Rapport de ZHPDiag v2013.6.10.15 par Nicolas Coolman, Update du 10/06/2013 Run by Lu'crôut at 10/06/2013 16:59:22 WebSite: http://nicolascoolman.webs.com State : WhiteList : Enable High Elevated Privileges : OK UAC : Activate by user ---\\ Web Browser MSIE: Internet Explorer v10.0.9200.16576 MFIE: Mozilla Firefox 21.0 (Defaut) GCIE: Google Chrome v27.0.1453.110 ---\\ Windows Product Information ~ Langage: Français Windows 7 Home Premium Edition, 64-bit Service Pack 1 (Build 7601) Windows Server License Manager Script : OK ~ Windows(R) 7, OEM_SLP channel System Locked Preinstallation (OEM_SLP) : OK Windows ID Activation : OK ~ Windows Partial Key : 7QJB7 Windows License : OK ~ Windows Remaining Initializations Number : 3 Software Protection Service (Protection logicielle) : OK Windows Automatic Updates : OK Windows Activation Technologies : OK ---\\ System Protection avast! Internet Security v8.0.1489.0 Windows Defender W7 ---\\ System Optimizer ---\\ Peer To Peer (P2P) Pando Media Booster v2.3.5.6 ---\\ Software Update Adobe Flash Player 11 Plugin Adobe Reader XI - Français ---\\ System Information ~ Processor: Intel64 Family 6 Model 37 Stepping 2, GenuineIntel ~ Operating System: 64 Bits Boot mode: Normal (Normal boot) Total RAM: 3958 MB (52% free) System Restore: Activé (Enable) System drive C: has 244 GB (53%) free of 454 GB ---\\ Logged in mode ~ Computer Name: LUCRÔUT-PC ~ User Name: Lu'crôut ~ All Users Names: Lu'crôut, HomeGroupUser$, Administrateur, ~ Unselected Option: None Logged in as Administrator ---\\ Environnement Variables ~ System Unit : C:\ ~ %AppData% : C:\Users\Lu'crôut\AppData\Roaming\ ~ %Desktop% : C:\Users\Lu'crôut\Desktop\ ~ %Favorites% : C:\Users\Lu'crôut\Favorites\ ~ %LocalAppData% : C:\Users\Lu'crôut\AppData\Local\ ~ %StartMenu% : C:\Users\Lu'crôut\AppData\Roaming\Microsoft\Windows\Start Menu\ ~ %Windir% : C:\Windows\ ~ %System% : C:\Windows\System32\ ---\\ DOS/Devices C:\ Hard drive, Flash drive, Thumb drive (Free 244 Go of 454 Go) D:\ CD-ROM drive (Not Inserted) E:\ CD-ROM drive (Free 0 Go of 0 Go) F:\ Floppy drive, Flash card reader, USB Key (Free 2 Go of 2 Go) Q:\ Hard drive, Flash drive, Thumb drive (Free 0 Go of 0 Go) ---\\ Security Center & Tools Informations [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoActiveDesktopChanges: Modified [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install] LastSuccessTime : Out Of Date ~ Security Center: 34 Legitimates Filtered in 00mn 00s ---\\ Recherche particulière de fichiers génériques [MD5.332FEAB1435662FC6C672E25BEB37BE3] - (.Microsoft Corporation - Explorateur Windows.) (.25/02/2011 - 07:19:30.) -- C:\Windows\Explorer.exe [2871808] [MD5.94355C28C1970635A31B3FE52EB7CEBA] - (.Microsoft Corporation - Application de démarrage de Windows.) (.14/07/2009 - 02:39:52.) -- C:\Windows\System32\Wininit.exe [129024] [MD5.27A9000C534AA9BADC9EE74940F50C6D] - (.Microsoft Corporation - Extensions Internet pour Win32.) (.05/04/2013 - 07:52:14.) -- C:\Windows\System32\wininet.dll [2242048] [MD5.1151B1BAA6F350B1DB6598E0FEA7C457] - (.Microsoft Corporation - Application d’ouverture de session Windows.) (.20/11/2010 - 14:25:30.) -- C:\Windows\System32\Winlogon.exe [390656] [MD5.067FA52BFB59A56110A12312EF9AF243] - (.Microsoft Corporation - Bibliothèque de licences.) (.20/11/2010 - 14:27:26.) -- C:\Windows\System32\sppcomapi.dll [232448] [MD5.1C7857B62DE5994A75B054A9FD4C3825] - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) (.28/12/2011 - 04:59:24.) -- C:\Windows\system32\Drivers\AFD.sys [498688] [MD5.02062C0B390B7729EDC9E69C680A6F3C] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) (.14/07/2009 - 02:52:21.) -- C:\Windows\system32\Drivers\atapi.sys [24128] [MD5.B8BD2BB284668C84865658C77574381A] - (.Microsoft Corporation - CD-ROM File System Driver.) (.14/07/2009 - 00:19:47.) -- C:\Windows\system32\Drivers\Cdfs.sys [92160] [MD5.F036CE71586E93D94DAB220D7BDF4416] - (.Microsoft Corporation - SCSI CD-ROM Driver.) (.20/11/2010 - 10:19:21.) -- C:\Windows\system32\Drivers\Cdrom.sys [147456] [MD5.9BB2EF44EAA163B29C4A4587887A0FE4] - (.Microsoft Corporation - DFS Namespace Client Driver.) (.20/11/2010 - 10:26:32.) -- C:\Windows\system32\Drivers\DfsC.sys [102400] [MD5.97BFED39B6B79EB12CDDBFEED51F56BB] - (.Microsoft Corporation - High Definition Audio Bus Driver.) (.20/11/2010 - 11:43:43.) -- C:\Windows\system32\Drivers\HDAudBus.sys [122368] [MD5.FA55C73D4AFFA7EE23AC4BE53B4592D3] - (.Microsoft Corporation - Pilote de port i8042.) (.14/07/2009 - 00:19:57.) -- C:\Windows\system32\Drivers\i8042prt.sys [105472] [MD5.AF9B39A7E7B6CAA203B3862582E9F2D0] - (.Microsoft Corporation - IP Network Address Translator.) (.14/07/2009 - 01:10:03.) -- C:\Windows\system32\Drivers\IpNat.sys [116224] [MD5.A5D9106A73DC88564C825D317CAC68AC] - (.Microsoft Corporation - Windows NT SMB Minirdr.) (.27/04/2011 - 03:40:40.) -- C:\Windows\system32\Drivers\MRxSmb.sys [158208] [MD5.09594D1089C523423B32A4229263F068] - (.Microsoft Corporation - MBT Transport driver.) (.20/11/2010 - 10:23:20.) -- C:\Windows\system32\Drivers\netBT.sys [261632] [MD5.B98F8C6E31CD07B2E6F71F7F648E38C0] - (.Microsoft Corporation - Pilote du système de fichiers NT.) (.12/04/2013 - 15:45:08.) -- C:\Windows\system32\Drivers\ntfs.sys [1656680] [MD5.0086431C29C35BE1DBC43F52CC273887] - (.Microsoft Corporation - Pilote de port parallèle.) (.14/07/2009 - 01:00:41.) -- C:\Windows\system32\Drivers\Parport.sys [97280] [MD5.471815800AE33E6F1C32FB1B97C490CA] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) (.20/11/2010 - 11:52:35.) -- C:\Windows\system32\Drivers\Rasl2tp.sys [129536] [MD5.548260A7B8654E024DC30BF8A7C5BAA4] - (.Microsoft Corporation - SMB Transport driver.) (.14/07/2009 - 01:09:09.) -- C:\Windows\system32\Drivers\smb.sys [93184] [MD5.DDAD5A7AB24D8B65F8D724F5C20FD806] - (.Microsoft Corporation - TDI Translation Driver.) (.20/11/2010 - 10:21:56.) -- C:\Windows\system32\Drivers\tdx.sys [119296] [MD5.0D08D2F3B3FF84E433346669B5E0F639] - (.Microsoft Corporation - Pilote de cliché instantané du volume.) (.20/11/2010 - 14:34:02.) -- C:\Windows\system32\Drivers\volsnap.sys [295808] ~ Generic Processes: Scanned in 00mn 00s ---\\ Etat des fichiers cachés (Caché/Total) ~ Mes images (My Pictures) : 2/2198 ~ Mes musiques (My Musics) : 22/7238 ~ Mes Videos (My Videos) : 2/243 ~ Mes Favoris (My Favorites) : 1/33 ~ Mes Documents (My Documents) : 2/4866 ~ Mon Bureau (My Desktop) : 1/68905 ~ Menu demarrer (Programs) : 1/30 ~ Hidden Files: Scanned in 01mn 06s ---\\ Processus lancés [MD5.ED74B57ECFFD503BB7AC51BD87332DC7] - (.Pas de propriétaire - MotoHelperAgent.) -- C:\Program Files (x86)\Motorola\MotoHelper\MotoHelperAgent.exe [673648] [PID.2740] [MD5.F6573840989C4E8ED2EBF8B0644CF500] - (.SFR - Propriétés de la connexion SFR.) -- C:\Program Files (x86)\SFR\Kit\9props.exe [959880] [PID.4364] [MD5.76BEBE0FDE1DDDB9B70BEF85B40DDE70] - (.Spotify Ltd - Spotify.) -- C:\Users\Lu'crôut\AppData\Roaming\Spotify\spotify.exe [4573184] [PID.4404] [MD5.F10ADB851EF1BD5144FE6D1691CD7576] - (.Spotify Ltd - SpotifyWebHelper.) -- C:\Users\Lu'crôut\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1105408] [PID.4448] [MD5.DD7DAE4E8F169D1FF4511FC292FF6FF6] - (.Intel Corporation - IAStorIcon.) -- C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [284696] [PID.4596] [MD5.FD2141BE38B0B1F64A302BCBB9882019] - (.NewTech Infosystems, Inc. - Packard Bell MyBackup.) -- C:\Program Files (x86)\NewTech Infosystems\Packard Bell MyBackup\BackupManagerTray.exe [263936] [PID.4632] [MD5.6F721EDA271CE5A421C7A44ECC8F0F4D] - (.Dritek System Inc. - Launch Manager Keyboard Application.) -- C:\Program Files (x86)\Launch Manager\LManager.exe [1287760] [PID.4668] [MD5.CEEF774E8392853E6A016CAC0F8F0D09] - (.Pas de propriétaire - LiteOn.) -- C:\Program Files (x86)\Video Web Camera\VideoWebCamera.exe [4845640] [PID.4760] [MD5.A58E05767687E1E636D160ECEA9BC8ED] - (.Pas de propriétaire - DivX Update.) -- C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe [1226608] [PID.4804] [MD5.57D8C4ED26DFD7EF0E2CB196FB8BFB54] - (.DivX, LLC - DivX Download Manager Service.) -- C:\Program Files (x86)\DivX\DivX Plus Web Player\DDMService.exe [63360] [PID.4868] [MD5.27E8BBE87A4862AE84B0FC4CC857B1A1] - (.Edimax Technology Co., Ltd. - MFP Agent.) -- C:\Program Files (x86)\MFP Server\App\Common\MFPAgent.exe [741376] [PID.4960] [MD5.5A1C7A46972FB2BB28030EF91319C4FB] - (.Dritek System Inc. - Launch Manager Worker.) -- C:\Program Files (x86)\Launch Manager\LMworker.exe [268368] [PID.5004] [MD5.B77081F8221968C7DAB794B0BA55C43E] - (.Sun Microsystems, Inc. - Java(TM) Update Scheduler.) -- C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254896] [PID.5036] [MD5.53D96678FB89F056D5285101481297D9] - (.Apple Inc. - iTunesHelper.) -- C:\Program Files (x86)\iTunes\iTunesHelper.exe [421160] [PID.5056] [MD5.3F11B20D12D89365D7721BDC860CE5F0] - (.AVAST Software - avast! Antivirus.) -- C:\Program Files\AVAST Software\Avast\AvastUI.exe [4858968] [PID.5072] [MD5.11E8D8272FDBE213ADE3DAD91427CE35] - (.OpenOffice.org - OpenOffice.org 3.3.) -- C:\Program Files (x86)\OpenOffice.org 3\program\soffice.exe [11322880] [PID.2844] [MD5.2337EC951C4AF6E1AF65D10BD9615BEB] - (.OpenOffice.org - OpenOffice.org 3.3.) -- C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin [11314688] [PID.4420] [MD5.95110A1C5A1D228AC1DDF6AB67D00BEB] - (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe [920472] [PID.2212] [MD5.3A32FAFEEE290E6E6C058DE59EC4EC88] - (.Nicolas Coolman - ZHPDiag.) -- C:\Program Files (x86)\ZHPDiag\ZHPDiag.exe [7478272] [PID.3428] [MD5.28D6701C710AD7BA3CB95E75F8F1A9AA] - (.AVAST Software - avast! Service.) -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe [46808] [PID.1212] [MD5.C2009C6A452BD07B30D773349589B762] - (.AVAST Software - avast! firewall service.) -- C:\Program Files\AVAST Software\Avast\afwServ.exe [137960] [PID.1296] [MD5.B1EA9681502EE57F87DB71D726288A5B] - (.Adobe Systems Incorporated - Adobe Acrobat Update Service.) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [65192] [PID.1784] [MD5.20F6F19FE9E753F2780DC2FA083AD597] - (.Apple Inc. - MobileDeviceService.) -- C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [37664] [PID.1808] [MD5.F2060A34C8A75BC24A9222EB4F8C07BD] - (.Apple Inc. - Bonjour Service.) -- C:\Program Files (x86)\Bonjour\mDNSResponder.exe [349472] [PID.1856] [MD5.EDE77ED190F62AE4508AE7C04B4DB5E8] - (.Nero AG - NService Application.) -- C:\Program Files (x86)\Motorola Media Link\Lite\NServiceEntry.exe [87368] [PID.1884] [MD5.673971B9C0AC52512700FE69D31FF3EC] - (.Dritek System Inc. - Dritek WMI Service.) -- C:\Program Files (x86)\Launch Manager\dsiwmis.exe [310352] [PID.1952] [MD5.816FD5A6F3C2F3D600900096632FC60E] - (.Acer Incorporated - Global Registration Service.) -- C:\Program Files (x86)\Packard Bell\Registration\GregHSRW.exe [1150496] [PID.2832] [MD5.1E2F802846EB944E0333EFEE7C9532A8] - (.Intel Corporation - Local Manageability Service.) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [268824] [PID.2860] [MD5.FA073BF55E99F21CFE3AFB023CFD81DC] - (.Pas de propriétaire - MotoHelper Service.) -- C:\Program Files (x86)\Motorola\MotoHelper\MotoHelperService.exe [223088] [PID.2892] [MD5.E556FE51AF531E1B75D6198929D8A4AF] - (.NewTech Infosystems, Inc. - Backup Manager Module.) -- C:\Program Files (x86)\NewTech Infosystems\Packard Bell MyBackup\IScheduleSvc.exe [255744] [PID.2948] [MD5.C3CDDD18F43D44AB713CF8C4916F7696] - (.Microsoft Corporation - Microsoft Application Virtualization Virtua.) -- C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe [219496] [PID.2184] [MD5.70DDE3A86DBEB1D6C3C30AD687B1877A] - (.Acer - Acer Update Service.) -- C:\Program Files\Packard Bell\Packard Bell Updater\UpdaterService.exe [240160] [PID.1504] [MD5.13693B6354DD6E72DC5131DA7D764B90] - (.Microsoft Corporation - Microsoft Application Virtualization Client.) -- C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe [508776] [PID.2976] [MD5.48362E5DB5CB2C000C514EE1F3890ACD] - (.Intel Corporation - IAStorDataSvc.) -- C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [13336] [PID.3088] [MD5.72794D112CBAFF3BC0C29BF7350D4741] - (.Microsoft Corporation - Microsoft Office Client Virtualization Serv.) -- C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.exe [822624] [PID.3472] [MD5.AF905F4966CFC8B973623AB150CD4B2B] - (.Intel Corporation - User Notification Service.) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2320920] [PID.2804] ~ Processes Running: Scanned in 00mn 02s ---\\ Google Chrome, Démarrage,Recherche,Extensions (G0,G1,G2) C:\Users\Lu'crôut\AppData\Local\Google\Chrome\User Data\Default\Preferences G2 - GCE: Preference [User Data\Default] [gaiilaahiahdejapggenmdmafpmbipje] DealPly v.3.0.7.2 (Désactivé) =>PUP.DealPly G2 - GCE: Preference [User Data\Default] [mpfapcdfbbledbojijcbcclmlieaoogk] I Want This v.1.17.49 (Désactivé) ~ Google Browser: 16 Legitimates Filtered in 00mn 00s ---\\ Mozilla Firefox, Plugins,Demarrage,Recherche,Extensions (P2,M0,M1,M2,M3) C:\Users\Lu'crôut\AppData\Roaming\Mozilla\Firefox\Profiles\rg1c8rl0.default\prefs.js C:\Users\Lu'crôut\AppData\Roaming\Mozilla\Firefox\Profiles\rg1c8rl0.default\user.js M3 - MFPP: Plugins - [Lu'crôut] -- C:\Users\Lu'crôut\AppData\Roaming\Mozilla\Firefox\Profiles\rg1c8rl0.default\searchplugins\conduit.xml M3 - MFPP: Plugins - [Lu'crôut] -- C:\Program Files (x86)\Mozilla FireFox\searchplugins\babylon.xml =>Toolbar.Babylon M2 - MFEP: prefs.js [Lu'crôut - rg1c8rl0.default\engine@conduit.com] [] Conduit Engine v3.3.3.2 (..) M2 - MFEP: prefs.js [Lu'crôut - rg1c8rl0.default\{4daac69c-cba7-45e2-9bc8-1044483d3352}] [] ST_France Community Toolbar v3.18.0.7 (..) M2 - MFEP: prefs.js [Lu'crôut - rg1c8rl0.default\{59994074-c06d-4a75-9768-49e5a8c21264}] [] Messenger Plus Live France Community Toolbar v3.18.0.7 (..) ~ Firefox Browser: 28 Legitimates Filtered in 00mn 00s ---\\ Internet Explorer, Démarrage,Recherche,URLSearchHook, Phishing (R0,R1,R3,R4) R3 - URLSearchHook: Messenger Plus Live France Toolbar [64Bits] - {59994074-c06d-4a75-9768-49e5a8c21264} . (.Conduit Ltd. - Conduit Toolbar.) (5, 5, 0, 10) -- C:\Program Files (x86)\Messenger_Plus_Live_France\tbMess.dll =>Toolbar.Conduit R3 - URLSearchHook: Softonic_France Toolbar [64Bits] - {4daac69c-cba7-45e2-9bc8-1044483d3352} . (.Conduit Ltd. - Conduit Toolbar.) (6.3.2.0) -- C:\Program Files (x86)\Softonic_France\prxtbSof0.dll =>Toolbar.Conduit ~ IE Browser: 22 Legitimates Filtered in 00mn 00s ---\\ Internet Explorer, Proxy Management (R5) R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local;192.168.