_url", "hxxp://www.buenosearch.com/?q={searchTerms}&babsrc=TB_ss&mntrId=F66E582C80139263&affID=128403&tsp=5259");
Ligne Supprimée : user_pref("extensions.buenosearch.tlbrId", "base");
Ligne Supprimée : user_pref("extensions.buenosearch.tlbrSrchUrl", "hxxp://www.buenosearch.com/?q={searchTerms}&babsrc=TB_ss&mntrId=F66E582C80139263&affID=128403&tsp=5259");
Ligne Supprimée : user_pref("extensions.buenosearch.vrsn", "1.8.28.7");
Ligne Supprimée : user_pref("extensions.buenosearch.vrsnTs", "1.8.28.72:51:33");
Ligne Supprimée : user_pref("extensions.buenosearch.vrsni", "1.8.28.7");
Ligne Supprimée : user_pref("extensions.crossrider.bic", "14719ad7f95acb616031d8448fe2b8fa");
Ligne Supprimée : user_pref("keyword.URL", "hxxp://home.speedbit.com/search.aspx?aff=115&q=");
[ Fichier : C:\Users\mimou\AppData\Roaming\Mozilla\Firefox\Profiles\1ol1xrft.default\prefs.js ]
-\\ Google Chrome v
[ Fichier : C:\Users\Medali\AppData\Local\Google\Chrome\User Data\Default\preferences ]
Supprimée [Search Provider] : hxxp://home.speedbit.com/search.aspx?aff=115&q={searchTerms}
Supprimée [Extension] : acfoobbgoakpihljnfedbcfaipcdlfhk
Supprimée [Extension] : nikpibnbobmbdbheedjfogjlikpgpnhp
*************************
AdwCleaner[R0].txt - [91757 octets] - [04/02/2014 02:23:05]
AdwCleaner[R1].txt - [7139 octets] - [16/05/2014 18:37:04]
AdwCleaner[R2].txt - [12513 octets] - [24/08/2014 22:08:41]
AdwCleaner[S0].txt - [91279 octets] - [04/02/2014 02:25:06]
AdwCleaner[S1].txt - [7258 octets] - [16/05/2014 18:48:49]
AdwCleaner[S2].txt - [12706 octets] - [24/08/2014 22:13:18]
########## EOF - C:\AdwCleaner\AdwCleaner[S2].txt - [12767 octets] ##########
Cependanr le bouton "accueil" de mon navigateur, bien qu'il affiche "https://www.google.fr/", me renvoie toujours sur un site de pub non sécurisé.
à+
Utilisateur anonyme
25 août 2014 à 07:44
25 août 2014 à 07:44
Bonjour
Télécharge Malwaresbytes anti malware ici
https://www.commentcamarche.net/telecharger/securite/14361-malwarebytes-anti-malware/
--->> Installe le (choisis bien français ); ne modifie pas les paramètres d'installe
--->> Décoche la case Activer l'essai gratuit de Malwarebytes Anti-Malware Premium à la fin de l'installation
--->> /!\ Utilisateurs de Vista/7/8/8.1 : faire un clic droit sur le raccourci de MalwareBytes' Anti-Malware et choisir Exécuter en tant qu'administrateur
--->> Clique sur Mettre à jour dans le Tableau de bord afin de mettre à jour la base de données.
--->> Dans l'onglet Examen, sélectionnez Examen Menaces puis clique sur Examiner maintenant.
--->> Une fois le scan terminé, clique sur Tout mettre en quarantaine puis sur Appliquez les actions
--->> (Si un message demande de redémarrer le PC pour terminer la suppression, accepte)
--->> Le rapport est disponible dans Historique > Journaux de l'application. (Choisis bien le dernier en date
Tu sélectionnes le fichier et tu demandes l'affichage
En bas à gauche un bouton exporter ; tu cliques dessus et tu choisis fichier texte et tu choisis ensuite ou l'enregistrer pour ensuite pouvoir le poster dans ta prochaine réponse
Merci
@+
Télécharge Malwaresbytes anti malware ici
https://www.commentcamarche.net/telecharger/securite/14361-malwarebytes-anti-malware/
--->> Installe le (choisis bien français ); ne modifie pas les paramètres d'installe
--->> Décoche la case Activer l'essai gratuit de Malwarebytes Anti-Malware Premium à la fin de l'installation
--->> /!\ Utilisateurs de Vista/7/8/8.1 : faire un clic droit sur le raccourci de MalwareBytes' Anti-Malware et choisir Exécuter en tant qu'administrateur
--->> Clique sur Mettre à jour dans le Tableau de bord afin de mettre à jour la base de données.
--->> Dans l'onglet Examen, sélectionnez Examen Menaces puis clique sur Examiner maintenant.
--->> Une fois le scan terminé, clique sur Tout mettre en quarantaine puis sur Appliquez les actions
--->> (Si un message demande de redémarrer le PC pour terminer la suppression, accepte)
--->> Le rapport est disponible dans Historique > Journaux de l'application. (Choisis bien le dernier en date
Tu sélectionnes le fichier et tu demandes l'affichage
En bas à gauche un bouton exporter ; tu cliques dessus et tu choisis fichier texte et tu choisis ensuite ou l'enregistrer pour ensuite pouvoir le poster dans ta prochaine réponse
Merci
@+
Vous n’avez pas trouvé la réponse que vous recherchez ?
Posez votre question
Archimedali
Messages postés
4
Date d'inscription
jeudi 27 septembre 2012
Statut
Membre
Dernière intervention
31 août 2014
26 août 2014 à 04:31
26 août 2014 à 04:31
Bonsoir,
Merci pour ton aide. J'ai suivi tes conseils, utilisé malwarebytes et voici le rapport :
<?xml version="1.0" encoding="UTF-8" ?>
<mbam-log>
<header>
<date>2014/08/24 23:12:55 +0100</date>
<logfile>mbam-log-2014-08-24 (23-11-57).xml</logfile>
<isadmin>yes</isadmin>
</header>
<engine>
<version>2.00.2.1012</version>
<malware-database>v2014.08.24.06</malware-database>
<rootkit-database>v2014.08.21.01</rootkit-database>
<license>trial</license>
<file-protection>enabled</file-protection>
<web-protection>enabled</web-protection>
<self-protection>disabled</self-protection>
</engine>
<system>
<osversion>Windows 7 Service Pack 1</osversion>
<arch>x86</arch>
<username>Medali</username>
<filesys>NTFS</filesys>
</system>
<summary>
<type>threat</type>
<result>completed</result>
<objects>378060</objects>
<time>1645</time>
<processes>0</processes>
<modules>0</modules>
<keys>43</keys>
<values>12</values>
<datas>1</datas>
<folders>46</folders>
<files>258</files>
<sectors>0</sectors>
</summary>
<options>
<memory>enabled</memory>
<startup>enabled</startup>
<filesystem>enabled</filesystem>
<archives>enabled</archives>
<rootkits>disabled</rootkits>
<deeprootkit>disabled</deeprootkit>
<heuristics>enabled</heuristics>
<pup>enabled</pup>
<pum>enabled</pum>
</options>
<items>
<key><path>HKU\S-1-5-21-878722-4064136597-3585818917-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{05EEB91A-AEF7-4F8A-978F-FB83E7B03F8E}</path><vendor>PUP.Optional.uTorrentBar.A</vendor><action>none</action><hash>c99db416df9cac8a2ec68fe551b1e31d</hash></key>
<key><path>HKU\S-1-5-21-878722-4064136597-3585818917-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{7F4EFF06-7032-458e-AE16-1C1D8255C28A}</path><vendor>PUP.Optional.Tuvaro</vendor><action>success</action><hash>b2b44a802d4e999d9567c9a72ed42ed2</hash></key>
<key><path>HKU\S-1-5-21-878722-4064136597-3585818917-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{7F4EFF06-7032-458E-AE16-1C1D8255C28A}</path><vendor>PUP.Optional.Tuvaro</vendor><action>success</action><hash>b2b44a802d4e999d9567c9a72ed42ed2</hash></key>
<key><path>HKU\S-1-5-21-878722-4064136597-3585818917-1003-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{7F4EFF06-7032-458E-AE16-1C1D8255C28A}</path><vendor>PUP.Optional.Tuvaro</vendor><action>success</action><hash>b2b44a802d4e999d9567c9a72ed42ed2</hash></key>
<key><path>HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{7F4EFF06-7032-458E-AE16-1C1D8255C28A}</path><vendor>PUP.Optional.Tuvaro</vendor><action>success</action><hash>b2b44a802d4e999d9567c9a72ed42ed2</hash></key>
<key><path>HKU\S-1-5-21-878722-4064136597-3585818917-1003-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{05EEB91A-AEF7-4F8A-978F-FB83E7B03F8E}</path><vendor>PUP.Optional.uTorrentBar.A</vendor><action>success</action><hash>c99db416df9cac8a2ec68fe551b1e31d</hash></key>
<key><path>HKU\S-1-5-21-878722-4064136597-3585818917-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{05EEB91A-AEF7-4F8A-978F-FB83E7B03F8E}</path><vendor>PUP.Optional.uTorrentBar.A</vendor><action>success</action><hash>c99db416df9cac8a2ec68fe551b1e31d</hash></key>
<key><path>HKU\S-1-5-21-878722-4064136597-3585818917-1003-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{05EEB91A-AEF7-4F8A-978F-FB83E7B03F8E}</path><vendor>PUP.Optional.uTorrentBar.A</vendor><action>success</action><hash>c99db416df9cac8a2ec68fe551b1e31d</hash></key>
<key><path>HKU\S-1-5-21-878722-4064136597-3585818917-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{99079A25-328F-4BD4-BE04-00955ACAA0A7}</path><vendor>PUP.Optional.SearchQu</vendor><action>success</action><hash>4f178644c6b5d4622e884335837fcb35</hash></key>
<key><path>HKU\S-1-5-21-878722-4064136597-3585818917-1003-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{99079A25-328F-4BD4-BE04-00955ACAA0A7}</path><vendor>PUP.Optional.SearchQu</vendor><action>success</action><hash>4f178644c6b5d4622e884335837fcb35</hash></key>
<key><path>HKU\S-1-5-21-878722-4064136597-3585818917-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{99079A25-328F-4BD4-BE04-00955ACAA0A7}</path><vendor>PUP.Optional.SearchQu</vendor><action>success</action><hash>4f178644c6b5d4622e884335837fcb35</hash></key>
<key><path>HKU\S-1-5-21-878722-4064136597-3585818917-1003-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{99079A25-328F-4BD4-BE04-00955ACAA0A7}</path><vendor>PUP.Optional.SearchQu</vendor><action>success</action><hash>4f178644c6b5d4622e884335837fcb35</hash></key>
<key><path>HKU\S-1-5-21-878722-4064136597-3585818917-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{9D717F81-9148-4F12-8568-69135F087DB0}</path><vendor>PUP.Optional.Bandoo.A</vendor><action>success</action><hash>c3a3626891ea1521ec8c9c0f62a0bc44</hash></key>
<key><path>HKU\S-1-5-21-878722-4064136597-3585818917-1003-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{9D717F81-9148-4F12-8568-69135F087DB0}</path><vendor>PUP.Optional.Bandoo.A</vendor><action>success</action><hash>c3a3626891ea1521ec8c9c0f62a0bc44</hash></key>
<key><path>HKU\S-1-5-21-878722-4064136597-3585818917-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{9D717F81-9148-4F12-8568-69135F087DB0}</path><vendor>PUP.Optional.Bandoo.A</vendor><action>success</action><hash>c3a3626891ea1521ec8c9c0f62a0bc44</hash></key>
<key><path>HKU\S-1-5-21-878722-4064136597-3585818917-1003-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{9D717F81-9148-4F12-8568-69135F087DB0}</path><vendor>PUP.Optional.Bandoo.A</vendor><action>success</action><hash>c3a3626891ea1521ec8c9c0f62a0bc44</hash></key>
<key><path>HKU\S-1-5-21-878722-4064136597-3585818917-1003-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{82E1477C-B154-48D3-9891-33D83C26BCD3}</path><vendor>PUP.Optional.Delta.A</vendor><action>success</action><hash>095dae1ca2d979bd63f0dcce8a78ab55</hash></key>
