Rapport de ZHPFix 1.3.13 par Nicolas Coolman, Update du 26/01/2013 Fichier d'export Registre : Run by Benoit at 04/02/2013 20:35:42 Windows 7 Home Premium Edition, 64-bit Service Pack 1 (Build 7601) ========== Logiciel(s) ========== ABSENT Software Key: {497BCFDD-F589-448D-A1C3-78D1B1809CCC} ABSENT Software Key: Giant Savings Extension ========== Processus mémoire ========== SUPPRIME Memory Process: C:\Users\Benoit\AppData\Local\Temp\Shortcut_SimDSetup.exe SUPPRIME Memory Process: C:\Users\Benoit\AppData\Local\Temp\SweetIMSetup.exe SUPPRIME Memory Process: C:\Users\Benoit\AppData\Local\Temp\toolbar.exe SUPPRIME Memory Process: C:\Users\Benoit\AppData\Local\Temp\toolbarChecker.exe SUPPRIME Memory Process: C:\Users\Benoit\AppData\Local\Temp\yontoo-c2_20130103.exe ========== Clé(s) du Registre ========== ABSENT Key: CLSID BHO: {11111111-1111-1111-1111-110211181110} ABSENT Key: HKCU\Software\AppDataLow\Software\Giant Savings Extension ABSENT Key: HKCU\Software\InstallCore SUPPRIME Key*: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\F928123A039649549966D4C29D35B1C9 SUPPRIME Key: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{11111111-1111-1111-1111-110211181110} SUPPRIME Key: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{11111111-1111-1111-1111-110211181110} ABSENT Key: HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110211181110} SUPPRIME Key: HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{11111111-1111-1111-1111-110211181110} SUPPRIME Key: HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{11111111-1111-1111-1111-110211181110} SUPPRIME Key: HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{21111111-1111-1111-1111-110211181110} SUPPRIME Key*: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\64A6E60055D801F4BB8AC269354B72B8 ========== Valeur(s) du Registre ========== ABSENT RunValue: Video Performer63615.exe ========== Préférences navigateur ========== ABSENT Mozilla Pref: user_pref("extensions.crossrider.bic", "13c96e090258ff053f4dada7672cc899"); ABSENT Mozilla Pref: user_pref("extensions.crossriderapp21810.21810.InstallationTime", 1359998736); SUPPRIME Mozilla Pref: user_pref("extensions.crossriderapp21810.21810.active", true); SUPPRIME Mozilla Pref: user_pref("extensions.crossriderapp21810.21810.addressbar", ""); SUPPRIME Mozilla Pref: user_pref("extensions.crossriderapp21810.21810.addressbarenhanced", ""); SUPPRIME Mozilla Pref: user_pref("extensions.crossriderapp21810.21810.backgroundjs", "\n\n//\n"); ABSENT Mozilla Pref: user_pref("extensions.crossriderapp21810.21810.backgroundver", 26); SUPPRIME Mozilla Pref: user_pref("extensions.crossriderapp21810.21810.can_run_bg_code", true); SUPPRIME Mozilla Pref: user_pref("extensions.crossriderapp21810.21810.certdomaininstaller", ""); SUPPRIME Mozilla Pref: user_pref("extensions.crossriderapp21810.21810.changeprevious", false); ABSENT Mozilla Pref: user_pref("extensions.crossriderapp21810.21810.cookie.InstallationTime.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100"); ABSENT Mozilla Pref: user_pref("extensions.crossriderapp21810.21810.cookie.InstallationTime.value", "1359998736"); SUPPRIME Mozilla Pref: user_pref("extensions.crossriderapp21810.21810.cookie._GPL_aoi.