*.* R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http=127.0.0.1:49697 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyHttp1.1 = 1 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll ~ Proxy management: Scanned in 00mn 00s ---\\ Analyse des lignes F0, F1, F2, F3 - IniFiles, Autoloading programs F2 - REG:system.ini: USERINIT=C:\Windows\system32\userinit.exe, F2 - REG:system.ini: Shell=C:\Windows\explorer.exe F2 - REG:system.ini: VMApplet=C:\Windows\System32\SystemPropertiesPerformance.exe ~ Keys: Scanned in 00mn 00s ---\\ Redirection du fichier Hosts (O1) ~ Le fichier hosts est sain (The hosts file is clean). ~ Hosts File: Scanned in 00mn 00s ~ Nombre de lignes (Lines number): 21 ---\\ Browser Helper Objects de navigateur (O2) O2 - BHO: CrossriderApp0002258 [64Bits] - {11111111-1111-1111-1111-110011221158} . (.215 Apps - I Want This BHO.) -- C:\Program Files (x86)\I Want This\I Want This.dll =>PUP.SpecialSavings O2 - BHO: Conduit Engine [64Bits] - {30F9B915-B755-4826-820B-08FBA6BD249D} . (.Conduit Ltd. - Conduit Toolbar.) -- C:\Program Files (x86)\ConduitEngine\ConduitEngine.dll =>Toolbar.Conduit O2 - BHO: Softonic_France [64Bits] - {4daac69c-cba7-45e2-9bc8-1044483d3352} . (.Conduit Ltd. - Conduit Toolbar.) -- C:\Program Files (x86)\Softonic_France\prxtbSof0.dll =>Toolbar.Conduit O2 - BHO: Messenger Plus Live France Toolbar [64Bits] - {59994074-c06d-4a75-9768-49e5a8c21264} . (.Conduit Ltd. - Conduit Toolbar.) -- C:\Program Files (x86)\Messenger_Plus_Live_France\tbMess.dll =>Toolbar.Conduit O2 - BHO: DealPly [64Bits] - {A6174F27-1FFF-E1D6-A93F-BA48AD5DD448} . (.DealPly Technologies Ltd - DealPly for Internet Explorer.) -- C:\Program Files (x86)\DealPly\DealPlyIE.dll =>PUP.DealPly ~ BHO: 17 Legitimates Filtered in 00mn 00s ---\\ Internet Explorer Toolbars (O3) O3 - Toolbar: Google Toolbar [64Bits] - [HKLM]{2318C2B1-4965-11d4-9B18-009027A5CD4F} . (.Google Inc. - Google Toolbar.) -- C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll O3 - Toolbar: (no name) [64Bits] - [HKLM]{318A227B-5E9F-45bd-8999-7F8F10CA4CF5} Clé orpheline ~ Toolbar: Scanned in 00mn 00s ---\\ Applications démarrées par registre & par dossier (O4) O4 - HKLM\..\Run: [NvCplDaemon] . (.NVIDIA Corporation - NVIDIA Display Properties Extension.) -- C:\Windows\system32\NvCpl.dll O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files (x86)\Synaptics\SynTP\SynTPEnh.exe (.not file.) O4 - HKLM\..\Run: [RtHDVCpl] . (.Realtek Semiconductor - Gestionnaire audio HD Realtek.) -- C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe O4 - HKLM\..\Run: [Acer ePower Management] . (.Acer Incorporated - ePowerTray.) -- C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerTray.exe O4 - HKCU\..\Run: [msnmsgr] . (.Microsoft Corporation - Windows Live Messenger.) -- C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe O4 - HKCU\..\Run: [Facebook Update] . (.Facebook Inc. - Programme d'installation de Facebook.) -- C:\Users\Lu'crôut\AppData\Local\Facebook\Update\FacebookUpdate.exe O4 - HKCU\..\Run: [EPSON SX430 Series] . (.SEIKO EPSON CORPORATION - EPSON Status Monitor 3.) -- C:\Windows\system32\spool\DRIVERS\x64\3\E_IATIHAE.exe O4 - HKCU\..\Run: [swg] . (.Google Inc. - GoogleToolbarNotifier.) -- C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe O4 - HKCU\..\Run: [Connexion SFR 9props.exe] . (.SFR - Propriétés de la connexion SFR.) -- C:\Program Files (x86)\SFR\Kit\9props.exe O4 - HKCU\..\Run: [EPSON Stylus SX400 Series] . (.SEIKO EPSON CORPORATION - EPSON Status Monitor 3.) -- C:\Windows\system32\spool\DRIVERS\x64\3\E_IATIEGE.exe O4 - HKCU\..\Run: [Spotify] . (.Spotify Ltd - Spotify.) -- C:\Users\Lu'crôut\AppData\Roaming\Spotify\Spotify.exe O4 - HKCU\..\Run: [Spotify Web Helper] . (.Spotify Ltd - SpotifyWebHelper.) -- C:\Users\Lu'crôut\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe O4 - HKLM\..\Wow6432Node\Run: [IAStorIcon] . (.Intel Corporation - IAStorIcon.) -- C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe O4 - HKLM\..\Wow6432Node\Run: [BackupManagerTray] . (.NewTech Infosystems, Inc. - Packard Bell MyBackup.) -- C:\Program Files (x86)\NewTech Infosystems\Packard Bell MyBackup\BackupManagerTray.exe O4 - HKLM\..\Wow6432Node\Run: [LManager] . (.Dritek System Inc. - Launch Manager Keyboard Application.) -- C:\Program Files (x86)\Launch Manager\LManager.exe O4 - HKLM\..\Wow6432Node\Run: [DivXUpdate] . (.Pas de propriétaire - DivX Update.) -- C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe O4 - HKLM\..\Wow6432Node\Run: [DivX Download Manager] . (.DivX, LLC - DivX Download Manager Service.) -- C:\Program Files (x86)\DivX\DivX Plus Web Player\DDmService.exe O4 - HKLM\..\Wow6432Node\Run: [mumservice] C:\Program Files\Motorola\Software Update\mumservice.exe (.not file.) O4 - HKLM\..\Wow6432Node\Run: [MFP Manager] C:\Program Files (x86)\MFP Server\MFPAgent.exe (.not file.) O4 - HKLM\..\Wow6432Node\Run: [Server Application] . (.Pas de propriétaire - ServoApp MFC Application.) -- C:\Windows\system32\ServoApp.exe O4 - HKLM\..\Wow6432Node\Run: [GDI Manager] . (.Edimax Technology Co., Ltd. - MFP Agent.) -- C:\Program Files (x86)\MFP Server\App\Common\MFPAgent.exe O4 - HKLM\..\Wow6432Node\Run: [SunJavaUpdateSched] . (.Sun Microsystems, Inc. - Java(TM) Update Scheduler.) -- C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe O4 - HKLM\..\Wow6432Node\Run: [QuickTime Task] . (.Apple Inc. - QuickTime Task.) -- C:\Program Files (x86)\QuickTime\QTTask.exe O4 - HKLM\..\Wow6432Node\Run: [iTunesHelper] . (.Apple Inc. - iTunesHelper.) -- C:\Program Files (x86)\iTunes\iTunesHelper.exe O4 - HKLM\..\Wow6432Node\Run: [Adobe ARM] . (.Adobe Systems Incorporated - Adobe Reader and Acrobat Manager.) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe O4 - HKLM\..\Wow6432Node\Run: [avast] . (.AVAST Software - avast! Antivirus.) -- C:\Program Files\AVAST Software\Avast\avastUI.exe O4 - HKUS\S-1-5-19\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files (x86)\Windows Sidebar\Sidebar.exe O4 - HKUS\S-1-5-20\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files (x86)\Windows Sidebar\Sidebar.exe O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe O4 - HKUS\S-1-5-21-1214210514-4104578939-908626983-1000\..\Run: [msnmsgr] . (.Microsoft Corporation - Windows Live Messenger.) -- C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe O4 - HKUS\S-1-5-21-1214210514-4104578939-908626983-1000\..\Run: [Facebook Update] . (.Facebook Inc. - Programme d'installation de Facebook.) -- C:\Users\Lu'crôut\AppData\Local\Facebook\Update\FacebookUpdate.exe O4 - HKUS\S-1-5-21-1214210514-4104578939-908626983-1000\..\Run: [EPSON SX430 Series] . (.SEIKO EPSON CORPORATION - EPSON Status Monitor 3.) -- C:\Windows\system32\spool\DRIVERS\x64\3\E_IATIHAE.exe O4 - HKUS\S-1-5-21-1214210514-4104578939-908626983-1000\..\Run: [swg] . (.Google Inc. - GoogleToolbarNotifier.) -- C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe O4 - HKUS\S-1-5-21-1214210514-4104578939-908626983-1000\..\Run: [Connexion SFR 9props.exe] . (.SFR - Propriétés de la connexion SFR.) -- C:\Program Files (x86)\SFR\Kit\9props.exe O4 - HKUS\S-1-5-21-1214210514-4104578939-908626983-1000\..\Run: [EPSON Stylus SX400 Series] . (.SEIKO EPSON CORPORATION - EPSON Status Monitor 3.) -- C:\Windows\system32\spool\DRIVERS\x64\3\E_IATIEGE.exe O4 - HKUS\S-1-5-21-1214210514-4104578939-908626983-1000\..\Run: [Spotify] . (.Spotify Ltd - Spotify.) -- C:\Users\Lu'crôut\AppData\Roaming\Spotify\Spotify.exe O4 - HKUS\S-1-5-21-1214210514-4104578939-908626983-1000\..\Run: [Spotify Web Helper] . (.Spotify Ltd - SpotifyWebHelper.) -- C:\Users\Lu'crôut\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe ~ Application: Scanned in 00mn 00s ---\\ Autres liens utilisateurs (O4) O4 - GS\TaskBar: Mozilla Firefox.lnk . (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe O4 - GS\TaskBar: Windows Explorer.lnk . (.Microsoft Corporation - Explorateur Windows.) -- C:\Windows\explorer.exe O4 - GS\TaskBar: Windows Live Messenger .lnk . (.Microsoft Corporation - Windows Live Messenger.) -- C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe O4 - GS\TaskBar: Windows Media Player.lnk . (.Microsoft Corporation - Lecteur Windows Media.) -- C:\Program Files (x86)\Windows Media Player\wmplayer.exe O4 - GS\Programs: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe O4 - GS\Programs: Spotify.lnk . (.Spotify Ltd - Spotify.) -- C:\Users\Lu'crôut\AppData\Roaming\Spotify\spotify.exe O4 - GS\QuickLaunch: Google Chrome.lnk . (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe O4 - GS\QuickLaunch: Launch Internet Explorer Browser.lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe O4 - GS\QuickLaunch: Mozilla Firefox.lnk . (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe O4 - GS\QuickLaunch: Packard Bell Games.lnk . (.WildTangent, Inc. - GameConsole.) -- C:\Program Files (x86)\Packard Bell Games\Packard Bell Game Console\GameConsole-wt.exe O4 - GS\Accessories: Internet Explorer (No Add-ons).lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe O4 - GS\Accessories: Private Character Editor.lnk . (.Microsoft Corporation - Éditeur de caractères privés.) -- C:\Windows\system32\eudcedit.exe O4 - GS\SendTo: AVS Mobile Uploader.lnk . (.Online Media Technologies Ltd. - AVS Mobile Uploader.) -- C:\Program Files (x86)\Common Files\AVSMedia\MobileUploader\AVSMobileUploader.exe O4 - GS\SendTo: AVS Video Burner.lnk . (.Online Media Technologies Ltd. - AVS Video Burner.) -- C:\Program Files (x86)\Common Files\AVSMedia\BurnerService\AVSVideoBurner.exe O4 - GS\SendTo: AVS Video Uploader.lnk . (.Online Media Technologies Ltd. - AVS Video Uploader.) -- C:\Program Files (x86)\Common Files\AVSMedia\VideoUploader\AVSVideoUploader.exe O4 - GS\SendTo: Fax Recipient.lnk . (.Microsoft Corporation - Microsoft Windows Fax and Scan.) -- C:\Windows\system32\WFS.exe O4 - GS\SendTo: Skype.lnk . (.Skype Technologies S.A. - Skype.) -- C:\Program Files (x86)\Skype\Phone\Skype.exe O4 - GS\Desktop: AVS Video Converter.lnk . (.Online Media Technologies Ltd. - Video Converter.) -- C:\Program Files (x86)\AVS4YOU\AVSVideoConverter\AVSVideoConverter.exe O4 - GS\Desktop: AVS4YOU Software Navigator.lnk . (.Online Media Technologies Ltd. - Pas de description.) -- C:\Program Files (x86)\AVS4YOU\AVSSoftwareNavigator\AVS4YOUSoftwareNavigator.exe O4 - GS\Desktop: RSND-2011-10-17-231216-37078151.avastlic.lnk . (...) -- C:\Users\Lu'crôut\Documents\Téléchargements\RSND-2011-10-17-231216-37078151.avastlic (.not file.) O4 - GS\Desktop: Spotify.lnk . (.Spotify Ltd - Spotify.) -- C:\Users\Lu'crôut\AppData\Roaming\Spotify\spotify.exe O4 - GS\Desktop: Windows Live Messenger .lnk . (.Microsoft Corporation - Windows Live Messenger.) -- C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe ~ Global Startup: Scanned in 00mn 00s ---\\ Modification Domaine/Adresses DNS (O17) O17 - HKLM\System\CCS\Services\Tcpip\..\{DE9D1981-1175-402E-AF5B-F029717FB409}: DhcpNameServer = 192.168.1.1 O17 - HKLM\System\CS1\Services\Tcpip\..\{DE9D1981-1175-402E-AF5B-F029717FB409}: DhcpNameServer = 192.168.1.1 O17 - HKLM\System\CS2\Services\Tcpip\..