# AdwCleaner v5.110 - Rapport créé le 13/04/2016 à 17:24:53 # Mis à jour le 10/04/2016 par Xplode # Base de données : 2016-04-11.4 [Serveur] # Système d'exploitation : Windows 7 Home Premium Service Pack 1 (X64) # Nom d'utilisateur : DUS - DUS-PC # Exécuté depuis : C:\Users\DUS\Downloads\adwcleaner_5.110.exe # Option : Nettoyer # Support : http://toolslib.net/forum ***** [ Services ] ***** [-] Service supprimé : Update AdvanceElite ***** [ Dossiers ] ***** [-] Dossier supprimé : C:\Program Files (x86)\AdvanceElite [-] Dossier supprimé : C:\Program Files (x86)\AskPartnerNetwork [-] Dossier supprimé : C:\Program Files (x86)\PC Speed Maximizer [#] Dossier supprimé : C:\Program Files (x86)\AdvanceElite [-] Dossier supprimé : C:\ProgramData\apn [-] Dossier supprimé : C:\ProgramData\Ask [#] Dossier supprimé : C:\ProgramData\Application Data\apn [#] Dossier supprimé : C:\ProgramData\Application Data\Ask [-] Dossier supprimé : C:\Users\DUS\AppData\Local\Temp\apn [-] Dossier supprimé : C:\Users\Marie-Reine\AppData\Local\apn [-] Dossier supprimé : C:\Users\Marie-Reine\AppData\Roaming\Mozilla\Firefox\Profiles\1gxyonzk.default\extensions\toolbar@secure-surf.com [-] Dossier supprimé : C:\Users\Marie-Reine\Documents\PC Speed Maximizer [-] Dossier supprimé : C:\Users\Pierre-Christophe\AppData\Roaming\Mozilla\Firefox\Profiles\zi94ud6g.default\extensions\staged\{ad7ce998-a77b-4062-9ffb-1d0b7cb23183} ***** [ Fichiers ] ***** [-] Fichier supprimé : C:\Users\Marie-Reine\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_pfkfdlcdbajamklbneflfbcmfgddmpae_0.localstorage [-] Fichier supprimé : C:\Users\Marie-Reine\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_hdapp1008-a.akamaihd.net_0.localstorage [-] Fichier supprimé : C:\Users\Marie-Reine\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_hdapp1008-a.akamaihd.net_0.localstorage-journal [-] Fichier supprimé : C:\Users\Marie-Reine\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_www.superfish.com_0.localstorage [-] Fichier supprimé : C:\Users\Marie-Reine\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_www.superfish.com_0.localstorage-journal [-] Fichier supprimé : C:\Users\Marie-Reine\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.secure-surf.com_0.localstorage [-] Fichier supprimé : C:\Users\Marie-Reine\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.secure-surf.com_0.localstorage-journal [-] Fichier supprimé : C:\Users\Marie-Reine\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.superfish.com_0.localstorage [-] Fichier supprimé : C:\Users\Marie-Reine\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.superfish.com_0.localstorage-journal [-] Fichier supprimé : C:\Users\Public\Desktop\iLivid.lnk ***** [ DLLs ] ***** ***** [ Raccourcis ] ***** ***** [ Tâches planifiées ] ***** ***** [ Registre ] ***** [-] Clé supprimée : HKLM\SOFTWARE\Classes\AppID\GenericAskToolbar.DLL [-] Clé supprimée : HKLM\SOFTWARE\Classes\Applications\ilividsetupv1.exe [-] Clé supprimée : HKLM\SOFTWARE\Classes\protector_dll.Protector [-] Clé supprimée : HKLM\SOFTWARE\Classes\protector_dll.Protector.1 [-] Clé supprimée : HKLM\SOFTWARE\Classes\protector_dll.ProtectorBho [-] Clé supprimée : HKLM\SOFTWARE\Classes\protector_dll.ProtectorBho.1 [-] Clé supprimée : HKLM\SOFTWARE\Classes\protector_dll.ProtectorLib [-] Clé supprimée : HKLM\SOFTWARE\Classes\protector_dll.ProtectorLib.1 [-] Clé supprimée : HKLM\SOFTWARE\Classes\AppID\{9B0CB95C-933A-4B8C-B6D4-EDCD19A43874} [-] Clé supprimée : HKLM\SOFTWARE\Classes\CLSID\{00000000-6E41-4FD3-8538-502F5495E5FC} [-] Clé supprimée : HKLM\SOFTWARE\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3} [-] Clé supprimée : HKLM\SOFTWARE\Classes\CLSID\{5A4E3A41-FA55-4BDA-AED7-CEBE6E7BCB52} [-] Clé supprimée : HKLM\SOFTWARE\Classes\CLSID\{6E993643-8FBC-44FE-BC85-D318495C4D96} [-] Clé supprimée : HKLM\SOFTWARE\Classes\Interface\{4E6354DE-9115-4AEE-BD21-C46C3E8A49DB} [-] Clé supprimée : HKLM\SOFTWARE\Classes\Interface\{6C434537-053E-486D-B62A-160059D9D456} [-] Clé supprimée : HKLM\SOFTWARE\Classes\Interface\{91CF619A-4686-4CA4-9232-3B2E6B63AA92} [-] Clé supprimée : HKLM\SOFTWARE\Classes\Interface\{AC71B60E-94C9-4EDE-BA46-E146747BB67E} [-] Clé supprimée : HKLM\SOFTWARE\Classes\Interface\{FC073BDA-C115-4A1D-9DF9-9B5C461482E5} [-] Clé supprimée : HKLM\SOFTWARE\Classes\TypeLib\{2996F0E7-292B-4CAE-893F-47B8B1C05B56} [-] Clé supprimée : HKLM\SOFTWARE\Classes\TypeLib\{A2D733A7-73B0-4C6B-B0C7-06A432950B66} [-] Valeur supprimée : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{21FA44EF-376D-4D53-9B0F-8A89D3229068}] [-] Clé supprimée : [x64] HKLM\SOFTWARE\Classes\CLSID\{5A4E3A41-FA55-4BDA-AED7-CEBE6E7BCB52} [-] Clé supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{4E6354DE-9115-4AEE-BD21-C46C3E8A49DB} [-] Clé supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{6C434537-053E-486D-B62A-160059D9D456} [-] Clé supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{91CF619A-4686-4CA4-9232-3B2E6B63AA92} [-] Clé supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{AC71B60E-94C9-4EDE-BA46-E146747BB67E} [-] Clé supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{FC073BDA-C115-4A1D-9DF9-9B5C461482E5} [-] Clé supprimée : HKCU\Software\APN [-] Clé supprimée : HKU\.DEFAULT\Software\AskPartnerNetwork [-] Clé supprimée : HKU\S-1-5-21-2288382528-3121403105-3010336668-1003\Software\YahooPartnerToolbar [-] Clé supprimée : HKU\S-1-5-21-2288382528-3121403105-3010336668-1004\Software\APN [-] Donnée restaurée : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Search Page] [-] Donnée restaurée : HKU\S-1-5-21-2288382528-3121403105-3010336668-1003\Software\Microsoft\Internet Explorer\Main [Search Page] [-] Donnée restaurée : HKU\S-1-5-21-2288382528-3121403105-3010336668-1003\Software\Microsoft\Internet Explorer\Main [Start Page] [-] Clé supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{9CB96984-43C3-4D44-90EF-01466EFCF7BB} [-] Donnée restaurée : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes [DefaultScope] [-] Clé supprimée : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990} [-] Donnée restaurée : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes [DefaultScope] [-] Clé supprimée : HKU\S-1-5-21-2288382528-3121403105-3010336668-1003\Software\Microsoft\Internet Explorer\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990} [-] Clé supprimée : HKU\S-1-5-21-2288382528-3121403105-3010336668-1003\Software\Microsoft\Internet Explorer\SearchScopes\{7043D7D2-3FF0-4135-A155-04AACBCD9D15} [-] Clé supprimée : HKU\S-1-5-21-2288382528-3121403105-3010336668-1003\Software\Microsoft\Internet Explorer\SearchScopes\{9CB96984-43C3-4D44-90EF-01466EFCF7BB} [-] Clé supprimée : HKU\S-1-5-21-2288382528-3121403105-3010336668-1003\Software\Microsoft\Internet Explorer\SearchScopes\{EC644A48-026D-4780-84C3-83229A26FA0F} [-] Donnée restaurée : HKU\S-1-5-21-2288382528-3121403105-3010336668-1003\Software\Microsoft\Internet Explorer\SearchScopes [DefaultScope] [-] Clé supprimée : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\akamaihd.net [-] Clé supprimée : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\ask.com [-] Clé supprimée : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\chatango.com [-] Clé supprimée : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\cloudfront.net [-] Clé supprimée : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\d16fk4ms6rqz1v.cloudfront.net [-] Clé supprimée : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\d1y544kxfoms0z.cloudfront.net [-] Clé supprimée : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\d22j4fzzszoii2.cloudfront.net [-] Clé supprimée : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\d30ke5tqu2tkyx.cloudfront.net [-] Clé supprimée : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\st.chatango.com [-] Clé supprimée : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\superfish.com ***** [ Navigateurs ] ***** [-] [C:\Users\DUS\AppData\Roaming\Mozilla\Firefox\Profiles\u1u6wlsu.default\prefs.js] [Preference] supprimée : user_pref("browser.search.defaultengine", "Ask.com"); [-] [C:\Users\DUS\AppData\Roaming\Mozilla\Firefox\Profiles\u1u6wlsu.default\prefs.js] [Preference] supprimée : user_pref("browser.search.order.1", "Ask.com"); [-] [C:\Users\DUS\AppData\Roaming\Mozilla\Firefox\Profiles\u1u6wlsu.default\prefs.js] [Preference] supprimée : user_pref("browser.search.selectedEngine", "Astromenda"); [-] [C:\Users\DUS\AppData\Roaming\Mozilla\Firefox\Profiles\u1u6wlsu.default\prefs.js] [Preference] supprimée : user_pref("datareporting.sessions.previous.703", "{\"s\":1460291692345,\"a\":5,\"t\":35,\"c\":true,\"m\":717,\"fp\":5863,\"sr\":6125}"); [-] [C:\Users\DUS\AppData\Roaming\Mozilla\Firefox\Profiles\u1u6wlsu.default\prefs.js] [Preference] supprimée : user_pref("extensions.asktb.ff-original-keyword-url", ""); [-] [C:\Users\DUS\AppData\Roaming\Mozilla\Firefox\Profiles\u1u6wlsu.default\prefs.js] [Preference] supprimée : user_pref("extensions.astrmndasr.hmpgUrl", "hxxp://astromenda.com/?f=1&a=ast_ggfc_14_40_ff&cd=2XzuyEtN2Y1L1QzutDtDtByDyCyE0FyCyE0A0B0FyEtByDtCtN0D0Tzu0StCtDtDtAtN1L2XzutAtFtBtFtCtFyDtN1L1CzutCyEtBzytD[...] [-] [C:\Users\DUS\AppData\Roaming\Mozilla\Firefox\Profiles\u1u6wlsu.default\prefs.js] [Preference] supprimée : user_pref("extensions.astrmndasr.newTabUrl", "hxxp://astromenda.com/?f=2&a=ast_ggfc_14_40_ff&cd=2XzuyEtN2Y1L1QzutDtDtByDyCyE0FyCyE0A0B0FyEtByDtCtN0D0Tzu0StCtDtDtAtN1L2XzutAtFtBtFtCtFyDtN1L1CzutCyEtBzy[...] [-] [C:\Users\DUS\AppData\Roaming\Mozilla\Firefox\Profiles\u1u6wlsu.default\prefs.js] [Preference] supprimée : user_pref("extensions.astrmndasr.prtnrId", "WSE_Astromenda"); [-] [C:\Users\DUS\AppData\Roaming\Mozilla\Firefox\Profiles\u1u6wlsu.default\prefs.js] [Preference] supprimée : user_pref("extensions.astrmndasr.srchPrvdr", "Astromenda"); [-] [C:\Users\DUS\AppData\Roaming\Mozilla\Firefox\Profiles\u1u6wlsu.default\prefs.js] [Preference] supprimée : user_pref("extensions.astrmndasr.tlbrSrchUrl", "hxxp://astromenda.com/?f=3&a=ast_ggfc_14_40_ff&cd=2XzuyEtN2Y1L1QzutDtDtByDyCyE0FyCyE0A0B0FyEtByDtCtN0D0Tzu0StCtDtDtAtN1L2XzutAtFtBtFtCtFyDtN1L1CzutCyEtB[...] [-] [C:\Users\DUS\AppData\Roaming\Mozilla\Firefox\Profiles\u1u6wlsu.default\user.js] [Preference] supprimée : user_pref("extensions.astrmndasr.hmpgUrl", "hxxp://astromenda.com/?f=1&a=ast_ggfc_14_40_ff&cd=2XzuyEtN2Y1L1QzutDtDtByDyCyE0FyCyE0A0B0FyEtByDtCtN0D0Tzu0StCtDtDtAtN1L2XzutAtFtBtFtCtFyDtN1L1CzutCyEtBzytD[...] [-] [C:\Users\DUS\AppData\Roaming\Mozilla\Firefox\Profiles\u1u6wlsu.default\user.js] [Preference] supprimée : user_pref("extensions.astrmndasr.srchPrvdr", "Astromenda"); [-] [C:\Users\DUS\AppData\Roaming\Mozilla\Firefox\Profiles\u1u6wlsu.default\user.js] [Preference] supprimée : user_pref("extensions.astrmndasr.newTabUrl", "hxxp://astromenda.com/?f=2&a=ast_ggfc_14_40_ff&cd=2XzuyEtN2Y1L1QzutDtDtByDyCyE0FyCyE0A0B0FyEtByDtCtN0D0Tzu0StCtDtDtAtN1L2XzutAtFtBtFtCtFyDtN1L1CzutCyEtBzy[...] [-] [C:\Users\DUS\AppData\Roaming\Mozilla\Firefox\Profiles\u1u6wlsu.default\user.js] [Preference] supprimée : user_pref("extensions.astrmndasr.tlbrSrchUrl", "hxxp://astromenda.com/?f=3&a=ast_ggfc_14_40_ff&cd=2XzuyEtN2Y1L1QzutDtDtByDyCyE0FyCyE0A0B0FyEtByDtCtN0D0Tzu0StCtDtDtAtN1L2XzutAtFtBtFtCtFyDtN1L1CzutCyEtB[...] [-] [C:\Users\DUS\AppData\Roaming\Mozilla\Firefox\Profiles\u1u6wlsu.default\user.js] [Preference] supprimée : user_pref("extensions.astrmndasr.prtnrId", "WSE_Astromenda"); [-] [C:\Users\Marie-Reine\AppData\Roaming\Mozilla\Firefox\Profiles\1gxyonzk.default\prefs.js] [Preference] supprimée : user_pref("browser.search.order.1", "Ask.com"); [-] [C:\Users\Marie-Reine\AppData\Roaming\Mozilla\Firefox\Profiles\1gxyonzk.default\prefs.js] [Preference] supprimée : user_pref("browser.search.selectedEngine", "secure-surf"); [-] [C:\Users\Marie-Reine\AppData\Roaming\Mozilla\Firefox\Profiles\1gxyonzk.default\prefs.js] [Preference] supprimée : user_pref("browser.startup.homepage", "hxxp://www.secure-surf.com/"); [-] [C:\Users\Marie-Reine\AppData\Roaming\Mozilla\Firefox\Profiles\1gxyonzk.default\prefs.js] [Preference] supprimée : user_pref("extensions.astrmndasr.hmpgUrl", "hxxp://astromenda.com/?f=1&a=ast_ggfc_14_40_ff&cd=2XzuyEtN2Y1L1QzutDtDtByDyCyE0FyCyE0A0B0FyEtByDtCtN0D0Tzu0StCtDtDtAtN1L2XzutAtFtBtFtCtFyDtN1L1CzutCyEtBzytD[...] [-] [C:\Users\Marie-Reine\AppData\Roaming\Mozilla\Firefox\Profiles\1gxyonzk.default\prefs.js] [Preference] supprimée : user_pref("extensions.astrmndasr.newTabUrl", "hxxp://astromenda.com/?f=2&a=ast_ggfc_14_40_ff&cd=2XzuyEtN2Y1L1QzutDtDtByDyCyE0FyCyE0A0B0FyEtByDtCtN0D0Tzu0StCtDtDtAtN1L2XzutAtFtBtFtCtFyDtN1L1CzutCyEtBzy[...] [-] [C:\Users\Marie-Reine\AppData\Roaming\Mozilla\Firefox\Profiles\1gxyonzk.default\prefs.js] [Preference] supprimée : user_pref("extensions.astrmndasr.prtnrId", "WSE_Astromenda"); [-] [C:\Users\Marie-Reine\AppData\Roaming\Mozilla\Firefox\Profiles\1gxyonzk.default\prefs.js] [Preference] supprimée : user_pref("extensions.astrmndasr.srchPrvdr", "Astromenda"); [-] [C:\Users\Marie-Reine\AppData\Roaming\Mozilla\Firefox\Profiles\1gxyonzk.default\prefs.js] [Preference] supprimée : user_pref("extensions.astrmndasr.tlbrSrchUrl", "hxxp://astromenda.com/?f=3&a=ast_ggfc_14_40_ff&cd=2XzuyEtN2Y1L1QzutDtDtByDyCyE0FyCyE0A0B0FyEtByDtCtN0D0Tzu0StCtDtDtAtN1L2XzutAtFtBtFtCtFyDtN1L1CzutCyEtB[...] [-] [C:\Users\Marie-Reine\AppData\Roaming\Mozilla\Firefox\Profiles\1gxyonzk.default\prefs.js] [Preference] supprimée : user_pref("extensions.enabledAddons", "toolbar%40secure-surf.com:1.04.5,%7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:41.0.2"); [-] [C:\Users\Marie-Reine\AppData\Roaming\Mozilla\Firefox\Profiles\1gxyonzk.default\prefs.js] [Preference] supprimée : user_pref("keyword.URL", "hxxp://www.secure-surf.com/web?q="); [-] [C:\Users\Marie-Reine\AppData\Roaming\Mozilla\Firefox\Profiles\1gxyonzk.default\user.js] [Preference] supprimée : user_pref("extensions.astrmndasr.hmpgUrl", "hxxp://astromenda.com/?f=1&a=ast_ggfc_14_40_ff&cd=2XzuyEtN2Y1L1QzutDtDtByDyCyE0FyCyE0A0B0FyEtByDtCtN0D0Tzu0StCtDtDtAtN1L2XzutAtFtBtFtCtFyDtN1L1CzutCyEtBzytD[...] [-] [C:\Users\Marie-Reine\AppData\Roaming\Mozilla\Firefox\Profiles\1gxyonzk.default\user.js] [Preference] supprimée : user_pref("extensions.astrmndasr.srchPrvdr", "Astromenda"); [-] [C:\Users\Marie-Reine\AppData\Roaming\Mozilla\Firefox\Profiles\1gxyonzk.default\user.js] [Preference] supprimée : user_pref("extensions.astrmndasr.newTabUrl", "hxxp://astromenda.com/?f=2&a=ast_ggfc_14_40_ff&cd=2XzuyEtN2Y1L1QzutDtDtByDyCyE0FyCyE0A0B0FyEtByDtCtN0D0Tzu0StCtDtDtAtN1L2XzutAtFtBtFtCtFyDtN1L1CzutCyEtBzy[...] [-] [C:\Users\Marie-Reine\AppData\Roaming\Mozilla\Firefox\Profiles\1gxyonzk.default\user.js] [Preference] supprimée : user_pref("extensions.astrmndasr.tlbrSrchUrl", "hxxp://astromenda.com/?f=3&a=ast_ggfc_14_40_ff&cd=2XzuyEtN2Y1L1QzutDtDtByDyCyE0FyCyE0A0B0FyEtByDtCtN0D0Tzu0StCtDtDtAtN1L2XzutAtFtBtFtCtFyDtN1L1CzutCyEtB[...] [-] [C:\Users\Marie-Reine\AppData\Roaming\Mozilla\Firefox\Profiles\1gxyonzk.default\user.js] [Preference] supprimée : user_pref("extensions.astrmndasr.prtnrId", "WSE_Astromenda"); [-] [C:\Users\Anne-Catherine\AppData\Roaming\Mozilla\Firefox\Profiles\hmidmbln.default\prefs.js] [Preference] supprimée : user_pref("browser.search.defaultengine", "Ask.com"); [-] [C:\Users\Anne-Catherine\AppData\Roaming\Mozilla\Firefox\Profiles\hmidmbln.default\prefs.js] [Preference] supprimée : user_pref("browser.search.order.1", "Ask.com"); [-] [C:\Users\Anne-Catherine\AppData\Roaming\Mozilla\Firefox\Profiles\hmidmbln.default\prefs.js] [Preference] supprimée : user_pref("browser.search.selectedEngine", "Astromenda"); [-] [C:\Users\Anne-Catherine\AppData\Roaming\Mozilla\Firefox\Profiles\hmidmbln.default\prefs.js] [Preference] supprimée : user_pref("extensions.asktb.ff-original-keyword-url", ""); [-] [C:\Users\Anne-Catherine\AppData\Roaming\Mozilla\Firefox\Profiles\hmidmbln.default\prefs.js] [Preference] supprimée : user_pref("extensions.astrmndasr.hmpgUrl", "hxxp://astromenda.com/?f=1&a=ast_ggfc_14_40_ff&cd=2XzuyEtN2Y1L1QzutDtDtByDyCyE0FyCyE0A0B0FyEtByDtCtN0D0Tzu0StCtDtDtAtN1L2XzutAtFtBtFtCtFyDtN1L1CzutCyEtBzytD[...] [-] [C:\Users\Anne-Catherine\AppData\Roaming\Mozilla\Firefox\Profiles\hmidmbln.default\prefs.js] [Preference] supprimée : user_pref("extensions.astrmndasr.newTabUrl", "hxxp://astromenda.com/?f=2&a=ast_ggfc_14_40_ff&cd=2XzuyEtN2Y1L1QzutDtDtByDyCyE0FyCyE0A0B0FyEtByDtCtN0D0Tzu0StCtDtDtAtN1L2XzutAtFtBtFtCtFyDtN1L1CzutCyEtBzy[...] [-] [C:\Users\Anne-Catherine\AppData\Roaming\Mozilla\Firefox\Profiles\hmidmbln.default\prefs.js] [Preference] supprimée : user_pref("extensions.astrmndasr.prtnrId", "WSE_Astromenda"); [-] [C:\Users\Anne-Catherine\AppData\Roaming\Mozilla\Firefox\Profiles\hmidmbln.default\prefs.js] [Preference] supprimée : user_pref("extensions.astrmndasr.srchPrvdr", "Astromenda"); [-] [C:\Users\Anne-Catherine\AppData\Roaming\Mozilla\Firefox\Profiles\hmidmbln.default\prefs.js] [Preference] supprimée : user_pref("extensions.astrmndasr.tlbrSrchUrl", "hxxp://astromenda.com/?f=3&a=ast_ggfc_14_40_ff&cd=2XzuyEtN2Y1L1QzutDtDtByDyCyE0FyCyE0A0B0FyEtByDtCtN0D0Tzu0StCtDtDtAtN1L2XzutAtFtBtFtCtFyDtN1L1CzutCyEtB[...] [-] [C:\Users\Anne-Catherine\AppData\Roaming\Mozilla\Firefox\Profiles\hmidmbln.default\user.js] [Preference] supprimée : user_pref("extensions.astrmndasr.hmpgUrl", "hxxp://astromenda.com/?f=1&a=ast_ggfc_14_40_ff&cd=2XzuyEtN2Y1L1QzutDtDtByDyCyE0FyCyE0A0B0FyEtByDtCtN0D0Tzu0StCtDtDtAtN1L2XzutAtFtBtFtCtFyDtN1L1CzutCyEtBzytD[...] [-] [C:\Users\Anne-Catherine\AppData\Roaming\Mozilla\Firefox\Profiles\hmidmbln.default\user.js] [Preference] supprimée : user_pref("extensions.astrmndasr.srchPrvdr", "Astromenda"); [-] [C:\Users\Anne-Catherine\AppData\Roaming\Mozilla\Firefox\Profiles\hmidmbln.default\user.js] [Preference] supprimée : user_pref("extensions.astrmndasr.newTabUrl", "hxxp://astromenda.com/?f=2&a=ast_ggfc_14_40_ff&cd=2XzuyEtN2Y1L1QzutDtDtByDyCyE0FyCyE0A0B0FyEtByDtCtN0D0Tzu0StCtDtDtAtN1L2XzutAtFtBtFtCtFyDtN1L1CzutCyEtBzy[...] [-] [C:\Users\Anne-Catherine\AppData\Roaming\Mozilla\Firefox\Profiles\hmidmbln.default\user.js] [Preference] supprimée : user_pref("extensions.astrmndasr.tlbrSrchUrl", "hxxp://astromenda.com/?f=3&a=ast_ggfc_14_40_ff&cd=2XzuyEtN2Y1L1QzutDtDtByDyCyE0FyCyE0A0B0FyEtByDtCtN0D0Tzu0StCtDtDtAtN1L2XzutAtFtBtFtCtFyDtN1L1CzutCyEtB[...] [-] [C:\Users\Anne-Catherine\AppData\Roaming\Mozilla\Firefox\Profiles\hmidmbln.default\user.js] [Preference] supprimée : user_pref("extensions.astrmndasr.prtnrId", "WSE_Astromenda"); [-] [C:\Users\Pierre-Christophe\AppData\Roaming\Mozilla\Firefox\Profiles\zi94ud6g.default\prefs.js] [Preference] supprimée : user_pref("browser.search.defaultengine", "Ask.com"); [-] [C:\Users\Pierre-Christophe\AppData\Roaming\Mozilla\Firefox\Profiles\zi94ud6g.default\prefs.js] [Preference] supprimée : user_pref("browser.search.defaultenginename", "Ask.com"); [-] [C:\Users\Pierre-Christophe\AppData\Roaming\Mozilla\Firefox\Profiles\zi94ud6g.default\prefs.js] [Preference] supprimée : user_pref("browser.search.order.1", "Ask.com"); [-] [C:\Users\Pierre-Christophe\AppData\Roaming\Mozilla\Firefox\Profiles\zi94ud6g.default\prefs.js] [Preference] supprimée : user_pref("browser.search.selectedEngine", "Astromenda"); [-] [C:\Users\Pierre-Christophe\AppData\Roaming\Mozilla\Firefox\Profiles\zi94ud6g.default\prefs.js] [Preference] supprimée : user_pref("extensions.asktb.ff-original-keyword-url", ""); [-] [C:\Users\Pierre-Christophe\AppData\Roaming\Mozilla\Firefox\Profiles\zi94ud6g.default\prefs.js] [Preference] supprimée : user_pref("keyword.URL", "hxxp://websearch.ask.com/redirect?client=ff&src=kw&tb=ORJ&o=100000027&locale=fr_FR&apn_uid=54B0589B-F052-4565-92A1-8ADF5D69E6EE&apn_ptnrs=U3&apn_sauid=180C43DE-C393-4900-9B1B[...] [-] [C:\Users\Pierre-Christophe\AppData\Roaming\Mozilla\Firefox\Profiles\zi94ud6g.default\user.js] [Preference] supprimée : user_pref("extensions.astrmndasr.hmpgUrl", "hxxp://astromenda.com/?f=1&a=ast_ggfc_14_40_ff&cd=2XzuyEtN2Y1L1QzutDtDtByDyCyE0FyCyE0A0B0FyEtByDtCtN0D0Tzu0StCtDtDtAtN1L2XzutAtFtBtFtCtFyDtN1L1CzutCyEtBzytD[...] [-] [C:\Users\Pierre-Christophe\AppData\Roaming\Mozilla\Firefox\Profiles\zi94ud6g.default\user.js] [Preference] supprimée : user_pref("extensions.astrmndasr.srchPrvdr", "Astromenda"); [-] [C:\Users\Pierre-Christophe\AppData\Roaming\Mozilla\Firefox\Profiles\zi94ud6g.default\user.js] [Preference] supprimée : user_pref("extensions.astrmndasr.newTabUrl", "hxxp://astromenda.com/?f=2&a=ast_ggfc_14_40_ff&cd=2XzuyEtN2Y1L1QzutDtDtByDyCyE0FyCyE0A0B0FyEtByDtCtN0D0Tzu0StCtDtDtAtN1L2XzutAtFtBtFtCtFyDtN1L1CzutCyEtBzy[...] [-] [C:\Users\Pierre-Christophe\AppData\Roaming\Mozilla\Firefox\Profiles\zi94ud6g.default\user.js] [Preference] supprimée : user_pref("extensions.astrmndasr.tlbrSrchUrl", "hxxp://astromenda.com/?f=3&a=ast_ggfc_14_40_ff&cd=2XzuyEtN2Y1L1QzutDtDtByDyCyE0FyCyE0A0B0FyEtByDtCtN0D0Tzu0StCtDtDtAtN1L2XzutAtFtBtFtCtFyDtN1L1CzutCyEtB[...] [-] [C:\Users\Pierre-Christophe\AppData\Roaming\Mozilla\Firefox\Profiles\zi94ud6g.default\user.js] [Preference] supprimée : user_pref("extensions.astrmndasr.prtnrId", "WSE_Astromenda"); [-] [C:\Users\Marie-Reine\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] supprimé : ask.com [-] [C:\Users\Marie-Reine\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] supprimé : astromenda.com [-] [C:\Users\Marie-Reine\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] supprimé : fr.search.yahoo.com [-] [C:\Users\Marie-Reine\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] supprimé : www.yahoo.com [-] [C:\Users\Marie-Reine\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] supprimé : secure-surf [-] [C:\Users\Marie-Reine\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Startup_URLs] supprimé : hxxp://www.secure-surf.com/ [-] [C:\Users\Marie-Reine\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Default_Search_Provider_Data] supprimé : hxxp://www.secure-surf.com/web?q={searchTerms} [-] [C:\Users\Marie-Reine\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Homepage] supprimé : hxxp://www.secure-surf.com/ ************************* :: Clés "Tracing" supprimées :: Paramètres Winsock réinitialisés ************************* C:\AdwCleaner\AdwCleaner[C1].txt - [22891 octets] - [13/04/2016 17:24:53] C:\AdwCleaner\AdwCleaner[S1].txt - [23500 octets] - [13/04/2016 17:14:52] ########## EOF - C:\AdwCleaner\AdwCleaner[C1].txt - [23041 octets] ##########