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100"); ABSENT Mozilla Pref: user_pref("extensions.crossriderapp21810.21810.cookie._GPL_aoi.value", "1359998736"); ABSENT Mozilla Pref: user_pref("extensions.crossriderapp21810.21810.cookie._GPL_arbitrary_code.expiration", "Mon Feb 04 2013 18:30:44 GMT+0100"); SUPPRIME Mozilla Pref: user_pref("extensions.crossriderapp21810.21810.cookie._GPL_arbitrary_code.value", "%22%28function%28%29%7B_GPL_PLUGIN.countryCode%[...] ABSENT Mozilla Pref: user_pref("extensions.crossriderapp21810.21810.cookie._GPL_blocklist.expiration", "Mon Feb 04 2013 18:30:44 GMT+0100"); SUPPRIME Mozilla Pref: user_pref("extensions.crossriderapp21810.21810.cookie._GPL_blocklist.value", "%22nonexistantdomain.com%22"); SUPPRIME Mozilla Pref: user_pref("extensions.crossriderapp21810.21810.cookie._GPL_cf_bu1.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100"); ABSENT Mozilla Pref: user_pref("extensions.crossriderapp21810.21810.cookie._GPL_cf_bu1.value", "1359998757"); ABSENT Mozilla Pref: user_pref("extensions.crossriderapp21810.21810.cookie._GPL_country_code.expiration", "Mon Feb 11 2013 18:25:44 GMT+0100"); SUPPRIME Mozilla Pref: user_pref("extensions.crossriderapp21810.21810.cookie._GPL_country_code.value", "%22FR%22"); SUPPRIME Mozilla Pref: user_pref("extensions.crossriderapp21810.21810.cookie._GPL_crr.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100"); ABSENT Mozilla Pref: user_pref("extensions.crossriderapp21810.21810.cookie._GPL_crr.value", "1359998745"); SUPPRIME Mozilla Pref: user_pref("extensions.crossriderapp21810.21810.cookie._GPL_currenttime.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100"); ABSENT Mozilla Pref: user_pref("extensions.crossriderapp21810.21810.cookie._GPL_currenttime.value", "%221359648602%22"); SUPPRIME Mozilla Pref: user_pref("extensions.crossriderapp21810.21810.cookie._GPL_hotfix20111102645.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100"); SUPPRIME Mozilla Pref: user_pref("extensions.crossriderapp21810.21810.cookie._GPL_hotfix20111102645.value", "%221%22"); SUPPRIME Mozilla Pref: user_pref("extensions.crossriderapp21810.21810.cookie._GPL_installer_params.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100"); ABSENT Mozilla Pref: user_pref("extensions.crossriderapp21810.21810.cookie._GPL_installer_params.value", "%7B%22source_id%22%3A%22109182%22%2C%22sub_id[...] ABSENT Mozilla Pref: user_pref("extensions.crossriderapp21810.21810.cookie._GPL_installtime.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100"); ABSENT Mozilla Pref: user_pref("extensions.crossriderapp21810.21810.cookie._GPL_installtime.value", "%221359648602%22"); SUPPRIME Mozilla Pref: user_pref("extensions.crossriderapp21810.21810.cookie._GPL_parent_zoneid.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100"); ABSENT Mozilla Pref: user_pref("extensions.crossriderapp21810.21810.cookie._GPL_parent_zoneid.value", "%22109182%22"); SUPPRIME Mozilla Pref: user_pref("extensions.crossriderapp21810.21810.cookie._GPL_pc_20120828.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100"); ABSENT Mozilla Pref: user_pref("extensions.crossriderapp21810.21810.cookie._GPL_pc_20120828.value", "1359998757205"); SUPPRIME Mozilla Pref: user_pref("extensions.crossriderapp21810.21810.cookie._GPL_product_id.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100"); ABSENT Mozilla Pref: user_pref("extensions.crossriderapp21810.21810.cookie._GPL_product_id.value", "%221242%22"); SUPPRIME Mozilla Pref: user_pref("extensions.crossriderapp21810.21810.cookie._GPL_zoneid.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100"); ABSENT Mozilla Pref: user_pref("extensions.crossriderapp21810.21810.cookie._GPL_zoneid.value", "%22139507%22"); SUPPRIME Mozilla Pref: user_pref("extensions.crossriderapp21810.21810.cookie.dbtest.