\{DE9D1981-1175-402E-AF5B-F029717FB409}: DhcpNameServer = 192.168.1.1 O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1 ~ Domain: Scanned in 00mn 00s ---\\ Protocole additionnel (O18) O18 - Handler: vbscript [64Bits] - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll O18 - Filter: text/xml [64Bits] - {807563E5-5146-11D5-A672-00B0D022E945} . (.Microsoft Corporation - Microsoft Office XML MIME Filter.) -- C:\Program Files\Common Files\Microsoft Shared\OFFICE12\MSOXMLMF.dll ~ Protocole Additionnel: Scanned in 00mn 00s ---\\ Liste des services NT non Microsoft et non désactivés (O23) O23 - Service: MotoHelper Service (MotoHelper) . (.Pas de propriétaire - MotoHelper Service.) - C:\Program Files (x86)\Motorola\MotoHelper\MotoHelperService.exe O23 - Service: Updater Service (Updater Service) . (.Acer - Acer Update Service.) - C:\Program Files\Packard Bell\Packard Bell Updater\UpdaterService.exe ~ Services: 18 Legitimates Filtered in 00mn 08s ---\\ Tâches planifiées en automatique (O39) [MD5.00000000000000000000000000000000] [APT] [At10] (...) -- C:\Users\Lu'crôut\AppData\Roaming\firefox.exe (.not file.) [0] [MD5.00000000000000000000000000000000] [APT] [At11] (...) -- C:\Users\Lu'crôut\AppData\Roaming\firefox.exe (.not file.) [0] [MD5.00000000000000000000000000000000] [APT] [At12] (...) -- C:\Users\Lu'crôut\AppData\Roaming\firefox.exe (.not file.) [0] [MD5.00000000000000000000000000000000] [APT] [At13] (...) -- C:\Users\Lu'crôut\AppData\Roaming\firefox.exe (.not file.) [0] [MD5.00000000000000000000000000000000] [APT] [At14] (...) -- C:\Users\Lu'crôut\AppData\Roaming\firefox.exe (.not file.) [0] [MD5.00000000000000000000000000000000] [APT] [At15] (...) -- C:\Users\Lu'crôut\AppData\Roaming\firefox.exe (.not file.) [0] [MD5.00000000000000000000000000000000] [APT] [At16] (...) -- C:\Users\Lu'crôut\AppData\Roaming\firefox.exe (.not file.) [0] [MD5.00000000000000000000000000000000] [APT] [At17] (...) -- C:\Users\Lu'crôut\AppData\Roaming\firefox.exe (.not file.) [0] [MD5.00000000000000000000000000000000] [APT] [At18] (...) -- C:\Users\Lu'crôut\AppData\Roaming\firefox.exe (.not file.) [0] [MD5.00000000000000000000000000000000] [APT] [At19] (...) -- C:\Users\Lu'crôut\AppData\Roaming\firefox.exe (.not file.) [0] [MD5.00000000000000000000000000000000] [APT] [At2] (...) -- C:\Users\Lu'crôut\AppData\Roaming\firefox.exe (.not file.) [0] [MD5.00000000000000000000000000000000] [APT] [At20] (...) -- C:\Users\Lu'crôut\AppData\Roaming\java.exe (.not file.) [0] [MD5.00000000000000000000000000000000] [APT] [At3] (...) -- C:\Users\Lu'crôut\AppData\Roaming\firefox.exe (.not file.) [0] [MD5.00000000000000000000000000000000] [APT] [At4] (...) -- C:\Users\Lu'crôut\AppData\Roaming\firefox.exe (.not file.) [0] [MD5.00000000000000000000000000000000] [APT] [At5] (...) -- C:\Users\Lu'crôut\AppData\Roaming\firefox.exe (.not file.) [0] [MD5.00000000000000000000000000000000] [APT] [At6] (...) -- C:\Users\Lu'crôut\AppData\Roaming\firefox.exe (.not file.) [0] [MD5.00000000000000000000000000000000] [APT] [At7] (...) -- C:\Users\Lu'crôut\AppData\Roaming\firefox.exe (.not file.) [0] [MD5.00000000000000000000000000000000] [APT] [At8] (...) -- C:\Users\Lu'crôut\AppData\Roaming\firefox.exe (.not file.) [0] [MD5.00000000000000000000000000000000] [APT] [At9] (...) -- C:\Users\Lu'crôut\AppData\Roaming\firefox.exe (.not file.) [0] [MD5.7E68E29CF66FBA108527BC38189636FF] [APT] [DealPlyUpdate] (.DealPly.) -- C:\Program Files (x86)\DealPly\DealPlyUpdate.exe [78000] =>PUP.DealPly [MD5.00000000000000000000000000000000] [APT] [{69AC2096-EB73-44E1-849A-11FF4A473ACB}] (...) -- C:\Users\Lu'crôut\Desktop\avira-antivir-personal-free_avira_antivir_personal_free_10.0.0.567_anglais_10821.exe (.not file.) [0] [MD5.00000000000000000000000000000000] [APT] [{DE0E41F9-60E1-4C83-A630-D278ACF08BD0}] (...) -- C:\Users\Lu'crôut\Downloads\Firefox Setup 3.6.6.exe (.not file.) [0] ~ Scheduled Task: 42 Legitimates Filtered in 00mn 06s ---\\ Logiciels installés (O42) O42 - Logiciel: Conduit Engine - (.Conduit Ltd..) [HKLM][64Bits] -- conduitEngine =>Toolbar.Conduit O42 - Logiciel: DealPly - (.DealPly.) [HKLM][64Bits] -- DealPly =>PUP.DealPly O42 - Logiciel: I Want This - (.215 Apps.) [HKLM][64Bits] -- I Want This =>PUP.SpecialSavings O42 - Logiciel: Softonic_France Toolbar - (.Softonic_France.) [HKLM][64Bits] -- Softonic_France Toolbar O42 - Logiciel: screensaver_1280_1024 - (...) [HKLM][64Bits] -- screensaver_1280_1024 ~ Logic: 186 Legitimates Filtered in 00mn 00s ---\\ HKCU & HKLM Software Keys [HKCU\Software\AppDataLow\Software\Crossrider] =>PUP.CrossRider [HKCU\Software\AppDataLow\Software\I Want This] [HKCU\Software\AppDataLow\Software\PriceGong] =>Adware.PriceGong [HKCU\Software\AppDataLow\Software\Softonic_France] [HKCU\Software\AppDataLow\Software\conduitEngine] =>Toolbar.Conduit [HKCU\Software\AppDataLow\Toolbar] [HKCU\Software\Cr_Installer] =>PUP.CrossRider [HKCU\Software\DealPly] =>PUP.DealPly [HKCU\Software\InstallCore] =>PUP.InstallCore [HKCU\Software\Softonic] [HKCU\Software\b6000c31] [HKLM\Software\Wow6432Node\Babylon] =>Toolbar.Babylon [HKLM\Software\Wow6432Node\Softonic_France] ~ Key Software: 272 Legitimates Filtered in 00mn 00s ---\\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43) O43 - CFD: 28/08/2011 - 15:04:58 - [3,967] ----D C:\Program Files (x86)\ConduitEngine =>Toolbar.Conduit O43 - CFD: 24/05/2013 - 21:54:18 - [0,375] ----D C:\Program Files (x86)\DealPly =>PUP.DealPly O43 - CFD: 27/05/2012 - 03:00:46 - [3,370] ----D C:\Program Files (x86)\I Want This O43 - CFD: 28/08/2011 - 15:05:11 - [11,409] ----D C:\Program Files (x86)\Softonic_France O43 - CFD: 18/03/2012 - 14:13:30 - [0,002] ----D C:\Program Files (x86)\Common Files\Akamai O43 - CFD: 27/05/2012 - 03:00:33 - [0] ----D C:\ProgramData\Babylon =>Toolbar.Babylon O43 - CFD: 28/06/2010 - 19:20:19 - [0,000] ----D C:\ProgramData\boost_interprocess O43 - CFD: 07/04/2013 - 23:37:43 - [0,722] ----D C:\ProgramData\InstallMate O43 - CFD: 29/10/2010 - 10:17:45 - [0,001] ----D C:\ProgramData\Partner O43 - CFD: 30/12/2011 - 02:26:34 - [0] ----D C:\Users\Lu'crôut\AppData\Roaming\A8AFE O43 - CFD: 08/01/2012 - 00:42:03 - [0] ----D C:\Users\Lu'crôut\AppData\Roaming\B09A8 O43 - CFD: 27/05/2012 - 03:00:33 - [0,006] ----D C:\Users\Lu'crôut\AppData\Roaming\Babylon =>Toolbar.Babylon O43 - CFD: 27/05/2012 - 03:00:36 - [0,058] ----D C:\Users\Lu'crôut\AppData\Local\I Want This ~ 3 Dossiers CLSID vides (CLSID Empty Folders) ~ Program Folder: 213 Legitimates Filtered in 00mn 40s ---\\ Derniers fichiers modifiés ou crées sous Windows et System32 (O44) O44 - LFC:[MD5.C85CAA31CD2C785B401E05E44B10EF5D] - 09/06/2013 - 23:38:05 ---A- . (...) -- C:\UsbFix [Clean 1] LUCRÔUT-PC.txt [16202] ~ Files: 29 Legitimates Filtered in 00mn 16s ---\\ Derniers fichiers créés dans Windows Prefetcher (O45) O45 - LFCP:[MD5.D0AAA791A0021C6F63CD51336420DA6B] - 10/06/2013 - 15:47:30 ---A- - C:\Windows\Prefetch\SPOTIFY.EXE-6E07BDC0.pf O45 - LFCP:[MD5.0D4E237D98CCFD038658E145427C96F8] - 10/06/2013 - 15:47:48 ---A- - C:\Windows\Prefetch\SERVOAPP.EXE-A7A1A29D.pf O45 - LFCP:[MD5.EC317D992086F82551B6F35CFE4CAB7F] - 14/05/2013 - 05:55:18 ---A- - C:\Windows\Prefetch\SKY735C.TMP-3B7CE351.pf ~ Prefetcher: 129 Legitimates Filtered in 00mn 01s ---\\ Microsoft Windows Policies System (O55) O55 - MWPS:[HKLM\...\Policies\System] - "EnableUIADesktopToggle"=0 O55 - MWPS:[HKLM\...\Policies\System] - "FilterAdministratorToken"=0 ~ MWPS: 16 Legitimates Filtered in 00mn 00s ---\\ Microsoft Windows Policies Explorer (O56) O56 - MWPE:[HKLM\...\policies\Explorer] - "NoActiveDesktopChanges"=1 O56 - MWPE:[HKLM\...\policies\Explorer] - "HideSCAHealth"=1 ~ MWPE Keys: 8 Legitimates Filtered in 00mn 00s ---\\ Liste des Drivers Système (O58) O58 - SDL:[MD5.2F6B34B83843F0C5118B63AC634F5BF4] - 14/07/2009 - 02:52:21 ---A- . (.Adaptec, Inc. - Adaptec Windows SAS/SATA Storport Driver.) -- C:\Windows\System32\Drivers\adp94xx.sys [491088] ~ Drivers: Scanned in 00mn 00s ---\\ Derniers fichiers modifiés ou crées (Utilisateur) (O61) O61 - LFC: 09/06/2013 - 22:53:08 ---A- C:\Users\Lu'crôut\Documents\LETTRE_MOTIV_FAUSTINE.odt [16179] O61 - LFC: 09/06/2013 - 22:58:43 -SHA- C:\Users\Lu'crôut\Documents\Thumbs.db [16896] ~ 2 Fichiers temporaires (Temporary files) ~ Files: 122 Legitimates Filtered in 05mn 50s ---\\ Liste des outils de nettoyage (O63) O63 - Logiciel: UsbFix By El Desaparecido - (.El Desaparecido - SosVirus.org.) [HKLM] -- Usbfix O63 - Logiciel: ZHPDiag 2013 - (.Nicolas Coolman.) [HKLM] -- ZHPDiag_is1 ~ ADS: Scanned in 00mn 00s ---\\ Start Menu Internet (O68) O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe ~ Keys: Scanned in 00mn 00s ---\\ Search Browser Infection (O69) O69 - SBI: C:\Users\Lu'crôut\AppData\Roaming\Mozilla\Firefox\Profiles\rg1c8rl0.default\searchplugins\conduit.xml O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("CT2542115..clientLogIsEnabled", true); O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("CT2542115..clientLogServiceUrl", "http://clientlog.users.conduit.com/ClientDiagnostics.asmx/ReportDiagnosticsEvent"); O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("CT2542115..uninstallLogServiceUrl", "http://uninstall.users.conduit.com/Uninstall.asmx/RegisterToolbarUninstallation"); O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("CT2542115.AboutPrivacyUrl", "http://www.conduit.com/privacy/Default.aspx"); O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("CT2542115.CTID", "CT2542115"); O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("CT2542115.CurrentServerDate", "28-11-2010"); O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("CT2542115.DialogsAlignMode", "LTR"); O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("CT2542115.DownloadReferralCookieData", ""); O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("CT2542115.EMailNotifierPollDate", "Sun Nov 28 2010 14:20:08 GMT+0100"); O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("CT2542115.FeedLastCount3702671119025834822", 366); O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("CT2542115.FeedPollDate129255209834915761", "Sun Nov 28 2010 14:20:09 GMT+0100"); O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("CT2542115.FeedPollDate129255209834915767", "Sun Nov 28 2010 14:20:09 GMT+0100"); O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("CT2542115.FeedPollDate129255209834915773", "Sun Nov 28 2010 14:20:09 GMT+0100"); O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("CT2542115.FeedPollDate129255209834915779", "Sun Nov 28 2010 14:20:09 GMT+0100"); O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("CT2542115.FeedPollDate129255209834915785", "Sun Nov 28 2010 14:20:09 GMT+0100"); O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("CT2542115.FeedPollDate129255209834915791", "Sun Nov 28 2010 14:20:09 GMT+0100"); O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("CT2542115.FeedPollDate129255209834915797", "Sun Nov 28 2010 14:20:09 GMT+0100"); O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("CT2542115.FeedPollDate129255209834915803", "Sun Nov 28 2010 14:20:09 GMT+0100"); O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("CT2542115.FeedPollDate129255209834915809", "Sun Nov 28 2010 14:20:09 GMT+0100"); O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("CT2542115.FeedPollDate129255209834915815", "Sun Nov 28 2010 14:20:09 GMT+0100"); O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("CT2542115.FeedPollDate129255209834915821", "Sun Nov 28 2010 14:20:09 GMT+0100"); O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("CT2542115.FeedPollDate129255209834915827", "Sun Nov 28 2010 14:20:09 GMT+0100"); O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("CT2542115.FeedPollDate129255209834915833", "Sun Nov 28 2010 14:20:09 GMT+0100"); O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("CT2542115.FeedPollDate129255209834915839", "Sun Nov 28 2010 14:20:10 GMT+0100"); O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("CT2542115.FeedPollDate129255209834915845", "Sun Nov 28 2010 14:20:10 GMT+0100"); O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("CT2542115.FeedPollDate129255209834915851", "Sun Nov 28 2010 14:20:10 GMT+0100"); O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("CT2542115.FeedPollDate129255209834915857", "Sun Nov 28 2010 14:20:10 GMT+0100"); O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("CT2542115.FeedPollDate129255209834915863", "Sun Nov 28 2010 14:20:14 GMT+0100"); O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("CT2542115.FeedPollDate129255209834915869", "Sun Nov 28 2010 14:20:14 GMT+0100"); O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("CT2542115.FeedPollDate129255209834915875", "Sun Nov 28 2010 14:20:14 GMT+0100"); O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("CT2542115.FeedPollDate129255209834915881", "Sun Nov 28 2010 14:20:14 GMT+0100"); O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("CT2542115.FeedTTL129255209834915761", 30); O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("CT2542115.FeedTTL129255209834915767", 2); O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("CT2542115.FeedTTL129255209834915773", 2); O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("CT2542115.FeedTTL129255209834915785", 2); O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("CT2542115.FeedTTL129255209834915791", 30); O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("CT2542115.FeedTTL129255209834915809", 5); O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("CT2542115.FeedTTL129255209834915815", 5); O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("CT2542115.FeedTTL129255209834915821", 5); O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("CT2542115.FeedTTL129255209834915839", 5); O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("CT2542115.FirstServerDate", "28-11-2010"); O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("CT2542115.FirstTime", true); O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("CT2542115.FirstTimeFF3", true); O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("CT2542115.FixPageNotFoundErrors", true); O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("CT2542115.GroupingServerCheckInterval", 1440); O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("CT2542115.GroupingServiceUrl", "http://grouping.services.conduit.com/"); O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("CT2542115.HasUserGlobalKeys", true); O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("CT2542115.Initialize", true); O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("CT2542115.InitializeCommonPrefs", true); O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("CT2542115.InstallationAndCookieDataSentCount", 1); O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("CT2542115.InstallationId", "integrated_CT2542115.exe"); O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("CT2542115.InstallationType", "ConduitIntegration"); O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("CT2542115.InstalledDate", "Sun Nov 28 2010 14:20:08 GMT+0100"); O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("CT2542115.InvalidateCache", false); O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("CT2542115.IsGrouping", false); O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("CT2542115.IsMulticommunity", false); O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("CT2542115.IsOpenThankYouPage", false); O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("CT2542115.IsOpenUninstallPage", true); O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("CT2542115.LanguagePackLastCheckTime", "Sun