<key><path>HKU\S-1-5-21-878722-4064136597-3585818917-1003-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{82E1477C-B154-48D3-9891-33D83C26BCD3}</path><vendor>PUP.Optional.Delta.A</vendor><action>success</action><hash>095dae1ca2d979bd63f0dcce8a78ab55</hash></key>
<key><path>HKU\S-1-5-21-878722-4064136597-3585818917-1003-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{C1AF5FA5-852C-4C90-812E-A7F75E011D87}</path><vendor>PUP.Optional.Delta.A</vendor><action>success</action><hash>333309c19be082b45ff344660df5d32d</hash></key>
<key><path>HKU\S-1-5-21-878722-4064136597-3585818917-1003-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{C1AF5FA5-852C-4C90-812E-A7F75E011D87}</path><vendor>PUP.Optional.Delta.A</vendor><action>success</action><hash>333309c19be082b45ff344660df5d32d</hash></key>
<key><path>HKU\S-1-5-21-878722-4064136597-3585818917-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{573BF47C-2566-449D-BA1B-417D5D3FB9FD}</path><vendor>PUP.Optional.ZGameTB.A</vendor><action>success</action><hash>f76f4b7f7a01a3935c933d340101e818</hash></key>
<key><path>HKU\S-1-5-21-878722-4064136597-3585818917-1003-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{573BF47C-2566-449D-BA1B-417D5D3FB9FD}</path><vendor>PUP.Optional.ZGameTB.A</vendor><action>success</action><hash>f76f4b7f7a01a3935c933d340101e818</hash></key>
<key><path>HKLM\SOFTWARE\GoPhoto.it V9.0</path><vendor>PUP.Optional.GoPhoto.A</vendor><action>success</action><hash>1254eae0fb80d16518f67889679c6799</hash></key>
<key><path>HKLM\SOFTWARE\MediaPlayerV1alpha722</path><vendor>PUP.Optional.MediaPlayerAlpha.A</vendor><action>success</action><hash>d78f5c6ecdae0a2cbc83eb29b84b60a0</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\GOOGLE\CHROME\EXTENSIONS\dednnpigldgdbpgcdpfppmlcnnbjciel</path><vendor>PUP.Optional.Generalcrawler.A</vendor><action>success</action><hash>90d676545e1dd85ea62093bad72dc63a</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\GOOGLE\CHROME\EXTENSIONS\dlnembnfbcpjnepmfjmngjenhhajpdfd</path><vendor>PUP.Optional.Incredibar.A</vendor><action>success</action><hash>b2b4e4e6d0ab96a0296d897b19ea1ce4</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\GOOGLE\CHROME\EXTENSIONS\lpmkgpnbiojfaoklbkpfneikocaobfai</path><vendor>PUP.Optional.MediaFinder.A</vendor><action>success</action><hash>2e386b5f3348072fcef93e0f9f6535cb</hash></key>
<key><path>HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\1ClickMovie-Download V9.0</path><vendor>PUP.Optional.1ClickMovieDownload.A</vendor><action>success</action><hash>8adc3298354672c4ce6fd23e44bfde22</hash></key>
<key><path>HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\GoPhoto.it V9.0</path><vendor>PUP.Optional.GoPhoto.A</vendor><action>success</action><hash>4224e9e12e4d79bd32de679a7d868f71</hash></key>
<key><path>HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\HD-V1.8</path><vendor>PUP.Optional.PlusHD.A</vendor><action>success</action><hash>8ed8d1f949321d190eb07582758d13ed</hash></key>
<key><path>HKU\S-1-5-21-878722-4064136597-3585818917-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\GoPhoto.it V9.0</path><vendor>PUP.Optional.GoPhoto.A</vendor><action>success</action><hash>491d2b9f58233cfa28e8ee1362a134cc</hash></key>
<key><path>HKU\S-1-5-21-878722-4064136597-3585818917-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\DataMngr</path><vendor>PUP.Optional.DataMngr.A</vendor><action>success</action><hash>f57119b1057673c330e7da5308fc946c</hash></key>
<key><path>HKU\S-1-5-21-878722-4064136597-3585818917-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\Fun Web Products</path><vendor>PUP.Optional.FunWebProducts.A</vendor><action>success</action><hash>d88e6c5ebebd94a274e828d432d01de3</hash></key>
<key><path>HKU\S-1-5-21-878722-4064136597-3585818917-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\FunWebProducts</path><vendor>PUP.Optional.FunWebProducts.A</vendor><action>success</action><hash>d98d09c18cefc76f5409e01cc33fc53b</hash></key>
<key><path>HKU\S-1-5-21-878722-4064136597-3585818917-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\PriceGong</path><vendor>PUP.Optional.PriceGong.A</vendor><action>success</action><hash>7bebbd0df28983b3076458b926dde818</hash></key>
<key><path>HKU\S-1-5-21-878722-4064136597-3585818917-1003-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\DataMngr</path><vendor>PUP.Optional.DataMngr.A</vendor><action>success</action><hash>46202f9b760582b4ee29ad80699bb64a</hash></key>
<key><path>HKU\S-1-5-21-878722-4064136597-3585818917-1003-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\Iminent</path><vendor>PUP.Optional.Iminent.A</vendor><action>success</action><hash>83e302c8d2a92e08d5169186c043d42c</hash></key>
<key><path>HKU\S-1-5-21-878722-4064136597-3585818917-1003-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\Crossrider</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>5b0b31990c6fe551dfacc37eaf55a55b</hash></key>
<key><path>HKU\S-1-5-21-878722-4064136597-3585818917-1003-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\Fun Web Products</path><vendor>PUP.Optional.FunWebProducts.A</vendor><action>success</action><hash>c1a53496e6957cbad08cfb01679b07f9</hash></key>
<key><path>HKU\S-1-5-21-878722-4064136597-3585818917-1003-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\FunWebProducts</path><vendor>PUP.Optional.FunWebProducts.A</vendor><action>success</action><hash>99cd84463744ca6c99c4d7251ce6ed13</hash></key>
<key><path>HKU\S-1-5-21-878722-4064136597-3585818917-1003-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\HD-V1.8</path><vendor>PUP.Optional.PlusHD.A</vendor><action>success</action><hash>095dd7f35a211b1b1ca2d522e0227d83</hash></key>
<key><path>HKU\S-1-5-21-878722-4064136597-3585818917-1003-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\PriceGong</path><vendor>PUP.Optional.PriceGong.A</vendor><action>success</action><hash>b9ad22a89cdfaf874a21db3649ba09f7</hash></key>
<key><path>HKU\S-1-5-21-878722-4064136597-3585818917-1003-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\BPROTECTSETTINGS</path><vendor>PUP.Optional.BProtector.A</vendor><action>success</action><hash>4c1a4387c9b2dd5971f746ea4aba9f61</hash></key>
<value><path>HKU\S-1-5-21-878722-4064136597-3585818917-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\TOOLBAR\WEBBROWSER\{977AE9CC-AF83-45E8-9E03-E2798216E2D5}</path><valuename></valuename><vendor>PUP.Optional.Iminent.A</vendor><action>success</action><valuedata></valuedata><hash>cf97606a9dde37ff6d543278cb37ea16</hash></value>
<value><path>HKU\S-1-5-21-878722-4064136597-3585818917-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\TOOLBAR\WEBBROWSER</path><valuename>{977AE9CC-AF83-45E8-9E03-E2798216E2D5}</valuename><vendor>PUP.Optional.Iminent.A</vendor><action>success</action><valuedata>Ìéz--f¯èEzây'âÕ</valuedata><hash>cf97606a9dde37ff6d543278cb37ea16</hash></value>
<value><path>HKU\S-1-5-21-878722-4064136597-3585818917-1003-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\TOOLBAR\WEBBROWSER</path><valuename>{977AE9CC-AF83-45E8-9E03-E2798216E2D5}</valuename><vendor>PUP.Optional.Iminent.A</vendor><action>success</action><valuedata>Ìéz--f¯èEzây'âÕ</valuedata><hash>cf97606a9dde37ff6d543278cb37ea16</hash></value>
<value><path>HKU\S-1-5-21-878722-4064136597-3585818917-1003-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\TOOLBAR\WEBBROWSER\{977AE9CC-AF83-45E8-9E03-E2798216E2D5}</path><valuename></valuename><vendor>PUP.Optional.Iminent.A</vendor><action>success</action><valuedata></valuedata><hash>6303ffcb3348f541724f00aa847ef50b</hash></value>
<value><path>HKLM\SOFTWARE\WOW6432NODE\MOZILLA\FIREFOX\EXTENSIONS\{336D0C35-8A85-403a-B9D2-65C292C39087}</path><valuename></valuename><vendor>PUP.Optional.StartPage.A</vendor><action>success</action><valuedata></valuedata><hash>0066c802413a5bdb4e368fe23bc7e21e</hash></value>
<value><path>HKLM\SOFTWARE\WOW6432NODE\MOZILLA\FIREFOX\EXTENSIONS</path><valuename>{336D0C35-8A85-403A-B9D2-65C292C39087}</valuename><vendor>PUP.Optional.StartPage.A</vendor><action>success</action><valuedata>C:\Program Files\Web Assistant\Firefox</valuedata><hash>0066c802413a5bdb4e368fe23bc7e21e</hash></value>
<value><path>HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHURI</path><valuename>(Default)</valuename><vendor>PUP.Optional.CertifiedToolBar.A</vendor><action>success</action><valuedata>http://search.certified-toolbar.com?si=41460&bs=true&tid=592&q=%s</valuedata><hash>71f5f5d5ec8feb4b233e21d4ab5701ff</hash></value>
<value><path>HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\INTERNET SETTINGS\5.0\USER AGENT\POST PLATFORM</path><valuename>ShopperReports 3.2.7.0</valuename><vendor>Adware.HotBar</vendor><action>success</action><valuedata></valuedata><hash>3e286f5b5a212a0c70c5138acf34c53b</hash></value>
<value><path>HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\INTERNET SETTINGS\5.0\USER AGENT\POST PLATFORM</path><valuename>SRS_IT_E8790977B1765C5A36AE96</valuename><vendor>Malware.Trace</vendor><action>success</action><valuedata></valuedata><hash>4f17d5f5324913231f181d803cc74eb2</hash></value>
<value><path>HKLM\SOFTWARE\MOZILLA\FIREFOX\EXTENSIONS</path><valuename>ext@WebexpEnhancedV1alpha346.net</valuename><vendor>PUP.Optional.WebExpEnhanced.A</vendor><action>success</action><valuedata>C:\Program Files\WebexpEnhancedV1\WebexpEnhancedV1alpha346\ff</valuedata><hash>bfa703c74833e65039ad7d962ad9e719</hash></value>
<value><path>HKLM\SOFTWARE\MOZILLA\FIREFOX\EXTENSIONS</path><valuename>ext@MediaPlayerV1alpha722.net</valuename><vendor>PUP.Optional.MediaPlayerAlpha.A</vendor><action>success</action><valuedata>C:\Program Files\MediaPlayerV1\MediaPlayerV1alpha722\ff</valuedata><hash>b2b4d4f65328e94d62de53c19a69cb35</hash></value>
<value><path>HKU\S-1-5-21-878722-4064136597-3585818917-1003-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES</path><valuename>bProtectorDefaultScope</valuename><vendor>PUP.BProtector</vendor><action>success</action><valuedata>{7F4EFF06-7032-458e-AE16-1C1D8255C28A}</valuedata><hash>93d37951552620168099fe2f42c220e0</hash></value>
<data><path>HKU\S-1-5-21-878722-4064136597-3585818917-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHURI</path><valuename>(Default)</valuename><vendor>PUP.Optional.SearchCertifiedTB.A</vendor><action>replaced</action><valuedata>http://search.certified-toolbar.com?si=41460&bs=true&tid=592&q=%s</...