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100"); ABSENT Mozilla Pref: user_pref("extensions.crossriderapp21810.21810.cookie.dbtest.value", "1359998742158"); SUPPRIME Mozilla Pref: user_pref("extensions.crossriderapp21810.21810.description", "Save big with Giant Savings! Coupons display instantly while you're [...] SUPPRIME Mozilla Pref: user_pref("extensions.crossriderapp21810.21810.domain", ""); SUPPRIME Mozilla Pref: user_pref("extensions.crossriderapp21810.21810.enablesearch", false); SUPPRIME Mozilla Pref: user_pref("extensions.crossriderapp21810.21810.fbremoteurl", ""); SUPPRIME Mozilla Pref: user_pref("extensions.crossriderapp21810.21810.group", 0); SUPPRIME Mozilla Pref: user_pref("extensions.crossriderapp21810.21810.homepage", ""); SUPPRIME Mozilla Pref: user_pref("extensions.crossriderapp21810.21810.iframe", false); SUPPRIME Mozilla Pref: user_pref("extensions.crossriderapp21810.21810.internaldb.Resources_appVer.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100"); ABSENT Mozilla Pref: user_pref("extensions.crossriderapp21810.21810.internaldb.Resources_appVer.value", "42"); SUPPRIME Mozilla Pref: user_pref("extensions.crossriderapp21810.21810.internaldb.Resources_lastVersion.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100"); SUPPRIME Mozilla Pref: user_pref("extensions.crossriderapp21810.21810.internaldb.Resources_lastVersion.value", "1"); SUPPRIME Mozilla Pref: user_pref("extensions.crossriderapp21810.21810.internaldb.Resources_meta.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100"); SUPPRIME Mozilla Pref: user_pref("extensions.crossriderapp21810.21810.internaldb.Resources_meta.value", "%7B%7D"); ABSENT Mozilla Pref: user_pref("extensions.crossriderapp21810.21810.internaldb.Resources_nextCheck.expiration", "Tue Feb 05 2013 00:25:39 GMT+0100"); SUPPRIME Mozilla Pref: user_pref("extensions.crossriderapp21810.21810.internaldb.Resources_nextCheck.value", "true"); SUPPRIME Mozilla Pref: user_pref("extensions.crossriderapp21810.21810.internaldb.Resources_queue.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100"); SUPPRIME Mozilla Pref: user_pref("extensions.crossriderapp21810.21810.internaldb.Resources_queue.value", "%7B%7D"); SUPPRIME Mozilla Pref: user_pref("extensions.crossriderapp21810.21810.js", "\n\nif(\"undefined\"!=typeof _GPL_PLUGIN){var _GPL_=function(){_GPL_PLUGIN.st[...] SUPPRIME Mozilla Pref: user_pref("extensions.crossriderapp21810.21810.manifesturl", ""); SUPPRIME Mozilla Pref: user_pref("extensions.crossriderapp21810.21810.name", "Giant Savings Extension"); SUPPRIME Mozilla Pref: user_pref("extensions.crossriderapp21810.21810.newtab", ""); SUPPRIME Mozilla Pref: user_pref("extensions.crossriderapp21810.21810.opensearch", ""); SUPPRIME Mozilla Pref: user_pref("extensions.crossriderapp21810.21810.plugins.plugin_1.code", "appAPI._cr_config={appID:function(){var a=appAPI.appInfo;i[...] SUPPRIME Mozilla Pref: user_pref("extensions.crossriderapp21810.21810.plugins.plugin_1.ver", 3); SUPPRIME Mozilla Pref: user_pref("extensions.crossriderapp21810.21810.plugins.plugin_1000014.code", "Array.prototype.indexOf||(Array.prototype.indexOf=fu[...] SUPPRIME Mozilla Pref: user_pref("extensions.crossriderapp21810.21810.plugins.plugin_1000014.name", "GPL Plugin (Loader)"); SUPPRIME Mozilla Pref: user_pref("extensions.crossriderapp21810.21810.plugins.plugin_1000014.ver", 15); ABSENT Mozilla Pref: user_pref("extensions.crossriderapp21810.21810.plugins.plugin_1000015.ver", 27); SUPPRIME Mozilla Pref: user_pref("extensions.crossriderapp21810.21810.plugins.plugin_13.code", "(function(a){a.selectedText=function(e,c){function d(){if[...] SUPPRIME Mozilla Pref: user_pref("extensions.crossriderapp21810.21810.plugins.plugin_13.ver", 2); SUPPRIME Mozilla Pref: user_pref("extensions.crossriderapp21810.21810.plugins.plugin_14.ver", 2); SUPPRIME Mozilla Pref: user_pref("extensions.crossriderapp21810.21810.plugins.plugin_16.code", "if((typeof isBackground===\"undefined\"||isBackground!