Nov 28 2010 14:20:08 GMT+0100"); O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("CT2542115.LanguagePackReloadIntervalMM", 1440); O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("CT2542115.LanguagePackServiceUrl", "http://translation.users.conduit.com/Translation.ashx"); O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("CT2542115.LastLogin_3.2.2.0", "Sun Nov 28 2010 14:20:08 GMT+0100"); O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("CT2542115.LatestVersion", "2.7.2.0"); O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("CT2542115.Locale", "fr-fr"); O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("CT2542115.MCDetectTooltipHeight", "83"); O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("CT2542115.MCDetectTooltipUrl", "http://@EB_INSTALL_LINK@/rank/tooltip/?version=1"); O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("CT2542115.MCDetectTooltipWidth", "295"); O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("CT2542115.RadioIsPodcast", false); O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("CT2542115.RadioLastCheckTime", "Sun Nov 28 2010 14:20:09 GMT+0100"); O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("CT2542115.RadioLastUpdateIPServer", "3"); O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("CT2542115.RadioLastUpdateServer", "3"); O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("CT2542115.RadioMediaID", "9962"); O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("CT2542115.RadioMediaType", "Media Player"); O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("CT2542115.RadioMenuSelectedID", "EBRadioMenu_CT25421159962"); O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("CT2542115.RadioStationName", "California%20Rock"); O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("CT2542115.RadioStationURL", "http://feedlive.net/california.asx"); O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("CT2542115.SearchFromAddressBarIsInit", true); O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("CT2542115.SearchFromAddressBarUrl", "http://search.conduit.com/ResultsExt.aspx?ctid=CT2542115&q="); O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("CT2542115.SearchInNewTabEnabled", true); O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("CT2542115.SearchInNewTabIntervalMM", 1440); O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("CT2542115.SearchInNewTabLastCheckTime", "Sun Nov 28 2010 14:20:08 GMT+0100"); O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("CT2542115.SearchInNewTabServiceUrl", "http://newtab.conduit-hosting.com/newtab/?ctid=EB_TOOLBAR_ID"); O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("CT2542115.SearchInNewTabUsageUrl", "http://Usage.Hosting.conduit-services.com/UsageService.asmx/UsersRequests?ctid=EB_T[...] O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("CT2542115.ServiceMapLastCheckTime", "Sun Nov 28 2010 14:20:07 GMT+0100"); O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("CT2542115.SettingsLastCheckTime", "Sun Nov 28 2010 14:20:07 GMT+0100"); O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("CT2542115.SettingsLastUpdate", "1288876389"); O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("CT2542115.ThirdPartyComponentsInterval", 504); O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("CT2542115.ThirdPartyComponentsLastCheck", "Sun Nov 28 2010 14:20:07 GMT+0100"); O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("CT2542115.ThirdPartyComponentsLastUpdate", "1255348267"); O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("CT2542115.TrusteLinkUrl", "http://www.truste.org/pvr.php?page=validate&softwareProgramId=101&sealid=112"); O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("CT2542115.UserID", "UN24380408680513188"); O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("CT2542115.WeatherNetwork", ""); O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("CT2542115.WeatherPollDate", "Sun Nov 28 2010 14:20:08 GMT+0100"); O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("CT2542115.WeatherUnit", "C"); O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("CT2542115.alertChannelId", "935078"); O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("CT2542115.myStuffEnabled", true); O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("CT2542115.myStuffPublihserMinWidth", 400); O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("CT2542115.myStuffSearchUrl", "http://Apps.conduit.com/search?q=SEARCH_TERM&SearchSourceOrigin=29&ctid=EB_TOOLBAR_ID&oct[...] O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("CT2542115.myStuffServiceIntervalMM", 1440); O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("CT2542115.myStuffServiceUrl", "http://mystuff.conduit-services.com/MyStuffService.ashx?ComponentId=EB_MY_STUFF_INSTANCE[...] O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("CT2542115.testingCtid", ""); O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("CT2542115.toolbarAppMetaDataLastCheckTime", "Sun Nov 28 2010 14:20:08 GMT+0100"); O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("CT2542115.toolbarContextMenuLastCheckTime", "Sun Nov 28 2010 14:20:09 GMT+0100"); O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("CT2567681.AboutPrivacyUrl", "http://www.conduit.com/privacy/Default.aspx"); O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("CT2567681.CTID", "CT2567681"); O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("CT2567681.CurrentServerDate", "29-6-2010"); O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("CT2567681.DialogsAlignMode", "LTR"); O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("CT2567681.DownloadReferralCookieData", ""); O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("CT2567681.EMailNotifierPollDate", "Tue Jun 29 2010 13:23:57 GMT+0200"); O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("CT2567681.FeedLastCount129132852755156787", 143); O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("CT2567681.FeedPollDate128746790824594437", "Tue Jun 29 2010 13:23:55 GMT+0200"); O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("CT2567681.FeedPollDate128746790988031938", "Tue Jun 29 2010 13:23:55 GMT+0200"); O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("CT2567681.FeedPollDate128746791145844439", "Tue Jun 29 2010 13:23:55 GMT+0200"); O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("CT2567681.FeedPollDate128746791280844460", "Tue Jun 29 2010 13:23:56 GMT+0200"); O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("CT2567681.FeedPollDate128746791444750814", "Tue Jun 29 2010 13:23:56 GMT+0200"); O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("CT2567681.FeedPollDate128746791615375007", "Tue Jun 29 2010 13:23:56 GMT+0200"); O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("CT2567681.FeedPollDate128746791787562545", "Tue Jun 29 2010 13:23:56 GMT+0200"); O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("CT2567681.FeedTTL128746791787562545", 5); O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("CT2567681.FirstServerDate", "29-6-2010"); O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("CT2567681.FirstTime", true); O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("CT2567681.FirstTimeFF3", true); O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("CT2567681.FirstTimeSettingsDone", true); O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("CT2567681.FixPageNotFoundErrors", true); O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("CT2567681.GroupingServerCheckInterval", 1440); O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("CT2567681.GroupingServiceUrl", "http://grouping.services.conduit.com/"); O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("CT2567681.Initialize", true); O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("CT2567681.InitializeCommonPrefs", true); O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("CT2567681.InstallationAndCookieDataSentCount", 1); O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("CT2567681.InstallationType", "UnknownIntegration"); O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("CT2567681.InstalledDate", "Tue Jun 29 2010 13:23:54 GMT+0200"); O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("CT2567681.InvalidateCache", false); O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("CT2567681.IsGrouping", false); O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("CT2567681.IsMulticommunity", false); O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("CT2567681.IsOpenThankYouPage", false); O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("CT2567681.IsOpenUninstallPage", true); O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("CT2567681.LanguagePackLastCheckTime", "Tue Jun 29 2010 13:23:57 GMT+0200"); O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("CT2567681.LanguagePackReloadIntervalMM", 1440); O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("CT2567681.LanguagePackServiceUrl", "http://translation.users.conduit.com/Translation.ashx"); O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("CT2567681.LastLogin_2.6.0.15", "Tue Jun 29 2010 13:23:55 GMT+0200"); O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("CT2567681.LatestVersion", "2.1.0.18"); O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("CT2567681.Locale", "fr-fr"); O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("CT2567681.LoginCache", 4); O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("CT2567681.MCDetectTooltipHeight", "83"); O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("CT2567681.MCDetectTooltipUrl", "http://@EB_INSTALL_LINK@/rank/tooltip/?version=1"); O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("CT2567681.MCDetectTooltipWidth", "295"); O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("CT2567681.RadioIsPodcast", false); O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("CT2567681.RadioLastCheckTime", "Tue Jun 29 2010 13:23:56 GMT+0200"); O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("CT2567681.RadioLastUpdateIPServer", "3"); O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("CT2567681.RadioLastUpdateServer", "3"); O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("CT2567681.RadioMediaID", "9962"); O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("CT2567681.RadioMediaType", "Media Player"); O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("CT2567681.RadioMenuSelectedID", "EBRadioMenu_CT25676819962"); O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("CT2567681.RadioStationName", "California%20Rock"); O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("CT2567681.RadioStationURL", "http://feedlive.net/california.asx"); O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("CT2567681.SHRINK_TOOLBAR", 1); O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("CT2567681.SavedHomepage", "resource:/browserconfig.properties"); O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("CT2567681.SearchEngine", "Recherche||http://search.conduit.com/Results.aspx?q=UCM_SEARCH_TERM&ctid=CT2567681&octid=EB_O[...] O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("CT2567681.SearchFromAddressBarIsInit", true); O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("CT2567681.SearchFromAddressBarUrl", "http://search.conduit.com/ResultsExt.aspx?ctid=CT2567681&q="); O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("CT2567681.SearchInNewTabEnabled", true); O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("CT2567681.SearchInNewTabIntervalMM", 1440); O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("CT2567681.SearchInNewTabLastCheckTime", "Tue Jun 29 2010 13:23:55 GMT+0200"); O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("CT2567681.SearchInNewTabServiceUrl", "http://newtab.conduit-hosting.com/newtab/?ctid=EB_TOOLBAR_ID"); O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("CT2567681.SearchInNewTabUsageUrl", "http://Usage.Hosting.conduit-services.com/UsageService.asmx/UsersRequests?ctid=EB_T[...] O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("CT2567681.SettingsCheckIntervalMin", 120); O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("CT2567681.SettingsLastCheckTime", "Tue Jun 29 2010 13:23:53 GMT+0200"); O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("CT2567681.SettingsLastUpdate", "1277714963"); O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("CT2567681.ThirdPartyComponentsInterval", 504); O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("CT2567681.ThirdPartyComponentsLastCheck", "Tue Jun 29 2010 13:23:53 GMT+0200"); O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("CT2567681.ThirdPartyComponentsLastUpdate", "1277714963"); O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("CT2567681.TrusteLinkUrl", "http://www.truste.org/pvr.php?page=validate&softwareProgramId=101&sealid=112"); O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("CT2567681.UserID", "UN74898829452201770"); O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("CT2567681.WeatherNetwork", ""); O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("CT2567681.WeatherPollDate", "Tue Jun 29 2010 13:23:58 