<folder><path>C:\Program Files\Common Files\Config</path><vendor>PUP.Optional.OffersWizard.A</vendor><action>success</action><hash>7ee83397bdbe72c4844c8669669ce818</hash></folder>
<folder><path>C:\Program Files\EasySearch</path><vendor>Adware.SuperSearch</vendor><action>success</action><hash>5511804aafcc2c0af953d0e2936f52ae</hash></folder>
<folder><path>C:\Program Files\EasySearch\FFExt</path><vendor>Adware.SuperSearch</vendor><action>success</action><hash>5511804aafcc2c0af953d0e2936f52ae</hash></folder>
<folder><path>C:\Program Files\EasySearch\FFExt\chrome</path><vendor>Adware.SuperSearch</vendor><action>success</action><hash>5511804aafcc2c0af953d0e2936f52ae</hash></folder>
<folder><path>C:\Program Files\EasySearch\FFExt\chrome\content</path><vendor>Adware.SuperSearch</vendor><action>success</action><hash>5511804aafcc2c0af953d0e2936f52ae</hash></folder>
<folder><path>C:\Windows\System32\config\systemprofile\AppData\Local\Google\Chrome\User Data\Default\Extensions\pmlghpafmmnmmkjdhacccolfgnkiboco</path><vendor>PUP.Optional.1ClickDownLoader.A</vendor><action>success</action><hash>4620c50592e972c467eb269d37cbb947</hash></folder>
<folder><path>C:\Windows\System32\config\systemprofile\AppData\Local\Google\Chrome\User Data\Default\Extensions\pmlghpafmmnmmkjdhacccolfgnkiboco\1.1_0</path><vendor>PUP.Optional.1ClickDownLoader.A</vendor><action>success</action><hash>4620c50592e972c467eb269d37cbb947</hash></folder>
<folder><path>C:\Windows\System32\config\systemprofile\AppData\Local\Google\Chrome\User Data\Default\Extensions\pmlghpafmmnmmkjdhacccolfgnkiboco\1.1_0\html</path><vendor>PUP.Optional.1ClickDownLoader.A</vendor><action>success</action><hash>4620c50592e972c467eb269d37cbb947</hash></folder>
<folder><path>C:\Windows\System32\config\systemprofile\AppData\Local\Google\Chrome\User Data\Default\Extensions\pmlghpafmmnmmkjdhacccolfgnkiboco\1.1_0\images</path><vendor>PUP.Optional.1ClickDownLoader.A</vendor><action>success</action><hash>4620c50592e972c467eb269d37cbb947</hash></folder>
<folder><path>C:\Windows\System32\config\systemprofile\AppData\Local\Google\Chrome\User Data\Default\Extensions\pmlghpafmmnmmkjdhacccolfgnkiboco\1.1_0\js</path><vendor>PUP.Optional.1ClickDownLoader.A</vendor><action>success</action><hash>4620c50592e972c467eb269d37cbb947</hash></folder>
<folder><path>C:\Users\Medali\AppData\Roaming\Mozilla\Firefox\Profiles\yiji3bez.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>92d4b416a2d92a0c79b7b212e1214cb4</hash></folder>
<folder><path>C:\Users\Medali\AppData\Roaming\Mozilla\Firefox\Profiles\yiji3bez.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\chrome</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>92d4b416a2d92a0c79b7b212e1214cb4</hash></folder>
<folder><path>C:\Users\Medali\AppData\Roaming\Mozilla\Firefox\Profiles\yiji3bez.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\chrome\content</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>92d4b416a2d92a0c79b7b212e1214cb4</hash></folder>
<folder><path>C:\Users\Medali\AppData\Roaming\Mozilla\Firefox\Profiles\yiji3bez.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\chrome\content\api</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>92d4b416a2d92a0c79b7b212e1214cb4</hash></folder>
<folder><path>C:\Users\Medali\AppData\Roaming\Mozilla\Firefox\Profiles\yiji3bez.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\chrome\content\core</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>92d4b416a2d92a0c79b7b212e1214cb4</hash></folder>
<folder><path>C:\Users\Medali\AppData\Roaming\Mozilla\Firefox\Profiles\yiji3bez.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\defaults</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>92d4b416a2d92a0c79b7b212e1214cb4</hash></folder>
<folder><path>C:\Users\Medali\AppData\Roaming\Mozilla\Firefox\Profiles\yiji3bez.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\defaults\preferences</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>92d4b416a2d92a0c79b7b212e1214cb4</hash></folder>
<folder><path>C:\Users\Medali\AppData\Roaming\Mozilla\Firefox\Profiles\yiji3bez.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\extensionData</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>92d4b416a2d92a0c79b7b212e1214cb4</hash></folder>
<folder><path>C:\Users\Medali\AppData\Roaming\Mozilla\Firefox\Profiles\yiji3bez.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\extensionData\plugins</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>92d4b416a2d92a0c79b7b212e1214cb4</hash></folder>
<folder><path>C:\Users\Medali\AppData\Roaming\Mozilla\Firefox\Profiles\yiji3bez.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\extensionData\userCode</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>92d4b416a2d92a0c79b7b212e1214cb4</hash></folder>
<folder><path>C:\Users\Medali\AppData\Roaming\Mozilla\Firefox\Profiles\yiji3bez.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\locale</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>92d4b416a2d92a0c79b7b212e1214cb4</hash></folder>
<folder><path>C:\Users\Medali\AppData\Roaming\Mozilla\Firefox\Profiles\yiji3bez.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\locale\en-US</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>92d4b416a2d92a0c79b7b212e1214cb4</hash></folder>
<folder><path>C:\Users\Medali\AppData\Roaming\Mozilla\Firefox\Profiles\yiji3bez.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\skin</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>92d4b416a2d92a0c79b7b212e1214cb4</hash></folder>
<folder><path>C:\Users\Medali\AppData\Roaming\Mozilla\Firefox\Profiles\yiji3bez.default\extensions\2ea36bf1-0877-4aaa-882c-ff78f7d9d95c@dfb1672d-116a-4eb4-8be0-44786bd1d3dd.com</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>c6a0d5f53e3dde58d25e943052b03cc4</hash></folder>
<folder><path>C:\Users\Medali\AppData\Roaming\Mozilla\Firefox\Profiles\yiji3bez.default\extensions\2ea36bf1-0877-4aaa-882c-ff78f7d9d95c@dfb1672d-116a-4eb4-8be0-44786bd1d3dd.com\chrome</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>c6a0d5f53e3dde58d25e943052b03cc4</hash></folder>
<folder><path>C:\Users\Medali\AppData\Roaming\Mozilla\Firefox\Profiles\yiji3bez.default\extensions\2ea36bf1-0877-4aaa-882c-ff78f7d9d95c@dfb1672d-116a-4eb4-8be0-44786bd1d3dd.com\chrome\content</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>c6a0d5f53e3dde58d25e943052b03cc4</hash></folder>
<folder><path>C:\Users\Medali\AppData\Roaming\Mozilla\Firefox\Profiles\yiji3bez.default\extensions\2ea36bf1-0877-4aaa-882c-ff78f7d9d95c@dfb1672d-116a-4eb4-8be0-44786bd1d3dd.com\chrome\content\api</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>c6a0d5f53e3dde58d25e943052b03cc4</hash></folder>
<folder><path>C:\Users\Medali\AppData\Roaming\Mozilla\Firefox\Profiles\yiji3bez.default\extensions\2ea36bf1-0877-4aaa-882c-ff78f7d9d95c@dfb1672d-116a-4eb4-8be0-44786bd1d3dd.com\chrome\content\core</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>c6a0d5f53e3dde58d25e943052b03cc4</hash></folder>
<folder><path>C:\Users\Medali\AppData\Roaming\Mozilla\Firefox\Profiles\yiji3bez.default\extensions\2ea36bf1-0877-4aaa-882c-ff78f7d9d95c@dfb1672d-116a-4eb4-8be0-44786bd1d3dd.com\defaults</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>c6a0d5f53e3dde58d25e943052b03cc4</hash></folder>
<folder><path>C:\Users\Medali\AppData\Roaming\Mozilla\Firefox\Profiles\yiji3bez.default\extensions\2ea36bf1-0877-4aaa-882c-ff78f7d9d95c@dfb1672d-116a-4eb4-8be0-44786bd1d3dd.com\defaults\preferences</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>c6a0d5f53e3dde58d25e943052b03cc4</hash></folder>
<folder><path>C:\Users\Medali\AppData\Roaming\Mozilla\Firefox\Profiles\yiji3bez.default\extensions\2ea36bf1-0877-4aaa-882c-ff78f7d9d95c@dfb1672d-116a-4eb4-8be0-44786bd1d3dd.com\extensionData</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>c6a0d5f53e3dde58d25e943052b03cc4</hash></folder>
<folder><path>C:\Users\Medali\AppData\Roaming\Mozilla\Firefox\Profiles\yiji3bez.default\extensions\2ea36bf1-0877-4aaa-882c-ff78f7d9d95c@dfb1672d-116a-4eb4-8be0-44786bd1d3dd.com\extensionData\plugins</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>c6a0d5f53e3dde58d25e943052b03cc4</hash></folder>
<folder><path>C:\Users\Medali\AppData\Roaming\Mozilla\Firefox\Profiles\yiji3bez.default\extensions\2ea36bf1-0877-4aaa-882c-ff78f7d9d95c@dfb1672d-116a-4eb4-8be0-44786bd1d3dd.com\extensionData\userCode</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>c6a0d5f53e3dde58d25e943052b03cc4</hash></folder>
<folder><path>C:\Users\Medali\AppData\Roaming\Mozilla\Firefox\Profiles\yiji3bez.default\extensions\2ea36bf1-0877-4aaa-882c-ff78f7d9d95c@dfb1672d-116a-4eb4-8be0-44786bd1d3dd.com\locale</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>c6a0d5f53e3dde58d25e943052b03cc4</hash></folder>
<folder><path>C:\Users\Medali\AppData\Roaming\Mozilla\Firefox\Profiles\yiji3bez.default\extensions\2ea36bf1-0877-4aaa-882c-ff78f7d9d95c@dfb1672d-116a-4eb4-8be0-44786bd1d3dd.com\locale\en-US</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>c6a0d5f53e3dde58d25e943052b03cc4</hash></folder>
<folder><path>C:\Users\Medali\AppData\Roaming\Mozilla\Firefox\Profiles\yiji3bez.default\extensions\2ea36bf1-0877-4aaa-882c-ff78f7d9d95c@dfb1672d-116a-4eb4-8be0-44786bd1d3dd.com\skin</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>c6a0d5f53e3dde58d25e943052b03cc4</hash></folder>
<folder><path>C:\Users\Medali\AppData\Local\Google\Chrome\User Data\Default\Extensions\jfhbklndhffnahdploecdffbedhgjnce</path><vendor>PUP.Optional.Vonteera.A</vendor><action>success</action><hash>2a3c5f6b3c3f3600a8e14d8546bcdd23</hash></folder>
<folder><path>C:\Users\Medali\AppData\Local\Google\Chrome\User Data\Default\Extensions\jfhbklndhffnahdploecdffbedhgjnce\1.5.1_0</path><vendor>PUP.Optional.Vonteera.A</vendor><action>success</action><hash>2a3c5f6b3c3f3600a8e14d8546bcdd23</hash></folder>
<folder><path>C:\Users\Medali\AppData\Local\Google\Chrome\User Data\Default\Extensions\jfhbklndhffnahdploecdffbedhgjnce\1.5.1_0\_locales</path><vendor>PUP.Optional.Vonteera.A</vendor><action>success</action><hash>2a3c5f6b3c3f3600a8e14d8546bcdd23</hash></folder>
<folder><path>C:\Users\Medali\AppData\Local\Google\Chrome\User Data\Default\Extensions\jfhbklndhffnahdploecdffbedhgjnce\1.5.1_0\_locales\en</path><vendor>PUP.Optional.Vonteera.A</vendor><action>success</action><hash>2a3c5f6b3c3f3600a8e14d8546bcdd23</hash></folder>
<folder><path>C:\Users\Baby\AppData\LocalLow\zgametb</path><vendor>PUP.Optional.ZGameTB.A</vendor><action>success</action><hash>fd6961694734d4626cfc51853ac8738d</hash></folder>
<folder><path>C:\Users\mimou\AppData\LocalLow\zgametb</path><vendor>PUP.Optional.ZGameTB.A</vendor><action>success</action><hash>9accc8029fdc90a61e4a9244d1317f81</hash></folder>
<folder><path>C:\Program Files\zgametb</path><vendor>PUP.Optional.ZGameTB.A</vendor><action>success</action><hash>b7af26a44734c175f872657103ff57a9</hash></folder>
<folder><path>C:\Program Files\zgametb\chrome</path><vendor>PUP.Optional.ZGameTB.A</vendor><action>success</action><hash>b7af26a44734c175f872657103ff57a9</hash></folder>
<folder><path>C:\Program Files\zgametb\chrome\skin</path><vendor>PUP.Optional.ZGameTB.A</vendor><action>success</action><hash>b7af26a44734c175f872657103ff57a9</hash></folder>
<folder><path>C:\Program Files\zgametb\chrome\skin\lib</path><vendor>PUP.Optional.ZGameTB.A</vendor><action>success</action><hash>b7af26a44734c175f872657103ff57a9</hash></folder>
<file><path>C:\Users\Medali\Desktop\winamp5572_full_emusic-7plus_fr-fr.exe</path><vendor>PUP.Optional.OpenCandy</vendor><action>success</action><hash>a5c1b713d2a9a29414e71de63bcad828</hash></file>
<file><path>C:\Windows\System32\Tasks\4CEFD9B73D6C-1CRMOI2</path><vendor>PUP.Optional.Ext</vendor><action>success</action><hash>7aeca228007b2a0c921feef9b74b20e0</hash></file>
<file><path>C:\Program Files\Common Files\Config\ver.xml</path><vendor>PUP.Optional.OffersWizard.A</vendor><action>success</action><hash>7ee83397bdbe72c4844c8669669ce818</hash></file>
<file><path>C:\Program Files\Common Files\Config\uninstinethnfd.exe</path><vendor>PUP.Optional.OffersWizard.A</vendor><action>success</action><hash>7ee83397bdbe72c4844c8669669ce818</hash></file>
<file><path>C:\Program Files\Mozilla Firefox\browser\searchplugins\zgametb.xml</path><vendor>PUP.Optional.ZGameTB.A</vendor><action>success</action><hash>75f106c4d2a9171f3bda2cc7e61ce11f</hash></file>
<file><path>C:\Users\Medali\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_dlnembnfbcpjnepmfjmngjenhhajpdfd_0.localstorage</path><vendor>PUP.Optional.Incredibar.A</vendor><action>success</action><hash>ff675a70bac13501c5d0e420857ead53</hash></file>
<file><path>C:\Users\Medali\AppData\Roaming\smss.exe.tmp</path><vendor>Trojan.Agent</vendor><action>success</action><hash>a3c320aadba061d5a84f5cbc679c40c0</hash></file>
<file><path>C:\Users\Medali\AppData\Roaming\WinSec.exe</path><vendor>Trojan.Agent</vendor><action>success</action><hash>74f2d4f6e596f24401a06864f70c3cc4</hash></file>
<file><path>C:\Users\Medali\AppData\Roaming\Mozilla\Extensions\{1FD91A9C-410C-4090-BBCC-55D3450EF433}</path><vendor>PUP.Optional.Searchqu.A</vendor><action>success</action><hash>2e3818b2b5c611255d4a4edf56ae47b9</hash></file>
<file><path>C:\Program Files\EasySearch\SiteVacuumLicense.txt</path><vendor>Adware.SuperSearch</vendor><action>success</action><hash>5511804aafcc2c0af953d0e2936f52ae</hash></file>