=tr[...] SUPPRIME Mozilla Pref: user_pref("extensions.crossriderapp21810.21810.plugins.plugin_16.name", "FFAppAPIWrapper"); SUPPRIME Mozilla Pref: user_pref("extensions.crossriderapp21810.21810.plugins.plugin_16.ver", 4); SUPPRIME Mozilla Pref: user_pref("extensions.crossriderapp21810.21810.plugins.plugin_17.code", "if(typeof window!==\"undefined\"){\n/*!\n * jQuery JavaSc[...] SUPPRIME Mozilla Pref: user_pref("extensions.crossriderapp21810.21810.plugins.plugin_17.ver", 3); SUPPRIME Mozilla Pref: user_pref("extensions.crossriderapp21810.21810.plugins.plugin_21.code", "var CrossriderDebugManager=(function(h){var f={appId:appA[...] SUPPRIME Mozilla Pref: user_pref("extensions.crossriderapp21810.21810.plugins.plugin_21.name", "debug"); SUPPRIME Mozilla Pref: user_pref("extensions.crossriderapp21810.21810.plugins.plugin_21.ver", 3); SUPPRIME Mozilla Pref: user_pref("extensions.crossriderapp21810.21810.plugins.plugin_22.code", "(function(a){appAPI.queueManager={queue:[],register:funct[...] SUPPRIME Mozilla Pref: user_pref("extensions.crossriderapp21810.21810.plugins.plugin_22.ver", 2); SUPPRIME Mozilla Pref: user_pref("extensions.crossriderapp21810.21810.plugins.plugin_28.code", "var CrossriderInitializerPlugin=(function(e){var c={appId[...] SUPPRIME Mozilla Pref: user_pref("extensions.crossriderapp21810.21810.plugins.plugin_28.name", "initializer"); SUPPRIME Mozilla Pref: user_pref("extensions.crossriderapp21810.21810.plugins.plugin_28.ver", 2); SUPPRIME Mozilla Pref: user_pref("extensions.crossriderapp21810.21810.plugins.plugin_4.code", "var jQuery SUPPRIME Mozilla Pref: user_pref("extensions.crossriderapp21810.21810.plugins.plugin_4.name", "jquery_1_7_1"); SUPPRIME Mozilla Pref: user_pref("extensions.crossriderapp21810.21810.plugins.plugin_4.ver", 3); SUPPRIME Mozilla Pref: user_pref("extensions.crossriderapp21810.21810.plugins.plugin_47.code", "(function(){appAPI.ready=function(a){appAPI.resources.isR[...] SUPPRIME Mozilla Pref: user_pref("extensions.crossriderapp21810.21810.plugins.plugin_47.ver", 1); SUPPRIME Mozilla Pref: user_pref("extensions.crossriderapp21810.21810.plugins.plugin_64.code", "(function(){var h=\"__CR_EMPTY_CHANNEL__\";var d=function[...] SUPPRIME Mozilla Pref: user_pref("extensions.crossriderapp21810.21810.plugins.plugin_64.name", "appApiMessage"); SUPPRIME Mozilla Pref: user_pref("extensions.crossriderapp21810.21810.plugins.plugin_64.ver", 1); SUPPRIME Mozilla Pref: user_pref("extensions.crossriderapp21810.21810.plugins.plugin_72.code", "if(appAPI.__should_activate_validation__===true){(functio[...] SUPPRIME Mozilla Pref: user_pref("extensions.crossriderapp21810.21810.plugins.plugin_72.name", "appApiValidation"); SUPPRIME Mozilla Pref: user_pref("extensions.crossriderapp21810.21810.plugins.plugin_72.ver", 1); SUPPRIME Mozilla Pref: user_pref("extensions.crossriderapp21810.21810.plugins.plugin_78.code", "if(typeof jQuery!