GMT+0200"); O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("CT2567681.WeatherUnit", "C"); O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("CT2567681.alertChannelId", "960546"); O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("CT2567681.backendstorage.http://cmg1_conduit-widgets_com/miniquarium.miniquarium_closed", "66616C7365"); O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("CT2567681.clientLogIsEnabled", true); O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("CT2567681.clientLogServiceUrl", "http://clientlog.users.conduit.com/ClientDiagnostics.asmx/ReportDiagnosticsEvent"); O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("CT2567681.myStuffEnabled", true); O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("CT2567681.myStuffPublihserMinWidth", 400); O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("CT2567681.myStuffSearchUrl", "http://Apps.conduit.com/search?q=SEARCH_TERM&SearchSourceOrigin=29&ctid=EB_TOOLBAR_ID&oct[...] O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("CT2567681.myStuffServiceIntervalMM", 1440); O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("CT2567681.myStuffServiceUrl", "http://mystuff.conduit-services.com/MyStuffService.ashx?ComponentId=EB_MY_STUFF_INSTANCE[...] O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("CT2567681.uninstallLogServiceUrl", "http://uninstall.users.conduit.com/Uninstall.asmx/RegisterToolbarUninstallation"); O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("CommunityToolbar.CantToolbarBeEngineOwner", "CT2405727,CT2542115"); O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("CommunityToolbar.ETag.http://alerts.conduit-services.com/?aid=800210&fid=796029", "\"0\""); O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("CommunityToolbar.ETag.http://alerts.conduit-services.com/?aid=909619&fid=905414", "\"0\""); O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("CommunityToolbar.ETag.http://alerts.conduit-services.com/root/800210/796029/FR", "\"0\""); O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("CommunityToolbar.ETag.http://alerts.conduit-services.com/root/909619/905414/FR", "\"0\""); O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("CommunityToolbar.ETag.http://alerts.conduit-services.com/root/935078/930862/DEFAULT", "\"0\""); O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("CommunityToolbar.ETag.http://alerts.conduit-services.com/root/935078/930862/FR", "\"0\""); O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("CommunityToolbar.ETag.http://appsmetadata.toolbar.conduit-services.com/?ctid=CT2405727", "\"0\""); O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("CommunityToolbar.ETag.http://appsmetadata.toolbar.conduit-services.com/?ctid=CT2542115", "\"1279120045\""); O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("CommunityToolbar.ETag.http://contextmenu.toolbar.conduit-services.com/?name=SharedApps&locale=fr-fr", "a47lyj7cLWBfKLge[...] O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("CommunityToolbar.ETag.http://dynamicdialogs.alert.conduit-services.com/alert/dlg.pkg", "\"803651ba7facb1:0\""); O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("CommunityToolbar.ETag.http://servicemap.conduit-services.com/toolbar/", "\"634250095346670000\""); O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("CommunityToolbar.ETag.http://settings.engine.conduit-services.com/?browser=FF&lut=0", "634207581820000000"); O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("CommunityToolbar.ETag.http://settings.toolbar.conduit-services.com/?ctid=CT2405727&octid=CT2405727", "\"1288340248\""); O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("CommunityToolbar.ETag.http://settings.toolbar.conduit-services.com/?ctid=CT2542115&octid=CT2542115", "\"1288876389\""); O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("CommunityToolbar.ETag.http://storage.conduit.com/Newtab/Softonic/CT1351374.xml", "\"0331fdcf55aca1:0\""); O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("CommunityToolbar.ETag.http://translation.toolbar.conduit-services.com/?locale=en", "\"634168576518470000\""); O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("CommunityToolbar.ETag.http://translation.toolbar.conduit-services.com/?locale=fr-fr", "\"634168576518470000\""); O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("CommunityToolbar.EngineHiddenByUser", true); O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("CommunityToolbar.EngineOwner", "ConduitEngine"); =>Toolbar.Conduit O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("CommunityToolbar.EngineOwnerGuid", "engine@conduit.com"); O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("CommunityToolbar.EngineOwnerToolbarId", "conduitengine"); =>Toolbar.Conduit O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("CommunityToolbar.IsEngineShown", false); O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("CommunityToolbar.IsMyStuffImportedToEngine", true); O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("CommunityToolbar.OriginalEngineOwner", "CT2405727"); O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("CommunityToolbar.OriginalEngineOwnerGuid", "{9bb815eb-3f9f-4e11-9150-cb70e29b40fc}"); O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("CommunityToolbar.OriginalEngineOwnerToolbarId", "radio_bar_2"); O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("CommunityToolbar.SearchFromAddressBarSavedUrl", "chrome://browser-region/locale/region.properties"); O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("CommunityToolbar.ToolbarsList", "CT2567681,ConduitEngine,CT2542115"); =>Toolbar.Conduit O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("CommunityToolbar.ToolbarsList2", "CT2567681,CT2542115"); O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("CommunityToolbar.alert.alertDialogsGetterLastCheckTime", "Thu May 05 2011 18:54:49 GMT+0200"); O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("CommunityToolbar.alert.alertInfoInterval", 1440); O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("CommunityToolbar.alert.alertInfoLastCheckTime", "Sat Jun 25 2011 19:19:53 GMT+0200"); O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("CommunityToolbar.alert.clientsServerUrl", "http://alert.client.conduit.com"); O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("CommunityToolbar.alert.firstTimeAlertShown", true); O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("CommunityToolbar.alert.locale", "en"); O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("CommunityToolbar.alert.loginIntervalMin", 1440); O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("CommunityToolbar.alert.loginLastCheckTime", "Sun Jun 26 2011 15:02:45 GMT+0200"); O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("CommunityToolbar.alert.loginLastUpdateTime", "1305622559"); O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("CommunityToolbar.alert.messageShowTimeSec", 20); O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("CommunityToolbar.alert.servicesServerUrl", "http://alert.services.conduit.com"); O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("CommunityToolbar.alert.showTrayIcon", false); O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("CommunityToolbar.alert.userCloseIntervalMin", 300); O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("CommunityToolbar.alert.userId", "a18444fa-9ba5-4c9d-bf80-7a7c499219d2"); O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("CommunityToolbar.facebook.settingsLastCheckTime", "Sun Nov 28 2010 14:20:08 GMT+0100"); O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("CommunityToolbar.isAlertUrlAddedToFeedItemTable", true); O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("CommunityToolbar.isClickActionAddedToFeedItemTable", true); O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("CommunityToolbar.keywordURLSelectedCTID", "CT2405727"); O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("ConduitEngine.FirstServerDate", "11/02/2010 01"); =>Toolbar.Conduit O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("ConduitEngine.FirstTime", true); =>Toolbar.Conduit O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("ConduitEngine.FirstTimeFF3", true); =>Toolbar.Conduit O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("ConduitEngine.HasUserGlobalKeys", true); =>Toolbar.Conduit O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("ConduitEngine.HideEngineAfterRestart", false); =>Toolbar.Conduit O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("ConduitEngine.Initialize", true); =>Toolbar.Conduit O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("ConduitEngine.InitializeCommonPrefs", true); =>Toolbar.Conduit O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("ConduitEngine.InstalledDate", "Mon Nov 01 2010 23:15:09 GMT+0100"); =>Toolbar.Conduit O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("ConduitEngine.IsMulticommunity", false); =>Toolbar.Conduit O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("ConduitEngine.IsOpenThankYouPage", false); =>Toolbar.Conduit O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("ConduitEngine.IsOpenUninstallPage", true); =>Toolbar.Conduit O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("ConduitEngine.LanguagePackLastCheckTime", "Mon Nov 01 2010 23:15:09 GMT+0100"); =>Toolbar.Conduit O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("ConduitEngine.LastLogin_3.2.2.0", "Mon Nov 01 2010 23:15:10 GMT+0100"); =>Toolbar.Conduit O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("ConduitEngine.PublisherContainerWidth", 0); =>Toolbar.Conduit O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("ConduitEngine.SearchFromAddressBarIsInit", true); =>Toolbar.Conduit O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("ConduitEngine.SettingsLastCheckTime", "Mon Nov 01 2010 23:15:09 GMT+0100"); =>Toolbar.Conduit O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("ConduitEngine.UserID", "UN37555330044501434"); =>Toolbar.Conduit O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("ConduitEngine.engineLocale", "fr"); =>Toolbar.Conduit O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("ConduitEngine.enngineContextMenuLastCheckTime", "Mon Nov 01 2010 23:15:09 GMT+0100"); =>Toolbar.Conduit O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("ConduitEngine.initDone", true); =>Toolbar.Conduit O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("browser.search.defaultthis.engineName", "Radio Bar 2 Customized Web Search"); O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("browser.search.defaulturl", "http://search.conduit.com/ResultsExt.aspx?ctid=CT2405727&SearchSource=3&q={searchTerms}"); O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("extensions.BabylonToolbar.admin", false); =>Toolbar.Babylon O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("extensions.BabylonToolbar.aflt", "babsst"); =>Toolbar.Babylon O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("extensions.BabylonToolbar.babExt", ""); =>Toolbar.Babylon O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("extensions.BabylonToolbar.babTrack", "affID=110819"); =>Toolbar.Babylon O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("extensions.BabylonToolbar.bbDpng", 31); =>Toolbar.Babylon O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("extensions.BabylonToolbar.dfltSrch", false); =>Toolbar.Babylon O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("extensions.BabylonToolbar.hmpg", false); =>Toolbar.Babylon O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("extensions.BabylonToolbar.id", "b09a8afe000000000000701a04ef3e1b"); =>Toolbar.Babylon O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("extensions.BabylonToolbar.instlDay", "15487"); =>Toolbar.Babylon O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("extensions.BabylonToolbar.instlRef", "sst"); =>Toolbar.Babylon O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("extensions.BabylonToolbar.lastDP", 31); =>Toolbar.Babylon O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("extensions.BabylonToolbar.lastVrsnTs", "1.5.3.173:00:52"); =>Toolbar.Babylon O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("extensions.BabylonToolbar.mntrFFxVrsn", "15.0"); =>Toolbar.Babylon O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("extensions.BabylonToolbar.newTab", true); =>Toolbar.Babylon O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("extensions.BabylonToolbar.newTabUrl", "http://search.babylon.com/?babsrc=NT_FFUP"); =>Toolbar.Babylon O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("extensions.BabylonToolbar.noFFXTlbr", false); =>Toolbar.Babylon O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("extensions.BabylonToolbar.prdct", "BabylonToolbar"); =>Toolbar.Babylon O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("extensions.BabylonToolbar.propectorlck", 84998623); =>Toolbar.Babylon O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("extensions.BabylonToolbar.prtnrId", "babylon"); =>Toolbar.Babylon O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("extensions.BabylonToolbar.ptch_0717", true); =>Toolbar.Babylon O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("extensions.BabylonToolbar.smplGrp", "none"); =>Toolbar.Babylon O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("extensions.BabylonToolbar.srcExt", "ss"); =>Toolbar.Babylon O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("extensions.BabylonToolbar.tlbrId", "tb9"); =>Toolbar.Babylon O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("extensions.BabylonToolbar.vrsn", "1.5.3.17"); =>Toolbar.Babylon O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("extensions.BabylonToolbar.vrsnTs", "1.5.3.173:00:52"); =>Toolbar.Babylon O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("extensions.BabylonToolbar.vrsni", "1.5.3.17"); =>Toolbar.Babylon