<file><path>C:\Program Files\EasySearch\FFExt\install.rdf</path><vendor>Adware.SuperSearch</vendor><action>success</action><hash>5511804aafcc2c0af953d0e2936f52ae</hash></file>
<file><path>C:\Program Files\EasySearch\FFExt\chrome\content\sitevacuum.xul</path><vendor>Adware.SuperSearch</vendor><action>success</action><hash>5511804aafcc2c0af953d0e2936f52ae</hash></file>
<file><path>C:\Windows\System32\config\systemprofile\AppData\Local\Google\Chrome\User Data\Default\Extensions\pmlghpafmmnmmkjdhacccolfgnkiboco\1.1_0\manifest.json</path><vendor>PUP.Optional.1ClickDownLoader.A</vendor><action>success</action><hash>4620c50592e972c467eb269d37cbb947</hash></file>
<file><path>C:\Windows\System32\config\systemprofile\AppData\Local\Google\Chrome\User Data\Default\Extensions\pmlghpafmmnmmkjdhacccolfgnkiboco\1.1_0\html\background.html</path><vendor>PUP.Optional.1ClickDownLoader.A</vendor><action>success</action><hash>4620c50592e972c467eb269d37cbb947</hash></file>
<file><path>C:\Windows\System32\config\systemprofile\AppData\Local\Google\Chrome\User Data\Default\Extensions\pmlghpafmmnmmkjdhacccolfgnkiboco\1.1_0\images\icon.16.png</path><vendor>PUP.Optional.1ClickDownLoader.A</vendor><action>success</action><hash>4620c50592e972c467eb269d37cbb947</hash></file>
<file><path>C:\Windows\System32\config\systemprofile\AppData\Local\Google\Chrome\User Data\Default\Extensions\pmlghpafmmnmmkjdhacccolfgnkiboco\1.1_0\images\icon.48.png</path><vendor>PUP.Optional.1ClickDownLoader.A</vendor><action>success</action><hash>4620c50592e972c467eb269d37cbb947</hash></file>
<file><path>C:\Windows\System32\config\systemprofile\AppData\Local\Google\Chrome\User Data\Default\Extensions\pmlghpafmmnmmkjdhacccolfgnkiboco\1.1_0\js\background.js</path><vendor>PUP.Optional.1ClickDownLoader.A</vendor><action>success</action><hash>4620c50592e972c467eb269d37cbb947</hash></file>
<file><path>C:\Windows\System32\config\systemprofile\AppData\Local\Google\Chrome\User Data\Default\Extensions\pmlghpafmmnmmkjdhacccolfgnkiboco\1.1_0\js\dt.txt</path><vendor>PUP.Optional.1ClickDownLoader.A</vendor><action>success</action><hash>4620c50592e972c467eb269d37cbb947</hash></file>
<file><path>C:\Windows\System32\config\systemprofile\AppData\Local\Google\Chrome\User Data\Default\Extensions\pmlghpafmmnmmkjdhacccolfgnkiboco\1.1_0\js\ex.js</path><vendor>PUP.Optional.1ClickDownLoader.A</vendor><action>success</action><hash>4620c50592e972c467eb269d37cbb947</hash></file>
<file><path>C:\Windows\System32\config\systemprofile\AppData\Local\Google\Chrome\User Data\Default\Extensions\pmlghpafmmnmmkjdhacccolfgnkiboco\1.1_0\js\jquery.js</path><vendor>PUP.Optional.1ClickDownLoader.A</vendor><action>success</action><hash>4620c50592e972c467eb269d37cbb947</hash></file>
<file><path>C:\Users\Medali\AppData\Roaming\Mozilla\Firefox\Profiles\yiji3bez.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\chrome.manifest</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>92d4b416a2d92a0c79b7b212e1214cb4</hash></file>
<file><path>C:\Users\Medali\AppData\Roaming\Mozilla\Firefox\Profiles\yiji3bez.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\install.rdf</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>92d4b416a2d92a0c79b7b212e1214cb4</hash></file>
<file><path>C:\Users\Medali\AppData\Roaming\Mozilla\Firefox\Profiles\yiji3bez.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\chrome\content\5f8826bf5a35447f92aa39005a3070d6.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>92d4b416a2d92a0c79b7b212e1214cb4</hash></file>
<file><path>C:\Users\Medali\AppData\Roaming\Mozilla\Firefox\Profiles\yiji3bez.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\chrome\content\70d2030500f4e7d9f6738ccbee8efb32.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>92d4b416a2d92a0c79b7b212e1214cb4</hash></file>
<file><path>C:\Users\Medali\AppData\Roaming\Mozilla\Firefox\Profiles\yiji3bez.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\chrome\content\86ccd8eab8f77f118a177493e33595d7.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>92d4b416a2d92a0c79b7b212e1214cb4</hash></file>
<file><path>C:\Users\Medali\AppData\Roaming\Mozilla\Firefox\Profiles\yiji3bez.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\chrome\content\991299f16c8acc58e8d08246de4d40a9.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>92d4b416a2d92a0c79b7b212e1214cb4</hash></file>
<file><path>C:\Users\Medali\AppData\Roaming\Mozilla\Firefox\Profiles\yiji3bez.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\chrome\content\abd35f3e820893890db666a6e8b554c0.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>92d4b416a2d92a0c79b7b212e1214cb4</hash></file>
<file><path>C:\Users\Medali\AppData\Roaming\Mozilla\Firefox\Profiles\yiji3bez.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\chrome\content\background.html</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>92d4b416a2d92a0c79b7b212e1214cb4</hash></file>
<file><path>C:\Users\Medali\AppData\Roaming\Mozilla\Firefox\Profiles\yiji3bez.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\chrome\content\browser.xul</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>92d4b416a2d92a0c79b7b212e1214cb4</hash></file>
<file><path>C:\Users\Medali\AppData\Roaming\Mozilla\Firefox\Profiles\yiji3bez.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\chrome\content\dialog.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>92d4b416a2d92a0c79b7b212e1214cb4</hash></file>
<file><path>C:\Users\Medali\AppData\Roaming\Mozilla\Firefox\Profiles\yiji3bez.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\chrome\content\ffCoreFilesIndex.txt</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>92d4b416a2d92a0c79b7b212e1214cb4</hash></file>
<file><path>C:\Users\Medali\AppData\Roaming\Mozilla\Firefox\Profiles\yiji3bez.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\chrome\content\options.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>92d4b416a2d92a0c79b7b212e1214cb4</hash></file>
<file><path>C:\Users\Medali\AppData\Roaming\Mozilla\Firefox\Profiles\yiji3bez.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\chrome\content\options.xul</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>92d4b416a2d92a0c79b7b212e1214cb4</hash></file>
<file><path>C:\Users\Medali\AppData\Roaming\Mozilla\Firefox\Profiles\yiji3bez.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\chrome\content\search_dialog.xul</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>92d4b416a2d92a0c79b7b212e1214cb4</hash></file>
<file><path>C:\Users\Medali\AppData\Roaming\Mozilla\Firefox\Profiles\yiji3bez.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\chrome\content\api\9d7cd433d7043af742a75243c0a7b55e.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>92d4b416a2d92a0c79b7b212e1214cb4</hash></file>
<file><path>C:\Users\Medali\AppData\Roaming\Mozilla\Firefox\Profiles\yiji3bez.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\chrome\content\api\20656cf6127da5727af157f149b560f9.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>92d4b416a2d92a0c79b7b212e1214cb4</hash></file>
<file><path>C:\Users\Medali\AppData\Roaming\Mozilla\Firefox\Profiles\yiji3bez.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\chrome\content\api\2fef698d43e724183c125a7befb46f4c.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>92d4b416a2d92a0c79b7b212e1214cb4</hash></file>
<file><path>C:\Users\Medali\AppData\Roaming\Mozilla\Firefox\Profiles\yiji3bez.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\chrome\content\api\3e3ad5159e66b9e19d2a4110fb7f1f30.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>92d4b416a2d92a0c79b7b212e1214cb4</hash></file>
<file><path>C:\Users\Medali\AppData\Roaming\Mozilla\Firefox\Profiles\yiji3bez.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\chrome\content\api\4a69ed16e1d5c899139f78f4e5a1b640.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>92d4b416a2d92a0c79b7b212e1214cb4</hash></file>
<file><path>C:\Users\Medali\AppData\Roaming\Mozilla\Firefox\Profiles\yiji3bez.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\chrome\content\api\648eea0ac3125ddcb0f6028fe60c5217.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>92d4b416a2d92a0c79b7b212e1214cb4</hash></file>
<file><path>C:\Users\Medali\AppData\Roaming\Mozilla\Firefox\Profiles\yiji3bez.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\chrome\content\api\67ee8fd160f1437d35bf898417c70fff.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>92d4b416a2d92a0c79b7b212e1214cb4</hash></file>
<file><path>C:\Users\Medali\AppData\Roaming\Mozilla\Firefox\Profiles\yiji3bez.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\chrome\content\api\75c1f527756e072eb67b726d1e6ea60c.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>92d4b416a2d92a0c79b7b212e1214cb4</hash></file>
<file><path>C:\Users\Medali\AppData\Roaming\Mozilla\Firefox\Profiles\yiji3bez.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\chrome\content\api\7f775de8f0271616ec2a85f4480a1ed6.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>92d4b416a2d92a0c79b7b212e1214cb4</hash></file>
<file><path>C:\Users\Medali\AppData\Roaming\Mozilla\Firefox\Profiles\yiji3bez.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\chrome\content\api\ae70dd314dd3313c181dff5ef691336b.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>92d4b416a2d92a0c79b7b212e1214cb4</hash></file>
<file><path>C:\Users\Medali\AppData\Roaming\Mozilla\Firefox\Profiles\yiji3bez.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\chrome\content\api\b24bc3a67d43e0333ebe86d114ef390e.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>92d4b416a2d92a0c79b7b212e1214cb4</hash></file>
<file><path>C:\Users\Medali\AppData\Roaming\Mozilla\Firefox\Profiles\yiji3bez.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\chrome\content\api\ca2f615887bccf15f13caa842bc782f9.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>92d4b416a2d92a0c79b7b212e1214cb4</hash></file>
<file><path>C:\Users\Medali\AppData\Roaming\Mozilla\Firefox\Profiles\yiji3bez.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\chrome\content\api\cf25fe2f6335df34b35a9ad4632bc49e.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>92d4b416a2d92a0c79b7b212e1214cb4</hash></file>
<file><path>C:\Users\Medali\AppData\Roaming\Mozilla\Firefox\Profiles\yiji3bez.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\chrome\content\api\e41c5b5050a0484ba4bf689c51ee680a.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>92d4b416a2d92a0c79b7b212e1214cb4</hash></file>
<file><path>C:\Users\Medali\AppData\Roaming\Mozilla\Firefox\Profiles\yiji3bez.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\chrome\content\api\eac316a3a8e026e0e9443a16903231e4.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>92d4b416a2d92a0c79b7b212e1214cb4</hash></file>
<file><path>C:\Users\Medali\AppData\Roaming\Mozilla\Firefox\Profiles\yiji3bez.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\chrome\content\api\fbc74df669bc1abeebb25787ca81d0a0.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>92d4b416a2d92a0c79b7b212e1214cb4</hash></file>
<file><path>C:\Users\Medali\AppData\Roaming\Mozilla\Firefox\Profiles\yiji3bez.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\chrome\content\core\4bd7ca52090e5511e775534ccd4c41f3.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>92d4b416a2d92a0c79b7b212e1214cb4</hash></file>
<file><path>C:\Users\Medali\AppData\Roaming\Mozilla\Firefox\Profiles\yiji3bez.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\chrome\content\core\042141e525ab64d4cab1439e095eea39.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>92d4b416a2d92a0c79b7b212e1214cb4</hash></file>
<file><path>C:\Users\Medali\AppData\Roaming\Mozilla\Firefox\Profiles\yiji3bez.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\chrome\content\core\0e2c0722e6a1bca412b70ec2b302477c.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>92d4b416a2d92a0c79b7b212e1214cb4</hash></file>
<file><path>C:\Users\Medali\AppData\Roaming\Mozilla\Firefox\Profiles\yiji3bez.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\chrome\content\core\13538a0c664cadb99a19510c93548d08.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>92d4b416a2d92a0c79b7b212e1214cb4</hash></file>
<file><path>C:\Users\Medali\AppData\Roaming\Mozilla\Firefox\Profiles\yiji3bez.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\chrome\content\core\240984cba0fb13e1270eb7b9d9ad511e.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>92d4b416a2d92a0c79b7b212e1214cb4</hash></file>
<file><path>C:\Users\Medali\AppData\Roaming\Mozilla\Firefox\Profiles\yiji3bez.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\chrome\content\core\2b170f5fc6ab106b4a3a92e3c0525c49.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>92d4b416a2d92a0c79b7b212e1214cb4</hash></file>
<file><path>C:\Users\Medali\AppData\Roaming\Mozilla\Firefox\Profiles\yiji3bez.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\chrome\content\core\329f3828f44329afc78c4523a78544ee.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>92d4b416a2d92a0c79b7b212e1214cb4</hash></file>
<file><path>C:\Users\Medali\AppData\Roaming\Mozilla\Firefox\Profiles\yiji3bez.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\chrome\content\core\3ef97811c7fc81d027bf5824946b8b24.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>92d4b416a2d92a0c79b7b212e1214cb4</hash></file>