==\"undefined\"&&(jQuery)&&typeof naviga[...] SUPPRIME Mozilla Pref: user_pref("extensions.crossriderapp21810.21810.plugins.plugin_78.name", "CrossriderInfo"); SUPPRIME Mozilla Pref: user_pref("extensions.crossriderapp21810.21810.plugins.plugin_78.ver", 2); SUPPRIME Mozilla Pref: user_pref("extensions.crossriderapp21810.21810.plugins_lists.plugins_0", "4,14,78,16,64,47,72,1000015"); SUPPRIME Mozilla Pref: user_pref("extensions.crossriderapp21810.21810.plugins_lists.plugins_1", "17,14,78,13,16,64,4,1,21,22,72,1000014,28"); SUPPRIME Mozilla Pref: user_pref("extensions.crossriderapp21810.21810.plugins_lists.plugins_5", "4,14,78,13,16,64,47,72"); ABSENT Mozilla Pref: user_pref("extensions.crossriderapp21810.21810.pluginsurl", "http://app-static.crossrider.com/plugin/apps/21810/plugins/087/ff/plu[...] ABSENT Mozilla Pref: user_pref("extensions.crossriderapp21810.21810.pluginsversion", 36); SUPPRIME Mozilla Pref: user_pref("extensions.crossriderapp21810.21810.publisher", "215 Apps"); SUPPRIME Mozilla Pref: user_pref("extensions.crossriderapp21810.21810.searchstatus", 0); SUPPRIME Mozilla Pref: user_pref("extensions.crossriderapp21810.21810.setnewtab", false); SUPPRIME Mozilla Pref: user_pref("extensions.crossriderapp21810.21810.settingsurl", ""); SUPPRIME Mozilla Pref: user_pref("extensions.crossriderapp21810.21810.thankyou", ""); SUPPRIME Mozilla Pref: user_pref("extensions.crossriderapp21810.21810.updateinterval", 360); ABSENT Mozilla Pref: user_pref("extensions.crossriderapp21810.21810.ver", 42); SUPPRIME Mozilla Pref: user_pref("extensions.crossriderapp21810.apps", "21810"); ABSENT Mozilla Pref: user_pref("extensions.crossriderapp21810.bic", "13c96e090258ff053f4dada7672cc899"); SUPPRIME Mozilla Pref: user_pref("extensions.crossriderapp21810.cid", 21810); SUPPRIME Mozilla Pref: user_pref("extensions.crossriderapp21810.firstrun", false); SUPPRIME Mozilla Pref: user_pref("extensions.crossriderapp21810.hadappinstalled", true); ABSENT Mozilla Pref: user_pref("extensions.crossriderapp21810.installationdate", 1359998736); ABSENT Mozilla Pref: user_pref("extensions.crossriderapp21810.lastcheck", 22666646); ABSENT Mozilla Pref: user_pref("extensions.crossriderapp21810.lastcheckitem", 22666646); SUPPRIME Mozilla Pref: user_pref("extensions.crossriderapp21810.modetype", "production"); SUPPRIME Mozilla Pref: user_pref("extensions.crossriderapp21810.reportInstall", true); ========== Dossier(s) ========== SUPPRIME Folder: C:\Users\Benoit\AppData\Roaming\Mozilla\Firefox\Profiles\rc8rrt3e.default\extensions\extension21810@extension21810.com ABSENT C:\Program Files (x86)\Giant Savings Extension ABSENT C:\Users\Benoit\AppData\Local\Giant Savings Extension SUPPRIME Temporaires Windows: SUPPRIME Flash Cookies: ========== Fichier(s) ========== ABSENT File: c:\program files (x86)\giant savings extension\giant savings extension.dll ABSENT File: c:\users\benoit\appdata\local\temp\video performer63615.exe SUPPRIME File: c:\users\benoit\appdata\local\temp\shortcut_simdsetup.exe SUPPRIME File*: c:\users\benoit\appdata\local\temp\sweetimsetup.exe SUPPRIME File: c:\users\benoit\appdata\local\temp\toolbar.exe SUPPRIME File: c:\users\benoit\appdata\local\temp\toolbarchecker.exe SUPPRIME File*: c:\users\benoit\appdata\local\temp\yontoo-c2_20130103.exe ABSENT Folder/File: c:\program files (x86)\giant savings extension ABSENT Folder/File: c:\users\benoit\appdata\local\giant savings extension ABSENT Folder/File: c:\users\benoit\appdata\local\temp\yontoo-c2_20130103.exe ABSENT Folder/File: c:\users\benoit\appdata\local\temp\shortcut_simdsetup.exe SUPPRIME Temporaires Windows: SUPPRIME Flash Cookies: ========== Récapitulatif ========== 5 : Processus mémoire 11 : Clé(s) du Registre 1 : Valeur(s) du Registre 5 : Dossier(s) 13 : Fichier(s) 2 : Logiciel(s) 122 : Préférences navigateur End of clean in 01mn 16s ========== Chemin de fichier rapport ========== C:\ZHP\ZHPFix[R1].txt - 04/02/2013 20:35:43 [18058]