O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("extensions.BabylonToolbar_i.aflt", "babsst"); =>Toolbar.Babylon O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("extensions.BabylonToolbar_i.babExt", ""); =>Toolbar.Babylon O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("extensions.BabylonToolbar_i.babTrack", "affID=110819"); =>Toolbar.Babylon O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("extensions.BabylonToolbar_i.hardId", "b09a8afe000000000000701a04ef3e1b"); =>Toolbar.Babylon O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("extensions.BabylonToolbar_i.id", "b09a8afe000000000000701a04ef3e1b"); =>Toolbar.Babylon O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("extensions.BabylonToolbar_i.instlDay", "15487"); =>Toolbar.Babylon O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("extensions.BabylonToolbar_i.instlRef", "sst"); =>Toolbar.Babylon O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("extensions.BabylonToolbar_i.prdct", "BabylonToolbar"); =>Toolbar.Babylon O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("extensions.BabylonToolbar_i.prtnrId", "babylon"); =>Toolbar.Babylon O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("extensions.BabylonToolbar_i.smplGrp", "none"); =>Toolbar.Babylon O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("extensions.BabylonToolbar_i.srcExt", "ss"); =>Toolbar.Babylon O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("extensions.BabylonToolbar_i.tlbrId", "tb9"); =>Toolbar.Babylon O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("extensions.BabylonToolbar_i.vrsn", "1.5.3.17"); =>Toolbar.Babylon O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("extensions.BabylonToolbar_i.vrsnTs", "1.5.3.173:00:52"); =>Toolbar.Babylon O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("extensions.BabylonToolbar_i.vrsni", "1.5.3.17"); =>Toolbar.Babylon O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("extensions.crossrider.bic", "1378bcf59f6b3665f6e7ca1d784f4c1e"); =>PUP.CrossRider O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("extensions.crossriderapp2258.2258.InstallationThankYouPage", true); =>PUP.CrossRider O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("extensions.crossriderapp2258.2258.InstallationTime", 1338080431); =>PUP.CrossRider O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("extensions.crossriderapp2258.2258.InstallationUserSettings.searchUserConifrmation", false); =>PUP.CrossRider O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("extensions.crossriderapp2258.2258.InstallationUserSettings.setHomepage", false); =>PUP.CrossRider O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("extensions.crossriderapp2258.2258.InstallationUserSettings.setNewTab", false); =>PUP.CrossRider O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("extensions.crossriderapp2258.2258.InstallationUserSettings.setSearch", false); =>PUP.CrossRider O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("extensions.crossriderapp2258.2258.active", true); =>PUP.CrossRider O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("extensions.crossriderapp2258.2258.addressbar", ""); =>PUP.CrossRider O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("extensions.crossriderapp2258.2258.addressbarenhanced", ""); =>PUP.CrossRider O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("extensions.crossriderapp2258.2258.affid", "0"); =>PUP.CrossRider O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("extensions.crossriderapp2258.2258.backgroundjs", "\n\n\"undefined\"!=typeof _GPL_BG_NEW&&appAPI.webRequest&&appAPI.webR[...] =>PUP.CrossRider O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("extensions.crossriderapp2258.2258.backgroundver", 16); =>PUP.CrossRider O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("extensions.crossriderapp2258.2258.can_run_bg_code", true); =>PUP.CrossRider O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("extensions.crossriderapp2258.2258.certdomaininstaller", ""); =>PUP.CrossRider O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("extensions.crossriderapp2258.2258.changeprevious", false); =>PUP.CrossRider O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("extensions.crossriderapp2258.2258.cookie.InstallationTime.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100"); =>PUP.CrossRider O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("extensions.crossriderapp2258.2258.cookie.InstallationTime.value", "1338080431"); =>PUP.CrossRider O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("extensions.crossriderapp2258.2258.cookie.InstallerParams.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100"); =>PUP.CrossRider O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("extensions.crossriderapp2258.2258.cookie._GPL_aoi.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100"); =>PUP.CrossRider O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("extensions.crossriderapp2258.2258.cookie._GPL_aoi.value", "1338080431"); =>PUP.CrossRider O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("extensions.crossriderapp2258.2258.cookie._GPL_blocklist.expiration", "Sun Jan 06 2013 15:11:41 GMT+0100"); =>PUP.CrossRider O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("extensions.crossriderapp2258.2258.cookie._GPL_blocklist.value", "%22nonexistantdomain.com%22"); =>PUP.CrossRider O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("extensions.crossriderapp2258.2258.cookie._GPL_country_code.expiration", "Sat Jan 12 2013 15:25:37 GMT+0100"); =>PUP.CrossRider O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("extensions.crossriderapp2258.2258.cookie._GPL_country_code.value", "%22FR%22"); =>PUP.CrossRider O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("extensions.crossriderapp2258.2258.cookie._GPL_crr.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100"); =>PUP.CrossRider O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("extensions.crossriderapp2258.2258.cookie._GPL_crr.value", "1357425473"); =>PUP.CrossRider O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("extensions.crossriderapp2258.2258.cookie._GPL_currenttime.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100"); =>PUP.CrossRider O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("extensions.crossriderapp2258.2258.cookie._GPL_currenttime.value", "%221356061492%22"); =>PUP.CrossRider O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("extensions.crossriderapp2258.2258.cookie._GPL_hotfix20111102645.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100"); =>PUP.CrossRider O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("extensions.crossriderapp2258.2258.cookie._GPL_hotfix20111102645.value", "%221%22"); =>PUP.CrossRider O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("extensions.crossriderapp2258.2258.cookie._GPL_installer_params.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100"); =>PUP.CrossRider O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("extensions.crossriderapp2258.2258.cookie._GPL_installer_params.value", "%7B%22source_id%22%3A%220%22%2C%22sub_id%22%3A%[...] =>PUP.CrossRider O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("extensions.crossriderapp2258.2258.cookie._GPL_parent_zoneid.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100"); =>PUP.CrossRider O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("extensions.crossriderapp2258.2258.cookie._GPL_parent_zoneid.value", "%2214019%22"); =>PUP.CrossRider O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("extensions.crossriderapp2258.2258.cookie._GPL_pc_20120828.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100"); =>PUP.CrossRider O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("extensions.crossriderapp2258.2258.cookie._GPL_pc_20120828.value", "1346406558001"); =>PUP.CrossRider O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("extensions.crossriderapp2258.2258.cookie._GPL_product_id.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100"); =>PUP.CrossRider O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("extensions.crossriderapp2258.2258.cookie._GPL_product_id.value", "%2221%22"); =>PUP.CrossRider O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("extensions.crossriderapp2258.2258.cookie._GPL_zoneid.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100"); =>PUP.CrossRider O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("extensions.crossriderapp2258.2258.cookie._GPL_zoneid.value", "%2240331%22"); =>PUP.CrossRider O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("extensions.crossriderapp2258.2258.cookie.dbtest.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100"); =>PUP.CrossRider O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("extensions.crossriderapp2258.2258.cookie.dbtest.value", "1346024106557"); =>PUP.CrossRider O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("extensions.crossriderapp2258.2258.cookie.lastrequest.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100"); =>PUP.CrossRider O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("extensions.crossriderapp2258.2258.cookie.lastrequest.value", "%7B%22path%22%3A%22/art/Ninse-and-Me-346941541%22%2C%22ho[...] =>PUP.CrossRider O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("extensions.crossriderapp2258.2258.description", "I Want This!"); =>PUP.CrossRider O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("extensions.crossriderapp2258.2258.domain", ""); =>PUP.CrossRider O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("extensions.crossriderapp2258.2258.emailsig", ""); =>PUP.CrossRider O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("extensions.crossriderapp2258.2258.enablesearch", false); =>PUP.CrossRider O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("extensions.crossriderapp2258.2258.exposesites", ""); =>PUP.CrossRider O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("extensions.crossriderapp2258.2258.fbremoteurl", ""); =>PUP.CrossRider O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("extensions.crossriderapp2258.2258.group", 0); =>PUP.CrossRider O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("extensions.crossriderapp2258.2258.homepage", ""); =>PUP.CrossRider O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("extensions.crossriderapp2258.2258.iframe", false); =>PUP.CrossRider O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("extensions.crossriderapp2258.2258.internaldb.InstallerIdentifiers.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100"); =>PUP.CrossRider O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("extensions.crossriderapp2258.2258.internaldb.InstallerIdentifiers.value", "%7B%22installer_bic%22%3A%22351AD3BFCE204834[...] =>PUP.CrossRider O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("extensions.crossriderapp2258.2258.internaldb.Resources_appVer.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100"); =>PUP.CrossRider O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("extensions.crossriderapp2258.2258.internaldb.Resources_appVer.value", "98"); =>PUP.CrossRider O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("extensions.crossriderapp2258.2258.internaldb.Resources_lastVersion.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100"); =>PUP.CrossRider O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("extensions.crossriderapp2258.2258.internaldb.Resources_lastVersion.value", "0"); =>PUP.CrossRider O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("extensions.crossriderapp2258.2258.internaldb.Resources_meta.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100"); =>PUP.CrossRider O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("extensions.crossriderapp2258.2258.internaldb.Resources_meta.value", "%7B%7D"); =>PUP.CrossRider O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("extensions.crossriderapp2258.2258.internaldb.Resources_nextCheck.expiration", "Sun Jan 06 2013 05:37:55 GMT+0100"); =>PUP.CrossRider O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("extensions.crossriderapp2258.2258.internaldb.Resources_nextCheck.value", "true"); =>PUP.CrossRider O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("extensions.crossriderapp2258.2258.internaldb.Resources_queue.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100"); =>PUP.CrossRider O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("extensions.crossriderapp2258.2258.internaldb.Resources_queue.value", "%7B%7D"); =>PUP.CrossRider O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("extensions.crossriderapp2258.2258.js", "\n\nif(\"undefined\"!