<file><path>C:\Users\Medali\AppData\Roaming\Mozilla\Firefox\Profiles\yiji3bez.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\chrome\content\core\40ba9b5a85fa7a1139858c7af1bdd672.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>92d4b416a2d92a0c79b7b212e1214cb4</hash></file>
<file><path>C:\Users\Medali\AppData\Roaming\Mozilla\Firefox\Profiles\yiji3bez.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\chrome\content\core\42d9487ecc0bdacfd8a029460e332a4f.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>92d4b416a2d92a0c79b7b212e1214cb4</hash></file>
<file><path>C:\Users\Medali\AppData\Roaming\Mozilla\Firefox\Profiles\yiji3bez.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\chrome\content\core\4300a0d1049b49b787895b7d042ae0dc.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>92d4b416a2d92a0c79b7b212e1214cb4</hash></file>
<file><path>C:\Users\Medali\AppData\Roaming\Mozilla\Firefox\Profiles\yiji3bez.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\chrome\content\core\446bf19e213d2dbf36b0e24fecd474f6.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>92d4b416a2d92a0c79b7b212e1214cb4</hash></file>
<file><path>C:\Users\Medali\AppData\Roaming\Mozilla\Firefox\Profiles\yiji3bez.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\chrome\content\core\4529ed6e12d5c0b45e5c292ad2ca2f6f.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>92d4b416a2d92a0c79b7b212e1214cb4</hash></file>
<file><path>C:\Users\Medali\AppData\Roaming\Mozilla\Firefox\Profiles\yiji3bez.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\chrome\content\core\4796d0073650b2ca3ef8f37ad568095f.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>92d4b416a2d92a0c79b7b212e1214cb4</hash></file>
<file><path>C:\Users\Medali\AppData\Roaming\Mozilla\Firefox\Profiles\yiji3bez.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\chrome\content\core\582c2519578c201a96221ddf3d11736f.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>92d4b416a2d92a0c79b7b212e1214cb4</hash></file>
<file><path>C:\Users\Medali\AppData\Roaming\Mozilla\Firefox\Profiles\yiji3bez.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\chrome\content\core\87d6fd76c044e3a2dc6134b1f476fd75.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>92d4b416a2d92a0c79b7b212e1214cb4</hash></file>
<file><path>C:\Users\Medali\AppData\Roaming\Mozilla\Firefox\Profiles\yiji3bez.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\chrome\content\core\8a172cde4167ef2622c3652a3bc30abe.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>92d4b416a2d92a0c79b7b212e1214cb4</hash></file>
<file><path>C:\Users\Medali\AppData\Roaming\Mozilla\Firefox\Profiles\yiji3bez.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\chrome\content\core\ba182421cee3faa9987f52e73ffb744f.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>92d4b416a2d92a0c79b7b212e1214cb4</hash></file>
<file><path>C:\Users\Medali\AppData\Roaming\Mozilla\Firefox\Profiles\yiji3bez.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\chrome\content\core\c6ad6b5a06891131abf0ec1893a7aafa.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>92d4b416a2d92a0c79b7b212e1214cb4</hash></file>
<file><path>C:\Users\Medali\AppData\Roaming\Mozilla\Firefox\Profiles\yiji3bez.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\chrome\content\core\ce829a881a9c7febb4c9b9bacbb94d96.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>92d4b416a2d92a0c79b7b212e1214cb4</hash></file>
<file><
Merci pour ton aide. J'ai suivi tes conseils, utilisé malwarebytes et voici le rapport :
<?xml version="1.0" encoding="UTF-8" ?>
<mbam-log>
<header>
<date>2014/08/24 23:12:55 +0100</date>
<logfile>mbam-log-2014-08-24 (23-11-57).xml</logfile>
<isadmin>yes</isadmin>
</header>
<engine>
<version>2.00.2.1012</version>
<malware-database>v2014.08.24.06</malware-database>
<rootkit-database>v2014.08.21.01</rootkit-database>
<license>trial</license>
<file-protection>enabled</file-protection>
<web-protection>enabled</web-protection>
<self-protection>disabled</self-protection>
</engine>
<system>
<osversion>Windows 7 Service Pack 1</osversion>
<arch>x86</arch>
<username>Medali</username>
<filesys>NTFS</filesys>
</system>
<summary>
<type>threat</type>
<result>completed</result>
<objects>378060</objects>
<time>1645</time>
<processes>0</processes>
<modules>0</modules>
<keys>43</keys>
<values>12</values>
<datas>1</datas>
<folders>46</folders>
<files>258</files>
<sectors>0</sectors>
</summary>
<options>
<memory>enabled</memory>
<startup>enabled</startup>
<filesystem>enabled</filesystem>
<archives>enabled</archives>
<rootkits>disabled</rootkits>
<deeprootkit>disabled</deeprootkit>
<heuristics>enabled</heuristics>
<pup>enabled</pup>
<pum>enabled</pum>
</options>
<items>
<key><path>HKU\S-1-5-21-878722-4064136597-3585818917-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{05EEB91A-AEF7-4F8A-978F-FB83E7B03F8E}</path><vendor>PUP.Optional.uTorrentBar.A</vendor><action>none</action><hash>c99db416df9cac8a2ec68fe551b1e31d</hash></key>
<key><path>HKU\S-1-5-21-878722-4064136597-3585818917-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{7F4EFF06-7032-458e-AE16-1C1D8255C28A}</path><vendor>PUP.Optional.Tuvaro</vendor><action>success</action><hash>b2b44a802d4e999d9567c9a72ed42ed2</hash></key>
<key><path>HKU\S-1-5-21-878722-4064136597-3585818917-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{7F4EFF06-7032-458E-AE16-1C1D8255C28A}</path><vendor>PUP.Optional.Tuvaro</vendor><action>success</action><hash>b2b44a802d4e999d9567c9a72ed42ed2</hash></key>
<key><path>HKU\S-1-5-21-878722-4064136597-3585818917-1003-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{7F4EFF06-7032-458E-AE16-1C1D8255C28A}</path><vendor>PUP.Optional.Tuvaro</vendor><action>success</action><hash>b2b44a802d4e999d9567c9a72ed42ed2</hash></key>
<key><path>HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{7F4EFF06-7032-458E-AE16-1C1D8255C28A}</path><vendor>PUP.Optional.Tuvaro</vendor><action>success</action><hash>b2b44a802d4e999d9567c9a72ed42ed2</hash></key>
<key><path>HKU\S-1-5-21-878722-4064136597-3585818917-1003-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{05EEB91A-AEF7-4F8A-978F-FB83E7B03F8E}</path><vendor>PUP.Optional.uTorrentBar.A</vendor><action>success</action><hash>c99db416df9cac8a2ec68fe551b1e31d</hash></key>
<key><path>HKU\S-1-5-21-878722-4064136597-3585818917-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{05EEB91A-AEF7-4F8A-978F-FB83E7B03F8E}</path><vendor>PUP.Optional.uTorrentBar.A</vendor><action>success</action><hash>c99db416df9cac8a2ec68fe551b1e31d</hash></key>
<key><path>HKU\S-1-5-21-878722-4064136597-3585818917-1003-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{05EEB91A-AEF7-4F8A-978F-FB83E7B03F8E}</path><vendor>PUP.Optional.uTorrentBar.A</vendor><action>success</action><hash>c99db416df9cac8a2ec68fe551b1e31d</hash></key>
<key><path>HKU\S-1-5-21-878722-4064136597-3585818917-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{99079A25-328F-4BD4-BE04-00955ACAA0A7}</path><vendor>PUP.Optional.SearchQu</vendor><action>success</action><hash>4f178644c6b5d4622e884335837fcb35</hash></key>
<key><path>HKU\S-1-5-21-878722-4064136597-3585818917-1003-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{99079A25-328F-4BD4-BE04-00955ACAA0A7}</path><vendor>PUP.Optional.SearchQu</vendor><action>success</action><hash>4f178644c6b5d4622e884335837fcb35</hash></key>
<key><path>HKU\S-1-5-21-878722-4064136597-3585818917-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{99079A25-328F-4BD4-BE04-00955ACAA0A7}</path><vendor>PUP.Optional.SearchQu</vendor><action>success</action><hash>4f178644c6b5d4622e884335837fcb35</hash></key>
<key><path>HKU\S-1-5-21-878722-4064136597-3585818917-1003-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{99079A25-328F-4BD4-BE04-00955ACAA0A7}</path><vendor>PUP.Optional.SearchQu</vendor><action>success</action><hash>4f178644c6b5d4622e884335837fcb35</hash></key>
<key><path>HKU\S-1-5-21-878722-4064136597-3585818917-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{9D717F81-9148-4F12-8568-69135F087DB0}</path><vendor>PUP.Optional.Bandoo.A</vendor><action>success</action><hash>c3a3626891ea1521ec8c9c0f62a0bc44</hash></key>
<key><path>HKU\S-1-5-21-878722-4064136597-3585818917-1003-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{9D717F81-9148-4F12-8568-69135F087DB0}</path><vendor>PUP.Optional.Bandoo.A</vendor><action>success</action><hash>c3a3626891ea1521ec8c9c0f62a0bc44</hash></key>
<key><path>HKU\S-1-5-21-878722-4064136597-3585818917-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{9D717F81-9148-4F12-8568-69135F087DB0}</path><vendor>PUP.Optional.Bandoo.A</vendor><action>success</action><hash>c3a3626891ea1521ec8c9c0f62a0bc44</hash></key>
<key><path>HKU\S-1-5-21-878722-4064136597-3585818917-1003-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{9D717F81-9148-4F12-8568-69135F087DB0}</path><vendor>PUP.Optional.Bandoo.A</vendor><action>success</action><hash>c3a3626891ea1521ec8c9c0f62a0bc44</hash></key>
<key><path>HKU\S-1-5-21-878722-4064136597-3585818917-1003-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{82E1477C-B154-48D3-9891-33D83C26BCD3}</path><vendor>PUP.Optional.Delta.A</vendor><action>success</action><hash>095dae1ca2d979bd63f0dcce8a78ab55</hash></key>
<key><path>HKU\S-1-5-21-878722-4064136597-3585818917-1003-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{82E1477C-B154-48D3-9891-33D83C26BCD3}</path><vendor>PUP.Optional.Delta.A</vendor><action>success</action><hash>095dae1ca2d979bd63f0dcce8a78ab55</hash></key>
<key><path>HKU\S-1-5-21-878722-4064136597-3585818917-1003-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{C1AF5FA5-852C-4C90-812E-A7F75E011D87}</path><vendor>PUP.Optional.Delta.A</vendor><action>success</action><hash>333309c19be082b45ff344660df5d32d</hash></key>
<key><path>HKU\S-1-5-21-878722-4064136597-3585818917-1003-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{C1AF5FA5-852C-4C90-812E-A7F75E011D87}</path><vendor>PUP.Optional.Delta.A</vendor><action>success</action><hash>333309c19be082b45ff344660df5d32d</hash></key>
<key><path>HKU\S-1-5-21-878722-4064136597-3585818917-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{573BF47C-2566-449D-BA1B-417D5D3FB9FD}</path><vendor>PUP.Optional.ZGameTB.A</vendor><action>success</action><hash>f76f4b7f7a01a3935c933d340101e818</hash></key>
<key><path>HKU\S-1-5-21-878722-4064136597-3585818917-1003-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{573BF47C-2566-449D-BA1B-417D5D3FB9FD}</path><vendor>PUP.Optional.ZGameTB.A</vendor><action>success</action><hash>f76f4b7f7a01a3935c933d340101e818</hash></key>
<key><path>HKLM\SOFTWARE\GoPhoto.it V9.0</path><vendor>PUP.Optional.GoPhoto.A</vendor><action>success</action><hash>1254eae0fb80d16518f67889679c6799</hash></key>
<key><path>HKLM\SOFTWARE\MediaPlayerV1alpha722</path><vendor>PUP.Optional.MediaPlayerAlpha.A</vendor><action>success</action><hash>d78f5c6ecdae0a2cbc83eb29b84b60a0</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\GOOGLE\CHROME\EXTENSIONS\dednnpigldgdbpgcdpfppmlcnnbjciel</path><vendor>PUP.Optional.Generalcrawler.A</vendor><action>success</action><hash>90d676545e1dd85ea62093bad72dc63a</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\GOOGLE\CHROME\EXTENSIONS\dlnembnfbcpjnepmfjmngjenhhajpdfd</path><vendor>PUP.Optional.Incredibar.A</vendor><action>success</action><hash>b2b4e4e6d0ab96a0296d897b19ea1ce4</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\GOOGLE\CHROME\EXTENSIONS\lpmkgpnbiojfaoklbkpfneikocaobfai</path><vendor>PUP.Optional.MediaFinder.A</vendor><action>success</action><hash>2e386b5f3348072fcef93e0f9f6535cb</hash></key>
<key><path>HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\1ClickMovie-Download V9.0</path><vendor>PUP.Optional.1ClickMovieDownload.A</vendor><action>success</action><hash>8adc3298354672c4ce6fd23e44bfde22</hash></key>
<key><path>HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\GoPhoto.it V9.0</path><vendor>PUP.Optional.GoPhoto.A</vendor><action>success</action><hash>4224e9e12e4d79bd32de679a7d868f71</hash></key>
<key><path>HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\HD-V1.8</path><vendor>PUP.Optional.PlusHD.A</vendor><action>success</action><hash>8ed8d1f949321d190eb07582758d13ed</hash></key>
<key><path>HKU\S-1-5-21-878722-4064136597-3585818917-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\GoPhoto.it V9.0</path><vendor>PUP.Optional.GoPhoto.A</vendor><action>success</action><hash>491d2b9f58233cfa28e8ee1362a134cc</hash></key>
<key><path>HKU\S-1-5-21-878722-4064136597-3585818917-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\DataMngr</path><vendor>PUP.Optional.DataMngr.A</vendor><action>success</action><hash>f57119b1057673c330e7da5308fc946c</hash></key>
<key><path>HKU\S-1-5-21-878722-4064136597-3585818917-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\Fun Web Products</path><vendor>PUP.Optional.FunWebProducts.A</vendor><action>success</action><hash>d88e6c5ebebd94a274e828d432d01de3</hash></key>
<key><path>HKU\S-1-5-21-878722-4064136597-3585818917-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\FunWebProducts</path><vendor>PUP.Optional.FunWebProducts.A</vendor><action>success</action><hash>d98d09c18cefc76f5409e01cc33fc53b</hash></key>
