# AdwCleaner v5.007 - Rapport créé le 17/09/2015 à 11:37:16 # Mis à jour le 08/09/2015 par Xplode # Base de données : 2015-09-15.1 [Serveur] # Système d'exploitation : Windows 8.1 (x64) # Nom d'utilisateur : andre - PERSO # Exécuté depuis : C:\Users\andre\Downloads\AdwCleaner-5.007.exe # Option : Nettoyer # Support : http://toolslib.net/forum ***** [ Services ] ***** ***** [ Dossiers ] ***** [-] Dossier Supprimé : C:\ProgramData\pokki [-] Dossier Supprimé : C:\Users\andre\AppData\Local\pokki ***** [ Fichiers ] ***** [-] Fichier Supprimé : C:\Users\andre\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Pokki Start Menu.lnk [-] Fichier Supprimé : C:\Users\andre\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pokki Start Menu.lnk ***** [ Raccourcis ] ***** ***** [ Tâches planifiées ] ***** [-] Tâche Supprimée : Pokki ***** [ Registre ] ***** [-] Clé Supprimée : HKCU\Software\Classes\pokki [-] Clé Supprimée : HKCU\Software\Classes\AllFileSystemObjects\shell\pokki [-] Clé Supprimée : HKCU\Software\Classes\Directory\shell\pokki [-] Clé Supprimée : HKCU\Software\Classes\Drive\shell\pokki [-] Clé Supprimée : HKCU\Software\Classes\lnkfile\shell\pokki [-] Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\Pokki_Start_Menu [-] Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\Pokki [!] Clé Non Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\Pokki_Start_Menu ***** [ Navigateurs ] ***** ************************* :: Paramètres Winsock réinitialisés ########## EOF - C:\AdwCleaner\AdwCleaner[C1].txt - [1622 octets] ########## # AdwCleaner v5.119 - Rapport créé le 05/06/2016 à 16:58:39 # Mis à jour le 30/05/2016 par Xplode # Base de données : 2016-06-03.1 [Serveur] # Système d'exploitation : Windows 10 Home (X64) # Nom d'utilisateur : andre - PERSO # Exécuté depuis : C:\Users\andre\Downloads\adwcleaner_5.119.exe # Option : Nettoyer # Support : http://toolslib.net/forum ***** [ Services ] ***** [-] Service supprimé : LavasoftTcpService [-] Service supprimé : SearchProtectionService ***** [ Dossiers ] ***** [-] Dossier supprimé : C:\ProgramData\Trymedia [-] Dossier supprimé : C:\ProgramData\lavasoft\web companion [#] Dossier supprimé : C:\ProgramData\Application Data\Trymedia [#] Dossier supprimé : C:\ProgramData\Application Data\lavasoft\web companion [-] Dossier supprimé : C:\Program Files (x86)\lavasoft\web companion [-] Dossier supprimé : C:\Users\andre\AppData\Roaming\DriverTurbo [-] Dossier supprimé : C:\Users\andre\AppData\Roaming\lavasoft\web companion [-] Dossier supprimé : C:\Program Files\Booking.com [-] Dossier supprimé : C:\Users\Default User\AppData\Local\Pokki [#] Dossier supprimé : C:\Users\Default\AppData\Local\Pokki ***** [ Fichiers ] ***** [-] Fichier supprimé : C:\Users\Public\Desktop\Booking.com.lnk [-] Fichier supprimé : C:\WINDOWS\SysWOW64\lavasofttcpservice.dll [-] Fichier supprimé : C:\WINDOWS\SysWOW64\LavasoftTcpServiceOff.ini [-] Fichier supprimé : C:\Users\andre\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PC App Store.lnk [-] Fichier supprimé : C:\WINDOWS\SysNative\LavasoftTcpService64.dll [-] Fichier supprimé : C:\WINDOWS\SysNative\LavasoftTcpServiceOff.ini ***** [ DLLs ] ***** ***** [ WMI ] ***** ***** [ Raccourcis ] ***** ***** [ Tâches planifiées ] ***** [-] Tâche supprimée : ACC ***** [ Registre ] ***** [-] Clé supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\webcompanion.com [-] Clé supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\33cb11b38a46f4ff839ff5541899f1ff [-] Clé supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\b56a1e7dbc43fe0d75fbf31980b02775 [-] Clé supprimée : HKLM\SOFTWARE\Classes\CLSID\{0015CAC9-FC30-4CD0-BFAA-7412CC2C4DD9} [-] Clé supprimée : HKLM\SOFTWARE\Classes\CLSID\{26C7AFDB-3690-449E-B979-B0AF5CC56DD4} [-] Clé supprimée : HKLM\SOFTWARE\Classes\CLSID\{3A5A5381-DAAF-4C0D-B032-2C66B3EE4A8D} [-] Clé supprimée : HKLM\SOFTWARE\Classes\CLSID\{472EF1D2-4AAE-470D-AE85-6AF8177916FD} [-] Clé supprimée : HKLM\SOFTWARE\Classes\CLSID\{8F010D54-C023-457F-AF03-497EACB6D519} [-] Clé supprimée : HKLM\SOFTWARE\Classes\CLSID\{9A754403-27B1-4ED7-96D7-588F07888EBF} [-] Clé supprimée : HKLM\SOFTWARE\Classes\CLSID\{CB31FF8F-BF80-4D2B-ADBE-12C6F5347890} [-] Clé supprimée : HKLM\SOFTWARE\Classes\CLSID\{FCAA532B-E807-4027-940C-BA16B9D50105} [-] Clé supprimée : HKLM\SOFTWARE\Classes\TypeLib\{ED62BC6E-64F1-46BE-866F-4C8DC0DF7057} [-] Clé supprimée : HKCU\Software\nuevos-programas.com [-] Clé supprimée : HKCU\Software\SweetLabs App Platform [-] Clé supprimée : HKCU\Software\TeleCharger [-] Clé supprimée : HKLM\SOFTWARE\Trymedia Systems [-] Clé supprimée : HKLM\SOFTWARE\Lavasoft\Web Companion ***** [ Navigateurs ] ***** [-] [C:\Users\andre\AppData\Roaming\Mozilla\Firefox\Profiles\zkh3e6uq.default\prefs.js] supprimée : user_pref("browser.search.hiddenOneOffs", "Yahoo,Bing,Amazon.fr,DuckDuckGo,eBay France,Portail Lexical - CNRTL,Search Provided by Yahoo,Wikipédia (fr)"); [-] [C:\Users\andre\AppData\Roaming\Mozilla\Firefox\Profiles\zkh3e6uq.default\prefs.js] supprimée : user_pref("browser.search.selectedEngine", "Search Provided by Yahoo"); [-] [C:\Users\andre\AppData\Roaming\Mozilla\Firefox\Profiles\zkh3e6uq.default\prefs.js] supprimée : user_pref("extensions.toolbar.mindspark._e5Members_.BUTTON_STRUCTURE", "[{\"b\":224233618,\"c\":\"mindspark.magnify\",\"p\":\"L.0\"},{\"b\":224233619,\"c\":\"mindspark.entersearchterms\",\"p\":\"L.0.0[...] [-] [C:\Users\andre\AppData\Roaming\Mozilla\Firefox\Profiles\zkh3e6uq.default\prefs.js] supprimée : user_pref("extensions.toolbar.mindspark._e5Members_.browser.startup.homepage.prev", "hxxps://fr.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_adsrch_16_16¶m1=1¶m2=f%3D[...] [-] [C:\Users\andre\AppData\Roaming\Mozilla\Firefox\Profiles\zkh3e6uq.default\prefs.js] supprimée : user_pref("extensions.toolbar.mindspark._e5Members_.browser.startup.homepage.savedPrev", "true"); [-] [C:\Users\andre\AppData\Roaming\Mozilla\Firefox\Profiles\zkh3e6uq.default\prefs.js] supprimée : user_pref("extensions.toolbar.mindspark._e5Members_.browser.startup.homepage.tb", "hxxp://hp.myway.com/productivityboss/ttab02/index.html?coId=717188b3d5314824a36c368a33502487&subId=undefined&ln=fr&n=[...] [-] [C:\Users\andre\AppData\Roaming\Mozilla\Firefox\Profiles\zkh3e6uq.default\prefs.js] supprimée : user_pref("extensions.toolbar.mindspark._e5Members_.browser.startup.page.savedPrev", 1); [-] [C:\Users\andre\AppData\Roaming\Mozilla\Firefox\Profiles\zkh3e6uq.default\prefs.js] supprimée : user_pref("extensions.toolbar.mindspark._e5Members_.browser.startup.page.tb", 1); [-] [C:\Users\andre\AppData\Roaming\Mozilla\Firefox\Profiles\zkh3e6uq.default\prefs.js] supprimée : user_pref("extensions.toolbar.mindspark._e5Members_.browser.version.last", "45.0"); [-] [C:\Users\andre\AppData\Roaming\Mozilla\Firefox\Profiles\zkh3e6uq.default\prefs.js] supprimée : user_pref("extensions.toolbar.mindspark._e5Members_.coId", "717188b3d5314824a36c368a33502487"); [-] [C:\Users\andre\AppData\Roaming\Mozilla\Firefox\Profiles\zkh3e6uq.default\prefs.js] supprimée : user_pref("extensions.toolbar.mindspark._e5Members_.firstKnownVersion", "7.70.9.27869"); [-] [C:\Users\andre\AppData\Roaming\Mozilla\Firefox\Profiles\zkh3e6uq.default\prefs.js] supprimée : user_pref("extensions.toolbar.mindspark._e5Members_.homepage", "hxxp://hp.myway.com/productivityboss/ttab02/index.html?coId=717188b3d5314824a36c368a33502487&subId&ln=fr&n=782a5bb6&ptb=207C2282-7F11-47[...] [-] [C:\Users\andre\AppData\Roaming\Mozilla\Firefox\Profiles\zkh3e6uq.default\prefs.js] supprimée : user_pref("extensions.toolbar.mindspark._e5Members_.hp.enabled", true); [-] [C:\Users\andre\AppData\Roaming\Mozilla\Firefox\Profiles\zkh3e6uq.default\prefs.js] supprimée : user_pref("extensions.toolbar.mindspark._e5Members_.hp.guardType", "HPR"); [-] [C:\Users\andre\AppData\Roaming\Mozilla\Firefox\Profiles\zkh3e6uq.default\prefs.js] supprimée : user_pref("extensions.toolbar.mindspark._e5Members_.hp.user.defined", false); [-] [C:\Users\andre\AppData\Roaming\Mozilla\Firefox\Profiles\zkh3e6uq.default\prefs.js] supprimée : user_pref("extensions.toolbar.mindspark._e5Members_.initialized", true); [-] [C:\Users\andre\AppData\Roaming\Mozilla\Firefox\Profiles\zkh3e6uq.default\prefs.js] supprimée : user_pref("extensions.toolbar.mindspark._e5Members_.installType", "XPI"); [-] [C:\Users\andre\AppData\Roaming\Mozilla\Firefox\Profiles\zkh3e6uq.default\prefs.js] supprimée : user_pref("extensions.toolbar.mindspark._e5Members_.installation.dlpCountryCode", "FR"); [-] [C:\Users\andre\AppData\Roaming\Mozilla\Firefox\Profiles\zkh3e6uq.default\prefs.js] supprimée : user_pref("extensions.toolbar.mindspark._e5Members_.installation.installDate", "2016041910"); [-] [C:\Users\andre\AppData\Roaming\Mozilla\Firefox\Profiles\zkh3e6uq.default\prefs.js] supprimée : user_pref("extensions.toolbar.mindspark._e5Members_.installation.partnerId", "^BYM^xdm009^TTAB02^fr"); [-] [C:\Users\andre\AppData\Roaming\Mozilla\Firefox\Profiles\zkh3e6uq.default\prefs.js] supprimée : user_pref("extensions.toolbar.mindspark._e5Members_.installation.pixelUrl", "hxxp://www.productivityboss.com/install_pixels.jhtml?partner=^BYM^xdm009^TTAB02^fr&coId=717188b3d5314824a36c368a33502487&tb[...] [-] [C:\Users\andre\AppData\Roaming\Mozilla\Firefox\Profiles\zkh3e6uq.default\prefs.js] supprimée : user_pref("extensions.toolbar.mindspark._e5Members_.installation.success", true); [-] [C:\Users\andre\AppData\Roaming\Mozilla\Firefox\Profiles\zkh3e6uq.default\prefs.js] supprimée : user_pref("extensions.toolbar.mindspark._e5Members_.installation.toolbarId", "207C2282-7F11-4772-8CE8-D0829BD85698"); [-] [C:\Users\andre\AppData\Roaming\Mozilla\Firefox\Profiles\zkh3e6uq.default\prefs.js] supprimée : user_pref("extensions.toolbar.mindspark._e5Members_.lastActivePing", "1461083051259"); [-] [C:\Users\andre\AppData\Roaming\Mozilla\Firefox\Profiles\zkh3e6uq.default\prefs.js] supprimée : user_pref("extensions.toolbar.mindspark._e5Members_.lastKnownVersion", "7.70.9.27869"); [-] [C:\Users\andre\AppData\Roaming\Mozilla\Firefox\Profiles\zkh3e6uq.default\prefs.js] supprimée : user_pref("extensions.toolbar.mindspark._e5Members_.lssState", "{\"previousLocales\":[\"fr\",\"fr-FR\",\"en-US\",\"en\"],\"supportedLocales\":[\"de\",\"es\",\"pt\",\"ja\",\"en\"],\"defaultLocale\":\"e[...] [-] [C:\Users\andre\AppData\Roaming\Mozilla\Firefox\Profiles\zkh3e6uq.default\prefs.js] supprimée : user_pref("extensions.toolbar.mindspark._e5Members_.options.defaultSearch", false); [-] [C:\Users\andre\AppData\Roaming\Mozilla\Firefox\Profiles\zkh3e6uq.default\prefs.js] supprimée : user_pref("extensions.toolbar.mindspark._e5Members_.options.homePageEnabled", true); [-] [C:\Users\andre\AppData\Roaming\Mozilla\Firefox\Profiles\zkh3e6uq.default\prefs.js] supprimée : user_pref("extensions.toolbar.mindspark._e5Members_.options.keywordEnabled", false); [-] [C:\Users\andre\AppData\Roaming\Mozilla\Firefox\Profiles\zkh3e6uq.default\prefs.js] supprimée : user_pref("extensions.toolbar.mindspark._e5Members_.options.tabEnabled", true); [-] [C:\Users\andre\AppData\Roaming\Mozilla\Firefox\Profiles\zkh3e6uq.default\prefs.js] supprimée : user_pref("extensions.toolbar.mindspark._e5Members_.partnerPixelFired", true); [-] [C:\Users\andre\AppData\Roaming\Mozilla\Firefox\Profiles\zkh3e6uq.default\prefs.js] supprimée : user_pref("extensions.toolbar.mindspark._e5Members_.productDeliveryOption.language", "fr"); [-] [C:\Users\andre\AppData\Roaming\Mozilla\Firefox\Profiles\zkh3e6uq.default\prefs.js] supprimée : user_pref("extensions.toolbar.mindspark._e5Members_.productDeliveryOption.newTabURL", "hxxp://hp.myway.com/productivityboss/ttab02/index.html?p2=${partnerID}&n=${installDateHex}&st=tab&ptb=${toolbarID[...] [-] [C:\Users\andre\AppData\Roaming\Mozilla\Firefox\Profiles\zkh3e6uq.default\prefs.js] supprimée : user_pref("extensions.toolbar.mindspark._e5Members_.productDeliveryOption.type", "ToolTab"); [-] [C:\Users\andre\AppData\Roaming\Mozilla\Firefox\Profiles\zkh3e6uq.default\prefs.js] supprimée : user_pref("extensions.toolbar.mindspark._e5Members_.successUrl", "hxxp://www.productivityboss.com/installComplete.jhtml"); [-] [C:\Users\andre\AppData\Roaming\Mozilla\Firefox\Profiles\zkh3e6uq.default\prefs.js] supprimée : user_pref("extensions.toolbar.mindspark._e5Members_.toolbarCollapsed", false); [-] [C:\Users\andre\AppData\Roaming\Mozilla\Firefox\Profiles\zkh3e6uq.default\prefs.js] supprimée : user_pref("extensions.toolbar.mindspark._e5Members_.uninstallSurveyUrl", "hxxp://www.research.net/r/HYSCVNM?CBID=&c="); [-] [C:\Users\andre\AppData\Roaming\Mozilla\Firefox\Profiles\zkh3e6uq.default\prefs.js] supprimée : user_pref("extensions.toolbar.mindspark._e5Members_.uninstallTasks", "{\"prefBranchesToDelete\":[\"extensions.toolbar.mindspark._e5Members_.\"],\"filesToDelete\":[\"C:\\\\Users\\\\andre\\\\AppData\\\\[...] [-] [C:\Users\andre\AppData\Roaming\Mozilla\Firefox\Profiles\zkh3e6uq.default\prefs.js] supprimée : user_pref("extensions.toolbar.mindspark.hp.enabled", true); [-] [C:\Users\andre\AppData\Roaming\Mozilla\Firefox\Profiles\zkh3e6uq.default\prefs.js] supprimée : user_pref("extensions.toolbar.mindspark.hp.enabled.guid", "productivityboss@mindspark.com"); [-] [C:\Users\andre\AppData\Roaming\Mozilla\Firefox\Profiles\zkh3e6uq.default\prefs.js] supprimée : user_pref("extensions.toolbar.mindspark.lastInstalled", "productivityboss@mindspark.com"); [-] [C:\Users\andre\AppData\Local\Chromium\User Data\Default\Web Data] [Search Provider] supprimé : search provided by yahoo [-] [C:\Users\andre\AppData\Local\Chromium\User Data\Default\Secure Preferences] [Startup_URLs] supprimé : hxxps://fr.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_adsrch_16_16¶m1=1¶m2=f%3D7%26b%3Dchmm%26cc%3Dfr%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1Qzu0B0CtAtDyB0D0Czz0C0CyDyDtD0AyB0AtN0D0Tzu0StCyDyBtDtN1L2XzutAtFtBtCtFtDtFtCtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2StDtCtByEtC0F0C0FtGyD0FtC0EtG0B0BzzyCtGtBtB0B0FtGtByD0FyCtBtCtDtB0DyB0DtD2QtN1M1F1B2Z1V1N2Y1L1Qzu2StD0B0CtCtB0BtAyBtGyD0B0CyBtGyEyCyCtBtGzyzzyCyEtG0AyC0EtDyEtByD0ByDyE0C0B2QtN0A0LzuyEtN1B2Z1V1T1S1NzutCzzyBtD%26cr%3D464364490%26a%3Dwbf_adsrch_16_16%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome&uref=chmm [-] [C:\Users\andre\AppData\Local\Chromium\User Data\Default\Secure Preferences] [Homepage] supprimé : hxxps://fr.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_adsrch_16_16¶m1=1¶m2=f%3D1%26b%3Dchmm%26cc%3Dfr%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1Qzu0B0CtAtDyB0D0Czz0C0CyDyDtD0AyB0AtN0D0Tzu0StCyDyBtDtN1L2XzutAtFtBtCtFtDtFtCtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2StDtCtByEtC0F0C0FtGyD0FtC0EtG0B0BzzyCtGtBtB0B0FtGtByD0FyCtBtCtDtB0DyB0DtD2QtN1M1F1B2Z1V1N2Y1L1Qzu2StD0B0CtCtB0BtAyBtGyD0B0CyBtGyEyCyCtBtGzyzzyCyEtG0AyC0EtDyEtByD0ByDyE0C0B2QtN0A0LzuyEtN1B2Z1V1T1S1NzutCzzyBtD%26cr%3D464364490%26a%3Dwbf_adsrch_16_16%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome&uref=chmm ************************* :: Clés "Tracing" supprimées :: Paramètres Winsock réinitialisés ************************* C:\AdwCleaner\AdwCleaner[C1].txt - [15373 octets] - [17/09/2015 11:37:16] C:\AdwCleaner\AdwCleaner[S1].txt - [15155 octets] - [17/09/2015 11:31:29] ########## EOF - C:\AdwCleaner\AdwCleaner[C1].txt - [15523 octets] ##########