=typeof _GPL_PLUGIN){var _GPL_=function(){_GPL_PLUGIN.star[...] =>PUP.CrossRider O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("extensions.crossriderapp2258.2258.manifesturl", ""); =>PUP.CrossRider O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("extensions.crossriderapp2258.2258.name", "I Want This"); =>PUP.CrossRider O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("extensions.crossriderapp2258.2258.newtab", ""); =>PUP.CrossRider O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("extensions.crossriderapp2258.2258.opensearch", ""); =>PUP.CrossRider O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("extensions.crossriderapp2258.2258.plugins.plugin_1000014.code", "Array.prototype.indexOf||(Array.prototype.indexOf=func[...] =>PUP.CrossRider O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("extensions.crossriderapp2258.2258.plugins.plugin_1000014.ver", 10); =>PUP.CrossRider O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("extensions.crossriderapp2258.2258.plugins.plugin_1000015.code", "var _GPL_BG={vars:{},rules:{},started:!1,log:function([...] =>PUP.CrossRider O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("extensions.crossriderapp2258.2258.plugins.plugin_1000015.ver", 4); =>PUP.CrossRider O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("extensions.crossriderapp2258.2258.plugins.plugin_13.code", "(function(a){a.selectedText=function(e,c){function d(){if(w[...] =>PUP.CrossRider O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("extensions.crossriderapp2258.2258.plugins.plugin_13.ver", 2); =>PUP.CrossRider O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("extensions.crossriderapp2258.2258.plugins.plugin_14.code", "if(typeof(appAPI)===\"undefined\"){appAPI={}}appAPI.JSON={}[...] =>PUP.CrossRider O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("extensions.crossriderapp2258.2258.plugins.plugin_14.ver", 2); =>PUP.CrossRider O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("extensions.crossriderapp2258.2258.plugins.plugin_15.code", "(function(e){function u(c,b){for(css_prop in b)b.hasOwnProp[...] =>PUP.CrossRider O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("extensions.crossriderapp2258.2258.plugins.plugin_15.name", "FacebookFFIE"); =>PUP.CrossRider O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("extensions.crossriderapp2258.2258.plugins.plugin_15.ver", 1); =>PUP.CrossRider O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("extensions.crossriderapp2258.2258.plugins.plugin_16.code", "if((typeof isBackground===\"undefined\"||isBackground!=true[...] =>PUP.CrossRider O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("extensions.crossriderapp2258.2258.plugins.plugin_16.ver", 4); =>PUP.CrossRider O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("extensions.crossriderapp2258.2258.plugins.plugin_17.code", "if(typeof window!==\"undefined\"){\n/*!\n * jQuery JavaScri[...] =>PUP.CrossRider O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("extensions.crossriderapp2258.2258.plugins.plugin_17.ver", 3); =>PUP.CrossRider O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("extensions.crossriderapp2258.2258.plugins.plugin_47.code", "(function(){appAPI.ready=function(a){appAPI.resources.isRea[...] =>PUP.CrossRider O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("extensions.crossriderapp2258.2258.plugins.plugin_47.name", "resources_background"); =>PUP.CrossRider O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("extensions.crossriderapp2258.2258.plugins.plugin_47.ver", 1); =>PUP.CrossRider O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("extensions.crossriderapp2258.2258.plugins.plugin_64.code", "(function(){var h=\"__CR_EMPTY_CHANNEL__\";var d=function(j[...] =>PUP.CrossRider O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("extensions.crossriderapp2258.2258.plugins.plugin_64.name", "appApiMessage"); =>PUP.CrossRider O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("extensions.crossriderapp2258.2258.plugins.plugin_64.ver", 1); =>PUP.CrossRider O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("extensions.crossriderapp2258.2258.plugins.plugin_72.code", "if(appAPI.__should_activate_validation__===true){(function([...] =>PUP.CrossRider O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("extensions.crossriderapp2258.2258.plugins.plugin_72.name", "appApiValidation"); =>PUP.CrossRider O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("extensions.crossriderapp2258.2258.plugins.plugin_72.ver", 1); =>PUP.CrossRider O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("extensions.crossriderapp2258.2258.plugins_lists.plugins_0", "17,14,16,64,72,47,1000015"); =>PUP.CrossRider O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("extensions.crossriderapp2258.2258.plugins_lists.plugins_1", "17,14,13,16,15,64,72,1000014"); =>PUP.CrossRider O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("extensions.crossriderapp2258.2258.pluginsurl", "http://app-static.crossrider.com/plugin/apps/2258/plugins/086/ff/plugin[...] =>PUP.CrossRider O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("extensions.crossriderapp2258.2258.pluginsversion", 23); =>PUP.CrossRider O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("extensions.crossriderapp2258.2258.premium", true); =>PUP.CrossRider O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("extensions.crossriderapp2258.2258.publisher", "215 Apps"); =>PUP.SpecialSavings O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("extensions.crossriderapp2258.2258.searchstatus", 0); =>PUP.CrossRider O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("extensions.crossriderapp2258.2258.setnewtab", false); =>PUP.CrossRider O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("extensions.crossriderapp2258.2258.settingsurl", ""); =>PUP.CrossRider O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("extensions.crossriderapp2258.2258.thankyou", "http://iw.antthis.com/thankyou.html"); =>PUP.CrossRider O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("extensions.crossriderapp2258.2258.updateinterval", 360); =>PUP.CrossRider O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("extensions.crossriderapp2258.2258.ver", 98); =>PUP.CrossRider O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("extensions.crossriderapp2258.73407340.InstallationTime", 1338080451); =>PUP.CrossRider O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("extensions.crossriderapp2258.73407340.backgroundjs", "\n\n\"undefined\"!=typeof _GPL_BG_NEW&&appAPI.webRequest&&appAPI.[...] =>PUP.CrossRider O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("extensions.crossriderapp2258.73407340.backgroundver", 15); =>PUP.CrossRider O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("extensions.crossriderapp2258.73407340.cookie.InstallationTime.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100"); =>PUP.CrossRider O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("extensions.crossriderapp2258.73407340.cookie.InstallationTime.value", "1338080451"); =>PUP.CrossRider O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("extensions.crossriderapp2258.73407340.js", "\n\nif(\"undefined\"!=typeof _GPL_PLUGIN){var _GPL_=function(){_GPL_PLUGIN.[...] =>PUP.CrossRider O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("extensions.crossriderapp2258.73407340.plugins.plugin_1000014.code", "Array.prototype.indexOf||(Array.prototype.indexOf=[...] =>PUP.CrossRider O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("extensions.crossriderapp2258.73407340.plugins.plugin_1000014.ver", 7); =>PUP.CrossRider O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("extensions.crossriderapp2258.73407340.plugins.plugin_1000015.code", "var _GPL_BG={vars:{},rules:{},started:!1,log:funct[...] =>PUP.CrossRider O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("extensions.crossriderapp2258.73407340.plugins.plugin_1000015.ver", 3); =>PUP.CrossRider O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("extensions.crossriderapp2258.73407340.plugins.plugin_13.code", "(function(a){a.selectedText=function(e,c){function d(){[...] =>PUP.CrossRider O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("extensions.crossriderapp2258.73407340.plugins.plugin_13.ver", 2); =>PUP.CrossRider O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("extensions.crossriderapp2258.73407340.plugins.plugin_14.code", "if(typeof(appAPI)===\"undefined\"){appAPI={}}appAPI.JSO[...] =>PUP.CrossRider O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("extensions.crossriderapp2258.73407340.plugins.plugin_14.ver", 2); =>PUP.CrossRider O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("extensions.crossriderapp2258.73407340.plugins.plugin_15.code", "(function(f){var u={};var e=Math.floor(Math.random()*99[...] =>PUP.CrossRider O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("extensions.crossriderapp2258.73407340.plugins.plugin_15.name", "FacebookFFIE"); =>PUP.CrossRider O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("extensions.crossriderapp2258.73407340.plugins.plugin_15.ver", 1); =>PUP.CrossRider O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("extensions.crossriderapp2258.73407340.plugins.plugin_16.code", "(function(f,b){if(typeof(b)==\"undefined\"){b={}}var d=[...] =>PUP.CrossRider O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("extensions.crossriderapp2258.73407340.plugins.plugin_16.ver", 3); =>PUP.CrossRider O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("extensions.crossriderapp2258.73407340.plugins.plugin_17.code", "if(typeof window!==\"undefined\"){\n/*!\n * jQuery Java[...] =>PUP.CrossRider O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("extensions.crossriderapp2258.73407340.plugins.plugin_17.ver", 3); =>PUP.CrossRider O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("extensions.crossriderapp2258.73407340.plugins.plugin_47.code", "(function(){appAPI.ready=function(a){appAPI.resources.i[...] =>PUP.CrossRider O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("extensions.crossriderapp2258.73407340.plugins.plugin_47.name", "resources_background"); =>PUP.CrossRider O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("extensions.crossriderapp2258.73407340.plugins.plugin_47.ver", 1); =>PUP.CrossRider O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("extensions.crossriderapp2258.73407340.plugins_lists.plugins_0", "17,14,16,47,1000015"); =>PUP.CrossRider O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("extensions.crossriderapp2258.73407340.plugins_lists.plugins_1", "17,14,13,16,15,1000014"); =>PUP.CrossRider O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("extensions.crossriderapp2258.73407340.pluginsversion", 15); =>PUP.CrossRider O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("extensions.crossriderapp2258.73407340.ver", 90); =>PUP.CrossRider O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("extensions.crossriderapp2258.adsOldValue", -1); =>PUP.CrossRider O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("extensions.crossriderapp2258.apps", "2258"); =>PUP.CrossRider O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("extensions.crossriderapp2258.bic", "1378bcf59f6b3665f6e7ca1d784f4c1e"); =>PUP.CrossRider O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("extensions.crossriderapp2258.cid", 2258); =>PUP.CrossRider O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("extensions.crossriderapp2258.firstrun", false); =>PUP.CrossRider O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("extensions.crossriderapp2258.hadappinstalled", true); =>PUP.CrossRider O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("extensions.crossriderapp2258.installationdate", 1338080451); =>PUP.CrossRider O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("extensions.crossriderapp2258.lastcheck", 22624687); =>PUP.CrossRider O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("extensions.crossriderapp2258.lastcheckitem", 22624687); =>PUP.CrossRider O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("extensions.crossriderapp2258.misc.lastBgWorkerTimer", "1340746605779"); =>PUP.CrossRider O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("extensions.crossriderapp2258.misc.lastDomWorkerTimer", "1340746605776"); =>PUP.CrossRider O69 - SBI: prefs.js [Lu'crôut - rg1c8rl0.default] user_pref("extensions.crossriderapp2258.modetype", "production"); =>PUP.CrossRider O69 - SBI: SearchScopes [HKCU] ${searchCLSID} - (@ieframe.dll,-12512) - http://search.live.com O69 - SBI: SearchScopes [HKCU] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} - (Bing) - http://www.bing.com O69 - SBI: SearchScopes [HKCU] {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} [DefaultScope] - (Search the web (Babylon)) - http://search.babylon.com =>Adware.IMBooster O69 - SBI: SearchScopes [HKCU] {67A2568C-7A0A-4EED-AECC-B5405DE63B64} - (Google) - http://www.google.com O69 - SBI: SearchScopes [HKCU] {6A1806CD-94D4-4689-BA73-E35EA1EA9990} - (Google) - http://www.google.com O69 - SBI: SearchScopes [HKCU] {afdbddaa-5d3f-42ee-b79c-185a7020515b} - (Messenger Plus Live France Customized Web Search) - http://search.conduit.com O69 - SBI: SearchScopes [HKCU] {B44A2790-C086-471B-A1E0-3595F83FE8EA} - (Yahoo! Search) - http://fr.search.yahoo.com O69 - SBI: SearchScopes [HKUS\.DEFAULT] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} - (Bing) - http://www.bing.com O69 - SBI: SearchScopes [HKUS\.DEFAULT] {6A1806CD-94D4-4689-BA73-E35EA1EA9990} [DefaultScope] - (Google) - http://www.google.com O69 - SBI: SearchScopes [HKUS\S-1-5-18] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} - (Bing) - http://www.bing.com O69 - SBI: SearchScopes [HKUS\S-1-5-18] {6A1806CD-94D4-4689-BA73-E35EA1EA9990} [DefaultScope] - (Google) - http://www.google.com ~ Keys: Scanned in 00mn 00s ---\\ Crack & Keygen Files (O82) C:\Users\Lu'crôut\Desktop\CS4_FR_mart\Adobe CS4 Master Collection Keygen.exe C:\Users\Lu'crôut\Desktop\CS4_FR_mart\Adobe CS4 Master Collection Keygen.exe ~ Files: Scanned in 01mn 20s ---\\ Recherche particuliere à la racine de certains dossiers (O84) [MD5.4945092A7D29EA96B1C4E82DC8CC905A] [SPRF][21/02/2011] (...) -- C:\ProgramData\ezsidmv.dat [56] [MD5.376E0ACBD78C01A78A6221BFFC4B7795] [SPRF][02/10/2012] (...) -- C:\Users\Lu'crôut\AppData\Roaming\wklnhst.dat [1430] [MD5.4EF33D516F31BEB1C9847D1FDA69375C] [SPRF][10/06/2013] (...) -- C:\Users\Lu'crôut\Desktop\adwcleaner.exe [648201] [MD5.1CEB676AFB674B495537413EB652F010] [SPRF][07/01/2012] (.Pas de propriétaire - AVAST Software Setup Engine.) -- C:\Users\Lu'crôut\Desktop\setup_ais.exe [87604152] [MD5.32775BB26A6C98C354D962077F37206D] [SPRF][09/06/2013] (.El Desaparecido - SosVirus.org - UsbFix - Remove malware from yours drive!.) -- C:\Users\Lu'crôut\Desktop\UsbFix.exe [1048628] [MD5.8EE509FEE63CB89AB1D763F644ACFED2] [SPRF][10/06/2013] (.Nicolas Coolman - ZHPDiag.) -- C:\Users\Lu'crôut\Desktop\ZHPDiag2.exe [5676095] [MD5.3FEA9D2EDF23B0283C7A66C8DEA380BD] [SPRF][25/07/2002] (.InstallShield Software Corporation - InstallShield Update Service Setup Player Module.) -- C:\Windows\Downloaded Program Files\dwusplay.dll [24576] [MD5.CDBE35EA59BC9223E4F800BD1DB82D27] [SPRF][25/07/2002] (.InstallShield Software Corporation - InstallShield Update Service Setup Player.) -- C:\Windows\Downloaded Program Files\dwusplay.exe [196608] [MD5.0C78701C6F42345DFF2B2B6C3C3D01EF] [SPRF][25/07/2002] (.InstallShield Software Corporation - InstallShield Update Service Web Agent.) -- C:\Windows\Downloaded Program Files\isusweb.dll [172032] ~ Files: Scanned in 00mn 04s ---\\ Scan Additionnel (O88) Database Version : v2.12437 - (10/06/2013) Clés trouvées (Keys found) : 87 Valeurs trouvées (Values found) : 1 Dossiers trouvés (Folders found) : 20 Fichiers trouvés (Files found) : 1 [HKLM\Software\Classes\AppID\{09C554C3-109B-483C-A06B-F14172F1A947}] =>Toolbar.Babylon [HKLM\Software\Wow6432Node\Classes\AppID\{09C554C3-109B-483C-A06B-F14172F1A947}] =>Toolbar.Babylon [HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ecdf796-c2dc-4d79-a620-cce0c0a66cc9}] =>Toolbar.Babylon [HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{0F6E720A-1A6B-40E1-A294-1D4D19F156C8}] =>Toolbar.Agent [HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{0F6E720A-1A6B-40E1-A294-1D4D19F156C8}] =>Toolbar.Agent [HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0F6E720A-1A6B-40E1-A294-1D4D19F156C8}] =>Toolbar.Agent [HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{30F9B915-B755-4826-820B-08FBA6BD249D}] =>Toolbar.Conduit [HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{30F9B915-B755-4826-820B-08FBA6BD249D}] =>Toolbar.Conduit [HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{30F9B915-B755-4826-820B-08FBA6BD249D}] =>Toolbar.Conduit [HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{4daac69c-cba7-45e2-9bc8-1044483d3352}] =>Toolbar.Conduit [HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{4daac69c-cba7-45e2-9bc8-1044483d3352}] =>Toolbar.Conduit [HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{4daac69c-cba7-45e2-9bc8-1044483d3352}] =>Toolbar.Conduit [HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{65bcd620-07dd-012f-819f-073cf1b8f7c6}] =>PUP.RewardsArcade [HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{83ff80f4-8c74-4b80-b5ba-c8ddd434e5c4}] =>Spyware.BHO [HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{83ff80f4-8c74-4b80-b5ba-c8ddd434e5c4}] =>Spyware.BHO [HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{898EA8C8-E7FF-479B-8935-AEC46303B9E5}] =>Toolbar.Skype [HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\extensions\{898EA8C8-E7FF-479B-8935-AEC46303B9E5}] =>Toolbar.Skype [HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{A6174F27-1FFF-E1D6-A93F-BA48AD5DD448}] =>PUP.DealPly [HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{A6174F27-1FFF-E1D6-A93F-BA48AD5DD448}] =>PUP.DealPly [HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A6174F27-1FFF-E1D6-A93F-BA48AD5DD448}] =>PUP.DealPly [HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}] =>Toolbar.Skype [HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}] =>Toolbar.Skype [HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}] =>Toolbar.Skype [HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}] =>Toolbar.Conduit [HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}] =>Toolbar.Conduit [HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}] =>Toolbar.Conduit [HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}] =>Toolbar.Conduit [HKLM\Software\Classes\AppID\{BDB69379-802F-4EAF-B541-F8DE92DD98DB}] =>Adware.CDNHelper [HKLM\Software\Wow6432Node\Classes\AppID\{BDB69379-802F-4EAF-B541-F8DE92DD98DB}] =>Adware.CDNHelper [HKLM\Software\Classes\AppID\{BDB69379-802F-4eaf-B541-F8DE92DD98DB}] =>Toolbar.Babylon [HKLM\Software\Wow6432Node\Classes\AppID\{BDB69379-802F-4eaf-B541-F8DE92DD98DB}] =>Toolbar.Babylon [HKLM\Software\Classes\AppID\escort.dll] =>Toolbar.Babylon [HKLM\Software\Classes\Conduit.Engine] =>Toolbar.Conduit [HKLM\Software\Wow6432Node\Google\Chrome\Extensions\gaiilaahiahdejapggenmdmafpmbipje] =>PUP.DealPly [HKLM\Software\Wow6432Node\Google\Chrome\Extensions\mpfapcdfbbledbojijcbcclmlieaoogk] =>PUP.RewardsArcade [HKCU\Software\AppDataLow\Software\conduitEngine] =>Toolbar.Conduit [HKLM\Software\Wow6432Node\conduitEngine] =>Toolbar.Conduit [HKCU\Software\Cr_Installer] =>PUP.CrossRider [HKCU\Software\AppDataLow\Software\I Want This] =>PUP.RewardsArcade [HKCU\Software\AppDataLow\Software\Messenger_Plus_Live_France] =>Toolbar.Conduit [HKLM\Software\Wow6432Node\Messenger_Plus_Live_France] =>Toolbar.Conduit [HKLM\Software\Wow6432Node\OpenCandy NSIS SDK] =>Adware.OpenCandy [HKCU\Software\AppDataLow\Software\PriceGong] =>Adware.PriceGong [HKCU\Software\Softonic] =>Toolbar.Conduit [HKCU\Software\AppDataLow\Software\Softonic_France] =>Toolbar.Conduit [HKLM\Software\Wow6432Node\Softonic_France] =>Toolbar.Conduit [HKCU\Software\AppDataLow\Toolbar] =>Toolbar.Conduit [HKCU\Software\DealPly] =>PUP.DealPly [HKLM\Software\Wow6432Node\DealPly] =>PUP.DealPly [HKLM\Software\Wow6432Node\Microsoft\Tracing\MyBabylontb_RASAPI32] =>Toolbar.Babylon [HKLM\Software\Wow6432Node\Microsoft\Tracing\MyBabylontb_RASMANCS] =>Toolbar.Babylon [HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\conduitEngine] =>Toolbar.Conduit [HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\DealPly] =>PUP.DealPly [HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\I Want This] =>PUP.RewardsArcade [HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Messenger_Plus_Live_France Toolbar] =>Toolbar.Conduit [HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Softonic_France Toolbar] =>Toolbar.Conduit [HKLM\Software\Classes\Prod.cap] =>Toolbar.Babylon [HKCU\Software\InstallCore] =>Adware.InstallCore [HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{83FF80F4-8C74-4B80-B5BA-C8DDD434E5C4}] =>Spyware.Partner [HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{83FF80F4-8C74-4B80-B5BA-C8DDD434E5C4}] =>Spyware.Partner [HKLM\Software\Wow6432Node\Microsoft\Tracing\I Want This_RASAPI32] =>Adware.GamePlayLabs [HKLM\Software\Wow6432Node\Microsoft\Tracing\I Want This_RASMANCS] =>Adware.GamePlayLabs [HKCU\Software\AppDataLow\Software\Crossrider] =>PUP.CrossRider [HKLM\Software\Wow6432Node\Messenger Plus!\OpenCandy] =>Adware.OpenCandy [HKLM\Software\Classes\CrossriderApp0002258.BHO] =>PUP.CrossRider [HKLM\Software\Classes\CrossriderApp0002258.BHO.1] =>PUP.CrossRider [HKLM\Software\Classes\CrossriderApp0002258.FBApi] =>PUP.CrossRider [HKLM\Software\Classes\CrossriderApp0002258.FBApi.1] =>PUP.CrossRider [HKLM\Software\Classes\CrossriderApp0002258.Sandbox] =>PUP.CrossRider [HKLM\Software\Classes\CrossriderApp0002258.Sandbox.1] =>PUP.CrossRider [HKLM\Software\Classes\Toolbar.CT2542115] =>Toolbar.Conduit [HKLM\Software\Classes\Toolbar.CT2567681] =>Toolbar.Conduit [HKLM\Software\Classes\AppID\escort.DLL] =>PUP.Funmoods [HKLM\Software\Wow6432Node\Classes\CrossriderApp0002258.BHO] =>PUP.CrossRider [HKLM\Software\Wow6432Node\Classes\CrossriderApp0002258.BHO.1] =>PUP.CrossRider [HKLM\Software\Wow6432Node\Classes\CrossriderApp0002258.FBApi] =>PUP.CrossRider [HKLM\Software\Wow6432Node\Classes\CrossriderApp0002258.FBApi.1] =>PUP.CrossRider [HKLM\Software\Wow6432Node\Classes\CrossriderApp0002258.Sandbox] =>PUP.CrossRider [HKLM\Software\Wow6432Node\Classes\CrossriderApp0002258.Sandbox.1] =>PUP.CrossRider [HKLM\Software\Wow6432Node\Classes\Toolbar.CT2542115] =>Toolbar.Conduit [HKLM\Software\Wow6432Node\Classes\Toolbar.CT2567681] =>Toolbar.Conduit [HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{11111111-1111-1111-1111-110011221158}] =>PUP.CrossRider [HKLM\Software\Wow6432Node\Classes\CLSID\{11111111-1111-1111-1111-110011221158}] =>PUP.CrossRider [HKLM\Software\Wow6432Node\Classes\CLSID\{22222222-2222-2222-2222-220022222258}] =>PUP.CrossRider [HKLM\Software\Wow6432Node\Classes\CLSID\{33333333-3333-3333-3333-330033223358}] =>PUP.CrossRider [HKLM\Software\Wow6432Node\Classes\AppID\escort.DLL] =>PUP.Funmoods [HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110011221158}] =>PUP.CrossRider [HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Toolbar]:{30F9B915-B755-4826-820B-08FBA6BD249D} =>Toolbar.Conduit C:\Program Files (x86)\Conduit =>Toolbar.Conduit C:\Program Files (x86)\ConduitEngine =>Toolbar.Conduit C:\Program Files (x86)\DealPly =>PUP.DealPly C:\Program Files (x86)\Softonic_France =>Toolbar.Conduit C:\Program Files (x86)\I Want This =>Adware.GamePlayLabs C:\ProgramData\Babylon =>Toolbar.Babylon C:\ProgramData\InstallMate =>Toolbar.Agent C:\ProgramData\Partner =>Spyware.Partner C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DealPly =>PUP.DealPly C:\Users\Lu'crôut\AppData\Roaming\Babylon =>Toolbar.Babylon C:\Users\Lu'crôut\AppData\Local\I Want This =>Adware.GamePlayLabs C:\Users\Lu'crôut\AppData\LocalLow\BabylonToolbar =>Toolbar.Babylon C:\Users\Lu'crôut\AppData\LocalLow\Conduit =>Toolbar.Conduit C:\Users\Lu'crôut\AppData\LocalLow\ConduitEngine =>Toolbar.Conduit C:\Users\Lu'crôut\AppData\LocalLow\PriceGong =>Adware.PriceGong C:\Users\Lu'crôut\AppData\LocalLow\Softonic_France =>Toolbar.Conduit C:\Users\Lu'crôut\AppData\Local\Temp\BabylonToolbar =>Toolbar.Babylon C:\Users\Lu'crôut\AppData\Roaming\Mozilla\Firefox\Profiles\rg1c8rl0.default\Conduit =>Toolbar.Conduit C:\Users\Lu'crôut\AppData\Roaming\Mozilla\Firefox\Profiles\rg1c8rl0.default\ConduitEngine =>Toolbar.Conduit C:\Users\Lu'crôut\AppData\Roaming\Mozilla\Firefox\Profiles\rg1c8rl0.default\Extensions\engine@conduit.com =>Toolbar.Conduit C:\Users\Lu'crôut\AppData\Roaming\Mozilla\Firefox\Profiles\rg1c8rl0.default\SearchPlugins\conduit.xml =>Toolbar.Conduit ~ Additionnel Scan: 338570 Items scanned in 00mn 25s ---\\ Etat général des services non Microsoft (EGS) (SR=Running, SS=Stopped) SR - | Auto 23/09/2012 65192 | (AdobeARMservice) . (.Adobe Systems Incorporated.) - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe SS - | Demand 15/05/2013 256904 | (AdobeFlashPlayerUpdateSvc) . (.Adobe Systems Incorporated.) - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe SR - | Auto 25/05/2011 37664 | (Apple Mobile Device) . (.Apple Inc..) - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe SR - | Auto 09/05/2013 46808 | (avast! Antivirus) . (.AVAST Software.) - C:\Program Files\AVAST Software\Avast\AvastSvc.exe SR - | Auto 09/05/2013 137960 | (avast! Firewall) . (.AVAST Software.) - C:\Program Files\AVAST Software\Avast\afwServ.exe SR - | Auto 06/04/2011 349472 | (Bonjour Service) . (.Apple Inc..) - C:\Program Files (x86)\Bonjour\mDNSResponder.exe SR - | Auto 30/04/2011 87368 | (DeviceMonitorService) . (.Nero AG.) - C:\Program Files (x86)\Motorola Media Link\Lite\NServiceEntry.exe SR - | Auto 22/01/2010 310352 | (DsiWMIService) . (.Dritek System Inc..) - C:\Program Files (x86)\Launch Manager\dsiwmis.exe SR - | Auto 18/01/2010 842784 | (ePowerSvc) . (.Acer Incorporated.) - C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerSvc.exe SS - | Demand 10/10/2009 238328 | (GameConsoleService) . (.WildTangent, Inc..) - C:\Program Files (x86)\Packard Bell Games\Packard Bell Game Console\GameConsoleService.exe SR - | Auto 28/08/2009 1150496 | (Greg_Service) . (.Acer Incorporated.) - C:\Program Files (x86)\Packard Bell\Registration\GregHSRW.exe SS - | Auto 02/07/2010 135664 | (gupdate) . (.Google Inc..) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe SS - | Demand 02/07/2010 135664 | (gupdatem) . (.Google Inc..) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe SS - | Demand 16/08/2012 194032 | (gusvc) . (.Google.) - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe SR - | Auto 24/12/2009 13336 | (IAStorDataMgrSvc) . (.Intel Corporation.) - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe SR - | Demand 07/06/2011 934176 | (iPod Service) . (.Apple Inc..) - C:\Program Files\iPod\bin\iPodService.exe SR - | Auto 09/12/2009 268824 | (LMS) . (.Intel Corporation.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe SR - | Auto 223088 | (MotoHelper) . (...) - C:\Program Files (x86)\Motorola\MotoHelper\MotoHelperService.exe SS - | Demand 24/05/2013 117144 | (MozillaMaintenance) . (.Mozilla Foundation.) - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe SS - | Demand 28/07/2009 935208 | (Nero BackItUp Scheduler 4.0) . (.Nero AG.) - C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe SR - | Auto 07/01/2010 255744 | (NTI IScheduleSvc) . (.NewTech Infosystems, Inc..) - C:\Program Files (x86)\NewTech Infosystems\Packard Bell MyBackup\IScheduleSvc.exe SR - | Auto 25/01/2010 393320 | (nvsvc) . (.NVIDIA Corporation.) - C:\Windows\system32\nvvsvc.exe SS - | Auto 28/02/2013 161384 | (SkypeUpdate) . (.Skype Technologies.) - C:\Program Files (x86)\Skype\Updater\Updater.exe SR - | Auto 09/12/2009 2320920 | (UNS) . (.Intel Corporation.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe SR - | Auto 04/07/2009 240160 | (Updater Service) . (.Acer.) - C:\Program Files\Packard Bell\Packard Bell Updater\UpdaterService.exe SR - | Auto 0 | (WMPNetworkSvc) . (...) - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe SR - | Auto 14/07/2009 27136 | C:\Windows\System32\wuaueng.dll (wuauserv) . (.Microsoft Corporation.) - C:\Windows\System32\svchost.exe ~ Services: Scanned in 00mn 04s ~ 1526 Legitimates filtered by white list End of the scan (1090 lines in 10mn 50s)(2)