<key><path>HKU\S-1-5-21-878722-4064136597-3585818917-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\PriceGong</path><vendor>PUP.Optional.PriceGong.A</vendor><action>success</action><hash>7bebbd0df28983b3076458b926dde818</hash></key>
<key><path>HKU\S-1-5-21-878722-4064136597-3585818917-1003-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\DataMngr</path><vendor>PUP.Optional.DataMngr.A</vendor><action>success</action><hash>46202f9b760582b4ee29ad80699bb64a</hash></key>
<key><path>HKU\S-1-5-21-878722-4064136597-3585818917-1003-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\Iminent</path><vendor>PUP.Optional.Iminent.A</vendor><action>success</action><hash>83e302c8d2a92e08d5169186c043d42c</hash></key>
<key><path>HKU\S-1-5-21-878722-4064136597-3585818917-1003-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\Crossrider</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>5b0b31990c6fe551dfacc37eaf55a55b</hash></key>
<key><path>HKU\S-1-5-21-878722-4064136597-3585818917-1003-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\Fun Web Products</path><vendor>PUP.Optional.FunWebProducts.A</vendor><action>success</action><hash>c1a53496e6957cbad08cfb01679b07f9</hash></key>
<key><path>HKU\S-1-5-21-878722-4064136597-3585818917-1003-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\FunWebProducts</path><vendor>PUP.Optional.FunWebProducts.A</vendor><action>success</action><hash>99cd84463744ca6c99c4d7251ce6ed13</hash></key>
<key><path>HKU\S-1-5-21-878722-4064136597-3585818917-1003-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\HD-V1.8</path><vendor>PUP.Optional.PlusHD.A</vendor><action>success</action><hash>095dd7f35a211b1b1ca2d522e0227d83</hash></key>
<key><path>HKU\S-1-5-21-878722-4064136597-3585818917-1003-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\PriceGong</path><vendor>PUP.Optional.PriceGong.A</vendor><action>success</action><hash>b9ad22a89cdfaf874a21db3649ba09f7</hash></key>
<key><path>HKU\S-1-5-21-878722-4064136597-3585818917-1003-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\BPROTECTSETTINGS</path><vendor>PUP.Optional.BProtector.A</vendor><action>success</action><hash>4c1a4387c9b2dd5971f746ea4aba9f61</hash></key>
<value><path>HKU\S-1-5-21-878722-4064136597-3585818917-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\TOOLBAR\WEBBROWSER\{977AE9CC-AF83-45E8-9E03-E2798216E2D5}</path><valuename></valuename><vendor>PUP.Optional.Iminent.A</vendor><action>success</action><valuedata></valuedata><hash>cf97606a9dde37ff6d543278cb37ea16</hash></value>
<value><path>HKU\S-1-5-21-878722-4064136597-3585818917-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\TOOLBAR\WEBBROWSER</path><valuename>{977AE9CC-AF83-45E8-9E03-E2798216E2D5}</valuename><vendor>PUP.Optional.Iminent.A</vendor><action>success</action><valuedata>Ìéz--f¯èEzây'âÕ</valuedata><hash>cf97606a9dde37ff6d543278cb37ea16</hash></value>
<value><path>HKU\S-1-5-21-878722-4064136597-3585818917-1003-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\TOOLBAR\WEBBROWSER</path><valuename>{977AE9CC-AF83-45E8-9E03-E2798216E2D5}</valuename><vendor>PUP.Optional.Iminent.A</vendor><action>success</action><valuedata>Ìéz--f¯èEzây'âÕ</valuedata><hash>cf97606a9dde37ff6d543278cb37ea16</hash></value>
<value><path>HKU\S-1-5-21-878722-4064136597-3585818917-1003-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\TOOLBAR\WEBBROWSER\{977AE9CC-AF83-45E8-9E03-E2798216E2D5}</path><valuename></valuename><vendor>PUP.Optional.Iminent.A</vendor><action>success</action><valuedata></valuedata><hash>6303ffcb3348f541724f00aa847ef50b</hash></value>
<value><path>HKLM\SOFTWARE\WOW6432NODE\MOZILLA\FIREFOX\EXTENSIONS\{336D0C35-8A85-403a-B9D2-65C292C39087}</path><valuename></valuename><vendor>PUP.Optional.StartPage.A</vendor><action>success</action><valuedata></valuedata><hash>0066c802413a5bdb4e368fe23bc7e21e</hash></value>
<value><path>HKLM\SOFTWARE\WOW6432NODE\MOZILLA\FIREFOX\EXTENSIONS</path><valuename>{336D0C35-8A85-403A-B9D2-65C292C39087}</valuename><vendor>PUP.Optional.StartPage.A</vendor><action>success</action><valuedata>C:\Program Files\Web Assistant\Firefox</valuedata><hash>0066c802413a5bdb4e368fe23bc7e21e</hash></value>
<value><path>HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHURI</path><valuename>(Default)</valuename><vendor>PUP.Optional.CertifiedToolBar.A</vendor><action>success</action><valuedata>http://search.certified-toolbar.com?si=41460&bs=true&tid=592&q=%s</valuedata><hash>71f5f5d5ec8feb4b233e21d4ab5701ff</hash></value>
<value><path>HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\INTERNET SETTINGS\5.0\USER AGENT\POST PLATFORM</path><valuename>ShopperReports 3.2.7.0</valuename><vendor>Adware.HotBar</vendor><action>success</action><valuedata></valuedata><hash>3e286f5b5a212a0c70c5138acf34c53b</hash></value>
<value><path>HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\INTERNET SETTINGS\5.0\USER AGENT\POST PLATFORM</path><valuename>SRS_IT_E8790977B1765C5A36AE96</valuename><vendor>Malware.Trace</vendor><action>success</action><valuedata></valuedata><hash>4f17d5f5324913231f181d803cc74eb2</hash></value>
<value><path>HKLM\SOFTWARE\MOZILLA\FIREFOX\EXTENSIONS</path><valuename>ext@WebexpEnhancedV1alpha346.net</valuename><vendor>PUP.Optional.WebExpEnhanced.A</vendor><action>success</action><valuedata>C:\Program Files\WebexpEnhancedV1\WebexpEnhancedV1alpha346\ff</valuedata><hash>bfa703c74833e65039ad7d962ad9e719</hash></value>
<value><path>HKLM\SOFTWARE\MOZILLA\FIREFOX\EXTENSIONS</path><valuename>ext@MediaPlayerV1alpha722.net</valuename><vendor>PUP.Optional.MediaPlayerAlpha.A</vendor><action>success</action><valuedata>C:\Program Files\MediaPlayerV1\MediaPlayerV1alpha722\ff</valuedata><hash>b2b4d4f65328e94d62de53c19a69cb35</hash></value>
<value><path>HKU\S-1-5-21-878722-4064136597-3585818917-1003-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES</path><valuename>bProtectorDefaultScope</valuename><vendor>PUP.BProtector</vendor><action>success</action><valuedata>{7F4EFF06-7032-458e-AE16-1C1D8255C28A}</valuedata><hash>93d37951552620168099fe2f42c220e0</hash></value>
<data><path>HKU\S-1-5-21-878722-4064136597-3585818917-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHURI</path><valuename>(Default)</valuename><vendor>PUP.Optional.SearchCertifiedTB.A</vendor><action>replaced</action><valuedata>http://search.certified-toolbar.com?si=41460&bs=true&tid=592&q=%s</...
<folder><path>C:\Program Files\Common Files\Config</path><vendor>PUP.Optional.OffersWizard.A</vendor><action>success</action><hash>7ee83397bdbe72c4844c8669669ce818</hash></folder>
<folder><path>C:\Program Files\EasySearch</path><vendor>Adware.SuperSearch</vendor><action>success</action><hash>5511804aafcc2c0af953d0e2936f52ae</hash></folder>
<folder><path>C:\Program Files\EasySearch\FFExt</path><vendor>Adware.SuperSearch</vendor><action>success</action><hash>5511804aafcc2c0af953d0e2936f52ae</hash></folder>
<folder><path>C:\Program Files\EasySearch\FFExt\chrome</path><vendor>Adware.SuperSearch</vendor><action>success</action><hash>5511804aafcc2c0af953d0e2936f52ae</hash></folder>
<folder><path>C:\Program Files\EasySearch\FFExt\chrome\content</path><vendor>Adware.SuperSearch</vendor><action>success</action><hash>5511804aafcc2c0af953d0e2936f52ae</hash></folder>
<folder><path>C:\Windows\System32\config\systemprofile\AppData\Local\Google\Chrome\User Data\Default\Extensions\pmlghpafmmnmmkjdhacccolfgnkiboco</path><vendor>PUP.Optional.1ClickDownLoader.A</vendor><action>success</action><hash>4620c50592e972c467eb269d37cbb947</hash></folder>
<folder><path>C:\Windows\System32\config\systemprofile\AppData\Local\Google\Chrome\User Data\Default\Extensions\pmlghpafmmnmmkjdhacccolfgnkiboco\1.1_0</path><vendor>PUP.Optional.1ClickDownLoader.A</vendor><action>success</action><hash>4620c50592e972c467eb269d37cbb947</hash></folder>
<folder><path>C:\Windows\System32\config\systemprofile\AppData\Local\Google\Chrome\User Data\Default\Extensions\pmlghpafmmnmmkjdhacccolfgnkiboco\1.1_0\html</path><vendor>PUP.Optional.1ClickDownLoader.A</vendor><action>success</action><hash>4620c50592e972c467eb269d37cbb947</hash></folder>
<folder><path>C:\Windows\System32\config\systemprofile\AppData\Local\Google\Chrome\User Data\Default\Extensions\pmlghpafmmnmmkjdhacccolfgnkiboco\1.1_0\images</path><vendor>PUP.Optional.1ClickDownLoader.A</vendor><action>success</action><hash>4620c50592e972c467eb269d37cbb947</hash></folder>
<folder><path>C:\Windows\System32\config\systemprofile\AppData\Local\Google\Chrome\User Data\Default\Extensions\pmlghpafmmnmmkjdhacccolfgnkiboco\1.1_0\js</path><vendor>PUP.Optional.1ClickDownLoader.A</vendor><action>success</action><hash>4620c50592e972c467eb269d37cbb947</hash></folder>
<folder><path>C:\Users\Medali\AppData\Roaming\Mozilla\Firefox\Profiles\yiji3bez.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>92d4b416a2d92a0c79b7b212e1214cb4</hash></folder>
<folder><path>C:\Users\Medali\AppData\Roaming\Mozilla\Firefox\Profiles\yiji3bez.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\chrome</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>92d4b416a2d92a0c79b7b212e1214cb4</hash></folder>
<folder><path>C:\Users\Medali\AppData\Roaming\Mozilla\Firefox\Profiles\yiji3bez.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\chrome\content</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>92d4b416a2d92a0c79b7b212e1214cb4</hash></folder>
<folder><path>C:\Users\Medali\AppData\Roaming\Mozilla\Firefox\Profiles\yiji3bez.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\chrome\content\api</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>92d4b416a2d92a0c79b7b212e1214cb4</hash></folder>
<folder><path>C:\Users\Medali\AppData\Roaming\Mozilla\Firefox\Profiles\yiji3bez.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\chrome\content\core</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>92d4b416a2d92a0c79b7b212e1214cb4</hash></folder>
<folder><path>C:\Users\Medali\AppData\Roaming\Mozilla\Firefox\Profiles\yiji3bez.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\defaults</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>92d4b416a2d92a0c79b7b212e1214cb4</hash></folder>
<folder><path>C:\Users\Medali\AppData\Roaming\Mozilla\Firefox\Profiles\yiji3bez.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\defaults\preferences</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>92d4b416a2d92a0c79b7b212e1214cb4</hash></folder>
<folder><path>C:\Users\Medali\AppData\Roaming\Mozilla\Firefox\Profiles\yiji3bez.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\extensionData</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>92d4b416a2d92a0c79b7b212e1214cb4</hash></folder>
<folder><path>C:\Users\Medali\AppData\Roaming\Mozilla\Firefox\Profiles\yiji3bez.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\extensionData\plugins</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>92d4b416a2d92a0c79b7b212e1214cb4</hash></folder>
<folder><path>C:\Users\Medali\AppData\Roaming\Mozilla\Firefox\Profiles\yiji3bez.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\extensionData\userCode</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>92d4b416a2d92a0c79b7b212e1214cb4</hash></folder>
<folder><path>C:\Users\Medali\AppData\Roaming\Mozilla\Firefox\Profiles\yiji3bez.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\locale</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>92d4b416a2d92a0c79b7b212e1214cb4</hash></folder>
<folder><path>C:\Users\Medali\AppData\Roaming\Mozilla\Firefox\Profiles\yiji3bez.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\locale\en-US</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>92d4b416a2d92a0c79b7b212e1214cb4</hash></folder>
<folder><path>C:\Users\Medali\AppData\Roaming\Mozilla\Firefox\Profiles\yiji3bez.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\skin</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>92d4b416a2d92a0c79b7b212e1214cb4</hash></folder>
<folder><path>C:\Users\Medali\AppData\Roaming\Mozilla\Firefox\Profiles\yiji3bez.default\extensions\2ea36bf1-0877-4aaa-882c-ff78f7d9d95c@dfb1672d-116a-4eb4-8be0-44786bd1d3dd.com</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>c6a0d5f53e3dde58d25e943052b03cc4</hash></folder>
<folder><path>C:\Users\Medali\AppData\Roaming\Mozilla\Firefox\Profiles\yiji3bez.default\extensions\2ea36bf1-0877-4aaa-882c-ff78f7d9d95c@dfb1672d-116a-4eb4-8be0-44786bd1d3dd.com\chrome</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>c6a0d5f53e3dde58d25e943052b03cc4</hash></folder>
<folder><path>C:\Users\Medali\AppData\Roaming\Mozilla\Firefox\Profiles\yiji3bez.default\extensions\2ea36bf1-0877-4aaa-882c-ff78f7d9d95c@dfb1672d-116a-4eb4-8be0-44786bd1d3dd.com\chrome\content</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>c6a0d5f53e3dde58d25e943052b03cc4</hash></folder>
<folder><path>C:\Users\Medali\AppData\Roaming\Mozilla\Firefox\Profiles\yiji3bez.default\extensions\2ea36bf1-0877-4aaa-882c-ff78f7d9d95c@dfb1672d-116a-4eb4-8be0-44786bd1d3dd.com\chrome\content\api</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>c6a0d5f53e3dde58d25e943052b03cc4</hash></folder>
<folder><path>C:\Users\Medali\AppData\Roaming\Mozilla\Firefox\Profiles\yiji3bez.default\extensions\2ea36bf1-0877-4aaa-882c-ff78f7d9d95c@dfb1672d-116a-4eb4-8be0-44786bd1d3dd.com\chrome\content\core</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>c6a0d5f53e3dde58d25e943052b03cc4</hash></folder>
<folder><path>C:\Users\Medali\AppData\Roaming\Mozilla\Firefox\Profiles\yiji3bez.default\extensions\2ea36bf1-0877-4aaa-882c-ff78f7d9d95c@dfb1672d-116a-4eb4-8be0-44786bd1d3dd.com\defaults</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>c6a0d5f53e3dde58d25e943052b03cc4</hash></folder>
<folder><path>C:\Users\Medali\AppData\Roaming\Mozilla\Firefox\Profiles\yiji3bez.default\extensions\2ea36bf1-0877-4aaa-882c-ff78f7d9d95c@dfb1672d-116a-4eb4-8be0-44786bd1d3dd.com\defaults\preferences</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>c6a0d5f53e3dde58d25e943052b03cc4</hash></folder>
<folder><path>C:\Users\Medali\AppData\Roaming\Mozilla\Firefox\Profiles\yiji3bez.default\extensions\2ea36bf1-0877-4aaa-882c-ff78f7d9d95c@dfb1672d-116a-4eb4-8be0-44786bd1d3dd.com\extensionData</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>c6a0d5f53e3dde58d25e943052b03cc4</hash></folder>
<folder><path>C:\Users\Medali\AppData\Roaming\Mozilla\Firefox\Profiles\yiji3bez.default\extensions\2ea36bf1-0877-4aaa-882c-ff78f7d9d95c@dfb1672d-116a-4eb4-8be0-44786bd1d3dd.com\extensionData\plugins</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>c6a0d5f53e3dde58d25e943052b03cc4</hash></folder>
<folder><path>C:\Users\Medali\AppData\Roaming\Mozilla\Firefox\Profiles\yiji3bez.default\extensions\2ea36bf1-0877-4aaa-882c-ff78f7d9d95c@dfb1672d-116a-4eb4-8be0-44786bd1d3dd.com\extensionData\userCode</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>c6a0d5f53e3dde58d25e943052b03cc4</hash></folder>
<folder><path>C:\Users\Medali\AppData\Roaming\Mozilla\Firefox\Profiles\yiji3bez.default\extensions\2ea36bf1-0877-4aaa-882c-ff78f7d9d95c@dfb1672d-116a-4eb4-8be0-44786bd1d3dd.com\locale</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>c6a0d5f53e3dde58d25e943052b03cc4</hash></folder>
<folder><path>C:\Users\Medali\AppData\Roaming\Mozilla\Firefox\Profiles\yiji3bez.default\extensions\2ea36bf1-0877-4aaa-882c-ff78f7d9d95c@dfb1672d-116a-4eb4-8be0-44786bd1d3dd.com\locale\en-US</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>c6a0d5f53e3dde58d25e943052b03cc4</hash></folder>
<folder><path>C:\Users\Medali\AppData\Roaming\Mozilla\Firefox\Profiles\yiji3bez.default\extensions\2ea36bf1-0877-4aaa-882c-ff78f7d9d95c@dfb1672d-116a-4eb4-8be0-44786bd1d3dd.com\skin</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>c6a0d5f53e3dde58d25e943052b03cc4</hash></folder>
<folder><path>C:\Users\Medali\AppData\Local\Google\Chrome\User Data\Default\Extensions\jfhbklndhffnahdploecdffbedhgjnce</path><vendor>PUP.Optional.Vonteera.A</vendor><action>success</action><hash>2a3c5f6b3c3f3600a8e14d8546bcdd23</hash></folder>
<folder><path>C:\Users\Medali\AppData\Local\Google\Chrome\User Data\Default\Extensions\jfhbklndhffnahdploecdffbedhgjnce\1.5.1_0</path><vendor>PUP.Optional.Vonteera.A</vendor><action>success</action><hash>2a3c5f6b3c3f3600a8e14d8546bcdd23</hash></folder>
<folder><path>C:\Users\Medali\AppData\Local\Google\Chrome\User Data\Default\Extensions\jfhbklndhffnahdploecdffbedhgjnce\1.5.1_0\_locales</path><vendor>PUP.Optional.Vonteera.A</vendor><action>success</action><hash>2a3c5f6b3c3f3600a8e14d8546bcdd23</hash></folder>
<folder><path>C:\Users\Medali\AppData\Local\Google\Chrome\User Data\Default\Extensions\jfhbklndhffnahdploecdffbedhgjnce\1.5.1_0\_locales\en</path><vendor>PUP.Optional.Vonteera.A</vendor><action>success</action><hash>2a3c5f6b3c3f3600a8e14d8546bcdd23</hash></folder>
<folder><path>C:\Users\Baby\AppData\LocalLow\zgametb</path><vendor>PUP.Optional.ZGameTB.A</vendor><action>success</action><hash>fd6961694734d4626cfc51853ac8738d</hash></folder>
<folder><path>C:\Users\mimou\AppData\LocalLow\zgametb</path><vendor>PUP.Optional.ZGameTB.A</vendor><action>success</action><hash>9accc8029fdc90a61e4a9244d1317f81</hash></folder>
<folder><path>C:\Program Files\zgametb</path><vendor>PUP.Optional.ZGameTB.A</vendor><action>success</action><hash>b7af26a44734c175f872657103ff57a9</hash></folder>
<folder><path>C:\Program Files\zgametb\chrome</path><vendor>PUP.Optional.ZGameTB.A</vendor><action>success</action><hash>b7af26a44734c175f872657103ff57a9</hash></folder>
<folder><path>C:\Program Files\zgametb\chrome\skin</path><vendor>PUP.Optional.ZGameTB.A</vendor><action>success</action><hash>b7af26a44734c175f872657103ff57a9</hash></folder>
<folder><path>C:\Program Files\zgametb\chrome\skin\lib</path><vendor>PUP.Optional.ZGameTB.A</vendor><action>success</action><hash>b7af26a44734c175f872657103ff57a9</hash></folder>
<file><path>C:\Users\Medali\Desktop\winamp5572_full_emusic-7plus_fr-fr.exe</path><vendor>PUP.Optional.OpenCandy</vendor><action>success</action><hash>a5c1b713d2a9a29414e71de63bcad828</hash></file>
<file><path>C:\Windows\System32\Tasks\4CEFD9B73D6C-1CRMOI2</path><vendor>PUP.Optional.Ext</vendor><action>success</action><hash>7aeca228007b2a0c921feef9b74b20e0</hash></file>
<file><path>C:\Program Files\Common Files\Config\ver.xml</path><vendor>PUP.Optional.OffersWizard.A</vendor><action>success</action><hash>7ee83397bdbe72c4844c8669669ce818</hash></file>
<file><path>C:\Program Files\Common Files\Config\uninstinethnfd.exe</path><vendor>PUP.Optional.OffersWizard.A</vendor><action>success</action><hash>7ee83397bdbe72c4844c8669669ce818</hash></file>
<file><path>C:\Program Files\Mozilla Firefox\browser\searchplugins\zgametb.xml</path><vendor>PUP.Optional.ZGameTB.A</vendor><action>success</action><hash>75f106c4d2a9171f3bda2cc7e61ce11f</hash></file>
<file><path>C:\Users\Medali\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_dlnembnfbcpjnepmfjmngjenhhajpdfd_0.localstorage</path><vendor>PUP.Optional.Incredibar.A</vendor><action>success</action><hash>ff675a70bac13501c5d0e420857ead53</hash></file>
<file><path>C:\Users\Medali\AppData\Roaming\smss.exe.tmp</path><vendor>Trojan.Agent</vendor><action>success</action><hash>a3c320aadba061d5a84f5cbc679c40c0</hash></file>
<file><path>C:\Users\Medali\AppData\Roaming\WinSec.exe</path><vendor>Trojan.Agent</vendor><action>success</action><hash>74f2d4f6e596f24401a06864f70c3cc4</hash></file>
<file><path>C:\Users\Medali\AppData\Roaming\Mozilla\Extensions\{1FD91A9C-410C-4090-BBCC-55D3450EF433}</path><vendor>PUP.Optional.Searchqu.A</vendor><action>success</action><hash>2e3818b2b5c611255d4a4edf56ae47b9</hash></file>
<file><path>C:\Program Files\EasySearch\SiteVacuumLicense.txt</path><vendor>Adware.SuperSearch</vendor><action>success</action><hash>5511804aafcc2c0af953d0e2936f52ae</hash></file>
<file><path>C:\Program Files\EasySearch\FFExt\install.rdf</path><vendor>Adware.SuperSearch</vendor><action>success</action><hash>5511804aafcc2c0af953d0e2936f52ae</hash></file>
<file><path>C:\Program Files\EasySearch\FFExt\chrome\content\sitevacuum.xul</path><vendor>Adware.SuperSearch</vendor><action>success</action><hash>5511804aafcc2c0af953d0e2936f52ae</hash></file>
<file><path>C:\Windows\System32\config\systemprofile\AppData\Local\Google\Chrome\User Data\Default\Extensions\pmlghpafmmnmmkjdhacccolfgnkiboco\1.1_0\manifest.json</path><vendor>PUP.Optional.1ClickDownLoader.A</vendor><action>success</action><hash>4620c50592e972c467eb269d37cbb947</hash></file>
<file><path>C:\Windows\System32\config\systemprofile\AppData\Local\Google\Chrome\User Data\Default\Extensions\pmlghpafmmnmmkjdhacccolfgnkiboco\1.1_0\html\background.html</path><vendor>PUP.Optional.1ClickDownLoader.A</vendor><action>success</action><hash>4620c50592e972c467eb269d37cbb947</hash></file>
<file><path>C:\Windows\System32\config\systemprofile\AppData\Local\Google\Chrome\User Data\Default\Extensions\pmlghpafmmnmmkjdhacccolfgnkiboco\1.1_0\images\icon.16.png</path><vendor>PUP.Optional.1ClickDownLoader.A</vendor><action>success</action><hash>4620c50592e972c467eb269d37cbb947</hash></file>
<file><path>C:\Windows\System32\config\systemprofile\AppData\Local\Google\Chrome\User Data\Default\Extensions\pmlghpafmmnmmkjdhacccolfgnkiboco\1.1_0\images\icon.48.png</path><vendor>PUP.Optional.1ClickDownLoader.A</vendor><action>success</action><hash>4620c50592e972c467eb269d37cbb947</hash></file>
<file><path>C:\Windows\System32\config\systemprofile\AppData\Local\Google\Chrome\User Data\Default\Extensions\pmlghpafmmnmmkjdhacccolfgnkiboco\1.1_0\js\background.js</path><vendor>PUP.Optional.1ClickDownLoader.A</vendor><action>success</action><hash>4620c50592e972c467eb269d37cbb947</hash></file>
<file><path>C:\Windows\System32\config\systemprofile\AppData\Local\Google\Chrome\User Data\Default\Extensions\pmlghpafmmnmmkjdhacccolfgnkiboco\1.1_0\js\dt.txt</path><vendor>PUP.Optional.1ClickDownLoader.A</vendor><action>success</action><hash>4620c50592e972c467eb269d37cbb947</hash></file>
<file><path>C:\Windows\System32\config\systemprofile\AppData\Local\Google\Chrome\User Data\Default\Extensions\pmlghpafmmnmmkjdhacccolfgnkiboco\1.1_0\js\ex.js</path><vendor>PUP.Optional.1ClickDownLoader.A</vendor><action>success</action><hash>4620c50592e972c467eb269d37cbb947</hash></file>
<file><path>C:\Windows\System32\config\systemprofile\AppData\Local\Google\Chrome\User Data\Default\Extensions\pmlghpafmmnmmkjdhacccolfgnkiboco\1.1_0\js\jquery.js</path><vendor>PUP.Optional.1ClickDownLoader.A</vendor><action>success</action><hash>4620c50592e972c467eb269d37cbb947</hash></file>
<file><path>C:\Users\Medali\AppData\Roaming\Mozilla\Firefox\Profiles\yiji3bez.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\chrome.manifest</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>92d4b416a2d92a0c79b7b212e1214cb4</hash></file>
<file><path>C:\Users\Medali\AppData\Roaming\Mozilla\Firefox\Profiles\yiji3bez.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\install.rdf</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>92d4b416a2d92a0c79b7b212e1214cb4</hash></file>
<file><path>C:\Users\Medali\AppData\Roaming\Mozilla\Firefox\Profiles\yiji3bez.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\chrome\content\5f8826bf5a35447f92aa39005a3070d6.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>92d4b416a2d92a0c79b7b212e1214cb4</hash></file>
<file><path>C:\Users\Medali\AppData\Roaming\Mozilla\Firefox\Profiles\yiji3bez.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\chrome\content\70d2030500f4e7d9f6738ccbee8efb32.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>92d4b416a2d92a0c79b7b212e1214cb4</hash></file>
<file><path>C:\Users\Medali\AppData\Roaming\Mozilla\Firefox\Profiles\yiji3bez.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\chrome\content\86ccd8eab8f77f118a177493e33595d7.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>92d4b416a2d92a0c79b7b212e1214cb4</hash></file>
<file><path>C:\Users\Medali\AppData\Roaming\Mozilla\Firefox\Profiles\yiji3bez.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\chrome\content\991299f16c8acc58e8d08246de4d40a9.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>92d4b416a2d92a0c79b7b212e1214cb4</hash></file>
<file><path>C:\Users\Medali\AppData\Roaming\Mozilla\Firefox\Profiles\yiji3bez.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\chrome\content\abd35f3e820893890db666a6e8b554c0.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>92d4b416a2d92a0c79b7b212e1214cb4</hash></file>
<file><path>C:\Users\Medali\AppData\Roaming\Mozilla\Firefox\Profiles\yiji3bez.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\chrome\content\background.html</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>92d4b416a2d92a0c79b7b212e1214cb4</hash></file>
<file><path>C:\Users\Medali\AppData\Roaming\Mozilla\Firefox\Profiles\yiji3bez.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\chrome\content\browser.xul</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>92d4b416a2d92a0c79b7b212e1214cb4</hash></file>
<file><path>C:\Users\Medali\AppData\Roaming\Mozilla\Firefox\Profiles\yiji3bez.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\chrome\content\dialog.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>92d4b416a2d92a0c79b7b212e1214cb4</hash></file>
<file><path>C:\Users\Medali\AppData\Roaming\Mozilla\Firefox\Profiles\yiji3bez.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\chrome\content\ffCoreFilesIndex.txt</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>92d4b416a2d92a0c79b7b212e1214cb4</hash></file>
<file><path>C:\Users\Medali\AppData\Roaming\Mozilla\Firefox\Profiles\yiji3bez.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\chrome\content\options.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>92d4b416a2d92a0c79b7b212e1214cb4</hash></file>
<file><path>C:\Users\Medali\AppData\Roaming\Mozilla\Firefox\Profiles\yiji3bez.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\chrome\content\options.xul</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>92d4b416a2d92a0c79b7b212e1214cb4</hash></file>
<file><path>C:\Users\Medali\AppData\Roaming\Mozilla\Firefox\Profiles\yiji3bez.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\chrome\content\search_dialog.xul</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>92d4b416a2d92a0c79b7b212e1214cb4</hash></file>
<file><path>C:\Users\Medali\AppData\Roaming\Mozilla\Firefox\Profiles\yiji3bez.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\chrome\content\api\9d7cd433d7043af742a75243c0a7b55e.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>92d4b416a2d92a0c79b7b212e1214cb4</hash></file>
<file><path>C:\Users\Medali\AppData\Roaming\Mozilla\Firefox\Profiles\yiji3bez.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\chrome\content\api\20656cf6127da5727af157f149b560f9.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>92d4b416a2d92a0c79b7b212e1214cb4</hash></file>
<file><path>C:\Users\Medali\AppData\Roaming\Mozilla\Firefox\Profiles\yiji3bez.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\chrome\content\api\2fef698d43e724183c125a7befb46f4c.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>92d4b416a2d92a0c79b7b212e1214cb4</hash></file>
<file><path>C:\Users\Medali\AppData\Roaming\Mozilla\Firefox\Profiles\yiji3bez.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\chrome\content\api\3e3ad5159e66b9e19d2a4110fb7f1f30.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>92d4b416a2d92a0c79b7b212e1214cb4</hash></file>
<file><path>C:\Users\Medali\AppData\Roaming\Mozilla\Firefox\Profiles\yiji3bez.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\chrome\content\api\4a69ed16e1d5c899139f78f4e5a1b640.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>92d4b416a2d92a0c79b7b212e1214cb4</hash></file>
<file><path>C:\Users\Medali\AppData\Roaming\Mozilla\Firefox\Profiles\yiji3bez.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\chrome\content\api\648eea0ac3125ddcb0f6028fe60c5217.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>92d4b416a2d92a0c79b7b212e1214cb4</hash></file>
<file><path>C:\Users\Medali\AppData\Roaming\Mozilla\Firefox\Profiles\yiji3bez.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\chrome\content\api\67ee8fd160f1437d35bf898417c70fff.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>92d4b416a2d92a0c79b7b212e1214cb4</hash></file>
<file><path>C:\Users\Medali\AppData\Roaming\Mozilla\Firefox\Profiles\yiji3bez.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\chrome\content\api\75c1f527756e072eb67b726d1e6ea60c.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>92d4b416a2d92a0c79b7b212e1214cb4</hash></file>
<file><path>C:\Users\Medali\AppData\Roaming\Mozilla\Firefox\Profiles\yiji3bez.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\chrome\content\api\7f775de8f0271616ec2a85f4480a1ed6.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>92d4b416a2d92a0c79b7b212e1214cb4</hash></file>
<file><path>C:\Users\Medali\AppData\Roaming\Mozilla\Firefox\Profiles\yiji3bez.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\chrome\content\api\ae70dd314dd3313c181dff5ef691336b.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>92d4b416a2d92a0c79b7b212e1214cb4</hash></file>
<file><path>C:\Users\Medali\AppData\Roaming\Mozilla\Firefox\Profiles\yiji3bez.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\chrome\content\api\b24bc3a67d43e0333ebe86d114ef390e.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>92d4b416a2d92a0c79b7b212e1214cb4</hash></file>
<file><path>C:\Users\Medali\AppData\Roaming\Mozilla\Firefox\Profiles\yiji3bez.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\chrome\content\api\ca2f615887bccf15f13caa842bc782f9.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>92d4b416a2d92a0c79b7b212e1214cb4</hash></file>
<file><path>C:\Users\Medali\AppData\Roaming\Mozilla\Firefox\Profiles\yiji3bez.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\chrome\content\api\cf25fe2f6335df34b35a9ad4632bc49e.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>92d4b416a2d92a0c79b7b212e1214cb4</hash></file>
<file><path>C:\Users\Medali\AppData\Roaming\Mozilla\Firefox\Profiles\yiji3bez.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\chrome\content\api\e41c5b5050a0484ba4bf689c51ee680a.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>92d4b416a2d92a0c79b7b212e1214cb4</hash></file>
<file><path>C:\Users\Medali\AppData\Roaming\Mozilla\Firefox\Profiles\yiji3bez.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\chrome\content\api\eac316a3a8e026e0e9443a16903231e4.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>92d4b416a2d92a0c79b7b212e1214cb4</hash></file>
<file><path>C:\Users\Medali\AppData\Roaming\Mozilla\Firefox\Profiles\yiji3bez.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\chrome\content\api\fbc74df669bc1abeebb25787ca81d0a0.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>92d4b416a2d92a0c79b7b212e1214cb4</hash></file>
<file><path>C:\Users\Medali\AppData\Roaming\Mozilla\Firefox\Profiles\yiji3bez.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\chrome\content\core\4bd7ca52090e5511e775534ccd4c41f3.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>92d4b416a2d92a0c79b7b212e1214cb4</hash></file>
<file><path>C:\Users\Medali\AppData\Roaming\Mozilla\Firefox\Profiles\yiji3bez.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\chrome\content\core\042141e525ab64d4cab1439e095eea39.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>92d4b416a2d92a0c79b7b212e1214cb4</hash></file>
<file><path>C:\Users\Medali\AppData\Roaming\Mozilla\Firefox\Profiles\yiji3bez.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\chrome\content\core\0e2c0722e6a1bca412b70ec2b302477c.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>92d4b416a2d92a0c79b7b212e1214cb4</hash></file>
<file><path>C:\Users\Medali\AppData\Roaming\Mozilla\Firefox\Profiles\yiji3bez.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\chrome\content\core\13538a0c664cadb99a19510c93548d08.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>92d4b416a2d92a0c79b7b212e1214cb4</hash></file>
<file><path>C:\Users\Medali\AppData\Roaming\Mozilla\Firefox\Profiles\yiji3bez.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\chrome\content\core\240984cba0fb13e1270eb7b9d9ad511e.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>92d4b416a2d92a0c79b7b212e1214cb4</hash></file>
<file><path>C:\Users\Medali\AppData\Roaming\Mozilla\Firefox\Profiles\yiji3bez.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\chrome\content\core\2b170f5fc6ab106b4a3a92e3c0525c49.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>92d4b416a2d92a0c79b7b212e1214cb4</hash></file>
<file><path>C:\Users\Medali\AppData\Roaming\Mozilla\Firefox\Profiles\yiji3bez.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\chrome\content\core\329f3828f44329afc78c4523a78544ee.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>92d4b416a2d92a0c79b7b212e1214cb4</hash></file>
<file><path>C:\Users\Medali\AppData\Roaming\Mozilla\Firefox\Profiles\yiji3bez.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\chrome\content\core\3ef97811c7fc81d027bf5824946b8b24.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>92d4b416a2d92a0c79b7b212e1214cb4</hash></file>
<file><path>C:\Users\Medali\AppData\Roaming\Mozilla\Firefox\Profiles\yiji3bez.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\chrome\content\core\40ba9b5a85fa7a1139858c7af1bdd672.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>92d4b416a2d92a0c79b7b212e1214cb4</hash></file>
<file><path>C:\Users\Medali\AppData\Roaming\Mozilla\Firefox\Profiles\yiji3bez.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\chrome\content\core\42d9487ecc0bdacfd8a029460e332a4f.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>92d4b416a2d92a0c79b7b212e1214cb4</hash></file>
<file><path>C:\Users\Medali\AppData\Roaming\Mozilla\Firefox\Profiles\yiji3bez.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\chrome\content\core\4300a0d1049b49b787895b7d042ae0dc.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>92d4b416a2d92a0c79b7b212e1214cb4</hash></file>
<file><path>C:\Users\Medali\AppData\Roaming\Mozilla\Firefox\Profiles\yiji3bez.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\chrome\content\core\446bf19e213d2dbf36b0e24fecd474f6.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>92d4b416a2d92a0c79b7b212e1214cb4</hash></file>
<file><path>C:\Users\Medali\AppData\Roaming\Mozilla\Firefox\Profiles\yiji3bez.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\chrome\content\core\4529ed6e12d5c0b45e5c292ad2ca2f6f.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>92d4b416a2d92a0c79b7b212e1214cb4</hash></file>
<file><path>C:\Users\Medali\AppData\Roaming\Mozilla\Firefox\Profiles\yiji3bez.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\chrome\content\core\4796d0073650b2ca3ef8f37ad568095f.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>92d4b416a2d92a0c79b7b212e1214cb4</hash></file>
<file><path>C:\Users\Medali\AppData\Roaming\Mozilla\Firefox\Profiles\yiji3bez.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\chrome\content\core\582c2519578c201a96221ddf3d11736f.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>92d4b416a2d92a0c79b7b212e1214cb4</hash></file>
<file><path>C:\Users\Medali\AppData\Roaming\Mozilla\Firefox\Profiles\yiji3bez.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\chrome\content\core\87d6fd76c044e3a2dc6134b1f476fd75.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>92d4b416a2d92a0c79b7b212e1214cb4</hash></file>
<file><path>C:\Users\Medali\AppData\Roaming\Mozilla\Firefox\Profiles\yiji3bez.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\chrome\content\core\8a172cde4167ef2622c3652a3bc30abe.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>92d4b416a2d92a0c79b7b212e1214cb4</hash></file>
<file><path>C:\Users\Medali\AppData\Roaming\Mozilla\Firefox\Profiles\yiji3bez.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\chrome\content\core\ba182421cee3faa9987f52e73ffb744f.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>92d4b416a2d92a0c79b7b212e1214cb4</hash></file>
<file><path>C:\Users\Medali\AppData\Roaming\Mozilla\Firefox\Profiles\yiji3bez.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\chrome\content\core\c6ad6b5a06891131abf0ec1893a7aafa.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>92d4b416a2d92a0c79b7b212e1214cb4</hash></file>
<file><path>C:\Users\Medali\AppData\Roaming\Mozilla\Firefox\Profiles\yiji3bez.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\chrome\content\core\ce829a881a9c7febb4c9b9bacbb94d96.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>92d4b416a2d92a0c79b7b212e1214cb4</hash></file>
<file><
Archimedali
Messages postés
4
Date d'inscription
jeudi 27 septembre 2012
Statut
Membre
Dernière intervention
31 août 2014
31 août 2014 à 01:55
31 août 2014 à 01:55
bonsoir à tous,
Je remercie vivement ceux qui ont bien voulu m'aider, hélas en vain, car en fait, tous les outils qu'on m'a proposés sont passés à coté du problème, comme les antivirus réputés les plus performants. c'est vous dire l'ampleur de l'arnaque et de l'illusion d'un contrôle quelconque des outils technologiques, ou autres d'ailleurs, soumis à la loi , j'allais dire de la religion, du profit.
En effet, j'ai réussi à récupérer ma page d'accueil mais provisoirement, c'est à dire jusqu'au prochain subterfuge de speedbit update ou de babylone qui s'incrustent, sans y être invités au passage, jusque dans les services de windows, sans que personne, ni aucun outils de sécurité ne soit capable de les dénoncer, encore moins de les déloger, comme ça par hasard les fleurons de la technologie informatique les trouvent, leurs font la bise si ça se trouve, et passent. Ils vont voir ailleurs et ils vous sortent parfois des trucs à dormir debout, ou à coucher dehors, selon les préférences, mais tant que vous n'y comprenez rien, y compris les programmeurs formés à tout , sauf à l'essentiel : l'arnaque, le moteur , oh combien juteux ! de la concurrence, même pénalisée, ça roule.
Alors, que reste-t-il ? La solution miracle, le fin du fin des experts, le formatage, je ne vous dis pas ce que c'est, vous le savez.
C'est quand même une drôle d'époque, la crise économique, l'effet de serre, le terrorisme, la NSA et consorts plus les malwares, PUP et je ne sais quoi encore, c'en est franchement trop !
@+
Je remercie vivement ceux qui ont bien voulu m'aider, hélas en vain, car en fait, tous les outils qu'on m'a proposés sont passés à coté du problème, comme les antivirus réputés les plus performants. c'est vous dire l'ampleur de l'arnaque et de l'illusion d'un contrôle quelconque des outils technologiques, ou autres d'ailleurs, soumis à la loi , j'allais dire de la religion, du profit.
En effet, j'ai réussi à récupérer ma page d'accueil mais provisoirement, c'est à dire jusqu'au prochain subterfuge de speedbit update ou de babylone qui s'incrustent, sans y être invités au passage, jusque dans les services de windows, sans que personne, ni aucun outils de sécurité ne soit capable de les dénoncer, encore moins de les déloger, comme ça par hasard les fleurons de la technologie informatique les trouvent, leurs font la bise si ça se trouve, et passent. Ils vont voir ailleurs et ils vous sortent parfois des trucs à dormir debout, ou à coucher dehors, selon les préférences, mais tant que vous n'y comprenez rien, y compris les programmeurs formés à tout , sauf à l'essentiel : l'arnaque, le moteur , oh combien juteux ! de la concurrence, même pénalisée, ça roule.
Alors, que reste-t-il ? La solution miracle, le fin du fin des experts, le formatage, je ne vous dis pas ce que c'est, vous le savez.
C'est quand même une drôle d'époque, la crise économique, l'effet de serre, le terrorisme, la NSA et consorts plus les malwares, PUP et je ne sais quoi encore, c'en est franchement trop !
@+
Utilisateur anonyme
31 août 2014 à 09:34
31 août 2014 à 09:34
Bonjour
Tout ça pour dire que tu as résolu ton problème.
C'est bien ;-))
je te laisse mettre ce sujet en résolu.
@+
Tout ça pour dire que tu as résolu ton problème.
C'est bien ;-))
je te laisse mettre ce sujet en résolu.
@+